Loading ...

Play interactive tourEdit tour

Windows Analysis Report https://click.e.usa.experian.com/?qs=77483f09f060edb274867ba2c3f0ae32fd65f740de4ad5c2b7222ea7ae0c35ee5f3b8b000dbedd71a1993a91affed1a94e43d9b6d343a61727435946157cac4b

Overview

General Information

Sample URL:https://click.e.usa.experian.com/?qs=77483f09f060edb274867ba2c3f0ae32fd65f740de4ad5c2b7222ea7ae0c35ee5f3b8b000dbedd71a1993a91affed1a94e43d9b6d343a61727435946157cac4b
Analysis ID:435621
Infos:

Most interesting Screenshot:

Detection

Score:0
Range:0 - 100
Whitelisted:false
Confidence:80%

Signatures

No high impact signatures.

Classification

Process Tree

  • System is w10x64
  • iexplore.exe (PID: 4408 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)
    • iexplore.exe (PID: 5972 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4408 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)
  • cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exeFile opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dllJump to behavior
Source: unknownHTTPS traffic detected: 136.147.129.134:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknownHTTPS traffic detected: 136.147.129.134:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknownHTTPS traffic detected: 107.154.226.20:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknownHTTPS traffic detected: 107.154.226.20:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknownHTTPS traffic detected: 107.154.226.20:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: msapplication.xml0.2.drString found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0xb26f415c,0x01d7631c</date><accdate>0xb26f415c,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml0.2.drString found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0xb26f415c,0x01d7631c</date><accdate>0xb26f415c,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml5.2.drString found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0xb2766875,0x01d7631c</date><accdate>0xb2766875,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml5.2.drString found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0xb2766875,0x01d7631c</date><accdate>0xb2766875,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml7.2.drString found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0xb2766875,0x01d7631c</date><accdate>0xb2766875,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: msapplication.xml7.2.drString found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0xb2766875,0x01d7631c</date><accdate>0xb2766875,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Youtube.url"/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: unknownDNS traffic detected: queries for: click.e.usa.experian.com
Source: msapplication.xml.2.drString found in binary or memory: http://www.amazon.com/
Source: msapplication.xml1.2.drString found in binary or memory: http://www.google.com/
Source: msapplication.xml2.2.drString found in binary or memory: http://www.live.com/
Source: msapplication.xml3.2.drString found in binary or memory: http://www.nytimes.com/
Source: msapplication.xml4.2.drString found in binary or memory: http://www.reddit.com/
Source: msapplication.xml5.2.drString found in binary or memory: http://www.twitter.com/
Source: msapplication.xml6.2.drString found in binary or memory: http://www.wikipedia.com/
Source: msapplication.xml7.2.drString found in binary or memory: http://www.youtube.com/
Source: _Incapsula_Resource[1].htm.4.drString found in binary or memory: https://fonts.googleapis.com/css2?family=Inter:wght
Source: css2[1].css.4.drString found in binary or memory: https://fonts.gstatic.com/s/inter/v3/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuFuYMZs.woff)
Source: css2[1].css.4.drString found in binary or memory: https://fonts.gstatic.com/s/inter/v3/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuI6fMZs.woff)
Source: css2[1].css.4.drString found in binary or memory: https://fonts.gstatic.com/s/inter/v3/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfMZs.woff)
Source: css2[1].css.4.drString found in binary or memory: https://fonts.gstatic.com/s/inter/v3/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuOKfMZs.woff)
Source: ~DFA1F525A9DC4E2592.TMP.2.dr, {DA9AB906-CF0F-11EB-90E5-ECF4BB570DC9}.dat.2.drString found in binary or memory: https://usa.experian.com/login/index?refUrl=overview&pc=crm_exp_0&cc=emm_a_m_act_8990120210609_AutoT
Source: _Incapsula_Resource[1].htm.4.drString found in binary or memory: https://www.imperva.com/why-am-i-seeing-this-page/?src=23&amp;utm_source=blockingpages
Source: unknownNetwork traffic detected: HTTP traffic on port 49727 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49718
Source: unknownNetwork traffic detected: HTTP traffic on port 49716 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49717
Source: unknownNetwork traffic detected: HTTP traffic on port 49715 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49716
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49727
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49715
Source: unknownNetwork traffic detected: HTTP traffic on port 49717 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49718 -> 443
Source: unknownHTTPS traffic detected: 136.147.129.134:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknownHTTPS traffic detected: 136.147.129.134:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknownHTTPS traffic detected: 107.154.226.20:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknownHTTPS traffic detected: 107.154.226.20:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknownHTTPS traffic detected: 107.154.226.20:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: classification engineClassification label: clean0.win@3/21@3/2
Source: C:\Program Files\internet explorer\iexplore.exeFile created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{DA9AB904-CF0F-11EB-90E5-ECF4BB570DC9}.datJump to behavior
Source: C:\Program Files\internet explorer\iexplore.exeFile created: C:\Users\user\AppData\Local\Temp\~DF74791A8792FE6A3E.TMPJump to behavior
Source: C:\Program Files\internet explorer\iexplore.exeFile read: C:\Users\desktop.iniJump to behavior
Source: unknownProcess created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exeProcess created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4408 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exeProcess created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4408 CREDAT:17410 /prefetch:2Jump to behavior
Source: Window RecorderWindow detected: More than 3 window changes detected
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exeFile opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dllJump to behavior

Mitre Att&ck Matrix

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
Valid AccountsWindows Management InstrumentationPath InterceptionProcess Injection1Masquerading1OS Credential DumpingFile and Directory Discovery1Remote ServicesData from Local SystemExfiltration Over Other Network MediumEncrypted Channel2Eavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition
Default AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsProcess Injection1LSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable MediaExfiltration Over BluetoothNon-Application Layer Protocol1Exploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout
Domain AccountsAt (Linux)Logon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared DriveAutomated ExfiltrationApplication Layer Protocol2Exploit SS7 to Track Device LocationObtain Device Cloud BackupsDelete Device Data

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
https://click.e.usa.experian.com/?qs=77483f09f060edb274867ba2c3f0ae32fd65f740de4ad5c2b7222ea7ae0c35ee5f3b8b000dbedd71a1993a91affed1a94e43d9b6d343a61727435946157cac4b0%VirustotalBrowse
https://click.e.usa.experian.com/?qs=77483f09f060edb274867ba2c3f0ae32fd65f740de4ad5c2b7222ea7ae0c35ee5f3b8b000dbedd71a1993a91affed1a94e43d9b6d343a61727435946157cac4b0%Avira URL Cloudsafe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

SourceDetectionScannerLabelLink
http://www.wikipedia.com/0%URL Reputationsafe
http://www.wikipedia.com/0%URL Reputationsafe
http://www.wikipedia.com/0%URL Reputationsafe
http://www.wikipedia.com/0%URL Reputationsafe

Domains and IPs

Contacted Domains

NameIPActiveMaliciousAntivirus DetectionReputation
usa.experian.com
107.154.226.20
truefalse
    high
    click.e.usa.experian.com
    136.147.129.134
    truefalse
      high

      URLs from Memory and Binaries

      NameSourceMaliciousAntivirus DetectionReputation
      http://www.wikipedia.com/msapplication.xml6.2.drfalse
      • URL Reputation: safe
      • URL Reputation: safe
      • URL Reputation: safe
      • URL Reputation: safe
      unknown
      http://www.amazon.com/msapplication.xml.2.drfalse
        high
        http://www.nytimes.com/msapplication.xml3.2.drfalse
          high
          http://www.live.com/msapplication.xml2.2.drfalse
            high
            http://www.reddit.com/msapplication.xml4.2.drfalse
              high
              http://www.twitter.com/msapplication.xml5.2.drfalse
                high
                http://www.youtube.com/msapplication.xml7.2.drfalse
                  high
                  https://www.imperva.com/why-am-i-seeing-this-page/?src=23&amp;utm_source=blockingpages_Incapsula_Resource[1].htm.4.drfalse
                    high

