Play interactive tour

Edit tour

Windows Analysis Report https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect

Overview

General Information

Sample URL:	https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect
Analysis ID:	446634
Infos:
Most interesting Screenshot:

Detection

Score:	22
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

Phishing site detected (based on logo template match)

Checks for available system drives (often done to infect USB drives)

Found iframes

HTML body contains low number of good links

HTML title does not match URL

Invalid 'forgot password' link found

Classification

Analysis Advice

Sample is looking for USB drives. Launch the sample with the USB Fake Disk cookbook

Uses HTTPS for network communication, use the 'Proxy HTTPS (port 443) to read its encrypted data' cookbook for further analysis

Process Tree

System is w10x64

iexplore.exe (PID: 3448 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 1808 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3448 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

Phishing:

Phishing site detected (based on logo template match)

Show sources

Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect

Matcher: Template: google matched

Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: Iframe src: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LcnSW0aAAAAAICg9byzvE1oFz4zXBI-CFh6W3st&co=aHR0cHM6Ly9jMzEucWJvLmludHVpdC5jb206NDQz&hl=en&v=TbD3vPFlUWKZD-9L4ZxB0HJI&size=invisible&badge=inline&sa=signin&cb=5p934d4r8q9j
Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: Iframe src: https://accounts.intuit.com/xdr.html?v2=true&corsEnabled&tests=tag_obfuscation,ius_session
Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: Iframe src: https://accounts.intuit.com/ividFrame.html
Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: Iframe src: https://c31.qbo.intuit.com/app/hello?localguest=true
Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: Iframe src: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LcnSW0aAAAAAICg9byzvE1oFz4zXBI-CFh6W3st&co=aHR0cHM6Ly9jMzEucWJvLmludHVpdC5jb206NDQz&hl=en&v=TbD3vPFlUWKZD-9L4ZxB0HJI&size=invisible&cb=estqkw6xjui1
Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: Iframe src: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LcnSW0aAAAAAICg9byzvE1oFz4zXBI-CFh6W3st&co=aHR0cHM6Ly9jMzEucWJvLmludHVpdC5jb206NDQz&hl=en&v=TbD3vPFlUWKZD-9L4ZxB0HJI&size=invisible&badge=inline&sa=signin&cb=5p934d4r8q9j
Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: Iframe src: https://accounts.intuit.com/xdr.html?v2=true&corsEnabled&tests=tag_obfuscation,ius_session
Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: Iframe src: https://accounts.intuit.com/ividFrame.html
Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: Iframe src: https://c31.qbo.intuit.com/app/hello?localguest=true
Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: Iframe src: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LcnSW0aAAAAAICg9byzvE1oFz4zXBI-CFh6W3st&co=aHR0cHM6Ly9jMzEucWJvLmludHVpdC5jb206NDQz&hl=en&v=TbD3vPFlUWKZD-9L4ZxB0HJI&size=invisible&cb=estqkw6xjui1
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login&iux_tests=tmx_tag_obfuscation_cutover:b	HTTP Parser: Iframe src: https://accounts.intuit.com/xdr.html?v2=true&corsEnabled&tests=tag_obfuscation,ius_session
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login&iux_tests=tmx_tag_obfuscation_cutover:b	HTTP Parser: Iframe src: https://accounts.intuit.com/xdr.html?v2=true&corsEnabled&tests=tag_obfuscation,ius_session
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login	HTTP Parser: Iframe src: https://accounts.intuit.com/xdr.html?v2=true&corsEnabled&tests=tag_obfuscation,ius_session
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login	HTTP Parser: Iframe src: https://accounts.intuit.com/xdr.html?v2=true&corsEnabled&tests=tag_obfuscation,ius_session

Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login&iux_tests=tmx_tag_obfuscation_cutover:b	HTTP Parser: Number of links: 0
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login&iux_tests=tmx_tag_obfuscation_cutover:b	HTTP Parser: Number of links: 0
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login	HTTP Parser: Number of links: 0
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login	HTTP Parser: Number of links: 0

Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: Title: QuickBooks Login - Sign in to QuickBooks to manage your business does not match URL
Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: Title: QuickBooks Login - Sign in to QuickBooks to manage your business does not match URL
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login&iux_tests=tmx_tag_obfuscation_cutover:b	HTTP Parser: Title: QuickBooks does not match URL
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login&iux_tests=tmx_tag_obfuscation_cutover:b	HTTP Parser: Title: QuickBooks does not match URL
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login	HTTP Parser: Title: QuickBooks does not match URL
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login	HTTP Parser: Title: QuickBooks does not match URL

Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: Invalid link: Forgot your password?
Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: Invalid link: Forgot your password?
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login&iux_tests=tmx_tag_obfuscation_cutover:b	HTTP Parser: Invalid link: Forgot your password?
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login&iux_tests=tmx_tag_obfuscation_cutover:b	HTTP Parser: Invalid link: Forgot your password?
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login	HTTP Parser: Invalid link: Forgot your password?
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login	HTTP Parser: Invalid link: Forgot your password?

Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: No <meta name="author".. found
Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: No <meta name="author".. found
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login&iux_tests=tmx_tag_obfuscation_cutover:b	HTTP Parser: No <meta name="author".. found
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login&iux_tests=tmx_tag_obfuscation_cutover:b	HTTP Parser: No <meta name="author".. found
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login	HTTP Parser: No <meta name="author".. found
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login	HTTP Parser: No <meta name="author".. found

Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: No <meta name="copyright".. found
Source: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	HTTP Parser: No <meta name="copyright".. found
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login&iux_tests=tmx_tag_obfuscation_cutover:b	HTTP Parser: No <meta name="copyright".. found
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login&iux_tests=tmx_tag_obfuscation_cutover:b	HTTP Parser: No <meta name="copyright".. found
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login	HTTP Parser: No <meta name="copyright".. found
Source: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 44.241.139.147:443 -> 192.168.2.3:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.241.139.147:443 -> 192.168.2.3:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.176.210:443 -> 192.168.2.3:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.176.210:443 -> 192.168.2.3:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.81.121.166:443 -> 192.168.2.3:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.81.121.166:443 -> 192.168.2.3:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.133.92:443 -> 192.168.2.3:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.133.92:443 -> 192.168.2.3:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.36.132.22:443 -> 192.168.2.3:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.36.132.22:443 -> 192.168.2.3:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.16.63.147:443 -> 192.168.2.3:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.16.63.147:443 -> 192.168.2.3:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.132.130:443 -> 192.168.2.3:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.132.130:443 -> 192.168.2.3:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.3:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.3:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.132.130:443 -> 192.168.2.3:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.96:443 -> 192.168.2.3:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.96:443 -> 192.168.2.3:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.3:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.3:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.81:443 -> 192.168.2.3:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.9:443 -> 192.168.2.3:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.81:443 -> 192.168.2.3:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.9:443 -> 192.168.2.3:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.42.228:443 -> 192.168.2.3:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.42.228:443 -> 192.168.2.3:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.211.62.226:443 -> 192.168.2.3:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.211.62.226:443 -> 192.168.2.3:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.254.127.126:443 -> 192.168.2.3:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.254.127.126:443 -> 192.168.2.3:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.124.119.57:443 -> 192.168.2.3:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.124.119.57:443 -> 192.168.2.3:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.199.92:443 -> 192.168.2.3:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.199.92:443 -> 192.168.2.3:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.38:443 -> 192.168.2.3:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.38:443 -> 192.168.2.3:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.38:443 -> 192.168.2.3:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.38:443 -> 192.168.2.3:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.3:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.3:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.94:443 -> 192.168.2.3:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.110:443 -> 192.168.2.3:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.110:443 -> 192.168.2.3:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.94:443 -> 192.168.2.3:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.69:443 -> 192.168.2.3:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.67:443 -> 192.168.2.3:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.67:443 -> 192.168.2.3:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.69:443 -> 192.168.2.3:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.34:443 -> 192.168.2.3:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.34:443 -> 192.168.2.3:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.198.240.31:443 -> 192.168.2.3:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.198.240.31:443 -> 192.168.2.3:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.239.250.146:443 -> 192.168.2.3:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.174.11.69:443 -> 192.168.2.3:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.174.11.69:443 -> 192.168.2.3:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.19.186.105:443 -> 192.168.2.3:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.19.186.105:443 -> 192.168.2.3:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.86.36:443 -> 192.168.2.3:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.86.36:443 -> 192.168.2.3:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.148.149.218:443 -> 192.168.2.3:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.163.214.119:443 -> 192.168.2.3:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.233.214.243:443 -> 192.168.2.3:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.233.214.243:443 -> 192.168.2.3:49884 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.42:443 -> 192.168.2.3:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.42:443 -> 192.168.2.3:49886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.140:443 -> 192.168.2.3:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.140:443 -> 192.168.2.3:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.194.154.95:443 -> 192.168.2.3:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.194.154.95:443 -> 192.168.2.3:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.38:443 -> 192.168.2.3:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.38:443 -> 192.168.2.3:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.94.232.32:443 -> 192.168.2.3:49893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.94.232.32:443 -> 192.168.2.3:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.13.47.186:443 -> 192.168.2.3:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.13.47.186:443 -> 192.168.2.3:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.140:443 -> 192.168.2.3:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.140:443 -> 192.168.2.3:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.206.83.104:443 -> 192.168.2.3:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.206.83.104:443 -> 192.168.2.3:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.192:443 -> 192.168.2.3:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.192:443 -> 192.168.2.3:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.0.160.13:443 -> 192.168.2.3:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.0.160.13:443 -> 192.168.2.3:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.194.201.176:443 -> 192.168.2.3:49929 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.238.207.51:443 -> 192.168.2.3:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.238.207.51:443 -> 192.168.2.3:49925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.225.202.106:443 -> 192.168.2.3:49926 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.235.182.173:443 -> 192.168.2.3:49927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.235.182.173:443 -> 192.168.2.3:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.117:443 -> 192.168.2.3:49933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.117:443 -> 192.168.2.3:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.225.202.106:443 -> 192.168.2.3:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.215.246:443 -> 192.168.2.3:49961 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.215.246:443 -> 192.168.2.3:49962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.33:443 -> 192.168.2.3:49963 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.33:443 -> 192.168.2.3:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.215.246:443 -> 192.168.2.3:49960 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.153.154:443 -> 192.168.2.3:49967 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.153.154:443 -> 192.168.2.3:49968 version: TLS 1.2

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: z:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: x:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: v:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: t:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: r:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: p:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: n:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: l:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: j:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: h:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: f:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: b:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: y:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: w:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: u:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: s:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: q:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: o:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: m:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: k:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: i:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: g:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: e:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: c:	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: a:	Jump to behavior

Source: about[1].htm.2.dr	String found in binary or memory: href="https://www.youtube.com/watch?v=AnndF9qmfjE" equals www.youtube.com (Youtube)
Source: privacy[2].htm.2.dr	String found in binary or memory: like an email address to receive updates about our services.</p><p>We also collect the content you create, upload, or receive from others when using our services. This includes things like email you write and receive, photos and videos you save, docs and spreadsheets you create, and comments you make on YouTube videos.</p><h2>Information we collect as you use our services</h2><h3>Your apps, browsers & devices</h3><div class="pjyxF "><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/e79ea0ed464fc8952d5b5582f9f9ae53.svg"/></div><p>We collect information about the apps, browsers, and <a class="g1mG8c" href="privacy#footnote-devices" data-name="devices" jsaction="click:IPbaae(preventDefault=true)">devices</a> you use to access Google services, which helps us provide features like automatic product updates and dimming your screen if your battery runs low.</p><p>The information we collect includes <a class="g1mG8c" href="privacy#footnote-unique-id" data-name="unique-id" jsaction="click:IPbaae(preventDefault=true)">unique identifiers</a>, browser type and settings, device type and settings, operating system, mobile network information including carrier name and phone number, and application version number. We also collect information about the interaction of your apps, browsers, and devices with our services, including <a class="g1mG8c" href="privacy#footnote-ip" data-name="ip" jsaction="click:IPbaae(preventDefault=true)">IP address</a>, crash reports, system activity, and the date, time, and <a class="g1mG8c" href="privacy#footnote-referrer-url" data-name="referrer-url" jsaction="click:IPbaae(preventDefault=true)">referrer URL</a> of your request.</p><p>We collect this information when a Google service on your device contacts our servers equals www.youtube.com (Youtube)
Source: Bootstrap[1].js.2.dr	String found in binary or memory: "description":"Microtest: www.google referrer is SEO or PPC"},"mt30":{"expectedKvPairs":{"eVar22":/ppc$\|seo$/},"name":"bing search referrer","description":"Microtest: www.bing referrer is SEO or PPC"},"mt31":{"expectedKvPairs":{"eVar22":/ppc$\|seo$/},"name":"yahoo search referrer","description":"Microtest: search.yahoo referrer is SEO or PPC"},"mt32":{"expectedKvPairs":{"prop33":/intuitsbgprod\|intuitsbgqa/},"hideSuccess":true,"name":"data sent to sbg report suite","description":"Microtest: intuitsbgprod or intuitsbgqa included in report suites"}, equals www.yahoo.com (Yahoo)
Source: Bootstrap[1].js.2.dr	String found in binary or memory: "mt27":{"expectedKvPairs":{"adobeEventList":/event243(?![0-9])/}},"mt28":{"expectedKvPairs":{"adobeEventList":/purchase/}},"mt29":{"expectedKvPairs":{"referrer":/www.google/}},"mt30":{"expectedKvPairs":{"referrer":/www.bing/}},"mt31":{"expectedKvPairs":{"referrer":/search.yahoo/}},"mt32":{"expectedKvPairs":{"ALWAYS":""}},"mt33":{"expectedKvPairs":{"ALWAYS":""}}};window._waTests=window._waTests\|\|{};window._waTests.tests=tests;window._waTests.conditions=testConditions;window._waConfig=window._waConfig\|\| equals www.yahoo.com (Yahoo)
Source: 1827482914219447[1].js0.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsGetTier");e.exports=function(b,c){c=a(c);c=c==null?"www.facebook.com":"www."+c+".facebook.com";return"https://"+c+"/signals/iwl.js?pixel_id="+b}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}};e.exports=new h(function(d,e){function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=function(){n.removeItem(m),a.close()};e.src=i(c,g.ENDPOINT);b.body&&b.body.appendChild(e)}var o=!1,p=function(a){return!!(e&&e.pixelsByID&&Object.prototype.hasOwnProperty.call(e.pixelsByID,a))};function q(){if(o)return;var b=n.getItem(m);if(!b)return;b=JSON.parse(b);var c=b.pixelID,d=b.graphToken,e=b.sessionStartTime;o=!0;h(c,function(){var b=p(c)?c:null;a.FacebookIWL.init(b,d,e)})}function r(b){if(o)return;h(b,func
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: Visited: user@https://www.youtube.com/embed/esI-RAuOL8o?origin=https%3A%2F%2Fwww.intuit.com&controls=1&iv_load_policy=3&playsinline=1&rel=0&mute=0&loop=1&showInfo=0&autoplay=0&playlist=esI-RAuOL8o&enablejsapi=1&widgetid=1 equals www.youtube.com (Youtube)
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: Visited: user@https://www.youtube.com/embed/esI-RAuOL8o?origin=https%3A%2F%2Fwww.intuit.com&controls=1&iv_load_policy=3&playsinline=1&rel=0&mute=0&loop=1&showInfo=0&autoplay=0&playlist=esI-RAuOL8o&enablejsapi=1&widgetid=14 equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: YK.prototype.createUnpluggedLocationInfo=function(a){var b={};a=a.coords;if(null===a\|\|void 0===a?0:a.latitude)b.latitudeE7=Math.floor(1E7a.latitude);if(null===a\|\|void 0===a?0:a.longitude)b.longitudeE7=Math.floor(1E7a.longitude);if(null===a\|\|void 0===a?0:a.accuracy)b.locationRadiusMeters=Math.round(a.accuracy);return b};$K.prototype.tx=function(a,b){a={};var c=Hh([]);c&&(a.Authorization=c,c=b=null===b\|\|void 0===b?void 0:b.sessionIndex,void 0===c&&(c=Number(g.N("SESSION_INDEX",0)),c=isNaN(c)?0:c),a["X-Goog-AuthUser"]=c,"INNERTUBE_HOST_OVERRIDE"in Vr\|\|(a["X-Origin"]=window.location.origin),g.Zr("pageid_as_header_web")&&void 0===b&&"DELEGATED_SESSION_ID"in Vr&&(a["X-Goog-PageId"]=g.N("DELEGATED_SESSION_ID")));return a};var bL;g.v(aL,$K);aL.prototype.tx=function(a,b){a=$K.prototype.tx.call(this,a,b);return Object.assign(Object.assign({},a),this.Xp)};var Jpa=/[&\?]action_proxy=1/,Ipa=/[&\?]token=([\w-])/,Kpa=/[&\?]video_id=([\w-])/,Lpa=/[&\?]index=([\d-])/,Mpa=/[&\?]m_pos_ms=([\d-])/,Ppa=/[&\?]vvt=([\w-]*)/,Dpa="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),Npa="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),Fpa={android:"ANDROID", equals www.youtube.com (Youtube)
Source: statement[1].htm.2.dr	String found in binary or memory: ais)</span> </p><p> </a> <a href="https://www.intuit.com/in/" class="language-item is-active" > </p><p class="language-copy"> <span class="" data-component="icon" data-icon="india" ></span> <span class="name">India (English)</span> </p><p> </a> </div></div></div></div></div><div class="col-md-3 col-sm-12 social-media"><div class="brand"> <a href="https://www.facebook.com/intuit" target="_blank" aria-label="Facebook" data-wa-link="ftr-corporate-Facebook" > <span class="" data-component="icon" data-icon="Facebook" ></span></a> </div><div class="brand"> <a href="https://www.linkedin.com/company/intuit" target="_blank" aria-label="LinkedIn" data-wa-link="ftr-corporate-LinkedIn" > <span class="" data-component="icon" data-icon="LinkedIn" ></span></a> </div><div class="brand"> <a href="https://www.youtube.com/user/intuit" target="_blank" aria-label="YouTube" data-wa-link="ftr-corporate-YouTube" > <span class="" data-component="icon" data-icon="Youtube" ></span></a> </div><div class="brand"> <a href="https://twitter.com/Intuit" target="_blank" aria-label="Twitter" data-wa-link="ftr-corporate-Twitter" > <span class="" data-component="icon" data-icon="twitter" ></span></a> </div></div></div></div></section></div><div class="footer-bottom"><section class="container icons"><div class="row"><div class="col-sm-3 logo"> <a href="https://www.intuit.com/" class="logo-footer" aria-label="Intuit" data-wa-link="ftr-corporate-icom" > <span class="" data-component="icon" data-icon="logo-intuit-bottom" ></span> </a> </div><div class="col-sm-9 brands"> <a href="https://turbotax.intuit.com/?cid=seq_intuit_tt_click_ft" target="_blank" class="link" aria-label="TurboTax" data-wa-link="ftr-corporate-turbotax" > <span class="" data-component="icon" data-icon="logo-turbotax" ></span> </a> <a href="https://quickbooks.intuit.com/?sc=seq_intuit_qb_click_ft" target="_blank" class="link" aria-label="QuickBooks" data-wa-link="ftr-corporate-qb" > <span class="" data-component="icon" data-icon="logo-quickbooks" ></span> </a> <a href="https://www.mint.com/?utm_medium=intuit_home&utm_sourc
Source: statement[1].htm.2.dr	String found in binary or memory: ais)</span> </p><p> </a> <a href="https://www.intuit.com/in/" class="language-item is-active" > </p><p class="language-copy"> <span class="" data-component="icon" data-icon="india" ></span> <span class="name">India (English)</span> </p><p> </a> </div></div></div></div></div><div class="col-md-3 col-sm-12 social-media"><div class="brand"> <a href="https://www.facebook.com/intuit" target="_blank" aria-label="Facebook" data-wa-link="ftr-corporate-Facebook" > <span class="" data-component="icon" data-icon="Facebook" ></span></a> </div><div class="brand"> <a href="https://www.linkedin.com/company/intuit" target="_blank" aria-label="LinkedIn" data-wa-link="ftr-corporate-LinkedIn" > <span class="" data-component="icon" data-icon="LinkedIn" ></span></a> </div><div class="brand"> <a href="https://www.youtube.com/user/intuit" target="_blank" aria-label="YouTube" data-wa-link="ftr-corporate-YouTube" > <span class="" data-component="icon" data-icon="Youtube" ></span></a> </div><div class="brand"> <a href="https://twitter.com/Intuit" target="_blank" aria-label="Twitter" data-wa-link="ftr-corporate-Twitter" > <span class="" data-component="icon" data-icon="twitter" ></span></a> </div></div></div></div></section></div><div class="footer-bottom"><section class="container icons"><div class="row"><div class="col-sm-3 logo"> <a href="https://www.intuit.com/" class="logo-footer" aria-label="Intuit" data-wa-link="ftr-corporate-icom" > <span class="" data-component="icon" data-icon="logo-intuit-bottom" ></span> </a> </div><div class="col-sm-9 brands"> <a href="https://turbotax.intuit.com/?cid=seq_intuit_tt_click_ft" target="_blank" class="link" aria-label="TurboTax" data-wa-link="ftr-corporate-turbotax" > <span class="" data-component="icon" data-icon="logo-turbotax" ></span> </a> <a href="https://quickbooks.intuit.com/?sc=seq_intuit_qb_click_ft" target="_blank" class="link" aria-label="QuickBooks" data-wa-link="ftr-corporate-qb" > <span class="" data-component="icon" data-icon="logo-quickbooks" ></span> </a> <a href="https://www.mint.com/?utm_medium=intuit_home&utm_sourc
Source: statement[1].htm.2.dr	String found in binary or memory: ais)</span> </p><p> </a> <a href="https://www.intuit.com/in/" class="language-item is-active" > </p><p class="language-copy"> <span class="" data-component="icon" data-icon="india" ></span> <span class="name">India (English)</span> </p><p> </a> </div></div></div></div></div><div class="col-md-3 col-sm-12 social-media"><div class="brand"> <a href="https://www.facebook.com/intuit" target="_blank" aria-label="Facebook" data-wa-link="ftr-corporate-Facebook" > <span class="" data-component="icon" data-icon="Facebook" ></span></a> </div><div class="brand"> <a href="https://www.linkedin.com/company/intuit" target="_blank" aria-label="LinkedIn" data-wa-link="ftr-corporate-LinkedIn" > <span class="" data-component="icon" data-icon="LinkedIn" ></span></a> </div><div class="brand"> <a href="https://www.youtube.com/user/intuit" target="_blank" aria-label="YouTube" data-wa-link="ftr-corporate-YouTube" > <span class="" data-component="icon" data-icon="Youtube" ></span></a> </div><div class="brand"> <a href="https://twitter.com/Intuit" target="_blank" aria-label="Twitter" data-wa-link="ftr-corporate-Twitter" > <span class="" data-component="icon" data-icon="twitter" ></span></a> </div></div></div></div></section></div><div class="footer-bottom"><section class="container icons"><div class="row"><div class="col-sm-3 logo"> <a href="https://www.intuit.com/" class="logo-footer" aria-label="Intuit" data-wa-link="ftr-corporate-icom" > <span class="" data-component="icon" data-icon="logo-intuit-bottom" ></span> </a> </div><div class="col-sm-9 brands"> <a href="https://turbotax.intuit.com/?cid=seq_intuit_tt_click_ft" target="_blank" class="link" aria-label="TurboTax" data-wa-link="ftr-corporate-turbotax" > <span class="" data-component="icon" data-icon="logo-turbotax" ></span> </a> <a href="https://quickbooks.intuit.com/?sc=seq_intuit_qb_click_ft" target="_blank" class="link" aria-label="QuickBooks" data-wa-link="ftr-corporate-qb" > <span class="" data-component="icon" data-icon="logo-quickbooks" ></span> </a> <a href="https://www.mint.com/?utm_medium=intuit_home&utm_sourc
Source: statement[1].htm.2.dr	String found in binary or memory: ais)</span> </p><p> </a> <a href="https://www.intuit.com/in/" class="language-item is-active" > </p><p class="language-copy"> <span class="" data-component="icon" data-icon="india" ></span> <span class="name">India (English)</span> </p><p> </a> </div></div></div></div></div><div class="col-md-3 col-sm-12 social-media"><div class="brand"> <a href="https://www.facebook.com/intuit" target="_blank" aria-label="Facebook" data-wa-link="ftr-corporate-Facebook" > <span class="" data-component="icon" data-icon="Facebook" ></span></a> </div><div class="brand"> <a href="https://www.linkedin.com/company/intuit" target="_blank" aria-label="LinkedIn" data-wa-link="ftr-corporate-LinkedIn" > <span class="" data-component="icon" data-icon="LinkedIn" ></span></a> </div><div class="brand"> <a href="https://www.youtube.com/user/intuit" target="_blank" aria-label="YouTube" data-wa-link="ftr-corporate-YouTube" > <span class="" data-component="icon" data-icon="Youtube" ></span></a> </div><div class="brand"> <a href="https://twitter.com/Intuit" target="_blank" aria-label="Twitter" data-wa-link="ftr-corporate-Twitter" > <span class="" data-component="icon" data-icon="twitter" ></span></a> </div></div></div></div></section></div><div class="footer-bottom"><section class="container icons"><div class="row"><div class="col-sm-3 logo"> <a href="https://www.intuit.com/" class="logo-footer" aria-label="Intuit" data-wa-link="ftr-corporate-icom" > <span class="" data-component="icon" data-icon="logo-intuit-bottom" ></span> </a> </div><div class="col-sm-9 brands"> <a href="https://turbotax.intuit.com/?cid=seq_intuit_tt_click_ft" target="_blank" class="link" aria-label="TurboTax" data-wa-link="ftr-corporate-turbotax" > <span class="" data-component="icon" data-icon="logo-turbotax" ></span> </a> <a href="https://quickbooks.intuit.com/?sc=seq_intuit_qb_click_ft" target="_blank" class="link" aria-label="QuickBooks" data-wa-link="ftr-corporate-qb" > <span class="" data-component="icon" data-icon="logo-quickbooks" ></span> </a> <a href="https://www.mint.com/?utm_medium=intuit_home&utm_sourc
Source: base[1].js.2.dr	String found in binary or memory: b.i.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.ek(b,"www.youtube.com"),c=b.toString()):c=Lz(c);b=new g.yB(c);b.set("cmo=pf","1");d&&b.set("cmo=td","a1.googlevideo.com");return b}; equals www.youtube.com (Youtube)
Source: privacy[2].htm.2.dr	String found in binary or memory: d like saved in your account. For example, you can turn on Location History if you want traffic predictions for your daily commute, or you can save your YouTube Watch History to get better video suggestions.</p><p class="n8ZyWe"><a href="https://myaccount.google.com/activitycontrols?utm_source=pp" class="ky8S2">Go to Activity Controls</a></p></div></div><div class="h0yEnd"><div class="IN2z4b"><img class="mZPFM uTLSAb" alt="" src="https://www.gstatic.com/policies/privacy/900a793eae04f4bddd675f8d95c4a794.svg"/></div><div class="gwGFXb"><h3 class="SWFQ9e">Ad settings</h3><p class="n8ZyWe">Manage your preferences about the ads shown to you on Google and on sites and apps that <a class="g1mG8c" href="privacy#footnote-partner" data-name="partner" jsaction="click:IPbaae(preventDefault=true)">partner with Google</a> to show ads. You can modify your interests, choose whether your personal information is used to make ads more relevant to you, and turn on or off certain advertising services.</p><p class="n8ZyWe"><a href="https://adssettings.google.com/?utm_source=pp" class="ky8S2">Go to Ad Settings</a></p></div></div><div class="h0yEnd"><div class="IN2z4b"><img class="mZPFM uTLSAb" alt="" src="https://www.gstatic.com/policies/privacy/c1b97d74dace7e43a9ccb26841a7cae4.svg"/></div><div class="gwGFXb"><h3 class="SWFQ9e">About you</h3><p class="n8ZyWe">Control what others see about you across Google services.</p><p class="n8ZyWe"><a href="https://myaccount.google.com/profile?utm_source=pp" class="ky8S2">Go to About You</a></p></div></div><div class="h0yEnd"><div class="IN2z4b"><img class="mZPFM uTLSAb" alt="" src="https://www.gstatic.com/policies/privacy/e28714c71f217892f72b2698ea5cefef.svg"/></div><div class="gwGFXb"><h3 class="SWFQ9e">Shared endorsements</h3><p class="n8ZyWe">Choose whether your name and photo appear next to your activity, like reviews and recommendations, that appear in ads.</p><p class="n8ZyWe"><a href="https://myaccount.google.com/shared-endorsements?utm_source=pp" class="ky8S2">Go to Shared Endorsements</a></p></div></div><h3>Ways to review & update your information</h3><div class="h0yEnd WTetv adRtod"><div class="IN2z4b"><img class="mZPFM uTLSAb" alt="" src="https://www.gstatic.com/policies/privacy/5e7cd445f8861a262a3da876f855a4cc.svg"/></div><div class="gwGFXb"><h3 class="SWFQ9e">My Activity</h3><p class="n8ZyWe">My Activity allows you to review and control data that equals www.youtube.com (Youtube)
Source: utag[1].js.2.dr	String found in binary or memory: function checkMessageForYouTubeOrigin(event){if(event.origin!=='https://www.youtube.com'&&event.origin!=='http://www.youtube.com'){return false;} equals www.youtube.com (Youtube)
Source: utag[1].js.2.dr	String found in binary or memory: function genrateQBSECookie(){var nintyDayCookieName="qbse.cid";var nintyDayCookieTimestampName="qbse.cid_timer";var externalUrlMappings={GOOGLE:["google.com.au","google.com.br","google.ca","www.google.fr","google.co.in","google.co.uk"],USGOOGLE:["google.com"],AOL:["aol.com","aol.com.au","aol.com.br","aol.ca","www.aol.fr","aol.in","aol.co.uk"],BING:["bing.com"],YAHOO:["yahoo.com","au.yahoo.com","br.yahoo.com","ca.yahoo.com","fr.yahoo.com","in.yahoo.com","uk.yahoo.com"],LYCOS:["lycos.com","lycos.com.au","lycos.ca","lycos.in","lycos.co.uk","lycos.fr"],ASK:["ask.com"],FACEBOOK:["facebook.com"],KATOO:["uk.kartoo.com"],ZEN:["wrx.zen.co.uk"],YAHOOSEARCH:["r.search.yahoo.com"]};var internalUrlMappings={INTUIT:["www.intuit.com","www.intuit.com.au","www.quickbooksonline.com.br","www.intuit.ca","www.quickbooks.fr","www.intuit.in","www.intuit.co.uk"],MV_INTUIT:["intuit.mv.intuit.com"],QB_INTUIT:["www.quickbooks.com.au","quickbooks.intuit.ca","www.quickbooks.in","plus.quickbooks.co.uk"],NEW_INTUIT:["quickbooks.intuit.com.au","quickbooks.com.br","quickbooks.intuit.fr","quickbooks.intuit.in","quickbooks.intuit.co.uk"],ENT_INTUIT:["enterprise.intuit.ca"],GP_INTUIT:["gopayment.intuit.ca"],MS_INTUIT:["merchantservices.intuit.ca"],QB_INTUIT1:["quickbooksenligne.intuit.ca"],PROADV_INTUIT:["proadvisor.intuit.ca"],PROADV_INTUIT1:["conseillerspro.intuit.ca"],PROADV_INTUIT2:["comptable.intuit.ca"],PROFILE_INTUIT:["profile.intuit.ca"],PROFILE_INTUIT1:["profilefrancais.intuit.ca"],ACCT_INTUIT:["accountant.intuit.ca"],TT_INTUIT:["turbotax.intuit.ca"],TT_INTUIT1:["impotrapide.intuit.ca"],COMM_INTUIT:["community.turbotaxonline.ca"],CTSDEV:["ctsdev"]};var mobileUrls={'m.intuit.com':'MOBILEINTUIT','qbinproduct.intuit.com/mobile':'MOBILE'};var code_mapping={GOOGLE:"SEO-GOO_",USGOOGLE:"SEO-GOO_",AOL:"SEO-AOL_",BING:"SEO-MSN_",YAHOO:"SEO-YAH_",LYCOS:"SEO-LYC_",ASK:"SEO-ASK_",MOBILEINTUITANDROID:"MOB-WEB-AND",MOBILEINTUITOTHER:"MOB-WEB",MOBILEANDROID:"MOB-IPD-AND",MOBILEOTHER:"MOB-IPD",INTUIT:"INT",ENT_INTUIT:"INT",GP_INTUIT:"INT",MS_INTUIT:"INT",PROADV_INTUIT:"INT",PROADV_INTUIT1:"INT",PROADV_INTUIT2:"INT",PROFILE_INTUIT:"INT",PROFILE_INTUIT1:"INT",ACCT_INTUIT:"INT",TT_INTUIT:"INT",TT_INTUIT1:"INT",COMM_INTUIT:"INT",QB_INTUIT:"INT",QB_INTUIT1:"INT",FACEBOOK:"SOC-FACEBOOK",YAHOOSEARCH:"SEO-YAH_",CTSDEV:"SEO-GOO_"};var deviceTypes={'android':'ANDROID','iphone':'IPHONE','defaultDevice':'UNKWN-DEVICE'};var device=setDevice(navigator.userAgent\|\|"");var cid=getQueryStrParam("cid");var sc=getQueryStrParam("sc");var xcid=getQueryStrParam("xcid");var referrer=document.referrer;var int,ext;var newCookieValue,newExpireDay,newExpireTimestamp;var noExistingCookie=(getCookie(nintyDayCookieName)===null);if(cid!==null&&cid.length>0){newCookieValue=updateCookieValue("cid",cid);if(noExistingCookie&&sc!==null&&sc.length>0){newCookieValue=updateCookieValue("sc",sc,newCookieValue);} equals www.yahoo.com (Yahoo)
Source: base[1].js.2.dr	String found in binary or memory: g.Ga("Goog_AdSense_Lidar_getUrlSignalsList",YJa,void 0);var lha=(new Date).getTime();var xq="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Iga=/\bocr\b/;var Jga=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var nla={H1:"LIVING_ROOM_APP_MODE_UNSPECIFIED",E1:"LIVING_ROOM_APP_MODE_MAIN",D1:"LIVING_ROOM_APP_MODE_KIDS",F1:"LIVING_ROOM_APP_MODE_MUSIC",G1:"LIVING_ROOM_APP_MODE_UNPLUGGED",C1:"LIVING_ROOM_APP_MODE_GAMING"};Aq.prototype.set=function(a,b){b=void 0===b?!0:b;0<=a&&52>a&&0===a%1&&this.data_[a]!=b&&(this.data_[a]=b,this.i=-1)}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.PG=function(a){var b=g.kG(a);!a.Z("yt_embeds_disable_new_error_lozenge_url")&&ula.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.hO.prototype.l=function(a){var b=this;fta(this);var c=a.dC,d=this.api.T();"GENERIC_WITHOUT_LINK"!==c\|\|d.C?"TOO_MANY_REQUESTS"===c?(d=this.api.getVideoData(),this.bd(kO(this,"TOO_MANY_REQUESTS_WITH_LINK",d.Um(),void 0,void 0,void 0,!1))):"HTML5_NO_AVAILABLE_FORMATS_FALLBACK"!==c\|\|d.C?this.bd(g.iO(a.errorMessage)):this.bd(kO(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c= equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.jG=function(a){a=qla(a.Da);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.kG(this);d&&"www.youtube.com"===c?d="https://youtu.be/"+a:g.XF(this)?(d="https://"+c+"/fire",b.v=a):(d=this.protocol+"://"+c+"/watch",b.v=a,Et&&(a=Tr())&&(b.ebc=a));return g.ui(d,b)}; equals www.youtube.com (Youtube)
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://www.youtube.com/embed/esI-RAuOL8o?origin=https%3A%2F%2Fwww.intuit.com&controls=1&iv_load_policy=3&playsinline=1&rel=0&mute=0&loop=1&showInfo=0&autoplay=0&playlist=esI-RAuOL8o&enablejsapi=1&widgetid=1 equals www.youtube.com (Youtube)
Source: utag[1].js.2.dr	String found in binary or memory: if(hasYtAPI==false&&iframes!=="undefined"&&iframes.length>0){var tag=document.createElement('script');tag.src="https://www.youtube.com/iframe_api";var firstScriptTag=document.getElementsByTagName('script')[0];firstScriptTag.parentNode.insertBefore(tag,firstScriptTag);} equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: kla=function(a,b){if(g.dF(a.experiments,"html5_qoe_intercept"))return g.dF(a.experiments,"html5_qoe_intercept");a.Uk?(b=b.vss_host\|\|"s.youtube.com",a.Z("www_for_videostats")&&"s.youtube.com"===b&&(b=qla(a.Da)\|\|"www.youtube.com")):b="video.google.com";return b}; equals www.youtube.com (Youtube)
Source: privacy[2].htm.2.dr	String found in binary or memory: ll keep a record of your request in order to help solve any issues you might be facing.</p><h3>Protect Google, our users, and the public</h3><div class="pjyxF "><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/02f8664b95445de6f27ba682f3c5f9ab.svg"/></div><p>We use information to help improve the <a class="g1mG8c" href="privacy#footnote-safety-reliability" data-name="safety-reliability" jsaction="click:IPbaae(preventDefault=true)">safety and reliability</a> of our services. This includes detecting, preventing, and responding to fraud, abuse, security risks, and technical issues that could harm Google, our users, or the public.</p><hr/><p>We use different technologies to process your information for these purposes. We use automated systems that analyze your content to provide you with things like customized search results, personalized ads, or other features tailored to how you use our services. And we analyze your content to help us <a class="g1mG8c" href="privacy#footnote-detect-abuse" data-name="detect-abuse" jsaction="click:IPbaae(preventDefault=true)">detect abuse</a> such as spam, malware, and illegal content. We also use <a class="g1mG8c" href="privacy#footnote-algorithm" data-name="algorithm" jsaction="click:IPbaae(preventDefault=true)">algorithms</a> to recognize patterns in data. For example, Google Translate helps people communicate across languages by detecting common language patterns in phrases you ask it to translate.</p><p>We may <a class="g1mG8c" href="privacy#footnote-combine-info" data-name="combine-info" jsaction="click:IPbaae(preventDefault=true)">combine the information we collect</a> among our services and across your devices for the purposes described above. For example, if you watch videos of guitar players on YouTube, you might see an ad for guitar lessons on a site that uses our ad products. Depending on your account settings, <a class="g1mG8c" href="privacy#footnote-other-sites" data-name="other-sites" jsaction="click:IPbaae(preventDefault=true)">your activity on other sites and apps</a> may be associated with your personal information in order to improve Google equals www.youtube.com (Youtube)
Source: privacy[2].htm.2.dr	String found in binary or memory: ll provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes).</p></div></div><div class="m9JGT xXnO1d"><div class="nrAB0c"><div id="products" class="ahbJ5"></div><h1>Related privacy practices</h1><h2>Specific Google services</h2><p>The following privacy notices provide additional information about some Google services:</p><ul><li><a href="https://www.google.com/chrome/intl/en/privacy.html" class="N6CPUe" target="_blank">Chrome & the Chrome Operating System</a></li><li><a href="https://payments.google.com/legaldocument?family=0.privacynotice&hl=en" class="N6CPUe" target="_blank">Payments</a></li><li><a href="https://fiber.google.com/legal/privacy.html" class="N6CPUe" target="_blank">Fiber</a></li><li><a href="https://fi.google.com/about/tos/#project-fi-privacy-notice" class="N6CPUe" target="_blank">Google Fi</a></li><li><a href="https://workspace.google.com/terms/education_privacy.html" class="N6CPUe" target="_blank">Google Workspace for Education</a></li><li><a href="https://readalong.google/intl/en_CH/privacy" class="N6CPUe" target="_blank">Read Along</a></li><li><a href="https://kids.youtube.com/privacynotice" class="N6CPUe" target="_blank">YouTube Kids</a></li><li><a href="https://families.google.com/familylink/privacy/child-policy/" class="N6CPUe" target="_blank">Google Accounts Managed with Family Link, for Children under 13 (or applicable age in your country)</a></li><li><a href="https://assistant.google.com/privacy-notice-childrens-features/" class="N6CPUe" target="_blank">Voice and Audio Collection from Children equals www.youtube.com (Youtube)
Source: www-widgetapi[1].js.2.dr	String found in binary or memory: m.setup=function(a,b){var c=document;if(a="string"===typeof a?c.getElementById(a):a)if(c="iframe"===a.tagName.toLowerCase(),b.host\|\|(b.host=c?Hb(a.src):"https://www.youtube.com"),this.i=new Si(b),c\|\|(b=aj(this,a),this.m=a,(c=a.parentNode)&&c.replaceChild(b,a),a=b),this.h=a,this.h.id\|\|(this.h.id="widget"+Ia(this.h)),Mi[this.h.id]=this,window.postMessage){this.l=new M;bj(this);b=Z(this.i,"events");for(var d in b)b.hasOwnProperty(d)&&this.addEventListener(d,b[d]);for(var e in Oi)Oi.hasOwnProperty(e)&& equals www.youtube.com (Youtube)
Source: privacy[2].htm.2.dr	String found in binary or memory: re signed in to a Google Account, including:</p><ul><li>Browser settings: For example, you can configure your browser to indicate when Google has set a <a class="g1mG8c" href="privacy#footnote-cookies" data-name="cookies" jsaction="click:IPbaae(preventDefault=true)">cookie</a> in your browser. You can also configure your browser to block all cookies from a specific domain or all domains. But remember that our services <a class="g1mG8c" href="privacy#footnote-rely-on-cookies" data-name="rely-on-cookies" jsaction="click:IPbaae(preventDefault=true)">rely on cookies to function properly</a>, for things like remembering your language preferences.</li><li>Device-level settings: Your device may have controls that determine what information we collect. For example, you can <a href="https://support.google.com/websearch?p=privpol_locserp" class="N6CPUe" target="_blank">modify location settings</a> on your Android device.</li></ul></div></div><div class=" xXnO1d"><div class="nrAB0c"><div id="infosharing" class="ahbJ5"></div><div class="pjyxF m2dIJf"><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/fa9e0e90d1e7ec399dad9f3257a9bb63.svg"/></div><h1>Sharing your information</h1><h2>When you share your information</h2><p>Many of our services let you share information with other people, and you have control over how you share. For example, you can share videos on YouTube publicly or you can decide to keep your videos private. Remember, when you share information publicly, your content may become accessible through search engines, including Google Search.</p><p>When you equals www.youtube.com (Youtube)
Source: privacy[2].htm.2.dr	String found in binary or memory: re signed out, you can manage information associated with your browser or device, including:</p><ul><li>Signed-out search personalization: <a href="https://www.google.com/history/optout?utm_source=pp" class="N6CPUe" target="_blank">Choose</a> whether your search activity is used to offer you more relevant results and recommendations.</li><li>YouTube settings: Pause and delete your <a href="https://www.youtube.com/feed/history/search_history?utm_source=pp" class="N6CPUe" target="_blank">YouTube Search History</a> and your <a href="https://www.youtube.com/feed/history?utm_source=pp" class="N6CPUe" target="_blank">YouTube Watch History</a>.</li><li>Ad Settings: <a href="https://adssettings.google.com/?utm_source=pp" class="N6CPUe" target="_blank">Manage</a> your preferences about the ads shown to you on Google and on sites and apps that partner with Google to show ads.</li></ul><h2>Exporting, removing & deleting your information</h2><p>You can export a copy of content in your Google Account if you want to back it up or use it with a service outside of Google.</p><div class="h0yEnd"><div class="IN2z4b"><img class="mZPFM " alt="" src="https://www.gstatic.com/policies/privacy/5959e84c2197c8a27da0a717f1cd47d5.svg"/></div><div class="gwGFXb"><p class="n8ZyWe"><a href="https://takeout.google.com/?utm_source=pp" class="ky8S2">Export your data</a></p></div></div><p>You can also <a href="https://support.google.com/legal?p=privpol_remove" class="N6CPUe" target="_blank">request to remove content</a> from specific Google services based on applicable law.</p><p>To delete your information, you can:</p><ul><li>Delete your content from <a class="g1mG8c" href="privacy#footnote-delete-specific" data-name="delete-specific" jsaction="click:IPbaae(preventDefault=true)">specific Google services</a></li><li>Search for and then delete specific items from your account using <a href="https://myactivity.google.com/?utm_source=pp" class="N6CPUe" target="_blank">My Activity</a></li><li><a href="https://myaccount.google.com/deleteservices?utm_source=pp" class="N6CPUe" target="_blank">Delete specific Google products</a>, including your information associated with those products</li><li><a href="https://myaccount.google.com/deleteaccount?utm_source=pp" class="N6CPUe" target="_blank">Delete your entire Google Account</a></li></ul><div class="h0yEnd"><div class="IN2z4b"><img class="mZPFM " alt="" src="https://www.gstatic.com/policies/privacy/1fa3e4ce8ac456f39ed02a6f9eb49b14.svg"/></div><div class="gwGFXb"><p class="n8ZyWe"><a href="https://myaccount.google.com/delete-services-or-account?utm_source=pp" class="ky8S2">Delete your information</a></p></div></div><p>And finally, <a href="https://myaccount.google.com/inactive?utm_source=pp" class="N6CPUe" target="_blank">Inactive Account Manager</a> allows you to give someone else access to parts of your Google Account in case you equals www.youtube.com (Youtube)
Source: privacy[2].htm.2.dr	String found in binary or memory: re using an <a class="g1mG8c" href="privacy#footnote-android-device" data-name="android-device" jsaction="click:IPbaae(preventDefault=true)">Android device with Google apps</a>, your device periodically contacts Google servers to provide information about your device and connection to our services. This information includes things like your device type, carrier name, crash reports, and which apps you've installed.</p><h3>Your activity</h3><div class="pjyxF "><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/39b031d352a2e1586cf50ac7f2bbc18b.svg"/></div><p>We collect information about your activity in our services, which we use to do things like recommend a YouTube video you might like. The activity information we collect may include:</p><ul><li>Terms you search for</li><li>Videos you watch</li><li><a class="g1mG8c" href="privacy#footnote-content-views" data-name="content-views" jsaction="click:IPbaae(preventDefault=true)">Views and interactions with content and ads</a></li><li>Voice and audio information when you use audio features</li><li>Purchase activity</li><li>People with whom you communicate or share content</li><li>Activity on third-party sites and apps that use our services</li><li>Chrome browsing history you equals www.youtube.com (Youtube)
Source: utag[1].js.2.dr	String found in binary or memory: return a;};u.map={};u.extend=[];u.send=function(a,b){if(u.ev[a]\|\|u.ev.all!==undefined){utag.DB("send:89");utag.DB(b);var c;u.t="@@";u.i=[];u.p=["https://www.facebook.com/tr?id=787287398374989&ev=PageView&dpo=LDU&dpoco=0&dpost=0&dl=@@dom.url@@&fbp=@@cp._fbp@@&fbc=@@cp._fbc@@","","","","","","",""];u.delim="";u.cachebust="enabled";u.cachevar=""\|\|"_rnd";for(c=0;c<u.p.length;c++){if(u.p[c]!=""){var x=u.rp(u.p[c],b);if(x!=""){if(u.cachebust=="enabled"&&x.indexOf(u.cachevar)<0){if(x.indexOf("?")<0){u.delim="?";}else{u.delim="&";} equals www.facebook.com (Facebook)
Source: utag[1].js.2.dr	String found in binary or memory: return a;};u.map={};u.extend=[];u.send=function(a,b){if(u.ev[a]\|\|u.ev.all!==undefined){utag.DB("send:90");utag.DB(b);var c;u.t="@@";u.i=[];u.p=["https://www.facebook.com/tr?id= 240535876334777&ev=PageView&dpo=LDU&dpoco=0&dpost=0&dl=@@dom.url@@&fbp=@@cp._fbp@@&fbc=@@cp._fbc@@","","","","","","",""];u.delim="";u.cachebust="enabled";u.cachevar=""\|\|"_rnd";for(c=0;c<u.p.length;c++){if(u.p[c]!=""){var x=u.rp(u.p[c],b);if(x!=""){if(u.cachebust=="enabled"&&x.indexOf(u.cachevar)<0){if(x.indexOf("?")<0){u.delim="?";}else{u.delim="&";} equals www.facebook.com (Facebook)
Source: utag[1].js.2.dr	String found in binary or memory: return a;};u.map={};u.extend=[];u.send=function(a,b){if(u.ev[a]\|\|u.ev.all!==undefined){utag.DB("send:91");utag.DB(b);var c;u.t="@@";u.i=[];u.p=["https://www.facebook.com/tr?id=240535876334777&ev= ViewContent&dpo=LDU&dpoco=0&dpost=0&dl=@@dom.url@@&fbp=@@cp._fbp@@&fbc=@@cp._fbc@@","","","","","","",""];u.delim="";u.cachebust="enabled";u.cachevar=""\|\|"_rnd";for(c=0;c<u.p.length;c++){if(u.p[c]!=""){var x=u.rp(u.p[c],b);if(x!=""){if(u.cachebust=="enabled"&&x.indexOf(u.cachevar)<0){if(x.indexOf("?")<0){u.delim="?";}else{u.delim="&";} equals www.facebook.com (Facebook)
Source: O838E4K8.htm.2.dr	String found in binary or memory: s get your maximum refund, guaranteed on demand.</h2> <h3 class="h3 title-subtitle style-font-normal style-font-normal style-color-black"></h3> <div class="desc"> <p>Get everything you need to get your taxes done right. Plus, on-demand expert help and advice are available with TurboTax Live.</p> </div> <div class="cta-wrapper"> <div class="cta"> <div class="link-wrapper"> <a class="global-cta-link" href="https://turbotax.intuit.com/?cid=seq_intuit_tt_click_prod_featured" target="_blank" data-component="global-cta-link" data-wa-link="icom-homepage:product-featured-turbotax"> <span class="label">File with TurboTax</span> <span class="arrow arrow-right-shape"> <span class="flat small IntuitBrandClicktoTT" data-component="icon" data-icon="arrow-right-shape" aria-label="File with TurboTax" ></span> </span> </a> </div> </div> <div class="cta"> <div class="link-wrapper"> <a class="global-cta-link" href="https://turbotax.intuit.com/personal-taxes/online/live/?cid=seq_intuit_tt_click_prod_featured" target="_blank" data-component="global-cta-link" data-wa-link="icom-homepage:product-featured-turbotax-live"> <span class="label">Talk to a tax expert on demand</span> <span class="arrow arrow-right-shape"> <span class="flat small IntuitBrandClicktoTT" data-component="icon" data-icon="arrow-right-shape" aria-label="Talk to a tax expert on demand" ></span> </span> </a> </div> </div> </div> </div> </div> </div></section><section data-component="c16-text-with-asset-block" class="c16-text-with-asset-block component-space " id="quickbooks" data-scroll-component> <div class="container"> <div class="row align-items-center reverse"> <div class="col-12 col-sm-6"> <div class="visual-resource"> <section data-component="responsive-video" class="responsive-video" data-scroll-component data-default='["https://www.youtube.com/watch?v=esI-RAuOL8o", "youtube"]'> <div class="youtube-video js-video-player" data-component="youtube-video" data-youtube-id="quickbooks" data-loop="false" > <div class="player js-player"></div> </div> <div data-component="responsive-image" class="responsive-image blurry poster js-poster abs-fill" data-default="https://www.intuit.com/oicms/i_com/uploads/2020/10/icom-hp-texta
Source: base[1].js.2.dr	String found in binary or memory: ska=function(a,b){if(!a.i["0"]){var c=new fE("0","fakesb",{video:new bE(0,0,0,void 0,void 0,"auto")});a.i["0"]=b?new nD(new g.yB("http://www.youtube.com/videoplayback"),c,"fake"):new YD(new g.yB("http://www.youtube.com/videoplayback"),c,new TC(0,0),new TC(0,0))}}; equals www.youtube.com (Youtube)
Source: privacy[2].htm.2.dr	String found in binary or memory: t want this level of search customization, you can <a href="https://support.google.com/websearch?p=privpol_incognito">search and browse privately</a> or turn off <a href="https://www.google.com/history/optout?utm_source=pp">signed-out search personalization</a>.</p><h3 id="footnote-customizing">Customizing our services</h3><p>For example, we may display a Google Doodle on the Search homepage to celebrate an event specific to your country.</p><h3 id="footnote-data-controller">data controller responsible for processing your information</h3><p>This means the Google affiliate that is responsible for processing your information and for complying with applicable privacy laws.</p><h3 id="footnote-deliver-services">deliver our services</h3><p>Examples of how we use your information to deliver our services include:</p><ul><li>We use the IP address assigned to your device to send you the data you requested, such as loading a YouTube video</li><li>We use unique identifiers stored in cookies on your device to help us authenticate you as the person who should have access to your Google Account</li><li>Photos and videos you upload to Google Photos are used to help you create albums, animations, and other creations that you can share. <a href="https://support.google.com/photos?p=privpol_manage">Learn more</a></li><li>A flight confirmation email you receive may be used to create a equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: this.La=FF(!1,a.privembed);this.protocol=0===this.Xb.indexOf("http:")?"http":"https";this.Da=Gz((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|Gz(this.Xb)\|\|this.protocol+"://www.youtube.com/";this.Ja=gla(this,b?b.eventLabel:a.el);xu();var m=null,n=b?b.playerStyle:a.ps,p=g.ib(hla,n);!n\|\|p&&!this.u\|\|(m=n);this.playerStyle=m;this.L=(this.C=g.ib(hla,this.playerStyle))&&"area120-boutique"!==this.playerStyle&&"play"!==this.playerStyle&&"jamboard"!==this.playerStyle;this.Uk=!this.L;this.va=FF(!1,a.disableplaybackui); equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: this.l.jC();else if(a.i){var d=null===(c=this.l.Ua)\|\|void 0===c?void 0:c.l.u;if(xBa(a)&&d&&d.isLocked())var e="FORMAT_UNAVAILABLE";else if(!this.i.C&&"auth"===a.errorCode&&"429"===a.details.rc){e="TOO_MANY_REQUESTS";var f="6"}this.l.rf(a.errorCode,e,g.BE(a.details),f)}else this.X("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.ke(a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+ equals www.youtube.com (Youtube)
Source: utag[1].js.2.dr	String found in binary or memory: var iframes=document.querySelectorAll('iframe[src*="//www.youtube.com"]');var x=document.getElementsByTagName("script"),hasYtAPI=false;for(var i=0;i<x.length;i++){if(x[i].src=="https://www.youtube.com/iframe_api"){hasYtAPI=true;}} equals www.youtube.com (Youtube)
Source: MKGQPL02.js.2.dr	String found in binary or memory: var kP=(0,_.B)(jP);var lP=gP+kP+"</li><li>";var mP=(0,_.B)("YouTube settings:");var nP=lP+mP+" ",oP='href="'+_.M(_.Q(_.Y0(b,(0,_.I)("https://www.youtube.com/feed/history/search_history?utm_source=pp"))))+'"'+_.O(_.Y()),pP=(0,_.J)(oP),qP='href="'+_.M(_.Q(_.Y0(b,(0,_.I)("https://www.youtube.com/feed/history?utm_source=pp"))))+'"'+_.O(_.Y()),rP=(0,_.J)(qP),sP="Pause and delete your <a"+(_.O(_.N(pP))+">YouTube Search History</a> and your <a")+(_.O(_.N(rP))+">YouTube Watch History</a>.");var tP=(0,_.B)(sP); equals www.youtube.com (Youtube)
Source: iframe_api[1].js.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/51ff6aac\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}if(!window["YT"])var YT={loading:0,loaded:0};if(!window["YTConfig"])var YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: c31.qbo.intuit.com

