Play interactive tour

Edit tour

Analysis Report https://discovercommunitynetwork.com/mcief/FBG

Overview

General Information

Sample URL:	https://discovercommunitynetwork.com/mcief/FBG
Analysis ID:	432783
Infos:
Most interesting Screenshot:

Detection

HTMLPhisher

Score:	88
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Phishing site detected (based on shot template match)

Yara detected HtmlPhish7

Phishing site detected (based on image similarity)

Phishing site detected (based on logo template match)

HTML body contains low number of good links

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64

iexplore.exe (PID: 4644 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 1724 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4644 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\FBG[1].htm	JoeSecurity_HtmlPhish_7	Yara detected HtmlPhish_7	Joe Security

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Antivirus / Scanner detection for submitted sample

Show sources

Source: https://discovercommunitynetwork.com/mcief/FBG

SlashNext: detection malicious, Label: Fake Login Page type: Phishing & Social usering

Antivirus detection for URL or domain

Show sources

Source: https://discovercommunitynetwork.com/mcief/FBG/microsoft.php	SlashNext: Label: Fake Login Page type: Phishing & Social usering
Source: https://discovercommunitynetwork.com/mcief/FBG/	SlashNext: Label: Fake Login Page type: Phishing & Social usering
Source: https://discovercommunitynetwork.com/mcief/FBG/webmail.php	SlashNext: Label: Fake Login Page type: Phishing & Social usering
Source: https://discovercommunitynetwork.com/mcief/FBG/office.php	SlashNext: Label: Fake Login Page type: Phishing & Social usering

Antivirus detection for dropped file

Show sources

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\FBG[1].htm

Avira: detection malicious, Label: HTML/Infected.WebPage.Gen2

Phishing:

Phishing site detected (based on shot template match)

Show sources

Source: https://discovercommunitynetwork.com/mcief/FBG/

Matcher: Template: onedrive matched

Yara detected HtmlPhish7

Show sources

Source: Yara match	File source: 767668.pages.csv, type: HTML
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\FBG[1].htm, type: DROPPED

Phishing site detected (based on image similarity)

Show sources

Source: https://discovercommunitynetwork.com/mcief/FBG/images/Onedrive-logo.png

Matcher: Found strong image similarity, brand: Microsoft

Jump to dropped file

Phishing site detected (based on logo template match)

Show sources

Source: https://discovercommunitynetwork.com/mcief/FBG/microsoft.php	Matcher: Template: microsoft matched
Source: https://discovercommunitynetwork.com/mcief/FBG/office.php	Matcher: Template: office matched

Source: https://discovercommunitynetwork.com/mcief/FBG/microsoft.php	HTTP Parser: Number of links: 0
Source: https://discovercommunitynetwork.com/mcief/FBG/microsoft.php	HTTP Parser: Number of links: 0
Source: https://discovercommunitynetwork.com/mcief/FBG/webmail.php	HTTP Parser: Number of links: 0
Source: https://discovercommunitynetwork.com/mcief/FBG/webmail.php	HTTP Parser: Number of links: 0
Source: https://discovercommunitynetwork.com/mcief/FBG/office.php	HTTP Parser: Number of links: 1
Source: https://discovercommunitynetwork.com/mcief/FBG/office.php	HTTP Parser: Number of links: 1

Source: https://discovercommunitynetwork.com/mcief/FBG/microsoft.php	HTTP Parser: Title: Sign in to your Microsoft account does not match URL
Source: https://discovercommunitynetwork.com/mcief/FBG/microsoft.php	HTTP Parser: Title: Sign in to your Microsoft account does not match URL
Source: https://discovercommunitynetwork.com/mcief/FBG/webmail.php	HTTP Parser: Title: One Drive does not match URL
Source: https://discovercommunitynetwork.com/mcief/FBG/webmail.php	HTTP Parser: Title: One Drive does not match URL
Source: https://discovercommunitynetwork.com/mcief/FBG/office.php	HTTP Parser: Title: One Drive does not match URL
Source: https://discovercommunitynetwork.com/mcief/FBG/office.php	HTTP Parser: Title: One Drive does not match URL

Source: https://discovercommunitynetwork.com/mcief/FBG/office.php	HTTP Parser: Invalid link: Terms
Source: https://discovercommunitynetwork.com/mcief/FBG/office.php	HTTP Parser: Invalid link: Privacy & Cookies
Source: https://discovercommunitynetwork.com/mcief/FBG/office.php	HTTP Parser: Invalid link: Terms
Source: https://discovercommunitynetwork.com/mcief/FBG/office.php	HTTP Parser: Invalid link: Privacy & Cookies

Source: https://discovercommunitynetwork.com/mcief/FBG/microsoft.php	HTTP Parser: No <meta name="author".. found
Source: https://discovercommunitynetwork.com/mcief/FBG/microsoft.php	HTTP Parser: No <meta name="author".. found
Source: https://discovercommunitynetwork.com/mcief/FBG/webmail.php	HTTP Parser: No <meta name="author".. found
Source: https://discovercommunitynetwork.com/mcief/FBG/webmail.php	HTTP Parser: No <meta name="author".. found
Source: https://discovercommunitynetwork.com/mcief/FBG/office.php	HTTP Parser: No <meta name="author".. found
Source: https://discovercommunitynetwork.com/mcief/FBG/office.php	HTTP Parser: No <meta name="author".. found

Source: https://discovercommunitynetwork.com/mcief/FBG/microsoft.php	HTTP Parser: No <meta name="copyright".. found
Source: https://discovercommunitynetwork.com/mcief/FBG/microsoft.php	HTTP Parser: No <meta name="copyright".. found
Source: https://discovercommunitynetwork.com/mcief/FBG/webmail.php	HTTP Parser: No <meta name="copyright".. found
Source: https://discovercommunitynetwork.com/mcief/FBG/webmail.php	HTTP Parser: No <meta name="copyright".. found
Source: https://discovercommunitynetwork.com/mcief/FBG/office.php	HTTP Parser: No <meta name="copyright".. found
Source: https://discovercommunitynetwork.com/mcief/FBG/office.php	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 77.79.239.202:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.79.239.202:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.79.239.202:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.6:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.6:49745 version: TLS 1.2

Source: unknown

DNS traffic detected: queries for: discovercommunitynetwork.com

Source: fontawesome-webfont[1].eot.3.dr, font-awesome.min[1].css.3.dr	String found in binary or memory: http://fontawesome.io
Source: font-awesome.min[1].css.3.dr	String found in binary or memory: http://fontawesome.io/license
Source: fontawesome-webfont[1].eot.3.dr	String found in binary or memory: http://fontawesome.io/license/
Source: fontawesome-webfont[1].eot.3.dr	String found in binary or memory: http://fontawesome.iohttp://fontawesome.iohttp://fontawesome.io/license/http://fontawesome.io/licens
Source: FBG[1].htm0.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/tether/1.4.0/js/tether.min.js
Source: FBG[1].htm0.3.dr, microsoft[1].htm.3.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.slim.min.js
Source: ~DF6E29A9E8804300A7.TMP.2.dr, {6D04534C-CA56-11EB-90E5-ECF4BB2D2496}.dat.2.dr	String found in binary or memory: https://discovercommunitynetwork.com/mcief/FBG/
Source: {6D04534C-CA56-11EB-90E5-ECF4BB2D2496}.dat.2.dr	String found in binary or memory: https://discovercommunitynetwork.com/mcief/FBG/Root
Source: {6D04534C-CA56-11EB-90E5-ECF4BB2D2496}.dat.2.dr	String found in binary or memory: https://discovercommunitynetwork.com/mcief/FBG/itynetwork.com/mcief/FBG/microsok.com/mcief/FBG/
Source: {6D04534C-CA56-11EB-90E5-ECF4BB2D2496}.dat.2.dr	String found in binary or memory: https://discovercommunitynetwork.com/mcief/FBG/itynetwork.com/mcief/FBG/office.k.com/mcief/FBG/
Source: {6D04534C-CA56-11EB-90E5-ECF4BB2D2496}.dat.2.dr	String found in binary or memory: https://discovercommunitynetwork.com/mcief/FBG/itynetwork.com/mcief/FBG/webmailk.com/mcief/FBG/
Source: {6D04534C-CA56-11EB-90E5-ECF4BB2D2496}.dat.2.dr	String found in binary or memory: https://discovercommunitynetwork.com/mcief/FBG/k.com/mcief/FBG/
Source: ~DF6E29A9E8804300A7.TMP.2.dr	String found in binary or memory: https://discovercommunitynetwork.com/mcief/FBG/microsoft.php
Source: ~DF6E29A9E8804300A7.TMP.2.dr	String found in binary or memory: https://discovercommunitynetwork.com/mcief/FBG/microsoft.phpBSign
Source: ~DF6E29A9E8804300A7.TMP.2.dr	String found in binary or memory: https://discovercommunitynetwork.com/mcief/FBG/office.php
Source: ~DF6E29A9E8804300A7.TMP.2.dr	String found in binary or memory: https://discovercommunitynetwork.com/mcief/FBG/office.phpwork.com/mcief/FBG/office.php
Source: ~DF6E29A9E8804300A7.TMP.2.dr	String found in binary or memory: https://discovercommunitynetwork.com/mcief/FBG/webmail.php
Source: ~DF6E29A9E8804300A7.TMP.2.dr	String found in binary or memory: https://discovercommunitynetwork.com/mcief/FBG/webmail.php://discovercommunitynetwork.com/mcief/FBG/
Source: ~DF6E29A9E8804300A7.TMP.2.dr	String found in binary or memory: https://discovercommunitynetwork.com/mcief/FBG/webmail.phpv
Source: style[1].css.3.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v20/mem5YaGs126MiZpBA-UN7rgOUuhv.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v20/mem5YaGs126MiZpBA-UN8rsOUuhv.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v20/mem5YaGs126MiZpBA-UN_r8OUuhv.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v20/mem5YaGs126MiZpBA-UNirkOUuhv.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v20/mem6YaGs126MiZpBA-UFUK0Zdcs.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v20/mem8YaGs126MiZpBA-UFVZ0d.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v20/memnYaGs126MiZpBA-UFUKW-U9hrIqU.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v20/memnYaGs126MiZpBA-UFUKWiUNhrIqU.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v20/memnYaGs126MiZpBA-UFUKWyV9hrIqU.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v20/memnYaGs126MiZpBA-UFUKXGUdhrIqU.woff)
Source: bootstrap.min[1].css.3.dr, bootstrap.min[1].css0.3.dr, bootstrap.min[1].js.3.dr	String found in binary or memory: https://getbootstrap.com)
Source: bootstrap.min[1].css.3.dr, bootstrap.min[1].js.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: bootstrap.min[1].js.3.dr, bootstrap.min[1].js0.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: office[1].htm.3.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-alpha.6/css/bootstrap.min.css
Source: office[1].htm.3.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-alpha.6/js/bootstrap.min.js
Source: microsoft[1].htm.3.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
Source: microsoft[1].htm.3.dr	String found in binary or memory: https://signup.live.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 77.79.239.202:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.79.239.202:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.79.239.202:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.6:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.6:49745 version: TLS 1.2

Source: classification engine

Classification label: mal88.phis.win@3/42@5/4

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{6D04534A-CA56-11EB-90E5-ECF4BB2D2496}.dat

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF8F906952B71A6755.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4644 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4644 CREDAT:17410 /prefetch:2	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://discovercommunitynetwork.com/mcief/FBG	0%	Virustotal		Browse
https://discovercommunitynetwork.com/mcief/FBG	0%	Avira URL Cloud	safe
https://discovercommunitynetwork.com/mcief/FBG	100%	SlashNext	Fake Login Page type: Phishing & Social usering

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\FBG[1].htm	100%	Avira	HTML/Infected.WebPage.Gen2

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
discovercommunitynetwork.com	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
https://discovercommunitynetwork.com/mcief/FBG/microsoft.php	100%	SlashNext	Fake Login Page type: Phishing & Social usering
https://discovercommunitynetwork.com/mcief/FBG/	100%	SlashNext	Fake Login Page type: Phishing & Social usering
https://discovercommunitynetwork.com/mcief/FBG/webmail.php	100%	SlashNext	Fake Login Page type: Phishing & Social usering
https://discovercommunitynetwork.com/mcief/FBG/office.php	100%	SlashNext	Fake Login Page type: Phishing & Social usering
https://discovercommunitynetwork.com/mcief/FBG/webmail.phpv	0%	Avira URL Cloud	safe
https://discovercommunitynetwork.com/mcief/FBG/office.phpwork.com/mcief/FBG/office.php	0%	Avira URL Cloud	safe
https://discovercommunitynetwork.com/mcief/FBG/k.com/mcief/FBG/	0%	Avira URL Cloud	safe
http://fontawesome.iohttp://fontawesome.iohttp://fontawesome.io/license/http://fontawesome.io/licens	0%	Avira URL Cloud	safe
https://discovercommunitynetwork.com/mcief/FBG/webmail.php://discovercommunitynetwork.com/mcief/FBG/	0%	Avira URL Cloud	safe
https://discovercommunitynetwork.com/mcief/FBG/microsoft.phpBSign	0%	Avira URL Cloud	safe
https://getbootstrap.com)	0%	Avira URL Cloud	safe
https://discovercommunitynetwork.com/mcief/FBG/itynetwork.com/mcief/FBG/microsok.com/mcief/FBG/	0%	Avira URL Cloud	safe
https://discovercommunitynetwork.com/mcief/FBG/itynetwork.com/mcief/FBG/webmailk.com/mcief/FBG/	0%	Avira URL Cloud	safe
https://discovercommunitynetwork.com/mcief/FBG/itynetwork.com/mcief/FBG/office.k.com/mcief/FBG/	0%	Avira URL Cloud	safe
https://discovercommunitynetwork.com/mcief/FBG/Root	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
cdnjs.cloudflare.com	104.16.19.94	true	false		high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false		high
discovercommunitynetwork.com	77.79.239.202	true	false	0%, Virustotal, Browse	unknown
code.jquery.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://discovercommunitynetwork.com/mcief/FBG/microsoft.php	true	SlashNext: Fake Login Page type: Phishing & Social usering	unknown
https://discovercommunitynetwork.com/mcief/FBG/office.php	true	SlashNext: Fake Login Page type: Phishing & Social usering	unknown
https://discovercommunitynetwork.com/mcief/FBG/webmail.php	true	SlashNext: Fake Login Page type: Phishing & Social usering	unknown
https://discovercommunitynetwork.com/mcief/FBG/	true	SlashNext: Fake Login Page type: Phishing & Social usering	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://discovercommunitynetwork.com/mcief/FBG/webmail.phpv	~DF6E29A9E8804300A7.TMP.2.dr	true	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-alpha.6/css/bootstrap.min.css	office[1].htm.3.dr	false		high
http://fontawesome.io	fontawesome-webfont[1].eot.3.dr, font-awesome.min[1].css.3.dr	false		high
https://discovercommunitynetwork.com/mcief/FBG/office.phpwork.com/mcief/FBG/office.php	~DF6E29A9E8804300A7.TMP.2.dr	true	Avira URL Cloud: safe	unknown
https://discovercommunitynetwork.com/mcief/FBG/k.com/mcief/FBG/	{6D04534C-CA56-11EB-90E5-ECF4BB2D2496}.dat.2.dr	true	Avira URL Cloud: safe	unknown
http://fontawesome.iohttp://fontawesome.iohttp://fontawesome.io/license/http://fontawesome.io/licens	fontawesome-webfont[1].eot.3.dr	false	Avira URL Cloud: safe	unknown
https://signup.live.com	microsoft[1].htm.3.dr	false		high
https://discovercommunitynetwork.com/mcief/FBG/webmail.php://discovercommunitynetwork.com/mcief/FBG/	~DF6E29A9E8804300A7.TMP.2.dr	true	Avira URL Cloud: safe	unknown
https://discovercommunitynetwork.com/mcief/FBG/	~DF6E29A9E8804300A7.TMP.2.dr, {6D04534C-CA56-11EB-90E5-ECF4BB2D2496}.dat.2.dr	true	SlashNext: Fake Login Page type: Phishing & Social usering	unknown
https://discovercommunitynetwork.com/mcief/FBG/microsoft.php	~DF6E29A9E8804300A7.TMP.2.dr	true	SlashNext: Fake Login Page type: Phishing & Social usering	unknown
https://discovercommunitynetwork.com/mcief/FBG/microsoft.phpBSign	~DF6E29A9E8804300A7.TMP.2.dr	true	Avira URL Cloud: safe	unknown
http://fontawesome.io/license	font-awesome.min[1].css.3.dr	false		high
http://fontawesome.io/license/	fontawesome-webfont[1].eot.3.dr	false		high
https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css	microsoft[1].htm.3.dr	false		high
https://code.jquery.com/jquery-3.1.1.slim.min.js	FBG[1].htm0.3.dr, microsoft[1].htm.3.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	bootstrap.min[1].js.3.dr, bootstrap.min[1].js0.3.dr	false		high
https://cdnjs.cloudflare.com/ajax/libs/tether/1.4.0/js/tether.min.js	FBG[1].htm0.3.dr	false		high
https://getbootstrap.com)	bootstrap.min[1].css.3.dr, bootstrap.min[1].css0.3.dr, bootstrap.min[1].js.3.dr	false	Avira URL Cloud: safe	low
https://discovercommunitynetwork.com/mcief/FBG/itynetwork.com/mcief/FBG/microsok.com/mcief/FBG/	{6D04534C-CA56-11EB-90E5-ECF4BB2D2496}.dat.2.dr	true	Avira URL Cloud: safe	unknown
https://discovercommunitynetwork.com/mcief/FBG/itynetwork.com/mcief/FBG/webmailk.com/mcief/FBG/	{6D04534C-CA56-11EB-90E5-ECF4BB2D2496}.dat.2.dr	true	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	bootstrap.min[1].css.3.dr, bootstrap.min[1].js.3.dr	false		high
https://discovercommunitynetwork.com/mcief/FBG/itynetwork.com/mcief/FBG/office.k.com/mcief/FBG/	{6D04534C-CA56-11EB-90E5-ECF4BB2D2496}.dat.2.dr	true	Avira URL Cloud: safe	unknown
https://discovercommunitynetwork.com/mcief/FBG/office.php	~DF6E29A9E8804300A7.TMP.2.dr	true	SlashNext: Fake Login Page type: Phishing & Social usering	unknown
https://discovercommunitynetwork.com/mcief/FBG/Root	{6D04534C-CA56-11EB-90E5-ECF4BB2D2496}.dat.2.dr	true	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-alpha.6/js/bootstrap.min.js	office[1].htm.3.dr	false		high
https://discovercommunitynetwork.com/mcief/FBG/webmail.php	~DF6E29A9E8804300A7.TMP.2.dr	true	SlashNext: Fake Login Page type: Phishing & Social usering	unknown