                    Contacted IPs

                    • No. of IPs < 25%
                    • 25% < No. of IPs < 50%
                    • 50% < No. of IPs < 75%
                    • 75% < No. of IPs

                    Public

                    IPDomainCountryFlagASNASN NameMalicious
                    107.154.226.20
                    usa.experian.comUnited States
                    19551INCAPSULAUSfalse
                    136.147.129.134
                    click.e.usa.experian.comUnited States
                    22606EXACT-7USfalse

                    General Information

                    Joe Sandbox Version:32.0.0 Black Diamond
                    Analysis ID:435621
                    Start date:16.06.2021
                    Start time:19:00:06
                    Joe Sandbox Product:CloudBasic
                    Overall analysis duration:0h 3m 22s
                    Hypervisor based Inspection enabled:false
                    Report type:full
                    Cookbook file name:browseurl.jbs
                    Sample URL:https://click.e.usa.experian.com/?qs=77483f09f060edb274867ba2c3f0ae32fd65f740de4ad5c2b7222ea7ae0c35ee5f3b8b000dbedd71a1993a91affed1a94e43d9b6d343a61727435946157cac4b
                    Analysis system description:Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
                    Number of analysed new started processes analysed:16
                    Number of new started drivers analysed:0
                    Number of existing processes analysed:0
                    Number of existing drivers analysed:0
                    Number of injected processes analysed:0
                    Technologies:
                    • HCA enabled
                    • EGA enabled
                    • HDC enabled
                    • AMSI enabled
                    Analysis Mode:default
                    Analysis stop reason:Timeout
                    Detection:CLEAN
                    Classification:clean0.win@3/21@3/2
                    Cookbook Comments:
                    • Adjust boot time
                    • Enable AMSI
                    Warnings:
                    Show All
                    • Exclude process from analysis (whitelisted): taskhostw.exe, BackgroundTransferHost.exe, ielowutil.exe, backgroundTaskHost.exe, SgrmBroker.exe, svchost.exe
                    • Excluded IPs from analysis (whitelisted): 104.43.139.144, 20.82.209.183, 40.88.32.150, 23.211.6.115, 184.24.20.248, 172.217.16.138, 142.250.186.67, 23.35.236.56, 152.199.19.161, 20.82.210.154, 173.222.108.226, 173.222.108.210, 51.103.5.186
                    • Excluded domains from analysis (whitelisted): gstaticadssl.l.google.com, au.download.windowsupdate.com.edgesuite.net, store-images.s-microsoft.com-c.edgekey.net, iris-de-prod-azsc-neu-b.northeurope.cloudapp.azure.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, arc.msn.com, e11290.dspg.akamaiedge.net, iecvlist.microsoft.com, skypedataprdcoleus15.cloudapp.net, e12564.dspb.akamaiedge.net, wns.notify.trafficmanager.net, go.microsoft.com, audownload.windowsupdate.nsatc.net, arc.trafficmanager.net, watson.telemetry.microsoft.com, prod.fs.microsoft.com.akadns.net, au-bg-shim.trafficmanager.net, iris-de-prod-azsc-neu.northeurope.cloudapp.azure.com, fonts.googleapis.com, client.wns.windows.com, fs.microsoft.com, fonts.gstatic.com, ie9comview.vo.msecnd.net, e1723.g.akamaiedge.net, ctldl.windowsupdate.com, skypedataprdcolcus16.cloudapp.net, a767.dscg3.akamai.net, store-images.s-microsoft.com, blobcollector.events.data.trafficmanager.net, go.microsoft.com.edgekey.net, cs9.wpc.v0cdn.net
                    • Not all processes where analyzed, report is missing behavior information