Source: hello[1].htm.2.dr	String found in binary or memory: http://blog.chromium.org/2011/04/chrome-developer-tools-understanding.html
Source: adrum[1].js.2.dr	String found in binary or memory: http://cdn.appdynamics.com
Source: adrum-ext.99c2fcc5ccc30ea4d38a1a74eeb7a6a6[1].js.2.dr	String found in binary or memory: http://code.google.com/p/episodes/
Source: di[2].js.2.dr	String found in binary or memory: http://code.google.com/p/google-diff-match-patch/
Source: adrum[1].js.2.dr	String found in binary or memory: http://col.eum-appdynamics.com
Source: dojo.xd[1].js.2.dr	String found in binary or memory: http://dojotoolkit.org
Source: dojo.xd[1].js.2.dr	String found in binary or memory: http://dojotoolkit.org/license
Source: Bootstrap[1].js.2.dr	String found in binary or memory: http://feross.org
Source: di[2].js.2.dr	String found in binary or memory: http://jquery.org/license
Source: login[1].htm.2.dr	String found in binary or memory: http://maps.google.com/maps?q=
Source: O838E4K8.htm.2.dr	String found in binary or memory: http://privacy.truste.com/privacy-seal/validation?rid=7fc012b5-d53b-42d8-b980-c4f9091a97e1
Source: utag[1].js.2.dr	String found in binary or memory: http://quickbooks.intuit.com
Source: login[1].htm.2.dr	String found in binary or memory: http://quickbooks.intuit.com/signup/
Source: login[1].htm.2.dr	String found in binary or memory: http://quickbooksonline.intuit.com/bookkeeping-accounting-systems/
Source: di[2].js.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: pricing[1].htm.2.dr	String found in binary or memory: http://static.onlinepayroll.intuit.com/TOU/ViewMyPaycheckTerms.html
Source: recoverAccount[1].js.2.dr	String found in binary or memory: http://support.quickbooks.intuit.com/support/LicenseNumber/LicenseNumber.aspx
Source: recoverAccount[1].js.2.dr	String found in binary or memory: http://support.quickbooks.intuit.com/support/ProductUpdates.aspx
Source: statement[1].htm.2.dr	String found in binary or memory: http://www.aboutads.info/choices/Ad
Source: KFOlCnqEu92Fr1MmYUtfBBc9[1].ttf.2.dr, di[2].js.2.dr, adrum-ext.99c2fcc5ccc30ea4d38a1a74eeb7a6a6[1].js.2.dr, MKGQPL02.js.2.dr, KFOmCnqEu92Fr1Mu4mxP[1].ttf.2.dr, KFOlCnqEu92Fr1MmEU9fBBc9[1].ttf.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: rs=AA2YrTsi505vDSsc6af8ZUct4Dgm_XWu_g[1].js.2.dr	String found in binary or memory: http://www.broofa.com
Source: di[2].js.2.dr	String found in binary or memory: http://www.decibelinsight.com/
Source: HelveticaNeueLTW1G-Roman-e8869403[1].ttf.2.dr	String found in binary or memory: http://www.fonts.com/legal/mi-eula.htm.
Source: about[1].htm.2.dr	String found in binary or memory: http://www.google.com/intl/en/about/
Source: HelveticaNeueLTW1G-Lt-bfd008c9[1].ttf.2.dr	String found in binary or memory: http://www.linotype.comhttp://www.linotype.com/fontdesignersNOTIFICATION
Source: statement[1].htm.2.dr	String found in binary or memory: http://www.networkadvertising.org/managing/opt_out.aspthe
Source: utag[1].js.2.dr	String found in binary or memory: http://www.youtube.com
Source: base[1].js.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: statement[1].htm.2.dr	String found in binary or memory: http://youradchoices.ca/understanding-online-advertising
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: aa19574f47b589500f5e602ad5061cdd[1].js.2.dr	String found in binary or memory: https://1996823.fls.doubleclick.net/activityi;src
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://1996823.fls.doubleclick.net/activityi;src=1996823;type=fmsco864;cat=intui399;u10=US;ord=1;nu
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://8344993.fls.doubleclick.net/activityi;src=8344993;type=int_00;cat=intui006;ord=6480948041477
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://8344993.fls.doubleclick.net/activityi;src=8344993;type=int_00;cat=intui006;ord=8945809171953
Source: privacy[2].htm.2.dr	String found in binary or memory: https://about.google/
Source: about[1].htm.2.dr	String found in binary or memory: https://about.google/products/
Source: ~DF11773E0F0314E2DE.TMP.1.dr, login[1].htm.2.dr	String found in binary or memory: https://accounts-help.lc.intuit.com/questions/1582580-creating-an-account
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://accounts-help.lc.intuit.com/questions/1582580-creating-an-accountZ
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: login[1].htm.2.dr	String found in binary or memory: https://accounts.intuit.com/IUS-Plugins/v2/scripts/en_us/ius-core.js
Source: recover[1].htm0.2.dr	String found in binary or memory: https://accounts.intuit.com/IUS-Plugins/v2/scripts/ius.min.js
Source: login[1].htm.2.dr	String found in binary or memory: https://accounts.intuit.com/configuration/widgets?offering_id=Intuit.sbe.salsa.default
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://accounts.intuit.com/ividFrame.html
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://accounts.intuit.com/xdr.html?v2=true&corsEnabled&tests=tag_obfuscation
Source: utag[1].js.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/adj/N5506.nso.codesrv/B21324452.223563153;sz=1x2;ord=
Source: js[2].js.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity
Source: base[1].js.2.dr	String found in binary or memory: https://admin.youtube.com
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/i/src=1996823;type=fmsco864;cat=intui399;u10=US;ord=1;num=36906
Source: js[2].js.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://adssettings.google.com/?utm_source=pp
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://adssettings.google.com/authenticated?utm_source=pp
Source: analytics[1].js.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: statement[1].htm.2.dr	String found in binary or memory: https://api.w.org/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://apintego.com/privacypolicy/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://apintego.com/termsofuse/
Source: rs=AA2YrTsi505vDSsc6af8ZUct4Dgm_XWu_g[1].js.2.dr, cb=gapi[1].js.2.dr, so[1].htm.2.dr	String found in binary or memory: https://apis.google.com
Source: m=_b,_tp[1].js.2.dr, so[1].htm.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: utag[1].js.2.dr	String found in binary or memory: https://app.qbo.intuit.com/app/accountant/training?
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://app.qbo.intuit.com/app/hello?localguest=true
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://assistant.google.com/privacy-notice-childrens-features/
Source: ~DF11773E0F0314E2DE.TMP.1.dr, f[1].txt.2.dr	String found in binary or memory: https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
Source: {63C5AF54-E149-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://c31.qbo.intuit
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://c31.qbo.intuit.com/c31/v1929.214/0/login?page=bill:https://uiclassic.intuitcdn.net/v1960.161
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://c31.qbo.intuit.com/c31/v1929.214/0/login?page=centers/customerDhttps://uiclassic.intuitcdn.n
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://c31.qbo.intuit.com/c31/v1929.214/0/login?page=check;https://uiclassic.intuitcdn.net/v1960.16
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://c31.qbo.intuit.com/c31/v1929.214/0/login?page=invoice
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://c31.qbo.intuit.com/c31/v1929.214/0/login?page=journal
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect
Source: {63C5AF54-E149-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect.co
Source: {63C5AF54-E149-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirectRoo
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login
Source: ~DF11773E0F0314E2DE.TMP.1.dr, {63C5AF54-E149-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login&iux_tests=tmx_tag_o
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login=oopcu-redirect
Source: login[1].htm.2.dr	String found in binary or memory: https://c31.qbo.intuit.com/c31/v1960.161/0/frameset
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://c31.qbo.intuit.com/c31/v1960.161/0/frameset)
Source: js[2].js.2.dr, gtm[1].js.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: adrum[1].js.2.dr	String found in binary or memory: https://cdn.appdynamics.com
Source: utag.54[1].js.2.dr	String found in binary or memory: https://cdn.decibelinsight.net/i/##utag_account##/##utag_property##/di.js
Source: utag.54[1].js.2.dr	String found in binary or memory: https://cdn.decibelinsight.net/i/##utag_account##/di.js
Source: hello[1].htm.2.dr	String found in binary or memory: https://cdn.net/some-plugin/my/asset.js
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://clients6.google.com
Source: about[1].htm.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise
Source: about[1].htm.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/docs
Source: about[1].htm.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/pricing
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://cloud.google.com/terms/cloud-privacy-notice
Source: about[1].htm.2.dr	String found in binary or memory: https://cloud.google.com/terms/service-terms#service-terms
Source: adrum[1].js.2.dr	String found in binary or memory: https://col.eum-appdynamics.com
Source: utag[1].js.2.dr	String found in binary or memory: https://collect.tealiumiq.com/event/?
Source: f1d3dd19f47a29bd5e404bbe4bc73c89[1].js.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: utag[1].js.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: about[1].htm.2.dr	String found in binary or memory: https://console.cloud.google.com/security/recaptcha
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://contacts.google.com
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://content.googleapis.com
Source: YFWRBOG6.htm.2.dr, pricing[1].htm.2.dr	String found in binary or memory: https://cookies-expdelactiv.api.signup.quickbooks.intuit.com/v1/app/raas/itp/sync
Source: utag[1].js.2.dr	String found in binary or memory: https://dc.ads.linkedin.com/collect/
Source: hello[1].htm.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/Window/unhandledrejection_event
Source: hello[1].htm.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/window.onerror
Source: about[1].htm.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/display
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: about[1].htm.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/v3
Source: www-widgetapi[1].js.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: base[1].js.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: quickbooks.intuit[1].xml.2.dr	String found in binary or memory: https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/i"
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://families.google.com/familylink/privacy/child-policy/
Source: statement[1].htm.2.dr	String found in binary or memory: https://feedback-form.truste.com/watchdog/request
Source: Bootstrap[1].js.2.dr	String found in binary or memory: https://feross.org/opensource
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://fi.google.com/about/tos/#project-fi-privacy-notice
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://fiber.google.com/
Source: privacy[2].htm.2.dr	String found in binary or memory: https://fiber.google.com/legal/privacy.html
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v27/4UaGrENHsxJlGDuGo1OIlL3Owpg.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v27/4UabrENHsxJlGDuGo1OIlLU94YtzCwA.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v27/4UabrENHsxJlGDuGo1OIlLV154tzCwA.woff)
Source: icon[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v92/flUhRq6tzZclQEJ-Vdg-IuiaDsNa.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOkCnqEu92Fr1MmgVxIIzQ.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmEU9fBBc-.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmSU5fBBc-.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmWUlfBBc-.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOmCnqEu92Fr1Mu4mxM.woff)
Source: polyfill.min[1].js0.2.dr, polyfill.min[1].js.2.dr	String found in binary or memory: https://github.com/Financial-Times/polyfill-service/issues/317
Source: xdr[1].htm0.2.dr	String found in binary or memory: https://github.intuit.com/identity-authn/iux-web/pull/2546
Source: {63C5AF54-E149-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://glam.app.intui
Source: ~DF11773E0F0314E2DE.TMP.1.dr, login[1].htm.2.dr	String found in binary or memory: https://glam.app.intuit.com/app/guesttos?glocale=en_US
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://glam.app.intuit.com/app/guesttos?glocale=en_USeating-an-account
Source: about[1].htm.2.dr	String found in binary or memory: https://go.chronicle.security/recaptcha-enterprise
Source: js[3].js.2.dr	String found in binary or memory: https://google.com/pagead/gclidless-conversion/
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://h.online-metrix.net/6asvUl0epD_hebOG?c73f0c33d09d52c1=ASdWKEUNVbcJ65vQG1C4IQ-RgQhuXpCfkMFJT7
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://h.online-metrix.net/88tERywSwzdi8Xvv?63970dedd9192412=VVzg6PhluZ8ks9PdMCv8wukWXTWKWv7YmJz-bb
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://h.online-metrix.net/fAjswdS0KzcM9673?b32afd08b6417b7c=KFDuhOJtbqulVvtUpqJQaJ5BpjZKSnSfnYJMzG
Source: statement[1].htm.2.dr	String found in binary or memory: https://help.creditkarma.co.uk/s/newcase
Source: statement[1].htm.2.dr	String found in binary or memory: https://help.quickbooks.intuit.com/en_AU/contact
Source: statement[1].htm.2.dr	String found in binary or memory: https://help.quickbooks.intuit.com/en_IN/contact/
Source: login[1].htm.2.dr	String found in binary or memory: https://help.quickbooks.intuit.com/en_US/account?account_recovery_link=https%3A%2F%2Fc31.qbo.intuit.
Source: recover[1].htm0.2.dr, login[1].htm.2.dr	String found in binary or memory: https://help.quickbooks.intuit.com/en_US/contact?pageContext=login
Source: login[1].htm.2.dr	String found in binary or memory: https://help.quickbooks.intuit.com/en_US/kb/whats-unapplied-cash-payment/000001457_en_US:SALESFORCE.
Source: recover[1].htm0.2.dr	String found in binary or memory: https://help.quickbooks.intuit.com/prechats/offerings/QBO-CHAT/22817/view
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://intuit.chilipiper.com/book/variant-qbo-magic-carpet-main-page
Source: hello[1].htm.2.dr	String found in binary or memory: https://jira.intuit.com/browse/APPF-2844
Source: hello[1].htm.2.dr	String found in binary or memory: https://jira.intuit.com/browse/APPF-4258
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://kids.youtube.com/privacynotice
Source: about[1].htm.2.dr	String found in binary or memory: https://lh3.googleusercontent.com
Source: hello[1].htm.2.dr	String found in binary or memory: https://logging-e2e.api.intuit.com/v1/log/message
Source: hello[1].htm.2.dr	String found in binary or memory: https://logging-e2e.api.intuit.com/v2/log/message
Source: hello[1].htm.2.dr	String found in binary or memory: https://logging.api.intuit.com/v1/log/message
Source: hello[1].htm.2.dr	String found in binary or memory: https://logging.api.intuit.com/v2/log/message
Source: utag[1].js.2.dr	String found in binary or memory: https://marketdataservice.api.intuit.com/v1/beacon.js
Source: YFWRBOG6.htm.2.dr, statement[1].htm.2.dr	String found in binary or memory: https://marketingplatform.api.intuit.com
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://mint.intuit.com/?cid=intuitca_home&utm_source=bar_header
Source: pricing[1].htm.2.dr	String found in binary or memory: https://my.guideline.com/agreements/adv
Source: pricing[1].htm.2.dr	String found in binary or memory: https://my.guideline.com/agreements/privacy
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://myaccount.google.com/
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://myaccount.google.com/?utm_source=pp
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://myaccount.google.com/activitycontrols?utm_source=pp
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://myaccount.google.com/dashboard?utm_source=pp
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://myaccount.google.com/delete-services-or-account?utm_source=pp
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://myaccount.google.com/deleteaccount?utm_source=pp
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://myaccount.google.com/deleteservices?utm_source=pp
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://myaccount.google.com/inactive?utm_source=pp
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://myaccount.google.com/personal-info?utm_source=pp
Source: privacy[2].htm.2.dr	String found in binary or memory: https://myaccount.google.com/privacycheckup?utm_source=pp&utm_medium=Promo-in-product&utm_ca
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://myaccount.google.com/privacycheckup?utm_source=pp&utm_medium=Promo-in-product&utm_campaign=p
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://myaccount.google.com/profile?utm_source=pp
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://myaccount.google.com/security-checkup?utm_source=pp
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://myaccount.google.com/shared-endorsements?utm_source=pp
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://myactivity.google.com/?utm_source=pp
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://myactivity.google.com/myactivity
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://myactivity.google.com/myactivity?utm_source=pp
Source: so[1].htm.2.dr	String found in binary or memory: https://ogs.google.com/
Source: so[1].htm.2.dr	String found in binary or memory: https://ogs.google.com/widget/app/so
Source: js[2].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: js[3].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: base[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/osd.js
Source: statement[1].htm.2.dr	String found in binary or memory: https://pages.monevo.com/uk/ck-privacy-policy
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://payments.google.com/legaldocument?family=0.privacynotice&hl=
Source: privacy[2].htm.2.dr	String found in binary or memory: https://payments.google.com/legaldocument?family=0.privacynotice&hl=en
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://pf.intuit.com/5gt2D9IcQkbcuaHd?c5facc8b7b529d3c=guInXmw2iEMJa0dD3nEe2DWxeYxj1NfXQP7tFelWpnev
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://pf.intuit.com/FX_BEHXAhE0HxwxO?150e5cce8960526c=c1sJmMV-ah-3Kuvc_xa4cxaywfzKbqEAVCQvKEfpWNZt
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://pf.intuit.com/YUld3Hd0Guz-1-9S?e4254470c54debe4=aJPiPbnmrY7ME22XisDSIRPOxOGd8yRyfc_VpG4oLxNC
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://pf.intuit.com/cY3q-fo3kFILwEt7?9523a2524f6c7e71=BpC-nATklqr51w1SRT8Xl5en26XIR4TFoVtiKOkIRjoR
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://pf.intuit.com/c_i_55OEUP_q1GZa?a07e54891dec0ccd=O9lQpOhK96Vf0doFuDI8dqYZqTflik2I-_jvVyKuWTKY
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://pf.intuit.com/zOqHF3DpZS1zsGL2?1768bbf1bd769387=LvXHqYSle4__sssbtt5z9jWtuylGkxx-rO1iACQb-1l4
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: login[1].htm.2.dr	String found in binary or memory: https://plugin-qbo.intuit.com/brand/1.1.9/common-brand/assets/images/svg/common_images_logo_v2.png
Source: hello[1].htm.2.dr	String found in binary or memory: https://plugin.intuitcdn.net/harmony-ui-components/28.1.1/dist/css/hui.min.css
Source: login[1].htm.2.dr	String found in binary or memory: https://plugin.intuitcdn.net/jquery/2.2.0/dist/jquery.min.js
Source: hello[1].htm.2.dr	String found in binary or memory: https://plugin.intuitcdn.net/react-relay/0.8.1-react-16-patch/relay.min
Source: hello[1].htm.2.dr	String found in binary or memory: https://plugin.intuitcdn.net/sbg-web-shell-ui/12.33.1
Source: hello[1].htm.2.dr	String found in binary or memory: https://plugin.intuitcdn.net/sbg-web-shell-ui/12.33.1/dojo/dojo.js
Source: hello[1].htm.2.dr	String found in binary or memory: https://plugin.intuitcdn.net/sbg-web-shell-ui/12.33.1/platform/web-shell-core/single-layer/web-shell
Source: hello[1].htm.2.dr	String found in binary or memory: https://plugin.intuitcdn.net/sbg-web-shell-ui/12.33.1/shell/boot.js
Source: hello[1].htm.2.dr	String found in binary or memory: https://plugin.intuitcdn.net/sbg-web-shell-ui/12.33.1/shell/harmony/ecosystem-app/main.css
Source: hello[1].htm.2.dr	String found in binary or memory: https://plugin.intuitcdn.net/sbg-web-shell-ui/12.33.1/shell/harmony/harmony-common.css
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://plus.google.com
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: {63C5AF54-E149-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://policies.googl
Source: so[1].htm.2.dr	String found in binary or memory: https://policies.google.com
Source: ~DF11773E0F0314E2DE.TMP.1.dr, privacy[2].htm.2.dr	String found in binary or memory: https://policies.google.com/
Source: privacy[1].htm.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://policies.google.com/privacyRPrivacy
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://policies.google.com/privacyies/privacy/
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://privacy-policy.truste.com/privacy-seal/seal?rid=7fc012b5-d53b-42d8-b980-c4f9091a97e1
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://privacy.google.com/businesses/affiliates
Source: login[1].htm.2.dr	String found in binary or memory: https://privacy.truste.com/privacy-seal/validation?rid=8b3c17ef-273d-4c3d-b161-372d1d884d21
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://prod-sbseg-gutenberg.prod-authoring.a.intuit.com/cms/wordpress/us/reimagine-homepagev5/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://prod-sbseg-gutenberg.prod-authoring.a.intuit.com/cms/wordpress/us/reimagine-pricing/
Source: f1d3dd19f47a29bd5e404bbe4bc73c89[1].js.2.dr	String found in binary or memory: https://pt.ispot.tv/v2/TC-3346-1.gif?type
Source: insight.min[1].js.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: insight.min[1].js.2.dr	String found in binary or memory: https://px.ads.linkedin.com/insight_tag_errors.gif?
Source: login[1].htm.2.dr	String found in binary or memory: https://qbo.intuit.com/qbo1/login
Source: login[1].htm.2.dr	String found in binary or memory: https://qbo.onlinepayroll.intuit.com/login/LogoutServlet
Source: {63C5AF54-E149-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://quickbooks.int
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://quickbooks.intuit.com/1960.161/0/extrequest/login/recover?source=login=oopcu-redirect
Source: statement[1].htm.2.dr, O838E4K8.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/?sc=seq_intuit_qb_click_hd
Source: utag[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/accountants/products-solutions/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/accounting/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/accounting/track-expenses/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/ae/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/ae/pricing/
Source: statement[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/analytics-core/track-event-lib-init.min.js
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/au/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/au/pricing/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/br/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/br/planos/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/ca/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/ca/accountants/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/ca/pricing/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/IMAGE/A0sFC75AJ/smart-reporting-video.png
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/IMAGE/A29oKj4rM/24-7-support-image-on-right.svg
Source: statement[1].htm.2.dr, O838E4K8.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/IMAGE/A2T6NMEQp/Intuit-Blue.Intuit-RGB-Blue.svg
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/IMAGE/A348MDYum/favicon.png
Source: imagestore.dat.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/IMAGE/A348MDYum/favicon.png/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/IMAGE/A3T275a70/income-expenses-video-2x.png
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/IMAGE/A4PsyGyjy/LP_Hero-Image.jpg
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/IMAGE/A4wGYqKhc/pricing-bolt-sprite.svg);
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/IMAGE/A5cabdGmG/apple-touch-icon-120x120.png
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/IMAGE/A65VTPO5r/Drawer_Batch-Import-Send.png
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/IMAGE/A6vaGZhIb/illustration-2.svg
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/IMAGE/A71wsafFk/apple-touch-icon-60x60.png
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/IMAGE/A7CmdvH4G/business-accounting-expert.png
Source: imagestore.dat.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/IMAGE/A7mjJ5rpg/apple-touch-icon-196x196.png
Source: statement[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/IMAGE/A81OBMP2T/icom-logo-ecosystem-lockup-4line-twitter.jpg
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/IMAGE/A8l1WrWz3/apple-touch-icon-152x152.png
Source: statement[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/content/dam/intuit/ic/en_us/content/intuit-privacy-glba-notice
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/cas/dam/content/dam/intuit/ic/en_us/images/h-z/intuit-twitter-card-ico
Source: recoverAccount[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/commerce/account/secure/login.jsp
Source: utag[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/desktop/enterprise/contact/&ex-hargs=v%3D1.0%3Bc%3D5035759150901%3Bp%3
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/eu/
Source: statement[1].htm.2.dr, O838E4K8.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/eu/gdpr/
Source: statement[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/eu/gdpr/gdpr-manage-data/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/eu/pricing/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/fr-ca/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/fr-ca/comparaison/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/fr/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/fr/les-offres-quickbooks/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/global/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/global/pricing/
Source: YFWRBOG6.htm.2.dr, pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/gutenberg/static/rum/adrum.js
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://quickbooks.intuit.com/hQuickBooks
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/hk/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/hk/pricing/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/ie/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/ie/pricing/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/in/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/in/pricing/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/learn-and-support/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/learn-support/en-us/help-articles/support-hours-and-types/00/385590
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/learn-support/en-us/install-or-update-products/system-requirements-for
Source: statement[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/learn-support/pt-br/artigos-de-ajuda/como-entrar-em-contato-com-o-supo
Source: utag[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/live/&ex-hargs=v%3D1.0%3Bc%3D5035759150901%3Bp%3D0AE95703-6ADA-056B-BA
Source: utag[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/live/&ex-hargs=v%3D1.0%3Bc%3D5035759150901%3Bp%3D6313E975-26B2-3B5A-4B
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/mx/
Source: statement[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/mx/contactanos/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/mx/precios/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/my/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/my/pricing/
Source: utag[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oa&ex-hargs=v%3D1.0%3Bc%3D5035759150901%3Bp%3DC7330127-F857-06DA-CDE7-
Source: utag[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oa/pos/free-trial-thankyou/&ex-hargs=v%3D1.0%3Bc%3D5035759150901%3Bp%3
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/other/auto-payrol
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/photo/mischief-do
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/photo/native-soil
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/photo/pay-yoursel
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/photo/the-baconer
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/product/invoice-p
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/brand-photos-2019/1099-efile-and-pay-p
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/brand-photos-2019/24-7-expert-product-
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/brand-photos-2019/TaskMgmt-Drawer-Imag
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/brand-photos-2019/expert-product-suppo
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/brand-photos-2019/hr-support-center-pa
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/brand-photos-2019/next-day-direct-depo
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/brand-photos-2019/payroll-expert-setup
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/brand-photos-2019/same-day-direct-desp
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/brand-photos-2019/workers-comp-payroll
Source: stylesheet.atoms_molecules_globals[1].css.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/graphic-elements/sbseg-gwp-oifooter-sp
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/icon-feature/tax-penalty-protection-ic
Source: utag[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/online/advanced/&ex-hargs=v%3D1.0%3Bc%3D5035759150901%3Bp%3D9B22AC38-9
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/online/whats-new/?sc=seq_intuit_qb_click_prod_featured
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/payments/legal/TOC102017/greendot/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/payments/manage-cash-flow/
Source: utag[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/payroll&ex-hargs=v%3D1.0%3Bc%3D5035759150901%3Bp%3DACBF9752-65DB-D341-
Source: utag[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/payroll/401k/
Source: utag[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/payroll/employee-benefits/
Source: utag[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/payroll/hr-services/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/payroll/pricing/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/payroll/tax-penalty-protection/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/ph/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/ph/pricing/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/pricing/
Source: utag[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/pricing/&ex-hargs=v%3D1.0%3Bc%3D5035759150901%3Bp%3DA120B229-D2D3-2A64
Source: quickbooks.intuit[1].xml.2.dr	String found in binary or memory: https://quickbooks.intuit.com/pricing/"
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://quickbooks.intuit.com/pricing//0/extrequest/login/recover?source=login&iux_tests=tmx_tag_obf
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/pricing/?sc=seq_intuit_qb_click_prod_featured
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://quickbooks.intuit.com/pricing/nQuickBooks
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/pricing?sc=seq_intuit_qb_click_giants
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/product-finder/results/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/qbmds-data/us/billing_offers_us.json
Source: utag[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/quickbooks-commerce&ex-hargs=v%3D1.0%3Bc%3D5035759150901%3Bp%3D37C5AE9
Source: utag[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/quickbooks-commerce/&ex-hargs=v%3D1.0%3Bc%3D5035759150901%3Bp%3D9A80D5
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/r/getting-paid/small-business-payment-methods/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/r/payroll/salary-or-draw-how-to-pay-yourself-as-business-owner/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/sg/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/sg/pricing/
Source: utag[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/time-tracking/&ex-hargs=v%3D1.0%3Bc%3D5035759150901%3Bp%3DC9EB7BD2-219
Source: utag[1].js.2.dr	String found in binary or memory: https://quickbooks.intuit.com/tracking/channel-attribution/?
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/uk/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/uk/pricing/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/za/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://quickbooks.intuit.com/za/pricing/
Source: {63C5AF54-E149-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://quickbooks.intuit.comRoot
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://readalong.google
Source: privacy[2].htm.2.dr	String found in binary or memory: https://readalong.google/intl/en_CH/privacy
Source: base[1].js.2.dr	String found in binary or memory: https://redirector.googlevideo.com/initplayback?alr=yes&id=%s
Source: base[1].js.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: hello[1].htm.2.dr	String found in binary or memory: https://requirejs.org/docs/api.html#errors
Source: statement[1].htm.2.dr	String found in binary or memory: https://rum.api.intuit.com/v1/rum/web
Source: utag[1].js.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iui3?
Source: utag[1].js.2.dr	String found in binary or memory: https://s.pinimg.com/ct/core.js
Source: core[1].js.2.dr	String found in binary or memory: https://s.pinimg.com/ct/lib/main.1da0559f.js
Source: WRSiteInterceptEngine[1].js.2.dr	String found in binary or memory: https://s.qualtrics.com/spoke/all/jam
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://safebrowsing.google.com/?utm_source=pp
Source: statement[1].htm.2.dr	String found in binary or memory: https://sbgmarketing.api.intuit.com
Source: statement[1].htm.2.dr, O838E4K8.htm.2.dr	String found in binary or memory: https://security.intuit.com/
Source: ccpa-widget-en[1].js.2.dr	String found in binary or memory: https://security.intuit.com/index.php/intuit-cookie-policy
Source: statement[1].htm.2.dr, O838E4K8.htm.2.dr	String found in binary or memory: https://security.intuit.com/index.php/intuit-cookie-policy/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://security.intuit.com/index.php/privacy
Source: statement[1].htm.2.dr	String found in binary or memory: https://security.intuit.com/index.php/protect-your-information/how-intuit-protects-you
Source: login[1].htm.2.dr	String found in binary or memory: https://security.intuit.com/privacy/
Source: recoverAccount[1].js.2.dr	String found in binary or memory: https://selfemployed.intuit.co.uk/login
Source: recoverAccount[1].js.2.dr	String found in binary or memory: https://selfemployed.intuit.com/login
Source: about[1].htm.2.dr	String found in binary or memory: https://services.google.com/fh/files/misc/esg_validation_.pdf
Source: about[1].htm.2.dr	String found in binary or memory: https://services.google.com/fh/files/misc/recaptcha_enterprise_data_sheet.pdf
Source: utag[1].js.2.dr	String found in binary or memory: https://signup-e2e.quickbooks.intuit.com/static/js/preloader-
Source: utag[1].js.2.dr	String found in binary or memory: https://signup-e2e.quickbooks.intuit.com/static/suiVersion.json
Source: utag[1].js.2.dr	String found in binary or memory: https://signup.quickbooks.intuit.com&ex-hargs=v%3D1.0%3Bc%3D5035759150901%3Bp%3D450C7510-8DCB-5083-6
Source: utag[1].js.2.dr	String found in binary or memory: https://signup.quickbooks.intuit.com/&ex-hargs=v%3D1.0%3Bc%3D5035759150901%3Bp%3DEAF3FBB5-B898-72AA-
Source: utag[1].js.2.dr	String found in binary or memory: https://signup.quickbooks.intuit.com/static/js/preloader-
Source: utag[1].js.2.dr	String found in binary or memory: https://signup.quickbooks.intuit.com/static/suiVersion.json
Source: WRSiteInterceptEngine[1].js.2.dr	String found in binary or memory: https://siteintercept.qualtrics.com
Source: WRSiteInterceptEngine[1].js.2.dr	String found in binary or memory: https://siteintercept.qualtrics.com/dxjsmodule/
Source: utag[1].js.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: so[1].htm.2.dr	String found in binary or memory: https://ssl.gstatic.com
Source: analytics[1].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: about[1].htm.2.dr	String found in binary or memory: https://storage.googleapis.com
Source: statement[1].htm.2.dr	String found in binary or memory: https://support.creditkarma.ca/s/?language=en_CA
Source: statement[1].htm.2.dr	String found in binary or memory: https://support.creditkarma.com/s/newcase
Source: pricing[1].htm.2.dr	String found in binary or memory: https://support.fathomhq.com/en/articles/999175-import-class-data-from-quickbooks-online
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://support.google.com/
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/a?p=privpol_admin
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://support.google.com/accounts/answer/465?authuser=0#auto-delete
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/accounts?p=autocontacts&hl=en_US
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_agereq&hl=en_US
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_androidloc&hl=en_US
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_controlads&hl=en_US
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_endorse
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_location
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_lochistory
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_phone&hl=en_US
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_whyad
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_whyad&hl=en_US
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/adwordspolicy?p=privpol_p13nad
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/analytics?p=privpol_data&hl=en_US
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/blogger?p=privpol_blog
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://support.google.com/chrome?p=privpol_chrsync
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/googlehome?p=privpol_actions&hl=en_US
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/googlehome?p=privpol_homedata
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/googleplay?p=privpol_review
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/legal?p=privpol_remove
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/mail?p=privpol_signinactivity&hl=en_US
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://support.google.com/photos?p=privpol_manage
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/policies/troubleshooter/7575787
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://support.google.com/policies?p=privpol_privts
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/sites?p=privpol_delete
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://support.google.com/trends?p=privpol_about
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/websearch?p=privpol_feed&hl=en_US
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/websearch?p=privpol_incognito
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/websearch?p=privpol_locserp
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/websearch?p=privpol_privresults&hl=en_US
Source: privacy[2].htm.2.dr	String found in binary or memory: https://support.google.com/websearch?p=privpol_searchactivity
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: remote[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/7640706
Source: login[1].htm.2.dr	String found in binary or memory: https://support.qbo.intuit.com/;icon-uri=https://uiclassic.intuitcdn.net/v1960.161/images/help.ico
Source: analytics[1].js.2.dr, f[1].txt.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://takeout.google.com/?utm_source=pp
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://takeout.google.com/settings/takeout?utm_source=pp
Source: statement[1].htm.2.dr	String found in binary or memory: https://termsandconditions.hdd2.co.uk/creditkarma
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://transparencyreport.google.com/user-data/overview
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://turbotax.demdex.net/dest5.html?d_nsid=5
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://turbotax.demdex.net/dest5.html?d_nsid=5#https%3A%2F%2Fwww.intuit.com
Source: {63C5AF54-E149-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://turbotax.intui
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://turbotax.intuit.com/
Source: statement[1].htm.2.dr, O838E4K8.htm.2.dr	String found in binary or memory: https://turbotax.intuit.com/?cid=seq_intuit_tt_click_hd
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://turbotax.intuit.com/?cid=seq_intuit_tt_click_prod_featured
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://turbotax.intuit.com/personal-taxes/online/?cid=seq_intuit_tt_click_giants
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://turbotax.intuit.com/personal-taxes/online/live/?cid=seq_intuit_tt_click_prod_featured
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://turbotax.intuit.com/sic.intuitcdn.net/v1960.161/images/QBOlogo.png
Source: m=_b,_tp[1].js.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: login[1].htm.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net
Source: login[1].htm.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/images/Grey_PersonAvatar.png
Source: login[1].htm.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/images/QBOlogo.png
Source: login[1].htm.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/images/bills.ico;window-type=self
Source: login[1].htm.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/images/checks.ico;window-type=self
Source: login[1].htm.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/images/customer_center.ico;window-type=self
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/images/invoice.ico
Source: login[1].htm.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/images/invoice.ico;window-type=self
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/images/registers.ico
Source: login[1].htm.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/images/registers.ico;window-type=self
Source: login[1].htm.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/scripts/commonutil_global_variables.js
Source: login[1].htm.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/scripts/commonutil_min.js
Source: login[1].htm.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/scripts/cu_callstack.js
Source: recover[1].htm0.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/scripts/dojotoolkit/dojo/dojo.xd.js
Source: login[1].htm.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/scripts/globalvars.js
Source: recover[1].htm0.2.dr, login[1].htm.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/scripts/harmony/css/harmony.css
Source: recover[1].htm0.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/scripts/harmony/images/logo.png
Source: login[1].htm.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/scripts/harmony/images/qbo-ball.png
Source: login[1].htm.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/scripts/jscontext.js
Source: login[1].htm.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/scripts/login.css
Source: recover[1].htm0.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/scripts/loginHelp.css
Source: recover[1].htm0.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/scripts/recoverAccount.js
Source: recover[1].htm0.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/scripts/sharedScripts.js
Source: recover[1].htm0.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/scripts/sitecatalyst_qboe.js
Source: recover[1].htm0.2.dr	String found in binary or memory: https://uiclassic.intuitcdn.net/v1960.161/scripts/sitefooter.css
Source: hello[1].htm.2.dr, statement[1].htm.2.dr	String found in binary or memory: https://uxfabric.intuitcdn.net/
Source: utag[1].js.2.dr	String found in binary or memory: https://uxfabric.intuitcdn.net/gdpr-util/
Source: utag[1].js.2.dr	String found in binary or memory: https://uxfabric.intuitcdn.net/gdpr-widget/2.4.3/ccpa-widget-en.js
Source: hello[1].htm.2.dr	String found in binary or memory: https://uxfabric.intuitcdn.net/polyfill/polyfill.min.js?features=default
Source: hello[1].htm.2.dr	String found in binary or memory: https://uxfabric.intuitcdn.net/requirejs/2.3.6/require.min.js
Source: hello[1].htm.2.dr	String found in binary or memory: https://uxfabric.intuitcdn.net/web-shell/3.130.0/legacy
Source: hello[1].htm.2.dr	String found in binary or memory: https://uxfabric.intuitcdn.net/web-shell/3.130.0/legacy/legacy-shell-harmony.css
Source: hello[1].htm.2.dr	String found in binary or memory: https://uxfabric.intuitcdn.net/web-shell/3.130.0/legacy/shell-lib
Source: hello[1].htm.2.dr	String found in binary or memory: https://uxfabric.intuitcdn.net/web-shell/3.130.0/legacy/web-shell
Source: base[1].js.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: base[1].js.2.dr	String found in binary or memory: https://waa-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
Source: base[1].js.2.dr	String found in binary or memory: https://waa-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
Source: about[1].htm.2.dr	String found in binary or memory: https://webinars.securityboulevard.com/step-by-step-guide-to-protecting-web-apps-with-google-recaptc
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://workspace.google.com/terms/education_privacy.html
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.capitalone.co.uk/web/privacy-statement.jsf
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.creditkarma.com/
Source: utag[1].js.2.dr	String found in binary or memory: https://www.emjcd.com/tags/c?CID=1506444&TYPE=418979&OID=
Source: Bootstrap[1].js.2.dr	String found in binary or memory: https://www.ensighten.com/products/enterprise-tag-management/privacy/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://www.fathomhq.com/privacy
Source: pricing[1].htm.2.dr	String found in binary or memory: https://www.fathomhq.com/support
Source: pricing[1].htm.2.dr	String found in binary or memory: https://www.fathomhq.com/terms
Source: about[1].htm.2.dr	String found in binary or memory: https://www.gcppodcast.com/post/episode-240-recaptcha-enterprise-kelly-anderson-springml-potholes-er
Source: about[1].htm.2.dr	String found in binary or memory: https://www.google-analytics.com
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://www.google.
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: {63C5AF54-E149-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.google.com
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.google.com/
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://www.google.com/about/datacenters/inside/locations
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.google.com/chrome/intl/en/privacy.html
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://www.google.com/history/optout?utm_source=pp
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_74x24dp.png
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.google.com/images/branding/googlelogo/2x/googlelogo_color_74x24dp.png
Source: about[1].htm.2.dr	String found in binary or memory: https://www.google.com/intl/en-GB/policies/privacy/
Source: about[1].htm.2.dr	String found in binary or memory: https://www.google.com/intl/en-GB/policies/terms/
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://www.google.com/intl/en/policies/privacy/est/login/recover?source=login&iux_tests=tmx_tag_obf
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.google.com/intl/en/safetycenter/
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.google.com/landing/2step/?utm_source=pp
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: about[1].htm.2.dr	String found in binary or memory: https://www.google.com/recaptcha/about/
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://www.google.com/recaptcha/about//0/extrequest/login/recover?source=login&iux_tests=tmx_tag_ob
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.google.com/recaptcha/about/images/favicon.png
Source: about[1].htm.2.dr	String found in binary or memory: https://www.google.com/recaptcha/admin
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: anchor[2].htm.2.dr, anchor[1].htm.2.dr, enterprise[1].js.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise/
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LcnSW0aAAAAAICg9byzvE1oFz4zXBI-CFh6W3st&c
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.google.com/search/howsearchworks/crawling-indexing/
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://www.google.com/work/apps/terms/education_privacy.html
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: base[1].js.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: about[1].htm.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: js[2].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: js[2].js.2.dr, gtm[1].js.2.dr, f[1].txt.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: utag[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: about[1].htm.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://www.gstatic.
Source: so[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.IdentityPoliciesUi.en_US.41eOzgLQ834.
Source: so[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.7VqZ8QRrZpw.
Source: remote[1].js.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: rs=AA2YrTsi505vDSsc6af8ZUct4Dgm_XWu_g[1].js.2.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/identity/boq/policies/privacy/privacy_illustration.svg
Source: about[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_dark54_clr_84x28px.svg
Source: rs=AA2YrTsi505vDSsc6af8ZUct4Dgm_XWu_g[1].js.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: rs=AA2YrTsi505vDSsc6af8ZUct4Dgm_XWu_g[1].js.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/search_black_24dp.png
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/02698a3383765bd3c250471c53a86c5a.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/02f8664b95445de6f27ba682f3c5f9ab.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/0d6da8d8c44e7e3ee95c4d56c19f04e1.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/13062c65605335a46d14656c46af3868.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/1fa3e4ce8ac456f39ed02a6f9eb49b14.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/2951277d4c35389d7d304ed78d4fb6f6.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/3394102be0315326fd760e503b31c7b6.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/39b031d352a2e1586cf50ac7f2bbc18b.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/4165cd3aa643abb80fe1953668f67551.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/4c5ee41d52605ff6f43538d46a1c0d35.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/4f19891c43001db11efc8048f9bc7cdb.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/51cd09d6239edc9652bc05ad1d149a5c.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/546f2b674b407304a2570e71a216e509.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/5959e84c2197c8a27da0a717f1cd47d5.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/5e7cd445f8861a262a3da876f855a4cc.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/900a793eae04f4bddd675f8d95c4a794.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/a8e78fa7fa279aa946fe1a9d6a0508f2.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/acad335ad7ba163209d8c3e671b2c445.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/b18d13e9ea8a362642b7d25bce665039.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/c1b97d74dace7e43a9ccb26841a7cae4.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/d1b68e2cd423aba52d74f02573df2d2d.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/e28714c71f217892f72b2698ea5cefef.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/e60586c0029adec0bacd3e48470ca6c6.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/e79ea0ed464fc8952d5b5582f9f9ae53.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/fa9e0e90d1e7ec399dad9f3257a9bb63.svg
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/fb61fc4bfc85ad86f11342e699d685e9.svg
Source: anchor[2].htm.2.dr, webworker[1].js.2.dr, anchor[1].htm.2.dr, enterprise[1].js.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/TbD3vPFlUWKZD-9L4ZxB0HJI/recaptcha__en.js
Source: anchor[2].htm.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/TbD3vPFlUWKZD-9L4ZxB0HJI/styles__ltr.css
Source: {63C5AF54-E149-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.intuit.com
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://www.intuit.com/LIntuit
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/blog/social-responsibility/from-classroom-to-career-jasons-journey-to-busines
Source: statement[1].htm.2.dr, O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/ca/
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/company/covid19-info/
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.intuit.com/favicon.ico
Source: statement[1].htm.2.dr, O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/fr-ca/
Source: statement[1].htm.2.dr, O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/in/
Source: statement[1].htm.2.dr, O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/legal
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/legal/intuit-group-companies/
Source: YFWRBOG6.htm.2.dr	String found in binary or memory: https://www.intuit.com/legal/licenses/payment-licenses/
Source: pricing[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/legal/licenses/payment-licenses/.
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/oicms/i_com/uploads/2020/03/icom-logo-ecosystem-lockup-4line-twitter.jpg
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/oicms/i_com/uploads/2020/04/icom-homepage-hero-all-devices-small.jpg
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/oicms/i_com/uploads/2020/10/icom-hp-areawehire-quickbooks-logo.png
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/oicms/i_com/uploads/2020/10/icom-hp-areawehire-turbotax-logo.png
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/oicms/i_com/uploads/2020/10/icom-hp-textasset-quickbooks-product-1.jpg
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/oicms/i_com/uploads/2020/10/icom-hp-textasset-turbotax-product-gif-2.gif
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/oicms/i_com/uploads/2021/01/icom-hp-areawehire-mint-logo.png
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/oicms/i_com/uploads/2021/01/icom-hp-hero-3-mobile-devices-1.jpg
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/oicms/i_com/uploads/2021/01/icom-hp-textasset-mint-product.jpg
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/oicms/i_com/uploads/2021/06/icom-hp-hero-jimmy-hendricks-profile-image-2.jpg
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/oicms/i_com/uploads/2021/06/icom-hp-hero-mobile-jimmy-hendricks-profile-image
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/oicms/wp-includes/wlwmanifest.xml
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/oicms/wp-json/
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/oicms/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.intuit.com%2Foicms%2Fhom
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/oicms/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.intuit.com%2Foicms%2Fpri
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://www.intuit.com/om/c31/v1960.161/0/extrequest/login/recover?source=login=oopcu-redirect
Source: statement[1].htm.2.dr, O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/privacy/
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/privacy/data-stewardship-principles/
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/privacy/previous-privacy-statements/
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/privacy/protect-your-privacy
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/privacy/statement
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/privacy/statement/
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://www.intuit.com/privacy/statement/HIntuit
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/privacy/statement/es/
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/privacy/statement/fr-ca/
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/privacy/statement/fr/
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://www.intuit.com/privacy/statement/locale=en_USeating-an-account
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://www.intuit.com/privacy/statement/locale=en_USeating-an-accounthttps://uiclassic.intuitcdn.ne
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://www.intuit.com/privacy/statement/locale=en_USeating-an-accountme.dll/dnserror.htm?ErrorStatu
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/privacy/statement/personal-information/
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/privacy/statement/pt-br/
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/privacy/statement/shield-certification/
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.intuit.com/privacy/submit-a-question/
Source: statement[1].htm.2.dr, O838E4K8.htm.2.dr	String found in binary or memory: https://www.intuit.com/sign-in
Source: ie11CustomProperties.min[1].js.2.dr	String found in binary or memory: https://www.jsdelivr.com/using-sri-with-dynamic-files
Source: pricing[1].htm.2.dr	String found in binary or memory: https://www.mammothhr.com/privacy
Source: pricing[1].htm.2.dr	String found in binary or memory: https://www.mammothhr.com/terms
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.mint.com/?utm_medium=intuitca_home&utm_source=bar_header
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.networkadvertising.org/choices/
Source: utag[1].js.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: pricing[1].htm.2.dr	String found in binary or memory: https://www.simplyinsured.com/privacy-policy
Source: pricing[1].htm.2.dr	String found in binary or memory: https://www.simplyinsured.com/terms-of-service
Source: statement[1].htm.2.dr	String found in binary or memory: https://www.youronlinechoices.eu/
Source: MKGQPL02.js.2.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_l
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_l
Source: privacy[2].htm.2.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_l
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_l
Source: iframe_api[1].js.2.dr, www-widgetapi[1].js.2.dr, utag[1].js.2.dr	String found in binary or memory: https://www.youtube.com
Source: ~DF11773E0F0314E2DE.TMP.1.dr	String found in binary or memory: https://www.youtube.com/embed/esI-RAuOL8o?origin=https%3A%2F%2Fwww.intuit.com&controls=1&iv_load_pol
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://www.youtube.com/feed/history/search_history?utm_source=pp
Source: privacy[2].htm.2.dr, MKGQPL02.js.2.dr	String found in binary or memory: https://www.youtube.com/feed/history?utm_source=pp
Source: base[1].js.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: utag[1].js.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: O838E4K8.htm.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=esI-RAuOL8o
Source: about[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=AnndF9qmfjE
Source: beacon[1].htm.2.dr	String found in binary or memory: https://xds-writesvc.api.intuit.com/v2/saveUserData
Source: statement[1].htm.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/
Source: base[1].js.2.dr	String found in binary or memory: https://youtu.be/
Source: base[1].js.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: base[1].js.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: base[1].js.2.dr	String found in binary or memory: https://yurt.corp.google.com
Source: login[1].htm.2.dr	String found in binary or memory: https://zion-qa.sbgdev.intuit.com/api/v1/
Source: login[1].htm.2.dr	String found in binary or memory: https://zion.qbo.intuit.com/api/v1/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 44.241.139.147:443 -> 192.168.2.3:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.241.139.147:443 -> 192.168.2.3:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.176.210:443 -> 192.168.2.3:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.176.210:443 -> 192.168.2.3:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.81.121.166:443 -> 192.168.2.3:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.81.121.166:443 -> 192.168.2.3:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.133.92:443 -> 192.168.2.3:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.133.92:443 -> 192.168.2.3:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.36.132.22:443 -> 192.168.2.3:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.36.132.22:443 -> 192.168.2.3:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.16.63.147:443 -> 192.168.2.3:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.16.63.147:443 -> 192.168.2.3:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.132.130:443 -> 192.168.2.3:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.132.130:443 -> 192.168.2.3:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.3:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.3:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.132.130:443 -> 192.168.2.3:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.96:443 -> 192.168.2.3:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.96:443 -> 192.168.2.3:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.3:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.3:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.81:443 -> 192.168.2.3:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.9:443 -> 192.168.2.3:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.81:443 -> 192.168.2.3:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.9:443 -> 192.168.2.3:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.42.228:443 -> 192.168.2.3:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.42.228:443 -> 192.168.2.3:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.211.62.226:443 -> 192.168.2.3:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.211.62.226:443 -> 192.168.2.3:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.254.127.126:443 -> 192.168.2.3:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.254.127.126:443 -> 192.168.2.3:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.124.119.57:443 -> 192.168.2.3:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.124.119.57:443 -> 192.168.2.3:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.199.92:443 -> 192.168.2.3:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.199.92:443 -> 192.168.2.3:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.38:443 -> 192.168.2.3:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.38:443 -> 192.168.2.3:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.38:443 -> 192.168.2.3:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.38:443 -> 192.168.2.3:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.3:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.3:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.94:443 -> 192.168.2.3:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.110:443 -> 192.168.2.3:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.110:443 -> 192.168.2.3:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.94:443 -> 192.168.2.3:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.69:443 -> 192.168.2.3:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.67:443 -> 192.168.2.3:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.67:443 -> 192.168.2.3:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.69:443 -> 192.168.2.3:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.34:443 -> 192.168.2.3:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.34:443 -> 192.168.2.3:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.198.240.31:443 -> 192.168.2.3:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.198.240.31:443 -> 192.168.2.3:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.239.250.146:443 -> 192.168.2.3:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.174.11.69:443 -> 192.168.2.3:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.174.11.69:443 -> 192.168.2.3:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.19.186.105:443 -> 192.168.2.3:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.19.186.105:443 -> 192.168.2.3:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.86.36:443 -> 192.168.2.3:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.86.36:443 -> 192.168.2.3:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.148.149.218:443 -> 192.168.2.3:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.163.214.119:443 -> 192.168.2.3:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.233.214.243:443 -> 192.168.2.3:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.233.214.243:443 -> 192.168.2.3:49884 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.42:443 -> 192.168.2.3:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.42:443 -> 192.168.2.3:49886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.140:443 -> 192.168.2.3:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.140:443 -> 192.168.2.3:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.194.154.95:443 -> 192.168.2.3:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.194.154.95:443 -> 192.168.2.3:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.38:443 -> 192.168.2.3:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.38:443 -> 192.168.2.3:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.94.232.32:443 -> 192.168.2.3:49893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.94.232.32:443 -> 192.168.2.3:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.13.47.186:443 -> 192.168.2.3:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.13.47.186:443 -> 192.168.2.3:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.140:443 -> 192.168.2.3:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.140:443 -> 192.168.2.3:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.206.83.104:443 -> 192.168.2.3:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.206.83.104:443 -> 192.168.2.3:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.192:443 -> 192.168.2.3:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.192:443 -> 192.168.2.3:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.0.160.13:443 -> 192.168.2.3:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.0.160.13:443 -> 192.168.2.3:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.194.201.176:443 -> 192.168.2.3:49929 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.238.207.51:443 -> 192.168.2.3:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.238.207.51:443 -> 192.168.2.3:49925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.225.202.106:443 -> 192.168.2.3:49926 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.235.182.173:443 -> 192.168.2.3:49927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.235.182.173:443 -> 192.168.2.3:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.117:443 -> 192.168.2.3:49933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.84.15.117:443 -> 192.168.2.3:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.225.202.106:443 -> 192.168.2.3:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.215.246:443 -> 192.168.2.3:49961 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.215.246:443 -> 192.168.2.3:49962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.33:443 -> 192.168.2.3:49963 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.33:443 -> 192.168.2.3:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.215.246:443 -> 192.168.2.3:49960 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.153.154:443 -> 192.168.2.3:49967 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.153.154:443 -> 192.168.2.3:49968 version: TLS 1.2