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
77.79.239.202	discovercommunitynetwork.com	Poland	15694	ATMAN-ISP-ASATMSAPL	false
104.16.19.94	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	32.0.0 Black Diamond
Analysis ID:	432783
Start date:	10.06.2021
Start time:	18:42:41
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 3m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://discovercommunitynetwork.com/mcief/FBG
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal88.phis.win@3/42@5/4
Cookbook Comments:	Adjust boot time Enable AMSI Browsing link: https://discovercommunitynetwork.com/mcief/FBG/office.php Browsing link: https://discovercommunitynetwork.com/mcief/FBG/microsoft.php Browsing link: https://discovercommunitynetwork.com/mcief/FBG/webmail.php
Warnings:	Show All Exclude process from analysis (whitelisted): BackgroundTransferHost.exe, ielowutil.exe, backgroundTaskHost.exe, svchost.exe Excluded IPs from analysis (whitelisted): 204.79.197.200, 13.107.21.200, 92.122.145.220, 40.88.32.150, 88.221.62.148, 69.16.175.10, 69.16.175.42, 142.250.180.202, 142.250.185.99, 13.64.90.137, 20.82.210.154, 152.199.19.161 Excluded domains from analysis (whitelisted): www.bing.com, gstaticadssl.l.google.com, cds.s5x3j6q5.hwcdn.net, fonts.googleapis.com, skypedataprdcolwus17.cloudapp.net, dual-a-0001.a-msedge.net, fonts.gstatic.com, ie9comview.vo.msecnd.net, store-images.s-microsoft.com-c.edgekey.net, iris-de-prod-azsc-neu-b.northeurope.cloudapp.azure.com, arc.msn.com, e11290.dspg.akamaiedge.net, iecvlist.microsoft.com, e12564.dspb.akamaiedge.net, skypedataprdcoleus15.cloudapp.net, go.microsoft.com, a-0001.a-afdentry.net.trafficmanager.net, store-images.s-microsoft.com, www-bing-com.dual-a-0001.a-msedge.net, blobcollector.events.data.trafficmanager.net, go.microsoft.com.edgekey.net, arc.trafficmanager.net, watson.telemetry.microsoft.com, cs9.wpc.v0cdn.net Not all processes where analyzed, report is missing behavior information Report size getting too big, too many NtDeviceIoControlFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{6D04534A-CA56-11EB-90E5-ECF4BB2D2496}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	30296
Entropy (8bit):	1.849220558899609
Encrypted:	false
SSDEEP:	96:rqZZpZz2pW1Gt1AqAf16Hz1MforTf4xRfNI+ffzH+lX:rCZpZz2pWUtqfUhMymTfbcX
MD5:	3E952076D7125601E1E0382E935E49F3
SHA1:	AFBCBA4597FD7D23A976194A17F483457A49B7F1
SHA-256:	0184D0D697B73E672C7C4E1924C72C81A37108D00FEB0E250D8DD028D9CF223D
SHA-512:	0D4CF387E5442BEF254B84E21260185C7BA0BAA59B5CAD7575F0C2CEE13963AD4BD5CF8914F718E0EBF0CD13AB8315BA3AB1A4210FC196B8058D2058B82B2E9C
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{6D04534C-CA56-11EB-90E5-ECF4BB2D2496}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	67860
Entropy (8bit):	2.249127087386567
Encrypted:	false
SSDEEP:	384:r4o+OPwcClkj7FS2r3aa5krcEqQQDbP16ZeTVXN0:G
MD5:	AC1095BD35CBAAB0015CB1B12B2B08E7
SHA1:	A423E4042E6C2DD400AA7842E905C1FE4D0801F4
SHA-256:	406976993B450BEC12021FC39F141C46882924D7E26AE7D7B2D1865C3C4A446D
SHA-512:	AD230235FF9711E5D203B33079E5D19D7186E12C7128D9F3B8EB8E872D1B7B06982A19956E6CF446512E16FF071E523190075DC7722F330855B9126AEF5B7BDF
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{6D04534D-CA56-11EB-90E5-ECF4BB2D2496}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.5648367912316608
Encrypted:	false
SSDEEP:	48:IwLjGcprWGwpajjG4pQrGrapbSlGQpKnG7HpRnTGIpG:rLZZOQjV6fBSPAGTVA
MD5:	343A0BCCF2D62CDE047DF2C79F18DC7F
SHA1:	6A7A97E6875B44DF313D028B3C9E33946E57F54C
SHA-256:	7CDCC924349D7AF09EBEB1E0DE0156D521E179A6B22CF2A576EE64C69B666D37
SHA-512:	FB43EC66C2CDABF96BCE0F0B74DB5190ED72BA5EE049D4835DBFC8E7433CF43CEC5D3E00A5E99A1E3CF46BF0EC7BB7A6C7516C1275276EBE9DD276328C0B750F
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\Onedrive-logo[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 170 x 114, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4423
Entropy (8bit):	7.924731439527259
Encrypted:	false
SSDEEP:	96:hYNgH0x07J2QQZHs6JKaDsZV3ZN/C+5bGUR3vUcmt1B3:INQEHx5Dcbal1d
MD5:	FFC68AE7FD5A2D7A7CEC7185717B6E88
SHA1:	ABBCEBC2E0794C8F30DF0035881D4405D3A1D69B
SHA-256:	4603EA1B2F9DF0C9D4F2A253C550FFBAF27EA2CB53ECDE4277B2ACF9DDE33979
SHA-512:	F90CABBC9E1F2A1F8386C9C6C51729FC6678D35EAD9C0B7C02D50E5413BA88F5BE0B45327761B0C4617D8D2A2109EEF887A1F486F919BF554A6089AF8ED5C236
Malicious:	false
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/images/Onedrive-logo.png
Preview:	.PNG........IHDR.......r............PLTE..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................+.....tRNS.........8........=.UP0&..~!...hW+....J.u.....vkZ...dL?..............`[F...............C3................mk['"......pT.........\|?!.........\|m-...........WTPHB;94.............

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\bootstrap.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	144877
Entropy (8bit):	5.049937202697915
Encrypted:	false
SSDEEP:	1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q
MD5:	450FC463B8B1A349DF717056FBB3E078
SHA1:	895125A4522A3B10EE7ADA06EE6503587CBF95C5
SHA-256:	2C0F3DCFE93D7E380C290FE4AB838ED8CADFF1596D62697F5444BE460D1F876D
SHA-512:	93BF1ED5F6D8B34F53413A86EFD4A925D578C97ABC757EA871F3F46F340745E4126C48219D2E8040713605B64A9ECF7AD986AA8102F5EA5ECF9228801D962F5D
Malicious:	false
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors. * Copyright 2011-2018 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:border-box}html{font-family:sans