                    Simulations

                    Behavior and APIs

                    No simulations

                    Joe Sandbox View / Context

                    IPs

                    No context

                    Domains

                    No context

                    ASN

                    No context

                    JA3 Fingerprints

                    No context

                    Dropped Files

                    No context

                    Created / dropped Files

                    C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{DA9AB904-CF0F-11EB-90E5-ECF4BB570DC9}.dat
                    Process:C:\Program Files\internet explorer\iexplore.exe
                    File Type:Microsoft Word Document
                    Category:dropped
                    Size (bytes):30296
                    Entropy (8bit):1.8529438809422762
                    Encrypted:false
                    SSDEEP:96:r1ZOZF2dWzt9bfKAXKMS/qmlQgxfWA+6X:r1ZOZF2dWzthfKBMhpufWcX
                    MD5:D46CBE8741D364E40C337F4616807853
                    SHA1:3A70021ABD9C19209E758A3990D57344D6ABCA1E
                    SHA-256:95758416EAD47E0128864A1204F1AEAD255180E2543BEAAB0906F6A0F87C9162
                    SHA-512:190E55EEB54233B387B1DB179235CCECAD6EB558EE59F2D599A71902CD66E152C1D38731D2B503F20A2645840946BCB0AFDAA6A4D103E82BDB7C1B04A9AF65EE
                    Malicious:false
                    Reputation:low
                    Preview: ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                    C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{DA9AB906-CF0F-11EB-90E5-ECF4BB570DC9}.dat
                    Process:C:\Program Files\internet explorer\iexplore.exe
                    File Type:Microsoft Word Document
                    Category:dropped
                    Size (bytes):24356
                    Entropy (8bit):1.6702910473904917
                    Encrypted:false
                    SSDEEP:48:IwIGcprJGwpaiG4pQSGrapbSRGQpB6GHHpc8TGUp8cGzYpm7sGopRZqGGb8pm:r8ZjQS6UBSrjB20WIMgXLg
                    MD5:90E87DFEE87C4D2AAFB8C95E59DF10F0
                    SHA1:62863AA4CBF01B3D4EC675C9EE256D538B512ECE
                    SHA-256:31C8DF47F47A56E89F98F5930108EF291044E29184CD22BA6D35C42EACF4326F
                    SHA-512:03A560E5874A0D353B4D9D8128DEB08F615EF673FD2F92721D747D841A61F4CE9D21CA668DD18A55C8F3C7B7E85F00328C8651790AC3F01D0CB2C0628552266D
                    Malicious:false
                    Reputation:low
                    Preview: ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                    C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{E12DF4B3-CF0F-11EB-90E5-ECF4BB570DC9}.dat
                    Process:C:\Program Files\internet explorer\iexplore.exe
                    File Type:Microsoft Word Document
                    Category:dropped
                    Size (bytes):16984
                    Entropy (8bit):1.5650355208333895
                    Encrypted:false
                    SSDEEP:48:IwXGcprWGwpafG4pQbGrapbSYGQpK6G7HpRE7TGIpG:rdZOQx6PBSgAVTExA
                    MD5:1C0FA14572224EFC3C8F976D743C5ABD
                    SHA1:10DDDD61D45432FD37DBA1414555EA2BCFBD4AD6
                    SHA-256:EA92BC2E0B426D06D5F05DAE2491BBCBFD54D32D5F1AB1657F42EF5F0D221B4A
                    SHA-512:6043033B56720215ECE8673437AE922C23C467CE1C219CBC6E4A18308475468A02B7762BB4178403C9B69A52475DDBD6CCBE931228327EFD76897E3773D6F738
                    Malicious:false
                    Reputation:low
                    Preview: ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                    C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
                    Process:C:\Program Files\internet explorer\iexplore.exe
                    File Type:XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
                    Category:dropped
                    Size (bytes):657
                    Entropy (8bit):5.109459117142498
                    Encrypted:false
                    SSDEEP:12:TMHdNMNxOE4awaTnWimI002EtM3MHdNMNxOE4awaTnWimI00ONVbkEtMb:2d6NxOpawaTSZHKd6NxOpawaTSZ7Qb
                    MD5:278BD906EB6E29C03748225A174C2123
                    SHA1:9E677E018EE280D283ED45E680D141E309535CA8
                    SHA-256:E2224955C32ED5375AC5D6108BAD60CA06CB2EB02BD561B971DAFD528A8A5F57
                    SHA-512:71BFAC00D897D8604F8728FAD3BBF8481C10A44144AE9FD80AAC3D47F22BB4DF70F1B225EE39754D8202F77240AEF12457CA81FCAE023FAAEB494DD387C6336E
                    Malicious:false
                    Reputation:low
                    Preview: <?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0xb2766875,0x01d7631c</date><accdate>0xb2766875,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0xb2766875,0x01d7631c</date><accdate>0xb2766875,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig>..
                    C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
                    Process:C:\Program Files\internet explorer\iexplore.exe
                    File Type:XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
                    Category:dropped
                    Size (bytes):654
                    Entropy (8bit):5.128318047934064
                    Encrypted:false
                    SSDEEP:12:TMHdNMNxe2k4fsnWimI002EtM3MHdNMNxe2k4fsnWimI00ONkak6EtMb:2d6NxrJfsSZHKd6NxrJfsSZ72a7b
                    MD5:1D09317025EDF0AE54CF58AEDA84E30E
                    SHA1:AE4D893FB14760873E2C1940E8D0E821920410DA
                    SHA-256:111DC3BC40ADFA5B3D1798691EF328C8C829BD1067DD74070B161722FB7FBA36
                    SHA-512:86460CCF8D17EFBB648F8246C9EB930CC544DECAF8607D8C07EE2FEFBC6B21191E80795988746B50A7C618EB35C43FA4F2F9B3E14024BDC74A8C07E02B6D1CB4
                    Malicious:false
                    Reputation:low
                    Preview: <?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.amazon.com/"/><date>0xb26f415c,0x01d7631c</date><accdate>0xb26f415c,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.amazon.com/"/><date>0xb26f415c,0x01d7631c</date><accdate>0xb26f415c,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Amazon.url"/></tile></msapplication></browserconfig>..
                    C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
                    Process:C:\Program Files\internet explorer\iexplore.exe
                    File Type:XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
                    Category:dropped
                    Size (bytes):663
                    Entropy (8bit):5.1293958676160205
                    Encrypted:false
                    SSDEEP:12:TMHdNMNxvL4awaTnWimI002EtM3MHdNMNxvL4awaTnWimI00ONmZEtMb:2d6NxvMawaTSZHKd6NxvMawaTSZ7Ub
                    MD5:23238701AA201304CFE0DBEBCFDFA84F
                    SHA1:EB4CADAD7539C904095C7B5B06669E732DFC2778
                    SHA-256:19E93B5AB16A38298D783D8059F76D8D213235575611E58D8433E6C2743F0712
                    SHA-512:38A6DFFBF41E9ECA5500E44283C087CB59BCDCC6FB368B203029C29D3756B71DE72F8737A2BC184E67FD98748E8FE32E7BCF46A720EFA1090B88194644A80BE8
                    Malicious:false
                    Reputation:low
                    Preview: <?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.wikipedia.com/"/><date>0xb2766875,0x01d7631c</date><accdate>0xb2766875,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.wikipedia.com/"/><date>0xb2766875,0x01d7631c</date><accdate>0xb2766875,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Wikipedia.url"/></tile></msapplication></browserconfig>..
                    C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
                    Process:C:\Program Files\internet explorer\iexplore.exe
                    File Type:XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
                    Category:dropped
                    Size (bytes):648
                    Entropy (8bit):5.116438797585903
                    Encrypted:false
                    SSDEEP:12:TMHdNMNxi4fsnWimI002EtM3MHdNMNxi4fsnWimI00ONd5EtMb:2d6Nx3fsSZHKd6Nx3fsSZ7njb
                    MD5:2737E5D2FD4C3A02CFAE2F1B693F1AC8
                    SHA1:8810128BE994269F5F0B75573ACFEE833F9789A7
                    SHA-256:B5E459A6445612492AEAB14C23D69A8CFA99564DB2FEB45B3BB5059BC43EC2F7
                    SHA-512:07ECFB04DFE2960FF53AFF975300F4E8CAAD7BCC1DAB70BBF89B271A9B14FA313F68B31B1A60F161AE6987D6D0F215612DC103611C5A7677537275EDCEB955CD
                    Malicious:false
                    Reputation:low
                    Preview: <?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.live.com/"/><date>0xb26f415c,0x01d7631c</date><accdate>0xb26f415c,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.live.com/"/><date>0xb26f415c,0x01d7631c</date><accdate>0xb26f415c,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Live.url"/></tile></msapplication></browserconfig>..
                    C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
                    Process:C:\Program Files\internet explorer\iexplore.exe
                    File Type:XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
                    Category:dropped
                    Size (bytes):657
                    Entropy (8bit):5.140051948078796
                    Encrypted:false
                    SSDEEP:12:TMHdNMNxhGw4awaTnWimI002EtM3MHdNMNxhGw4awaTnWimI00ON8K075EtMb:2d6NxQlawaTSZHKd6NxQlawaTSZ7uKa/
                    MD5:340AC798475D0EFBF197D88D8A2FA355
                    SHA1:C595B496F0025DFDBD781D3D332473EE077DE79C
                    SHA-256:9827D031C64A67B46E716F9E4DF36C825A5117D90B3B3A51B61D07F0538C0682
                    SHA-512:49F98A292C887D017C089E909505CE037AB5DEA81D88CE2AC2D56D341F8A4731207AB35EEB11E607FAF684E859B4129BE64110C9CD2801670D3177430BE227D0
                    Malicious:false
                    Reputation:low
                    Preview: <?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0xb2766875,0x01d7631c</date><accdate>0xb2766875,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0xb2766875,0x01d7631c</date><accdate>0xb2766875,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Youtube.url"/></tile></msapplication></browserconfig>..