Source: classification engine

Classification label: sus22.phis.win@3/429@79/48

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DFFDCEE51B26878627.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3448 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3448 CREDAT:17410 /prefetch:2	Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe	Automated click: agree
Source: C:\Program Files\internet explorer\iexplore.exe	Automated click: Next
Source: C:\Program Files\internet explorer\iexplore.exe	Automated click: agree

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Drive-by Compromise1	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	Peripheral Device Discovery11	Replication Through Removable Media1	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Replication Through Removable Media1	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	File and Directory Discovery1	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	0%	Virustotal		Browse
https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	0%	Avira URL Cloud	safe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://selfemployed.intuit.co.uk/login	0%	Virustotal		Browse
https://selfemployed.intuit.co.uk/login	0%	Avira URL Cloud	safe
https://www.mammothhr.com/privacy	0%	Avira URL Cloud	safe
https://help.creditkarma.co.uk/s/newcase	0%	Virustotal		Browse
https://help.creditkarma.co.uk/s/newcase	0%	Avira URL Cloud	safe
http://col.eum-appdynamics.com	0%	URL Reputation	safe
http://col.eum-appdynamics.com	0%	URL Reputation	safe
http://col.eum-appdynamics.com	0%	URL Reputation	safe
http://col.eum-appdynamics.com	0%	URL Reputation	safe
https://readalong.google	0%	URL Reputation	safe
https://readalong.google	0%	URL Reputation	safe
https://readalong.google	0%	URL Reputation	safe
https://readalong.google	0%	URL Reputation	safe
https://pages.monevo.com/uk/ck-privacy-policy	0%	Avira URL Cloud	safe
http://www.broofa.com	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dart.l.doubleclick.net	172.217.168.38	true	false	high
lptag-cdn-liveperson-net.map.fastly.net	151.101.1.192	true	false	unknown
i.ytimg.com	216.58.215.246	true	false	high
uxfabric.intuitcdn.a.intuit.com	99.84.15.96	true	false	high
pop-eda6.mix.linkedin.com	108.174.11.69	true	false	high
p03.t.eloqua.com	142.0.160.13	true	false	high
dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com	52.211.62.226	true	false	high
trinity.a.intuit.com	44.239.250.146	true	false	high
col.eum-appdynamics.com	54.148.149.218	true	false	unknown
intuit.com.ssl.sc.omtrdc.net	15.236.176.210	true	false	unknown
d2pj9rkatqbt38.cloudfront.net	99.84.15.81	true	false	high
nexus.ensighten.com	18.195.42.228	true	false	high
platform.twitter.map.fastly.net	151.101.12.157	true	false	unknown
collection.decibelinsight.net	18.198.240.31	true	false	unknown
scontent.xx.fbcdn.net	157.240.17.15	true	false	high
t.co	104.244.42.69	true	false	high
app-shell-qboshellservice-use2-prd.devpuxfabricprduse2.iks2.a.intuit.com	3.16.63.147	true	false	high
collect.tealiumiq.com	18.194.201.176	true	false	high
vici-asg-elb-1598172991.us-east-1.elb.amazonaws.com	34.194.154.95	true	false	high
photos-ugc.l.googleusercontent.com	172.217.168.33	true	false	high
d2pdr92cvtkw6v.cloudfront.net	13.35.199.92	true	false	high
v60nf4ojkjtrh5z4sqvgxui7uvb4c3jwmjhlulkc6fcf216556112378am1.e.aa.online-metrix.net	91.235.134.131	true	false	high
c31-prod.qbomono3prdusw2.iks2.a.intuit.com	44.241.139.147	true	false	high
sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com	52.36.132.22	true	false	high
star-mini.c10r.facebook.com	31.13.86.36	true	false	high
v60nf4ojrrfcwgzpevbope5zgu7jjxte6xa7tado5beaf20338e5cddbam1.e.aa.online-metrix.net	91.235.134.131	true	false	high
prd.us.experimentation.a.intuit.com	44.233.214.243	true	false	high
s.twitter.com	104.244.42.67	true	false	high
googleads4.g.doubleclick.net	172.217.168.2	true	false	high
stats.l.doubleclick.net	142.250.153.154	true	false	high
s.amazon-adsystem.com	52.94.232.32	true	false	high
sw4prdwebbluealb-1913782926.us-west-2.elb.amazonaws.com	44.235.182.173	true	false	high
eventbus.a.intuit.com	44.225.202.106	true	false	high
zion.sbgnode.a.intuit.com	35.81.121.166	true	false	high
segment.intuitcdn.a.intuit.com	99.84.15.9	true	false	high
edge-geo.nc0.co	3.124.119.57	true	false	unknown
insight-566961044.eu-west-1.elb.amazonaws.com	34.254.127.126	true	false	high
cdn.appdynamics.com	99.84.15.110	true	false	high
googleads.g.doubleclick.net	172.217.168.34	true	false	high
reddit.map.fastly.net	151.101.1.140	true	false	unknown
dh1y47vf5ttia.cloudfront.net	99.84.15.117	true	false	high
cdn-0.d41.co	99.84.15.42	true	false	unknown
h-intuit.online-metrix.net	91.235.133.92	true	false	high
h.online-metrix.net	91.235.132.130	true	false	high
www.google.ch	172.217.168.67	true	false	high
cdn.decibelinsight.net	99.84.15.94	true	false	unknown
sw6prdwebbluealb-1985872400.us-west-2.elb.amazonaws.com	44.238.207.51	true	false	high
alb.reddit.com	unknown	unknown	false	high
static.ads-twitter.com	unknown	unknown	false	unknown
marketdataservice.api.intuit.com	unknown	unknown	false	high
lib.intuitcdn.net	unknown	unknown	false	high
siteintercept.qualtrics.com	unknown	unknown	false	high
edge.experimentation.intuit.com	unknown	unknown	false	high
static-assets.fs.liveperson.com	unknown	unknown	false	high
8344993.fls.doubleclick.net	unknown	unknown	false	high
stats.g.doubleclick.net	unknown	unknown	false	high
c31.qbo.intuit.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high
accounts.intuit.com	unknown	unknown	false	high
www.redditstatic.com	unknown	unknown	false	high
accdn.lpsnmedia.net	unknown	unknown	false	high
plugin-qbo.intuit.com	unknown	unknown	false	high
img.en25.com	unknown	unknown	false	high
sci.intuit.com	unknown	unknown	false	high
uiclassic.intuitcdn.net	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
static.doubleclick.net	unknown	unknown	false	high
xds-writesvc.api.intuit.com	unknown	unknown	false	high
s113755760.t.eloqua.com	unknown	unknown	false	high
experimentation.us.api.intuit.com	unknown	unknown	false	high
tags.tiqcdn.com	unknown	unknown	false	high
pf.intuit.com	unknown	unknown	false	high
www.youtube-nocookie.com	unknown	unknown	false	high
www.intuit.com	unknown	unknown	false	high
intuitvisitorid.api.intuit.com	unknown	unknown	false	high
yt3.ggpht.com	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
data.privacy.ensighten.com	unknown	unknown	false	high
cdn.websdk.intuit.com	unknown	unknown	false	high
ct.pinterest.com	unknown	unknown	false	high
lptag-cdn.liveperson.net	unknown	unknown	false	high
trinity.platform.intuit.com	unknown	unknown	false	high
1996823.fls.doubleclick.net	unknown	unknown	false	high
zion.qbo.intuit.com	unknown	unknown	false	high
insight.adsrvr.org	unknown	unknown	false	high
segment.intuitcdn.net	unknown	unknown	false	high
quickbooks.intuit.com	unknown	unknown	false	high
pt.ispot.tv	unknown	unknown	false	high
uxfabric.intuitcdn.net	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high
az1.qualtrics.com	unknown	unknown	false	high
eventbus.intuit.com	unknown	unknown	false	high
privacy-policy.truste.com	unknown	unknown	false	high
vid1005.d41.co	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	high
znew2pz3yjx9poggn-intuitsocial.siteintercept.qualtrics.com	unknown	unknown	false	high
ad.doubleclick.net	unknown	unknown	false	high
vi4820.d41.co	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://quickbooks.intuit.com/	false	high
https://turbotax.intuit.com/	false	high
https://www.intuit.com/privacy/statement/	false	high
https://quickbooks.intuit.com/pricing/	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://quickbooks.intuit.com/pricing/&ex-hargs=v%3D1.0%3Bc%3D5035759150901%3Bp%3DA120B229-D2D3-2A64	utag[1].js.2.dr	false		high
https://quickbooks.intuit.com/in/pricing/	pricing[1].htm.2.dr	false		high
https://selfemployed.intuit.co.uk/login	recoverAccount[1].js.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://quickbooks.intuit.com/ph/pricing/	pricing[1].htm.2.dr	false		high
https://quickbooks.intuit.com/global/	YFWRBOG6.htm.2.dr	false		high
https://quickbooks.intuit.com/ph/	YFWRBOG6.htm.2.dr	false		high
http://www.decibelinsight.com/	di[2].js.2.dr	false		high
https://quickbooks.intuit.com/cas/dam/IMAGE/A8l1WrWz3/apple-touch-icon-152x152.png	O838E4K8.htm.2.dr	false		high
https://quickbooks.intuit.com/global/pricing/	pricing[1].htm.2.dr	false		high
https://uxfabric.intuitcdn.net/requirejs/2.3.6/require.min.js	hello[1].htm.2.dr	false		high
https://www.mammothhr.com/privacy	pricing[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://uxfabric.intuitcdn.net/web-shell/3.130.0/legacy/web-shell	hello[1].htm.2.dr	false		high
https://8344993.fls.doubleclick.net/activityi;src=8344993;type=int_00;cat=intui006;ord=6480948041477	~DF11773E0F0314E2DE.TMP.1.dr	false		high
http://support.quickbooks.intuit.com/support/LicenseNumber/LicenseNumber.aspx	recoverAccount[1].js.2.dr	false		high
https://c31.qbo.intuit.com/c31/v1929.214/0/login?page=check;https://uiclassic.intuitcdn.net/v1960.16	~DF11773E0F0314E2DE.TMP.1.dr	false		high
https://quickbooks.intuit.com/gutenberg/static/rum/adrum.js	YFWRBOG6.htm.2.dr, pricing[1].htm.2.dr	false		high
https://uiclassic.intuitcdn.net/v1960.161/images/invoice.ico	~DF11773E0F0314E2DE.TMP.1.dr	false		high
https://px.ads.linkedin.com/collect?	insight.min[1].js.2.dr	false		high
https://turbotax.intuit.com/personal-taxes/online/live/?cid=seq_intuit_tt_click_prod_featured	O838E4K8.htm.2.dr	false		high
https://www.intuit.com/oicms/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.intuit.com%2Foicms%2Fhom	O838E4K8.htm.2.dr	false		high
https://quickbooks.intuit.com/payroll&ex-hargs=v%3D1.0%3Bc%3D5035759150901%3Bp%3DACBF9752-65DB-D341-	utag[1].js.2.dr	false		high
https://uiclassic.intuitcdn.net/v1960.161/scripts/globalvars.js	login[1].htm.2.dr	false		high
https://uxfabric.intuitcdn.net/	hello[1].htm.2.dr, statement[1].htm.2.dr	false		high
https://plugin.intuitcdn.net/harmony-ui-components/28.1.1/dist/css/hui.min.css	hello[1].htm.2.dr	false		high
https://www.ensighten.com/products/enterprise-tag-management/privacy/	Bootstrap[1].js.2.dr	false		high
https://www.youtube-nocookie.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=	privacy[2].htm.2.dr	false		high
https://www.youtube.com/generate_204?cpn=	base[1].js.2.dr	false		high
https://support.fathomhq.com/en/articles/999175-import-class-data-from-quickbooks-online	pricing[1].htm.2.dr	false		high
https://quickbooks.intuit.com/payroll/employee-benefits/	utag[1].js.2.dr	false		high
https://uiclassic.intuitcdn.net/v1960.161/images/bills.ico;window-type=self	login[1].htm.2.dr	false		high
https://siteintercept.qualtrics.com	WRSiteInterceptEngine[1].js.2.dr	false		high
https://www.youtube-nocookie.com/embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_l	~DF11773E0F0314E2DE.TMP.1.dr	false		high
http://quickbooks.intuit.com/signup/	login[1].htm.2.dr	false		high
https://www.intuit.com/oicms/i_com/uploads/2020/03/icom-logo-ecosystem-lockup-4line-twitter.jpg	statement[1].htm.2.dr	false		high
https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect	~DF11773E0F0314E2DE.TMP.1.dr	false		high
https://jira.intuit.com/browse/APPF-2844	hello[1].htm.2.dr	false		high
https://quickbooks.intuit.com/eu/	YFWRBOG6.htm.2.dr	false		high
https://quickbooks.intuit.com/commerce/account/secure/login.jsp	recoverAccount[1].js.2.dr	false		high
https://quickbooks.intuit.com/	YFWRBOG6.htm.2.dr	false		high
https://quickbooks.intuit.com/hk/pricing/	pricing[1].htm.2.dr	false		high
https://accounts.intuit.com/IUS-Plugins/v2/scripts/en_us/ius-core.js	login[1].htm.2.dr	false		high
https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/other/auto-payrol	pricing[1].htm.2.dr	false		high
https://plugin.intuitcdn.net/sbg-web-shell-ui/12.33.1/shell/boot.js	hello[1].htm.2.dr	false		high
https://security.intuit.com/index.php/privacy	pricing[1].htm.2.dr	false		high
https://quickbooks.intuit.com/ie/pricing/	pricing[1].htm.2.dr	false		high
https://quickbooks.intuit.com/1960.161/0/extrequest/login/recover?source=login=oopcu-redirect	~DF11773E0F0314E2DE.TMP.1.dr	false		high
https://www.intuit.com/oicms/i_com/uploads/2020/10/icom-hp-textasset-turbotax-product-gif-2.gif	O838E4K8.htm.2.dr	false		high
https://www.youtube.com/watch?v=AnndF9qmfjE	about[1].htm.2.dr	false		high
https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login	~DF11773E0F0314E2DE.TMP.1.dr	false		high
https://youtu.be/	base[1].js.2.dr	false		high
https://uiclassic.intuitcdn.net/v1960.161/scripts/loginHelp.css	recover[1].htm0.2.dr	false		high
https://help.creditkarma.co.uk/s/newcase	statement[1].htm.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://uiclassic.intuitcdn.net/v1960.161/scripts/harmony/css/harmony.css	recover[1].htm0.2.dr, login[1].htm.2.dr	false		high
https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/brand-photos-2019/hr-support-center-pa	pricing[1].htm.2.dr	false		high
https://quickbooks.intuit.com/r/payroll/salary-or-draw-how-to-pay-yourself-as-business-owner/	YFWRBOG6.htm.2.dr	false		high
https://accounts.intuit.com/configuration/widgets?offering_id=Intuit.sbe.salsa.default	login[1].htm.2.dr	false		high
https://s.pinimg.com/ct/lib/main.1da0559f.js	core[1].js.2.dr	false		high
https://uiclassic.intuitcdn.net/v1960.161/scripts/commonutil_global_variables.js	login[1].htm.2.dr	false		high
https://quickbooks.intuit.com/za/	YFWRBOG6.htm.2.dr	false		high
https://quickbooks.intuit.com/br/	YFWRBOG6.htm.2.dr	false		high
https://www.intuit.com/privacy/statement/shield-certification/	statement[1].htm.2.dr	false		high
https://pf.intuit.com/YUld3Hd0Guz-1-9S?e4254470c54debe4=aJPiPbnmrY7ME22XisDSIRPOxOGd8yRyfc_VpG4oLxNC	~DF11773E0F0314E2DE.TMP.1.dr	false		high
https://quickbooks.intuit.com/mx/contactanos/	statement[1].htm.2.dr	false		high
http://col.eum-appdynamics.com	adrum[1].js.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://quickbooks.intuit.com/za/pricing/	pricing[1].htm.2.dr	false		high
https://sbgmarketing.api.intuit.com	statement[1].htm.2.dr	false		high
https://www.intuit.com/privacy/protect-your-privacy	statement[1].htm.2.dr	false		high
https://accounts.intuit.com/xdr.html?v2=true&corsEnabled&tests=tag_obfuscation	~DF11773E0F0314E2DE.TMP.1.dr	false		high
https://www.intuit.com/privacy/	statement[1].htm.2.dr, O838E4K8.htm.2.dr	false		high
http://cdn.appdynamics.com	adrum[1].js.2.dr	false		high
https://app.qbo.intuit.com/app/accountant/training?	utag[1].js.2.dr	false		high
https://s.amazon-adsystem.com/iui3?	utag[1].js.2.dr	false		high
https://plugin.intuitcdn.net/sbg-web-shell-ui/12.33.1/dojo/dojo.js	hello[1].htm.2.dr	false		high
https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/photo/native-soil	YFWRBOG6.htm.2.dr	false		high
https://plugin.intuitcdn.net/sbg-web-shell-ui/12.33.1/shell/harmony/ecosystem-app/main.css	hello[1].htm.2.dr	false		high
https://quickbooks.intuit.com/cas/dam/IMAGE/A7mjJ5rpg/apple-touch-icon-196x196.png	imagestore.dat.2.dr	false		high
https://quickbooks.intuit.com/uk/pricing/	pricing[1].htm.2.dr	false		high
https://www.intuit.com/fr-ca/	statement[1].htm.2.dr, O838E4K8.htm.2.dr	false		high
https://quickbooks.intuit.com/fr/les-offres-quickbooks/	pricing[1].htm.2.dr	false		high
https://quickbooks.intuit.com/br/planos/	pricing[1].htm.2.dr	false		high
https://quickbooks.intuit.com/cas/dam/IMAGE/A4wGYqKhc/pricing-bolt-sprite.svg);	YFWRBOG6.htm.2.dr	false		high
https://requirejs.org/docs/api.html#errors	hello[1].htm.2.dr	false		high
https://collect.tealiumiq.com/event/?	utag[1].js.2.dr	false		high
https://s.qualtrics.com/spoke/all/jam	WRSiteInterceptEngine[1].js.2.dr	false		high
https://turbotax.demdex.net/dest5.html?d_nsid=5	~DF11773E0F0314E2DE.TMP.1.dr	false		high
https://quickbooks.intuit.com/?sc=seq_intuit_qb_click_hd	statement[1].htm.2.dr, O838E4K8.htm.2.dr	false		high
https://quickbooks.intuit.com/fr-ca/comparaison/	pricing[1].htm.2.dr	false		high
https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/brand-photos-2019/TaskMgmt-Drawer-Imag	pricing[1].htm.2.dr	false		high
https://quickbooks.intuit.com/desktop/enterprise/contact/&ex-hargs=v%3D1.0%3Bc%3D5035759150901%3Bp%3	utag[1].js.2.dr	false		high
http://youtube.com/drm/2012/10/10	base[1].js.2.dr	false		high
https://readalong.google	MKGQPL02.js.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://uiclassic.intuitcdn.net/v1960.161/scripts/harmony/images/logo.png	recover[1].htm0.2.dr	false		high
https://pages.monevo.com/uk/ck-privacy-policy	statement[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://c31.qbo.intuit.com/c31/v1929.214/0/login?page=invoice	~DF11773E0F0314E2DE.TMP.1.dr	false		high
https://qbo.intuit.com/qbo1/login	login[1].htm.2.dr	false		high
http://www.broofa.com	rs=AA2YrTsi505vDSsc6af8ZUct4Dgm_XWu_g[1].js.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
54.148.149.218	col.eum-appdynamics.com	United States	16509	AMAZON-02US	false
52.206.83.104	unknown	United States	14618	AMAZON-AESUS	false
52.211.62.226	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
99.84.15.9	segment.intuitcdn.a.intuit.com	United States	16509	AMAZON-02US	false
31.13.86.36	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
44.238.207.51	sw6prdwebbluealb-1985872400.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
99.84.15.96	uxfabric.intuitcdn.a.intuit.com	United States	16509	AMAZON-02US	false
3.124.119.57	edge-geo.nc0.co	United States	16509	AMAZON-02US	false
99.84.15.94	cdn.decibelinsight.net	United States	16509	AMAZON-02US	false
44.225.202.106	eventbus.a.intuit.com	United States	16509	AMAZON-02US	false
34.254.127.126	insight-566961044.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
35.163.214.119	unknown	United States	16509	AMAZON-02US	false
142.250.153.154	stats.l.doubleclick.net	United States	15169	GOOGLEUS	false
44.239.250.146	trinity.a.intuit.com	United States	16509	AMAZON-02US	false
44.241.139.147	c31-prod.qbomono3prdusw2.iks2.a.intuit.com	United States	16509	AMAZON-02US	false
15.236.176.210	intuit.com.ssl.sc.omtrdc.net	United States	16509	AMAZON-02US	false
91.235.132.130	h.online-metrix.net	Netherlands	30286	THMUS	false
151.101.12.157	platform.twitter.map.fastly.net	United States	54113	FASTLYUS	false
142.0.160.13	p03.t.eloqua.com	United States	7160	NETDYNAMICSUS	false
18.194.201.176	collect.tealiumiq.com	United States	16509	AMAZON-02US	false
91.235.133.92	h-intuit.online-metrix.net	Netherlands	30286	THMUS	false
99.84.15.42	cdn-0.d41.co	United States	16509	AMAZON-02US	false
34.194.154.95	vici-asg-elb-1598172991.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.94.232.32	s.amazon-adsystem.com	United States	16509	AMAZON-02US	false
44.233.214.243	prd.us.experimentation.a.intuit.com	United States	16509	AMAZON-02US	false
151.101.1.192	lptag-cdn-liveperson-net.map.fastly.net	United States	54113	FASTLYUS	false
35.81.121.166	zion.sbgnode.a.intuit.com	United States	237	MERIT-AS-14US	false
52.36.132.22	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
157.240.17.15	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
18.195.42.228	nexus.ensighten.com	United States	16509	AMAZON-02US	false
91.235.134.131	v60nf4ojkjtrh5z4sqvgxui7uvb4c3jwmjhlulkc6fcf216556112378am1.e.aa.online-metrix.net	Netherlands	30286	THMUS	false
18.198.240.31	collection.decibelinsight.net	United States	16509	AMAZON-02US	false
108.174.11.69	pop-eda6.mix.linkedin.com	United States	14413	LINKEDINUS	false
104.244.42.69	t.co	United States	13414	TWITTERUS	false
216.58.215.246	i.ytimg.com	United States	15169	GOOGLEUS	false
104.244.42.67	s.twitter.com	United States	13414	TWITTERUS	false
13.35.199.92	d2pdr92cvtkw6v.cloudfront.net	United States	16509	AMAZON-02US	false
99.84.15.117	dh1y47vf5ttia.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.1.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
52.13.47.186	unknown	United States	16509	AMAZON-02US	false
172.217.168.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
3.16.63.147	app-shell-qboshellservice-use2-prd.devpuxfabricprduse2.iks2.a.intuit.com	United States	16509	AMAZON-02US	false
172.217.168.33	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
99.84.15.110	cdn.appdynamics.com	United States	16509	AMAZON-02US	false
44.235.182.173	sw4prdwebbluealb-1913782926.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
52.19.186.105	unknown	United States	16509	AMAZON-02US	false
99.84.15.81	d2pj9rkatqbt38.cloudfront.net	United States	16509	AMAZON-02US	false
172.217.168.38	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false

General Information

Joe Sandbox Version:	32.0.0 Black Diamond
Analysis ID:	446634
Start date:	09.07.2021
Start time:	23:37:24
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 8m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	25
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus22.phis.win@3/429@79/48
Cookbook Comments:	Adjust boot time Enable AMSI Browsing link: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login Browsing link: https://www.intuit.com/ Browsing link: https://quickbooks.intuit.com/ Browsing link: https://turbotax.intuit.com/ Browsing link: https://accounts-help.lc.intuit.com/questions/1582580-creating-an-account Browsing link: https://glam.app.intuit.com/app/guesttos?glocale=en_US Browsing link: https://www.intuit.com/privacy/statement/ Browsing link: https://c31.qbo.intuit.com/c31/v1960.161/0/extrequest/login/recover?source=login&iux_tests=tmx_tag_obfuscation_cutover:b Browsing link: http://quickbooks.intuit.com/signup/ Browsing link: https://www.google.com/recaptcha/intro/index.html Browsing link: https://www.google.com/intl/en/policies/privacy/
Warnings:	Show All Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information. Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, BackgroundTransferHost.exe, ielowutil.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, svchost.exe Excluded IPs from analysis (whitelisted): 13.64.90.137, 52.147.198.201, 104.43.193.48, 52.255.188.83, 2.18.105.186, 2.20.217.130, 23.50.109.90, 104.16.85.20, 104.16.89.20, 104.16.87.20, 104.16.86.20, 104.16.88.20, 95.100.55.191, 2.20.218.234, 172.217.168.68, 216.58.215.227, 172.217.168.3, 104.43.139.144, 20.50.102.62, 2.18.101.225, 152.199.19.161, 95.100.54.203, 172.217.168.40, 172.217.168.78, 216.58.215.238, 172.217.168.14, 172.217.168.46, 172.217.168.66, 95.100.49.215, 172.217.168.2, 13.107.42.14, 172.217.168.70, 93.184.221.240, 40.112.88.60, 2.20.222.188, 104.83.116.129, 151.101.2.132, 151.101.66.132, 151.101.130.132, 151.101.194.132, 23.54.112.184, 204.79.197.200, 13.107.21.200, 104.17.208.240, 104.17.209.240, 178.249.97.99, 23.36.225.116, 172.217.168.10, 23.10.249.43, 23.10.249.26, 20.82.210.154, 172.217.168.67 Excluded domains from analysis (whitelisted): gstaticadssl.l.google.com, ssl.gstatic.com, http-download.intuit.com.edgekey.net, j.sni.global.fastly.net, policies.google.com, iris-de-prod-azsc-neu-b.northeurope.cloudapp.azure.com, accounts-prd.intuit.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net, tags.tiqcdn.com.edgekey.net, mktg.intuit.com.edgekey.net, e11290.dspg.akamaiedge.net, l-0005.l-msedge.net, 2-01-37d2-0006.cdx.cedexis.net, z2.lptag-cdn.livepersonk.akadns.net, audownload.windowsupdate.nsatc.net, hlb.apr-52dd2-0.edgecastdns.net, www.google.com, geo.lptag-cdn.livepersonk.akadns.net, cloudenhanced.qualtrics.com.edgekey.net, watson.telemetry.microsoft.com, www.gstatic.com, au-bg-shim.trafficmanager.net, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, plus.l.google.com, dual-a-0001.a-msedge.net, ris-prod.trafficmanager.net, skypedataprdcolcus16.cloudapp.net, lib.intuitcdn.net.edgekey.net, pagead2.googlesyndication.com, skypedataprdcolcus15.cloudapp.net, ris.api.iris.microsoft.com, e17486.b.akamaiedge.net, www.pinterest.com.edgekey.net, youtube-ui.l.google.com, www3.l.google.com, blobcollector.events.data.trafficmanager.net, e4047.b.akamaiedge.net, e9951.g.akamaiedge.net, cs9.wpc.v0cdn.net, cdn.jsdelivr.net.cdn.cloudflare.net, www.googleadservices.com, e8091.a.akamaiedge.net, wildcard.en25.com.edgekey.net, e6449.dsca.akamaiedge.net, ogs.google.com, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, adservice.google.com, a1449.dscg2.akamai.net, arc.msn.com, wu.azureedge.net, iecvlist.microsoft.com, e9706.dscg.akamaiedge.net, int-qbo.intuitcdn.net.edgekey.net, go.microsoft.com, www.googletagmanager.com, cs11.wpc.v0cdn.net, 2-01-37d2-0018.cdx.cedexis.net, bat.bing.com, arc.trafficmanager.net, e6449.a.akamaiedge.net, img-prod-cms-rt-microsoft-com.akamaized.net, prod.fs.microsoft.com.akadns.net, wu.wpc.apr-52dd2.edgecastdns.net, e5763.g.akamaiedge.net, geo.accdn.livepersonk.akadns.net, www-linkedin-com.l-0005.l-msedge.net, skypedataprdcolwus17.cloudapp.net, e12398.b.akamaiedge.net, www-google-analytics.l.google.com, fonts.gstatic.com, ie9comview.vo.msecnd.net, www-googletagmanager.l.google.com, wu.ec.azureedge.net, asf-ris-prod-neu.northeurope.cloudapp.azure.com, e4424.g.akamaiedge.net, e1723.g.akamaiedge.net, ctldl.windowsupdate.com, e6629.a.akamaiedge.net, iris-de-prod-azsc-uks.uksouth.cloudapp.azure.com, static-doubleclick-net.l.google.com, skypedataprdcoleus16.cloudapp.net, skypedataprdcoleus17.cloudapp.net, bat-bing-com.a-0001.a-msedge.net, play.google.com, wildcard.licdn.com.edgekey.net, s.pinimg.com.edgekey.net, prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net, go.microsoft.com.edgekey.net, apis.google.com Not all processes where analyzed, report is missing behavior information Report size exceeded maximum capacity and may have missing behavior information. Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtOpenFile calls found. Report size getting too big, too many NtQueryAttributesFile calls found. Report size getting too big, too many NtWriteFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\9WVQD59C\accounts.intuit[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	1017
Entropy (8bit):	4.854745418057671
Encrypted:	false
SSDEEP:	24:WUJZWW+/UJZWW+VE6O+/UJZWW+VE6O+/UJZWW+VE6O+VjdrUZu+l:LJn+MJn+G+MJn+G+MJn+G+VZrl+l
MD5:	2E59835A78DA9363C091F3F649B14A09
SHA1:	575DD859C28F00B17D6497D9FBAD7427D78FD27F
SHA-256:	7FBC049793268DBA95F14B8E889BB4F919CFD44C128544C16A0F9289E9E31546
SHA-512:	29266DFD2EE4FBA77445323F895B8754872701C3A4BBFE1F74EF384B224E6E20A92C5D7726A35C0F7EA5616C875EA73232D8CBDAC0B67E691EB1F9B8C50CD4AB
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="ed73f20edbf2b73" value="58d72296e2744e4eb4297047a6f993df_1781386694294" ltime="690663776" htime="30897494" /></root><root><item name="ed73f20edbf2b73" value="58d72296e2744e4eb4297047a6f993df_1781386694294" ltime="690663776" htime="30897494" /><item name="ivid" value="df78535b-04af-4c6f-8a9e-48119aa55d5e" ltime="705653776" htime="30897494" /></root><root><item name="ed73f20edbf2b73" value="58d72296e2744e4eb4297047a6f993df_1781386694294" ltime="690663776" htime="30897494" /><item name="ivid" value="df78535b-04af-4c6f-8a9e-48119aa55d5e" ltime="705653776" htime="30897494" /></root><root><item name="ed73f20edbf2b73" value="58d72296e2744e4eb4297047a6f993df_1781386694294" ltime="690663776" htime="30897494" /><item name="ivid" value="df78535b-04af-4c6f-8a9e-48119aa55d5e" ltime="705653776" htime="30897494" /><item name="did" value="SHOPPER2_9164539d245fa08a77e7fd2f71abb679153baf96f6a92554e154cd9db26b954a1fa10f5d67371ad906afea05cae44b1f" ltime="708133776" htime="30

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\9WVQD59C\www.youtube[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	78295
Entropy (8bit):	5.0215683244648925
Encrypted:	false
SSDEEP:	96:WCq55E0C7aHJZMKTWHJ/Q0Rd1yJ/Q0RdE8XJ/Q0RdquJ/Q0RKrJ/Q0RKSGrJ/Q0g:qd8dAdgdSdSdgdSdgdJdbdJdYdEWD
MD5:	D994F9DFE3B3464CFDC9507534297F8D
SHA1:	5E23751AF4AE582D2DCE3154B343AE662129BB4C
SHA-256:	E7E7A6CBA4B65F36ADA83F670884DF346BF40909AB9910D0F78397082D58114F
SHA-512:	5C68D6081040B6EDDA74E2E5325FD2262C93680146A9C587CDD9AE29DA5656680A6616A46377AFCFDFA6A2560DBB8D79D8EBB34CB28D109A26FD215F2CE04C3E
Malicious:	false
Reputation:	low
Preview:	<root></root><root></root><root></root><root><item name="__sak" value="1" ltime="1051643776" htime="30897494" /></root><root></root><root><item name="__sak" value="1" ltime="1122643776" htime="30897494" /></root><root></root><root><item name="yt.innertube::nextId" value="{"data":2,"expiration":1625985538154,"creation":1625899138159}" ltime="1123163776" htime="30897494" /></root><root><item name="yt.innertube::nextId" value="{"data":2,"expiration":1625985538154,"creation":1625899138159}" ltime="1123163776" htime="30897494" /><item name="yt.innertube::requests" value="{"data":{"1":{"method":"log_event","request":{"context":{"client":{"hl":"en","gl":"CH","clientName":56,"clientVersion":"1.20210707.1.0","configInfo":{"appInstallData":"COeDo4cGEK6h_RIQrKH9EhC8pP0SENi-rQ

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\B404KU6F\www.google[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	111
Entropy (8bit):	4.890375980599371
Encrypted:	false
SSDEEP:	3:D90aK1ryRtFwsW+pEeAqriGEFRS1n9GuFjAqSeSRgHFKbZKaKb:JFK1rUFy+pEeAqriGNvGze5wwb
MD5:	B1D4909A9B19860269988AE14BF1F85E
SHA1:	5B77429F22899747A1D83A8D6C09BF918A8C8F60
SHA-256:	B181656CF1C0DE8609D3ECC0E60232B1F11A141D6026511D698327AC82EAF18C
SHA-512:	425139D92FF5E173C643D8BC7B745801B5F779444AD0401F486AD9069B582E4553E448744B14F6114DDD943FD8A5258C27838FD8062E8E3ADBE093510461C42C
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="rc::a" value="MXkzanc5cmh2NXhxbw==" ltime="700643776" htime="30897494" /></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\B404KU6F\www.youtube-nocookie[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	106
Entropy (8bit):	4.52645500744566
Encrypted:	false
SSDEEP:	3:D90aK1ryRtFwsR0pqqUlB9oUW9FdAqSeSRgHFKbZKaK1r0aKb:JFK1rUFWcqa/oWe5ww1rFKb
MD5:	03683B1353D932666E02783A211C8F17
SHA1:	3FC546EAE16AA3CC4B2EFD93223EDC5DB1CF6085
SHA-256:	B36125D9B47BF7E38EC54614453EC1C596481E77F939DC84061AB9F9D40E39BE
SHA-512:	63F3884148042449F1437EE910F505F4173EFCFFCE378CBC670D51F801969891DF73E834BD094881FB989F29E3C39BB3A2D9ECABEAA5A2C5826CDA79AA711DCB
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="__sak" value="1" ltime="1488653776" htime="30897494" /></root><root></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\Q2PPL4MK\pf.intuit[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	147
Entropy (8bit):	4.758793599151146
Encrypted:	false
SSDEEP:	3:D90aK1ryRtFwsCVA7HyQAqULZd7dEFcH1W+cAof3OPAqSeSRgHFKbZKaKb:JFK1rUFqQDAqcZRHE+Do/5e5wwb
MD5:	E8B382B0CAD3B2CBEFC852C2A1E3BAC1
SHA1:	BEB22EE4F2038F367F948C40841E9E2EBB21E080
SHA-256:	27F426F79B3AAA29DE35A4067DB30C16EABC378FD1835928D4ED95780924CC98
SHA-512:	77E9C6D43789BBF05D860386CE9327F13A0433145D71AC5186EBC82A96E92E9D345403B7DEFE6CE01FC86FED686C0EB4F187BAEE8B515162B51FE91E9D50490C
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="ed73f20edbf2b73" value="1f237718d81a49839907cd8a926899b3_1781386695089" ltime="691133776" htime="30897494" /></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\Q2PPL4MK\quickbooks.intuit[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	505709
Entropy (8bit):	5.37864333847329
Encrypted:	false
SSDEEP:	768:7GgG4eLeLepe0eKe8ePemezjO7efjO7efjO7eejO7e4gjOHajO7eJgjOHsjO7eJA:f
MD5:	5236933003AC7FABBF72EB06FD1F268A
SHA1:	CC262F3FD83A83B405B34C4477FABC4C46EBBEF0
SHA-256:	DE0F96778BE66F79B93631E0FE64CF57C0A2EFCFFEF7EFE4373E9E4747CE2C9A
SHA-512:	4E7CF9CECB03AA6D11875B8C9A40234AF87E0BD84FE2C4E88E5063175B19948426C9D6F82D956A162BE3437F36078CEB67B5A0174E650D2EC62222FE7739D4BA
Malicious:	false
Reputation:	low
Preview:	<root></root><root></root><root><item name="debug" value="undefined" ltime="1179143776" htime="30897494" /></root><root><item name="debug" value="undefined" ltime="1179143776" htime="30897494" /><item name="ADRUM_CLIENTINFO" value="{"seqId":0,"clientId":"7420b9ca_2b36_2909_82a1_b86e5762884e","agentId":"7420b9ca_2b36_2909_82a1_b86e5762884e"}" ltime="1189143776" htime="30897494" /></root><root><item name="debug" value="undefined" ltime="1179143776" htime="30897494" /><item name="ADRUM_CLIENTINFO" value="{"seqId":0,"clientId":"7420b9ca_2b36_2909_82a1_b86e5762884e","agentId":"7420b9ca_2b36_2909_82a1_b86e5762884e"}" ltime="1189143776" htime="30897494" /><item name="ADRUM_AGENT_INFO" value="{"ver":"4.3.8.0","id":"246c63a1_fda0_c6f9_0229_4cc01ef1227d"}" ltime="1189143776" htime="30897494" /></root><root><item name="debug" value="undefined" ltime="11791437