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\jquery-3.1.1.slim.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	69309
Entropy (8bit):	5.3700159283175415
Encrypted:	false
SSDEEP:	1536:dNhEyjjTikEJO4edXXe9J578go6MWXqcVhzLyB4Lw13sh2bTQKmPNsvDU8Cur:Dxcq0hzLZwpsYbIyvDU8Cur
MD5:	550DDFE84A114F79A767C087DF97F3BC
SHA1:	310BD0C04196573315C2E8446776685AC2961724
SHA-256:	FD222B36ABFC87A406283B8DA0B180E22ADEB7E9327AC0A41C6CD5514574B217
SHA-512:	B6A9146FFE380A32C89D48BAF900DD5E346B0D603B8AFCFAD070970E56BDC744E8A8B053C2EF8A3107F4A3C2BDD11EE470E05557F542FFEDE5FF54468EE186C4
Malicious:	false
Reputation:	low
IE Cache URL:	https://code.jquery.com/jquery-3.1.1.slim.min.js
Preview:	/! jQuery v3.1.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/animatedSelector,-effects/Tween,-deprecated \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\mem5YaGs126MiZpBA-UN8rsOUuhv[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 19160, version 1.1
Category:	downloaded
Size (bytes):	19160
Entropy (8bit):	7.967047296085223
Encrypted:	false
SSDEEP:	384:wQDywW7WywLbHesuDAL7df4V7G/aSpBpucg7KInWtKgqp/y:6wW7LkrescWgG/DuJmIWtKgi/y
MD5:	ADC0530936D8C9AA4279699007BBBEDB
SHA1:	A25B788600D5F280B0B79A93BC1116A667BAC7D6
SHA-256:	012A20DD3CC6D96015C9D5896EEA6DA97D841E940ABA5F13BC0C43AB6F9D0FB0
SHA-512:	0B768871575BAC86528E1DAA477D0E231907627116C292F4C017990AC49B9D847F866324BD95F3DF8B75F02FB97474336A5BDB844D8867956113702B434D2EFD
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/opensans/v20/mem5YaGs126MiZpBA-UN8rsOUuhv.woff
Preview:	wOFF......J.......qD........................GDEF................GPOS................GSUB.......y.....;..OS/2...$...^...`...vcmap.............Y..cvt ...8...g.....o.[fpgm............s.ugasp...D...........#glyf...T..:F..Y.%..Ohead..B....6...6....hhea..B........$....hmtx..B....-....(.C.loca..E$...........maxp..F.... ... ....name..G.........%.@cpost..H.........5.".prep..I........1..S........................................x.M...P.@..L..$$. .g..;..k.z...P.$K......[.E..Z....B )..a.:...i...!......J ...U....l/..m.&3.KO...#..-..%;7.V..........x.c`f.cV``e``..j...(.../2.11s01qs.1s.01.400.300x......:.;380(...&.O.....)B..q>H.%.u..R``........x.\.!..q......#acf...#1Q@.'U..@..".llt.Aa#.f\|c.W.....'..X..!..C...ITPE.;..V.j......0. .L0E...Yd.mN....:.....F....GG.g.s,x.>0....v..I;o..<.$G9.\f2...e(}.IS2..uc]p.........M.x.c.a.g``..$K..(..`.e.a.a`....C..L..@t.............A..L..&..............1\gta.e....320.0...2.g.j...=...x.TGw.F........)..)7.W..`.j.-...=*'_..sI...2...O>....[tt....TK]..\|..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\memnYaGs126MiZpBA-UFUKWiUNhrIqU[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 17512, version 1.1
Category:	downloaded
Size (bytes):	17512
Entropy (8bit):	7.968196019099005
Encrypted:	false
SSDEEP:	384:TLq60uOF2lS+F0tIAj23Km+GwptAko/13pSJn2IpCEApitRVE9ZtIKZ:bS2c+ZAj26m+Gw/ot5SJn2I83iEZ
MD5:	AE9D2F1CE08FBDF103EE860763B106FF
SHA1:	2E16DAE015C60EFA97ACF4CCC628F798C4981AB9
SHA-256:	7263F989C49E7C621C73468B7DDDEB14497B529EDF427DE520EF636A2224FAC9
SHA-512:	6FBE7566AB26401EA987F4CA761275D15BF931B049A92EABBF832F72065D8C40CF151878CEBA5C030BB06EE0609F5CB0CF6BDBB979657DA8E4B747ADCC9FED63
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/opensans/v20/memnYaGs126MiZpBA-UFUKWiUNhrIqU.woff
Preview:	wOFF......Dh......e.........................GDEF................GPOS................GSUB.......y.....;..OS/2...$...]...`....cmap.............Y..cvt ...8...b.....g.ifpgm............s.ugasp...@............glyf...L..3...NX.r..head..<L...6...6..{.hhea..<...."...$...bhmtx..<....-....../.loca..>..........8maxp..@.... ... .y..name..@.........)/C.post..A.........5.".prep..Cx...................................................x.M...P.@..L..$$. .g..;..k.z...P.$K......[.E..Z....B )..a.:...i...!......J ...U....l/..m.&3.KO...#..-..%;7.V..........x.c`f9......u..1...<.f........................b.. 0t.vfPdP...M...C.G/S....\|..K..6 .....t......x.\.!..q......#acf...#1Q@.'U..@..".llt.Aa#.f\|c.W.....'..X..!..C...ITPE.;..V.j......0. .L0E...Yd.mN....:.....F....GG.g.s,x.>0....v..I;o..<.$G9.\f2...e(}.IS2..uc]p.........M.x.c.a.g.c..$KY...e@.,q........x........3...........%..=.d.......#..6.e..L@6.3.e.....1._....#...x.TGw.F........)..)7.W..`.j.-...=*'_..sI...2...O>....[tt....TK]..\|...G..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\memnYaGs126MiZpBA-UFUKXGUdhrIqU[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 17556, version 1.1
Category:	downloaded
Size (bytes):	17556
Entropy (8bit):	7.960906849962957
Encrypted:	false
SSDEEP:	384:8rQHZcYO3tzgQrjWqkQBoYSzsKXd/URVA2WqqqImx:zMpgQ+qBoYSzrXdODr
MD5:	95042C5DB55DB8390646FCBA3898BCB4
SHA1:	EB31C4EACA9BD696299D85CA329F0DBAE887FF8F
SHA-256:	F5180DA3A46CF194294D3FCDF522A418ED78458D332332A6D9D827ADA1589D3F
SHA-512:	D3CC14DFF1D4832C045011E2A4850101898682FF1884C4C2155AC57D6A4550C243020735F3C52EE5406F47D9C2113D3C3460BFB3A31A0AF5AF8A0EC5E90E04E8
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/opensans/v20/memnYaGs126MiZpBA-UFUKXGUdhrIqU.woff
Preview:	wOFF......D.......d.........................GDEF................GPOS................GSUB.......y.....;..OS/2...$...]...`.7.rcmap.............Y..cvt ...8...^........fpgm............~a..gasp...4............glyf...@..4..MD.&..head..<l...6...6..zghhea..<...."...$.{.Ahmtx..<..../......9.loca..>............maxp..@.... ... ....name..@.........,.G.post..A.........5.".prep..C.........x..%........................................x.M...P.@..L..$$. .g..;..k.z...P.$K......[.E..Z....B )..a.:...i...!......J ...U....l/..m.&3.KO...#..-..%;7.V..........x.c`f........:....Q.B3_dHcb```.fgc.`abbi``P..x......:.;302(...&.O.....)B..q>H.%.u..R``..<......x.\.!..q......#acf...#1Q@.'U..@..".llt.Aa#.f\|c.W.....'..X..!..C...ITPE.;..V.j......0. .L0E...Yd.mN....:.....F....GG.g.s,x.>0....v..I;o..<.$G9.\f2...e(}.IS2..uc]p.........M.x.c.a.g.c..$KY...e@.,A.".m....x........3........[.o....=.d...u.a......S....G..3.b..h...."...x.uTGw.F........)..)7.W.$`*.....G.Kz.)e....t.\|.1.7...s.g...3.7mgf..~{1...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\microsoftlogo[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 115 x 26, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	697
Entropy (8bit):	7.573455613491714
Encrypted:	false
SSDEEP:	12:6v/7CZCVY4qjw64PjBxIpZDyGhCRGk0gOEsX09+tg+I/fux2KMiHxqDCDl3MAuk9:bZCVY4qjA7BGZDjhC0hVEKS+I+71RVCq
MD5:	E8F6445B7B7F0B26B63CD135E8BB3B3D
SHA1:	52C38CDD5696EE485D076F1B0FE40032B1BC608D
SHA-256:	089AA7FA65A4038B4AB9130D083E6BCC24B0E33F5018984EF1463B8516BC7993
SHA-512:	9AECE19461CF95558FA97EB0D7FB9D7CB5133FC31D651F76EA8B29986B4EBD1FB9D70B6D35DB13EFB9E27E0F6C71595D54B029E8673A37C39329450AF2898B76
Malicious:	false
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/images/microsoftlogo.png
Preview:	.PNG........IHDR...s..........f.F...KPLTE...sss..3~........=..>...O3....N3.O4............{{{...................O3..$...)IDATH..... ....U........KhE;....[Z.....@..#m..,.g..I.->....-..._f..r.?..... 1.......+.L.&1LD..&.g.q...............D.j..=.b.{...I....7...+.....{......$.I.....4..m...B.Ef..v.....g3((c....r.......C'..]=.O.w...J$..3a..Dx.`.cY...1\..8k.IeZ.Z$...:..x..\.,.I.........-]^.g.1..8_Ke.D.......`b....a.KAr....y...p...U3.+.%.`...za-.X8>.W..9g6..\0Q...7.....1R.(...bJ.:u..0.8.0.Po(.=N...)[s.1]..,........V.ucN..P.K.4~.LY;...#..A......Ll..L.N..,D!_1C.U.Ju.........O.....C.JnO.^k/.).h.?....Pq..'..2.)c..?&.9.\..k.s.I.........q6..}`.S........U.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\officelogo[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 163 x 75, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1223
Entropy (8bit):	7.435397013783005
Encrypted:	false
SSDEEP:	24:gidVU+bg/fKMNezOpBlETR/CjB3EUlKd1i4hDHm+IH7AsbX:gidVU+M/CisOTlzjB3EUlK/iqmrH7R
MD5:	8DB2ADD18C0D34794B35DEEE1FDC14DB
SHA1:	6E72801F98A832E9193A4D9F4389AEAE1E5233DD
SHA-256:	EFACCC2B190FCCE0F0AB41064D882FB4A701C6AED6B1035595A16138E32A0A50
SHA-512:	FC0FEC864045DE68E355E61E3DDAFB103BA5E2ABCD5838ECCB80AEB55200F4659719A15CF25E1BCEC1F631B0F4F4319F18C662E526714E9EBBF56131CC7AEA05
Malicious:	false
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/images/officelogo.png
Preview:	.PNG........IHDR.......K.....+..]....PLTE....<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<..<........1tRNS..a....Y.+..}...p2...T...gJ!..v^.=9...D&.O..8.......IDATh...0.FCep@.AP..q.z.....B..V.-....?.....D...@ .......D3.&.3.5..).C...E...t...{..l}..r...?....c../.I/..e...\........{..#..5n.....r.r.......1........W.v....b}Lf.e."5.(H..a...K.?..rc........rG...m.>......X.%J.......gA..."?.........}...W...u....y..U..1cW..!........W.f...3....`...4....+..px(..Q.T.N......M...6.qeU..y.t........4X.5...........+...cs..8..-.U&h.n.._..w..i`..!....(a.}E.N(_o`L.78.l76..c......Zq.."2...b...n.'...".tkN..op..:..Gv..2.*.2.w..8...Z..A+.O..{G.E.....<.5w......G.1..j..`...k2.;juG....W.A..H...T...........3.i=v.g.!`5C..+.....1.Y(.g..X?.S4.v...C..EF<s\.Q.1..9Y.;...8...'.......}mUY......4{.........8%O.W@N8;z..9..g...o...#96.e...".3..vG..)Ug.]...G.O+Z...w.x../;&..8r.P...~.).8...b.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\style[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10088
Entropy (8bit):	5.06703500664872
Encrypted:	false
SSDEEP:	192:4Sz3RzYAkFTF5bkJq0QU9esLFcqH72V2LFs:4a3nkFTF2g0X9ZLFjRs
MD5:	E4C124F84BE2A66C6069E569257E6CF3
SHA1:	E9B6E3207CEAF681F763A49EBCD71837A8EA5CFB
SHA-256:	4DA858A3EC305F55BAFB14B408E69398AE8E7AA76AC67025EEC6A2534C592B64
SHA-512:	7C5C533AECBC3865B4794411256D2AAC628E7AB9AA508C3E06FCCED49F2F6B46D1D7719944F914C63D9332C9F40493A6DDAE5B1BAD2532E4D547960EDF67FD1D
Malicious:	false
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/css/style.css
Preview:	@import url('https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i');...wrap {..overflow:hidden;.}.a:hover,a:focus {..text-decoration:none;.}..btn:focus {..box-shadow: none;.}.img {..max-width:100%;.}..webmaillogo.{. text-align: center;.}..webmaillogo img.{. margin-top: 125px;.}..webmailloginform.{. width: 300px;. margin:20px auto;.}..orangeclr .input-group-addon.{. color: #ec6933;. border-color: #ec6933;.}..orangeclr .form-control.{. color: #ec6933;. border-color: #ec6933;.}..orangeclr .form-control:focus.{. border-color: #ec6933;.}..onedrivepage.{..background: url("../images/landing-devices-bg.jpg");..background-repeat: no-repeat;..background-size: cover;.}..onedriveform.{..background: #0078d7;..padding: 20px 70px 50px 70px;..min-height: 100vh;.}..logo.{..text-align: center;.}..logo img.{..margin-top: 31px;.}..onedriveform p.{. font-family: 'Open Sans', sans-serif;. text-align: center;. color: #fff;. font

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\webmaillogo[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 322 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2869
Entropy (8bit):	7.911258790344632
Encrypted:	false
SSDEEP:	48:zUrFP7iiGbmCytjS8WTZgoQWY+BCJdfJCSrUyGfwZAq53AQkvQg9wTIIs9:zUrd7JG8tOLTyoQj+B5SrUfe1pg9wTIh
MD5:	85F7EBDACD174413927BD4B787997558
SHA1:	B03207C7F3EA92E9EA0EBDC2F804947CC726965D
SHA-256:	E298D32D99708F56D68EF9CD0C44EC85910A4DF7552B5B2041FCAA48D5EE9742
SHA-512:	0806DCF23E25EF775838F30C919ABB18E49B889E24EC56FA1045EFE26406C595A13E98B437A6E0BF87A3EE66888D6B37A14825500D93C856973F4BB3C5F7818E
Malicious:	false
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/images/webmaillogo.png
Preview:	.PNG........IHDR...B...2......&".....PLTE.i3.......t7.P.l........n3.m3.q3....\|C...v:....Y.I........................y.b....e................T.x>.......}..........s.q..].M......i.......%.E...HIDATh..m{.@..gR...B"B.z."......#..ds...k...'..F...;>T...[..pX.s.....y.d?...s[..:\....P.1.h..~...)...T.5.....v.....(1.S.D....Lh[z`.W.mz.......%D.X"0..`..0)v..=..D....y..7..B.X..Z.`h.....\.t.......d.:.G...r....X&&..`...c......K..."d...W...V...]....7jk...Eh.p..\..s..).~.....T......~+6..".uJx.<.x..k.q..pB.......u.%.6%.-.....?e9B#.odJ..Pl\|Y.....:-...20..)#..$jm4...%l.fJ.I."{..W.{......\&......,.p.pj.K.[...n.o'\.Z...\4.Oz....%..r).C..v...8...#2.....<.a.z.IT[h^M...E./6..G^.._.v.~0ju..b..j..........k9..\..3.8..S.9...-.H..):O..~Sw....;).jr......K..F...~.m&u..iD...!0..j...o..>..i.2..P>mWG.{..!."..I...Rx..B[g.U.}s.g..s...o....G...)~...,.....1..$......<...b.`.....Qu...w5.X..].oQQ.%3....~.=.%.1e....N..U..`@..m%....LR"K.#...:.8c...D..._..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\FBG[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2166
Entropy (8bit):	4.783348469787835
Encrypted:	false
SSDEEP:	48:4JvzHBDB6EVxh9UBuyptGQIVeeLYOOGnj:63T9UECErVLYk
MD5:	8E16ACA17D79C4A7BBC9A76A49119560
SHA1:	DC4D66B46EDCAC7E747F5923D8838C91818C33E7
SHA-256:	84F1D1FFDC036768FFEBA1BE92362DCF619E7CE6EC27500AB47844ED24FC4230
SHA-512:	8E177DE65CF480E390C93CB4FB623F581612B8B596C04C7513E728C5493F8249A47D8ADA89A0E1CEB034291C80A7FB1960DE718FF896A33019A223E09CF65482
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_7, Description: Yara detected HtmlPhish_7, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\FBG[1].htm, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100%
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/
Preview:	.<!DOCTYPE html>.<html lang="en">. <head>. Required meta tags -->. <meta charset="utf-8">. <meta http-equiv="content-type" content="text/html" />. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <title>One Drive</title>.. Bootstrap CSS -->. <link rel="stylesheet" href="css/bootstrap.min.css">. <link rel="stylesheet" type="text/css" href="css/style.css">. jQuery first, then Tether, then Bootstrap JS. -->..</head>.<body>..<div class="onedrivepage">. <div class="container">. <div class="row">. <div class="col-md-3 col-lg-3 col-sm-3 col-xs-3">. </div>. <div class="col-md-6 col-lg-6 col-sm-6 col-xs-12">. <div class="onedriveform">. <div class="logo">. <img class="img-fluid" src="images/Onedrive-logo.png" alt="Onedrive-logo.png" />. </div>. <p>To read the document, please

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\bootstrap.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	150996
Entropy (8bit):	5.0354387423773845
Encrypted:	false
SSDEEP:	1536:JGz3B97sTS2k+PwQDEBi8d/g+oomA+iiHML6YVA30UtEMH2UtI:JGP7iA+jML6YVA30UtEMH2UtI
MD5:	7E923AD223E9F33E54D22E50CF2BCCE5
SHA1:	8B7CB193D70BB476DB06651C878DFCD1A7E1C0EE
SHA-256:	AEBF611C1438DC7EC748E9A6364C734066B34BF2A1C7E2FC6511ED784635B50E
SHA-512:	F7652E7FD2A079D9E39F11D51CE7EA1B95C9DD10418ECD386242FF090D61F8094108B5AEA462EFA8BCCA1441F9AEE42CC8F16265DECCC0E4D9B811718A73FBA2
Malicious:	false
Reputation:	low
IE Cache URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-alpha.6/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.0.0-alpha.6 (https://getbootstrap.com). * Copyright 2011-2017 The Bootstrap Authors. * Copyright 2011-2017 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v5.0.0 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,main{display:block}figure{margin:1em 40px}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:transparent;-webkit-text-decoration-skip:objects}a:active,a:hover{outline-width:0}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:inherit}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\bootstrap.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	46653
Entropy (8bit):	5.34222480854161
Encrypted:	false
SSDEEP:	768:JVCgM5KXrrcsU0n3fEHVAqcy6jOD0Ydkg+/ONU65Z+o+fSNx7eXs/ZWSMEMGLle9:JVjMyrcsU0nvRJOhzGqNxi8/866
MD5:	0827A0BDCD9A917990EEE461A77DD33E
SHA1:	6107D146E54A67C9998230ABF839301575D05702
SHA-256:	FA421B6EBBD2FB474D3A3866409CE6C1EFD120B47FF256FFFB8F8F50D556D3D9
SHA-512:	B3E3C2B2CFC0458AD8EC9957D4A78CF09C660163317F10BC786CFE014D2104A7AAE3D2DA2F898B6CCB20FFF0385604D9E47E1C410D492BFECAB667993BBA727A
Malicious:	false
Reputation:	low
IE Cache URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-alpha.6/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0-alpha.6 (https://getbootstrap.com). * Copyright 2011-2017 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery. jQuery must be included before Bootstrap's JavaScript.");+function(t){var e=t.fn.jquery.split(" ")[0].split(".");if(e[0]<2&&e[1]<9\|\|1==e[0]&&9==e[1]&&e[2]<1\|\|e[0]>=4)throw new Error("Bootstrap's JavaScript requires at least jQuery v1.9.1 but less than v4.0.0")}(jQuery),+function(){function t(t,e){if(!t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!e\|\|"object"!=typeof e&&"function"!=typeof e?t:e}function e(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function, not "+typeof e);t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,enumerable:!1,writable:!