                    C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
                    Process:C:\Program Files\internet explorer\iexplore.exe
                    File Type:XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
                    Category:dropped
                    Size (bytes):654
                    Entropy (8bit):5.104951358196258
                    Encrypted:false
                    SSDEEP:12:TMHdNMNx0n4fsnWimI002EtM3MHdNMNx0n4fsnWimI00ONxEtMb:2d6Nx04fsSZHKd6Nx04fsSZ7Vb
                    MD5:742A12C0FC536874166D69EEFBC7E996
                    SHA1:8DA889940F194BC4C86A9B5A466694B0AF151E33
                    SHA-256:8F472D998AF835B7CF9223D415A51EAF0992891AE44A44F5179D41296B53CDBD
                    SHA-512:657384970B994E836DAA8F227BFD4FC0DA4C35E74FB28584F2FF9FCB610913A8D4D1099659F480E634BDBF7D73CBD96B5689823E5B08FEEB45695E9819FE05A3
                    Malicious:false
                    Reputation:low
                    Preview: <?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.reddit.com/"/><date>0xb26f415c,0x01d7631c</date><accdate>0xb26f415c,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.reddit.com/"/><date>0xb26f415c,0x01d7631c</date><accdate>0xb26f415c,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Reddit.url"/></tile></msapplication></browserconfig>..
                    C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
                    Process:C:\Program Files\internet explorer\iexplore.exe
                    File Type:XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
                    Category:dropped
                    Size (bytes):657
                    Entropy (8bit):5.140746716389876
                    Encrypted:false
                    SSDEEP:12:TMHdNMNxx4fsnWimI002EtM3MHdNMNxx4fsnWimI00ON6Kq5EtMb:2d6NxSfsSZHKd6NxSfsSZ7ub
                    MD5:12D32A9DE785EA140363D4AA6F267AB0
                    SHA1:1CCD0B79B2D84EC8123170EC1DCF0A9ED949EC6B
                    SHA-256:282C5375824EFECC90A7C91938902A26C288036A4E504C82FB497A9F41949B46
                    SHA-512:9776BC0FE5B235E7CC379D0A8E67383B878E45D77FD44DE097494D8DDFB769E2AA2F7C31BB3C5DB9B026418943B51B95C3689FB687FE899AE35F7E07E63C3200
                    Malicious:false
                    Reputation:low
                    Preview: <?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.nytimes.com/"/><date>0xb26f415c,0x01d7631c</date><accdate>0xb26f415c,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.nytimes.com/"/><date>0xb26f415c,0x01d7631c</date><accdate>0xb26f415c,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\NYTimes.url"/></tile></msapplication></browserconfig>..
                    C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
                    Process:C:\Program Files\internet explorer\iexplore.exe
                    File Type:XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
                    Category:dropped
                    Size (bytes):660
                    Entropy (8bit):5.11533923375871
                    Encrypted:false
                    SSDEEP:12:TMHdNMNxc4fsnWimI002EtM3MHdNMNxc4fsnWimI00ONVEtMb:2d6NxRfsSZHKd6NxRfsSZ71b
                    MD5:BC73414A0EA1DBC039D56C2E06716A2F
                    SHA1:D00B3145303B8F812E21CFFC43C8A7B0CBE95B1D
                    SHA-256:CF48668DAB10F46EA698C5D8D49959F0CABAEFEA66309FFA5C581EC541D2ADF8
                    SHA-512:B12ACB50C63AA6EADAD7BE27D822D85178A3308D454459AE1A189A501D1DA2486F3AF9C5E5CD9BA2DAA8C68E2E2B87DEA3240163EE0DEFF25039C8E366454047
                    Malicious:false
                    Reputation:low
                    Preview: <?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0xb26f415c,0x01d7631c</date><accdate>0xb26f415c,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0xb26f415c,0x01d7631c</date><accdate>0xb26f415c,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig>..
                    C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
                    Process:C:\Program Files\internet explorer\iexplore.exe
                    File Type:XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
                    Category:dropped
                    Size (bytes):654
                    Entropy (8bit):5.101649779180841
                    Encrypted:false
                    SSDEEP:12:TMHdNMNxfn4fsnWimI002EtM3MHdNMNxfn4fsnWimI00ONe5EtMb:2d6NxAfsSZHKd6NxAfsSZ7Ejb
                    MD5:4EF0BE6ED9778F9D5EAEAE1EBF001CEE
                    SHA1:840B4AA9B6F53974DF84144A680B1619C938C24A
                    SHA-256:FBDC5F11DC69FE86A8A562C3454EC0084085EBD9439AB27BB5044F5BD776C689
                    SHA-512:3D02F0859D49ED69F80FDBA95F4EEDCEEBD928EC162D5673852DEE8776CD898B4974C906F39E85457A037B18C9EA5D3DCCB5532D9C1BC80238EB334E30CAC19D
                    Malicious:false
                    Reputation:low
                    Preview: <?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.google.com/"/><date>0xb26f415c,0x01d7631c</date><accdate>0xb26f415c,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.google.com/"/><date>0xb26f415c,0x01d7631c</date><accdate>0xb26f415c,0x01d7631c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Google.url"/></tile></msapplication></browserconfig>..
                    C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\_Incapsula_Resource[1].htm
                    Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                    File Type:HTML document, ASCII text, with very long lines, with CRLF line terminators
                    Category:dropped
                    Size (bytes):9054
                    Entropy (8bit):5.619577579127593
                    Encrypted:false
                    SSDEEP:192:FQPGpqr2ucKveX4xXOEmUasDRfSyr25HWt9D4:mjy4dfmNsD1SQL4
                    MD5:6F95D6FE5C548AF74B9343AAB21229CD
                    SHA1:E689AA473F3AB46FD8DEE10279415051037900F7
                    SHA-256:5192F7ADCB3F4F31F4D6741003E791DB78EE66C58767B821A54CDC519F68A98E
                    SHA-512:88AD320A5A3F67D976D8B6C607A368682A9FF80708338484AD3B14CC3105361180320A55514FA3138495B06B3161009C0729C9472D026D2BCA6306C591A0C951
                    Malicious:false
                    Reputation:low
                    Preview: <!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <meta http-equiv="X-UA-Compatible" content="ie=edge">.. <link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;700&display=swap" rel="stylesheet">.. <title>[Error Title]</title>.. <style type="text/css">.. body {.. font-family: 'Inter', sans-serif;.. font-size: 12px;.. color: #000000;.. background: #E8E8E8;.. }.... .container {.. width: -webkit-fit-content;.. width: -moz-fit-content;.. width: fit-content;.. max-width: 100%;.. margin: 0 auto;.. padding: 15px;.. }.... .container-inner {.. background: #FFFFFF;.. box-shadow: 0 10px 10px rgba(0, 0, 0, 0.1);.. border-radius: 8px;.. }.... .header {.. width: 100%;.. height: 165px;.. background: #F3F3F3;.. border-radius: 8px 8px 0 0;.. display: flex;.. align-items:
                    C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\css2[1].css
                    Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                    File Type:ASCII text
                    Category:downloaded
                    Size (bytes):900
                    Entropy (8bit):5.255463263661239
                    Encrypted:false
                    SSDEEP:24:5TjOYGayhABiZTjOY7ayhAoYTjOY4ayhAzTjOYN0ayhAMH:5jO1ayhAGjOEayhAnjOXayhAXjOpayhh
                    MD5:E5F949D1B89D5953CFE9794269F56B42
                    SHA1:09BD735C98046445C368EFFB75F88C95333F775A
                    SHA-256:40DCBFB746200DA9ED5DBAA7E359C131D2B92C9A52C8222C5341CCCA9CCDEF95
                    SHA-512:9A82EAE12E5789A224BAE7B5CEF6088D6854975A7DB31AC34AF038117B3AD2B6168DAE78E3C571DB467315DC76DE539E499F53E81BE75B79F2AFE871BA2906CE
                    Malicious:false
                    Reputation:low
                    IE Cache URL:https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;700&display=swap
                    Preview: @font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v3/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuOKfMZs.woff) format('woff');.}.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v3/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfMZs.woff) format('woff');.}.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 500;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v3/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuI6fMZs.woff) format('woff');.}.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 700;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v3/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuFuYMZs.woff) format('woff');.}.
                    C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuFuYMZs[1].woff
                    Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                    File Type:Web Open Font Format, TrueType, length 132068, version 1.1
                    Category:downloaded
                    Size (bytes):132068
                    Entropy (8bit):7.995149063773782
                    Encrypted:true
                    SSDEEP:3072:Jc3h1MHWvM2mcTnUIu0Kx9KAoA2R46YyD7bC:ShmHWTTnUIu0KxVc3D7bC
                    MD5:76D6018ED1D9194AB6E6BF7A231F6F1D
                    SHA1:668D8D45CAAE0054730182CFEE04C388AC83BE61
                    SHA-256:6BC13EB633EB6A68F59B0E6D48BB0EB77D1531F68EE53F9F8C7F9B785711704F
                    SHA-512:F4288B4E92E49E926B13503B47A5707CAA4348BC1941D61D79944553B8D760072F3D27F190F457C70645B6D5465FC62051381983A9FF42EF2008235F850DF127
                    Malicious:false
                    Reputation:low
                    IE Cache URL:https://fonts.gstatic.com/s/inter/v3/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuFuYMZs.woff