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\X3RMZDSN\c31.qbo.intuit[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	96
Entropy (8bit):	4.560434283443648
Encrypted:	false
SSDEEP:	3:D90aK1ryRtFws+XJJcqXSTRM6aTd4PAqSeSRgHFKbZKaKb:JFK1rUF6XJqqXST5dce5wwb
MD5:	11882E70E47A84BEC4023163523303AB
SHA1:	689F2014E681B3EB41B1BCAC6BBA81BDC0001F16
SHA-256:	6BF7DCECDE4C2E7091AA403484E30E30125A4257CAAB0A71A32B7497014E8BC0
SHA-512:	F0E328E3C92A906F5E22F125EEE2DA49E07BF730CE1C6AFE73424FE027996D44E6C738C8EF09C02D9DD9205DF07C909042B765360A53CA9D453113EDF2A3934F
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="iux_cell" value="27" ltime="667683776" htime="30897494" /></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\X3RMZDSN\www.intuit[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	75545
Entropy (8bit):	5.29843451180399
Encrypted:	false
SSDEEP:	384:sadKrXXiz7a7mz7ml7mNfLIQmNfLIQmtf5IQmtf5eQm3f5eQm3f5eQm3f5eQm3fM:sadKrXXizGYkbmQGAoMEllgs
MD5:	2238955C4B8586C9F5572C96D6333CB1
SHA1:	7B456C1EC473F9B9A377F72089CCDD97B4DC8DBC
SHA-256:	1160288E98EDA5C6C8B28330A544F3EE62504A8615C6EB708414D2617A2E3B65
SHA-512:	EADC623BE5A41C463C8253AD2120C1F3632A71E7C7AE8A8AC8E9CB6082E5C903DCCED2CC37581023CA5D1141DE09CC5ACE469578D556B98F4F8FFF387DA99C60
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="__storejs__" value=""__storejs__"" ltime="965163776" htime="30897494" /></root><root></root><root><item name="18e231c4-b57e-453a-a62d-c9b1f3b1d008" value="test_value" ltime="966163776" htime="30897494" /></root><root></root><root><item name="debug" value="undefined" ltime="966163776" htime="30897494" /></root><root><item name="debug" value="undefined" ltime="966163776" htime="30897494" /><item name="ADRUM_CLIENTINFO" value="{"seqId":0,"clientId":"ba72bbe2_62b7_7b21_18c0_6ff2820c9a5e","agentId":"ba72bbe2_62b7_7b21_18c0_6ff2820c9a5e"}" ltime="1015643776" htime="30897494" /></root><root><item name="debug" value="undefined" ltime="966163776" htime="30897494" /><item name="ADRUM_CLIENTINFO" value="{"seqId":0,"clientId":"ba72bbe2_62b7_7b21_18c0_6ff2820c9a5e","agentId":"ba72bbe2_62b7_7b21_18c0_6ff2820c9a5e"}" ltime="1015643776" htime="30897494" /><item n

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{63C5AF52-E149-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	39000
Entropy (8bit):	1.926635063696927
Encrypted:	false
SSDEEP:	96:r6Z9Zu26WQntQXHfQW1MQtQ9QBfQxsrQL/fQ/7rQ+g:r6Z9Zu26WStcHfF1MS+EfCsrY/fE7rvg
MD5:	D108D2310AD33367CF7303420FF9107E
SHA1:	1452B4B1E7895873FEE283668588114FDE89E563
SHA-256:	17B1104F0D53CCC27E9E9AA3D33B176A8FA9B4FDEFE53D9807D907673C434FBF
SHA-512:	69329CE1F9037D241FF9DE6C69810B8641446FA6064289198D6F79129C5F7515203F59DA469EAF4A6F41AD6D8E3CA5E755F6F690A753FC8676C7D566E97E31D5
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{63C5AF54-E149-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	308458
Entropy (8bit):	3.1595560407190164
Encrypted:	false
SSDEEP:	768:TUTGKWS9TGKWdR210o0d0LKYlEUbwvaiFu3AQqcho/v:f7r7dR210o0d04vaf2
MD5:	D98E892CC8FFCF3A1BDA95E4D044FB10
SHA1:	F16F49B974086BBF2776F6C8BB788BD67168726A
SHA-256:	05E829BE3C585A09A50FFC709985D5604D1AAE73C9EACAA99614760F6CE930AF
SHA-512:	DA576B848F757DE22BFF801E27D713801DE4043DC01E4AE11D8162FD0373AC8936B4C0DB223B231919ECB01F49AFB955BA819A7F0A25A05F69A584B692258361
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{69CFEDE2-E149-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	19032
Entropy (8bit):	1.5845499668037872
Encrypted:	false
SSDEEP:	48:Iw2GcprHGwpa+G4pQ6GrapbShGQpKbG7HpRNTGIpX2UGApm:rqZRQ+6sBSbAaTrFvg
MD5:	4C65800A2AA8BCB6C38AE851F9F9A73E
SHA1:	59DD2B71100D801BC8B91AF33D6E0D7EB13D3318
SHA-256:	1915B4FB45A9D5B25017B377EC67105ED5548AC9EF2DC7CD389A2B30E1A11482
SHA-512:	28DD8D1F00FD0C4DF2986B8AA68CC6C812236D78E9EE3C38E0ED370D1B93F292D83B7F2B39A5EA2E9171B99F36D327CDB940808A2D5CF287D0F40C0FF7E67961
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	19695
Entropy (8bit):	7.94206581952495
Encrypted:	false
SSDEEP:	384:YnOi/usZk2FOPuMcbATvujkpBZoqXNbhL780eXss+txWgOXNmW4A0P6LTfIn3c:2/uok20PuMIATkkpllV80+sragQM7nix
MD5:	F3F3AE353D6285E5A7C25C82E6F7A3B3
SHA1:	92418498F92BF7AB4533A26EDFF5AFA1A5AEF508
SHA-256:	1ACCF815CBEA1076CADEA6F1265AD0E93180A7A831E02D6A108A382828B6B4EB
SHA-512:	671FC47C906A435F669D0FE3AF94C7E44B19E1CE5B64F6E9D1D4A7B56237B40EC6C6C20DA24BB8D75616CB8DC8669DAA11ECE25F6D1E587C465F2458AF31B7CF
Malicious:	false
Reputation:	low
Preview:	A.h.t.t.p.s.:././.q.u.i.c.k.b.o.o.k.s...i.n.t.u.i.t...c.o.m./.c.a.s./.d.a.m./.I.M.A.G.E./.A.3.4.8.M.D.Y.u.m./.f.a.v.i.c.o.n...p.n.g./....PNG........IHDR.............(-.S...ZPLTE...3..3..3..3..4..4..4..4..4..4..4..4..#......z.4..#...........................w..\|..............tRNS.2.....2.......O......orNT..w....gIDAT..e.G.. ..c.[............~...]..PP.V...?&.aq..f.dX3.....g2%#`.1^7.....E\|P.,.....%k.a.t..".g../...]........IEND.B`.................u@.`....u@.`....R.h.t.t.p.s.:././.q.u.i.c.k.b.o.o.k.s...i.n.t.u.i.t...c.o.m./.c.a.s./.d.a.m./.I.M.A.G.E./.A.7.m.j.J.5.r.p.g./.a.p.p.l.e.-.t.o.u.c.h.-.i.c.o.n.-.1.9.6.x.1.9.6...p.n.g......PNG........IHDR..............x~Y...cPLTE...,..,..,..,..,..,..,..,..,..,..,..,..,..,..,..,..T.Ga.U9...................{.qF.8..n.c....<.S....tRNS..@P...p.. `.0._fm....orNT..w....0IDATx...z.0...0#.%..6i..)O{.`.,[...e>..hX^.b./I..RE.B.<..D.......PjU....9&IV..-..f........f..lY..\|..2....3.XUD.o.j5.....m..S.$...S6e.p..,v.YU..C.!,..B@.5./.w.1

C:\Users\user\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.DTD Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	498
Entropy (8bit):	5.103913616294899
Encrypted:	false
SSDEEP:	12:TMbhJpIO1mcROtW/yF0T8YA+it/0zsFE/TYEGs/4w:qhJ+CTRSnF1wlwFUY6
MD5:	90BE2701C8112BEBC6BD58A7DE19846E
SHA1:	A95BE407036982392E2E684FB9FF6602ECAD6F1E
SHA-256:	644FBCDC20086E16D57F31C5BAD98BE68D02B1C061938D2F5F91CBE88C871FBF
SHA-512:	D618B473B68B48D746C912AC5FC06C73B047BD35A44A6EFC7A859FE1162D68015CF69DA41A5DB504DCBC4928E360C095B32A3B7792FCC6A38072E1EBD12E7CBE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" standalone="yes"?>..<!DOCTYPE document [..<!ELEMENT document (node)>.. <!ATTLIST document WMSNameSpaceVersion CDATA "2.0">....<!ELEMENT node (node)>.. <!ATTLIST node name CDATA #REQUIRED>.. <!ATTLIST node opcode ( create \| remove \| setval \| clearval \| rename \| movebefore ) #REQUIRED>.. <!ATTLIST node secure ( true \| false ) #IMPLIED>.. <!ATTLIST node type ( string \| boolean \| int32 \| binary \| int64 ) #IMPLIED>.. <!ATTLIST node value CDATA #IMPLIED>..]>..

C:\Users\user\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	30570
Entropy (8bit):	4.791796165556784
Encrypted:	false
SSDEEP:	192:BFV0bBPCfUd/FV0bBPCfUd/FV0bBPCfUdY:gYfXYfXYfx
MD5:	84A68822A47B6C799A5C1385F12F8A38
SHA1:	3DB8FA2ABFC30EAF965E7F49418390955D192F1E
SHA-256:	C807CF28091892886A1ABE7374C03B2480A81FDCA428EC2FD11EB1BB9DFD8758
SHA-512:	21095D759380FA2D3D79F98CD793DA82E1DB704D1556D15BA6DA7547B586B17AC441A6AAC89D0F5BD5026658677A5858A108007B10268C37A97EA6BD355C5668
Malicious:	false
Reputation:	low
Preview:	<document WMSNameSpaceVersion="2.0">.... <node name="Control Protocol" opcode="create" >.. <node name="Object Store" opcode="create" >.. <node name="RTSP" opcode="create" >.. <node name="CLSID" opcode="create" type="string" value="{308786f0-8b15-11d2-b25f-006097d2e41e}" />.. <node name="Enabled" opcode="create" type="int32" value="0x1" />.. <node name="Properties" opcode="create" >.. <node name="Protocol" opcode="create" type="string" value="RTSP,RTSPA,RTSPT,RTSPU,RTSPM" />.. </node> Properties -->.... </node> RTSP -->.... <node name="Sessionless Multicast" opcode="create" >.. <node name="CLSID" opcode="create" type="string" value="{f9377800-f38d-11d2-b26c-006097d2e41e}" />.. <node name="Enabled" opcode="create" type="int32" value="0x1" />.. <node name="Properties" opcode="create" >.. <node name="Protocol" opcode="create" type="string" value="MCAST,RTP" />.. </node> Properties --

C:\Users\user\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML.bak Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	20382
Entropy (8bit):	4.792342140217129
Encrypted:	false
SSDEEP:	96:/YkZRAF6zyHUhm77yB1pZYCEnfHrHH7B6xTGH+YCLV3zwULJEYCJWyHBt3zwFRhd:/2FV0bBPCfUd/FV0bBPCfUdY
MD5:	20BB36C2C12D38E01BE65900BA1C2B34
SHA1:	20DDB44D6DAE1A886F41E12A4CEA83DA71E15712
SHA-256:	ED1F88C63000E59165B17DF9B08AAB4859293BDFC9108003B1FB378A7DEC859A
SHA-512:	EA34C046BBC820B5C3B63132A7D437777EB186DEFA663A5350EEECE6FA77A84C64B9934A7762783AA3F36D781E0F21A2E5A7746B1566718BAFB8FBAFF49A54A6
Malicious:	false
Reputation:	low
Preview:	.<document WMSNameSpaceVersion="2.0">.... <node name="Control Protocol" opcode="create" >.. <node name="Object Store" opcode="create" >.. <node name="RTSP" opcode="create" >.. <node name="CLSID" opcode="create" type="string" value="{308786f0-8b15-11d2-b25f-006097d2e41e}" />.. <node name="Enabled" opcode="create" type="int32" value="0x1" />.. <node name="Properties" opcode="create" >.. <node name="Protocol" opcode="create" type="string" value="RTSP,RTSPA,RTSPT,RTSPU,RTSPM" />.. </node> Properties -->.... </node> RTSP -->.... <node name="Sessionless Multicast" opcode="create" >.. <node name="CLSID" opcode="create" type="string" value="{f9377800-f38d-11d2-b26c-006097d2e41e}" />.. <node name="Enabled" opcode="create" type="int32" value="0x1" />.. <node name="Properties" opcode="create" >.. <node name="Protocol" opcode="create" type="string" value="MCAST,RTP" />.. </node> Properties

C:\Users\user\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNSD.XML Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	53
Entropy (8bit):	4.66869469064966
Encrypted:	false
SSDEEP:	3:sLRaE92JWyhHX9ovy4dduRun:sLzTyRXKvndI0
MD5:	A9B5DA9AEC61657B32393D96217165F0
SHA1:	80B5C577155ACD269B450D70F6B2CBED693EDF49
SHA-256:	9F4611369CF65B33D886489B2486FCA7B1E83E0DC998D35B15B3AA4C8478A28D
SHA-512:	0B73B232C03FFD5CE526A1EDE481A57C753D15D9EE39D4247ABFA52819B59FA676C63E30825DAF233E3139038C353DF84D652C4CE2CB71A706DDDBDFE0C70335
Malicious:	false
Reputation:	low
Preview:	<document WMSNameSpaceVersion="2.0">....</document>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\152.0451d3197e883d8878c0[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1544
Entropy (8bit):	5.226504088378037
Encrypted:	false
SSDEEP:	48:lDQudjiZrCwvdWGNLFsfTdh9XRyHV1Ties:TY1LsT5RUfw
MD5:	5C6794B16CD2865071FF8DA59DAADF01
SHA1:	0C62BF586E6E8F9BE4BC851D57339DB9DAA71BCB
SHA-256:	719A18AC49857B7EB6E7F665E2023E166500F6C37A4C2331D40EB41D3F6A7778
SHA-512:	63152A6B4D5E157D992AD7BB9FC557AB38535181D009F07404191E54D80C4BE29B14C88231823AE10194F2CEAC8182FCBBA607A00A9EC3E8FBC45E10E74EE8CE
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/152.0451d3197e883d8878c0.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[152],{BQtQ:function(e,t,s){"use strict";s.r(t);var a=s("q1tI"),i=s.n(a),o=function(e,t){return function(e){!function(){var t={}.hasOwnProperty;function s(){for(var e=[],a=0;a<arguments.length;a++){var i=arguments[a];if(i){var o=typeof i;if("string"===o\|\|"number"===o)e.push(this&&this[i]\|\|i);else if(Array.isArray(i))e.push(s.apply(this,i));else if("object"===o)for(var r in i)t.call(i,r)&&i[r]&&e.push(this&&this[r]\|\|r)}}return e.join(" ")}e.exports?(s.default=s,e.exports=s):window.classNames=s}()}(t={exports:{}}),t.exports}(),r={responsivetext:"Responsivetext_responsivetext__7a1fdeef","responsive-padding":"Responsivetext_responsivePadding__7a1fdeef","grey-color":"Responsivetext_greyColor__7a1fdeef","black-color":"Responsivetext_blackColor__7a1fdeef","white-color":"Responsivetext_whiteColor__7a1fdeef","rw-dark-blue-color":"Responsivetext_rwDarkBlueColor__7a1fdeef","fixed-max-width":"Responsivetext_fixedMaxWidth__7a1fdeef"};const

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\39b031d352a2e1586cf50ac7f2bbc18b[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	12378
Entropy (8bit):	5.041888208682257
Encrypted:	false
SSDEEP:	96:+RoMM2anrsHcxjBBN49qDLj5QeUFUDzi3pnDseedgejR7cestQoumbNvR4VBdwH6:PAHZ9q/j2eUqvi+/QNvOVBMwsV8
MD5:	39B031D352A2E1586CF50AC7F2BBC18B
SHA1:	5F714582443C158EAC42F4A2368E29488A01E365
SHA-256:	9EE03AE2943928AEA61E62DA6BD2338CA4B244C756D78B8888C1693731401A21
SHA-512:	44C3255DAC07BA0D8A5CA849649515A095AA40BAE13BF1710E009F8E9FFE96BF4EE573B073DC4340DE738CA110653FB48A83C5BE1008C61F3EB41A76FD741789
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/39b031d352a2e1586cf50ac7f2bbc18b.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="52" y1="49" x2="52" y2="71" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#202124"/>. <stop offset="1" stop-color="#202124" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="52" y1="85" x2="52" y2="157" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#188038"/>. <stop offset="1" stop-color="#188038" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-3" x1="24" y1="154" x2="44" y2="154" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/>. <stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\48l-xdS4pXg[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	51244
Entropy (8bit):	5.807201169086806
Encrypted:	false
SSDEEP:	768:AeKF9rh8RNcSPaYFODzSF+JpWuFvDAVuEKDBPT2/oeeNiZ+4F4:/NazSUWuFQKlPCxeoE
MD5:	0C88A0652238FD6182705FEF4221FA07
SHA1:	691EA2C7EC7A42BE51ED8E3788FE1242ABAB82F9
SHA-256:	4B35B8BAD9A648D8E577C89AA7B095835D3C8043BFD658C17F9A961868C5689B
SHA-512:	4F3AF87CB9F83655F7775EAF70DE4B897E4F8540D7C2157241BBF39F1B0EF8212D9E193686C242D84F1CE057104C2A753CEAEAEC5BE64B9E6EE7485C75206AFE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="robots" content="noindex"><style name="www-roboto" nonce="BgfesWA+m/VdWIDF7fu2YA">@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff)format('woff');}</style><script name="www-roboto" nonce="0mdKShzC+X8kK91Gg9mHng">if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "E"); document.fonts.load("500 10pt Roboto", "E");}</script><link rel="stylesheet" href="/s/player/51ff6aac/www-player.css" name="www-player" nonce="BgfesWA+m/VdWIDF7fu2YA"><style nonce="BgfesWA+m/VdWIDF7fu2YA">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100%;}h1 {text-align: center; c

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\4UabrENHsxJlGDuGo1OIlLV154tzCwA[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 26216, version 1.1
Category:	downloaded
Size (bytes):	26216
Entropy (8bit):	7.981777815901356
Encrypted:	false
SSDEEP:	384:Sg4TzCs2RY3zVuzsjaV8NN/gL7JWwOCYagoTqUE+KTiXxzOH50RrzhRgAkua:v4SNRYZuz6A8N1gL7JRgoT2+KIxOaJ0
MD5:	D6CC7164BC67A74418DDC5334DB07720
SHA1:	7B92694ACF8EE4F16A745892F5475CC3D6AC9E97
SHA-256:	37F9CFD34965C916FDB5F549F2EE8FC56C20A0AAD2C281B799595396105C4316
SHA-512:	B95636C8A21EE26370D70E81B8D7478BB3F15A905480CDAA2EBBC85C2376E402A3983BD843AE764BFACA64680B04816BEEB2C2351A4037EFB0E42A0FDA9A5A60
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/googlesans/v27/4UabrENHsxJlGDuGo1OIlLV154tzCwA.woff
Preview:	wOFF......fh................................GDEF.......q........GPOS.......#..+..G.PGSUB................OS/2.......U...`j(..cmap...........~n..cvt ............(...fpgm...x.......uo..gasp...@............glyf...L..=...k..N.dhead..Z`...6...6.x'.hhea..Z.... ...$....hmtx..Z...........&.loca..]H...~....:...maxp.._.... ... ....name.._........Z.L3.post..`.........O...prep..dX........t...x.E......E.}&$.......A.. ....,....`..}....q....+o...9 ....B.J..WS..w2.{...o.D~!X.D:..Muq...[1 ..[.I...]..#...2...x..Z..$..}....e...333333333.aA..2.8....N.l..h...W....s;.u@.........j`.......t.mwE.!g.\|,..q.a.`.c.:.x..........J;V:....N>.].O......\|..@..r..`..(`s.J.sq3..#(.x......w.n....Y......j.&c.f....,.Y......?....x?...~...........s..)#s.bn..v.....J.j.:..`.,.:.V8....V.....K..=aE..w3e...z..A\|..2.K.BX.+.....#z.Q>.R.(...$..x..Z.F......<^._.7..7......p!....dT.......I.BxxSk...\|H$.6pM..<8.q'A....!..A..$.Ex.+.^\....q..0..h"..C........G...a..#*...#\|.\|W....k..K....Y....._v..N..5.Ju..f.XR..)....T..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\4ef154f8.4f79936fbf3495d8652e[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	170702
Entropy (8bit):	5.494979048640243
Encrypted:	false
SSDEEP:	3072:QUCEodJ853KHBnljaTvV5JfMh4I9QilqU7DkIZJgqXvyR8q7v5ii/XvpjOqO7BYG:jpo7853ynj+bRM/QilqU7DkIZJgqXvyW
MD5:	14AD97F5CE0CB6A1CF767168D99C2E7D
SHA1:	7DF82129ED743B226E1C8CCBEBA0CE7F2ACDB0AD
SHA-256:	5BE3E1B851A39BAD68E23303B01192477E2D064F1CF65594623FB383BCEACA6A
SHA-512:	9964788E6D499D591E26DD5A7E37F3CBE8EEA0F113CE8E717330B3E7C997C8EB99AA5CCDBB1EB48ABB4683FF7EA946B9D0935B92CE08972A933EED8BC73AF53C
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/4ef154f8.4f79936fbf3495d8652e.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[8],{uxga:function(e,t,r){"use strict";r.r(t),r.d(t,"CONSTANTS",(function(){return ua}));var a=r("q1tI"),n=r.n(a),i=r("i8i4"),o=r.n(i);function c(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function l(){return(l=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var a in r)Object.prototype.hasOwnProperty.call(r,a)&&(e[a]=r[a])}return e}).apply(this,arguments)}function d(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function s(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?d(Object(r),!0).forEach((function(t){c(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):d(Object(r)).

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\50.de11cfb18614d7d89a08[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10729
Entropy (8bit):	5.374218623978895
Encrypted:	false
SSDEEP:	192:SAmr571vzGwIfJFt/va+RkB1TvzuuRvGR4A2j0LweRuUbHHp+vz3dv/YIz1CckT7:/mXL0BFt/3RkBJLkRT2j0duUjHp+Ltvo
MD5:	FD5BA092E9AB81F43519CA6132BBE97F
SHA1:	A46F95CC411A5398E0DAAA066E6DF874CA6474C0
SHA-256:	7FBABC207DFC65B36B1EFF9843CBE20E1B53649CE4A4401E2EA5A1573820EC7E
SHA-512:	7C7CC712F51669D10D961376E4A3FEB955A92644EC3393C675F9F652DD5F04C658DB63B35F58A0C52008884AE1386321A6DC71C926ED13FCF9992F6C8EBA4BEF
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/50.de11cfb18614d7d89a08.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[50],{MtW2:function(e,t,a){"use strict";a.r(t),a.d(t,"CONSTANTS",(function(){return C}));var n=a("q1tI"),r=a.n(n);function i(){return(i=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var a=arguments[t];for(var n in a)Object.prototype.hasOwnProperty.call(a,n)&&(e[n]=a[n])}return e}).apply(this,arguments)}var d,o,l=(d=o={exports:{}},void function(){var e={}.hasOwnProperty;function t(){for(var a=[],n=0;n<arguments.length;n++){var r=arguments[n];if(r){var i=typeof r;if("string"===i\|\|"number"===i)a.push(this&&this[r]\|\|r);else if(Array.isArray(r))a.push(t.apply(this,r));else if("object"===i)for(var d in r)e.call(r,d)&&r[d]&&a.push(this&&this[d]\|\|d)}}return a.join(" ")}d.exports?(t.default=t,d.exports=t):window.classNames=t}(),o.exports),_={"rw-banner-container":"RwBanner_rwBannerContainer__69e82575","low-margin":"RwBanner_lowMargin__69e82575",text:"RwBanner_text__69e82575","fixed-width":"RwBanner_fixedWidth__69e82575

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\83.0373ee54e14c147c0119[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	43777
Entropy (8bit):	5.40590223078242
Encrypted:	false
SSDEEP:	768:HCsGhqugCPOLgd1Q5/39PYKK3XuFoOmlACbCC/tPrIPmmZFUXOiVR+pYhjrT2j0w:fGsfgQ5fyZlvHvyI643c
MD5:	D478AE15EDE8BE2FF137246C7D080A95
SHA1:	7571DC6335BEE2F6A04C781FA58C76A034DEAC65
SHA-256:	5C56E412E45F0034ED503A0C75DC9042A246A7F085734F43A680D06033BD3FF0
SHA-512:	FFCCDA97570C35C9BF8F57A007F985C682DF09D4B715311E691EC2D03C62BDFFA4FF8C2B843C8A5029F846AB55FD21D513032D28E3C9455FB99507C90A0E4C8F
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/83.0373ee54e14c147c0119.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[83],{xsKm:function(e,t,a){"use strict";a.r(t),a.d(t,"CONSTANTS",(function(){return he}));var n=a("q1tI"),r=a.n(n),i=a("i8i4"),o=a.n(i);function l(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function d(){return(d=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var a=arguments[t];for(var n in a)Object.prototype.hasOwnProperty.call(a,n)&&(e[n]=a[n])}return e}).apply(this,arguments)}function c(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function s(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?c(Object(a),!0).forEach((function(t){l(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):c(Object(a))

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\83a2f6260d050803ece787c092b014eadf1238e6.31709e6789014fb5c002[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	6613
Entropy (8bit):	5.013876568747202
Encrypted:	false
SSDEEP:	192:3EuTpoD519P74RdpQUFqlBqN5t6GFgq2r4l5:U919PFIBvt6Th8l5
MD5:	0414E6445D675831941398406A8970E7
SHA1:	3A1D75AEB463021C6C3EA6D85847C65C93F24A0D
SHA-256:	FB8B16BF85C357A74F491F2C9DC7D05B3E7FD97CB29169478E9C3C702127630A
SHA-512:	A423F2FCDCAE4CAE248EA099F23157DA913F9FAD7E12260BB471DDECF0C0FA45B804F1FB078A2040099F64A00604A88A869689E8DB5DB079D1C9E1C29D66A9F8
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/83a2f6260d050803ece787c092b014eadf1238e6.31709e6789014fb5c002.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[3],{ls82:function(t,r,e){var n=function(t){"use strict";var r=Object.prototype,e=r.hasOwnProperty,n="function"===typeof Symbol?Symbol:{},o=n.iterator\|\|"@@iterator",i=n.asyncIterator\|\|"@@asyncIterator",a=n.toStringTag\|\|"@@toStringTag";function c(t,r,e){return Object.defineProperty(t,r,{value:e,enumerable:!0,configurable:!0,writable:!0}),t[r]}try{c({},"")}catch(j){c=function(t,r,e){return t[r]=e}}function u(t,r,e,n){var o=r&&r.prototype instanceof s?r:s,i=Object.create(o.prototype),a=new b(n\|\|[]);return i._invoke=function(t,r,e){var n="suspendedStart";return function(o,i){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===o)throw i;return O()}for(e.method=o,e.arg=i;;){var a=e.delegate;if(a){var c=L(a,e);if(c){if(c===h)continue;return c}}if("next"===e.method)e.sent=e._sent=e.arg;else if("throw"===e.method){if("suspendedStart"===n)throw n="completed",e.arg;e.dispatchException(e.arg

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\850485508311844[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	266510
Entropy (8bit):	5.473065083050962
Encrypted:	false
SSDEEP:	6144:Rk1HgCSntDV/HaK8V/Ha8NEPjQHguH3HpQrwz8GWo:kNE7a
MD5:	D34216E36D7D8CF48176D30AFE735BCF
SHA1:	062572967E228F9E42A52BC43930868AD02D208B
SHA-256:	0E66607BE1E6AF71349D48829C8BB30EAAF5F185496B3A60757AA0C00A3DA92A
SHA-512:	1EF5D10B00DB95A9DAF061D9AC0DBC90EC868A9FDF30C67C611F5B7ED0E46F00F29687AF210B768FB530291EC8C7434EC70C4B1EE170DAD70549655A8EB86D1B
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/signals/config/850485508311844?v=2.9.43&r=stable
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\9a86761538f08b40db66[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	5924
Entropy (8bit):	5.350468753835163
Encrypted:	false
SSDEEP:	96:tOcCaMX4aVBsXwSFwPDPS9LCjh5T5xX3ee0W0LnBhJ1UE:TCaovraiPS9IhFX3ee0W0131UE
MD5:	F17C0B351E15F546F7550527A36DDC3A
SHA1:	71B828E4EF1D11F319F3F688EFB2C40DD2411C0F
SHA-256:	0AB665D9FF6F3FCCDB4BA86E7E09327844789F69D6BFEBD72353ED9231EA83C5
SHA-512:	9A069900B066BDCEEDA49C028CFFB3EDCFE9070B7B9DCB911F3CF12CA9CE33D49C6639C07398A0B2D9682CED8BB1FD659FEC74E63FC4484FEE71BB1AD6CC1016
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/css/9a86761538f08b40db66.css
Preview:	.button_button__1jXOV{border:0;-webkit-border-radius:4px;border-radius:4px;color:#fff;font-weight:600;outline:0;position:relative;display:-moz-inline-box;display:inline-flex;-moz-box-align:center;align-items:center;-moz-box-pack:center;justify-content:center;text-align:left;cursor:pointer}.button_small__248_x{height:24px;padding:0 16px;font-size:12px}.button_medium__G6u-J{height:36px;padding:0 24px;font-size:16px}.button_large__1-fM_{height:48px;padding:0 24px;font-size:16px}@media(max-width:767px){.button_large__1-fM_{min-width:200px}}.button_primary__3qVRX{background:#0d333f}.button_secondary__2xm4w{background:#fff}.button_primary__3qVRX.button_invert__1tdPz,.button_secondary__2xm4w.button_invert__1tdPz{background:#fff;color:#bdc8bb}.button_tertiary__3qZYM{background:#fff;color:#0d333f;border:2px solid #0d333f}.button_tertiary__3qZYM.button_invert__1tdPz{background:transparent;border-color:#fff;color:#fff}.button_text__1a1pV{color:#007dd8;background:transparent;padding:0;font-weight:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\KFOkCnqEu92Fr1MmgVxIIzQ[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 20424, version 1.1
Category:	downloaded
Size (bytes):	20424
Entropy (8bit):	7.973322748597765
Encrypted:	false
SSDEEP:	384:UaoO8n3eceZ+fUC1WCz8P+IgjhYSHA/fFb4+hQC:Bl8nOcBfUqT/jOgAiC
MD5:	04B7FD97F88B82DCCCE5EC446CCC29E6
SHA1:	9A3C1CE2EAB659A91AF7016570287428CC82C458
SHA-256:	A38AD0B609E4D2039D18B0F9DC89E9060F2E2E05F2F42764A6A93354346A6C37
SHA-512:	4B71614F447F4E250AB8060026BA002F3F0DAA9286F207AA4B0652201D9053BD72865C09D1AB90155CF932E17D5897D7A1F659C98F1B1AACFDF6397D6DB47DA8
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/roboto/v27/KFOkCnqEu92Fr1MmgVxIIzQ.woff
Preview:	wOFF......O.................................GDEF.......G...d....GPOS...............!GSUB................OS/2...L...P...`t..{cmap...............#cvt .......H...H.2..fpgm.......3...._...gasp...0............glyf...<..<...q....Lhdmx..H....q...."&.(head..I@...6...6.G..hhea..Ix... ...$...whmtx..I....y......lCloca..L.........X.;.maxp..N.... ... .4..name..N4.......x..9.post..O........ .m.dprep..O.........+6.x...1..P......PB..U.=l.@..C)..N4C.\.51.3.......q.q.qu.O...OjC.cA......R.x...l\..F..3...N..q)..a\|.....^..33..c......p"y.iT....<Gg...!.3...T1...{.g0.u.y........m.\|.k..NF......mox.;...7&.Y..C.R_[.T.c..-.=...9:...aj.G...............O.Q".6...>...(?...~...._.2:..K4....S%...jbr).........e.U..-..X.3.ILQ....z..!.f:...<.W.#...e.c=...&6...lc;;..3<.s<....H.i2..N..t..)Ns...#`..".).[...._.T..T.....+l..=..O.....Z..F...r..eM.f.Y.....-...r.\.s6.r..,...:.<$..#.l..F.$.2#.e..].[.....yR...e.\|{..O..`)..U.0.e.50.Z.b../cM..i.&O._..+.Y.W...;z....j.p._.o..[CL.)n'.UGx..>).X..MJ..Fr..v

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 20012, version 1.1
Category:	downloaded
Size (bytes):	20012
Entropy (8bit):	7.966842359681559
Encrypted:	false
SSDEEP:	384:Yc6bX9TagDCXKqs4+W5XVgaflKHjsGdZtlh3K/qzWz/scZpuB:YcCVaeCaF4ea9KHYQZtlh3Kgy4B
MD5:	DE8B7431B74642E830AF4D4F4B513EC9
SHA1:	F549F1FE8A0B86EF3FBDCB8D508440AFF84C385C
SHA-256:	3BFE46BB1CA35B205306C5EC664E99E4A816F48A417B6B42E77A1F43F0BC4E7A
SHA-512:	57D3D4DE3816307ED954B796C13BFA34AF22A46A2FEA310DF90E966301350AE8ADAC62BCD2ABF7D7768E6BDCBB3DFC5069378A728436173D07ABFA483C1025AC
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc-.woff
Preview:	wOFF......N,................................GDEF.......G...d....GPOS................GSUB............7b..OS/2.......R...`t.#.cmap...4.......L....cvt .......\...\1..Kfpgm...@...2......$.gasp...t............glyf......:...j.'..hdmx..G,...f........head..G....6...6...rhhea..G........$....hmtx..G....a......MOloca..JP........\v@zmaxp..L,... ... ....name..LL..........:.post..M(....... .m.dprep..M<.......S...)x...1..P......PB..U.=l.@..B)..w.......Y.e.u.m.C.s...x.h.~R....R.....2.x...pfK.G...1.c>..`9..m<+;..m.x...bg.M.T...O............l...XU.../{.[_..W....c.._..72.. ." z.+..F.......&.&...`e..T].....K=..K2S....q..d...xf.$~i..$?.d..dU.....@R-/LMO-J6...[]..Z..O.C_."If..d....fS....$d.G>eL`....Tf1.......9.c>..`1.TR..x./d-........q.........7....{...v.....!.....1.QG=.4.D3-..F;=..1'.'q.rw...9..e!.....Q....f......qV.n.h.V.Z]..B..C.[B...V.......v...o.w.{...w..zRO.i=..._.....-.m....].=...[...(1.(.#.....O0/.0?..04rL.G.9.....i6..l..\|.(o.....\|$,..{\|&\|....YJ...x.e8B.#..t;R8.{+....\=.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\KFOlCnqEu92Fr1MmEU9fBBc9[1].ttf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Me
Category:	downloaded
Size (bytes):	35588
Entropy (8bit):	6.410135551455154
Encrypted:	false
SSDEEP:	768:6yVJgIpAqZsXgDNHOBBPXNOKdhT1N+06XAxGrzmoqpxk0SnuUR:enq805OBBdhT1NP6XAxGryoqp2
MD5:	4D88404F733741EAACFDA2E318840A98
SHA1:	49E0F3D32666AC36205F84AC7457030CA0A9D95F
SHA-256:	B464107219AF95400AF44C949574D9617DE760E100712D4DEC8F51A76C50DDA1
SHA-512:	2E5D3280D5F7E70CA3EA29E7C01F47FEB57FE93FC55FD0EA63641E99E5D699BB4B1F1F686DA25C91BA4F64833F9946070F7546558CBD68249B0D853949FF85C5
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc9.ttf
Preview:	........... GDEF......{....dGPOS......\|<....GSUB7b.....8....OS/2t.#...r....`cmap......st...Lcvt 1..K..y....\fpgm..$...v.....gasp......{.....glyf.'.....,..j.hdmx......r\|....head...r..n....6hhea......q....$hmtx..MO..n@....loca\v@z..l(....maxp......l.... name..:...z,....post.m.d..{.... prep...)..x\|...S...d...(.............o......9........................EX../... >Y..EX../....>Y......9......9......9......9........9......9......01!!.!.......!.5.!.(.<..6......................}.w...x.^.^..^...............<......9.........EX../... >Y..EX../....>Y.....+X!...Y..../01.#.!.462...."&.~......J.JH.H......9KK97JJ....e...@.......%...EX../...">Y..../..../......./01..#.3..#.3..#...-#...w.}....}.....`...............EX../... >Y..EX../... >Y..EX../....>Y..EX../....>Y......9../.....+X!...Y............../.....+X!...Y...............................01.#.#.#5!.#5!.3.3.3.3.#.3.#.#.3.#...L.L...:...N.N.N.N..:..L.v.:....f....9....`...`....f.8.9...d.-.&...,...*-...9...EX../... >Y..EX../... >Y..EX.#/.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\KFOlCnqEu92Fr1MmSU5fBBc-[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 20404, version 1.1
Category:	downloaded
Size (bytes):	20404
Entropy (8bit):	7.970248785137973
Encrypted:	false
SSDEEP:	384:8uFoOxqigBacqKz8RGLv6K5a+jZ/rFSyeM5B8r/WjRy0BsM16t/PJ:PFlIvUKz8R+t5N53eGar/gY0Bv6tp
MD5:	BF0F407102FAF3A0B521D3B545F547A5
SHA1:	CA357CD0DE5DD0242E8EFACFB8D24AB60FDC86AB
SHA-256:	855A06974032BB69157D469ABA6F63440E8BE47C421F45C3F396F4E0B87B6DE8
SHA-512:	85359028F7FE49B1DF90B72E48DC7DE4B21F1B65E8BF109595705A3F4EAF9FA79854B5AEF060FE266291C5ECE9D04FCEAD1DE09BAA2C5E20601E1579212520C8
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmSU5fBBc-.woff
Preview:	wOFF......O........x........................GDEF.......G...d....GPOS...............!GSUB................OS/2...L...P...`t6..cmap...............#cvt .......X...X/...fpgm.......4......".gasp...@............glyf...L..<'..m..]5Yhdmx..Ht...m....),..head..H....6...6.Y.ihhea..I.... ...$....hmtx..I<.........Dd.loca..K............maxp..M.... ... .4.\name..M........\|..9.post..N........ .m.dprep..N........:z/.Wx...1..P......PB..U.=l.@..C)..N4C.\.51.3.......q.q.qu.O...OjC.cA......R.x...l\..F..3...N..q)..a\|.....^..33..c......p"y.iT....<Gg...!.3...T1...{.g0.u.y........m.\|.k..NF......mox.;...7&.Y..C.R_[.T.c..-.=...9:...aj.G...............O.Q".6...>...(?...~...._.2:..K4....S%...jbr).........e.U..-..X.3.ILQ....z..!.f:...<.W.#...e.c=...&6...lc;;..3<.s<....H.i2..N..t..)Ns...#`..".).[...._.T..T.....+l..=..O.....Z..F...r..eM.f.Y.....-...r.\.s6.r..,...:.<$..#.l..F.$.2#.e..].[.....yR...e.\|{..O..`)..U.0.e.50.Z.b../cM..i.&O._..+.Y.W...;z....j.p._.o..[CL.)n'.UGx..>).X..MJ..Fr..v

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\KFOlCnqEu92Fr1MmSU5fBBc-[2].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 19916, version 1.1
Category:	downloaded
Size (bytes):	19916
Entropy (8bit):	7.96782347282656
Encrypted:	false
SSDEEP:	384:JiNCb8EbT1rG/3rjJmQ8uLc5ZiRE5HWSiPTI45tKVr6+F7gLLdz:k4zbM3rjEQ8uQPiRERWSGIWtKVrWJ
MD5:	A1471D1D6431C893582A5F6A250DB3F9
SHA1:	FF5673D89E6C2893D24C87BC9786C632290E150E
SHA-256:	3AB30E780C8B0BCC4998B838A5B30C3BFE28EDEAD312906DC3C12271FAE0699A
SHA-512:	37B9B97549FE24A9390BA540BE065D7E5985E0FBFBE1636E894B224880E64203CB0DDE1213AC72D44EBC65CDC4F78B80BD7B952FF9951A349F7704631B903C63
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmSU5fBBc-.woff
Preview:	wOFF......M.................................GDEF.......G...d....GPOS...............hGSUB............7b..OS/2.......R...`t.#.cmap...........L....cvt .......X...X/...fpgm.......4......".gasp...@............glyf...L..:...j...w.hdmx..F....d........head..GD...6...6.Y.ihhea..G\|.......$...vhmtx..G....k.....\].loca..J.........g.L.maxp..K.... ... ...\name..L........\|..9.post..L........ .m.dprep..L........:z/.Wx...1..P......PB..U.=l.@..B)..w.......Y.e.u.m.C.s...x.h.~R....R.....2.x.....[....#N..m.m.m.mfm....SP..NuM..9]..=.U..!...[........w...\|......^p....H......;...)..........;..EoDo....E.E.D...`.0.GG.aA.H.V.Mx\xA....../..d3.Eb_.J...R.^v........\^ob.}.z..k.x).v$f$..O)+.2..*....y}6`C6b.6cs...l...........!.........<..\|.\|..\|..\|..\|.\|....o....I%.4.L.SI.&C.6..!`...{...c..\.J.(.2.C....V.A..?.M<nG......v..m.;..R.C..aj.H...=..{.>.:.....}i_Y......:....o.&k..KY.2..6k....i]..{,.p}../.....VO3.o].fJ....R-TZ..;...RN..&V...C...3.?.......&..z.s&.D....r,.I...t.R..a$k..Mm..Y.U...+b.%kQ..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\KFOlCnqEu92Fr1MmWUlfBBc-[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 19888, version 1.1
Category:	downloaded
Size (bytes):	19888
Entropy (8bit):	7.96899630573477
Encrypted:	false
SSDEEP:	384:0c6bX9TSzYzCrQH+qXM6C0ouF0xcYye+5x/U3S0X5v+obEgm:0cCV8GuPVyzx/MS0X5v+oI/
MD5:	CF6613D1ADF490972C557A8E318E0868
SHA1:	B2198C3FC1C72646D372F63E135E70BA2C9FED8E
SHA-256:	468E579FE1210FA55525B1C470ED2D1958404512A2DD4FB972CAC5CE0FF00B1F
SHA-512:	1866D890987B1E56E1337EC1E975906EE8202FCC517620C30E9D3BE0A9E8EAF3105147B178DEB81FA0604745DFE3FB79B3B20D5F2FF2912B66856C38A28C07EE
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc-.woff
Preview:	wOFF......M.................................GDEF.......G...d....GPOS................GSUB............7b..OS/2.......P...`u.#.cmap...0.......L....cvt .......H...H+~..fpgm...(...3...._...gasp...\............glyf...h..:q..i..+ Ohdmx..F....f........head..GD...6...6...\hhea..G\|.......$.&..hmtx..G....d.....E#loca..J.........\s@.maxp..K.... ... ....name..K........~..9.post..L........ .m.dprep..L........)*v60x...1..P......PB..U.=l.@..B)..w.......Y.e.u.m.C.s...x.h.~R....R.....2.x...pfK.G...1.c>..`9..m<+;..m.x...bg.M.T...O............l...XU.../{.[_..W....c.._..72.. ." z.+..F.......&.&...`e..T].....K=..K2S....q..d...xf.$~i..$?.d..dU.....@R-/LMO-J6...[]..Z..O.C_."If..d....fS....$d.G>eL`....Tf1.......9.c>..`1.TR..x./d-........q.........7....{...v.....!.....1.QG=.4.D3-..F;=..1'.'q.rw...9..e!.....Q....f......qV.n.h.V.Z]..B..C.[B...V.......v...o.w.{...w..zRO.i=..._.....-.m....].=...[...(1.(.#.....O0/.0?..04rL.G.9.....i6..l..\|.(o.....\|$,..{\|&\|....YJ...x.e8B.#..t;R8.{+....\=.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\KFOmCnqEu92Fr1Mu4mxP[1].ttf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-Regularht
Category:	downloaded
Size (bytes):	35408
Entropy (8bit):	6.412277939913633
Encrypted:	false
SSDEEP:	768:PX4i+tezjtQYgu30G0xL9nQbuEL7LQo9SBxQbptqKmomjJlvh:PJ2z3G0xpUusLEBKptqNomjV
MD5:	372D0CC3288FE8E97DF49742BAEFCE90
SHA1:	754D9EAA4A009C42E8D6D40C632A1DAD6D44EC21
SHA-256:	466989FD178CA6ED13641893B7003E5D6EC36E42C2A816DEE71F87B775EA097F
SHA-512:	8447BC59795B16877974CD77C52729F6FF08A1E741F68FF445C087ECC09C8C4822B83E8907D156A00BE81CB2C0259081926E758C12B3AEA023AC574E4A6C9885
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxP.ttf
Preview:	........... GDEF......{`...dGPOS...h..{.....GSUB7b..........OS/2tq#...q....`cmap......s....Lcvt +.....yl...Tfpgmw.`...vd....gasp......{T....glyf.......,..j.hdmx......r ....head.j.z..m....6hhea......q....$hmtx..Vl..m.....loca?.#...k.....maxp......k.... name.U9...y....tpost.m.d..{4... prep.f....x ...I...d...(.............q......9........................EX../....>Y..EX../....>Y......9......9......9......9..........9......9.......01!!.!.......!.5.!.(.<..6......................}.w...x.^.^..^.......{.......0...EX../....>Y..EX../....>Y.....+X!...Y......901.#.3.462..."&.[....7l88l7......-==Z;;........#.........../......9../........01..#.3..#.3...o.....o...x...........w...............EX../....>Y..EX../....>Y..EX../....>Y..EX../....>Y......9\|../......+X!...Y............../.....+X!...Y...............................01.!.#.#5!.!5!.3.!.3.3.#.3.#.#.!.!....P.P...E....R.R..R.R..E..P....E.....f....b....`...`.....f.#.b....n.0.....+.i...EX../....>Y..EX."/..".>Y.."...9..................+X!.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\MKGQPL02.js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	417836
Entropy (8bit):	5.6044202096423295
Encrypted:	false
SSDEEP:	6144:Huvn3WY8EPPm4VzlSfdtbpTW8uDlH/2F8s+482g:Qn3WY8EGszkfdttTuoI
MD5:	30BA378EC07843D758A595282762C1CC
SHA1:	9915DD5A4ABFD1BB1E84024293B276252CBAC293
SHA-256:	63A42533697D4B7C489CAF6D370555F337CE97DF54D5BA38BD5BA912C80CC480
SHA-512:	2052838C87999421FBE91EF51F7516EB54E4B74DD973BF994E43A05AE95718F009259B64C4AFA5D53FCFDFB32CA2CEBB9DE6F0AC40F65A1DF87A058940964A2E
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=\"snapping\"],.nhh4Ic[data-state=\"cancelled\"]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;-ms-transform:scale(0.7);transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,0.2);transition:opacity 400ms}.nhh4Ic[data-state=\"resting\"] .MGUFnf,.nhh4Ic[data-state=\"cooldown\"] .MGUFnf{-ms-transform:scale(0);transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;-ms-transform:translateZ(1px);transform:translateZ(1px)}.nhh4Ic[data-past-threshold=\"false\"] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWiz

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\YlmVKT3Zvhw[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	51346
Entropy (8bit):	5.807175432633279
Encrypted:	false
SSDEEP:	768:ZCKnJylay0wzGl4DbxSgWJIuXlD0DoaqiXR+OSeaEJEZ0cvxZ:IPLxSY+DqoadXR0eXY04
MD5:	299C5AE47BF6092217964305A756B44C
SHA1:	19DBF10F8968A568E45F15560E73591E9F865CC0
SHA-256:	1D98AE417653CAAA5F3A5997595FF22E08A0531B2BF739BA2AB88A9C5C344804
SHA-512:	B64D85D4980363F32AA2A5523AA25989F148642FE37AC554A9CC61FFF9067501E299914778ED579D0685B89778B67E241657F4007336EB570CD21338046F866B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="robots" content="noindex"><style name="www-roboto" nonce="V1z/0TNw8VGqn39+Jm/dDw">@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff)format('woff');}</style><script name="www-roboto" nonce="tjgAL9pMLEBUutDhmS/eLQ">if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "E"); document.fonts.load("500 10pt Roboto", "E");}</script><link rel="stylesheet" href="/s/player/51ff6aac/www-player.css" name="www-player" nonce="V1z/0TNw8VGqn39+Jm/dDw"><style nonce="V1z/0TNw8VGqn39+Jm/dDw">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100%;}h1 {text-align: center; c

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ZdEIZNg3epQ[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	52050
Entropy (8bit):	5.806530057094249
Encrypted:	false
SSDEEP:	768:BWKA8dB5IAHDIf4F5EwSSPJJtFBP8wIU/wAO3GS0DAGef1PgfRdIATTx8P2kCoK:aYvEwSwtrkFU/wAO3GS0shgf3Ts2kC1
MD5:	8F79ED8664593437D94D7D4088A59906
SHA1:	6646656C9121941A1D53DA7B564760668D3B9C7B
SHA-256:	CCE4F89235A323A4A67A71C5262CA1CC9E2341B7DA9A3EBA4542E673B0A4AFF4
SHA-512:	9A62ADEF5AD147B2ADA4CA567F3C1A74F7C61ECDCF90377FB246E86D83B484EA8A1B8AEB7705BF0BFF0E846B58D43BDC43FB5D8D3E4A2CFEB414D731BC713E5F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="robots" content="noindex"><style name="www-roboto" nonce="+D1duf8eSt4ly8u8zMxBNA">@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff)format('woff');}</style><script name="www-roboto" nonce="gmf0YsjQ57C55XxtOKUdyQ">if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "E"); document.fonts.load("500 10pt Roboto", "E");}</script><link rel="stylesheet" href="/s/player/51ff6aac/www-player.css" name="www-player" nonce="+D1duf8eSt4ly8u8zMxBNA"><style nonce="+D1duf8eSt4ly8u8zMxBNA">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100%;}h1 {text-align: center; c

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\[...slug]-1b8a7a14999c453e9c68[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	12786
Entropy (8bit):	5.302706480274728
Encrypted:	false
SSDEEP:	192:XwvjgvK+5rU2dm9SLCpkoa167ieLoJqp71aAsaVM8/urXbPTG+ZJtlQqPA06nyn:gvjgvK+NggC813eC2BfSA2r3ZJtY0Cyn
MD5:	0BCED6E42E7F2590E5F32FF329877E90
SHA1:	DCD55ACB6E9811424DFB2B6F2980AA8D1AEDB977
SHA-256:	C1E88D5654E84D616D264D00DD92ACBD907BE8373595C510145B0E45E5DD4690
SHA-512:	2DB458B3EEC0680B60243E160D668C1B6F219CE3A0D0DF77B62A5A757C376669D9BC8D412571AF1F40625502275B0B3137D87B27DBEACEC5AD626D7D29873A44
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/pages/page/%5B...slug%5D-1b8a7a14999c453e9c68.js
Preview:	_N_E=(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[16],{"4LmV":function(t,n,e){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/page/[...slug]",function(){return e("N8k2")}])},"HaE+":function(t,n,e){"use strict";function r(t,n,e,r,o,i,c){try{var a=t[i](c),u=a.value}catch(s){return void e(s)}a.done?n(u):Promise.resolve(u).then(r,o)}function o(t){return function(){var n=this,e=arguments;return new Promise((function(o,i){var c=t.apply(n,e);function a(t){r(c,o,i,a,u,"next",t)}function u(t){r(c,o,i,a,u,"throw",t)}a(void 0)}))}}e.d(n,"a",(function(){return o}))},N8k2:function(t,n,e){"use strict";e.r(n),e.d(n,"__N_SSP",(function(){return g}));var r=e("q1tI"),o=e.n(r),i=e("eomm"),c=e.n(i),a=e("TsCR"),u=e("CafY"),s=e("A5uP"),f=e("m4FY"),l=e("pJlJ"),p=function(t){var n=t.pricingContext,e=t.blocks,o=t.logTrace,i=t.err,c={pricingContext:n},a=e?Object(l.a)({blocks:e,logTrace:o,context:c}):i;return r.Children.map(a,(function(t){return t&&Object(r.cloneElement)(t)}))};p.defaultProps={pric

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\about[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	73804
Entropy (8bit):	4.806531629497685
Encrypted:	false
SSDEEP:	768:1L4FmkaITP8Iltr8Ioni8I68V8IgH88IjgI8IMfiaS29e7asCjmwOSCRjpTpBRoQ:1L+ToibTRt4PW
MD5:	5B87892CDB8290B7F11A75C592400B95
SHA1:	DBD3E258366B1F883401733D7B21F6D7B9D5FDDA
SHA-256:	257BEF76207043717F4A7D0DD0FEF9B1DD0BBD8B0984D61AB21BF684011A0BB9
SHA-512:	EBC9880886810E76E8912B9D12254F3649CD4D047BA29BFF301A8F0EED342AF40AD0643C1653FFD8AEAB386ECE292B004FD6DFC38F66910157A3562C4F2B6FA7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en" >. <head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta name="description" content="reCAPTCHA is a security service that protects your websites from fraud and abuse.">.. <link rel="canonical" href="https://www.google.com/recaptcha/about/">. <meta name="referrer" content="no-referrer">. <title>reCAPTCHA</title>..<link. href="https://www.google.com/recaptcha/about/". hreflang="x-default". rel="alternate". >.. <meta property="og:url" content="https://www.google.com/recaptcha/about/">. <meta property="og:title" content="reCAPTCHA">. <meta property="og:description" content="reCAPTCHA is a security service that protects your websites from fraud and abuse.">. <meta property="og:site_name" content="reCAPTCHA">. <meta property="og:type" content="website">. <meta property="og:locale" con

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\adrum-ext.99c2fcc5ccc30ea4d38a1a74eeb7a6a6[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	50651
Entropy (8bit):	5.375097894071951
Encrypted:	false
SSDEEP:	768:gTxvgqpMkMGV02hHkSwa+EIAa00dxOlEManF4dpBs5wuKOmaU:2xvgq7DJ5wzEwDZk
MD5:	2E22D0A5B58FA0193CB15A2EFEBDD584
SHA1:	4368C3FACB8C66166587CDB6ABCDE186BD33821E
SHA-256:	62001C694BB883AAA50D69CEC8F9682C6B0B00C1AD707963DE6225F990BC5CC0
SHA-512:	E529F5A49238A765F39D3F48331253E61B7169B2DB8D5436E8EA87C368D3312178AC598904FFAB6131FB442C63208B435B3DF116D1B1A8112F92DF267572250C
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.appdynamics.com/adrum-ext.99c2fcc5ccc30ea4d38a1a74eeb7a6a6.js
Preview:	;/* Version 99c2fcc5ccc30ea4d38a1a74eeb7a6a6 v:4.4.3.717, c:5c3e437ceccf10c13fd31ac6cf85f973af201f88, b:4.4.3.717 n:INTERNAL-BUILD /(function(){/... Copyright (c) 2013, AppDynamics, Inc. All rights reserved... Derivative of Google Episodes:.. Copyright 2010 Google Inc... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... See the source code here:. http://code.google.com/p/episodes/.*/.new function(){var g=window.ADRUM;if(g&&g.q&&!0!==window["adrum-disable"]){var x=window.console,z=x&&"function"==typeof x.log?x:{lo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\adrum[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	46208
Entropy (8bit):	5.391366387339267
Encrypted:	false
SSDEEP:	768:ilpCGv3pQC8gJ1dt3oc3G9OofRx3eUi/z6G7Js4glaBn:idOgnLoc3OrsWGF
MD5:	16B349AB04937151F1EC48ACC77ECE3E
SHA1:	21E20097D28D640C40599B8C9C4CA7D70EBE1B6A
SHA-256:	DDA92D5AA1C93E138BBE98D338B4C1CB4C1AACF7E14FF7EC74B99FFCC1A682E9
SHA-512:	BB542F6D93EBF90CD46AA5FE293AF77C0A130269E8ABDDDAA43267B6C3E58A99F45866B397CF30EC6CA75DE37D1C0ADF68A9DC7939D68F6DE25913B47CCA71AA
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/gutenberg/static/rum/adrum.js
Preview:	;(function (config) {. function getAppKey() {. //if site/geo specific appkey is present in js variable. if (typeof appd_appkey === "string" && appd_appkey) {. return appd_appkey. }. return "AD-AAB-AAY-XES"; // Fallback app (name=default_gutenberg) for all BUs when geo specific and site specific app keys are not provided.. }. config.appKey = getAppKey(); . appd_url_prefix = appd_url_prefix \|\| 'cdn.appdynamics.com'. config.adrumExtUrlHttp = 'http://'+appd_url_prefix;. config.adrumExtUrlHttps = 'https://'+appd_url_prefix;. config.beaconUrlHttp = 'http://col.eum-appdynamics.com';. config.beaconUrlHttps = 'https://col.eum-appdynamics.com';. config.xd = {enable : false};})(window['adrum-config'] \|\| (window['adrum-config'] = {}));. . (function(){new function(){if(!window.ADRUM&&!0!==window["adrum-disable"]){var g=window.ADRUM={};window["adrum-start-time"]=window["adrum-start-time"]\|\|(new Date).getTime();(function(a){(function(a){a.Bd=fu

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\avenir-600-it[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 46340, version 0.0
Category:	downloaded
Size (bytes):	46340
Entropy (8bit):	7.990508556886461
Encrypted:	true
SSDEEP:	768:pAqr1VOoJR7a/A9H7goCATI2QTp4qTZ8qrDTaECIWicLX94q3JKcoCdywApU:pA4VOjY9bg/sPQTpnTZnnTrJcXj5fR
MD5:	4148298E6D57C3A4651463169F1EEB9D
SHA1:	FB509A08FC543E021736D2E0F9AD5F50814D6844
SHA-256:	36FE48765006305A3628CEB93D35608CF97D0BAC8EE2C1F8CA74EAF003DA9E7C
SHA-512:	37FDD07711C8D585C79A7FFC83CFA269A80925114A678277E4934F5186A366D36221E57EB270E75494C67CCE9D18DE08D5D25033F85D17787295DE4C98AF7479
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/fonts/avenir-600-it.woff
Preview:	wOFF...............p........................GPOS...l......G....GSUB...h...........OS/2.......W...`g...VDMX...p........oPv.cmap..!............_cvt ..#....W........fpgm..#d...+...P...glyf..(...y.......E.head.......6...6.U.hhea.......$...$.)..hmtx...(..._......5loca...(.........#..maxp....... ... ....name.......u.......apost... ....... ...2prep...8......./..[.x..\.xU.~..aI !..... ..$...... .j..g.Z.3b..Q.V.:T..K.H-....X#Z...D..Y...8).(.y.{.!d...y&.s.y...........=............]...DH^..tdO..(......q...N...j..x..]W...........}.:..?_w.............v...>...z.....5z7..)H..-(......8.........4f1.#8..X.y..K./...q.o...).........1..q...:w>.p!..H.,...p%W..w....],.i~.Y..[.y....B....Dm7z+..{...u.[.O+......\......%..V....n.6.[.c...z......u^...Z....W .....H...{B[ye.=.e.c:...-.m...{...l....\=....\|wb..`6...Wh.&.....O......7...h......N"Uq.-.zde.....2y...xZfsZ..=U....z.......v..+.K-Z=....8-.E..YV.....U.z.b..Fs.M;......n..].}...^ ...d...f....z=.N.T...r.c...:`._....9...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\avenir-600[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 45464, version 0.0
Category:	downloaded
Size (bytes):	45464
Entropy (8bit):	7.990358950190346
Encrypted:	true
SSDEEP:	768:UfdNwlOX/J1SUZNuwtewLzWSKB0abB12wSsJwfgqyYhM9uiYs:oElODjNuyeAWSKB0ab3+eYe9DYs
MD5:	77748E08758C91D3CB50CCE23A63038B
SHA1:	6F318DC67146B1BC603415F2E484E34A79200A56
SHA-256:	4A5F6BCAD8C5F01F4ABB5002554BAB232EA2F8041FC5EFC313B03BF5965151E0
SHA-512:	6D8E1F43B2AE3C78A0BCE1050A623C0E81E9EA855281E3018AD32DCA1297F445E9C39E906F8BE02AFFAEAD452886B73F200BEE154DB505B9EC83E7B684F3A93C
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/fonts/avenir-600.woff
Preview:	wOFF........................................GPOS...l......F.(.GSUB...8...........OS/2.......U...`g...VDMX...@........oav.cmap.."............_cvt ..#....V........fpgm..$8...+...P...glyf..)d..u....D./.0head.......6...6...uhhea.......!...$...2hmtx.......Q......Q.loca..............U.maxp...0... ... ....name...P...f....xl:.post........... ...2prep.........../..[.x..\y\|U.~.C....!..IX..].@...=...3.v.q...u.WT.U..U.TQ(R..R..*..R...D.`d.....5.g...%.f!a....;.<...\|.......\|.r..t........]...E.I..D...zb.i.=1f...=Q4w...........<......h.............j.Q..g.bug}.q....h........yX.g.".Q....8.(&...s0Gp<.r....../....w..>.\.'....+./...~..a..Q..1..\|..<\.>fs.K9..x.zY.k..K..m..wq++X.o.l...n9g..9[[...s.-T.b...t..^en...-.2.S.[[...h..^..~..nR.r..C.........U.^..l....R...jY...[.>V......G.U:oU...Mzg....Sfg..[.W1..>..Fag?.+..K....;8.o4_......k.I...N.....\|.}...}..0W.S.\|....N.?..V...7.t....S.[.V.5nu..s.[!O7.y?+5...\|z.{...?..?.R[.....d..^....w.i.[..6...A....I#E..^^.S.j...m)..i.\|nh.....rU.u...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\avenir-700-it[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 46420, version 0.0
Category:	downloaded
Size (bytes):	46420
Entropy (8bit):	7.990234645923763
Encrypted:	true
SSDEEP:	768:BqcgXnSTKklOYtJYESCCYK1Lx2xxoDlQi6QcpDPEHzOCYV30Wm69Xm5RsADILIM/:o9XSTVlOYgETCv1Lxbui6ncaNTZYfFA
MD5:	954CD2F6367C5AD76F93C627683E7CFE
SHA1:	134B810BA26D85CBF44DE8F3B381863DCC444E08
SHA-256:	4163E20A0403A1257F70CEDD5EA1E7C1EE064675F58EF1C4BA0F76028A1DB142
SHA-512:	E7B7688DF0E7A4AEBA65C7BF24C08527AC5082FC144F773954EA45A147A5B70C81C97C6E4B7CE2C9A2FBDFA2EDFA6733483247F9A83C18B3B3BA0006D1D32BB6
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/fonts/avenir-700-it.woff
Preview:	wOFF.......T................................GPOS...l......G....GSUB...h...........OS/2.......X...`g...VDMX...p........o@v.cmap..!............_cvt ..#....].......Bfpgm..#p...+...P...glyf..(...y......`.Jhead... ...6...6....hhea...X...$...$.\..hmtx...\|...y..... Gloca...\|........."..maxp....... ... ....name.......U...KAb..post...p....... ...2prep.........../..[.x..\.xU.].@x$!!.wHBx.y...BB.... .j..o.Z.3b..Q.V.:T....m.Zj+...F...Q!..W.q...H.xg.{.!....&.....s......:............]...BH~.....N^....f.f w....T2O.......j...........A.....Ao.^b...m..-Tw.g.[_....B.J..>.......e.rT...q...$.va....l.p8s9.E..K....x...f..2..>...Q..1..8,.s9..Y...f.o.M.........~.`%O.K....r..n.\..{.D.Ej..[....\.S.}Z.....-w..m.FX.-c.....v....J.........]......Z.o.......G:......+..9.....'..o.h....#..v..e....I}....#...3.@w.J.7....x...R......gF.....v...So..#.h..n.V..M........U.^.......=m...w_._n...V....ii.Z.l$....S.U.*4h...6.....m..\qkf...u...9.X/.<m5..>...v....=..<V.Qk...U....no.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\avenir-700[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 45940, version 0.0
Category:	downloaded
Size (bytes):	45940
Entropy (8bit):	7.991474710398507
Encrypted:	true
SSDEEP:	768:3BS20g/DAI5bySOCdJOmGh+BidHq9xMefAYi4ShiYldretp8aqb0qUFzWlM2X:B00WSO+ZxHyr9lFetqaqb0T2
MD5:	FAB5E98F2508A14895EBA9AD10E06F6B
SHA1:	C00B2AC111718E19AE3802C80EDB5DC55EEAAD3B
SHA-256:	F7B29C237E18BF59A34478218E9AA98BD4B191B62B7A33BBDC3627387D6ED6CC
SHA-512:	52ED6B2AFCE1D6A71ADDD81FFA76330AB7B6C3AAFE2B5D22E95817D0A1BC209C001704AE69855486EDFBDE5F5FE3577922463F1D4CD4FECDFA4F5F2E033F6C50
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/fonts/avenir-700.woff
Preview:	wOFF.......t.......,........................GPOS...l......E.. GSUB...h...........OS/2.......W...`g...VDMX...p........o.w5cmap.."............_cvt ..#....Y.....~.hfpgm..#p...+...P...glyf..(...x'....ed..head...`...6...6...ahhea.......!...$...@hmtx.......f.....K.loca...............dmaxp...$... ... ....name...D...M...EK.0xpost........... ...2prep.........../..[.x..\.tU...@B. d$#$!.A...$@..B......o............V}T-.C.R..m.V....,..l."CT.b#.....!'!.a.o.o.s............?.........t.O.A...6b.Lt-,...>.'.fbH.21rz......_?.....X7.....a.......t.e7[... [..e..g.lp.;..W.W....Y..K..^......8......0....v.a.....p4'...y....8....ws1..x.....E...@..`.A..b2f`..p.zN.t.P.9.......N..{..[Y.o.v...RNq.p.^.....,.-p..+...U.n.e.-K=..i...%c.J]w..V.B...=...2.-..w../....Lm...XkI...~O..=..<....9...{...../..=d....o..>.J}.....:w....O...DLS<.k,....].^.\|-..M....1.....O..p+U.......s}...L#y1....j.[/..D...e...kT..\|9....Z.......w...U.jT..$.n:9.."..^.......m/=.N%.....=..;\|.h.J..r..z..v.^...V..O.#

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\background_gradient[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames 3
Category:	downloaded
Size (bytes):	453
Entropy (8bit):	5.019973044227213
Encrypted:	false
SSDEEP:	6:3llVuiPjlXJYhg5suRd8PImMo23C/kHrJ8yA/NIeYoWg78C/vTFvbKLAh3:V/XPYhiPRd8j7+9LoIrobtHTdbKi
MD5:	20F0110ED5E4E0D5384A496E4880139B
SHA1:	51F5FC61D8BF19100DF0F8AADAA57FCD9C086255
SHA-256:	1471693BE91E53C2640FE7BAEECBC624530B088444222D93F2815DFCE1865D5B
SHA-512:	5F52C117E346111D99D3B642926139178A80B9EC03147C00E27F07AAB47FE38E9319FE983444F3E0E36DEF1E86DD7C56C25E44B14EFDC3F13B45EDEDA064DB5A
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/background_gradient.jpg
Preview:	......JFIF.....d.d......Ducky.......P......Adobe.d................................................................................................................................................. ...............W..............................................................Qa.................................?......%.....x......s...Z.......j.T.wz.6...X.@... V.3tM...P@.u.%...m..D.25...T...F.........p......A..........BP..qD.(.........ntH.@......h?..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bat[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	30494
Entropy (8bit):	5.30355290011164
Encrypted:	false
SSDEEP:	384:otKVCwh9wC22fo5EB4b7AWhbwM05Jkr9qNHfs9nB/wDSliNqCET8zT7QAEqnyJYk:ZCwhBR/DOZwDhzT7QSnSYyebQ
MD5:	5562385CBAFDDC33276BA10BA59890F7
SHA1:	A030EE46C99511E12EBB6257138FBE3E75232540
SHA-256:	73E2E5173ED0D5A77B02914FA0EF1F67BB53143DA75F0348F558F95565220CA1
SHA-512:	3D12741A718FE0CC3756C8018E29C07B84D28702E8783F42677431213CC4F79A6852C3A26A8D29C6FC515A069D4543C6114A0C56FC19AC48F680EE9439D2ECE7
Malicious:	false
Reputation:	low
IE Cache URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date format"},"enum":{type:"enum",error:"{p} value must be one of the allowed values"},array:{type:"array",error:"{p} must be an array with 1+ elements"}};this.knownParams={event_action:{beacon:"ea"},event_category:{be

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bt724fu5jqkw67yz[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	82874
Entropy (8bit):	5.276239984725111
Encrypted:	false
SSDEEP:	384:znja43mo0I18Pair0pcw//86XWZAlPZG8s3tqxjh0SsTgqHbHDHuH2HMHkHiHwHR:EwMAu68qIFz
MD5:	42D7E88B3F19ACFB4E65CA7AD7251F73
SHA1:	D5C79467414AC1C005B09A06DC1A89F33102CD32
SHA-256:	FC596C48EAF2C470C20002714AC6C1DDD8ABEBBD4E8BD9AB3508A29BAD8C5C7F
SHA-512:	FAF4C1C7A94DAFC6D57D7039E9FFC5FBFFA2B14D863056E5E398328D879848ACC9C2CA4D38F142CB761ED8BFEA2C57B99F5FD8B7CC58441E252892934DCE4CBC
Malicious:	false
Reputation:	low
Preview:	var td_3J=td_3J\|\|{};td_3J.td_1Z=function(td_L,td_F){try{var td_b=[""];var td_J=0;for(var td_a=0;td_a<td_F.length;++td_a){td_b.push(String.fromCharCode(td_L.charCodeAt(td_J)^td_F.charCodeAt(td_a)));td_J++;.if(td_J>=td_L.length){td_J=0;}}return td_b.join("");}catch(td_K){return null;}};td_3J.td_5O=function(td_t){if(!String\|\|!String.fromCharCode\|\|!parseInt){return null;}try{this.td_c=td_t;this.td_d="";this.td_f=function(td_b,td_i){if(0===this.td_d.length){var td_Z=this.td_c.substr(0,32);.var td_I="";for(var td_k=32;td_k<td_t.length;td_k+=2){td_I+=String.fromCharCode(parseInt(td_t.substr(td_k,2),16));}this.td_d=td_3J.td_1Z(td_Z,td_I);}if(this.td_d.substr){return this.td_d.substr(td_b,td_i);.}};}catch(td_W){}return null;};td_3J.td_4K=function(td_D){if(td_D===null\|\|td_D.length===null\|\|!String\|\|!String.fromCharCode){return null;}var td_O=null;try{var td_S="";var td_s=[];var td_q=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);.var td_g=0;for(var td_t=0;td_t<td_D.length

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\case-scraping[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2080
Entropy (8bit):	5.965449331310119
Encrypted:	false
SSDEEP:	48:gC1/h1ro9HPFZzQb+wKOnIBaYg1+BdMrhWtCNttE3n+vx0QzHp:gC/8PcCaIAVgBalW4Vvx08J
MD5:	203C40F83E06A77101512C5FC4E9B1C1
SHA1:	B67221D1E0748C74F3F1305951E2D5AADF018FB8
SHA-256:	48340F09925154A41A222D17368036C8EC0678498298C72F3CE283B1A7DDDDF5
SHA-512:	7B099B84A89C223AE9A5C1271C8898B885151EE2C2C45583F43ED2ECBEACA47B0FFE22858BC9FC389F968ADE79DCE18DAF120197FFA23AEE5B6A22CD422CEA5C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/case-scraping.svg
Preview:	<svg width="53" height="45" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><image x="280" y="195" width="53" height="53" xlink:href="data:image/png;base64,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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\cash-flow-feature-qbo-us@2x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 1440 x 1246, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	146430
Entropy (8bit):	7.970848078031421
Encrypted:	false
SSDEEP:	3072:Gh862LwxbVjtKFD+ZS9FbHg+1lLZPOXEqwUZ1yrBJgq8e9wr:4caKfbAalNPsEqwMyrBJgqZ9wr
MD5:	4F8115B47DCC32D244A8AE224A9EE307
SHA1:	825FB8DA4AB613D79676976FA014387820F074B4
SHA-256:	2F5A968FDF35E815447D305C982F2605CAAF0471E20752DADE5ABB15BCEDC6D2
SHA-512:	3D7585F5738AF612825C35789348744C438F73491E0959E77E83885963C0D218940A2C9264DF77C4FF73482EDC644888ED2A6143403838726E43A2CEB843A148
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/feature/cash-flow-feature-qbo-us@2x.png
Preview:	.PNG........IHDR..............!s.....PLTE..................}vq9"...{\! .._L(".'%#,(&&#!..n)%#zR;;40.B..fW<98..vz=.z`P)))....yh..\|.X.....f6...T........#! ...)('-+521.........D....965{>...0/0::=.?..E.......%"u5.FB@2.+z:..Qo1.......\|k@:7.H.....wf.fVk...J ...l\klq.O.M!....sb..o.........p_PJH.M.T'c+.SPO^WU.LZROQ"...pc][.......Y'.H...H..v...:....iw\L...Z-..MB6....W......jb`.z..U0..c5.....k8.....P....m...D...$......s...?6..............maN..pRB.^....$,#.\|?.~y.....ya.\|bf[I....u^sgRfE3_SA<...j;.t:.K..}.qZ2...yF...\:)ymWWK<..e......n.L).l63#..q@.yu....y.d1.L/tieuC'{qmE)....%...W.....t...vvy..f....W7..~.~i...a.....i.^K.?..........~Z.dD....mH.......}.J..*.....x.oq......"tRNS... (.DBD#.m\..c..t.......}..XIf>..8.IDATx..._j.@..q.)..$#.~...]....e..\|......:3....nZ(.i..H..I.... .l.............O...M.t..p...V.....8...p.::y..n...mw...x<..x:.$....>1z..N}.n..%.i.k.._..5.7.?.W.4..m..."?8.u...\..5..j..g.{..0X..g.s.h..m.......#-y...z.........1-.<...'5s.c.'...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\cb=gapi[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	102176
Entropy (8bit):	5.526100291671109
Encrypted:	false
SSDEEP:	1536:iePKvyvPdKUxzj7wauVz1DWwvQaOo1TOwmI1b1zgXk4zk2dPR2hNQ2:QvyvPdKOm1fQadFOMpzv4z7AhNQ2
MD5:	3820CFC9F68599B4BAAF02AEAC4D3729
SHA1:	E5F482617CC50F25F729A5EFC1CDD68797A9FDFB
SHA-256:	29CD624CEF7BE1A2197EE367300E65708F199E3370B9CD83685243CC5696A71D
SHA-512:	F37CFE15F226F5D7981DF7F16AC30F00DF1C0CF81451A1E19745A9644E7C2DE30F1BA172D74C97BFA3592ED6DEDDB56F95A4D4494776BA800B9C763CB94449CC
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_0(function(_){var window=this;./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var ha,ja,na,oa,wa,Aa,Da,Oa;_.fa=function(a){return function(){return _.ca[a].apply(this,arguments)}};_.ca=[];ha=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ja="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.na=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};oa=na(this);wa=function(a,b){if(b)a:{var c=oa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ja(c,a,{configurable:!0,writable:!0,value:b})}};.wa("Symbol",function(a){if(a)return a;var b=fu

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\clear[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	81
Entropy (8bit):	4.3493440438682995
Encrypted:	false
SSDEEP:	3:yionv//thPltXlfMLts0NyWn/NG8bp:6v/lhP/ZMRHNyWn/NG8bp
MD5:	1B6D2DE2867A3E11063BA25AA1CD4209
SHA1:	BD20B0E089F31F35CBA4D0FA7277E73AA74D944C
SHA-256:	95518CBEC0D55A574A9C8EF72A2A7D62AC0D40A4DE5DFE67A76A7D214DC8B743
SHA-512:	D30AC99B9140393CB2EA8EB09F0C69F6107CA5940DDF208B5EC1DD6D5ABDAB37FC60A892AA397579DA75B450965ADE6D37EE84C55550B42DD86F7AA26D99AB88
Malicious:	false
Reputation:	low
IE Cache URL:	https://pf.intuit.com/fp/clear.png
Preview:	.PNG........IHDR.............."......sRGB.........IDAT..c`.......c*......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\commondojo_base_en-us.xd[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	4635
Entropy (8bit):	5.0208508421047595
Encrypted:	false
SSDEEP:	96:tpswlHftlbXdYiXWbqX+jbRj+A1RX1Rx2f5T9298k09Bl+nLLhpwOFnLCX:d/tlbWiGOWx+A191mBiGQLCX
MD5:	4D12A792B82BDE6B3C5993E7E8788349
SHA1:	FD78356290A6A0E9B721612E5A23E2FC4AF0CECC
SHA-256:	92B6D0DBC43626D2DF010E6C3526F2623DFBCAA39D89F75AD763E8D9F4AE7E6B
SHA-512:	8EAB0EC8A2E56D4B7BF3AF9F7AB029E39E3914CAEE4B2E3855922B712D793D73D3677F16D4D90841A321CFC14467C953335D863500FCA522DEFC9222673E1B85
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/dojotoolkit/dojo/nls/commondojo_base_en-us.xd.js
Preview:	dojo._xdResourceLoaded(function(dojo, dijit, dojox){.return {depends: [["provide", "dojo.nls.commondojo_base_en-us"],.["provide", "dojo.cldr.nls.gregorian"],.["provide", "dojo.cldr.nls.gregorian.en_us"],.["provide", "dijit.nls.loading"],.["provide", "dijit.nls.loading.en_us"],.["provide", "dijit.nls.common"],.["provide", "dijit.nls.common.en_us"]],.defineResource: function(dojo, dijit, dojox){dojo.provide("dojo.nls.commondojo_base_en-us");dojo.provide("dojo.cldr.nls.gregorian");dojo.cldr.nls.gregorian._built=true;dojo.provide("dojo.cldr.nls.gregorian.en_us");dojo.cldr.nls.gregorian.en_us={"dateFormatItem-yM":"M/y","field-dayperiod":"AM/PM","dateFormatItem-yQ":"Q y","dayPeriods-format-wide-pm":"PM","field-minute":"Minute","eraNames":["Before Christ","Anno Domini"],"dateFormatItem-MMMEd":"E, MMM d","dateTimeFormat-full":"{1} {0}","field-day-relative+-1":"Yesterday","field-weekday":"Day of the Week","dateFormatItem-hms":"h:mm:ss a","dateFormatItem-yQQQ":"QQQ y","days-standAlone-wide":["Su

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\commons.ff8af85631becc280587[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	51683
Entropy (8bit):	5.027604907024319
Encrypted:	false
SSDEEP:	1536:3hFp6gsmmlv7yLwu5RzYAx3nT3noeJQuQ67g:3hFpBUx7yLZ5RzYAx3nce+28
MD5:	4D76E711B74ED1FEC693F4DDF4FB6318
SHA1:	E38AFCFADFAF5B0ADA6F0D422971A6DD33EEB700
SHA-256:	297769E3824142B11237F18BBE7B0845135DF50CEB4F9D6E4C30D9A452821CCB
SHA-512:	839DF545A633FE20D54D8363F7B7694F9E5F709316BE28C2E0B0E7D5A342695B9D9E11C39F4B70510219A2052AAC941E6D5954DB5A2AF568338EF938F63A1E86
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/commons.ff8af85631becc280587.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[0],{"/GRZ":function(e,t){e.exports=function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}},"48fX":function(e,t,a){var r=a("qhzo");e.exports=function(e,t){if("function"!==typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),t&&r(e,t)}},"7eYB":function(e,t){e.exports=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var a=0,r=new Array(t);a<t;a++)r[a]=e[a];return r}},"81II":function(e,t){e.exports={dropdown:"1000",sticky:"1100",fixed:"1200",overlay:"1300",overlayCloser:"1305",modal:"1400",tooltip:"1500",rwHeroLeft:"1",rwHeroRight:"0",pageContent:"100",gblHeaderOverlay:"1001",rwSubLayer:"-1"}},"A+jc":function(e,t){e.exports={radiusSmall:"0.25rem",radiusMedium:"0.5rem",radiusPill:"624.9375rem",radiusRounded:"50%",radiusRwJumbo:"1.75em",radiusRwStandard:"1.2

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\dest5[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	6983
Entropy (8bit):	5.483922930498494
Encrypted:	false
SSDEEP:	96:inw1EOb9muLpw47eIDCpXHG5z/QkqJeMnSSyi8c2Kgn/UnNsnA2aI4j4e:iPc/xDCpX8/in/y+2KgMSA26l
MD5:	2C9C2EE145EE280B85A217AD7045FAE5
SHA1:	6ABE394B53B32816ECA642126FD62BCD91D17348
SHA-256:	7BEA17A80A61ED0F54248B4FFC4C718F7C8FF2619742577A73591D62CE074DA8
SHA-512:	3762C5F678EB4858000FCF379EA1C8BEA54F2A211A3F940300876D1697B82012C57B0E614E33770D8F5626B2F4C3B7842B658C926E12974A43A1B0A313E2DB79
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">.<html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javascript">.var Demdex={version:"6.2",dest:"5",PROTOCOL:"https:"==document.location.protocol?"https:":"http:",COOKIE_DOMAIN:function(){var a=document.domain;/demdex\.net$/i.test(a)&&(a=".demdex.net");return a}(),SIX_MONTHS_IN_MINUTES:259200,THREAD_YIELDING_DELAY:100,errorReportingEnabled:!1,sent:[],errored:[],timesDextpWasCleared:0,dpids:null,cbmacros:["%timestamp%","%rnd%","%did%","%http_proto%"],validators:{isPopulatedString:function(a){return"string"==typeof a&&a.length}},addListener:function(){if(document.addEventListener)return function(a,.b,c){a.addEventListener(b,function(a){"function"==typeof c&&c(a)},!1)};if(document.attachEvent)return function(a,b,c){a.attachEvent("on"+b,function(a){"function"==typeof c&&c(a)})}}(),replaceMacro:f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\di[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	176429
Entropy (8bit):	5.4914505278444
Encrypted:	false
SSDEEP:	3072:z39w9K/bxXuLf0OvvS2QThPvBwXZXgkna/uV7JftSAtv+v/a5HLH03rOe:z39w9K/bFFuvqThWftSA1T5HI3rh
MD5:	E2654C8A1AB0DC8274F06F3233BD1BF7
SHA1:	618923A1C73E023E5D793DD803F32DB58718ECB2
SHA-256:	23E12F04A44CD22818D8EFC3077E8D2CA5FCCED7D36850E9FEB3391B39FAD768
SHA-512:	E5C3FBD919153B0E4C59C9205D1A560986E4087B6D55122D9F02D7BE756F2AD29A183B15765C8D54CFA41D087A89B07F5AF46CCB35C3B98FF494131507AA437A
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.decibelinsight.net/i/13878/256560/di.js
Preview:	/*. Copyright 2021 Decibel Insight Ltd.. * http://www.decibelinsight.com/. */.window._da_=window._da_\|\|[];_da_['jsVersion']=1617170457;_da_["da_websiteId"] = 256560;_da_["returnVisit"] = false;_da_["accountNumber"] = 13878;_da_["da_dnsRecord"] = "collection.decibelinsight.net";_da_["intPreScripts"] = function(){};_da_["intScripts"] = function(){try{(function(){window.optimizely=window.optimizely\|\|[];window.optimizely.push({type:"integration",OAuthClientId:"5408890247"});var m=0,k=function(){if(window.optimizely&&window.decibelInsight&&window.optimizely.data){var q=function(a){var d,c,b,e,f=window.optimizely.data,p=f.state.activeExperiments,k=f.state.variationIdsMap;for(d=0;d<p.length;++d){var g=p[d];for(c=0;c<k[g].length;++c){var n=k[g][c];a:{var h=b=void 0,m=n,l=f.sections;for(h in l)if(l.hasOwnProperty(h)&&h.match(/^[0-9]+$/)&&(b=l[h].variation_ids))for(e=..0;e<b.length;++e)if(b[e]==m){b=l[h].name;break a}b=null}e=f.variations[n].name;a.v.push({i:n,e:g,n:null!==b?b+" - "+e:e})}a.e

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\di[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	175000
Entropy (8bit):	5.491380944063522
Encrypted:	false
SSDEEP:	3072:2rT+9vr/bxXuLf0OvvS2QThPvBwXZXgkna/uV7JftSAtv+v/a5HLH03rOe:6T+9vr/bFFuvqThWftSA1T5HI3rh
MD5:	7C30C4CE721772289B44445AA10091BE
SHA1:	6E067078D46CF02B289B3F37DAB0490FCDE49B74
SHA-256:	86D0BBE30565E8B204C556D8B4667B125B232B6DEB2851407B41F05E17B3467F
SHA-512:	F432943ECCA6FF93B308F0D2BF1BF7B638A0B1565AB60B6CF05D5D822649D4856E32D39F9965EE0F5C4EB8AD0EE8BCA76D50F3A7622879DE539E384FF5BB8CE6
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.decibelinsight.net/i/13878/264972/di.js
Preview:	/*. Copyright 2021 Decibel Insight Ltd.. * http://www.decibelinsight.com/. */.window._da_=window._da_\|\|[];_da_['jsVersion']=1617170456;_da_["da_websiteId"] = 264972;_da_["returnVisit"] = false;_da_["accountNumber"] = 13878;_da_["da_dnsRecord"] = "collection.decibelinsight.net";_da_["intPreScripts"] = function(){};_da_["intScripts"] = function(){try{(function(){window.optimizely=window.optimizely\|\|[];window.optimizely.push({type:"integration",OAuthClientId:"5408890247"});var m=0,k=function(){if(window.optimizely&&window.decibelInsight&&window.optimizely.data){var q=function(a){var d,c,b,e,f=window.optimizely.data,p=f.state.activeExperiments,k=f.state.variationIdsMap;for(d=0;d<p.length;++d){var g=p[d];for(c=0;c<k[g].length;++c){var n=k[g][c];a:{var h=b=void 0,m=n,l=f.sections;for(h in l)if(l.hasOwnProperty(h)&&h.match(/^[0-9]+$/)&&(b=l[h].variation_ids))for(e=..0;e<b.length;++e)if(b[e]==m){b=l[h].name;break a}b=null}e=f.variations[n].name;a.v.push({i:n,e:g,n:null!==b?b+" - "+e:e})}a.e

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\dnb_coretag_v4.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1420
Entropy (8bit):	5.1858049480454005
Encrypted:	false
SSDEEP:	24:MrPHqOmiU8AO1xA/OlTf8UXh2E35rFu/K23/FdKXtID4Dt56Gbd7rdr2rYK6/PZD:UPHY7UJJ35rg/f++Ot0Gbd7rdr2rYK6N
MD5:	E876F53A6063AA4D75F88C7B67222687
SHA1:	24003FCDB6F28D6DA10C18E56A81D1597DD0061E
SHA-256:	240FBCFD9CCE9F9883216B7F5097BE022D5AF697075BB9987439D7B8BBA5AEB9
SHA-512:	BAAD4C2CEA3DD0C8F9FEC561763463747317E50E3D6401A1AD2062022703ECC9C04462F461FF6E505814A1A771202BF00519031EC4C09242F8D787C35727E1F3
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn-0.d41.co/tags/dnb_coretag_v4.min.js
Preview:	var dnbvid=function(){return{ajax:function(B,A){var stateChange=function(){if(request.readyState==4){callbackFunction(request.status,request.responseText)}};var getRequest=function(){if(navigator.userAgent.match(/MSIE 9.0/i)){xdr=new XDomainRequest;xdr.onload=function(){callbackFunction(200,xdr.responseText)};return xdr}else{if(window.XMLHttpRequest){return new XMLHttpRequest}}return false};var postBody=arguments[2]\|\|"";var callbackFunction=A;var url=B;var request=getRequest();try{if(request){var C=request;C.onreadystatechange=stateChange;if(postBody!==""){C.open("POST",B,true);C.setRequestHeader("X-Requested-With","XMLHttpRequest");C.setRequestHeader("Content-type","application/x-www-form-urlencoded");C.setRequestHeader("Connection","close")}else{C.open("GET",B,true)}C.withCredentials=true;C.send(postBody)}}catch(e){callbackFunction(200,'{"status": "404", "message":"not found"}')}},getData:function(api,type,resptype,callback){var url=location.protocol+"//"+api+".d41.co/api/?req="+api+

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\dnserror[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2997
Entropy (8bit):	4.4885437940628465
Encrypted:	false
SSDEEP:	48:u7u5V4VyhhV2lFUW29vj0RkpNc7KpAP8Rra:vIlJ6G7Ao8Ra
MD5:	2DC61EB461DA1436F5D22BCE51425660
SHA1:	E1B79BCAB0F073868079D807FAEC669596DC46C1
SHA-256:	ACDEB4966289B6CE46ECC879531F85E9C6F94B718AAB521D38E2E00F7F7F7993
SHA-512:	A88BECB4FBDDC5AFC55E4DC0135AF714A3EEC4A63810AE5A989F2CECB824A686165D3CEDB8CBD8F35C7E5B9F4136C29DEA32736AABB451FE8088B978B493AC6D
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/dnserror.htm?ErrorStatus=0x800C0005&DNSError=1460
Preview:	.<!DOCTYPE HTML>..<html>.. <head>.. <link rel="stylesheet" type="text/css" href="NewErrorPageTemplate.css" >.. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.. <title>Can’t reach this page</title>.. <script src="errorPageStrings.js" language="javascript" type="text/javascript">.. </script>.. <script src="httpErrorPagesScripts.js" language="javascript" type="text/javascript">.. </script>.. </head>.... <body onLoad="getInfo(); initMoreInfo('infoBlockID');">.. <div id="contentContainer" class="mainContent">.. <div id="mainTitle" class="title">Can’t reach this page</div>.. <div class="taskSection" id="taskSection">.. <ul id="cantDisplayTasks" class="tasks">.. <li id="task1-1">Make sure the web address <span id="webpage" class="webpageURL"></span>is correct</li>.. <li id="task1-2">Search for this site on Bing</li>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\dojo.xd[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	103667
Entropy (8bit):	5.501939291907782
Encrypted:	false
SSDEEP:	1536:y0cwglEH4cHl7JEr5wUE2U2NjLk5BxC8/urk6EDfdOL5gd67ioLBrVMlX:y5wDVpJELU25Ihmw6Es++ioLBreh
MD5:	1580E2E317A128BC49E6F14B55F7C574
SHA1:	6A5765C391265CF77CE5B641F6329D21D9DE300A
SHA-256:	B2012439204595BFB1603009A7454FC5CEDB335E15F53A2EFBE9F53BE744645F
SHA-512:	3876EB990E9E2DFFEF0FDAD62E48BE9B3234BE415A33310F883A17214031CA742EAAD7BF374EF427F8969C5284C3598E7E4789D6B2D1E4D5F9198FB29BE96493
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/dojotoolkit/dojo/dojo.xd.js
Preview:	/..Copyright (c) 2004-2011, The Dojo Foundation All Rights Reserved...Available via Academic Free License >= 2.1 OR the modified BSD license...see: http://dojotoolkit.org/license for details./../..This is an optimized version of Dojo, built for deployment and not for..development. To get sources and documentation, please visit:....http://dojotoolkit.org./..(function(){var _1=null;if((_1\|\|(typeof djConfig!="undefined"&&djConfig.scopeMap))&&(typeof window!="undefined")){var _2="",_3="",_4="",_5={},_6={};_1=_1\|\|djConfig.scopeMap;for(var i=0;i<_1.length;i++){var _7=_1[i];_2+="var "+_7[0]+" = {}; "+_7[1]+" = "+_7[0]+";"+_7[1]+"._scopeName = '"+_7[1]+"';";_3+=(i==0?"":",")+_7[0];_4+=(i==0?"":",")+_7[1];_5[_7[0]]=_7[1];_6[_7[1]]=_7[0];}eval(_2+"dojo._scopeArgs = ["+_4+"];");dojo._scopePrefixArgs=_3;dojo._scopePrefix="(function("+_3+"){";dojo._scopeSuffix="})("+_4+")";dojo._scopeMap=_5;dojo._scopeMapRev=_6;}(function(){if(typeof this["loadFirebugConsole"]=="function"){this["loadFirebugCons