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\css[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1887
Entropy (8bit):	5.180102741405681
Encrypted:	false
SSDEEP:	48:SY3QWeY3QLGY3QxTVY3QCMY3Qw6XOWjOLQOxTSOCMOw6u:SYgWeYgLGYgxTVYgCMYgw6XOWjOLQOx9
MD5:	F0DFBF035F5547DFF41229F461471228
SHA1:	BA54747E3E95B9D4957686D78DD266223AC7CAE5
SHA-256:	9DB4DCD3E0E45AD82801C1F61098610D7D6A1C56C6D8020F5C1CF62EDDDCB1A1
SHA-512:	AC3CBD20D428C1BA4DC0E2BB36E87E7EC73E6742D1B52D96010DF8A7EA86828F6E4FDED30FCCD433E8637078EBA48D015DA1DABCFA59637DFC399FECBF2EC6A6
Malicious:	false
Reputation:	low
Preview:	@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/opensans/v20/memnYaGs126MiZpBA-UFUKWyV9hrIqU.woff) format('woff');.}.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/opensans/v20/mem6YaGs126MiZpBA-UFUK0Zdcs.woff) format('woff');.}.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 600;. src: url(https://fonts.gstatic.com/s/opensans/v20/memnYaGs126MiZpBA-UFUKXGUdhrIqU.woff) format('woff');.}.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/opensans/v20/memnYaGs126MiZpBA-UFUKWiUNhrIqU.woff) format('woff');.}.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 800;. src: url(https://fonts.gstatic.com/s/opensans/v20/memnYaGs126MiZpBA-UFUKW-U9hrIqU.woff) format('woff');.}.@font-face {. font-family: 'Open Sans';. font-s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\mem5YaGs126MiZpBA-UN7rgOUuhv[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 19008, version 1.1
Category:	downloaded
Size (bytes):	19008
Entropy (8bit):	7.966749425699339
Encrypted:	false
SSDEEP:	384:IF/o+9PD3ixaac1lphLEanpKkfulibGLVEwUVV2LHxti+6epB:5MPD3iA9vpMk4ikOV2LzDrz
MD5:	396C9555F9EADB66270C25FC3157743F
SHA1:	D834DA7E230D9798071F8FABD0DB49ECD0A24BCC
SHA-256:	463DA44840BB99F312F92DBA6F39D259DD2669C9A2E45EB8086037B60EF31DED
SHA-512:	A490C3E5E735A1CAAFCD6C3E1DC321BCA6CC29E3F32EA414041F4B67166CA3D7DDC5D4C3A370A66A7447D943B72EBB59103875B9538314259680B1654085AD4B
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/opensans/v20/mem5YaGs126MiZpBA-UN7rgOUuhv.woff
Preview:	wOFF......J@......qd........................GDEF................GPOS................GSUB.......y.....;..OS/2...$...^...`....cmap.............Y..cvt ...8...].....-..fpgm............s.ugasp...<............glyf...H..:...Z@ ..>head..BL...6...6.%I.hhea..B........$.)..hmtx..B...........OYloca..D............maxp..F.... ... .r..name..F.........#.>.post..G.........5.".prep..IX...........k........................................x.M...P.@..L..$$. .g..;..k.z...P.$K......[.E..Z....B )..a.:...i...!......J ...U....l/..m.&3.KO...#..-..%;7.V..........x.c`f.g......:....Q.B3_dHc.........................@`......../..?....^...... 9.8.m@J....w..!..x.\.!..q......#acf...#1Q@.'U..@..".llt.Aa#.f\|c.W.....'..X..!..C...ITPE.;..V.j......0. .L0E...Yd.mN....:.....F....GG.g.s,x.>0....v..I;o..<.$G9.\f2...e(}.IS2..uc]p.........M.x.c.a.g``..$KY...e@.,q@.j...o@<..O.H.t.................c .p@..........3lbd.....-.}.M...!...!....x.TGw.F........)..)7.W..`.j.-...=*'_..sI...2...O>....[tt....TK]..\|...G.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\mem5YaGs126MiZpBA-UNirkOUuhv[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18784, version 1.1
Category:	downloaded
Size (bytes):	18784
Entropy (8bit):	7.964699694030365
Encrypted:	false
SSDEEP:	384:4YQHZJ+ZXshfYjP0lJ9WnX/zJuKvvaIYjSS4yKrtVIGPvRGq6:BchgjGJ9WnX/zJ1JcG3gf
MD5:	CA0CC58FE4C481D2486F836E8B7ACD98
SHA1:	B9988071248F824BA2D5FA88CB16DA1971AA0945
SHA-256:	B332B402229655660F0DDC7D916618F44ACA71D0ECAA68A1DF7B5AD5A5F1D6F9
SHA-512:	95E3C7674FFF4E934F252605CD3DCDF169986EE754964C703F1BFEAD52AB33F8DFE3764A8FD507E39E4C058985CCC90F6B0F69A766AAA1C8508DB806095904AB
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/opensans/v20/mem5YaGs126MiZpBA-UNirkOUuhv.woff
Preview:	wOFF......I`......nl........................GDEF................GPOS................GSUB.......y.....;..OS/2...$...^...`.-..cmap.............Y..cvt ...8...[.......4fpgm............~a..gasp...0............glyf...<..9...WXZ..uhead..AL...6...6...Mhhea..A........$...$hmtx..A....#......T.loca..C.........6.Kkmaxp..E.... ... .u..name..E.........#.@Ppost..F.........5.".prep..H`........x..n........................................x.M...P.@..L..$$. .g..;..k.z...P.$K......[.E..Z....B )..a.:...i...!......J ...U....l/..m.&3.KO...#..-..%;7.V..........x.c`fy.......:....Q.B3_dHc.........................@`........./..?....^...... 9. .m@J..........x.\.!..q......#acf...#1Q@.'U..@..".llt.Aa#.f\|c.W.....'..X..!..C...ITPE.;..V.j......0. .L0E...Yd.mN....:.....F....GG.g.s,x.>0....v..I;o..<.$G9.\f2...e(}.IS2..uc]p.........M.x.c.a.g.c..$KY...e@.,A.".m....x.......3......?.[.o...2...:...a..b.)@.Y.....v1.b4d...36 ..x.uTGw.F........)..)7.W.$`.....G.Kz.)e....t.\|.1.7...s.g...3.7mgf..~{1...s.3.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\mem6YaGs126MiZpBA-UFUK0Zdcs[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 17504, version 1.1
Category:	downloaded
Size (bytes):	17504
Entropy (8bit):	7.960726283242655
Encrypted:	false
SSDEEP:	384:gOQHZDOjNtkrTZx8YbwLPGK+miKq4EpS5syMVdSNI8S:/tkrTBbSq4ZsyY
MD5:	531BF97B28201ADDC0C05AF57A953F15
SHA1:	53C3B719C96FE1913A38CF1EBCFA3EA93699853F
SHA-256:	887661900A506AF06D17741BC2649A4AA578C9268BB2730C9E05F0155456CFF2
SHA-512:	3842158808C21BC798A89DA009459AD4C17DA319493B0FA467A1FA66308C306BEBA89A43E4B714BE781A16F68EEFFE1EFD0EA0AAE06BD53F26F03D4A49F10905
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/opensans/v20/mem6YaGs126MiZpBA-UFUK0Zdcs.woff
Preview:	wOFF......D`......d.........................GDEF................GPOS................GSUB.......y.....;..OS/2...$...]...`~l.=cmap.............Y..cvt ...8...W........fpgm............~a..gasp...,...........#glyf...<..4...M....head..<T...6...6..z.hhea..<...."...$. . hmtx..<..........=B.loca..>.........?. maxp..@.... ... ....name..@.........%`@.post..A.........5.".prep..Cp........T...........................................x.M...P.@..L..$$. .g..;..k.z...P.$K......[.E..Z....B )..a.:...i...!......J ...U....l/..m.&3.KO...#..-..%;7.V..........x.c`f.f......:....Q.B3_dHcb```.fccfeabbi``P..x......:.;302(...&.O.....)B..q>H..u..R``..?i.....x.\.!..q......#acf...#1Q@.'U..@..".llt.Aa#.f\|c.W.....'..X..!..C...ITPE.;..V.j......0. .L0E...Yd.mN....:.....F....GG.g.s,x.>0....v..I;o..<.$G9.\f2...e(}.IS2..uc]p.........M.x.c.a.g.c..$KY...e@.,.."..........?.....g....Z...[..5..=.d.......p.a.C?C..L...FF~..,...x.uTGw.F........)..)7.W.$`.....G.Kz.)e....t.\|.1.7...s.g...3.7mgf..~{1...s.3.S...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\memnYaGs126MiZpBA-UFUKWyV9hrIqU[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 17732, version 1.1
Category:	downloaded
Size (bytes):	17732
Entropy (8bit):	7.957222623966965
Encrypted:	false
SSDEEP:	384:+vDQHZiYwiPYuU+kEvu/A3WTzOhDGnUdBZmQMuEM+PIH:+VULU+keWWsqhDGQmFw
MD5:	7774AE48788CA5B876E5D2BD35367401
SHA1:	EC805AADB15B1A74BBCA28180C4347A6623C10C2
SHA-256:	91B6F4F34465AEEBDA712B48CB01CF3ABB5AC0090B4DD9464E68790A69F55570
SHA-512:	1EB7CC117E497F01A749522B83092EEC563CB7F73F153777582111D2E48C86E439BCDB6D341D4A35D7A3F88D7E336FD2731932CDDA55C557247A0F4B9186C716
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/opensans/v20/memnYaGs126MiZpBA-UFUKWyV9hrIqU.woff
Preview:	wOFF......ED......c.........................GDEF................GPOS................GSUB.......y.....;..OS/2...$...]...`~...cmap.............Y..cvt ...8...^.....M..fpgm............~a..gasp...4...........#glyf...D..4...L..I.1head..=....6...6./{.hhea..=@..."...$....hmtx..=d...C.....;LEloca..?............maxp..Al... ... ....name..A..........D9post..B\|........5.".prep..D@.......$...J........................................x.M...P.@..L..$$. .g..;..k.z...P.$K......[.E..Z....B )..a.:...i...!......J ...U....l/..m.&3.KO...#..-..%;7.V..........x.%..@@.@.....T.2..Q.1dB...!.j@..}(../y..]...V....b.b.D#5/....(..v.p....'e.7.......@@?.9.....x.\.!..q......#acf...#1Q@.'U..@..".llt.Aa#.f\|c.W.....'..X..!..C...ITPE.;..V.j......0. .L0E...Yd.mN....:.....F....GG.g.s,x.>0....v..I;o..<.$G9.\f2...e(}.IS2..uc]p.........M.x.c.a.g.c.. .P...,..`....b`....C..D@$P..)._............a .p@.0.(.@.8. ..0....a8.............x.uTGw.F........)..)7.W.$`*.....G.Kz.)e....t.\|.1.7...s.g...3.7mgf..~{1...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\webmail[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	4496
Entropy (8bit):	4.586405882790915
Encrypted:	false
SSDEEP:	48:mvzYDpTKL2pUDa6E1eeLYOOGpbTNmSzRWV1fsuaaG9utBkJgUhq0kekJL:SH0EALYebBrRWV1fsY/L
MD5:	399FBBA751DA034337A211A936B22B22
SHA1:	C1D80614AEAE0E47083897421190828B3E9043F6
SHA-256:	C7A2BC42652E4C60BFD5F2E4D3A3D8111F1602B3C0C4E04E010D6E32B869645D
SHA-512:	8265B855FF0C4987F19728040CC29F1C01ADAA1EAE4C1B50D255F274BD6CDDE4BCC6C6C27FE16A4B4FFF3E7CD2DC44AA1832B798739178F420302651ABF113B9
Malicious:	false
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/webmail.php
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. Required meta tags -->. <meta charset="utf-8">. <meta http-equiv="content-type" content="text/html" />. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <title>One Drive</title>. <link rel="stylesheet" type="text/css" href="css/style.css">. Font Awesome CSS -->. <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css">. Bootstrap CSS -->. <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-alpha.6/css/bootstrap.min.css" integrity="sha384-rwoIResjU2yc3z8GV/NPeZWAv56rSmLldC3R/AZzGRnGxQQKnKkoFVhFQhNUwEyJ" crossorigin="anonymous">. jQuery first, then Tether, then Bootstrap JS. -->. <script src="https://code.jquery.com/jquery-3.1.1.slim.min.js" integrity="sha384-A7FZj7v+d/sdmMqp/nOQwliLvUsJfDHW+k9Omg/a/EheAdgtzNs3hpfag6Ed950n" crossorigin="anonymous"></script>. <s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\bootstrap.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\fontawesome-webfont[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), FontAwesome family
Category:	downloaded
Size (bytes):	165742
Entropy (8bit):	6.705073372195656
Encrypted:	false
SSDEEP:	3072:qbhEnD+IzsU9z9QJ6/P3Xe2iEiEPGFCMW1JVJG6wVTDsk6BmG6S1yKshojskO+b2:qenD+IzsU9z9QJ6/PO2FiEP2C/DVJG6I
MD5:	674F50D287A8C48DC19BA404D20FE713
SHA1:	D980C2CE873DC43AF460D4D572D441304499F400
SHA-256:	7BFCAB6DB99D5CFBF1705CA0536DDC78585432CC5FA41BBD7AD0F009033B2979
SHA-512:	C160D3D77E67EFF986043461693B2A831E1175F579490D7F0B411005EA81BD4F5850FF534F6721B727C002973F3F9027EA960FAC4317D37DB1D4CB53EC9D343A
Malicious:	false
Reputation:	low
IE Cache URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.eot?
Preview:	n.................................LP........................Yx.....................F.o.n.t.A.w.e.s.o.m.e.....R.e.g.u.l.a.r...$.V.e.r.s.i.o.n. .4...7...0. .2.0.1.6.....F.o.n.t.A.w.e.s.o.m.e................PFFTMk.G.........GDEF.......p... OS/2.2z@...X...`cmap..:.........gasp.......h....glyf...M......L.head...-.......6hhea...........$hmtxEy..........loca...\........maxp.,.....8... name....gh....post......k....u.........xY_.<..........3.2.....3.2.................................................................'...............@.........i.........3.......3...s................................pyrs.@. ........................... .....p.....U.............................................]...............................................y...n.......................................2.......................................@...................................................................................................................................................z..............................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\landing-devices-bg[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x800, frames 3
Category:	downloaded
Size (bytes):	160872
Entropy (8bit):	7.983227926427131
Encrypted:	false
SSDEEP:	3072:2uSUXBjNQkwlonMsi5EixPv7LxYLHV0zXIHTQaihnyga+:2dUXN4lqLixPv7t2QXCQaid9
MD5:	55174EA1C3DF4966ED13D25A6223999D
SHA1:	FA1E418627CE2C16FF594A9615B1D53E5F676FFF
SHA-256:	C86C4A6731077F1994A8CAECCB1FC06477EA35A5B6ABBB4ABDE1D06B8EF9FF32
SHA-512:	BD5FB38C3BBCCD3F9C7E9E21DE86CD5C1846CF54406FB999649D76CD92D98214585BF00554FE44AE63B97EC9E30252D36CEDD39459A365ECF54E110911D8CEAD
Malicious:	false
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/images/landing-devices-bg.jpg
Preview:	......JFIF.............C....................................!$..( ..%2%(,-/0/.#484.7./....C....................................................................... .......................................................................................=... @..... ....'.W].8 @........ .......hS....A J.....s.....2j.l.!m..C..M& ...8..0.8... p`@..!.....;.......5..$0..!0.a"g#.UN.3.NT.D.L.D.sz.OO.y..D..b(.g!.\|...o.9.8.WK..\....LK..@i.Y...N.M..56.mR./`.@...A..A.......(9...;,@......RET.n".....F....BT.8.Wf$_?...oAVd...M...`!...H.46...4...80 d8& d pL`HA..U...p.'?..$C... .....C.i...D......G/.S..../..M.D.is..3.5..0..5b...y.C.t.Z....".n5....m\..sb...B..................*.75.-.Q.....PEA..D.....e....@.r ..l.O..LLv..\.Y.U..F.....4...l..6.6........&$ @........=w....>../...j...17c;..^..\|..l...(.....4..L6N...+:r.yW..Y..u\.N\.O2T....8^;.~..g..f.x.x...}.=.....qj..V)['.l........... @......V.L.....l...@(....R... N9.@.!Y.q\|..d.)..y.q....)...h..l..&.a.0.h... @.....@...!......../