                    Preview: wOFF..............d.........................GDEF...l............GPOS...H..@....:....GSUB..C....^..A..$_.OS/2..`@...X...`&.n?STAT..`....$...$....cmap..`...+...`..l..gasp................glyf......7?.......whead...$...6...6(..hhea...\... ...$....hmtx...|......'...#.loca...4......'....bmaxp...P....... ....name...l........*mJ.post...p...k..c.... prep............h...x.%...^A.@.{gf.....7.....m...n..v..:..8I.I>Q.i .3.V...J...`...2.Uv...V9.*.X%.U^.j.!6...J[aW...Fk4&h...%.F..N... ...\.c..c..a...;}.....ic.`...cM,....g..x3.....l.}f..1g....-|d.a.I.<......w......6..m"...p.....<\k...{...3x..+....t,.%Xa+....{............3.`..l..c3...v..u.....X.w......n*.r.p........Mw.o.;x.....1>s.0.b...BW.e..+\..Z|.^.F.Q!VEU..-...1.#.Q8&...q8!..3..b...\\.,..........x,<......H.........(.Wl..0?.G.q8...m~...W....}Q..?.T...>..|..?......x.....F.@.*...+.h....en.......}aTRf.v..f..O.....t...z..y..~.f.[&&BH.iJ:.a.p.$F.+?Nb...'W...&...'...9.<.D.]...4.^.U-.....G.4f.......W.X...e.Y...].+..%...
                    C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuI6fMZs[1].woff
                    Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                    File Type:Web Open Font Format, TrueType, length 130576, version 1.1
                    Category:downloaded
                    Size (bytes):130576
                    Entropy (8bit):7.995258687421889
                    Encrypted:true
                    SSDEEP:1536:pRCvZvmWtH9tyv2shSLYCNCdpWNg0NYGX8zJgz9m44ul+rmttZq8T1N9KCTOMf+7:/WCqLYCNCLWPiriZ1NogOc+c7bC
                    MD5:CE804F3F44DD988CE90A26990A5AC19C
                    SHA1:D22AE366E1938195DCB8A5DCD706F169C396AC72
                    SHA-256:74568742495A9A38F22E456D30DC4CA1826B70D16559011D745C7300D5916083
                    SHA-512:C02E7BE78CF6E8D7371017F16945FDAE2B05BA3C35E57CF4A30230B81E2AD11ACAEE551E5055FBEB17AA9F18BA6E8F01A344330E8BFF3E1A932903A1CD526E97
                    Malicious:false
                    Reputation:low
                    IE Cache URL:https://fonts.gstatic.com/s/inter/v3/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuI6fMZs.woff
                    Preview: wOFF..............^.........................GDEF...l............GPOS...H..@....:D-s.GSUB..C....^..A..$_.OS/2..`T...X...`&.n_STAT..`....$...$....cmap..`...+...`..l..gasp................glyf......1p...zZ..rhead...h...5...6(..hhea....... ...$....hmtx..........'....loca...P......'....maxp...l....... ....name..........(0.VZpost.......k..c.... prep............h...x.%...^A.@.{gf.....7.....m...n..v..:..8I.I>Q.i .3.V...J...`...2.Uv...V9.*.X%.U^.j.!6...J[aW...Fk4&h...%.F..N... ...\.c..c..a...;}.....ic.`...cM,....g..x3.....l.}f..1g....-|d.a.I.<......w......6..m"...p.....<\k...{...3x..+....t,.%Xa+....{............3.`..l..c3...v..u.....X.w......n*.r.p........Mw.o.;x.....1>s.0.b...BW.e..+\..Z|.^.F.Q!VEU..-...1.#.Q8&...q8!..3..b...\\.,..........x,<......H.........(.Wl..0?.G.q8...m~...W....}Q..?.T...>..|..?......x...t.F....l..d..33srW.. .v.d....\.1....*)..^..f....hwE,...R.4&.kw.$D..&!.n.[......7...Q.A.BDI..B,.ob.=M..w.!.......9q..~>.#!....j0....E.....jvB
                    C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfMZs[1].woff
                    Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                    File Type:Web Open Font Format, TrueType, length 121716, version 1.1
                    Category:downloaded
                    Size (bytes):121716
                    Entropy (8bit):7.993845729883695
                    Encrypted:true
                    SSDEEP:3072:lPf/WcEjkEeGYwW8hkM5c+lyPvuI0mHfaxDCw7bC:lPf/WpjHNYwbyd+lyOIDHeX7bC
                    MD5:FE5D253C64831F746CC88B6DF016884F
                    SHA1:3369CF3578B729FC72E471167168C8D837FC8B0B
                    SHA-256:4C1F8A0D5EF1E04D7E14D194A4EF624345E7C7C1CDB4FF61D4552E32A60AC1D0
                    SHA-512:A9E4E83A1DF364B7D8688430868233A07C04713F16C68FCF8FD11452879B572134BA23572605FC0D087AED12E0C0008331231636A5A87C2CFEAFC13195903ED0
                    Malicious:false
                    Reputation:low
                    IE Cache URL:https://fonts.gstatic.com/s/inter/v3/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfMZs.woff
                    Preview: wOFF.......t......N.........................GDEF...l............GPOS...H..>....|..-.GSUB..AT...^..A..$_.OS/2..]....X...`%.n_STAT..^....$...$....cmap..^0..+...`..l..gasp...P............glyf...X........x[.head...8...5...6(..hhea...p... ...$....hmtx.......-..'..MI.loca..........'...'.maxp........... ....name.............:L.post.......k..c.... prep...l........h...x.%...^A.@.{gf.....7.....m...n..v..:..8I.I>Q.i .3.V...J...`...2.Uv...V9.*.X%.U^.j.!6...J[aW...Fk4&h...%.F..N... ...\.c..c..a...;}.....ic.`...cM,....g..x3.....l.}f..1g....-|d.a.I.<......w......6..m"...p.....<\k...{...3x..+....t,.%Xa+....{............3.`..l..c3...v..u.....X.w......n*.r.p........Mw.o.;x.....1>s.0.b...BW.e..+\..Z|.^.F.Q!VEU..-...1.#.Q8&...q8!..3..b...\\.,..........x,<......H.........(.Wl..0?.G.q8...m~...W....}Q..?.T...>..|..?......x...H[W..!....0].G..EDV..f]...(..M(2.D.,I.{!...#..`c.|G.....r."C`.G.0.R..C...c..RD...s..5.......?....y..\...8...ur..O.\....9..B.{...o...a.uTh..@..t.5q.
                    C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuOKfMZs[1].woff
                    Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                    File Type:Web Open Font Format, TrueType, length 129168, version 1.1
                    Category:downloaded
                    Size (bytes):129168
                    Entropy (8bit):7.9946584299257015
                    Encrypted:true
                    SSDEEP:3072:meG9VuRWDcFgQudwN4gKLzg6M7r7+defzIRyK7bC:ZGLuRWQSNGNazgBX7+0zIUK7bC
                    MD5:5FC4DAD051CD968CC43C33C201CEB01D
                    SHA1:20CFE7561AD68F628BA7F30D6FEF42365875FEF8
                    SHA-256:C74544E933B9D0ABE6F88D3E1AED761E6C39A42787B6FD1D2D25578D7F6BA4D6
                    SHA-512:AE9A8F139844E39628CF926216FECC370B6D411FD0587BEC4E9EB0A690E7E3C328674DFC1D5B64995C883FA6ECBF7BA8EF4DB17AB12954A9FB91FE69EAE99FDB
                    Malicious:false
                    Reputation:low
                    IE Cache URL:https://fonts.gstatic.com/s/inter/v3/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuOKfMZs.woff
                    Preview: wOFF..............O ........................GDEF...l............GPOS...H..>Y......)GSUB..A....^..A..$_.OS/2..^....W...`%>n_STAT..^\...$...$....cmap..^...+...`..l..gasp................glyf.......E...[|]#.head.......5...6(..hhea...(... ...$....hmtx...H......'.....loca..........'...#smaxp........... ....name........... 1!TCpost.......k..c.... prep............h...x.%...^A.@.{gf.....7.....m...n..v..:..8I.I>Q.i .3.V...J...`...2.Uv...V9.*.X%.U^.j.!6...J[aW...Fk4&h...%.F..N... ...\.c..c..a...;}.....ic.`...cM,....g..x3.....l.}f..1g....-|d.a.I.<......w......6..m"...p.....<\k...{...3x..+....t,.%Xa+....{............3.`..l..c3...v..u.....X.w......n*.r.p........Mw.o.;x.....1>s.0.b...BW.e..+\..Z|.^.F.Q!VEU..-...1.#.Q8&...q8!..3..b...\\.,..........x,<......H.........(.Wl..0?.G.q8...m~...W....}Q..?.T...>..|..?......x...p.W...../,3...S..a:9(..i.`v.|.....r.J.2^.....Jw%.\.=.ov._8..,.....`.u7..d.kr..dv!..s.E...KI.aOb...<..,.w..E.x...4.<.&..q...3....Ak.f]..>....Z.A'...
                    C:\Users\user\AppData\Local\Temp\~DF74791A8792FE6A3E.TMP
                    Process:C:\Program Files\internet explorer\iexplore.exe
                    File Type:data
                    Category:dropped
                    Size (bytes):13029
                    Entropy (8bit):0.4813405722969448
                    Encrypted:false
                    SSDEEP:24:c9lLh9lLh9lIn9lIn9loF9lol9lWISxfn:kBqoIuQdfn
                    MD5:45EFDFCFBCC2337520C27009D24D4AD1
                    SHA1:F686A1D7C2698706EA0EFC7C636F39C7936A65BA
                    SHA-256:5C912309BF084C46C6EF123B32A75B5643A17A6E72E330A99A3A925D78729C4A
                    SHA-512:D70AF49C2BFB61EBAB1643520BCD0995D4BF298267FD720C3FD20DB1AAB60B5D195EC8789B7D62DEE98421B007D9B406EA5B442C0AA3AD8796BF74D538427985
                    Malicious:false
                    Reputation:low
                    Preview: .............................*%..H..M..{y..+.0...(................... ...............................................*%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                    C:\Users\user\AppData\Local\Temp\~DF9C5E7B3D1E2B6432.TMP
                    Process:C:\Program Files\internet explorer\iexplore.exe
                    File Type:data
                    Category:dropped
                    Size (bytes):25441
                    Entropy (8bit):0.27918767598683664
                    Encrypted:false
                    SSDEEP:24:c9lLh9lLh9lIn9lIn9lRx/9lRJ9lTb9lTb9lSSU9lSSU9laAa/9laA:kBqoxxJhHWSVSEab
                    MD5:AB889A32AB9ACD33E816C2422337C69A
                    SHA1:1190C6B34DED2D295827C2A88310D10A8B90B59B
                    SHA-256:4D6EC54B8D244E63B0F04FBE2B97402A3DF722560AD12F218665BA440F4CEFDA
                    SHA-512:BD250855747BB4CEC61814D0E44F810156D390E3E9F120A12935EFDF80ACA33C4777AD66257CCA4E4003FEF0741692894980B9298F01C4CDD2D8A9C7BB522FB6
                    Malicious:false
                    Reputation:low
                    Preview: .............................*%..H..M..{y..+.0...(................... ...............................................*%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                    C:\Users\user\AppData\Local\Temp\~DFA1F525A9DC4E2592.TMP
                    Process:C:\Program Files\internet explorer\iexplore.exe
                    File Type:data
                    Category:dropped
                    Size (bytes):34549
                    Entropy (8bit):0.3836747270611249
                    Encrypted:false
                    SSDEEP:24:c9lLh9lLh9lIn9lIn9lRg9lRA9lTS9lTy9lSSd9lSSd9lwB9lwh9l2/9l2/9l/7s:kBqoxKAuvScS+yU+X7I77Zqo
                    MD5:35A3BAF6E4DD7757D6526FBD37CE65A7
                    SHA1:4A7E54C46D229775216825A7619A890C44933BC2
                    SHA-256:8081B3B49A45AB9D95C3F0AC6101C32689D9EA27068D2871BF3E38EE820259D7
                    SHA-512:1601ADC9F1C5B0420AF03F2AB4749E1911276BB5A4C6253236D2982946ED4508B01EB44D2DC4D2F616614E576790BA2ED92A8E27878E7B58B5304DE35C68C5F4
                    Malicious:false
                    Reputation:low
                    Preview: .............................*%..H..M..{y..+.0...(................... ...............................................*%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                    Static File Info