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\down[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	748
Entropy (8bit):	7.249606135668305
Encrypted:	false
SSDEEP:	12:6v/7/2QeZ7HVJ6o6yiq1p4tSQfAVFcm6R2HkZuU4fB4CsY4NJlrvMezoW2uONroc:GeZ6oLiqkbDuU4fqzTrvMeBBlE
MD5:	C4F558C4C8B56858F15C09037CD6625A
SHA1:	EE497CC061D6A7A59BB66DEFEA65F9A8145BA240
SHA-256:	39E7DE847C9F731EAA72338AD9053217B957859DE27B50B6474EC42971530781
SHA-512:	D60353D3FBEA2992D96795BA30B20727B022B9164B2094B922921D33CA7CE1634713693AC191F8F5708954544F7648F4840BCD5B62CB6A032EF292A8B0E52A44
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............ex....PLTE....W..W..W..W..W..W..W..W..W..W..W..W..W.U..............W..W.!Y.#Z.$\.'].<r.=s.P..Q..Q..U..o..p..r..x..z..~.............................................b.............................................................................................................................................................................................................$..s...7tRNS.a.o(,.s....e......q*...................................F.Z....IDATx^%.S..@.C..jm.mTk...m.?\|;.y..S....F.t...,.......D.>..LpX=f.M...H4........=...=..xy.[h..7....7.....<.q.kH....#+....I..z.....'.ksC...X<.+..J>....%3BmqaV...h..Z._.:<.Y_jG...vN^.<>.Nu.u@.....M....?...1D.m~)s8..&....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\enterprise[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1037
Entropy (8bit):	5.588437013186528
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXbmlO6+KVCetWD1gVsLqo40RWUnYN:iEcjKoeC17LrwUnG
MD5:	91E1101729E67C0E0C086FDA2D305574
SHA1:	7BCE78FF3D5CABC6182394A2FE40E512A9C0C333
SHA-256:	C9468FD51C9428ED3B9AC7F5D3ABE056CFE367D3B3C6619829465FA482F863FB
SHA-512:	6516C738AA826E69A1365D9FF1ACBE03079979634166F584FD072F0277FC1EF5BD9A980D04C69B4EC2333A48CF50977F8A1281D7D4C07BC0FF3C98CE9FC5B792
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/enterprise.js?onload=iusRecaptchaCallback&render=6LcnSW0aAAAAAICg9byzvE1oFz4zXBI-CFh6W3st&hl=en
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('6LcnSW0aAAAAAICg9byzvE1oFz4zXBI-CFh6W3st');(cfg['onload']=cfg['onload']\|\|[]).push('iusRecaptchaCallback');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;po.src='https://www.gstatic.com/recaptcha/releases/TbD3vPFlUWKZD-9L4ZxB0HJI/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-pW7zXhudGWVlF6CkWBd8dS8KzT6L2vJNeTFwpRQ10v9UhG1wVmMDY5pNPr52knQ2';var e=d.querySelector('script[nonce]'),n=e&&(e['nonce']\|\|e.getAttribute('nonce'));if(n){po.setAttribute('nonce',n);}var s=d.getElementsByTagName('script')[0];s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\f[1].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	36813
Entropy (8bit):	5.495976700850117
Encrypted:	false
SSDEEP:	384:KEnScJ72pCWmKFnpMfG2X2G3LLa8L5BGQEHAkLTokXpjs4MECsNSDA7ojtgSJ1N3:x7ZWOHaQqLTok5hvijYe4O1csd
MD5:	DB6BD46331775E3868155D686D62F69E
SHA1:	F15E0F496854E6D529A02E1325D7E8C691C2C54B
SHA-256:	A15F6A7C5191BE77ED55A7EDC0FC260C36CF3A0BC3352902F86B8B8681377AC8
SHA-512:	C0E8A5DAD2488123CFD80BEA1A445DF6422EDF3ED05A7E37E0AED3722B2BE1B0769553DDC0690994C993C7711978B7EBA85815BB47C862772A2346D0DB0673B7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googleadservices.com/pagead/conversion_async.js
Preview:	(function(){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),l={},fa={};function t(a,b){var c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]} .function v(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in l?f=l:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&"es6"===c?f[d]:null;b=b(c)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\fbevents[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	96774
Entropy (8bit):	5.393968298907177
Encrypted:	false
SSDEEP:	1536:YM+OWtI6ay9Xes12KqQqfUThe7Kdv0a9sIOs1jaV7vu5Dm20C+QNSMngySZYSlI3:YzOW5jSVnYDGeB
MD5:	8523F9821D728C44A5C0CE159CE5053E
SHA1:	E214CC3E271752DC5290D752426DE48E56C81E68
SHA-256:	0D17B8A38D3DCE6F7357BBC8DA105D92C21B6CF1C4B92351CE2B1861B065F2C5
SHA-512:	803A7F06300162E2AB9E61F89FE742ED98BD127413678BFF3DD40AC13C74D36B97DE449680B5C70BE96A5410379CC7BC50226E7DA91B22615CD2D589DBBA1221
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\feature-adaptive[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1346
Entropy (8bit):	5.7577093417331415
Encrypted:	false
SSDEEP:	24:tYW3LirbBU1ro9HPIImFSz4feEOYAFkCHA2E1vI59lgE6vVO+jJQX4VxMa1/:PbCG1ro9HPMSzqOYAeRK9lgP+XeR
MD5:	9622E87EBDE223007C9CAF97B46892A3
SHA1:	14EE00A53D9EE6CFB4D57DDA9DA0310391B56437
SHA-256:	966CE1A7E9CE0F3048C6D23C146B99BF145178F75394D71D6EA74B5932F52823
SHA-512:	30063C0A47DE99B7D37BA2510A136431B66A9B43CA6BF09BB36C81E3D0B0600726C2AA1BFFB151FE1BB507A11078AA597D15B3CB20B0FC812C50FA687137287E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/feature-adaptive.svg
Preview:	<svg width="24" height="24" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><image x="565" y="901" width="30" height="30" xlink:href="data:image/png;base64,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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\feature-customer-friendly[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2130
Entropy (8bit):	5.95949699381756
Encrypted:	false
SSDEEP:	48:GCwy1ro9HP1VHf2T47f5yNSLmqjqzOQ3jLl8UqR:GfPJoNSLmqjKOQ3jJ1M
MD5:	4A66BB0E4184BA80D5A05619E1F88955
SHA1:	456C99EA6C8AD1C50CF7CC3B3E0B35446E0CC2D4
SHA-256:	DB40719AD14DC0AA2A25FB04DA3242E9717D7D29E02B2AB712E58361C6562482
SHA-512:	4D934292ED45ED7051158BFD710FBC94C249A18664BD5245C217853B2A493AD2CDA3D96A2B3CF12F875D94BEEE351E41DE5F6F7B412FFC24DFDDAC50B0750614
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/feature-customer-friendly.svg
Preview:	<svg width="26" height="18" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><image x="565" y="740" width="30" height="30" xlink:href="data:image/png;base64,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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\feature-proven[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2278
Entropy (8bit):	6.014372657131962
Encrypted:	false
SSDEEP:	48:LOCJyX+ro9/v8sIHE2hZyVVP9p6jbely3QhBGzbLPPRMF9aq6nNCeHUR:LO4yBxIHFydQ+lywBGnFCaHXC
MD5:	7B0171D385877C14406F1155B01F1051
SHA1:	FFAD93E21F89E42F608A9744095D2BA87B831D53
SHA-256:	F613EEDD70CE56C863A4C5C9C44A57AE1D0891C356962F4702C1DF368D1D714E
SHA-512:	AFDB8F0E774758A8D4385DA9C442D599F9914C5BD88732168604CA07A3BECAB3C3B288D83FACDAD2682A218AF65317A79FF259774EA93A076F1AEE306AC61D63
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/feature-proven.svg
Preview:	<svg width="23" height="28" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><image x="569" y="582" width="23" height="28" xlink:href="data:image/png;base64,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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\footer[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	8899
Entropy (8bit):	5.515479555444982
Encrypted:	false
SSDEEP:	96:vQLo8HN+Ld45It4MjEX5CbH8FTXvX+J5v1p4FEm/j3iJy:vQLo8HN+LT4OEX5e8xvX+Xzmr3iJy
MD5:	D835DF03870B4FADD634AF5EA070D8B6
SHA1:	50F8646C90007466C4890B25AE9693EA701EFAA5
SHA-256:	BD8B4DEB49F8A2F07062F2DD3FE10FB6E67519F915948BC8556BD011675ABEF3
SHA-512:	BC6DBC925C2039D8A7D16BD1788902AABD69CAD260746B8506296432862892B4DEB9BDD14EC9BBCEA89248FDDD4EC21DC7EFFA20E1D65EA330933667618B5B7A
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/qbmds/footer.css
Preview:	:root{--breakpointsSmall:48rem}.Search_search__74f63055{-webkit-box-align:center;-ms-flex-align:center;align-items:center;border-top:.0625rem solid #6b6c72;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:justify;-ms-flex-pack:justify;justify-content:space-between}@media only screen and (min-width:64rem){.Search_search__74f63055{border-top:0;height:3.75rem;margin-top:1.25rem;padding:0 2.5rem}}@media only screen and (min-width:48rem){.Search_searchInputContainer__74f63055{-webkit-box-flex:2.5;-ms-flex:2.5 0 0;flex:2.5 0 0}}@media only screen and (min-width:64rem){.Search_searchInputContainer__74f63055{-webkit-box-flex:3;-ms-flex:3 0 0;flex:3 0 0}}.Search_searchInput__74f63055{background-color:#393a3d!important;border:.0625rem solid #babec5;border-radius:.25rem;width:9.75rem;border-radius:4px;padding:.5rem .5rem .5rem 2.0625rem!important;color:#d4d7dc}@media only screen and (min-width:48rem){.Search_searchInput__74f63055{width:20.875rem}}@media only screen and (min-w

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\four-and-half-star-rating-icon[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2344
Entropy (8bit):	4.397440262386988
Encrypted:	false
SSDEEP:	48:NfaiTn0ZeXjyaiTiNSMBjZicjSGDJ9PHdZaIzSwjZuM1A:J7XjyEGcLP9ZaIMMe
MD5:	9A42E707D61F12D1A96AE100A5BEE075
SHA1:	8BCD3947B5FDF85B8736DB57FDE6FD0E12C5D0A6
SHA-256:	18BC8DFE40AB63F9ACAC6DF4A82B71C40605585C73F611E24C51DA0CBB17D65C
SHA-512:	44F3CAA285DC07AC03F569278ACC7465C517B8774C87E63700678BD4AB30DCFCA3DEEAB26F74C9D8EB98939545D8DE58E0D74D5346A48180447584428AD65395
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/icons/four-and-half-star-rating-icon.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="99" height="20" fill="none" viewBox="0 0 99 20">. <g clip-path="url(#clip0)">. <path fill="#FB0" d="M9.477 2.457a.4.4 0 01.76 0L11.98 7.82a.4.4 0 00.38.277H18a.4.4 0 01.236.723l-4.563 3.316a.4.4 0 00-.145.447l1.743 5.364a.4.4 0 01-.616.447l-4.563-3.315a.4.4 0 00-.47 0l-4.563 3.315a.4.4 0 01-.615-.447l1.743-5.364a.4.4 0 00-.146-.447L1.478 8.82a.4.4 0 01.236-.723h5.64a.4.4 0 00.38-.277l1.743-5.363zM48.906 2.456a.4.4 0 01.761 0L51.41 7.82a.4.4 0 00.38.276h5.64a.4.4 0 01.236.724l-4.563 3.315a.4.4 0 00-.145.447l1.742 5.364a.4.4 0 01-.615.447l-4.563-3.315a.4.4 0 00-.47 0l-4.563 3.315a.4.4 0 01-.616-.447l1.743-5.364a.4.4 0 00-.145-.447L40.908 8.82a.4.4 0 01.235-.724h5.64a.4.4 0 00.38-.276l1.743-5.364zM29.191 2.457a.4.4 0 01.76 0l1.744 5.363a.4.4 0 00.38.277h5.64a.4.4 0 01.235.723l-4.563 3.316a.4.4 0 00-.145.447l1.743 5.364a.4.4 0 01-.616.447l-4.563-3.315a.4.4 0 00-.47 0l-4.563 3.315a.4.4 0 01-.615-.447l1.743-5.364a.4.4 0 00-.146-.447L21.193 8

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\framework.0edde26539d24c5d3def[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	129832
Entropy (8bit):	5.258510530269944
Encrypted:	false
SSDEEP:	1536:3wv3hVo551Re9CG4XFyEXMw9SuSBzR7Fkt2GN7Y1vCi0A1l4:AfhVoZV1ow8l7k7yCi0A1l4
MD5:	9F914F94E141B2C7450897A9E1FDB027
SHA1:	85656AF06A50E596306D84DAE5F7F7DA3B264BEE
SHA-256:	BB0884FEF658DADB8DB16286E9B7FA39A7BC92B3729317A2EC3F92EE11B0302A
SHA-512:	F8F9B4997F7CB101ECA2E6CFD5313F35A26A0E850C0DE5C35DDE3310EBBDBCC63C2E60861BFDB2EB436342AEA266BF6E667370417C94D84E95DBE17324696B9B
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/framework.0edde26539d24c5d3def.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[1],{"+wdc":function(e,t,n){"use strict";var r,l,i,a,o;if("undefined"===typeof window\|\|"function"!==typeof MessageChannel){var u=null,c=null,s=function(){if(null!==u)try{var e=t.unstable_now();u(!0,e),u=null}catch(n){throw setTimeout(s,0),n}},f=Date.now();t.unstable_now=function(){return Date.now()-f},r=function(e){null!==u?setTimeout(r,0,e):(u=e,setTimeout(s,0))},l=function(e,t){c=setTimeout(e,t)},i=function(){clearTimeout(c)},a=function(){return!1},o=t.unstable_forceFrameRate=function(){}}else{var d=window.performance,p=window.Date,m=window.setTimeout,h=window.clearTimeout;if("undefined"!==typeof console){var v=window.cancelAnimationFrame;"function"!==typeof window.requestAnimationFrame&&console.error("This browser doesn't support requestAnimationFrame. Make sure that you load a polyfill in older browsers. https://fb.me/react-polyfills"),"function"!==typeof v&&console.error("This browser doesn't support cancelAnimationFrame.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\franchise-QuickBooks_preferred_logo[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 266 x 53, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9673
Entropy (8bit):	7.96858429997092
Encrypted:	false
SSDEEP:	192:3AJx0wGOHDdJOCR+aJJxRgdGUFO19E3VDbBMonuVgddNseMZWdCuKlz7zHWoxO+:3AJx0OHxJOCZJJxRg8aVnBYVgFM/uK5B
MD5:	E63376571999D3A49CAF6D7213014547
SHA1:	A6A78D4D1966C049AAC0D67683DF6D52BA93846C
SHA-256:	28D809D978BA3A40BF57DB1A182502611F2B9682880486EB8A686320D9203840
SHA-512:	75D3CC7695F4D68275EC44006EABA30F960DC81A2DAE4AA0F624FD60EA019335AAD84A4EB15036B42AA2C0B6131B9D6C58E8C3203181334B3B9B4D2BB80BBFE8
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/cas/dam/IMAGE/A2w6uHLEf/franchise-QuickBooks_preferred_logo.png
Preview:	.PNG........IHDR.......5...........%.IDATx..].x.E..dfzz.p.x!" $3.A.UT4...$...........J<....Q.+7.. (.x....(..r%.I..WU3.......T.zf..].]]..w......i).....s......m..f.&........#3.T...>..k.9n.o.$K....M..#].+.o..._:.o..`TVI.?.%..g..'e...f..N...=...._.wCVI..n.y.u).m...4.PKEk?..H..;O.$.-#+F.:..9!.88<.8o..8.,.8...4.._...s.X.r.......XVI^...U....$onvy......'.[5q)....;..q.z.g.$... .O.dd...>PQ.....L.ZH....8.Az`..,.R.v..r_......J..........6E..z...^.Cn..f.y..G.4i.]...z.@.O.E..,...:.3..K..........`V.+.K..4....C......c..X.p..=n.`......G.$.....g...p..0:&G]..\|.l.d...1P..1@.....[....T.w....G.M..tL.h....:...EO...h.?$..ZZ.q...,?...={..`........p$@"T.v....%..%.....z.A..}!T.r.;4GQ3..,........W.\...n.c..<..a=.j[..QN.x......&..I. ...Abnng.)K.1.....@..Q...Y...../..~.?..K.7t..\|..0....O.FB...a.>....~.V.. .....$UC...V.a.....7..p......d......u..y...f.2......>.Yr...q...m}8@ed...2.{1.-..u..7.=..7..+9.....$.:..s.I. [D.A"{v>;g.e.w.p.y...6..%PEJ....B2.6..Zb.E.C]..m...b....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\get-support-light-icon-outline[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	593
Entropy (8bit):	5.090677565295142
Encrypted:	false
SSDEEP:	12:t4rnpx4W88JzhlllHcTkQ2AnW0V9FUiTUCB3ufCzhlllHchOLJxJ:t4Dp6CzhlllHcwQHvHECzhlllHchOLJH
MD5:	623850580F2588284F800B4A3F31331E
SHA1:	94889AA253FC8F695823DACC3E2406E19F3F56CD
SHA-256:	F32554CF28394A5D84D03B3F46286EDE905EE708301FDBCDCDC2CE2E273E62FD
SHA-512:	3982990B0AD1CC54281422D191DEEC5BD2F588FD509E9A3508A364DEDDA12FB746BC3A8D4246FE7C948B27D83DCA26A8CECD628C87D5A6AC0A9C4712F798AFBF
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/icon-support/get-support-light-icon-outline.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="33" height="33" fill="none" viewBox="0 0 33 33">. <path stroke="#fff" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="3" d="M27.943 24.708H5.22a3.222 3.222 0 01-3.219-3.22V5.253c0-1.751 1.467-3.219 3.219-3.219h22.674a3.222 3.222 0 013.22 3.22v16.189c.047 1.846-1.373 3.266-3.172 3.266zM16.582 24.708v6.485M6.878 31.193h19.456"/>. <path fill="#fff" stroke="#fff" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="3" d="M14.973 10.128l4.875 3.266-4.875 3.22v-6.486z"/>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ggoJFaE71W8[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	50973
Entropy (8bit):	5.804394999213077
Encrypted:	false
SSDEEP:	768:ECKo/w19KtItfx7/WDScVJ++9oUfIK91pmfYBJxkjGa:3KcDSr+9PrKujUP
MD5:	FB0598F4CAC6CAB21D2E1BB2D1E0BCAC
SHA1:	DB4091C33B39AF48E43207CBE661EB2978BD1E44
SHA-256:	58E5A09F9C828DD0ECFE08C0CDA4452312040E49D2A8E07C5C8882180D9B78FB
SHA-512:	3AA4224EF99BF8CEF3D12FFF3187E1FE01C059768364A6AC174B2E74641603A6751A0407FA171FE3CEB3C4E240993D92699B05D533D975757C8A43DF09ECA321
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="robots" content="noindex"><style name="www-roboto" nonce="QnF20ZIqz1aNSBrMSpR7FQ">@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff)format('woff');}</style><script name="www-roboto" nonce="vWFF7ApEFSi7UMOyNF1AFg">if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "E"); document.fonts.load("500 10pt Roboto", "E");}</script><link rel="stylesheet" href="/s/player/51ff6aac/www-player.css" name="www-player" nonce="QnF20ZIqz1aNSBrMSpR7FQ"><style nonce="QnF20ZIqz1aNSBrMSpR7FQ">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100%;}h1 {text-align: center; c

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\googlelogo_clr_74x24px[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\googlelogo_dark54_clr_84x28px[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	4.088043317491995
Encrypted:	false
SSDEEP:	48:CLK/ksGxPgkUfgDL8uflIrLNMhG8Q8sYcl4:Ur1FUfgDAufr/Q8s7l4
MD5:	0FAAFDF5BBDECD4D8899F0FCCE45DCE1
SHA1:	10AA1A950CC3078427495C10A0F7F15A1B5DD227
SHA-256:	1E1D28E3ABB9C8259BB70B96490441AE862AA40D352663BA2542EC1AD49F2D58
SHA-512:	47E7B60E128FAD56CFD1FE1534E59B33B58C24374A8079E71848DD322937F7C769FE4F48455718B28FC8B8784CECBE5FDE3DC9F4F31C2D166AE1FFEB27E7C5B2
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_dark54_clr_84x28px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 84 28" width="84" height="28">. <path d="M11.06 20.38c-5.42 0-9.98-4.42-9.98-9.84S5.64.7 11.06.7c3 0 5.14 1.18 6.75 2.71l-1.9 1.9c-1.15-1.08-2.71-1.92-4.85-1.92C7.1 3.39 4 6.58 4 10.54c0 3.96 3.1 7.15 7.06 7.15 2.57 0 4.03-1.03 4.97-1.97.77-.77 1.27-1.87 1.46-3.38h-6.43V9.66h9.05c.1.48.14 1.06.14 1.68 0 2.02-.55 4.51-2.33 6.29-1.73 1.79-3.93 2.75-6.86 2.75zm23.18-6.33c0 3.65-2.8 6.34-6.24 6.34s-6.25-2.69-6.25-6.34c0-3.67 2.8-6.34 6.25-6.34s6.24 2.67 6.24 6.34zm-2.73 0c0-2.28-1.63-3.84-3.51-3.84s-3.51 1.56-3.51 3.84c0 2.26 1.63 3.84 3.51 3.84s3.51-1.59 3.51-3.84zm16.73 0c0 3.65-2.8 6.34-6.25 6.34-3.44 0-6.24-2.69-6.24-6.34 0-3.67 2.8-6.34 6.24-6.34 3.45 0 6.25 2.67 6.25 6.34zm-2.73 0c0-2.28-1.63-3.84-3.51-3.84s-3.51 1.56-3.51 3.84c0 2.26 1.63 3.84 3.51 3.84 1.89 0 3.51-1.59 3.51-3.84zM61.9 8.09v11.38c0 4.68-2.76 6.6-6.02 6.6-3.07 0-4.92-2.06-5.62-3.74l2.42-1.01c.43 1.03 1.49 2.26 3.19 2.26 2.09 0 3.38-1.3 3.38-3.72v-.91h-.1c-.62.77

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\iframe_api[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	980
Entropy (8bit):	5.285003946038043
Encrypted:	false
SSDEEP:	24:E1+zXIbtEHvk6YtpqAK/HJ2TAXzK5vuHM8aJLtdRWZ4FhQ:E1gXmtEP0PcSAXW5kaJLzwYhQ
MD5:	7A018439ADD0D9FDA47AF7759CE9EF20
SHA1:	39BBA7A843F21C888353ED2CD100A24DF41B44A5
SHA-256:	38557BB8483434B6AD5E1D1A5E3B24EF800F7C63845322E8D67C8F7D041DDE25
SHA-512:	E97704E3A8A19395C936551FEBFBB73B04022955149551B354FD54C05C6F5DD67612A4A2F4A559B6A43E4881E0751B56215D4A02516B737E6450D017A0BD3F4F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube.com/iframe_api
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/51ff6aac\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}if(!window["YT"])var YT={loading:0,loaded:0};if(!window["YTConfig"])var YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;for(var i=0;i<l.length;i++)try{l[i]()}catch(e$0){}};YT.setConfig=function(c){for(var k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",n)}var b=.document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ius-base-theme-harmony-11db3c29[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8093
Entropy (8bit):	5.268590869227668
Encrypted:	false
SSDEEP:	96:sHwKMN7mjgrQvwVDDLV9z11x1a3y6VVIDMJ71v1Yj12H6VEaB5OM53iMhBk:Ppgv4Dd7U3y+qDyhSj12H+EiOM5xfk
MD5:	5378AB563AB6255B23383FFCAD7A418D
SHA1:	D9FD92411DF740084233BD76124CF63C379FBCE9
SHA-256:	83CE5DF2A9CF3B965DC058D361136FFA1C0257D0E0F825A335134ECAFBEB0ACC
SHA-512:	067EAE789A3B37A1BCA9B32DE901C4916323E2EDDB0DA05524EECF36BEB21F3448C29F918A4CB66A7D8A69426AC1B468EB0D8A3ED798C381DC8ACA20251A10F3
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/ius-base-theme-harmony-11db3c29.js
Preview:	(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[30],{1650:function(n,e,i){"use strict";i.r(e),e.default=i.p+"../images/HelveticaNeueLTW1G-Roman-e8869403.ttf"},1651:function(n,e,i){"use strict";i.r(e),e.default=i.p+"../images/HelveticaNeueLTW1G-Lt-bfd008c9.ttf"},1652:function(n,e,i){"use strict";i.r(e),e.default=i.p+"../images/HelveticaNeueLTW1G-Bd-f90343d1.ttf"},2804:function(n,e,i){var t=i(309),a=i(485),o=i(1650),s=i(1651),r=i(1652);e=t(!1);var u=a(o),l=a(s),c=a(r);e.push([n.i,"/* Intuit Inc. theme/style for harmory style */\n\n@font-face {\n font-family: 'iusHelvetica Neue';\n src: url("+u+");\n src: local('Helvetica Neue'), local('HelveticaNeue'), local('Helvetica-Neue'), url("+u+") format('truetype');\n font-weight: normal;\n font-style: normal;\n}\n\n@font-face {\n font-family: 'iusHelvetica Neue';\n src: url("+l+");\n src: local('Helvetica Neue'), local('HelveticaNeue'), local('Helvetica-Neue'), url("+l+") format('truetype');\n font-weight: 300;\n font-st

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ius-base-theme-intuit-ecosystem-f4cbadec[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	34972
Entropy (8bit):	5.689839961233339
Encrypted:	false
SSDEEP:	384:J2T7XwkVaVcfAqboXyEVbOpFo2ry4ib/wLdHdbTPwaII4vJDQh3d95jhuxG4SB2S:QwAFO/wLdHdbTPwa4J8h3d91huxG4Q
MD5:	8C6CC3976DCF928B0D8CC071471E8C6C
SHA1:	7DC78863FBE44DC8E75B0FED648A661FEFFFC92A
SHA-256:	7D8B56C84B1110D18DF5F0514BE0300330085DC2C4B9257EC1A8423F0BA6736A
SHA-512:	EA4D8672AAA38B15C4398458292F642BF7CC1E94F75B6CCC339931AB8F4E0C17948029528919E4499C311426D0D01171EB8A56D72772FED61535F80446DE2D64
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/ius-base-theme-intuit-ecosystem-f4cbadec.js
Preview:	/! For license information please see ius-base-theme-intuit-ecosystem-f4cbadec.js.LICENSE.txt /.(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[32,111],{1645:function(n,e,t){"use strict";t.r(e),e.default="data:image/png;base64,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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ius-base-widget-header-footer-intuit-ecosystem-e954e241[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	65886
Entropy (8bit):	5.954454516575435
Encrypted:	false
SSDEEP:	768:3Sy5wTGZ0osrSARD03HRaNsVYkXCBbCpp7fTZ9h/ndPb1zAj8lQB:3h6CmMUXoC1CptZ9PPbxXq
MD5:	BEFB3D4B71958B474275679D8F1856B2
SHA1:	6F66A50B9A22A169A8CD81287B370FB5814AF528
SHA-256:	9F2BAA7E80D21EADAAE94A2D6AC66C139B5F93230EE5D559F6EF9520283EC868
SHA-512:	AAEC0C27BC10B82B7E7DC9D0922CC721C8F1D1CF6356C3C54ED34897AC467B8708B5B7B8748ADBDACFCD3055B989FC114683297B33A9A33FC2577C6071ECF977
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/ius-base-widget-header-footer-intuit-ecosystem-e954e241.js
Preview:	/! For license information please see ius-base-widget-header-footer-intuit-ecosystem-e954e241.js.LICENSE.txt /.(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[37,111],{2787:function(M,t,i){var u=i(309),e=i(485),n=i(2788),o=i(2789),N=i(2790),j=i(2791),s=i(2792),c=i(2793),L=i(2794),r=i(2795),g=i(2796),a=i(2797),D=i(2798),z=i(2799);t=u(!1);var y=e(n),l=e(o),I=e(N),d=e(j),T=e(s),x=e(c),w=e(L),m=e(r),h=e(g),A=e(a),p=e(D),C=e(z);t.push([M.i,"/* Note: misleading class name: ius-hosted-ui is used on both hosted and non-hosted pages /\n.ius-hosted-ui .ius-hosted-ui-footer-intuit-logo-container,\n.ius-hosted-ui .ius-hosted-ui-header-intuit-logo-container {\n max-width: 100%;\n}\n\n/ Header */\n.ius-hosted-ui .ius-hosted-ui-logo,\n.ius-hosted-ui .ius-hosted-ui-logo-container,\n.ius-hosted-ui .ius-hosted-ui-logo-container .ius-hosted-ui-logo {\n margin: 0 auto;\n display: block;\n width: 100%;\n}\n\n.ius-hosted-ui .ius-hosted-ui-logo-container ul {\n display: block;\n tex

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ius-hostedui-base-ecosystem-d56c3fa8[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	21066
Entropy (8bit):	5.491814815740381
Encrypted:	false
SSDEEP:	384:dv1qaRyMf8PmqDjy24swXiwczLm3JrTP5inity:540f/qDusrPm3B75u
MD5:	A43913B30F3BF6666412D210B07A4844
SHA1:	7FC05734EC0DE5903A5C5E76E112877140299F16
SHA-256:	1FC96431D628EF309A88D59AB494875C55C5F3733D08AC37E75623FBC4A337D2
SHA-512:	F44605040D740CA73486B4DBF45D4FA0FB89B40154C86E43AF371246E14E4952397668E6DE07A15DEC54BBD111AFFA1D0C516D5B244D2C6541D87FBB7D549785
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/ius-hostedui-base-ecosystem-d56c3fa8.js
Preview:	/! For license information please see ius-hostedui-base-ecosystem-d56c3fa8.js.LICENSE.txt /.(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[52,111],{1577:function(e,t,n){"use strict";n.r(t),n.d(t,"ReactComponent",(function(){return u}));var r=n(324);function i(){return(i=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e}).apply(this,arguments)}var o=r.createElement("path",{fillRule:"evenodd",clipRule:"evenodd",d:"M8 0c2.796 0 4.893 2.184 4.996 5.262L13 5.5V7h1a2 2 0 012 2v9a2 2 0 01-2 2H2a2 2 0 01-2-2V9a2 2 0 012-2h1V5.5C3 2.298 5.133 0 8 0zm6 9H2v9h12V9zm-6 2a2 2 0 011.001 3.732L9 15.2c0 .442-.448.8-1 .8-.513 0-.936-.309-.993-.707L7 15.2v-.468A2 2 0 018 11zm0-9C6.332 2 5.088 3.277 5.005 5.282L5 5.5V7h6V5.5C11 3.37 9.728 2 8 2z",fill:"#fff"});function u(e){return r.createElement("svg",i({width:16,height:20,fill:"none",xmlns:"http://www.w3.org/2000/svg"},e),o)}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ius-hostedui-base-qbo-a5a8a18a[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2300
Entropy (8bit):	5.204906080326072
Encrypted:	false
SSDEEP:	48:lDeHr4z48u8TFu8o45o/5m1Cl5S1Cl5g1Cl5t1Cl5q/MS8effC4O5hsn5m1S5S1a:sHi48u8o8hAl3B3v3i3q/MS8h1hs5lxZ
MD5:	FDFCDE2D1C7AAB9741B723AA996438AA
SHA1:	A5844994B63FA4319CF6F7AA92E705C9EF60EA7F
SHA-256:	A102A26A41F30FFE9966BB925DAEDED1FBA5FA0022D95C9EEA4D3260B663082F
SHA-512:	BBCFFCD1523B71370970FF133B4C843B252248A088D7B23381145870CC9196D39699EB69FB23F54644DEBF2356D129A4391ABC4EAB11AA757F7AB09E6168B64D
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/ius-hostedui-base-qbo-a5a8a18a.js
Preview:	(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[55],{2803:function(e,n,o){(n=o(309)(!1)).push([e.i,".ius-hosted-ui.theme-quickbooks body {\n background: #1b304a;\n}\n.ius-hosted-ui.theme-quickbooks .ius-hosted-ui-logo {\n background-position: 0 -180px;\n}\n.ius-hosted-ui.theme-quickbooks .ius.ius-mini-widget .ius-mini-widget-edit-mode {\n background-color: #f3f8ff;\n}\n.ius-hosted-ui.theme-quickbooks .ius .ius-btn-submit {\n padding-bottom: 2px;\n background-color: #3e6cc9;\n background-image: -webkit-gradient(linear, left top, left bottom, from(#3e6cc9), to(#2e50b6));\n background-image: -webkit-linear-gradient(top, #3e6cc9, #2e50b6);\n background-image: -moz-linear-gradient(top, #3e6cc9, #2e50b6);\n background-image: -ms-linear-gradient(top, #3e6cc9, #2e50b6);\n background-image: -o-linear-gradient(top, #3e6cc9, #2e50b6);\n background-image: linear-gradient(to bottom, #3e6cc9, #2e50b6);\n filter: progid:DXImageTransform.Microsoft.gradient(GradientType=0, st

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ius-style-canary-8c85b6bb[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	4016
Entropy (8bit):	5.238353780393632
Encrypted:	false
SSDEEP:	96:sH73Ci3cT9vAFAhGYTH0ybsoYZz/nZBLqQUlsGdYUL:DT94FAUYoi4zzHlm
MD5:	DC7361EE4529F75FF58839203D9352D6
SHA1:	29CBAEEAB729A3AAD97DAED510B5D8D0C1427CAF
SHA-256:	FF9E3600A8FFBB66DDD3DA50BE38F2D87BBDD89E06936A5B5E677C06F57238DB
SHA-512:	03A4F159F0691242E5AAAC9E591EBE07944664EDCBCEEF5F5DC6F61561B30ABE9036098095F49B41EAF1966235207A2FB7962B3D4D9A808B7E8F5F4E5F9E150B
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/ius-style-canary-8c85b6bb.js
Preview:	(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[97],{2783:function(e,n,t){(n=t(309)(!1)).push([e.i,"section #ius-style-canary {\n font-weight: 800 !important;\n}\n\n.ius-style-canary {\n font-weight: 800 !important;\n}",""]),e.exports=n},2830:function(e,n,t){var r=t(308),o=t(2783);"string"==typeof(o=o.__esModule?o.default:o)&&(o=[[e.i,o,""]]);var i={insert:"head",singleton:!1};r(o,i);e.exports=o.locals\|\|{}},308:function(e,n,t){"use strict";var r,o=function(){return void 0===r&&(r=Boolean(window&&document&&document.all&&!window.atob)),r},i=function(){var e={};return function(n){if(void 0===e[n]){var t=document.querySelector(n);if(window.HTMLIFrameElement&&t instanceof window.HTMLIFrameElement)try{t=t.contentDocument.head}catch(e){t=null}e[n]=t}return e[n]}}(),a=[];function c(e){for(var n=-1,t=0;t<a.length;t++)if(a[t].identifier===e){n=t;break}return n}function s(e,n){for(var t={},r=[],o=0;o<e.length;o++){var i=e[o],s=n.base?i[0]+n.base:i[0],u=t[s]\|\|0,f="".concat(s," ").

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ius-widget-header-footer-intuit-ecosystem-default-fa44371c[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	4685
Entropy (8bit):	5.236418860121861
Encrypted:	false
SSDEEP:	96:sH1T6JZ9uRy2kqRT2uR0uRUuRsuR+YQ96lAQZMwQIaTZzraPQ3X4/JTIbq5SC:sT6sRPRdRnRHRvRQ0yQZzQl4EX3bGr
MD5:	FB511A10507806A9A21924ADCD40269D
SHA1:	046ED7605AB5E154C8F377170F1EBCB96A48A495
SHA-256:	785B96448E3C19CB9F0015FD3379718159C8FBCC31E8A47C111688C8F52F9F6C
SHA-512:	E277565568FE318A0BDACE4C1F0D98F0C8986BF230C510A88279BD507F7E4A718C1CBA909F000AAF0060D143E674DE53D38502945500B39363AEDD2DCF14D74F
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/ius-widget-header-footer-intuit-ecosystem-default-fa44371c.js
Preview:	(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[103],{2800:function(e,t,n){(t=n(309)(!1)).push([e.i,"/* Header Logo /\n.ius-hosted-ui .ius-hosted-ui-logo-container .ius-hosted-ui-logo {\n background-position: 0 0;\n}\n\n/ Footer */\n.ius-hosted-ui.ius-hosted-ui-main-footer.ius-hosted-ui-main-footer-widget {\n color: #505050;\n}\n\n.ius-hosted-ui .ius-hostedui-footer-copyright,\n.ius-hosted-ui-main-footer.ius-hosted-ui-main-footer-widget .ius-hostedui-footer-copyright {\n color: #505050;\n}\n\n.ius-hosted-ui.ius-hosted-ui-main-footer.ius-hosted-ui-main-footer-widget a,\n.ius-hosted-ui.ius-hosted-ui-main-footer.ius-hosted-ui-main-footer-widget a:visited,\n.ius-hosted-ui.ius-hosted-ui-main-footer.ius-hosted-ui-main-footer-widget a:hover,\n.ius-hosted-ui.ius-hosted-ui-main-footer.ius-hosted-ui-main-footer-widget a:focus {\n color: #505050;\n}",""]),e.exports=t},2834:function(e,t,n){var o=n(308),i=n(2800);"string"==typeof(i=i.__esModule?i.default:i)&&(i=[[e.i,i,""]]);va

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jquery.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	85589
Entropy (8bit):	5.366541542900301
Encrypted:	false
SSDEEP:	1536:kYE1JVoiB9JqZdXXe2pD3PgoIK6alrUnzZ6a4msO7R6xfWBP4TCddWHs3ghna98o:P4KZ+sOsOV6x6pwhna98HrU
MD5:	6FC159D00DC3CEA4153C038739683F93
SHA1:	5D7E5BBFA540F0E53BD599E4305E1A4E815B5DD1
SHA-256:	8A102873A33F24F7EB22221E6B23C4F718E29F85168ECC769A35BFAED9B12CCE
SHA-512:	A574742476D89BDF841A26FAC51FF0FAE62CFEED95F38A1F3EB0699202D8C8ABE165826D514BCA4B2D69822F2D25901A72C3F081FD646E1238CF082EF0E28EA8
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/jquery/2.2.0/dist/jquery.min.js
Preview:	/! jQuery v2.2.0 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.0",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\js[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	86772
Entropy (8bit):	5.520316775394619
Encrypted:	false
SSDEEP:	1536:Jv+8meNWwB900GfIgevtb/zWrv/A+JlOEcnjcy/PY9JM+a1h9PnZL5c1:Jv5meNWR0LvFWsvTnI3s+F1
MD5:	A4EAE401970FF53DEE7AF47D0C672F20
SHA1:	A41508B6FFE62B7D75208F77316F162AB40561D5
SHA-256:	67ACB392AAA7DB0A516157674DBEB9C96BC64F763D8E6A1DB2D15B0EA091AA13
SHA-512:	379E6FD6453959A3C3815F37D7B09F404C1A701BC3130D1F3F15DB1CCF0AA6D78ED7A5534D03402556384679E5FA3DF4149AB65023A13924724C957513AC2449
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtag/js?id=DC-1996823
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"1",. . "macros":[{. "function":"__e". },{. "function":"__cid". }],. "tags":[{. "function":"__rep",. "once_per_event":true,. "vtp_containerId":["macro",1],. "tag_id":1. }],. "predicates":[{. "function":"_eq",. "arg0":["macro",0],. "arg1":"gtm.js". }],. "rules":[. [["if",0],["add",0]]].},."runtime":[].....};.../.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},da=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:ba(a)}},ea="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},fa;.if("function"==typeof Object.setPrototypeOf)fa=Object.setPrototypeOf;else{var ha;a:{var ia={a:!0},ka={}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\js[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	90862
Entropy (8bit):	5.510352294847394
Encrypted:	false
SSDEEP:	1536:Jv+8meNbwB900GfIge1tb/zWrv/Z2QO+JlOry/PY9JM+a1h9KnZLWo11:Jv5meNbR0L1FWAfvr3s+h1
MD5:	937B0CC1887706FF5B4C00A0DBF583F6
SHA1:	840D2BDA8850B01B880D9C381FF6EB6883FC4B21
SHA-256:	8360A57E1A8A52B37703E1BB4A122CC82FDD1F656BFCD0F02F953EA105C92488
SHA-512:	9989F2749E584618A035DC51ED98F7F3D76C79A5D0FA3072B68EBC49DFEBF967F8E8615D9D661ED323DBF5EF4E52C760B7DA8B3CF9560B09B251E6567E7311CD
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtag/js?id=AW-1030811807&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"1",. . "macros":[{. "function":"__e". },{. "function":"__cid". }],. "tags":[{. "function":"__rep",. "once_per_event":true,. "vtp_containerId":["macro",1],. "tag_id":1. }],. "predicates":[{. "function":"_eq",. "arg0":["macro",0],. "arg1":"gtm.js". }],. "rules":[. [["if",0],["add",0]]].},."runtime":[].....};.../.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},da=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:ba(a)}},ea="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},fa;.if("function"==typeof Object.setPrototypeOf)fa=Object.setPrototypeOf;else{var ha;a:{var ia={a:!0},ka={}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\m=_b,_tp[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	164547
Entropy (8bit):	5.457137253080804
Encrypted:	false
SSDEEP:	3072:rqB6ZJYIkcS5xgiOamGtdwpUDZ8PYTYdT:rWGvkjTgRqdF6pN
MD5:	1EE466F97840D6AFC513D39D4E33D83E
SHA1:	589A8D2CCCDDFB8446B0F867E40648840D97B424
SHA-256:	374A0B209602578214D8C3E045E4695324E0C53BD409EC0FC7F454FCE7C14688
SHA-512:	C5E1F9A2A1E709A84FE7404DB718B6EDF9B3BCE17ADA32462493F04CB840A9F7834125D03ECD076552F0F080EA3506F2B2C292A8911802F164FB1210A0F7C3DB
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_IdentityPoliciesUi=this.default_IdentityPoliciesUi\|\|{};(function(_){var window=this;.try{.var la,aaa,fb,pb,Nb,baa,caa,daa,eaa,faa,gaa,pc,xc,jaa,kaa,maa,naa,Gc,oaa,paa,Jc,raa,Nc,xaa,vaa,yaa,aa,kd,md,zaa,od,pd,Aaa,sd,wd,zd,Caa,Cd,Dd,Daa;_.ba=function(a){return function(){return aa[a].apply(this,arguments)}};_.da=function(a,b){return aa[a]=b};_.ea=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.ea);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b&&(this.Ks=b);this.g=!0};_.ha=function(a){_.fa.setTimeout(function(){throw a;},0)};._.ja=function(a){a&&"function"==typeof a.Tc&&a.Tc()};la=function(a){for(var b=0,c=arguments.length;b<c;++b){var d=arguments[b];_.ka(d)?la.apply(null,d):_.ja(d)}};_.oa=function(){!_.ma&&_.na&&(_.ma=(0,_.na)());return _.ma};_.m=function(a){if(_.ma){var b=_.ma;b.j=b.jh(a)}};_.n=function(){if(_.ma){var a=_.ma;if(a.j){var b=a.j.getId();a.isDisposed()\|\|(pa(a.i[b],(0,_.qa)(a.Gz,a))&&ra(a,4),_.sa(a.u

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\m=byfTOb,lsjVmc,LEikZe[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	36422
Entropy (8bit):	5.464540636115996
Encrypted:	false
SSDEEP:	768:x9MAI0FQSzHD/3GggUXWFAFjirzopa11KBXvZYAhZWdKKdC2uy0:x9MLId6UXg/SMsxZYCX
MD5:	E52A2B5AFCC44DE86B32DD6C43DCC1D0
SHA1:	600E4336A97145871F59144CE902CB3A312A1727
SHA-256:	0CD23A9032B6F1E766E3F04B5B3E29915D4AA6517F10786E6E0160E1C6A147FD
SHA-512:	F8C42A83474EADCA39D95ADDFEA24A6708216195274AC764BE6A18F7F6B8E51ECF837F66C9A40ACA4A261DB45F8255ABE661F70E4814F45A2009D6E3484EE88F
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_IdentityPoliciesUi=this.default_IdentityPoliciesUi\|\|{};(function(_){var window=this;.try{._.Yt=function(a,b){a.sort(b\|\|_.Pa)};._.Zt=function(a,b,c,d){a=d\|\|a;b=b&&""!=b?String(b).toUpperCase():"";if(a.querySelectorAll&&a.querySelector&&(b\|\|c))return a.querySelectorAll(b+(c?"."+c:""));if(c&&a.getElementsByClassName){a=a.getElementsByClassName(c);if(b){d={};for(var e=0,f=0,g;g=a[f];f++)b==g.nodeName&&(d[e++]=g);d.length=e;return d}return a}a=a.getElementsByTagName(b\|\|"");if(c){d={};for(f=e=0;g=a[f];f++)b=g.className,"function"==typeof b.split&&_.Ca(b.split(/\s+/),c)&&(d[e++]=g);d.length=e;return d}return a};_.$t=function(){return _.Ab("Im6cmf").Ta()};._.m("sya");./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var eu,gu,Nfa,hu,Jfa,Ifa,Mfa,Kfa,ju;_.au=function(a,b){this.j=this.O=this.o="";this.$=null;this.u=this.i="";this.s=!1;var c;a instanceof _.au?(this.s=void 0!==b?b:a.s,_.bu(this,a.o),this.O=a.O,this.j=a.j,_.cu(this,a.$),