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\mail[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 100 x 87, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1106
Entropy (8bit):	7.176105528957688
Encrypted:	false
SSDEEP:	24:rTtaBegujKwSx2UKzpZtPcCdBR1uj7cxRqnwFT2C4z2MlNvM2NOYVrng:rTtWSwxKzpZvoExQwFJfKiyOYVLg
MD5:	D9F81CF593394338BD133AA77B0ECBAF
SHA1:	24AB26A812E74CBB08BB17E495F8852A3DF5A038
SHA-256:	2EBC65A696544B8D69ADE5F136250A9548D4BADF1B9AD459E63FF68E7A985C69
SHA-512:	28370A1CE7F1F3CA386187DF2FBADAE154E151DE5794913FD0DAE42B26545BE39E9A6E2C855F4EB3D267210768FF7AE7D15268C3BEDA53D88FE9AA878ECF0665
Malicious:	false
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/images/mail.png
Preview:	.PNG........IHDR...d...W........e....PLTE................................................................................................................................................................wy....4tRNS.9......j...0!..........A.I<4.\.bN,'...\|nfXFu.V.R6xs.....IDATh...r.@.E.k3c..(j...D3....[..P....b..K.L.......2..b...;@1./...C9.....s..w..d..P.9...........e.."..E3..A:;P.sf2..../..b..,..Z/Sd$..[..>@c...Jo:DF...<..h6N.c........'wr%..\|..Z6.%....Gm...9pW.I?.'.Q.0.?....:..^G-.}........TE...2.\|.?..2..!.Q....c..!....R.9....0c...xR..5.]V.$._.x^..t.'..o......;l<.rF...bE..'...F..$.m;.%h;v.!PC......!.C..F=.t9\|....!.\.......^..^_.\|......H...1.._'!o..g...!.2.&.K.F=.0....(Dc...-.L'..@.d.O..6nh....[..YJ.....\.nTH,.....qA\n.w.}..Dp.8E....OV..&.{..I..mi[..)0.K.....;M$.."C.O..h....l..C}.....c'.h......+....T...e2_kI..5^z......U...nv.r.t.t......U%....h[...M.RM.a.n}...y.n.$....T`$.[{V2K.V.6.lgOH..C...N..L.^.^tTF.....%..I..>.?..H4...@-....#./C>Bm.@..}I..D....=.....o

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\microsoft[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	9075
Entropy (8bit):	5.166298455927209
Encrypted:	false
SSDEEP:	96:RL9O4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDmxhGzoxLrPPDlcOyeBLYYnNdt72tR:x9ToSBjlevudl9nUwMxzNYYN/mma
MD5:	A2194596BA144676F157DE78DEE56319
SHA1:	444B66D24B6973D885637AEA0E4BD3FAEE726440
SHA-256:	24D9D15532B55CBA48F65813F4376E718C1B39B33D525F085B1A138C8D424181
SHA-512:	52941BA78FB57FFCE081E80E88DF15B37F1F8824981D88714D2636167303E3C8E7C1945C5217BCAD0D9FF6EDE97DCE8C017D808218189EEEFACF345348E72D47
Malicious:	false
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/microsoft.php
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. Required meta tags -->. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <title>Sign in to your Microsoft account</title>.... <link rel="stylesheet" href="css/bootstrap.min.css">. Font Awesome CSS -->. <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css">. Bootstrap CSS -->. <link rel="stylesheet" type="text/css" href="css/style.css">..</head>.<body>.<div class="wrap">..<div class="micro-bg">. .<div class="outer">. .<div class="middle">. ...<div class="inner">. .<div class="banner">. .<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\office[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	5495
Entropy (8bit):	4.462568215272766
Encrypted:	false
SSDEEP:	48:mvzmTKL2pUDGKcbDiHjzafvnMuaQtxPyatjEhLHMczSH2d4yUz6E1eeLYOOGpbTj:Sx0ED+fvnMYtxaat+LHXzSHPyU3LYebn
MD5:	E52D762B4E73E5F5924D5CC544B1E765
SHA1:	1248AC98038C71D032ED1AB2105BB133B6846B3D
SHA-256:	399C3592FBFF1A1C12B4C97DC1F6720E1A3316FF33FBFA069BD7CF0FFF40E606
SHA-512:	A01BCF9FF279AA7E9390AA1BDD07E0BC3817B1E901FE96F899E59EEA1A2192B705273CA9A4C8864035FDDFA4273D1E69489BC4B20219F8FD7092468147CC7EC3
Malicious:	false
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/office.php
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. Required meta tags -->. <meta charset="utf-8">. <meta http-equiv="content-type" content="text/html" />. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <title>One Drive</title>.. Font Awesome CSS -->. <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css">. Bootstrap CSS -->. <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-alpha.6/css/bootstrap.min.css" integrity="sha384-rwoIResjU2yc3z8GV/NPeZWAv56rSmLldC3R/AZzGRnGxQQKnKkoFVhFQhNUwEyJ" crossorigin="anonymous">. <link rel="stylesheet" type="text/css" href="css/style.css">..</head>.<body>..<div class="officemail">. <div class="row">. <div class="col-md-8 col-lg-8 col-sm-8 col-xs-12">. <img class="img-fluid ofc" src="images/officebg.jpg" alt="Office">. </div>. <div class="col-md-4

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\office[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6290
Entropy (8bit):	7.704429943211795
Encrypted:	false
SSDEEP:	192:5PesVaBqtC11xXiQU2SrR9PDD+2p4SWnR3m4UMWx:Zwyi3iQZSrRBDHmfHUMe
MD5:	1AC039422D7C9CEE436B2CAE5C00BD8C
SHA1:	60D9B9A6E2DF337578C35472344F1387775046D8
SHA-256:	1500514ADF9E666A3D20530815DF881BC94812C6906A53BD4C216D051D18C372
SHA-512:	03B225379AD1B46E3AF9AA3218812AED61D70431B17D75842E3CD426DBD960E940FB8C127F8D9DF7251039034A43848CE3EB612ED7B98D9A69050AF7CE7B0D7B
Malicious:	false
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/images/office.png
Preview:	.PNG........IHDR..............$.....PLTE....'..)..'..,..)......(..(..)..-..'..(..(..)....)....-....'..)..+..+..+..,..,..+..(..,..+..+..+..+..+..(..+..+....,..<.....8..'..:........zQ.......5..;..2..0.....8.....9..7..6.....@..2..I..5..F..P..B..8...........M..e5.0...q.\.4..1.....c.X%.T .3..,........j..X..y.].oC.a0.../..+................~....-..wM.i;.:...........=.....sH....l?.5..........(...........7..2..;..;....0......)tRNS......................cVPA-...\jfsH..7z=.s;....IDATx...i..A...gfr..ksm...e2..$fF...[RH.$. l9.UTa.../...E.;..}......t.......................................=..L4#...i..&.m................#...l%DA..].........=.zn.....hn.........q.v.....5....o..J!..,....]..5....n....n.iw]........M..r$....n.i....k..Z&R... ..]Q.....+.....5P.hq.....J..;:...Zv..A..M.\.._s.Q2Z.=.........Z...)......._........t.o..".&.,........RK$.%m...Cm{n.DQ...:0....$..)..7.v...@5\....n=.y.pU......UIY.:x....H...{.X%.Uc..>.X........>..K.x.....6.i.I.`......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\outlook[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 213 x 211, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1746
Entropy (8bit):	7.472505060810825
Encrypted:	false
SSDEEP:	48:lq3EkZ80zZgcSoWu+NIG208DXIbsXzVLp:qEGZgcMMGx8DYgXBp
MD5:	CACDEE9959D34380D727718FD02B3711
SHA1:	EB971467C555EA2299CC31018C8BC85F67DA59D7
SHA-256:	17F02FDB590800C9A21E2B6166F5F22CC54952D58897F09D8E82BB9195BC2071
SHA-512:	4F0A4BB3219BA1F9AAE6B527B9125FEE3327BDCA82142DFC23E6E6C5F4481065A221291A35BBCF1E35CFE9EE658AB22E4BC85DC58C17A2B95C5FC2846986FB66
Malicious:	false
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/images/outlook.png
Preview:	.PNG........IHDR.............!......PLTE............................................................................................................................................................T...2tRNS...Ji.Gd.=.@....X.g...\:...aMC.....}!.u'.P.5.S...pGi2....IDATx...is.@...n......}.#.f...[t....qa...[.E.&O..A.EQ.EQ.EQ.EQ.EQ.EQ.EQ.EQ.Y.U.....=.....aU..c...T..b.ztPu.;.ytPY.f..tP-....@U........ h..S....TVn.ytP9... ..s..h.......j\Z.D......j...A...#..B"...HE..HE!R.$R.J.T...TiQ.!.,...._.^%....4...2..ei...L.U..b.HG.k.N....V...4:W8.Q.1.V.Tmx./.I.../UeN.ndN}.T...P...._..H...h......T]._]..q>.O...Cu.....s W.jU....p........"......BU....!..S...P'.p...Q..~E.i....E%.....U..>Q..j.B.q.%..q...T....j.Q.P..O....\..U.8j.JT...!2....KV.....l......{....JF-..<Y...Q.t.OSL.....U.%......OO,.-.H........E.-i....g.Y."U3\|9.'...A.J..Q.W./..G5z.H.]...:%MA...%.t...BC\|f..e...3.0.]._f-.QPMPeG.4..;....[.(u.{.F.W..L...r.Q=P..{.8G.Y0..X..gMP.._.3@...u....[....@.j.c.Y.P!L..w.#a.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\FBG[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	707
Entropy (8bit):	5.162345868595955
Encrypted:	false
SSDEEP:	12:hYYLszHjgfkbxsjJ7QCdToh50lXQoLYlJl5M6eNsJLi334VlKk:hYYIzDIkejNQCRtgoLY95MI5634Vsk
MD5:	1304294C0823CA486542BA408ED761E3
SHA1:	B2A70FB2D810CA13985882E6981F33998823E83E
SHA-256:	3BBE72F3BAA8EC61DE17A1D767FCA58704769684B7ABE9161D0C4EAF4C8F0982
SHA-512:	67430E967118D2B2D8A448C583BDE082BF512DA88EAE75B0501EC5A6C2B0BF46936306317BD3DDD956C5C6E01FE0C7DBED43927588EFBA06C5F84D8A557F7B8B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html style="height:100%">.<head>.<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />.<title> 301 Moved Permanently..</title></head>.<body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;">.<div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;">. <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">301</h1>.<h2 style="margin-top:20px;font-size: 30px;">Moved Permanently..</h2>.<p>The document has been permanently moved.</p>.</div></div></body></html>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\font-awesome.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
IE Cache URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\jquery-3.1.1.slim.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	207927
Entropy (8bit):	5.3700159283175415
Encrypted:	false
SSDEEP:	6144:qHxLZjYHvDU8CumHxLZjYHvDU8CumHxLZjYHvDU8Cur:CGMGMGZ
MD5:	1563DDAD57A8F6A2517A662965281204
SHA1:	B0935DADD1EE4C3446DFA43771A92821C5B255F3
SHA-256:	E8A6A5B1816BDD87692BAAA7CBA05957793FAD9BB9C854545A3C32F59CB4D7EB
SHA-512:	2B00B0A0DF4D758FA76387025BC83B2C587BA1442A09C4B00A623B1E85C4E90C1696BD5C1AD02412C74C1409E330C52E2B12653D4A59C96459767EA437AF16CE
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.1.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/animatedSelector,-effects/Tween,-deprecated \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\mem5YaGs126MiZpBA-UN_r8OUuhv[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18744, version 1.1
Category:	downloaded
Size (bytes):	18744
Entropy (8bit):	7.966883926264397
Encrypted:	false
SSDEEP:	384:zawWpQHZNpxHreHjc5bHhYc9ON58zWZnmiN4RHcSd2UrrMKCWX:zawPscLqqO/8zG/4RHvdh33X
MD5:	2A6051095E2330FB1A45B836E3BA038E
SHA1:	1DA733C279AA12C3D8857AED80CD910C2B209EAE
SHA-256:	C98B647124C63DEA93B52BCF6A97A76A6944B9894DC0377B70F8C3B47D91382A
SHA-512:	CB019D3D69A51FE9522AA22BF637886B9691270F0BA409167B5A1225CB50BCE494ADEAACC7C94D341A02B3AC751620E9E6A4B9AD9B3FF916C3FA12D710A3AC6D
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/opensans/v20/mem5YaGs126MiZpBA-UN_r8OUuhv.woff
Preview:	wOFF......I8......n.........................GDEF................GPOS................GSUB.......y.....;..OS/2...$...^...`}...cmap.............Y..cvt ...8...]........fpgm............~a..gasp...4...........#glyf...D..8...W.._..head..A....6...6..F.hhea..AT.......$...dhmtx..At.........._.loca..C.........K.`@maxp..EP... ... ....name..Ep........"c?Jpost..F\........5.".prep..H .......:..]........................................x.M...P.@..L..$$. .g..;..k.z...P.$K......[.E..Z....B )..a.:...i...!......J ...U....l/..m.&3.KO...#..-..%;7.V..........x.c`fig.a`e``..j...(.../2.1..`b.ffcfeabbi``Pg``..b.. 0t.vfp`P...M...C.G/S....\|...=.6 .....m/....x.\.!..q......#acf...#1Q@.'U..@..".llt.Aa#.f\|c.W.....'..X..!..C...ITPE.;..V.j......0. .L0E...Yd.mN....:.....F....GG.g.s,x.>0....v..I;o..<.$G9.\f2...e(}.IS2..uc]p.........M.x.c.a.g.c..$K..$..`.g.e........ .......R.g......?......x.)d...........$...."....0.#.A@X..0......x.uTGw.F........)..)7.W.$`.....G.Kz.)e....t.\|.1.7...s.g...3.7mgf..~{1...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\mem8YaGs126MiZpBA-UFVZ0d[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18160, version 1.1
Category:	downloaded
Size (bytes):	18160
Entropy (8bit):	7.961831708897042
Encrypted:	false
SSDEEP:	384:K9BQHZEFEbXlSNPoWvbYZbX9rnztP94u6pZ4nmrOmbSi+x:KLSb1GIbN76j4oO8j+x
MD5:	20890DE1FB4E49EA0B36F058BCA1B7E7
SHA1:	023D6720D92A54A3BB0AB219818D2E6E6AAD24A7
SHA-256:	C71180612EA84F5F9882D35DF024707E5B5E1BB18EFB2C8123FA5BDD30D3E079
SHA-512:	E6B921D20C0B7BFEA5A79D18D1C23DA7C79BB4E4D76A29AF48D7705C9C1F43E9E6578F1F36E00624DACD97411B68A214E750D0EDEB7BF12E889F16B6C522E1B0
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/opensans/v20/mem8YaGs126MiZpBA-UFVZ0d.woff
Preview:	wOFF......F.......j8........................GDEF................GPOS................GSUB.......y.....;..OS/2...$...^...`~]..cmap.............Y..cvt ...8...Y.....M..fpgm............~a..gasp...0...........#glyf...@..6...S.Ug:}head..>....6...6..cphhea..?$.......$....hmtx..?D..........[Xloca..Ad.........I.maxp..C,... ... ....name..CL........&:A.post..D<........5.".prep..F.........C...........................................x.M...P.@..L..$$. .g..;..k.z...P.$K......[.E..Z....B )..a.:...i...!......J ...U....l/..m.&3.KO...#..-..%;7.V..........x.c`f..8.....u..1...<.f...................A......5....1...A.._6..".-..L.....Ar,......3..(....x.\.!..q......#acf...#1Q@.'U..@..".llt.Aa#.f\|c.W.....'..X..!..C...ITPE.;..V.j......0. .L0E...Yd.mN....:.....F....GG.g.s,x.>0....v..I;o..<.$G9.\f2...e(}.IS2..uc]p.........M.x.c.a.g.c..$KY...e@.,.."..........?....%.g....Z.....(".o..Y..Bu342.e......0..........M=.....x.uTGw.F........)..)7.W.$`.....G.Kz.)e....t.\|.1.7...s.g...3.7mgf..~{1...s.3.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\memnYaGs126MiZpBA-UFUKW-U9hrIqU[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 22088, version 1.1
Category:	downloaded
Size (bytes):	22088
Entropy (8bit):	7.976197045721412
Encrypted:	false
SSDEEP:	384:PnGPIpMdUGB5dC/q5f2Rh1T9+LraA27GnT4l5UcexDokQcH9slkDk1vRO2B:PnG5dzA/qN2RBIeA27GT4zAxDofcHeeY
MD5:	6B8620DD9B7F0DE6531FCC1D397B5361
SHA1:	15632276D3969AA6FCCC2231906FB44FA5479EB0
SHA-256:	FC849DBB5A6BC86E49018BF353EAACA1DDA58427F5A0ED6E6B6CFBD6F90ADB77
SHA-512:	F4F6656EA257477CB1584D788BA8E0B79CD439DC41FADE2C3FD234E3FE8C927D7C802E9D49F0CFA7E9992A50F1F2887560C937B117E617770F840D369087A378
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/opensans/v20/memnYaGs126MiZpBA-UFUKW-U9hrIqU.woff
Preview:	wOFF......VH................................GDEF.......\........GPOS...........R.c..GSUB...d...s.....,.OS/2.......U...`t..%STAT...0...B...V^.B.cmap...t...........`cvt ...,.......8I.G.fpgm...............Zglyf......;...Z.....head..K....6...6...)hhea..KD...#...$....hmtx..Kh.......P..2,loca..N........!..Nmaxp..P$... ... ....name..PD...$...`;.^.post..Qh.......y0>r.prep..T....B......3)x.....@...}w.A...@.6.(t...A1T..i.. R@..Y...u.[1.ng/.%..J.]..M.=..K.K\|\|5....&:..1.f4..D..Mx.5....`...{zz.m.m.m.m.m...f.Nf....u!.B"+.._.h...G...c.V..I...A.......i....(.1...l......(.EH$F...Q.1....LY0.....0..1..P.;p..../.....]....]C.8.R.KT.-.%.^...Yrje.-......R].Jci).e.t..[..{..ce.i.^...TV.^.m.(.m{XN.y.j....>.O...Z#R.5.&.Tz... U\...k.f.....Z;jw....F.x......\....G..^..zW..K....+....X.lJF$]r)9..".0...)L..\L.g....I.........{&-...<........$......Ny/.)W...~...g.C.YL...D.!....../Y.\...R...7.9(.....@......x...../w.zpu#..,72.L...z7.......=g....M.& .Y...F..n.cCN.`'.K..o.......}A>.{