                    No static file info

                    Network Behavior

                    Network Port Distribution

                    TCP Packets

                    TimestampSource PortDest PortSource IPDest IP
                    Jun 16, 2021 19:00:59.774641991 CEST49715443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:00:59.774697065 CEST49716443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:00:59.934542894 CEST44349716136.147.129.134192.168.2.5
                    Jun 16, 2021 19:00:59.934583902 CEST44349715136.147.129.134192.168.2.5
                    Jun 16, 2021 19:00:59.934668064 CEST49716443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:00:59.934710026 CEST49715443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:00:59.943351030 CEST49716443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:00:59.943512917 CEST49715443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:01:00.103105068 CEST44349715136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.103147030 CEST44349716136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.108608961 CEST44349716136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.108633041 CEST44349716136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.108653069 CEST44349716136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.108670950 CEST44349716136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.108692884 CEST44349715136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.108716011 CEST44349715136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.108737946 CEST49716443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:01:00.108758926 CEST49716443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:01:00.108779907 CEST44349715136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.108797073 CEST44349715136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.108819962 CEST49715443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:01:00.108853102 CEST49715443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:01:00.108858109 CEST49715443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:01:00.156537056 CEST49715443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:01:00.163347006 CEST49715443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:01:00.164710045 CEST49716443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:01:00.316046953 CEST44349715136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.316773891 CEST44349715136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.316869974 CEST49715443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:01:00.323065996 CEST44349715136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.324318886 CEST44349716136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.324950933 CEST44349716136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.325550079 CEST49716443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:01:00.332335949 CEST44349715136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.332355976 CEST44349715136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.332994938 CEST49715443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:01:00.335865021 CEST49715443192.168.2.5136.147.129.134
                    Jun 16, 2021 19:01:00.454591036 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.456228018 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.495826960 CEST44349715136.147.129.134192.168.2.5
                    Jun 16, 2021 19:01:00.585896015 CEST44349717107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:00.586488008 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.587451935 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:00.587557077 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.748527050 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.749176025 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.879687071 CEST44349717107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:00.879952908 CEST44349717107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:00.880002022 CEST44349717107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:00.880028963 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.880045891 CEST44349717107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:00.880069017 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.880074978 CEST44349717107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:00.880109072 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.880142927 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.880208969 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:00.880945921 CEST44349717107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:00.880980015 CEST44349717107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:00.881000996 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.881042004 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.882355928 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:00.882396936 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:00.882433891 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:00.882437944 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.882457972 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.882462025 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:00.882477999 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.882498980 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.883244038 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:00.883280993 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:00.883313894 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.883346081 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.896554947 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.896996975 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.897212982 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.898859978 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:00.899231911 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:01.027894974 CEST44349717107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:01.027930975 CEST44349717107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:01.028013945 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:01.028036118 CEST44349717107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:01.028081894 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:01.028121948 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:01.029366016 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:01.029710054 CEST44349717107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:01.029797077 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:01.073570967 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:01.081657887 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:01.081707001 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:01.081732988 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:01.081734896 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:01.081784964 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:01.087775946 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:01.183176994 CEST44349717107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:01.183218956 CEST44349717107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:01.183324099 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:01.183367014 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:01.223032951 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:01.322942019 CEST49717443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:01.431209087 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:01.454282999 CEST44349717107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:01.562340975 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.413150072 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.413165092 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.413181067 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.413196087 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.413216114 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.413232088 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.413248062 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.413264036 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.413276911 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:03.413280010 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.413299084 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.413301945 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:03.413316011 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.413336039 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.413341045 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:03.413364887 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:03.413393974 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:03.544291973 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.544317007 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.544334888 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.544352055 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.544368029 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.544385910 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.544390917 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:03.544440031 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:03.544488907 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:03.668474913 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:03.677159071 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:03.799660921 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.799680948 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.808130980 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.809092999 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.809197903 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:03.809839010 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.809859037 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.809870958 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.809900045 CEST44349718107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:03.809921026 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:03.809954882 CEST49718443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.128591061 CEST49727443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.259938955 CEST44349727107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:16.260169983 CEST49727443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.269243002 CEST49727443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.400386095 CEST44349727107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:16.404750109 CEST44349727107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:16.404798985 CEST44349727107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:16.404838085 CEST44349727107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:16.404839039 CEST49727443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.404870987 CEST49727443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.404898882 CEST44349727107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:16.404906988 CEST49727443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.404951096 CEST49727443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.405648947 CEST44349727107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:16.405685902 CEST44349727107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:16.405736923 CEST49727443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.405764103 CEST49727443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.412316084 CEST49727443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.547519922 CEST44349727107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:16.547641993 CEST49727443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.550631046 CEST49727443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.681837082 CEST44349727107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:16.683674097 CEST44349727107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:16.683698893 CEST44349727107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:16.683713913 CEST44349727107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:16.683804989 CEST49727443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.683846951 CEST49727443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.718123913 CEST49727443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.718168974 CEST49727443192.168.2.5107.154.226.20
                    Jun 16, 2021 19:01:16.849466085 CEST44349727107.154.226.20192.168.2.5
                    Jun 16, 2021 19:01:16.849680901 CEST49727443192.168.2.5107.154.226.20