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mobile-app-icon-feature[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	484
Entropy (8bit):	5.0145374331219825
Encrypted:	false
SSDEEP:	12:t48DAx4SW1DAwh/mWoPcPHg3zMuf3ZVuIZISD6ufL8WiM:t48DA6SYDAwhPok/0zMEu+vD6ELZR
MD5:	EF193886E7C5AECE3ABE2441048AE7B4
SHA1:	388A4814ADEDF0CD7D1B4CFAE37E3B1EEC92DF97
SHA-256:	E6CC20C4F7549853DF8B98EB64E3E842149E8F9531007256288FA153545CA4D1
SHA-512:	3A4A38F2590C076165C579C174365B5042FA74BDDB37BCEFB3508086844B166D70A0AEB7000FD1F08E1F17465765A135E6562144F5E8F58971E735FFB9472B54
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/icon-feature/mobile-app-icon-feature.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="76" height="76" fill="none" viewBox="0 0 76 76">. <rect width="76" height="76" fill="#07C4D9" rx="38"/>. <rect width="24.642" height="31.322" x="26.492" y="22.634" stroke="#fff" stroke-width="3" rx="2"/>. <path fill="#fff" d="M24.864 47.59v3.296c0 1.907 1.576 3.468 3.503 3.468h19.265c1.927 0 3.503-1.561 3.503-3.468V47.59h-26.27z"/>. <path fill="#07C4D9" d="M38.312 53.446a1.926 1.926 0 100-3.852 1.926 1.926 0 000 3.852z"/>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mobile-invoice-payments-product-qbo-us-desktop@2x[1].wdp Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG-XR
Category:	downloaded
Size (bytes):	55914
Entropy (8bit):	7.947925273928674
Encrypted:	false
SSDEEP:	1536:mRq+6GiNjmJTFtpAmccHSmm4dLsf7cjYI4ybc6M:mR8GiNjitpQN4dLsf/yC
MD5:	F8D21C3F0329467705F8954B56EFD0F7
SHA1:	8A9A7E144F4F464F7A8434301B0C91FB0A69AA30
SHA-256:	CB4CE4656FB68C461F349AFA8B1ECC7E7E7C995FF2DE6F512EFF4B23C244FC8E
SHA-512:	DFC7DF7B6FCB601E97D05AD9A859595B0F66B900A3BFAAFAF6F5EF102C58DBAD6FDB7DABED032C856C36B8A92B18D9EB143F6C801B77A55BAA67B8F1D1B487E4
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/product/mobile-invoice-payments-product-qbo-us-desktop@2x.jpg
Preview:	II.. ...$..o.N.K..=wv........................................................................B...........B............................WMPHOTO..E.q....0...,HHR..@......1................p.khZ.5j....,L..r...V..Z.....20l...v...<r.i..7..E..SS......4...BF.d<"b.........D.Y;.l.....X<O..V.e+...y...6.h.t.W5j..d....[.. e=..\..:.q..O..=..d4b..,....,..me.X..._&.L....I.E.....UM...K......P..QBnE.}.._...&!(5.......C.W....q.}.N..z...Q..=..T....n.J..#..R...6....D.n.uG J..Q`7._D.<7p.q.........wcc}..N[.....Y>....)G...5.%....-5.hd.^.".'q.}.W`.p..-...R..3._i).-..m.....o....8...........r.N.. ...^..`.{.`......d.0o.A.....n..&..@.r.4....N3Tv...{%.P .J.........s.T......PZ..Rpf.. u.O....5Y...\|...v..1f#o.!B%UU.$.....8.7.w..Y-...0A.....6.....Q32.j.l..S...t...We..WL.z....h3e."Zq.4-U....".J...%. .4.[Ra...U@[.w..$...... . .A*....7../eD.t+,...h...,.2...6F...G.]....Y.<...eUUU...E.\...E..<8..l.....p..0.jD...UU.UUU.x.L@#~.B..=-..$`..K.".D.......).p.J..E...Y.....Bw..+..>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mobile-quickbooks-payroll-feature-qbo-us-desktop[1].wdp Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG-XR
Category:	downloaded
Size (bytes):	13950
Entropy (8bit):	7.779489198144193
Encrypted:	false
SSDEEP:	384:NXh5b8rZjaZ/F/io5Yo/XMHVpOWhACnD:NhGrZjaJF/iBkXM/OOA2
MD5:	36178B745B88345751B72BB72CCFE718
SHA1:	7D6DD9B96ACE2994ADBE85093899E46A47ED4024
SHA-256:	E58920CD80253288AEAB9CFB6565FBBDFA172DD8669B945217AA99EC38A4B025
SHA-512:	7877251577B1DEC9721F39E3C69953FD04AE9D918D07DF23C74706F867987DA60B223AF18E9C853539CAEAFDE3AA1E0C69415CE17433E1438F8ACFD6E51813F4
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/feature/mobile-quickbooks-payroll-feature-qbo-us-desktop.png
Preview:	II.. ...$..o.N.K..=wv.............................................l..........................B...........B.....................5......WMPHOTO..E.q.k..0...,HHR..@.....1...........0.$....@.(.g......85.buV.l....5.c9AA5.....Mz....E.I'.f..p.<X.-.5.)8......ai..+...P....s.E. .....[..a.Df)H.KJ... .J.....#..9. ....E.W..........O...\s.5N...;.P.0...N]v..Q.\.."@.Hht...T....0..`.m..@`A....J.... ..f...u... ..<.8A..(.0..`.Y`.@59^.0..PF..i..:.T...P..S.o.B.)....J....&..@..Y.\mL... xW....5p..'....,.~..zkz..?...]...W.!\bVx#.a...8.Q.hp.\|h... ...L.9..cR....0.5.X......E9y............ !.....'.!~.Ah#.S.:0.w.w.]!.5.!..s.q;o..p.<pB....UJ...l....XA....+}.-....V.!(...s#.&.J........d..e$Q...E./.R..M'R...H......WV+..".TL.R.;..X........0.......a........P....C;......... #.O.=...>..]...\..Y....D.5......DQ9H.B{@........!.....pK..8.s.4.Z..+D....i..M.D.DO..<t..`.8...6MYo-....z.nI..G+f..k$'..S...[.K....Z0.1..>.d"(.>d......8H.,.-`Y...Q-.H/. .......j..9....&F..4,.h.)(o.....6..g...."....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\navcancl[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2713
Entropy (8bit):	4.1712007174415895
Encrypted:	false
SSDEEP:	24:r3avxU5hzsIVmVMeLmVMyHf63lboxMCLxvriN6LOAPAnQay78eLx5Tb87nVkEhML:upU0GVeLVGBXvrp4n/1a5TI7Ve/G79KX
MD5:	4BCFE9F8DB04948CDDB5E31FE6A7F984
SHA1:	42464C70FC16F3F361C2419751ACD57D51613CDF
SHA-256:	BEE0439FCF31DE76D6E2D7FD377A24A34AC8763D5BF4114DA5E1663009E24228
SHA-512:	BB0EF3D32310644285F4062AD5F27F30649C04C5A442361A5DBE3672BD8CB585160187070872A31D9F30B70397D81449623510365A371E73BDA580E00EEF0E4E
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/navcancl.htm
Preview:	.<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">....<html>.... <head>.. <link rel="stylesheet" type="text/css" href="res://ieframe.dll/ErrorPageTemplate.css" />.... <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.... <title>Navigation Canceled</title>.... <script src="res://ieframe.dll/errorPageStrings.js" language="javascript" type="text/javascript">.. </script>.. <script src="res://ieframe.dll/httpErrorPagesScripts.js" language="javascript" type="text/javascript">.. </script>.. </head>.... <body onLoad="javascript:navCancelInit(); ">.... <table width="730" cellpadding="0" cellspacing="0" border="0">.... Error title -->.. <tr>.. <td id="infoIconAlign" width="60" align="left" valign="top" rowspan="2">.. <img src="res://ieframe.dll/info_48.png" id="infoIcon" alt="Info icon">..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\pay-yourself-salary-draw-photo-us@2x[1].wdp Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG-XR
Category:	downloaded
Size (bytes):	86083
Entropy (8bit):	7.953099610165958
Encrypted:	false
SSDEEP:	1536:SqGuiQ0uX7Vi/J8uQYikfIBOkxOZJkEp9CLrYoujbo4UjCkXYFr7eMQjSf:xGui47Y/J8uQYQFxOZJkEjCwI4U+rhyg
MD5:	80F3468BA2914BE3E771BFCC4A3835F0
SHA1:	FE043344635432A3E4EA152DDBE7D8EAC37C2A34
SHA-256:	C2564CCA47883A50E5B7B860A3A6FDC79F9B5DE2E5F46BE9FBE237858D3B385D
SHA-512:	AE45223F7B74288A53C997940A7AC2AEDB6F4D8EBC4858EF914316E21E92D5EB4E37F8FFAA11E2BF582B0576B49B61FE56B6A7F42E3D7810517B375400D77E5B
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/photo/pay-yourself-salary-draw-photo-us@2x.jpg
Preview:	II.. ...$..o.N.K..=wv.............................................V..........................B...........B.....................O......WMPHOTO..E.q.U..0...,HHR..@......u....It....... .<..... `.L.v.bF.... ;.B.RV5j..SGfgr...%..,k.4..I.\h......."....L.d ...'..bs..p...+....{zv..7,k.......Mt...vA....d../..E.KrE.)=.S..".H...I.U..n...U[..@OL..fL.@......(.)....S....HA._{S.8..,...>.......BL....dzC&.4. 3..B......~..R.NI..~......c...-4..6...J...q}.Zg.P..,./.....5..w......i...zuv..<,q:Y......1%T>s..@.I. ..N..}.-Lc.........."\|t.E..M$P....F/......z.m...xy...u.J...9g{...\......"...\|c.jQ.-...uA......Hu=B.H%._D...p.7..:.S.6..Q....?.V1..b...;.....z:H#.v.....3F....AI.....~F...\|4'.,1l.."Wq..Q.Y..4k.t..Z2..[....s..`..UCN<.....e&hX...:...Oqs.>.jd_...e9.GC. ..[U..e).7..BL.,H~...P...u.v....(...h..#..F..KH.i......B )CAQ....E0..^u...h....Q...4.*.\|...).A..r.....T) .....,.\|..T...T.R...[A.B......p....+..2....L"8.S1A..T..V4...: ..~CA.B.UT=A...p..3..M..K4\|..C.l..M.....I..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\payment-method-credit-card-photo-us@2x[1].wdp Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG-XR
Category:	downloaded
Size (bytes):	35874
Entropy (8bit):	7.935249923570889
Encrypted:	false
SSDEEP:	768:68ynsR12nsfFP0W2817eikD4x6emS7Hj/XYxkCTOqiwpb5Swl:PynLn8P0g17S+mQfYxtTswpb5Swl
MD5:	453913EC93D731B936D94DE1EF8EE3B0
SHA1:	7D8DD36DB23C8D88D9CF8A234BD8A890D40E4F22
SHA-256:	B553C0F67AECB8956F5AD4EDFEE447B9E7F02DAB5CE14AF5A64EF5011381D82D
SHA-512:	D6A93347A26B781AE2378CBA460789A4B7878742ABC814CB800C9B37F8E67D27D7D6D495647653B7132F8411CA576471CC95CF4CF2AE6B074614F065AD562469
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/photo/payment-method-credit-card-photo-us@2x.jpg
Preview:	II.. ...$..o.N.K..=wv.............................................V..........................B...........B............................WMPHOTO..E.q.U..0...,HHR..@......K.........0\|........H..K.e..Gt...h.H...^R.x.".O.r!...+.>.Q.(.}.1(.\..p%..H...IJNZ{.........k...[H...-...wL....fU...F.(.z.....BI..........rkX._Pm).d.m...R.......U....KI.W.l/....J...~.O=&J.~.%.."..f6]@."11u+ikb.b..E...]pQ..].[K.P9.LI..$.W{x..E.dN.@..(...O.&.n...-H+._...[i..U.Q.P.)...i.05...%"x.,$J."._q..wNLt....ms.!362.$.&.x....6..2p ....8..\|.M...K.....e.s.j.2..n./T.6.RU..!..T..0...3t..-.e..8.[P.Ilj.KZ.2..DWe..u.=N....x3..H.Kl..8"%._9B..<2.....q...uai...O/\.P.b...^..FV.=..$.n5.Hou.[d..5..OQ..-.m..Pb..x.D=./zwR16....^...k..'F........R.....'M$.0.............../wU. ..y.tk!H..4F..n..[.....!.Dh.@&.._..pZ...2U\|...5..?.W....Ww2.&C..1..7B..1...1.~.@..74.vw53sC5q..k#Y0.......C...fi...O.......[.G..O..p.E..\O.6..%.l.^r..nB#.z.W..-..Ul..z7.......xJ,...S5X...Q ;<8.!..M...V. )>{.DzJe..p).........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\polyfill.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	25504
Entropy (8bit):	5.262714688005702
Encrypted:	false
SSDEEP:	768:xKLhoBVDGILsLaS+12h6+F/cTxkXHWazhDXZvOCW:zl4XjRoGZvU
MD5:	1618C517E9721FFB26ACFCE4CDEDE192
SHA1:	B269671513199EED87D2BAFE033BD5829EB0CF64
SHA-256:	17349388F9C0E987898C2A87A638C95A003CD427742D684555CE11C7F5CB0858
SHA-512:	A076987C82DF31549E1D4199B1A1A03CD2413ABAC95775F137431A8F2B9B97A68CB3E7DCB96E12C9736E2164A730424C2245E58E609BAF6B2CCC87BAC12F579B
Malicious:	false
Reputation:	low
Preview:	/* Disable minification (remove `.min` from URL path) for more info /..(function(self, undefined) {function Call(t,l){var n=arguments.length>2?arguments[2]:[];if(!1===IsCallable(t))throw new TypeError(Object.prototype.toString.call(t)+"is not a function.");return t.apply(l,n)}function CreateMethodProperty(e,r,t){var a={value:t,writable:!0,enumerable:!1,configurable:!0};Object.defineProperty(e,r,a)}function Get(n,t){return n[t]}function HasOwnProperty(r,t){return Object.prototype.hasOwnProperty.call(r,t)}function IsCallable(n){return"function"==typeof n}function SameValueNonNumber(e,n){return e===n}function ToInteger(n){var i=Number(n);return isNaN(i)?0:1/i===Infinity\|\|1/i==-Infinity\|\|i===Infinity\|\|i===-Infinity?i:(i<0?-1:1)Math.floor(Math.abs(i))}function ToLength(n){var t=ToInteger(n);return t<=0?0:Math.min(t,Math.pow(2,53)-1)}function ToObject(e){if(null===e\|\|e===undefined)throw TypeError();return Object(e)}function GetV(t,e){return ToObject(t)[e]}function GetMethod(e,n){var r=GetV

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\privacy[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	1377
Entropy (8bit):	5.3226460383338825
Encrypted:	false
SSDEEP:	24:hoyiZMiCT2qtMkb57jCSXYwBwWHQUCKNUVqHUCJO1JenHpZpw4wVO1D141dJ1Me4:SyiiiAmkYSX/QZWqCZeUnK4KO9yxoIyH
MD5:	21C0A9AAD304732256214D864F1004BD
SHA1:	57B758474BB89D379DF14D89AB4D1D0349E24820
SHA-256:	43A887675C104765F8A785220E450671D62F1826C188A14B4541860303B0B71D
SHA-512:	09AC0F011D342ECBAC87E4782651A866C0B67FDF720BECAE2EC9F7EFA1A56621439D58ED445E8DA253B97BF297897E9D25F6CFFD6C868FC7CDD871A5DE9029DD
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<title></title><noscript>.<meta content="0; URL=https://policies.google.com/privacy" http-equiv="refresh"></noscript>.<a href="https://policies.google.com/privacy" id="link">https://policies.google.com/privacy</a> .<script nonce="1UnLH2QIzD69sk_xwB5Pxw">.var url="https://policies.google.com/privacy";.try{var curl=window.location.href;var match=curl.match(/\/intl\/([^\/]+)\/policies/);var locale=match&&match[1];var hl;var gl;if(locale){if(locale.indexOf("_")>0){var parts=locale.split("_");hl=parts[0];gl=parts[1]}else hl=locale;if(hl=="ALL")hl=null;if(gl=="ALL")gl=null}.if (URL&&(!hl\|\|!gl)){ var cu=new URL(curl);hl=hl\|\|cu.searchParams.get("hl");gl=gl\|\|cu.searchParams.get("gl");}.if (URL&&curl.indexOf("authuser")!==-1){var cu=new URL(curl);var authuser=parseInt(cu.searchParams.get("authuser"),10);if(!isNaN(authuser))url=url.replace('.com/','.com/u/'+authuser+'/');}.if(!gl){var tld=location.hostname.split(".").pop().toLowerCase();if(tld&&tld.length==2)gl=tld;if(tld=="cn")ur

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\privacy[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	284660
Entropy (8bit):	5.58531300635099
Encrypted:	false
SSDEEP:	1536:qNMoonmPjB/wN7r4RuCzFFD2WJeytcnWS9MIhOV7k5GNoctl6Fb0ax8IJKh8sbzH:qrVqrapLZ7k5GrNJbJhKbyt2n2TCdc
MD5:	5B2E640C39BC6FC6A7753833C9A15CAE
SHA1:	F186304DB69ACCBE7B98254C11F1B663C5153230
SHA-256:	429AF01F17B3B2E589D0BC1560BA506793DC607CAFAAFDB4EDE95D79B0EDE74F
SHA-512:	38E515C27329862675AD5911024AFA039B4FD585763089DA224D46EB6D53CB8B758026B535B642B444B69253601866BFB57A465C03FA2F515E51CCF22A4A1588
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en" dir="ltr"><head><base href="https://policies.google.com/"><meta name="referrer" content="origin"><meta name="viewport" content="initial-scale=1, maximum-scale=5, width=device-width"><meta name="mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="application-name" content="Privacy & Terms . Google"><meta name="apple-mobile-web-app-title" content="Privacy & Terms . Google"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="msapplication-tap-highlight" content="no"><link rel="manifest" crossorigin="use-credentials" href="_/IdentityPoliciesUi/manifest.json"><link rel="home" href="/?lfhs=2"><link rel="msapplication-starturl" href="/?lfhs=2"><link rel="icon" href="//ssl.gstatic.com/policies/favicon.ico" sizes="32x32"><link rel="apple-touch-icon-precomposed" href="//ssl.gstatic.com/policies/favicon.ico" sizes="32x32"><link rel="msapplication-square32x32logo" href="//ssl

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\remote[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	95798
Entropy (8bit):	5.4537573504624595
Encrypted:	false
SSDEEP:	1536:5TVU1rZe45cPdKduxHWc2xh03g6ityTwnEMGO+aY2yF81r5zg09CnA/Rib6k2:w1rZB5cPdKQVIaiETmEMB+aY2yF81r5t
MD5:	D143635D28F5E620B74AC117C5FA6F12
SHA1:	DF47EB91BE2820412C206320DE02063F29B76246
SHA-256:	9155092AAF3C7C47C391185285AF33D9698E5BE3C00FA66A0824D5017EEF9F42
SHA-512:	1B723B7306BC7D079CFF9DFF1F52E0D0BB438BD1D8FCDA6308A92DA4E1ACED7779CAECE045991309480B650E9C86A387A274F90F01BBC16C550707CCA9BA45C5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube.com/s/player/51ff6aac/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var iPa=function(a,b){return g.Ob(a,b)},jPa=function(a,b){b=b instanceof g.Hc?b:g.Nc(b,/^data:image\//i.test(b));.a.src=g.Ic(b)},kPa=function(a){if(a instanceof g.Vh)return a;.if("function"==typeof a.Eg)return a.Eg(!1);if(g.La(a)){var b=0,c=new g.Vh;c.i=function(){for(;;){if(b>=a.length)throw g.ai;if(b in a)return a[b++];b++}};.c.next=c.i.bind(c);return c}throw Error("Not implemented");},lPa=function(a,b,c){if(g.La(a))try{g.Bb(a,b,c)}catch(d){if(d!==g.ai)throw d;.}else{a=kPa(a);try{for(;;)b.call(c,a.next(),void 0,a)}catch(d){if(d!==g.ai)throw d;}}},B6=function(a){g.kk(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.Ra()).toString(36));.return a},C6=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.vk(a.l,b,c)},mPa=function(a,b){var c=[];.lPa(b,function(d){try{var e=g.jr.prototype.l.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e?c.push

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\rs=AA2YrTs2NgFyFTrmnORwxRFtqvVf1ixxAA[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	301
Entropy (8bit):	5.192037061010406
Encrypted:	false
SSDEEP:	6:EZwTcqcA2n6gt9VvKcZWbnRVIM6RoeSjIUVY2rPs8QYMzY/:EZfqcA26gAcZWfp6SVYkUY/
MD5:	1B72E69FDEF1E3682A3EAFE2F5D81BDE
SHA1:	D4F2DAA025C2CF92332E5F5A2E692C6AC1C0512C
SHA-256:	296B72791199FCA038A621E32B7C6AD4EF056FE5C361BCA2797A06D6A0CC0AAA
SHA-512:	47677946F58903C4A903C4A1E8807E388A2470207A43F9FF55A3E9123FF20365D60652FA38AEB3EA5922A701900849AE401C75DE78A3935BFD308810E6474A84
Malicious:	false
Reputation:	low
Preview:	.gb_Qe{background:rgba(60,64,67,0.90);border-radius:4px;color:#ffffff;font:500 12px 'Roboto',arial,sans-serif;letter-spacing:.8px;line-height:16px;margin-top:4px;min-height:14px;padding:4px 8px;position:absolute;z-index:1000}.gb_Hc .gb_Cc{overflow:hidden}.gb_Hc .gb_Cc:hover{overflow-y:auto}sentinel{}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\rs=AA2YrTsi505vDSsc6af8ZUct4Dgm_XWu_g[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	120473
Entropy (8bit):	5.525874203163725
Encrypted:	false
SSDEEP:	1536:3ktVkdoLyWybdwZDtQBSOLkti93b881Ls3Cg+HvaTNCYiHq1s:yYGylNfcYHwbiHV
MD5:	BB348E7E290FDA5004BF273439898F38
SHA1:	59FAAE8269F590DE07D98B8293293F4BC1FA57AD
SHA-256:	858E7B593C70DB80100ED14C893B1A6794460F567166950739C5048C6D37DFFF
SHA-512:	8F68C1B6A0F5DF8790347F18E6DB9AF7CDD1378BBA5F4B0AB3C431B5F5A73EB61502C546B6AB10C0C84DC767FB1AC8BD02D60EBE5BE7C5E6F4F5F5E5482BE126
Malicious:	false
Reputation:	low
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var Gj;_.Fj=function(a){this.j=a\|\|{cookie:""}};_.h=_.Fj.prototype;._.h.set=function(a,b,c){var d=!1;if("object"===typeof c){var e=c.Sl;d=c.Tl\|\|!1;var f=c.domain\|\|void 0;var g=c.path\|\|void 0;var k=c.Kd}if(/[;=\s]/.test(a))throw Error("T`"+a);if(/[;\r\n]/.test(b))throw Error("U`"+b);void 0===k&&(k=-1);this.j.cookie=a+"="+b+(f?";domain="+f:"")+(g?";path="+g:"")+(0>k?"":0==k?";expires="+(new Date(1970,1,1)).toUTCString():";expires="+(new Date(Date.now()+1E3*k)).toUTCString())+(d?";secure":"")+(null!=e?";samesite="+e:"")};._.h.get=function(a,b){for(var c=a+"=",d=(this.j.cookie\|\|"").split(";"),e=0,f;e<d.length;e++){f=(0,_.Za)(d[e]);if(0==f.lastIndexOf(c,0))return f.substr(c.length);if(f==a)return""}return b};_.h.remove=function(a,b,c){var d=void 0!==this.get(a);this.set(a,"",{Kd:0,path:b,domain:c});return d};_.h.mb=function(){return Gj(this).keys};_

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\rw-step-flow[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3410
Entropy (8bit):	5.111445321647234
Encrypted:	false
SSDEEP:	24:v2G0cSD5MnKTBaY88ZYJDl+hqL9VRtKIci5ppNDJmoQYoPsvWYcYhqWwSDay6gGi:vGOFKeDiwfR4G7oWvWw3nFD+eWB5BS
MD5:	BE80A6F7C732AE43D7E157F847D4A663
SHA1:	BE0C3363170B48255E6B14C66D2DF13CD4F73ADB
SHA-256:	0EEBD3DAA2631A1788085FD4A3F0143B35A61030E4E4E156651B46B26BADF29C
SHA-512:	7114E5F1B22BE96C2637FF524EA0899CC6C826DA5BCA334B0FCCC2090AB713660AE283B7DD0444D3504E9D2FCAD553977C950E578AC9ED53C970B8B711F9D564
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/rw-step-flow.css
Preview:	:root{--breakpointsSmall:48rem;--breakpointsMedium:64rem}.RwStepFlow_root__a1b58b5c{width:100%;max-width:90rem;max-width:var(--breakpoints-xlarge);margin:0 auto;padding:1.25rem 0 0;padding:var(--spacing-small) 0 0}@media screen and (min-width:1024px){.RwStepFlow_fullWidth__a1b58b5c{max-width:unset}}.RwStepFlow_headerStep1__a1b58b5c{padding-bottom:2.5rem;padding-bottom:var(--spacing-large)}.RwStepFlow_headerStep2__a1b58b5c{margin-bottom:.625rem;margin-bottom:calc(.125rem + var(--spacing-xxsmall))}.RwStepFlow_billingRate__a1b58b5c{text-transform:lowercase}.RwStepFlow_step2Header__a1b58b5c{background-color:#dbedee;background-color:var(--color-blue-rw-sky);display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:column;flex-direction:column;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center}.RwStepFlow_step2Header__a1b58b5c .RwStepFlow_s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\rw-testimonial-item[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	11296
Entropy (8bit):	5.141820606736831
Encrypted:	false
SSDEEP:	96:yWX//hazQnbz7SK2YoTMQ9vj8yxdA8YYq2+cb152jyOzBJCAj5vB9vX9M3Mk/X:XvZazsF2YNoG8YY/J/rKCs5vX9ZoX
MD5:	6FDA33D9CD9F8705AF51CA451F8B535C
SHA1:	84265CFF1FEECFA3B605548B7C8CCC301BC4DFD6
SHA-256:	B9DDF4DC6D3DF6951E784B628AA4410120C5E7A63F15D6EB4ABD83EDCB42CE58
SHA-512:	7CE451A60E8AB4CC7FFD7A8548D64877147B972231F62047D319493E81BDFEFA880AF2E2AC438004009BA2F6A6664C784A6302DE2A0860F5668B6EDDF6B663BB
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/rw-testimonial-item.css
Preview:	:root{--border-radius-small:0.25rem;--border-radius-medium:0.5rem;--border-radius-pill:624.9375rem;--border-radius-rounded:50%;--border-radius-rw-jumbo:1.75em;--border-radius-rw-standard:1.2em;--border-radius-rw-mini:0.8em;--border-radius-rw-banner:0.5rem;--border-radius-rw-testimonial:1.25rem;--border-width-rw-tertiary:0.125rem;--breakpoints-xsmall:30rem;--breakpoints-small:48rem;--breakpoints-medium:64rem;--breakpoints-large:75rem;--breakpoints-xlarge:90rem;--color-green-01:#108000;--color-green-01-alt:#0d7300;--color-green-02:#2ca01c;--color-green-02-alt:#0e8900;--color-green-03:#53b700;--color-green-04:#7fd000;--color-green-05:#a9e838;--color-green-rw-mint:#94f8ba;--color-green-rw-green:#0fd46c;--color-green-rw-dark:#0a8543;--color-green-rw-darker:#086d37;--color-green-rw-light:#e8f5e3;--color-grey-01:#393a3d;--color-grey-02:#6b6c72;--color-grey-03:#8d9096;--color-grey-04:#babec5;--color-grey-05:#d4d7dc;--color-grey-06:#e3e5e8;--color-grey-07:#eceef1;--color-grey-08:#f4f5f8;--color

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\see-live-bookkeeping-in-action-photo-qbl-us@2x[1].wdp Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG-XR
Category:	downloaded
Size (bytes):	94159
Entropy (8bit):	7.946136226670827
Encrypted:	false
SSDEEP:	1536:ediPtdXnpX1MLNshb+gQs0sNbRlHX0cSngQmZrvd8pi6gd3yIVM:H1dZX1DDQs0sbR5pmg/f6eM
MD5:	2C2F1A2FB8B603FC5D00B98A400035FB
SHA1:	22C3A59F1CC9D7771D4156F7C4685B1D8E3CBAE0
SHA-256:	C953ED6DE7797CF799283D2F633664CFE1677C39B333E070E27D8625E54E16E6
SHA-512:	7765FDA85DB1E59486539B8A843C6A85C9DE1F594B2D85E5D610561C18B74388ACA87A9AF6E3B22152994C33FBD5723B29AF83EFBE00A5E7DA9C29436BCB6762
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/photo/see-live-bookkeeping-in-action-photo-qbl-us@2x.jpg
Preview:	II.. ...$..o.N.K..=wv........................................................................B...........B....................Io......WMPHOTO..E.q....0...,HHR..@................... .........UUUUUUW.!..... azP-....1gL`.]..\|.Y&.d.!.!...................m.!.._/..... T8..)j..'.Z0L_U}P...:.\|.w.f...................XG..C...b.Uuo.....5..~JEs.c...7\lX]....f;d.zX..Fz..... .J............0...%..eF....F..d.^.]I...y....Q.y!.....vH......}.!..B...UUUUUUUUUUV.F..".h ........w...I...t.@YJ.}.A....`W...yA%...."....>?..8!...............D,v..I......}..m..~$.....Z..v..&.4.j..H"..J........."UUUUUUUUUR.U...z...E/k......d_...rM..T.&5.~....vQ\.A...W.dl.Mh..X.......dQ....."UUUUUUUUU...v.+.....W?jl0..BR+w....'..).=.7..B.M..Q.....-.r..U.j.o.y5f.La.%l ...K...!............L....C.........2.2..k....[.!.U..n$M..fTwN..Z........a...Do....Dk.A..UUUUUUT.@........_"..u.p\|b.HH.i.N..A[.n.cE3......^.c....n.....8#"."r.0.../...$..@ .J.......JX.......!?CHtR.7>k.=..J.1.i..c`jx8'%..d<. k.ML.6....Z#Tc

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\sitecatalyst_qboe[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	31443
Entropy (8bit):	5.880535435738317
Encrypted:	false
SSDEEP:	768:ecGq47pcDcl9wSo+Lo3REyhVgsda1agu2tf6rfIaR4XM+mT9N:ecGq47pcDcl9wSo+Lo3KyhVgsQtf6EaX
MD5:	063BF56B08C961F4F33922B8D3AF642C
SHA1:	5ADF5ACCD48DFF28657584468301D5E03AFED927
SHA-256:	DFFACDBD8A654F1F78693FB3E3C5D56E14184C7C8317DE6994B94B7AED40CCB3
SHA-512:	A0A71CCD41696905CFE4D5CF35F64E549B2513D491A3F39C20476D0A995566663D8BE8656AB453A5089DE8DA7F39CB9467CC3F41C4ED4AD1158BD9DD5ED89228
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/sitecatalyst_qboe.js
Preview:	function analyticsClick(c,a){var b=function(){if(typeof(instr_sctimer)!="undefined"&&instr_sctimer==true){var d=(new Date()).getTime()}s=s_gi(s_account);s.linkTrackVars="prop6,eVar6,prop16,evar16,prop20,eVar20,prop24,prop26,eVar32,prop36,eVar36,prop39,eVar39,prop44,eVar44,prop47,prop49,eVar49";s.linkTrackEvents="";s.prop6=s.eVar6=wa.siteName+": "+c;s.prop26=s.prop26;s.prop44=s.eVar44="non-participant";if(wa.experiment44!=null&&wa.experiment44.length>0){s.prop44=s.eVar44=wa.experiment44}if(wa.ageCategory){s.prop16=s.eVar16=wa.ageCategory}else{s.prop16=s.eVar16="unknown"}s.prop20=s.eVar20=wa.companyId;s.prop39=s.eVar39=wa.companyLocale;s.prop36=s.eVar36="";if(c!=null&&c.indexOf("ipd_")!=-1){s.prop36=s.eVar36=c}s.prop49=s.eVar49="";if(typeof(wa.companyEstablished)!="undefined"){if(wa.companyEstablished){s.prop49=s.eVar49="established"}else{s.prop49=s.eVar49="new"}}s.prop24="";if(a){if(a.count){s.prop24=a.count}}if(typeof wa.jobMarker!="undefined"&&wa.jobMarker!=null){s.eVar32=wa.jobMarker

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\svg-close-btn-black-7[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1206
Entropy (8bit):	5.149656201137694
Encrypted:	false
SSDEEP:	24:tuv4v7LV+qZeFVSWnxAB0nMtFn5F9b5yr5tND:c4PVBe7xAanMtF5F9b5yr5tND
MD5:	8736A0A5F49A2A06E82F607F9F3D4F46
SHA1:	18B9543C816550B11DD242647BA0AD6C87BAE58E
SHA-256:	EB4CFFC4ED6EE9464735FF6C3F3A9D7AE398BE47EA9D792C88D95A6BD11D749B
SHA-512:	00B232FD12252306DAECA24BBDA2E06C73DC8A264BAA00F2C25FA5EB3701F1469D2E7EE4CFDA2A3FCE2A26C1D69DA2D273856A18CCA88EC2F3F03F652E6C95A2
Malicious:	false
Reputation:	low
IE Cache URL:	https://siteintercept.qualtrics.com/WRQualtricsShared/Graphics/siteintercept/svg-close-btn-black-7.svg
Preview:	<svg width="17" height="17" viewBox="0 0 17 17" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.<title>svg-close-btn-black-7</title>.<desc>Created using Figma</desc>.<g id="Canvas" transform="translate(538 214)">.<g id="svg-close-btn-black-7">.<g id="Close Buttons">.<g id="Group 9">.<g id="Group">.<g id="Line">.<use xlink:href="#path0_stroke" transform="translate(-535 -211)" fill="#222222"/>.</g>.<g id="Line">.<use xlink:href="#path1_stroke" transform="translate(-535 -211)" fill="#222222"/>.</g>.</g>.</g>.</g>.</g>.</g>.<defs>.<path id="path0_stroke" d="M -1.06066 10.7575L -2.12132 11.8182L -2.71839e-08 13.9395L 1.06066 12.8788L -1.06066 10.7575ZM 12.8788 1.06066L 13.9395 -2.71839e-08L 11.8182 -2.12132L 10.7575 -1.06066L 12.8788 1.06066ZM 1.06066 12.8788L 12.8788 1.06066L 10.7575 -1.06066L -1.06066 10.7575L 1.06066 12.8788Z"/>.<path id="path1_stroke" d="M 1.06066 -1.06066L -2.71839e-08 -2.12132L -2.12132 -2.71839e-08L -1.06066 1.06066L 1.060

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\table-video[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	412
Entropy (8bit):	4.666782287542051
Encrypted:	false
SSDEEP:	12:tr2nlKIabsjMxeAcsFbsr0xrQTa7rAEdsDlt+sio/:tqY8wMMArBTSrAEWDlt9iY
MD5:	4DBF835EB1BF06ED9A6761B23946DB41
SHA1:	3E7C7492891033971050AB89EC71C1610473D185
SHA-256:	1E9D1D3F15755D6C3AF1F06A6C19C1CE709C8778AD8B3D531A15C2D62FE4DC49
SHA-512:	F25171DF6FE63C41158C1070EBB378EEE5AAF2C6194CD040F8075350D4A11F4D0F4C183D14EEB3ABEFE7147AB9FB67AEA683022FDB55BEA4AD06FC9032FDB597
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/table-video.svg
Preview:	<svg width="31" height="22" xmlns="http://www.w3.org/2000/svg"><path d="M30.349 3.441A3.92 3.92 0 0027.605.66C25.188 0 15.5 0 15.5 0S5.812 0 3.395.66A3.92 3.92 0 00.65 3.441C0 5.893 0 11 0 11s0 5.107.651 7.559a3.92 3.92 0 002.744 2.781C5.811 22 15.5 22 15.5 22s9.688 0 12.105-.66a3.92 3.92 0 002.744-2.781C31 16.107 31 11 31 11s0-5.107-.651-7.559zM12 15V6l8 4.5-8 4.5z" fill="#1A73E8" fill-rule="nonzero"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\tag[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	21652
Entropy (8bit):	5.471454971272349
Encrypted:	false
SSDEEP:	192:speXIcO8AiGMXMGc1IajSFkhChE7KYHliXMvjmPc3l7jcCVVmF6Q+3vMjT8LEc6q:sp63F4M3jFkfHlHL91cCVVbO8IkFAjl8
MD5:	E2EE8A9CD68C3D310A4C62FDB4B5C93A
SHA1:	67EB5F9547F1D9DE0A8B143C3B50511C26281399
SHA-256:	145D14BB73E5B03CC73062C2A78C392125B891C62B1CC9D542E5ADBA762F04E7
SHA-512:	4CFEE56CA068134354BE94127465E9AA7BFD8F68E0D2B6D6A367C0E9EACA5CDF5FC39290F6C1CB3DD4DC9319B60A38F810F220AD836C94FEDC991AE17EB82159
Malicious:	false
Reputation:	low
IE Cache URL:	https://lptag-cdn.liveperson.net/tag/tag.js?site=19175958
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.taglets=lpTag.taglets\|\|{};lpTag._tagv="4.1.2";!function(a,b){function c(c,d,e){b._logcnt=b._logcnt\|\|0;H(c,d,e,b._logcnt);if("undefined"!=typeof a.lpTaglogListeners&&a.lpTaglogListeners.constructor===Array)for(var f=0;f<lpTaglogListeners.length;f++)try{lpTaglogListeners[f](c,d,e,b._logcnt)}catch(g){H("Exception="+g.message+" msg="+c,d,e,b._logcnt)}b._logcnt++}function d(a){if(a)for(var b=0;b<a.length;b++)qa[a[b].service]=a[b].baseURI}function e(){for(var a=Ga.PRODUCTION,c=b.ovr&&b.ovr.domain,d=0;d<Ha.length;d++)if(Ha[d].tagDomain===c){a=Ha[d].env;break}return a}function f(a){var b;a=a\|\|e();if("string"==typeof a)for(var c=0;c<Ha.length;c++)if(Ha[c].env===a){b=Ha[c].tagDomain;break}return b}function g(a){var b=qa[a],c="ALL";return b?b:qa[c]}function h(){return qa}function i(a){return l(ra,a)}function j(a){return l(sa,a)}function k(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])}function l(a,b){var c;c="undefined"!=typeof b?"undefined"!=typeof a[b]?

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\tr[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	2.8317663774021287
Encrypted:	false
SSDEEP:	3:CU9yltxlHhn:mn
MD5:	B798F4CE7359FD815DF4BDF76503B295
SHA1:	F8CC6ADDF1707AD236AD9970B0A48F9733D07DA5
SHA-256:	10D8D42D73A02DDB877101E72FBFA15A0EC820224D97CEDEE4CF92D571BE5CAA
SHA-512:	921944DC10FBFB6224D69F0B3AC050F4790310FD1BCAC3B87C96512AD5ED9A268824F3F5180563D372642071B4704C979D209BAF40BC0B1C9A714769ABA7DFC7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.facebook.com/tr/?id=1827482914219447&ev=PageView&dl=https%3A%2F%2Fwww.intuit.com%2F&rl=&if=false&ts=1625899127851&sw=1280&sh=1024&v=2.9.43&r=stable&a=tmensighten&ec=0&o=13&fbp=fb.1.1625899127849.417818535&it=1625899127374&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET
Preview:	GIF89a.............!.......,...........D..;.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\track-event-lib-init.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	9991
Entropy (8bit):	5.465512873167672
Encrypted:	false
SSDEEP:	192:rN9j/QCWuK5yfTAbRb/Wo7YhUhlOmOHrzXyay1POi+EgTECivQs0ToH5bRwIn:hCCWu+Mo/W4YWOmOXXyayZOt/EVoshPn
MD5:	7AE5399DDF7DA15B33F8D14D3753844A
SHA1:	F95B6C615C663931173B67B59F919F6AA40D8147
SHA-256:	2512892D9B4B90DF2F8A7571DCF570B18400450731C57ACDCD1B98FB57B820B4
SHA-512:	BF2BE69CE0A9147C1ED15B57CD01B92A26B71C94CFAB4D8175202E2D9F1497721CD60B72E90BB1A35D8288CCC4E940F7A0DF82858977B344BA5F2848C81770B9
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/analytics-core/track-event-lib-init.min.js
Preview:	!function(){"use strict";var t={d:function(e,n){for(var i in n)t.o(n,i)&&!t.o(e,i)&&Object.defineProperty(e,i,{enumerable:!0,get:n[i]})},o:function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r:function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};t.r(e),t.d(e,{generateFactoryMethod:function(){return T},getDataAttributesFromElement:function(){return E},init:function(){return h}});var n={PROD:"prod",QA:"qa",DEV:"dev",GOLDEN:"golden",PREPROD:"preprod",E2E:"e2e",TEST:"test"},i=Math.floor(Date.now()/1e3),o="INFO",r="ERROR",a={env:"e2e"},c=["Intuit.data.entdataproc.trackstarwebapp"],s=function(t,e,o,r){var a=window.location.href,s=a?encodeURI(a):a,d="7afa70fe-f1cc-11e7-8c3f-9a214cf093ae",u={timestamp:"".concat(i),destination:[]};r&&c.length>1?u.destination.push(c):delete u.destination;var l=[{eventTypes:"APPLICATION_CLIENT",spanId:d,parentSpanId:d,rootSpanId:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\track-event-lib-performance.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2524
Entropy (8bit):	5.082509729121411
Encrypted:	false
SSDEEP:	48:DU9skiq0zlRSl1Wy9Vgkt76yO5B97dMpdJLoHWg5ltD0v2z4zejCgycs6:WynSlAAVgkNK7dMhoHWg5ltc2z4ze20
MD5:	41F96574F309B84D43E60DA09113F1D9
SHA1:	A03FB74485A41D88BD3DB32BE0A24D33111B90DA
SHA-256:	E32E6D94860B1EE5C93D5942F0A17028CBFA414D200A0CFAD9C6563D0EDA07CC
SHA-512:	CBFDA2EE768BD61E1616E300FD21B5AEB763A322017790AD76190BA1145AFA2A8E2AD1F0262225B68DFCEE3E30028C62B4FE3B94787134B3BD2D2017A1239804
Malicious:	false
Reputation:	low
IE Cache URL:	https://uxfabric.intuitcdn.net/analytics/202106092120/track-event-lib-performance.min.js
Preview:	!function(){"use strict";var t={d:function(e,n){for(var r in n)t.o(n,r)&&!t.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},o:function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r:function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};function n(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function r(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function o(t){for(var e=1;e<arguments.length;e++){var o=null!=arguments[e]?arguments[e]:{};e%2?r(Object(o),!0).forEach((function(e){n(t,e,o[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(o)):r(Object(o)).forEach((function(e)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\track-event-lib.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	178496
Entropy (8bit):	5.336831502695198
Encrypted:	false
SSDEEP:	3072:xfNjePzzNF4nytzz4F4/DzzxF4o07UX4S0AGK4ojah0NI5LzzkF4ynb14f:xFSN6yp44xCUX44PaPDkDb1i
MD5:	357104058B0F4EC45306669730F4733D
SHA1:	C5A7F3542A1DF7C8613AC55981EE3305B7CFB6D8
SHA-256:	F285AC55525398836613CA1AB0EAE33C798221396331AB4CE795D32B60F2314F
SHA-512:	C2F464FADFCCEAC75F1B5F19D46160E3A07A715EC2BEC0447EF1191A6BB983B627DED24BEECC2D9024B0DD98A798F2F0B4288296146924B203D2F1B22BAC11D2
Malicious:	false
Reputation:	low
IE Cache URL:	https://uxfabric.intuitcdn.net/analytics/202106092120/track-event-lib.min.js
Preview:	/! For license information please see track-event-lib.min.js.LICENSE.txt /.!function(){var t={8435:function(t){"use strict";t.exports=JSON.parse('{"default_version":"3.3","common":[{"getBrowserProperties":{"parameterValues":["browser_encoding","browser_height","browser_width","browser_java_enabled","browser_plugins","locale","screen_color_depth","url_host_name","url_query_param","campaign","browser_cookies_enabled","page_language"],"targetLocations":{"track":["properties"],"page":["properties"]}}},{"getCookieProperties":{"parameterValues":["aam_segment_ids","adobe_fid"],"targetLocations":{"track":["properties"],"page":["properties"]}}},{"getCookieProperties":{"parameterValues":["pseudonym_id"],"targetLocations":{"track":["properties"],"page":["properties"],"identify":["traits"]}}},{"getCcpaGdprPreferences":{"targetLocations":{"track":["properties"],"page":["properties"],"identify":["traits"]}}},{"getAdobeIntegrationProperties":{"targetLocations":{"track":["integrations.Adobe Analytic

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\utag[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	523629
Entropy (8bit):	5.478167334741791
Encrypted:	false
SSDEEP:	6144:QnfVFWGCqXHpmf5jACUqf+m1MWybvM3KBT94MgM9Wy2MPSLXTljZ/SxoOdiSRQ:QfVFFCqXof5ZUqfB8zkXTlEra
MD5:	E7695EB3D7E821FCFDB66546B146308F
SHA1:	58582213145DEE34381DCD5D210310381EF58DF1
SHA-256:	62229B0E920756053E4998174213B7A58981F8B4A93538C49613050819391D2F
SHA-512:	E554FA727915488D02FB499B01A5B095136B2B3AB0780E7156013600B4222F4A7ECC826FC2894CF9ADCD1C7610B2B97237E5202425D2AECE7FE001B58E0D978A
Malicious:	false
Reputation:	low
IE Cache URL:	https://tags.tiqcdn.com/utag/intuit/sbseg-us/prod/utag.js
Preview:	//tealium universal tag - utag.loader ut4.0.202107012157, Copyright 2021 Tealium.com Inc. All Rights Reserved..var utag_condload=false;window.__tealium_twc_switch=false;if(typeof utag=="undefined"&&!utag_condload){var utag={id:"intuit.sbseg-us",o:{},sender:{},send:{},rpt:{ts:{a:new Date()}},dbi:[],db_log:[],loader:{q:[],lc:0,f:{},p:0,ol:0,wq:[],lq:[],bq:{},bk:{},rf:0,ri:0,rp:0,rq:[],ready_q:[],sendq:{"pending":0},run_ready_q:function(){for(var i=0;i<utag.loader.ready_q.length;i++){utag.DB("READY_Q:"+i);try{utag.loader.ready_q[i]()}catch(e){utag.DB(e)};}},lh:function(a,b,c){a=""+location.hostname;b=a.split(".");c=(/\.co\.\|\.com\.\|\.org\.\|\.edu\.\|\.net\.\|\.asn\.\|\...\.jp$/.test(a))?3:2;return b.splice(b.length-c,c).join(".");},WQ:function(a,b,c,d,g){utag.DB('WQ:'+utag.loader.wq.length);try{if(utag.udoname&&utag.udoname.indexOf(".")<0){utag.ut.merge(utag.data,window[utag.udoname],0);}.if(utag.cfg.load_rules_at_wait){utag.handler.LR(utag.data);}}catch(e){utag.DB(e)};d=0;g=[];for(a=0;a<utag

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\uwt[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	5160
Entropy (8bit):	5.238064597678124
Encrypted:	false
SSDEEP:	96:GiisflioFBirFBggHst6MZXzmr77AQYQCzqdkpEsBtozasKAonJbRNGTEV:GiisflxFUF/Hg477m5JQonvNGTEV
MD5:	CF581D46C3059BF617CB7F732C21A59E
SHA1:	65146BE4274CB8FF073C908DCB01B8DA665BB979
SHA-256:	CE8EDCCDC98A1F67C6D81CE452AC32192A9FC0C7A2828EA2DC6747C291CB5919
SHA-512:	BF838FA8755D2EA9DC494CB4FCD80C4ACAFB6F2A9F8C06B857ED15C9229662EF4945116FCB412A9C9B33C9F85E318596CB383C848D211B37B491012D29567980
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ads-twitter.com/uwt.js
Preview:	twttr=window.twttr\|\|{},twttr.conversion=function(){function e(e,t){var n=!1,i=!0,r=e.document,o=r.documentElement,a=r.addEventListener,s=a?"addEventListener":"attachEvent",u=a?"removeEventListener":"detachEvent",c=a?"":"on",d=function(i){"readystatechange"===i.type&&"complete"!==r.readyState\|\|(("load"===i.type?e:r)[u](c+i.type,d,!1),!n&&(n=!0)&&t.call(e,i.type\|\|i))},f=function(){try{o.doScroll("left")}catch(e){return void setTimeout(f,50)}d("poll")};if("complete"===r.readyState)t.call(e,"lazy");else{if(!a&&o.doScroll){try{i=!e.frameElement}catch(e){}i&&f()}r[s](c+"DOMContentLoaded",d,!1),e[s](c+"load",d,!1)}}function t(){this.pixelId="",this.eventQueue=[[]]}var n="//t.co/i/adsct?type=javascript&version=2.0.0&p_id=Twitter&p_user_id=0",i="https://analytics.twitter.com/i/adsct?type=javascript&version=2.0.0&p_id=Twitter&p_user_id=0",r=function(e,t){var n=t.toLowerCase();for(var i in e)if(i.toLowerCase()===n&&e.hasOwnProperty(i))return!0;return!1},o=function(e,t){var n=t.toLowerCase();for(v

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\w.min.0.5.7[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	34922
Entropy (8bit):	5.265235095949943
Encrypted:	false
SSDEEP:	384:Wbqu++YTAdSKD3QAUeSDklc1VcprPPlWKaHlz8JV9EiLUAuYkLZQp+ViF4FjXfPP:WGu+Yl3QAUeSDenaHlzjpYyey3ICA1U
MD5:	2A0E0671373C94F0362CAB81D7269142
SHA1:	EEA52E2DFD7B74190B95D67237D5EF0C4F438658
SHA-256:	D6C57BE6A729238ECC93263B01675B9ABD1A29E0644203BB82F672D9F0B5DC38
SHA-512:	1B7B49BCE916A7A17D00640500882E2A3A34079F00CE62C995E8A76219A748C0D224A4A59654ABEC675486048D30B148DAFCFE3E969FDEEAAC8430A6030D06DE
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/scripts/exp/w.min.0.5.7.js
Preview:	(function(){"use strict";var a=this;function s(t){return"string"==typeof t}function r(t,e,n){return t.call.apply(t.bind,arguments)}function o(e,n,t){if(!e)throw Error();if(2<arguments.length){var r=Array.prototype.slice.call(arguments,2);return function(){var t=Array.prototype.slice.call(arguments);return Array.prototype.unshift.apply(t,r),e.apply(n,t)}}return function(){return e.apply(n,arguments)}}function i(t,e,n){return(i=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?r:o).apply(null,arguments)}function t(t){var i=nt;function e(){}e.prototype=i.prototype,t.G=i.prototype,t.prototype=new e,(t.prototype.constructor=t).F=function(t,e,n){for(var r=Array(arguments.length-2),o=2;o<arguments.length;o++)r[o-2]=arguments[o];return i.prototype[e].apply(t,r)}}var p=String.prototype.trim?function(t){return t.trim()}:function(t){return t.replace(/^[\s\xa0]+\|[\s\xa0]+$/g,"")};function u(t,e){return-1!=t.indexOf(e)}function h(t,e){return t<e?-1:e<t?1:0}var e