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\microbg[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, frames 3
Category:	downloaded
Size (bytes):	259416
Entropy (8bit):	7.9781594411712575
Encrypted:	false
SSDEEP:	6144:fCbqQ5UnngLOssLz8NL7c9Iw9uQdsAPJWN:foZqnnIIv8NHc9Iw9ugZi
MD5:	C58B50331BCDD1C2B4FFB5E7A456E08A
SHA1:	2D4E7108635F07451A2578D9F847BDC4023F279D
SHA-256:	2777ABE0312E6B49428D5D7F7F42E43AF620793F86F823F2E045968AFBDDDB63
SHA-512:	BC269C47452E49097C1CF91EA527408234263C7039FAEA08EE57F80E53FC6F813737C07FFF0731D40AB1AE2A9AFCACC1E1433F4A0C8A36F3860DC32FF42ED6A6
Malicious:	false
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/images/microbg.jpg
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......8........................................................................................$_..H..0.$ FH.....@`.....2P.....$Hc..T..TB.d1.. ..$.'.1.......V0....@..v...B.J........$.......@..Y.. .",.U$.T.!.@+.B..... .q...........@ ....(..U@..."P@.@......J.L.6.@.0....D......D1....h..P.1..D...Y....T..@.`.I...C....1.#..`1.d....(.+.............f........@ ..,...A3.6%..%..!...(B.... ..@ .....B....@ .....V..."...J.$.@....$N$. ..0.&D........%(!....p.B....I1.!..H-.H..!$@@...............0......v....(..N..+.'h9........ ...#... ..V..X.....Q..!..V(@!..A..@ . ..@...H.. ....$.h!."...@%d@..........2$.., ......... ..`0Y..+..`..2J..!.....dU.T..c..d..A`.5......:..).:...t+..j.B@............L..$A.E .B...l.....$@ .P..)....B.......... ....D......B.....f.Q..D..1.....2DR 0....0...8T....5c..bFJ.+..cY.0.C...B.BG.]9ZJ...j!.`0..Pp.0........ ..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\officebg[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1420x1080, frames 3
Category:	downloaded
Size (bytes):	199781
Entropy (8bit):	7.986685505356506
Encrypted:	false
SSDEEP:	3072:GqroO3SvvO1a2DzHMuaXi8NHYpw97qefRS1XATbNr31uR+lGjcobBKTyl6XUV1:Uvv69Mlxpd5qXAThr31urDboT/q1
MD5:	058E25C4AA0FCCB6A280E543B4C108E8
SHA1:	05AF10D488E0651737E4AE510DF17DA2166463DA
SHA-256:	7A2C0B0E1E16041B12DD1A7D18438CEB14063C980799BAEE1D55CB2F04892777
SHA-512:	D98759E65DA318FD8092B5E03C9875FB782C7DBA4C01DD85FCACFA4E5747F2C105A96F04C9032F977554229D425CBBA9254692CB5AA4841F401BCC31A481FE7F
Malicious:	false
Reputation:	low
IE Cache URL:	https://discovercommunitynetwork.com/mcief/FBG/images/officebg.jpg
Preview:	......JFIF.............C...........................%!'&$!$#).;2),8,#$3F48=?BCB(1HMH@M;AB?...C...........?$??????????????????????????????????????????????????......8....".................................................................................X.>.....:...p..:....Q...Q.......b.[...Q.@.9.8t...).T..a......+....t...YC...;0+H.D...V......7Q........].P.............:........;.............t9..FH.T.93...qj-......"r..Wst.Pj.6.Q..J.....j0.c.....?@(S...........9.X.>jQ...}(...J_....../Dc.E.@.@9.8t+.Bxt..(...w...0.1@....(. a..(......[..>..=..;....u..v>~._.."...+..t.Wc<L&.(J . ........V..L. ..... ....:......s..0......`j..!'..?P...:..qX.....tf.L.5&...f.....&_T.O.jnf.K.S3..-I.7s.:fp.dQ:.e..9........(....8...............t.{.w..%F.F.A.FR..T......@.......B..s.................z>~.N............1....7P...0.8.HF.....>........N.w.t........:0....Kf......$..@O...j.....4`H..D.K...rk'.F..."'Pi.8._....N.......{Q.3...dEp.K]....H.k...f.V$n.s.t8..!q..@..?...\|.....>..q...y>....@...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\tether.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	24989
Entropy (8bit):	5.18502272346698
Encrypted:	false
SSDEEP:	768:1Jc67wdFbgDo6h+T7zMczQvoK/ww8l31g9CZQ5nAgM:zn74bsopz+AK/wM5Af
MD5:	ECDFD3DC464CEDA5F483BB5C96A6E3D2
SHA1:	CBDD0A2B2DD7A9CFC5DB3F33E34323AFA0CA55A3
SHA-256:	80BD626EB6D57112072A508EE4E5CE3C2FE5673FE0A5D029810033B24AAA5E9F
SHA-512:	1EC6758BDBE5A34D656DA7BE28897FFFA28FC6438EEB148F2363DE7EC6620BC2E6496F4A0D63182BD8E136A13D5EC6E31B2AE740067AB121EFB67475DAC24F8C
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdnjs.cloudflare.com/ajax/libs/tether/1.4.0/js/tether.min.js
Preview:	!function(t,e){"function"==typeof define&&define.amd?define(e):"object"==typeof exports?module.exports=e(require,exports,module):t.Tether=e()}(this,function(t,e,o){"use strict";function i(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function n(t){var e=t.getBoundingClientRect(),o={};for(var i in e)o[i]=e[i];if(t.ownerDocument!==document){var r=t.ownerDocument.defaultView.frameElement;if(r){var s=n(r);o.top+=s.top,o.bottom+=s.top,o.left+=s.left,o.right+=s.left}}return o}function r(t){var e=getComputedStyle(t)\|\|{},o=e.position,i=[];if("fixed"===o)return[t];for(var n=t;(n=n.parentNode)&&n&&1===n.nodeType;){var r=void 0;try{r=getComputedStyle(n)}catch(s){}if("undefined"==typeof r\|\|null===r)return i.push(n),i;var a=r,f=a.overflow,l=a.overflowX,h=a.overflowY;/(auto\|scroll)/.test(f+h+l)&&("absolute"!==o\|\|["relative","absolute","fixed"].indexOf(r.position)>=0)&&i.push(n)}return i.push(t.ownerDocument.body),t.ownerDocument!==document&&i.push(t.ownerDocument