                    UDP Packets

                    TimestampSource PortDest PortSource IPDest IP
                    Jun 16, 2021 19:00:49.908564091 CEST5479553192.168.2.58.8.8.8
                    Jun 16, 2021 19:00:49.960253954 CEST53547958.8.8.8192.168.2.5
                    Jun 16, 2021 19:00:50.096833944 CEST4955753192.168.2.58.8.8.8
                    Jun 16, 2021 19:00:50.155639887 CEST53495578.8.8.8192.168.2.5
                    Jun 16, 2021 19:00:50.845550060 CEST6173353192.168.2.58.8.8.8
                    Jun 16, 2021 19:00:50.903165102 CEST53617338.8.8.8192.168.2.5
                    Jun 16, 2021 19:00:51.753206968 CEST6544753192.168.2.58.8.8.8
                    Jun 16, 2021 19:00:51.811594963 CEST53654478.8.8.8192.168.2.5
                    Jun 16, 2021 19:00:52.669621944 CEST5244153192.168.2.58.8.8.8
                    Jun 16, 2021 19:00:52.729450941 CEST53524418.8.8.8192.168.2.5
                    Jun 16, 2021 19:00:53.075381994 CEST6217653192.168.2.58.8.8.8
                    Jun 16, 2021 19:00:53.133919001 CEST53621768.8.8.8192.168.2.5
                    Jun 16, 2021 19:00:53.903634071 CEST5959653192.168.2.58.8.8.8
                    Jun 16, 2021 19:00:53.973221064 CEST53595968.8.8.8192.168.2.5
                    Jun 16, 2021 19:00:55.643613100 CEST6529653192.168.2.58.8.8.8
                    Jun 16, 2021 19:00:55.695436001 CEST53652968.8.8.8192.168.2.5
                    Jun 16, 2021 19:00:56.688962936 CEST6318353192.168.2.58.8.8.8
                    Jun 16, 2021 19:00:56.747890949 CEST53631838.8.8.8192.168.2.5
                    Jun 16, 2021 19:00:57.622783899 CEST6015153192.168.2.58.8.8.8
                    Jun 16, 2021 19:00:57.673350096 CEST53601518.8.8.8192.168.2.5
                    Jun 16, 2021 19:00:58.341546059 CEST5696953192.168.2.58.8.8.8
                    Jun 16, 2021 19:00:58.410115957 CEST53569698.8.8.8192.168.2.5
                    Jun 16, 2021 19:00:58.706914902 CEST5516153192.168.2.58.8.8.8
                    Jun 16, 2021 19:00:58.758167982 CEST53551618.8.8.8192.168.2.5
                    Jun 16, 2021 19:00:59.693856955 CEST5475753192.168.2.58.8.8.8
                    Jun 16, 2021 19:00:59.755474091 CEST53547578.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:00.394344091 CEST4999253192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:00.424348116 CEST6007553192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:00.452919006 CEST53499928.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:00.489279032 CEST53600758.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:01.987835884 CEST5501653192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:02.047205925 CEST53550168.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:03.823503971 CEST6434553192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:03.882137060 CEST53643458.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:04.074655056 CEST5712853192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:04.155520916 CEST53571288.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:16.064934015 CEST5479153192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:16.125345945 CEST53547918.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:19.608661890 CEST5046353192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:19.659226894 CEST53504638.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:28.628212929 CEST5039453192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:28.688199997 CEST53503948.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:29.118408918 CEST5853053192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:29.169203043 CEST53585308.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:29.614883900 CEST5039453192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:29.666774988 CEST53503948.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:29.760330915 CEST5381353192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:29.826709986 CEST53538138.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:30.145531893 CEST5853053192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:30.196417093 CEST53585308.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:30.647217989 CEST5039453192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:30.707221985 CEST53503948.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:31.145271063 CEST5853053192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:31.196121931 CEST53585308.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:32.645495892 CEST5039453192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:32.697206974 CEST53503948.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:33.192315102 CEST5853053192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:33.256798029 CEST53585308.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:36.692512035 CEST5039453192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:36.752906084 CEST53503948.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:37.239409924 CEST5853053192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:37.290270090 CEST53585308.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:44.599955082 CEST6373253192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:44.669140100 CEST53637328.8.8.8192.168.2.5
                    Jun 16, 2021 19:01:44.985763073 CEST5734453192.168.2.58.8.8.8
                    Jun 16, 2021 19:01:45.060964108 CEST53573448.8.8.8192.168.2.5

                    DNS Queries

                    TimestampSource IPDest IPTrans IDOP CodeNameTypeClass
                    Jun 16, 2021 19:00:59.693856955 CEST192.168.2.58.8.8.80x20aaStandard query (0)click.e.usa.experian.comA (IP address)IN (0x0001)
                    Jun 16, 2021 19:01:00.394344091 CEST192.168.2.58.8.8.80xff3bStandard query (0)usa.experian.comA (IP address)IN (0x0001)
                    Jun 16, 2021 19:01:16.064934015 CEST192.168.2.58.8.8.80x456Standard query (0)usa.experian.comA (IP address)IN (0x0001)