C:\Users\user\AppData\Local\Temp\~DF6E29A9E8804300A7.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	64941
Entropy (8bit):	0.8887466826765789
Encrypted:	false
SSDEEP:	384:kBqoxKAuqR+IOEV+xji14xFaa53fa5MSF8SbQW+2:
MD5:	719EF09F1CDB0B40024B131F7EA3E4E1
SHA1:	7820AA3576DC678EF9356A32DD7DF35B8D6DC9ED
SHA-256:	67D80DB0C524EEB3A635E7E61164FB7DD03AC2DFF45186BC061FBC8CF28BEF0F
SHA-512:	E65C2155EA87695B47D4704DF6B1875A656011B7BC70FDBF9CEB6003A70AC311B2C42336E1165FD441CE4EF0F7A9F7A67138C3BAA2D532371DD9E4C67BC1E16A
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF7D600D7A9EE5F323.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	0.27918767598683664
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9lRx/9lRJ9lTb9lTb9lSSU9lSSU9laAa/9laA:kBqoxxJhHWSVSEab
MD5:	AB889A32AB9ACD33E816C2422337C69A
SHA1:	1190C6B34DED2D295827C2A88310D10A8B90B59B
SHA-256:	4D6EC54B8D244E63B0F04FBE2B97402A3DF722560AD12F218665BA440F4CEFDA
SHA-512:	BD250855747BB4CEC61814D0E44F810156D390E3E9F120A12935EFDF80ACA33C4777AD66257CCA4E4003FEF0741692894980B9298F01C4CDD2D8A9C7BB522FB6
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF8F906952B71A6755.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	13029
Entropy (8bit):	0.4769399542625979
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9loC9loy9lWGGD2vG97z69goi:kBqoItrGw2vO7zKTi
MD5:	0EAD1EF684F9C5939E3AEEB4C7C90A75
SHA1:	506CEE847B35CFA9B4ED39DD578257C02A91D2F8
SHA-256:	B5D2DCCF3C620562345D7C46ED634B920A7A5A9E218A8F097DA57B27BDC7D0C1
SHA-512:	130ED46A762C0C8C591B6A241DF52C7B7249CB75D3D78C0EC92CF896F8CFE7D7CE338403115D780720D7BBCE61CFC242CFCD32BF46A957ED5406A3ED0A56FB5C
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 10, 2021 18:43:34.620731115 CEST	49720	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.620800018 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.679148912 CEST	443	49720	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.679279089 CEST	49720	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.679295063 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.679388046 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.688399076 CEST	49720	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.688760996 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.749248981 CEST	443	49720	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.749385118 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.751302958 CEST	443	49720	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.751358986 CEST	443	49720	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.751385927 CEST	443	49720	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.751413107 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.751435041 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.751456022 CEST	443	49720	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.751480103 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.751502037 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.752882004 CEST	49720	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.753324032 CEST	49720	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.753325939 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.933041096 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.935025930 CEST	49720	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.940604925 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.940951109 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.941402912 CEST	49720	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.990575075 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.990667105 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.992520094 CEST	443	49720	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.992593050 CEST	49720	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.997828960 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.997908115 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.998156071 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.998250008 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.998317003 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:34.998380899 CEST	443	49720	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:34.998436928 CEST	49720	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.003458023 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.003882885 CEST	49720	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.060642958 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.100895882 CEST	443	49720	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.144645929 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.144785881 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.411659956 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.411915064 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.412178040 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.451406002 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.469211102 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.469394922 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.469443083 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.469470024 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.469494104 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.469538927 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.469561100 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.469563961 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.469583988 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.469589949 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.469614029 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.469646931 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.469671011 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.469695091 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.469696999 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.469726086 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.469741106 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.469753027 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.469798088 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.526621103 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.526669979 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.526729107 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.526761055 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.526797056 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.526876926 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.526892900 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.526921988 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.527204037 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.527235985 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.527276993 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.527285099 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.527293921 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.527311087 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.527324915 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.527350903 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.527415037 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.527440071 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.527461052 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.527482033 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.527483940 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.527523994 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.527605057 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.527631044 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.527651072 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.527678013 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.527704000 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.527728081 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.527750015 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.527767897 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.527775049 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.527802944 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.527846098 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.527889013 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.551136017 CEST	49725	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.552819014 CEST	49726	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.583806992 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.583842039 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.583908081 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.583935976 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.583987951 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.584014893 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.584037066 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.584064007 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.584186077 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.584214926 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.584237099 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.584258080 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.584551096 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.584589005 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.584620953 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.584661961 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.584748030 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.584777117 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.584799051 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.584824085 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.584856987 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.584881067 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.584901094 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.584928036 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.585192919 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.585221052 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:35.585258007 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.585285902 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:35.593559980 CEST	443	49725	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.593720913 CEST	49725	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.594948053 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.595099926 CEST	49726	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.632689953 CEST	49726	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.675033092 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.675717115 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.675751925 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.675853014 CEST	49726	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.690067053 CEST	49726	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.690627098 CEST	49726	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.690928936 CEST	49726	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.705869913 CEST	49725	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.732287884 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.732636929 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.732916117 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.733288050 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.733382940 CEST	49726	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.733793974 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.733869076 CEST	49726	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.741930962 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.741971016 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.741997004 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.742012978 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.742037058 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.742060900 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.742065907 CEST	49726	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.742122889 CEST	49726	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.742876053 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.742909908 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.742958069 CEST	49726	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.743001938 CEST	49726	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.743830919 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.743910074 CEST	49726	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.748148918 CEST	443	49725	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.749742985 CEST	443	49725	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.749775887 CEST	443	49725	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.749861002 CEST	49725	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.749886036 CEST	49725	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.751080036 CEST	49726	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.793227911 CEST	443	49726	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:35.984198093 CEST	49725	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:35.984792948 CEST	49725	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:36.026596069 CEST	443	49725	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:36.026868105 CEST	443	49725	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:36.026896000 CEST	443	49725	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:36.026912928 CEST	443	49725	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:36.026928902 CEST	443	49725	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:36.026968956 CEST	49725	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:36.026998043 CEST	49725	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:36.027029991 CEST	49725	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:36.092643976 CEST	49725	443	192.168.2.6	104.16.19.94
Jun 10, 2021 18:43:36.134967089 CEST	443	49725	104.16.19.94	192.168.2.6
Jun 10, 2021 18:43:37.050934076 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.108969927 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.109000921 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.109087944 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.109122992 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.223552942 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.280829906 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.280872107 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.280896902 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.280917883 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.280941963 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.280967951 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.280985117 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.280993938 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.281023026 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.281056881 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.281091928 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.281116962 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.281121016 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.281171083 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.338071108 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.338118076 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.338144064 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.338169098 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.338195086 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.338217974 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.338242054 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.338277102 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.338350058 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.338376045 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.338414907 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.338450909 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.338473082 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.338475943 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.338499069 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.338525057 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.338641882 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.338668108 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.338709116 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.338713884 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.338742018 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.338757038 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.338768005 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.338804007 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.344132900 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.344464064 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.344736099 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.395277977 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.395328999 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.395420074 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.395421028 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.395447969 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.395459890 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.395495892 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.395539999 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.395564079 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.395582914 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.395605087 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.395623922 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.395646095 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.395649910 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.395694017 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.395864964 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.395894051 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.395921946 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.396003008 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.396094084 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.396123886 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.396187067 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.396207094 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.396298885 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.396347046 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.396356106 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.396387100 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.396542072 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.396573067 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.396603107 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.396631002 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.396744013 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.396792889 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.396795988 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.396845102 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.396953106 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.396985054 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.397013903 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.397028923 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.397160053 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.397188902 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.397221088 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.397249937 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.397370100 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.397416115 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.397442102 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.397465944 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.402803898 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.452502012 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.452550888 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.452577114 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.452601910 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.452626944 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.452662945 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.452739954 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.452766895 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.452792883 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.452831984 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.452879906 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.452903986 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.452976942 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.452991009 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.453129053 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.453159094 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.453191042 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.453238010 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.453296900 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.453351021 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.453356028 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.453394890 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.453526974 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.453557014 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.453593016 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.453622103 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.453723907 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.453751087 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.453772068 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.453800917 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.453912973 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.453939915 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.453967094 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.453998089 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.454123974 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.454152107 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.454180002 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.454202890 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.454267979 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.454308033 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.454329014 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.454376936 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.454426050 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.454457998 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.454483986 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.454511881 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.454627991 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.454658985 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.454682112 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.454701900 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.454794884 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.454814911 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.454873085 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.454974890 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.455005884 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.455029011 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.455071926 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.455202103 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.455229998 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.455252886 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.455276966 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.455410957 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.455440998 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.455466986 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.455487967 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.455528975 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.455555916 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.455570936 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.455594063 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.455714941 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.455746889 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.455770969 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.455802917 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.455909967 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.455939054 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.455961943 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.455984116 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.456080914 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.456109047 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.456136942 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.456165075 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.456399918 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.456429005 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.456454039 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.456480026 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.456567049 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.456597090 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.456645012 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.456655025 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.509988070 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.510029078 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.510054111 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.510077000 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.510078907 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.510119915 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.510133982 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.510159969 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.510174990 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.510185003 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.510209084 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.510211945 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.510255098 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.510448933 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.510483980 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.510524035 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.510600090 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.510612011 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.510687113 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.510704994 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.510734081 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.510833025 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.510859966 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.510891914 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.510919094 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.510973930 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.511056900 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.511090994 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.511136055 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.511172056 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.511218071 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.511221886 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.511265039 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.511327982 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.511354923 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.511377096 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.511411905 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.511495113 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.511543036 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.511548042 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.511591911 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.511823893 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.511854887 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.511878014 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.511888981 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.511929035 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.511934042 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.511976957 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.512056112 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.512083054 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.512108088 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.512135983 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.512237072 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.512267113 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.512320995 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.512417078 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.512443066 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.512526989 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.512572050 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.512623072 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:37.512640953 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:37.512689114 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:51.557981014 CEST	49743	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:51.614964008 CEST	443	49743	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:51.615153074 CEST	49743	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:51.618323088 CEST	49743	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:51.675329924 CEST	443	49743	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:51.677129984 CEST	443	49743	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:51.677180052 CEST	443	49743	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:51.677206993 CEST	443	49743	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:51.677232981 CEST	443	49743	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:51.677247047 CEST	49743	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:51.677292109 CEST	49743	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:51.685260057 CEST	49743	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:51.742537975 CEST	443	49743	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:51.742727041 CEST	49743	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:51.746639013 CEST	49743	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:51.803878069 CEST	443	49743	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:51.803924084 CEST	443	49743	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:51.804280043 CEST	49743	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:51.804672956 CEST	49743	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:51.804698944 CEST	49743	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:51.861730099 CEST	443	49743	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:51.861836910 CEST	49743	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.144681931 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.207369089 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.207400084 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.207499027 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.219928980 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.220841885 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.222063065 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.278553963 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.278597116 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.278624058 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.278645039 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.278660059 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.278687000 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.278697014 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.278707981 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.278724909 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.278733015 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.278757095 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.278776884 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.278790951 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.278822899 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.278834105 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.278875113 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.279738903 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.302809954 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.302990913 CEST	49745	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.303030014 CEST	49746	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.335829973 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.335865021 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.335891008 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.335916996 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.335918903 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.335942030 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.335961103 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.335967064 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.335988998 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.336010933 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.336112976 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.336142063 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.336163998 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.336186886 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.336340904 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.336374998 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.336397886 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.336402893 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.336417913 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.336427927 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.336460114 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.336473942 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.336572886 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.336606026 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.336636066 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.336658955 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.336747885 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.336796045 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.336801052 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.336863995 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.345143080 CEST	443	49746	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.345172882 CEST	443	49745	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.345194101 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.345264912 CEST	49746	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.345328093 CEST	49745	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.345938921 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.346554995 CEST	49746	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.346822977 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.346929073 CEST	49745	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.388689041 CEST	443	49746	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.388966084 CEST	443	49745	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.388989925 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.390142918 CEST	443	49746	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.390166998 CEST	443	49746	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.390187979 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.390204906 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.390228033 CEST	49746	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.390283108 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.390307903 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.391428947 CEST	443	49745	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.391474009 CEST	443	49745	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.391604900 CEST	49745	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.392944098 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.392985106 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.392999887 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.393040895 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.393079042 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.393085003 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.393122911 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.393126965 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.393172026 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.393215895 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.393377066 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.393402100 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.393435955 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.393465996 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.393558979 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.393578053 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.393605947 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.393671036 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.393721104 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.393739939 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.393771887 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.393796921 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.393954039 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.393971920 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.393997908 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.394021988 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.394146919 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.394165039 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.394196987 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.394243956 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.394345045 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.394390106 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.394404888 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.394445896 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.394553900 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.394604921 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.394629002 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.394669056 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.394785881 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.394804001 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.394838095 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.394874096 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.394928932 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.394970894 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.394985914 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.395030975 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.395157099 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.395184994 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.395212889 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.395236969 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.395317078 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.395340919 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.395386934 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.395404100 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.405982018 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.406302929 CEST	49746	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.406589031 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.406829119 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.406987906 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.407043934 CEST	49746	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.407133102 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.413212061 CEST	49745	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.413651943 CEST	49745	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.448370934 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.448405027 CEST	443	49746	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.448602915 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.448623896 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.448735952 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.448839903 CEST	443	49746	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.448863029 CEST	443	49746	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.448914051 CEST	49746	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.448950052 CEST	49746	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.449666977 CEST	443	49746	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.449696064 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.449712038 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.449727058 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.449737072 CEST	49746	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.449747086 CEST	443	49746	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.449760914 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.449812889 CEST	49746	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.449995995 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.450025082 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.450067043 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.450073004 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.450090885 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.450113058 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.450146914 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.450165987 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.450252056 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.450275898 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.450319052 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.450339079 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.450417995 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.450459003 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.450479031 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.450515985 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.450606108 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.450659037 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.450663090 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.450675964 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.450706005 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.450733900 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.450751066 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.450795889 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.450814009 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.450855970 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.450949907 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.450998068 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.451004028 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.451049089 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.451159000 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.451188087 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.451306105 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.451309919 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.451327085 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.451349020 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.451373100 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.451400042 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.451535940 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.451561928 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.451610088 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.451637030 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.451668024 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.451755047 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.451817036 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.451842070 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.451885939 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.451886892 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.451913118 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.451951027 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.452023983 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.452053070 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.452088118 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.452136993 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.452219963 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.452256918 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.452307940 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.452348948 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.452399969 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.452426910 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.452459097 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.452503920 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.452574015 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.452614069 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.452711105 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.452714920 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.452735901 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.452807903 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.452838898 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.452896118 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.452919960 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.452974081 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.453062057 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.453090906 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.453134060 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.453178883 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.453211069 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.453253031 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.453267097 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.453396082 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.453417063 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.453443050 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.453562021 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.453593969 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.453618050 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.453670025 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.453697920 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.453767061 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.453789949 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.453835964 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.453983068 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.454005957 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.454032898 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.454061985 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.454107046 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.454130888 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.454160929 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.454191923 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.454303980 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.454330921 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.454381943 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.454482079 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.454498053 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.454586983 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.455369949 CEST	443	49745	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.455755949 CEST	443	49745	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.455776930 CEST	443	49745	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.455791950 CEST	443	49745	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.455828905 CEST	49745	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.455849886 CEST	443	49745	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.455853939 CEST	49745	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.455889940 CEST	49745	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.457007885 CEST	49745	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.460309029 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.460340977 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.460360050 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.460376978 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.460401058 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.460427046 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.460488081 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.460552931 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.461267948 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.461294889 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.461379051 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.461431026 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.461846113 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.461934090 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.464482069 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.464514971 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.464598894 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.464605093 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.464659929 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.465086937 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.465109110 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.465162992 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.465558052 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.465593100 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.465641022 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.465697050 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.466594934 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.466612101 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.466701984 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.467573881 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.467605114 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.467650890 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.467677116 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.468600035 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.468628883 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.468712091 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.469582081 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.469616890 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.469676971 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.469706059 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.470640898 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.470670938 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.470738888 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.470771074 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.471616983 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.471648932 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.471729994 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.471750021 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.472625971 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.472723007 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.491899014 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.491952896 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.492043972 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.492439985 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.492471933 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.493041992 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.493616104 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.493690968 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.493737936 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.493774891 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.499341965 CEST	443	49745	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.503917933 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.503987074 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.504021883 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.504053116 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.504204988 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.504254103 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.504280090 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.504297018 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.505297899 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.505379915 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.505405903 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.505433083 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.507762909 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.507821083 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.507865906 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.507869005 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.507891893 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.507909060 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.507915020 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.507949114 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.507952929 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.507987022 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.508009911 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.508033037 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.508141994 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.508188009 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.508213997 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.508229971 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.508285046 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.508330107 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.508335114 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.508369923 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.508450031 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.508496046 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.508518934 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.508542061 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.508635044 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.508675098 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.508697987 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.508728027 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.508797884 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.508842945 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.508873940 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.508893013 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.509052992 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.509099960 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.509165049 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.509181023 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.509182930 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.509210110 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.509233952 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.509265900 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.509377003 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.509406090 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.509433985 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.509459019 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.509715080 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.509746075 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.509771109 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.509795904 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.509797096 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.509835958 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.509884119 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.509893894 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.509910107 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.509938002 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.509962082 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.510068893 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.510097027 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.510123968 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.510148048 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.510253906 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.510282993 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.510307074 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.510328054 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.510421038 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.510448933 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.510473013 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.510498047 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.510637999 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.510668993 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.510694027 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.510723114 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.510727882 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.510768890 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.510792017 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.510835886 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.510899067 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.510925055 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.510946989 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.510967016 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.511085033 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.511109114 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.511136055 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.511161089 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.511275053 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.511295080 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.511329889 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.511348963 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.534626961 CEST	443	49746	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.603717089 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.605031013 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.662338018 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:54.663786888 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:54.690136909 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.809153080 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.809185982 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.809257030 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.809293032 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.809453964 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.809473991 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.809509993 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.809550047 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.810199976 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.810239077 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.810307026 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.810331106 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.810839891 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.810870886 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.810925961 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.810960054 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.811621904 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.811650991 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.811712027 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.811736107 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.812453032 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.812479973 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.812530041 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.812572956 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.813299894 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.813327074 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.813390970 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.813416004 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.814167976 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.814202070 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.814285994 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.814344883 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.814977884 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.815002918 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.815073967 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.815097094 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.815824032 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.815853119 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.815903902 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.815932035 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.816633940 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.816658974 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.816708088 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.816737890 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.817459106 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.817486048 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.817590952 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.818339109 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.818367004 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.818419933 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.818456888 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.819143057 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.819158077 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.819221973 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.819267035 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.819931030 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.819955111 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.820008039 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.820034027 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.820765972 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.820790052 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.820851088 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.821605921 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.821629047 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.821728945 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.822437048 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.822458982 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.822506905 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.822575092 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.823256016 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.823281050 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.823331118 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.823362112 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.824096918 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.824121952 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.824177980 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.824210882 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.824924946 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.824949980 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.825001001 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.825061083 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.825771093 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.825797081 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.825856924 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.825892925 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.826590061 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.826613903 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.826680899 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.827415943 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.827440977 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.827497005 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.827550888 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.828248978 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.828274012 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.828319073 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.828351021 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.829092979 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.829117060 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.829169035 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.829205990 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.829941034 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.829967022 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.830008984 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.830044031 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.830777884 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.830801010 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.830841064 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.830874920 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.831610918 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.831629992 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.831686020 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.832417965 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.832439899 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.832477093 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.832531929 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.833262920 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.833280087 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.833327055 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.833352089 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.834095955 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.834115982 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.834158897 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.834199905 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.834914923 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.834933043 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.834961891 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.834985018 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.853460073 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.853497982 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.853607893 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.853792906 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.853821039 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.853863001 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.853915930 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.854612112 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.854650021 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.854685068 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.854718924 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.855448008 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.855477095 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.855530024 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.855575085 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.856271982 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.856297016 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.856340885 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.856367111 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.857096910 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.857120037 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.857161999 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.857203007 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:54.857954979 CEST	443	49744	104.18.10.207	192.168.2.6
Jun 10, 2021 18:43:54.858043909 CEST	49744	443	192.168.2.6	104.18.10.207
Jun 10, 2021 18:43:55.591988087 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:55.651139975 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:55.651175976 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:55.651196957 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:55.651396036 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:55.902757883 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:55.960256100 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:55.960299015 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:55.960321903 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:55.960345030 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:55.960361958 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:55.960386038 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:55.960536003 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:55.960597038 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:55.960719109 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:55.960747957 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:55.960784912 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:55.960784912 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:55.960809946 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:55.960840940 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:55.960880041 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.018049002 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.018091917 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.018126965 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.018157005 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.018183947 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.018212080 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.018219948 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.018256903 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.018274069 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.018296957 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.018301964 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.018325090 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.018347025 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.018409967 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.018449068 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.018484116 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.018527985 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.018532991 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.018562078 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.018578053 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.018604994 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.018790007 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.018826008 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.018841982 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.018865108 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.075377941 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.075453997 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.075496912 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.075548887 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.075558901 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.075601101 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.075634003 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.075647116 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.075654984 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.075659037 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.075706959 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.075753927 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.075794935 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.075807095 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.075831890 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.075908899 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.075953007 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.075958967 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.076008081 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.076137066 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.076178074 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.076193094 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.076230049 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.076275110 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.076319933 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.076342106 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.076387882 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.076565981 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.076612949 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.076617956 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.076666117 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.076679945 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.076704025 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.076706886 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.076749086 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.076782942 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.076828003 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.076831102 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.076870918 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.076976061 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.077024937 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.077032089 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.077065945 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.077151060 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.077189922 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.077207088 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.077238083 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.132739067 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.132780075 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.132798910 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.132827044 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.132852077 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.132878065 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.132910967 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.132967949 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.133058071 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.133086920 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.133125067 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.133164883 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.133200884 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.133229971 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.133255959 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.133302927 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.133347034 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.133385897 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.133400917 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.133425951 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.133554935 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.133583069 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.133608103 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.133631945 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.133708954 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.133738995 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.133764982 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.133794069 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.133900881 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.133930922 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.133959055 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.133986950 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.134100914 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.134130955 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.134155989 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.134188890 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.134243965 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.134293079 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.134313107 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.134352922 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.134443045 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.134469032 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.134495974 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.134521961 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.134617090 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.134644985 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.134669065 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.134695053 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.134783983 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.134813070 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.134865999 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.134995937 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.135025978 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.135051966 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.135082960 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.135149956 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.135178089 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.135207891 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.135236979 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.135329008 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.135354042 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.135385036 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.135405064 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.135524035 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.135551929 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.135582924 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.135603905 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.135705948 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.135726929 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.135773897 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.135817051 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.135876894 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.135869980 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.135943890 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.136074066 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.136101007 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.136126995 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.136153936 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.136192083 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.136225939 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.136238098 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.136293888 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.136369944 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.136399031 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.136437893 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.136464119 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.136533976 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.136559010 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.136595011 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.136620045 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.189973116 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.189997911 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.190016031 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.190032005 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.190058947 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.190066099 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.190100908 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.190128088 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.190150976 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.190181971 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.190195084 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.190197945 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.190222025 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.190244913 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.190325975 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.190373898 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.190399885 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.190443993 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.190496922 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.190541029 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.190546036 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.190587997 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.190676928 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.190720081 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.190771103 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.190815926 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.190874100 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.190912008 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.190923929 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.190956116 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.191067934 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.191087961 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.191131115 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.191143036 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.191216946 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.191268921 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.191296101 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.191343069 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.191406965 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.191452026 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.191492081 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.191533089 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.191586018 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.191617966 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.191641092 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.191668034 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.191747904 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.191766977 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.191901922 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.191915989 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.192095041 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.192114115 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.192136049 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.192156076 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.192183018 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.192240000 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.192281008 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.192297935 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.192338943 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.192401886 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.192459106 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.192480087 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.192514896 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.192563057 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.192652941 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.192673922 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.192718983 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.192768097 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.192791939 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.192820072 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.192848921 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.192892075 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.192966938 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.192996025 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.193031073 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.193074942 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.193171024 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.193197966 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.193233013 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.193285942 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.193325996 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.193382978 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.193403006 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.193460941 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.193536043 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.193567038 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.193595886 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.193651915 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.193711996 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.193773031 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.193783045 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.193823099 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.193876982 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.193926096 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.193928957 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.193986893 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.194048882 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.194067955 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.194108963 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.194156885 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.196744919 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.196773052 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.196784973 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.196798086 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.196845055 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.196861029 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.196921110 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.196928024 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.196945906 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.196965933 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197005033 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197005987 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197048903 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197055101 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197099924 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197113991 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197139025 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197160959 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197161913 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197184086 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197211981 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197238922 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197280884 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197280884 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197305918 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197324991 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197343111 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197352886 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197371006 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197382927 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197412968 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197480917 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197510004 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197535038 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197535992 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197559118 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197562933 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197592974 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197626114 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197633028 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197652102 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197665930 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197696924 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197726965 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197751045 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197776079 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197787046 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197802067 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197824001 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197828054 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197876930 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197894096 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197938919 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197942972 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.197957993 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.197985888 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.198015928 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.198031902 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.198051929 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.198076963 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.198106050 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.247889996 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.247931004 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.247952938 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.247978926 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.248023987 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.248059034 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.248065948 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.248115063 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.248210907 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.248241901 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.248274088 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.248313904 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.248383999 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.248406887 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.248437881 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.248466015 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.248596907 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.248625040 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.248657942 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.248684883 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:56.248709917 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:56.248758078 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:57.220360041 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:57.280915976 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:57.280946016 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:57.281152010 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:57.304070950 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:57.361392975 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:57.361419916 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:57.361438990 CEST	443	49721	77.79.239.202	192.168.2.6
Jun 10, 2021 18:43:57.361468077 CEST	49721	443	192.168.2.6	77.79.239.202
Jun 10, 2021 18:43:57.361519098 CEST	49721	443	192.168.2.6	77.79.239.202

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 10, 2021 18:43:24.770554066 CEST	63791	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:24.829024076 CEST	53	63791	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:24.891834974 CEST	64267	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:24.954615116 CEST	53	64267	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:25.252383947 CEST	49448	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:25.303982973 CEST	53	49448	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:26.097203970 CEST	60342	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:26.147588968 CEST	53	60342	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:26.913009882 CEST	61346	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:26.963500977 CEST	53	61346	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:27.706779957 CEST	51774	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:27.765357971 CEST	53	51774	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:29.111387014 CEST	56023	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:29.161721945 CEST	53	56023	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:30.037174940 CEST	58384	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:30.086981058 CEST	53	58384	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:30.979362965 CEST	60261	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:31.029695034 CEST	53	60261	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:31.765604973 CEST	56061	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:31.820569992 CEST	53	56061	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:32.562485933 CEST	58336	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:32.613034964 CEST	53	58336	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:32.853272915 CEST	53781	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:32.912270069 CEST	53	53781	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:34.533204079 CEST	54064	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:34.560137987 CEST	52811	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:34.610130072 CEST	53	54064	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:34.622567892 CEST	53	52811	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:35.423283100 CEST	55299	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:35.472043991 CEST	63745	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:35.476499081 CEST	53	55299	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:35.532077074 CEST	53	63745	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:36.130079031 CEST	50055	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:36.192028046 CEST	53	50055	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:37.070686102 CEST	61374	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:37.123610020 CEST	53	61374	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:37.874638081 CEST	50339	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:37.927684069 CEST	53	50339	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:38.759140968 CEST	63307	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:38.812499046 CEST	53	63307	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:39.614996910 CEST	49694	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:39.667494059 CEST	53	49694	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:40.726308107 CEST	54982	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:40.780961037 CEST	53	54982	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:41.630234957 CEST	50010	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:41.682410002 CEST	53	50010	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:42.581974983 CEST	63718	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:42.640757084 CEST	53	63718	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:43.788866997 CEST	62116	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:43.840656042 CEST	53	62116	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:44.580037117 CEST	63816	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:44.630212069 CEST	53	63816	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:51.496695042 CEST	55014	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:51.555165052 CEST	53	55014	8.8.8.8	192.168.2.6
Jun 10, 2021 18:43:54.237535954 CEST	62208	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:43:54.298595905 CEST	53	62208	8.8.8.8	192.168.2.6
Jun 10, 2021 18:44:00.363775015 CEST	57574	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:44:00.424689054 CEST	53	57574	8.8.8.8	192.168.2.6
Jun 10, 2021 18:44:02.846291065 CEST	51818	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:44:02.899427891 CEST	53	51818	8.8.8.8	192.168.2.6
Jun 10, 2021 18:44:03.859432936 CEST	51818	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:44:03.863354921 CEST	56628	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:44:03.912470102 CEST	53	51818	8.8.8.8	192.168.2.6
Jun 10, 2021 18:44:03.927293062 CEST	53	56628	8.8.8.8	192.168.2.6
Jun 10, 2021 18:44:04.874840021 CEST	56628	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:44:04.875228882 CEST	51818	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:44:04.928128958 CEST	53	51818	8.8.8.8	192.168.2.6
Jun 10, 2021 18:44:04.928179979 CEST	53	56628	8.8.8.8	192.168.2.6
Jun 10, 2021 18:44:05.874913931 CEST	56628	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:44:05.928047895 CEST	53	56628	8.8.8.8	192.168.2.6
Jun 10, 2021 18:44:06.891150951 CEST	51818	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:44:06.944458008 CEST	53	51818	8.8.8.8	192.168.2.6
Jun 10, 2021 18:44:07.891133070 CEST	56628	53	192.168.2.6	8.8.8.8
Jun 10, 2021 18:44:07.945923090 CEST	53	56628	8.8.8.8	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jun 10, 2021 18:43:34.533204079 CEST	192.168.2.6	8.8.8.8	0x2b12	Standard query (0)	discovercommunitynetwork.com	A (IP address)	IN (0x0001)
Jun 10, 2021 18:43:35.423283100 CEST	192.168.2.6	8.8.8.8	0xf28f	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)
Jun 10, 2021 18:43:35.472043991 CEST	192.168.2.6	8.8.8.8	0x2bf6	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)
Jun 10, 2021 18:43:51.496695042 CEST	192.168.2.6	8.8.8.8	0x7f89	Standard query (0)	discovercommunitynetwork.com	A (IP address)	IN (0x0001)
Jun 10, 2021 18:43:54.237535954 CEST	192.168.2.6	8.8.8.8	0x23d4	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jun 10, 2021 18:43:34.610130072 CEST	8.8.8.8	192.168.2.6	0x2b12	No error (0)	discovercommunitynetwork.com		77.79.239.202	A (IP address)	IN (0x0001)
Jun 10, 2021 18:43:35.476499081 CEST	8.8.8.8	192.168.2.6	0xf28f	No error (0)	code.jquery.com	cds.s5x3j6q5.hwcdn.net		CNAME (Canonical name)	IN (0x0001)
Jun 10, 2021 18:43:35.532077074 CEST	8.8.8.8	192.168.2.6	0x2bf6	No error (0)	cdnjs.cloudflare.com		104.16.19.94	A (IP address)	IN (0x0001)
Jun 10, 2021 18:43:35.532077074 CEST	8.8.8.8	192.168.2.6	0x2bf6	No error (0)	cdnjs.cloudflare.com		104.16.18.94	A (IP address)	IN (0x0001)
Jun 10, 2021 18:43:51.555165052 CEST	8.8.8.8	192.168.2.6	0x7f89	No error (0)	discovercommunitynetwork.com		77.79.239.202	A (IP address)	IN (0x0001)
Jun 10, 2021 18:43:54.298595905 CEST	8.8.8.8	192.168.2.6	0x23d4	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)
Jun 10, 2021 18:43:54.298595905 CEST	8.8.8.8	192.168.2.6	0x23d4	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Jun 10, 2021 18:43:34.751456022 CEST	77.79.239.202	443	192.168.2.6	49720	CN=discovercommunitynetwork.com CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Sun Apr 11 02:00:00 CEST 2021 Mon May 18 02:00:00 CEST 2015 Thu Jan 01 01:00:00 CET 2004	Sun Jul 11 01:59:59 CEST 2021 Sun May 18 01:59:59 CEST 2025 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US	CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon May 18 02:00:00 CEST 2015	Sun May 18 01:59:59 CEST 2025
					CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Jun 10, 2021 18:43:34.751502037 CEST	77.79.239.202	443	192.168.2.6	49721	CN=discovercommunitynetwork.com CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Sun Apr 11 02:00:00 CEST 2021 Mon May 18 02:00:00 CEST 2015 Thu Jan 01 01:00:00 CET 2004	Sun Jul 11 01:59:59 CEST 2021 Sun May 18 01:59:59 CEST 2025 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US	CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon May 18 02:00:00 CEST 2015	Sun May 18 01:59:59 CEST 2025
					CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Jun 10, 2021 18:43:35.675751925 CEST	104.16.19.94	443	192.168.2.6	49726	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Oct 21 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Oct 21 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 10, 2021 18:43:35.675751925 CEST	104.16.19.94	443	192.168.2.6	49726	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jun 10, 2021 18:43:35.749775887 CEST	104.16.19.94	443	192.168.2.6	49725	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Oct 21 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Oct 21 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 10, 2021 18:43:35.749775887 CEST	104.16.19.94	443	192.168.2.6	49725	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jun 10, 2021 18:43:51.677232981 CEST	77.79.239.202	443	192.168.2.6	49743	CN=discovercommunitynetwork.com CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Sun Apr 11 02:00:00 CEST 2021 Mon May 18 02:00:00 CEST 2015 Thu Jan 01 01:00:00 CET 2004	Sun Jul 11 01:59:59 CEST 2021 Sun May 18 01:59:59 CEST 2025 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0	37f463bf4616ecd445d4a1937da06e19
					CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US	CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon May 18 02:00:00 CEST 2015	Sun May 18 01:59:59 CEST 2025
					CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Jun 10, 2021 18:43:54.390166998 CEST	104.18.10.207	443	192.168.2.6	49746	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=California, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Mar 01 01:00:00 CET 2021 Mon Jan 27 13:48:08 CET 2020	Tue Mar 01 00:59:59 CET 2022 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 10, 2021 18:43:54.390166998 CEST	104.18.10.207	443	192.168.2.6	49746	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jun 10, 2021 18:43:54.390204906 CEST	104.18.10.207	443	192.168.2.6	49744	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=California, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Mar 01 01:00:00 CET 2021 Mon Jan 27 13:48:08 CET 2020	Tue Mar 01 00:59:59 CET 2022 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 10, 2021 18:43:54.390204906 CEST	104.18.10.207	443	192.168.2.6	49744	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jun 10, 2021 18:43:54.391474009 CEST	104.18.10.207	443	192.168.2.6	49745	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=California, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Mar 01 01:00:00 CET 2021 Mon Jan 27 13:48:08 CET 2020	Tue Mar 01 00:59:59 CET 2022 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 10, 2021 18:43:54.391474009 CEST	104.18.10.207	443	192.168.2.6	49745	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 4644 Parent PID: 792

General

Start time:	18:43:31
Start date:	10/06/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff721e20000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: iexplore.exe PID: 1724 Parent PID: 4644

General

Start time:	18:43:32
Start date:	10/06/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4644 CREDAT:17410 /prefetch:2
Imagebase:	0xc90000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Disassembly

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report https://discovercommunitynetwork.com/mcief/FBG

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Overview

Dropped Files

Sigma Overview

Signature Overview

AV Detection:

Phishing:

Compliance:

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 4644 Parent PID: 792

General

Chronological Activities

Analysis Process: iexplore.exe PID: 1724 Parent PID: 4644

General

Chronological Activities

Disassembly