                    DNS Answers

                    TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClass
                    Jun 16, 2021 19:00:59.755474091 CEST8.8.8.8192.168.2.50x20aaNo error (0)click.e.usa.experian.com136.147.129.134A (IP address)IN (0x0001)
                    Jun 16, 2021 19:01:00.452919006 CEST8.8.8.8192.168.2.50xff3bNo error (0)usa.experian.com107.154.226.20A (IP address)IN (0x0001)
                    Jun 16, 2021 19:01:00.452919006 CEST8.8.8.8192.168.2.50xff3bNo error (0)usa.experian.com192.230.69.20A (IP address)IN (0x0001)
                    Jun 16, 2021 19:01:16.125345945 CEST8.8.8.8192.168.2.50x456No error (0)usa.experian.com107.154.226.20A (IP address)IN (0x0001)
                    Jun 16, 2021 19:01:16.125345945 CEST8.8.8.8192.168.2.50x456No error (0)usa.experian.com192.230.69.20A (IP address)IN (0x0001)

                    HTTPS Packets

                    TimestampSource IPSource PortDest IPDest PortSubjectIssuerNot BeforeNot AfterJA3 SSL Client FingerprintJA3 SSL Client Digest
                    Jun 16, 2021 19:01:00.108653069 CEST136.147.129.134443192.168.2.549716CN=click.e.usa.experian.com, OU=Experian Consumer Services, O="SALESFORCE.COM, INC.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=USCN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=USWed Sep 30 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006Mon Nov 01 01:00:00 CET 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,09e10692f1b7f78228b2d4e424db3a98c
                    CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=USCN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=USFri Mar 08 13:00:00 CET 2013Wed Mar 08 13:00:00 CET 2023
                    CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=USCN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=USFri Nov 10 01:00:00 CET 2006Mon Nov 10 01:00:00 CET 2031
                    Jun 16, 2021 19:01:00.108779907 CEST136.147.129.134443192.168.2.549715CN=click.e.usa.experian.com, OU=Experian Consumer Services, O="SALESFORCE.COM, INC.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=USCN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=USWed Sep 30 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006Mon Nov 01 01:00:00 CET 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,09e10692f1b7f78228b2d4e424db3a98c
                    CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=USCN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=USFri Mar 08 13:00:00 CET 2013Wed Mar 08 13:00:00 CET 2023
                    CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=USCN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=USFri Nov 10 01:00:00 CET 2006Mon Nov 10 01:00:00 CET 2031
                    Jun 16, 2021 19:01:00.880980015 CEST107.154.226.20443192.168.2.549717CN=usa.experian.com, SERIALNUMBER=93905, OID.2.5.4.15=Private Organization, O=Experian PLC, OID.1.3.6.1.4.1.311.60.2.1.3=JE, L=London, C=GB CN=Entrust Certification Authority - L1M, OU="(c) 2014 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=USCN=Entrust Certification Authority - L1M, OU="(c) 2014 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=USTue Mar 23 00:10:13 CET 2021 Mon Dec 15 16:25:03 CET 2014 Mon Sep 22 19:14:57 CEST 2014 Mon Nov 27 21:23:42 CET 2006Fri Apr 22 01:10:13 CEST 2022 Tue Oct 15 17:55:03 CEST 2030 Mon Sep 23 03:31:53 CEST 2024 Fri Nov 27 21:53:42 CET 2026771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,09e10692f1b7f78228b2d4e424db3a98c
                    CN=Entrust Certification Authority - L1M, OU="(c) 2014 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=USCN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=USMon Dec 15 16:25:03 CET 2014Tue Oct 15 17:55:03 CEST 2030
                    CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=USCN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=USMon Sep 22 19:14:57 CEST 2014Mon Sep 23 03:31:53 CEST 2024
                    CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=USCN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=USMon Nov 27 21:23:42 CET 2006Fri Nov 27 21:53:42 CET 2026
                    Jun 16, 2021 19:01:00.883280993 CEST107.154.226.20443192.168.2.549718CN=usa.experian.com, SERIALNUMBER=93905, OID.2.5.4.15=Private Organization, O=Experian PLC, OID.1.3.6.1.4.1.311.60.2.1.3=JE, L=London, C=GB CN=Entrust Certification Authority - L1M, OU="(c) 2014 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=USCN=Entrust Certification Authority - L1M, OU="(c) 2014 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=USTue Mar 23 00:10:13 CET 2021 Mon Dec 15 16:25:03 CET 2014 Mon Sep 22 19:14:57 CEST 2014 Mon Nov 27 21:23:42 CET 2006Fri Apr 22 01:10:13 CEST 2022 Tue Oct 15 17:55:03 CEST 2030 Mon Sep 23 03:31:53 CEST 2024 Fri Nov 27 21:53:42 CET 2026771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,09e10692f1b7f78228b2d4e424db3a98c
                    CN=Entrust Certification Authority - L1M, OU="(c) 2014 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=USCN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=USMon Dec 15 16:25:03 CET 2014Tue Oct 15 17:55:03 CEST 2030
                    CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=USCN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=USMon Sep 22 19:14:57 CEST 2014Mon Sep 23 03:31:53 CEST 2024
                    CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=USCN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=USMon Nov 27 21:23:42 CET 2006Fri Nov 27 21:53:42 CET 2026
                    Jun 16, 2021 19:01:16.405685902 CEST107.154.226.20443192.168.2.549727CN=usa.experian.com, SERIALNUMBER=93905, OID.2.5.4.15=Private Organization, O=Experian PLC, OID.1.3.6.1.4.1.311.60.2.1.3=JE, L=London, C=GB CN=Entrust Certification Authority - L1M, OU="(c) 2014 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=USCN=Entrust Certification Authority - L1M, OU="(c) 2014 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=USTue Mar 23 00:10:13 CET 2021 Mon Dec 15 16:25:03 CET 2014 Mon Sep 22 19:14:57 CEST 2014 Mon Nov 27 21:23:42 CET 2006Fri Apr 22 01:10:13 CEST 2022 Tue Oct 15 17:55:03 CEST 2030 Mon Sep 23 03:31:53 CEST 2024 Fri Nov 27 21:53:42 CET 2026771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,037f463bf4616ecd445d4a1937da06e19
                    CN=Entrust Certification Authority - L1M, OU="(c) 2014 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=USCN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=USMon Dec 15 16:25:03 CET 2014Tue Oct 15 17:55:03 CEST 2030
                    CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=USCN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=USMon Sep 22 19:14:57 CEST 2014Mon Sep 23 03:31:53 CEST 2024
                    CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=USCN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=USMon Nov 27 21:23:42 CET 2006Fri Nov 27 21:53:42 CET 2026

                    Code Manipulations

                    Statistics

                    CPU Usage

                    Click to jump to process

                    Memory Usage

                    Click to jump to process

                    Behavior

                    Click to jump to process

                    System Behavior

                    General

                    Start time:19:00:57
                    Start date:16/06/2021
                    Path:C:\Program Files\internet explorer\iexplore.exe
                    Wow64 process (32bit):false
                    Commandline:'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
                    Imagebase:0x7ff600d50000
                    File size:823560 bytes
                    MD5 hash:6465CB92B25A7BC1DF8E01D8AC5E7596
                    Has elevated privileges:true
                    Has administrator privileges:true
                    Programmed in:C, C++ or other language
                    Reputation:low

                    General

                    Start time:19:00:57
                    Start date:16/06/2021
                    Path:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                    Wow64 process (32bit):true
                    Commandline:'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4408 CREDAT:17410 /prefetch:2
                    Imagebase:0xf10000
                    File size:822536 bytes
                    MD5 hash:071277CC2E3DF41EEEA8013E2AB58D5A
                    Has elevated privileges:true
                    Has administrator privileges:true
                    Programmed in:C, C++ or other language
                    Reputation:low

                    Disassembly

                    Reset < >