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\webpack-6d84ba157853190aee22[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	6649
Entropy (8bit):	5.178329414883128
Encrypted:	false
SSDEEP:	96:EEYQV6dg7tOVpo7rrBxuGP9TggT+RJtlCYFWvYOHvUpnQu4f6k8Xz9QBSGyFX6zq:VydBirTuiFggSG4Qu26vYlI6zq
MD5:	65F842B5C462B20034904BC2942AEE4B
SHA1:	9B1F4F1972B3F3ABA7BFC35B1FCF42C813E09C64
SHA-256:	EF68E27F987FF399E78CB0EB2D6F8D967DDFBA9937ADA68153F22786116FD45E
SHA-512:	519D17940F5C2772ED8FF27FCB4AD53866B6C9532603677A3530F23FDE39B73A66939A9D01D07A789AD7E8FDBF340CE69B0CBE28FF6C2C032EB5A68E1BFCEEE1
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/webpack-6d84ba157853190aee22.js
Preview:	!function(e){function f(f){for(var d,r,t=f[0],n=f[1],o=f[2],i=0,l=[];i<t.length;i++)r=t[i],Object.prototype.hasOwnProperty.call(a,r)&&a[r]&&l.push(a[r][0]),a[r]=0;for(d in n)Object.prototype.hasOwnProperty.call(n,d)&&(e[d]=n[d]);for(u&&u(f);l.length;)l.shift()();return b.push.apply(b,o\|\|[]),c()}function c(){for(var e,f=0;f<b.length;f++){for(var c=b[f],d=!0,t=1;t<c.length;t++){var n=c[t];0!==a[n]&&(d=!1)}d&&(b.splice(f--,1),e=r(r.s=c[0]))}return e}var d={},a={2:0},b=[];function r(f){if(d[f])return d[f].exports;var c=d[f]={i:f,l:!1,exports:{}},a=!0;try{e[f].call(c.exports,c,c.exports,r),a=!1}finally{a&&delete d[f]}return c.l=!0,c.exports}r.e=function(e){var f=[],c=a[e];if(0!==c)if(c)f.push(c[2]);else{var d=new Promise((function(f,d){c=a[e]=[f,d]}));f.push(c[2]=d);var b,t=document.createElement("script");t.charset="utf-8",t.timeout=120,r.nc&&t.setAttribute("nonce",r.nc),t.src=function(e){return r.p+"static/chunks/"+({0:"commons",1:"framework",5:"c8f7fe3b0e41be846d5687592cf2018ff6e22687",8

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\webworker[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	5.084882053449553
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKjrQDpowECWaee:PLKdXNQKSmwECL
MD5:	CF560E20B5AD7CE32871EB652D0F5D80
SHA1:	90E535A819364A8A867557EDE84BE778299DF47C
SHA-256:	5DFDFFA77335A103EC942C9384DF984B5D38A267D619EE0AC3A045B766BBF2D5
SHA-512:	1F1E39C0FBB6096047FFC549F8379EDF07E1CB95AA4E44CE8580D6BF58757C56C2AFFA9523772302B150EFB363CB79C6BD609968F25352607EF69F64B92669A8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=TbD3vPFlUWKZD-9L4ZxB0HJI
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/TbD3vPFlUWKZD-9L4ZxB0HJI/recaptcha__en.js');

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\www.intuit[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	413
Entropy (8bit):	5.350533419043351
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzw9xUpCX96v6OqPbRm1Z3hqIBaguKhDZuQDrGLKQee0/a2qr:hnMQbwuOaxyCkv4A1Z3htV5ht5a2W2KD
MD5:	1BB2C9537A6373CBBFB5CE0F55D37F08
SHA1:	623DBAE7711A99082D37446B909AF14A78888B00
SHA-256:	52C27B3A35C2E3EF5D8E1DE48D4E760BE2953FB2D3C1ECC8D450EE5883985CD2
SHA-512:	75D5BF683EB05CD8B72EE57218EED21E7648EF0E3B11AAF068004B64C18214207480671807F8B5B90D7AEBD1A7D49D7E42A64A8F4F5290DAA1F02B04CBFE0E7E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><iframe src="https://adservice.google.ch/ddm/fls/i/src=1996823;type=fmsco864;cat=intui399;u10=US;ord=1;num=3690619526638;~oref=https://www.intuit.com/" width="1" height="1" frameborder="0" style="display:none"></iframe></body></html>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\.jsonp[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	287092
Entropy (8bit):	5.820081965140466
Encrypted:	false
SSDEEP:	6144:n0hyc4gStzwfzLM9M2Oviz/ZfE7RHb2dYp2:UfzL6M5R7SYY
MD5:	D44A40059132D62D794B193B462DE79B
SHA1:	4F96D3E5FB9638D6741E5E88BB6CF808FF53F849
SHA-256:	20EA3C3B47188B1F3740FFCFA07204B59DF9A910B961108484B6552C042FDAB8
SHA-512:	C7B3C7A31FEA783098C33F529FC03592FFA3E8670CA81C4190ACE867BD5BBD7411C7995AD80669C4AD2AC066A20D5172D8BE9AFBA0D5C158B7CBCD28529B202E
Malicious:	false
Reputation:	low
IE Cache URL:	https://lptag-cdn.liveperson.net/lptag/api/account/19175958/configuration/applications/taglets/.jsonp?v=2.0&df=0&s=qbvariant&b=0
Preview:	lpTag.callback({"serviceMap":[{"service":"liveEngageUI","account":"19175958","baseURI":"va.le1.liveperson.net"},{"service":"intentAnalyzer","account":"19175958","baseURI":"va.intent.liveperson.net"},{"service":"transporter","account":"19175958","baseURI":"va.transporter.liveperson.net"},{"service":"leBiMstr","account":"19175958","baseURI":"z1.bi.liveperson.net"},{"service":"uconnDomain","account":"19175958","baseURI":"va-ges-uconn.liveperson.net"},{"service":"liveEngageVep","account":"19175958","baseURI":"va.batchelor.liveperson.net"},{"service":"rollover","account":"19175958","baseURI":"va.lp-rollover.liveperson.net"},{"service":"provisionGW","account":"19175958","baseURI":"va.register.liveperson.net"},{"service":"mobileVisit","account":"19175958","baseURI":"dispatch.look.io"},{"service":"agent","account":"19175958","baseURI":"va-e.c.liveperson.net"},{"service":"smsConnector","account":"19175958","baseURI":"va.msg-gw.liveperson.net"},{"service":"openPlatform","account":"19175958","bas

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\0d6da8d8c44e7e3ee95c4d56c19f04e1[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2705
Entropy (8bit):	5.15375624281808
Encrypted:	false
SSDEEP:	48:+GzHx4GLZ/W1wHxJCXvGUQj+ek/Ij0jiO0ijy1uo:+G2UEJIj0jH0PH
MD5:	0D6DA8D8C44E7E3EE95C4D56C19F04E1
SHA1:	9DE1568D596F174CD4646DB5745B58695677B069
SHA-256:	FAA35DC181EB792DB0A4BE4E7031EEC86C044E52773CB082652B788D3B838E72
SHA-512:	D47689B9681F4D5DFF7FD18B4F76F9FBB372B4EB9ADC3FE7C177ED79D19CF2D912831729C73589C4DA833D3D83746DAD3C593A92A5A81440AAE17874F8DDC70C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/0d6da8d8c44e7e3ee95c4d56c19f04e1.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <linearGradient id="linear-gradient" x1="24" y1="77" x2="48" y2="77" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.116" stop-color="#9aa0a6" stop-opacity="0.054"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.201"/>. <stop offset="0.546" stop-color="#9aa0a6" stop-opacity="0.44"/>. <stop offset="0.823" stop-color="#9aa0a6" stop-opacity="0.768"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="48" y1="80" x2="48" y2="16" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#1967d2"/>. <stop offset="0.043" stop-color="#1967d2" stop-opacity="0.942"/>. <stop offset="0.305" stop-color="#1967d2" stop-opacity="0.611"/>. <stop offset="0.54" stop-color="#1967d2" sto

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\10.c6615e2938c004895f03.chunk[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	50294
Entropy (8bit):	5.3032576113782
Encrypted:	false
SSDEEP:	768:ZcxmvAWHKFNANA5AA1RJ6l/dmoR+h1xNw5bRdV+0ODvdAVcLQHgssxDZONd8Wixh:P4WqFNANA5AAoYYcLKgssxDZFWix4k
MD5:	360CDB0BFA2768EEDE2662D7260CF615
SHA1:	CCE3E50BC7FE2C990943A04D55DA73F888FF1211
SHA-256:	0FBF2A4F353DBC1E321F557345D57D2231A57F9D561DA4CB99482A72F589DBE4
SHA-512:	6482D4570AE7001A4A7CADF68BB0DFF0786822E21E3DFADECE991745C4BD6A84A5BCA959D025B67255FB3616F08B45AD6E529DA6045CC048BCCA993452D0E02F
Malicious:	false
Reputation:	low
IE Cache URL:	https://siteintercept.qualtrics.com/dxjsmodule/10.c6615e2938c004895f03.chunk.js?Q_CLIENTVERSION=1.55.0&Q_CLIENTTYPE=web
Preview:	try{(window["WAFQualtricsWebpackJsonP-cloud-1.55.0"]=window["WAFQualtricsWebpackJsonP-cloud-1.55.0"]\|\|[]).push([[10],{17:function(e,t,n){"use strict";n.d(t,"a",function(){return i}),n.d(t,"e",function(){return o}),n.d(t,"d",function(){return a}),n.d(t,"c",function(){return s}),n.d(t,"b",function(){return c});var r=[],i=function(e){var t=e;return"string"==typeof e&&(t=document.getElementById(e)),t},o=function(e,t){var n;13!==e.which&&32!==e.which\|\|(e.preventDefault(),(n=document.querySelector('button, a[href], input, select, textarea, [tabindex]:not([tabindex="-1"])'))&&n.focus(),t())},a=function(e,t,n,i){void 0===i&&(i=!1),r=r\|\|[],e&&(r.push({elementToObserve:e,eventName:t,eventHandler:n,preventRemove:i\|\|!1}),e.addEventListener(t,n,!1))},s=function(e){return"string"==typeof e},c=function(e){return"object"==typeof e&&e instanceof Array}},27:function(e,t){QSI.history&&!window.QTest\|\|(QSI.historyStorage={historySessionName:"QSI_HistorySession",get useCookie(){return"sessionStorage"!==QSI.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\106.66dfa8d338410aba6da8[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	852
Entropy (8bit):	5.210448244504107
Encrypted:	false
SSDEEP:	24:lDuQtI7zIIJC5XjtpWEhqKddunuiOTlXNNTr93GFr65X:lDEoVPDhqKIWlNvJX
MD5:	E23FD24F3FEBA7D61A4D8F8EDAFC77FC
SHA1:	3B45DF51B4F7663A62AC9C9A889FFE7392323D17
SHA-256:	E0E4EDECA26A47FC301982F2432E211723BE379B9CB44FF63B3F4FDC9AC822BE
SHA-512:	09AD95692ECD6E893ECE95E2A1E41EA80D9304CB3EFAC9B6BE819E4F6B95445600F9520AD2E3BA35358F555CB31DB765BEB9A6FB8C7F0FDE59FED9CCA27DB593
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/106.66dfa8d338410aba6da8.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[106],{OUK6:function(e,t,n){"use strict";n.r(t);var r=n("q1tI"),s=n.n(r),i=function(e,t){return function(e){!function(){var t={}.hasOwnProperty;function n(){for(var e=[],r=0;r<arguments.length;r++){var s=arguments[r];if(s){var i=typeof s;if("string"===i\|\|"number"===i)e.push(this&&this[s]\|\|s);else if(Array.isArray(s))e.push(n.apply(this,s));else if("object"===i)for(var a in s)t.call(s,a)&&s[a]&&e.push(this&&this[a]\|\|a)}}return e.join(" ")}e.exports?(n.default=n,e.exports=n):window.classNames=n}()}(t={exports:{}}),t.exports}(),a={};t.default=e=>{e.children;let t=e.innerhtml,n=void 0===t?null:t;const r=i.bind(a);return s.a.createElement("div",{"data-testid":"Codeblock",className:r("root")},n&&s.a.createElement("div",{className:r("innerhtml"),dangerouslySetInnerHTML:{__html:n}}))}}}]);

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\124.8f3d32cc1a297f04f4e7[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	90059
Entropy (8bit):	5.554391997069657
Encrypted:	false
SSDEEP:	768:8hCNCcVoDEPB8elvgVzwZCUePM7pYyCTqMVCJSD0uKw6lPxqwQU+yl2E2ZohP3wO:tVIIewZBuLKvEyl2EPhIS8Hp6n+9/Y
MD5:	32A7CD6360E760F3F6710A9507663CD9
SHA1:	9C1B4151FE2F0F73B8CB2AECA5F82DB60C6CE70F
SHA-256:	26AE8400C4AC90B718993CF8DF787CD3E8D85D932FFDCBF0668B8CDABDB44224
SHA-512:	8815149546A9547C196351376144EEE1EEFEEC5293DB033BE3F9C4E6AAB792E51570BE82DAC3EC35B33E15C920CF5B004F5FDB39C5769EF8D8039AFFDC6816D1
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/124.8f3d32cc1a297f04f4e7.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[124],{QcAy:function(e,t,a){"use strict";a.r(t),a.d(t,"CONSTANTS",(function(){return ze}));var n=a("q1tI"),c=a.n(n);function i(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function r(){return(r=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var a=arguments[t];for(var n in a)Object.prototype.hasOwnProperty.call(a,n)&&(e[n]=a[n])}return e}).apply(this,arguments)}function o(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function l(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?o(Object(a),!0).forEach((function(t){i(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):o(Object(a)).forEach((function(t

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\126.e66f29e0ed31cff95edc[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	2808
Entropy (8bit):	5.234402977312511
Encrypted:	false
SSDEEP:	48:lDFJthQaQO4l+EvX7i4LxTFk4ZmSSA6kvAiAFQ+RBuibrFYtxtu2Q/55HcmyIpp:qOuRvGR4ASPj01RBuibR9bh5HHpp
MD5:	0271ACC296FAFDB86D20CC9DD0A26297
SHA1:	B91E8A8614E38F229E5619BEBBFE1DCFF6B91FB5
SHA-256:	FBA61FD19A8314EBE673883192EA9D3EE3C1B5294BDF4D3B1555F168130A23E1
SHA-512:	FECE3511588CBD01D1779D14D2D8161D1DEFE59DDFDC3CA350295432EF4C30DA5DE2807C2E9A84333DB04796845087FA9FA8AB2A5A3766B61AB6778DD453E84F
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/126.e66f29e0ed31cff95edc.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[126],{Jile:function(d,e,i){"use strict";i.r(e);var _=i("q1tI"),a=i.n(_),n=function(d,e){return function(d){!function(){var e={}.hasOwnProperty;function i(){for(var d=[],_=0;_<arguments.length;_++){var a=arguments[_];if(a){var n=typeof a;if("string"===n\|\|"number"===n)d.push(this&&this[a]\|\|a);else if(Array.isArray(a))d.push(i.apply(this,a));else if("object"===n)for(var l in a)e.call(a,l)&&a[l]&&d.push(this&&this[l]\|\|l)}}return d.join(" ")}d.exports?(i.default=i,d.exports=i):window.classNames=i}()}(e={exports:{}}),e.exports}(),l={"center-aligned":"Heading_module_centerAligned__f5972dd3","left-aligned":"Heading_module_leftAligned__f5972dd3","display-1":"Heading_module_display1__f5972dd3","display-2":"Heading_module_display2__f5972dd3","display-3":"Heading_module_display3__f5972dd3","heading-1":"Heading_module_heading1__f5972dd3","heading-2":"Heading_module_heading2__f5972dd3","heading-3":"Heading_module_heading3__f5972dd3","headi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\155.bbe8e094a499018135d9[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	2723
Entropy (8bit):	5.186850105539476
Encrypted:	false
SSDEEP:	48:lDwi63qDxebFScTqRPV0E60HjHjV/nfHHH3J9PvwuDLDhKUjr5t1tlN1JF4FEg:pgJ0Bn5pYYdKotMEg
MD5:	1DAFD7137AF94D8CB8E52A3CFD58F930
SHA1:	668089DC48B702193D92E9FF53A1E173DE1CC027
SHA-256:	AEBAEA43497F080D1A24B42EFB0D51D7D2D8AA07F5DDC3A6AA98EA88FCC5DD14
SHA-512:	543ED0FB2A5815901274E819091D83CC19A679822F33322FF1236BD3C51B6C841B549C3C47B49EE6008C112922EE688B17A87BF85C8459A136B926EE5528A76C
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/155.bbe8e094a499018135d9.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[155],{vJzh:function(e,l,_){"use strict";_.r(l),_.d(l,"spacerSizes",(function(){return m}));var a=_("q1tI"),r=_.n(a),t=function(e,l){return function(e){!function(){var l={}.hasOwnProperty;function _(){for(var e=[],a=0;a<arguments.length;a++){var r=arguments[a];if(r){var t=typeof r;if("string"===t\|\|"number"===t)e.push(this&&this[r]\|\|r);else if(Array.isArray(r))e.push(_.apply(this,r));else if("object"===t)for(var o in r)l.call(r,o)&&r[o]&&e.push(this&&this[o]\|\|o)}}return e.join(" ")}e.exports?(_.default=_,e.exports=_):window.classNames=_}()}(l={exports:{}}),l.exports}(),o={xxsmall:"Spacer_module_xxsmall__49610627",xsmall:"Spacer_module_xsmall__49610627",small:"Spacer_module_small__49610627",regular:"Spacer_module_regular__49610627",large:"Spacer_module_large__49610627",xlarge:"Spacer_module_xlarge__49610627",xxlarge:"Spacer_module_xxlarge__49610627",xxxlarge:"Spacer_module_xxxlarge__49610627","mobile--xxsmall":"Spacer_module_mob

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\1827482914219447[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	266843
Entropy (8bit):	5.473332836933455
Encrypted:	false
SSDEEP:	6144:Rk1HgCSntDV/HaK8V/Ha8NEPjQHguH3HpQrwz8GWN:kNE73
MD5:	99FA8196B70FE9008310BFE9EFCED2D2
SHA1:	E1A1A3E8F1ACFED612D09AD11B5A2F3DEB2CAC7C
SHA-256:	FB067B1DBC44ACDB9EACABB0C4C4171FB866F4BEB2D67F49E8C0C9AADFB3D122
SHA-512:	46B3FC41C6FB5CC610FD21FE2D1B589421FF3380DC5D7CDE55498D3900A970EF8A58CBB82A22F0868802403A12C3882B7B4DCEC266D7700610A2FE59A86FA273
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\4165cd3aa643abb80fe1953668f67551[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	21529
Entropy (8bit):	5.054443624807617
Encrypted:	false
SSDEEP:	192:X60/6I3ppwx5qaqdT0TM2uTQOi4Rsd22Z1CrTqtqj3UGs8GsCv31Y9YUxzfmUY:/3ppwx5ncTBRsd22Z1CrT8u3M3unY
MD5:	4165CD3AA643ABB80FE1953668F67551
SHA1:	5CB99354ADCF5162232CF6947AEA1423426CF12F
SHA-256:	F3FF1A6BB6153FA3F31FC17B1A8E57F835BB0DA7A9EB6430CFF660A02DEE7E54
SHA-512:	070292AB655F2879879DF09306E5F57BFFCD075B7CBEA27156DD19D981B6E40F441C5DE05EF40DB0AFDB1D6294B4E02A0C304E5E67C4EC4F9011483C0FF7BD8A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/4165cd3aa643abb80fe1953668f67551.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="240" y1="94" x2="316" y2="94" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/>. <stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/>. <stop offset="0.624" stop-color="#9aa0a6" stop-opacity="0.4"/>. <stop offset="0.786" stop-color="#9aa0a6" stop-opacity="0.626"/>. <stop offset="0.946" stop-color="#9aa0a6" stop-opacity="0.898"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="272" y1="68" x2="272" y2="72" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#bdc1c6"/>. <stop offset="1" stop-color="#bdc1c6" st

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\49.3882fac4e2ce7753a3f5[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	35986
Entropy (8bit):	5.386309077196013
Encrypted:	false
SSDEEP:	768:qW7CqT2j0d6+UM1CnN7Uq7rAFJUoTU3CowzyOUpEpCoPTE6opH18V:vUIfUMqes4oHE8c618V
MD5:	DBE09AE807FE560A5B961C35B8661336
SHA1:	3C7B63AC1DE03BB6D864691CD8983952F260172B
SHA-256:	951FB36219E8DBB039912E89F9634095DF61D9E79A06C99A809E85FEE3E2B8B0
SHA-512:	95C87AE6AEDB4D9802FB7A0A5BA47A1D0523A538290E77C432D0574F8CAB16832187D859828C6F343A588712C23583C111A2AD3324EA8A4DE7D9B7A9E4277FF5
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/49.3882fac4e2ce7753a3f5.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[49],{UCnw:function(e,t,n){"use strict";n.r(t),n.d(t,"CONSTANTS",(function(){return ke}));var o=n("q1tI"),i=n.n(o);function r(){return(r=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var o in n)Object.prototype.hasOwnProperty.call(n,o)&&(e[o]=n[o])}return e}).apply(this,arguments)}function a(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){if("undefined"!=typeof Symbol&&Symbol.iterator in Object(e)){var n=[],o=!0,i=!1,r=void 0;try{for(var a,l=e[Symbol.iterator]();!(o=(a=l.next()).done)&&(n.push(a.value),!t\|\|n.length!==t);o=!0);}catch(e){i=!0,r=e}finally{try{o\|\|null==l.return\|\|l.return()}finally{if(i)throw r}}return n}}(e,t)\|\|function(e,t){if(e){if("string"==typeof e)return l(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);return"Object"===n&&e.constructor&&(n=e.constructor.name),"Map"===n\|\|"Set"===n?Array.from(e):"Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\4c5ee41d52605ff6f43538d46a1c0d35[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	12773
Entropy (8bit):	5.021780026284317
Encrypted:	false
SSDEEP:	192:s/HeqPFaqW9UXuhX85+dkoEe3jO+HKFvO:0He2K9UMX8563jn
MD5:	4C5EE41D52605FF6F43538D46A1C0D35
SHA1:	5432F87B16A63087A22EDFA0AF1C5ECA4FADE3C4
SHA-256:	89BBCE254FCE9A0F06C8A2C4E491E4811418E25EE92183EE42C5CD6154778C1D
SHA-512:	7F655C5ADE13D276CF4CE6BEDAAF58F8E1A215018A39529B121B64284B1AE54031858CA4907B0715518BC01B146561F00BA4FDE6B1229CA2CDC3256EF44DCD61
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/4c5ee41d52605ff6f43538d46a1c0d35.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="16" y1="165" x2="40" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/>. <stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/>. <stop offset="0.624" stop-color="#9aa0a6" stop-opacity="0.4"/>. <stop offset="0.786" stop-color="#9aa0a6" stop-opacity="0.626"/>. <stop offset="0.946" stop-color="#9aa0a6" stop-opacity="0.898"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="200" x2="228" xlink:href="#linear-gradient"/>. <linearGradient id="linear-gradient-3" x1="158" y1="137" x2="186" y2="137" gradientUnits="userSpaceOnUse

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\51cd09d6239edc9652bc05ad1d149a5c[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	13177
Entropy (8bit):	4.927867691017123
Encrypted:	false
SSDEEP:	96:+RHGRrrsHa2aDBUKdU1Q7dXphVsVjVArUaNqvqurfGFDJDfQaUZuZyWF2gSM4wEz:4G6HiNq14FvrUaNqvqiGJJjJUE8wnI
MD5:	51CD09D6239EDC9652BC05AD1D149A5C
SHA1:	6C88C92D1C01A8ADDDA86322DEB1487CDA763C8E
SHA-256:	96B628232FE1459C56ADFC5E7877CE0AEC28E17D3B137408B7A2EC278181BDDF
SHA-512:	DA5F756FBFBA4EE0540B651D2DA1A5664A2689E55EC3F7124F284C3B2EC7288E447D7CEB5A54CC372E7E782D8DA0DBCB320E68F71D1A3E675F4085BB88BFB812
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/51cd09d6239edc9652bc05ad1d149a5c.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="293.155" y1="108.155" x2="321.845" y2="79.466" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#bdc1c6"/>. <stop offset="1" stop-color="#bdc1c6" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="46" y1="93" x2="74" y2="93" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#bdc1c6" stop-opacity="0"/>. <stop offset="0.137" stop-color="#bdc1c6" stop-opacity="0.021"/>. <stop offset="0.279" stop-color="#bdc1c6" stop-opacity="0.084"/>. <stop offset="0.424" stop-color="#bdc1c6" stop-opacity="0.189"/>. <stop offset="0.57" stop-color="#bdc1c6" stop-opacity="0.336"/>. <stop offset="0.718" stop-color="#bdc1c6" stop-opacity="0.525"/>. <stop offset="0.864" stop-color="#bdc1c6" stop-opacity="0.753"/>. <sto

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\53.99232c6f1f051dece3c6[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	41700
Entropy (8bit):	5.403091509234792
Encrypted:	false
SSDEEP:	768:CCPGZ3yJ59GCK9TJ2qU2HhsKCr5neT2j0dW3F3CQandfPWvijzuMpJOLLbAMX3V5:/Gw/j/z5nhIDQadlTLQt0k
MD5:	49CD8D3013D070F1E7560D3AC2FCF72E
SHA1:	CD42FE00362C0448739AC4A90CE67D95EE519992
SHA-256:	CDC808AB4417B352EE263F611284C9EF051A3B33CC2F61C74F7E2121A0ACDFA2
SHA-512:	77717D73D92757ABC291CD473BFDE04109DCC237169A0BF1CBC8D38267450273CE7996691D37B26AB48E524BBFE849ECAE58B6D363788E5DADAAE13AE12C7D8A
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/53.99232c6f1f051dece3c6.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[53],{dush:function(e,t,a){"use strict";a.r(t),a.d(t,"CONSTANTS",(function(){return be}));var r=a("q1tI"),n=a.n(r);function i(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function o(){return(o=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var a=arguments[t];for(var r in a)Object.prototype.hasOwnProperty.call(a,r)&&(e[r]=a[r])}return e}).apply(this,arguments)}function c(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function l(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?c(Object(a),!0).forEach((function(t){i(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):c(Object(a)).forEach((function(t)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\546f2b674b407304a2570e71a216e509[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	20864
Entropy (8bit):	4.925372381610842
Encrypted:	false
SSDEEP:	192:7HksMYZuvecIQW8rzTLbzDAEIHN8Ssvopa:7HU12wvopa
MD5:	546F2B674B407304A2570E71A216E509
SHA1:	0ADEC43FBC9DFC2AB1587FD3F6A673FE227B625B
SHA-256:	9D42DE0208263D6D6E7F1A627677B426CCB3E492334293B794CC141F9FA0FB3B
SHA-512:	D8CDC2C086A94E00D2D14CED3D87CB17235AC9F541CD2C6A28F438FA8CDFD064D832B53E40D58CAD4C4D5044FDDCF777DF2BBC2C2902874C1B23EF3096FE2C05
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/546f2b674b407304a2570e71a216e509.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="13" y1="105" x2="49" y2="105" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#bdc1c6" stop-opacity="0"/>. <stop offset="0.137" stop-color="#bdc1c6" stop-opacity="0.021"/>. <stop offset="0.279" stop-color="#bdc1c6" stop-opacity="0.084"/>. <stop offset="0.424" stop-color="#bdc1c6" stop-opacity="0.189"/>. <stop offset="0.57" stop-color="#bdc1c6" stop-opacity="0.336"/>. <stop offset="0.718" stop-color="#bdc1c6" stop-opacity="0.525"/>. <stop offset="0.864" stop-color="#bdc1c6" stop-opacity="0.753"/>. <stop offset="1" stop-color="#bdc1c6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="39" y1="166" x2="75" y2="166" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\57.ffb849e219dade3e966f[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4251
Entropy (8bit):	5.280986544420926
Encrypted:	false
SSDEEP:	96:KCaSpNlY83mb6hyDt/W1LjsCiRwMzIXZ1pWMz3ur:ES7y83mb6et/WdjshmMzIbpNzw
MD5:	F2EDA4F831A01908AC2ED0840B53A83C
SHA1:	58AF2A75316F48E207F0ADCEC97ACDA6D60B6855
SHA-256:	D35D37892C4B249CF5B0D1D758B4D2D81FF620ABBA3C6B98C82A3F1DD5821C02
SHA-512:	CE86296DE871CC169878E11C731B6123335CD1CEFF719130F175E825BA89EF585319D7EAF1C19C45F56336024FAD1DB2DDF02F25E3AF38DA1743A7F80603414C
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/57.ffb849e219dade3e966f.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[57],{XgmH:function(e,r,t){"use strict";t.r(r),t.d(r,"CONSTANTS",(function(){return g}));var a=t("q1tI"),i=t.n(a);function s(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function o(){return(o=Object.assign\|\|function(e){for(var r=1;r<arguments.length;r++){var t=arguments[r];for(var a in t)Object.prototype.hasOwnProperty.call(t,a)&&(e[a]=t[a])}return e}).apply(this,arguments)}function n(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);r&&(a=a.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,a)}return t}function c(e){for(var r=1;r<arguments.length;r++){var t=null!=arguments[r]?arguments[r]:{};r%2?n(Object(t),!0).forEach((function(r){s(e,r,t[r])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):n(Object(t)).forEach((function(r){

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\62.a16ddd141e479243c5d1[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	80512
Entropy (8bit):	5.470260941783817
Encrypted:	false
SSDEEP:	768:PCauEoOOL/EFCNeCLFCOiACPOaINAOG+WjClZcCPOaYjfi14C2hVCjtLCPOaMsPd:5nE/I0itYJ6Clq+fvhRMZOvciNZH8xy6
MD5:	75899A18E9768FC59B8AA3E809EEDA7D
SHA1:	692816E43F241C9DA6494AE6AA97F7F4046EA984
SHA-256:	15880388C14E2179DC146F8AE6A0698995B7809B54AC54FFE0033F2C72A4D28E
SHA-512:	57EF5505C280B204FAD157208316308224A1A2965610C642640462DD787CEFF396351324F716D48C38EE2EA74F33FF1092BA383ABEECA6FF374F7CA44DD4E050
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/62.a16ddd141e479243c5d1.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[62],{aCvZ:function(e,t,a){"use strict";a.r(t),a.d(t,"CONSTANTS",(function(){return rt}));var r=a("q1tI"),n=a.n(r),o=a("i8i4"),i=a.n(o);function l(){return(l=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var a=arguments[t];for(var r in a)Object.prototype.hasOwnProperty.call(a,r)&&(e[r]=a[r])}return e}).apply(this,arguments)}function c(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){if("undefined"!=typeof Symbol&&Symbol.iterator in Object(e)){var a=[],r=!0,n=!1,o=void 0;try{for(var i,l=e[Symbol.iterator]();!(r=(i=l.next()).done)&&(a.push(i.value),!t\|\|a.length!==t);r=!0);}catch(e){n=!0,o=e}finally{try{r\|\|null==l.return\|\|l.return()}finally{if(n)throw o}}return a}}(e,t)\|\|function(e,t){if(e){if("string"==typeof e)return d(e,t);var a=Object.prototype.toString.call(e).slice(8,-1);return"Object"===a&&e.constructor&&(a=e.constructor.name),"Map"===a\|\|"Set"===a?Array.from(e):"Arguments"===a\|\|/^(?:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\63.23b9e19c8072e9d7283f[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	98845
Entropy (8bit):	5.416559722674094
Encrypted:	false
SSDEEP:	1536:Jqlk0za06PH8sTBKRdAzF+DsieSAq1Sb9dWa:QjaFPTByXkM86a
MD5:	379BBB7B4B0B4567C5E525D6308CDDA3
SHA1:	B8E2FFCA967FB46B208E495779DC174180FA0ED1
SHA-256:	6BF73798927C59A5DC41A27CCBD4AC445DA80394171DEC9E1DD3C0210640BD4D
SHA-512:	BEF92ECE45386F573C9B6A5AEE8285A7AB9283C35C730CDFC2F8FA3CD3B523DEC609086ACF6AFA53496F249D4FEA826FCFA6B4EAD026F8020D054C824E75E10E
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/63.23b9e19c8072e9d7283f.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[63],{BSdE:function(e,t,n){"use strict";n.r(t),n.d(t,"CONSTANTS",(function(){return pn}));var a=n("q1tI"),r=n.n(a);function i(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(){return(o=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var a in n)Object.prototype.hasOwnProperty.call(n,a)&&(e[a]=n[a])}return e}).apply(this,arguments)}function c(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function s(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?c(Object(n),!0).forEach((function(t){i(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):c(Object(n)).forEach((function(t)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\84.49ce0c73c92d987c3025[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	31209
Entropy (8bit):	5.382534976950472
Encrypted:	false
SSDEEP:	768:SXqCFH2eQlT2j0ddWB5QFPGU0O13mkaFwFcU:KQIIke2G
MD5:	01966EA5C08ECBAEFB43474E578BF692
SHA1:	1F85366706E00E2C6E70154AE8B804B03F7E7AEF
SHA-256:	683A599661EC10C0F6F2AB46EEDDED1804C86F33F1FDFC6F9340C45898DA6082
SHA-512:	D728A2256680031EEB3FF88C1C5783AE3EE5686ECC8CE1A0B012420AE434D3D2B06A2D6C14943A61800A3C523BA001B961DCFF76529E22A123E7A496DC3C955E
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/84.49ce0c73c92d987c3025.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[84],{nNmu:function(e,t,n){"use strict";n.r(t),n.d(t,"CONSTANTS",(function(){return _e}));var i=n("q1tI"),a=n.n(i);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(){return(o=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(e[i]=n[i])}return e}).apply(this,arguments)}function s(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,i)}return n}function l(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?s(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):s(Object(n)).forEach((function(t)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\HelveticaNeueLTW1G-Bd-f90343d1[1].ttf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	TrueType Font data, 17 tables, 1st "GPOS", 33 names, Macintosh, Copyright \251 2011 Linotype Corp. All rights reserved. This font software may not be reproduced
Category:	downloaded
Size (bytes):	128912
Entropy (8bit):	6.362552793770392
Encrypted:	false
SSDEEP:	3072:ywSI3mOjDzxUwNJ6ZwbyWX0AR8rIK3p/DAA4N/LimlgamWXXAmBCfecTR:F2KAw1bl0p/DYCfecTR
MD5:	88FB8CEA1F705422CF547138270E28AC
SHA1:	ECD0AFDE2BF7F520A267DF42B636C9568177B936
SHA-256:	074C56BA9755C746580AB3E9F474A58A426BB8EC5F032E4D44DEF822C644AA1F
SHA-512:	1E3F634E0AB249E9C29E5AB1D0FC83B56F1518F7B18B075F1D7B8791E9C2EA5400BA99A5788CF0BF72526DD5D4D44D80F6B43663DCE8ABDBB08D9D982591783B
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/images/HelveticaNeueLTW1G-Bd-f90343d1.ttf
Preview:	............GPOSb........-.GSUB:].....\|....OS/2..{........`cmap../.........cvt .P....#L....fpgmc...........gasp............glyf%_6y..*.....head.q+........6hhea.&.....T...$hmtxXr..........kern;{P....(....loca-..U..%0....maxp...f...x... name(......... .post...e........prep..7...!(...#........3..._.<...........x.....S_>...............................-.......................t.....t.]...G......./.\.....................3.......3.......f.{................P. [........LINO. .............L ........#..... ...........9...9...9.}.....s.D.s.......{.B.9...^.j.^...B.-...b.9.}.B.m.9.{.....s.+.s...s.+.s.#.s.!.s.%.s.+.s.P.s...s.+.9.}.9.}...^...b...^.s.B.f.J.{.........N...../.........N.....\...s...........B.......9.N.V...9.N.....1.0.................V...V..././...............}...........B...o...N...B...;.......N...o...w.9.........w.?.w...o...N...o...B...o.L.;.......o.).......L...'...'.-.......w.........9...{...{...{...{...{...{...{...{...{...{.............N...N...N...N...N............./.../.../.../.../..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\HelveticaNeueLTW1G-Lt-bfd008c9[1].ttf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	TrueType Font data, 17 tables, 1st "GPOS", 33 names, Macintosh, Copyright \251 2011 Linotype Corp. All rights reserved. This font software may not be reproduced
Category:	downloaded
Size (bytes):	129512
Entropy (8bit):	6.329774277162036
Encrypted:	false
SSDEEP:	3072:UgwrTgjLsqUisqirosLhDCtIPzKEfbVp8vHVMMddhAoN/LimlgamWXXAmBfB1IFU:UPTmLrsqiroOhQIPzKEf7WHVMMdd1X5
MD5:	58E108B9160DF090CCD8C104C0638193
SHA1:	40AD1EED16118C230DEDBD5138D1C89CD81ECA98
SHA-256:	1D9F0167BD170B3272DD5F08E240CE8753B96431C72A74FE336EDF31455C3962
SHA-512:	1B59B6CCB884B6ED716584598D7A6D29A3B536B245F10CCCA95AC2AC8AA7AB1CC322E4ED97B81039C235975987E343FAA5802CDB82D46E4581AB96359D3CCCCA
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/images/HelveticaNeueLTW1G-Lt-bfd008c9.ttf
Preview:	............GPOS2M~`...h../lGSUB:]..........OS/2.;w........`cmap../.........cvt .y....#L....fpgmc...........gasp.......\....glyf/ @...*.....head.(>4.......6hhea.......T...$hmtxi...........kern............loca4.....%0....maxp...b...x... name.......... ppost...e...@....prep..7...!(...#.........^.._.<...........8.....S_=.....f...............................f.................t.....t.a...O......./.\.............@.,.....3.......3.......f.{................P. [........LINO...............L ........!..... ...........9...9...........s.H.s.;.......P.9.....h.......7...d.9.....{.9.......s.F.s...s.J.s.?.s.=.s.J.s.R.s.h.s.L.s.F.9...9.....^...d...^.L.o.f.`.....V.....N.{.......L.....N...........+./...L.............F.......F.V.....G.s...{.......B.............................Z.....{...'.B...{.'.F...N.'.F.....s.F.L.y.{.}.{.....{.{.}...{.L.y.s.F...{...N...{...?.^...L.y...............................R.....9...........................................B...B.....N...N...N...N...N.{...{...{......................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\HelveticaNeueLTW1G-Roman-e8869403[1].ttf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	TrueType Font data, 17 tables, 1st "GPOS", 33 names, Macintosh, Copyright \251 2011 Linotype Corp. All rights reserved. This font software may not be reproduced
Category:	downloaded
Size (bytes):	130032
Entropy (8bit):	6.333220108596664
Encrypted:	false
SSDEEP:	3072:00SwfAPV8s+iLf/eOGvVybzfcQr8A4N/LimlgamWXXAmBsb3R:0aAt8s+iLf/bBbzfcQrUsTR
MD5:	20BAEBB61E9543FBDE04B40BDA9582B1
SHA1:	A13ADAC8E9DA39A11E27678C232F0C0056B3EB44
SHA-256:	E3A1A35D20C53B02251437723F8ABC994EE6E30217278AE4EA98472F28BF04E2
SHA-512:	5BB2F75573A3AD45BCB4F2DE85B74E0754E5ABEF252465AAA0AD28B3C55348E84E1B630122C4CB6034D092741CF7767D54F212BE8ABC0F2E94E043A1CA0BA7F9
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/images/HelveticaNeueLTW1G-Roman-e8869403.ttf
Preview:	............GPOS...+...`../zGSUB:]..........OS/2..yo.......`cmap../.........cvt ...E..#L....fpgmc...........gasp.......T....glyf.........2head.^?........6hhea.......T...$hmtx............kern...;...P...dloca..j...%0....maxp.......x... namev^........ .post...e...8....prep..7...!(...#........}qR?_.<.................S_>.............................../.......................t.....t.`...K......./.\.............e.......3.......3.......f.{................P. [........LINO.@.............L ........#..... ...........9...9.......h...s.F.s.3.......D.9.....`.......1...b.9.....f.9.......s.V.s...s.1.s.<.s.9.s.H.s.N.s.f.s.R.s.F.9...9.....^...b...^.s.o.f.V./...{.....X...............X.........'.-.V...s.............N./.....N.{.../.L.............h......./.....-...............f.........L.J.....L.J...J.L.J.^.....J.s...........'...........s.....J.......J...}...?.....s.........#.%.........-...b.......1.....9.../.../.../.../.../.../.../.../.../.../...h...h.....X...X...X...X...X................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 20532, version 1.1
Category:	downloaded
Size (bytes):	20532
Entropy (8bit):	7.966425322589798
Encrypted:	false
SSDEEP:	384:tfEIIA0zhnegvIQxhXmqd8lpP/FwL0cV8yP1JSRHbNHlZL7qwZkoEu3HTbpXcyKd:tr0zhnewHxRmqd8PdwLLeR/ZLGwZLbTA
MD5:	DA2721C68B4BC80DB8D4C404F76B118C
SHA1:	3A32E8B7EFBC9DFB52F024D657B8C8C0A80E5804
SHA-256:	BD811625271ACCA47F7DAC48B460F13E08EE947B2A8E17E278C4D5CCB5D9323C
SHA-512:	5110656E41A261BD2A06F8B5B2A362FF8836B4289E1DE0777D83DB8E9D709C4C4248B67653A28FA47AD4AE823021ADBFC587900E142BF6887C2A7C936F7F4C33
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmEU9fBBc-.woff
Preview:	wOFF......P4.......l........................GDEF.......G...d....GPOS..............oGSUB................OS/2...p...Q...`t...cmap...............#cvt .......\...\1..Kfpgm...8...2......$.gasp...l............glyf...x..<e..n..W..hdmx..H....m....+1.3head..IP...6...6...rhhea..I.... ...$....hmtx..I...........S.loca..L8...........maxp..N4... ... .4..name..NT..........:.post..O0....... .m.dprep..OD.......S...)x...1..P......PB..U.=l.@..C)..N4C.\.51.3.......q.q.qu.O...OjC.cA......R.x....%Y....Wm=..mo..k.m....rl...m.g"^..../..[.}.S...\.mD...1..G>..giz...=C..}.y....\|o..c.x.R.r"B........m....../.&./6..5D.AGX.....)<'.)....?.... .Y4>\|1...ES.Gc...FO.>$.../...}RCl..T.zD..uZ4~D.._OK.$.Z.(..JR...\..\..\..\.\......*'n..6:x...b,..$...?.g:./y.iLg.3..l.0.y.g..X..V...d.#O...0....b7{..>.n.iD.V....." e.\A..OR.kwp.].....6p..."ZE..%...e.u3..L..V...W.7b..L.3.L1K...Ts..$6.-b.......9...b@..!1,...v.C....{...dox.G(...\|a%E:.Fn.Nn.^n.........Sf..E)...k....<g..){....\|......DT..N....Hy.F.Jez......._?7.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\KFOlCnqEu92Fr1MmWUlfBBc-[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 20396, version 1.1
Category:	downloaded
Size (bytes):	20396
Entropy (8bit):	7.974131663185347
Encrypted:	false
SSDEEP:	384:SfXdUIIA0zhyKR28ePpAwxZ5M3py8wtshtdf45DEVTGdYb7H2Q/VEgm:Svdj0zhbRmjIQ8wtsV4lEVGdY3/i/
MD5:	68D6DABFE54E245E7D5D5C16C3C4B1A9
SHA1:	7FDAB895EAEBECEDB3FB5473EAB94A1B292CEF19
SHA-256:	A01A632E56731A854F35701AA8C3A6A19A113290D9032FF9048F8064C45383BD
SHA-512:	44EB151F85178A2F9600E85AD43FAE470FABE0F247C9A03E67931B36028E600C7550D9DE2D69B3576A06577A5DEAF54822EE4BDC9DCBB47588D1972C8A959D43
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmWUlfBBc-.woff
Preview:	wOFF......O.................................GDEF.......G...d....GPOS..............oGSUB................OS/2...p...Q...`u...cmap...............#cvt .......H...H+~..fpgm...$...3...._...gasp...X............glyf...d..< ..l..C^]hdmx..H....m....03#7head..H....6...6...\hhea..I,... ...$.&..hmtx..IL........".J.loca..K.............maxp..M.... ... .4..name..M........~..9.post..N........ .m.dprep..N........)v60x...1..P......PB..U.=l.@..C)..N4C.\.51.3.......q.q.qu.O...OjC.cA......R.x....%Y....Wm=..mo..k.m....rl...m.g"^..../..[.}.S...\.mD...1..G>..giz...=C..}.y....\|o..c.x.R.r"B........m....../.&./6..5D.AGX.....)<'.)....?.... .Y4>\|1...ES.Gc...FO.>$.../...}RCl..T.zD..uZ4~D.._OK.$.Z.(..JR...\..\..\..\.\......'n..6:x...b,..$...?.g:./y.iLg.3..l.0.y.g..X..V...d.#O...0....b7{..>.n.iD.V....." e.\A..OR.kwp.].....6p..."ZE..%...e.u3..L..V...W.7b..L.3.L1K...Ts..$6.-b.......9...b@..!1,...v.C....{...dox.G(...\|a%E:.Fn.Nn.^n.........Sf..E)...k....<g..){....\|......DT..N....Hy.F.Jez......._?7.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\KFOlCnqEu92Fr1MmYUtfBBc9[1].ttf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto BlackRegularVersion 2.137; 2017Roboto-Bla
Category:	downloaded
Size (bytes):	35208
Entropy (8bit):	6.392518822467014
Encrypted:	false
SSDEEP:	768:53Dmu13ucOmpIN22bN8o6Ze0XlGV+uM49pSeCu7XniviDffw6mo/quUR:lD13DjSNz0XlG0uL9YeCu7Xn4iTo9o/4
MD5:	4D99B85FA964307056C1410F78F51439
SHA1:	F8E30A1A61011F1EE42435D7E18BA7E21D4EE894
SHA-256:	01027695832F4A3850663C9E798EB03EADFD1462D0B76E7C5AC6465D2D77DBD0
SHA-512:	13D93544B16453FE9AC9FC025C3D4320C1C83A2ECA4CD01132CE5C68B12E150BC7D96341F10CBAA2777526CF72B2CA0CD64458B3DF1875A184BBB907C5E3D731
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc9.ttf
Preview:	........... GDEF......z\...dGPOS......z.....GSUB7b..........OS/2ve#...p....`cmap......r....Lcvt ...=..xX...Zfpgm..#...ud....gasp......zP....glyf.......,..i~hdmx......q ....head...R..l....6hhea.]....p....$hmtx..<...l.....locaK./...j.....maxp......j.... name..9...x....\|post.m.d..z0... prep...C..w ...8...d...(.............P...EX../....>Y..EX../....>Y......9......9......9......9........9......9......01!!.!.......!.5.!.(.<..6......................}.w...x.^.^..^....g...........<......9.........EX../....>Y..EX../....>Y.....+X!...Y..../01.!.!.462..."&....+.g..k.kk.k......J__.__.......^.......&......9........./......9../........01..#.3..#.3.+..._+...v.S.8..S.8.......z.......... !..9.........EX../....>Y..EX../....>Y..EX../....>Y..EX../....>Y......9../.....+X!...Y............../.....+X!...Y...............................01.#.#.#53.#53.3.3.3.3.!.3.!.#.3.#.d.C.C..,..E.D.E.E...,...C.@.,....f.........`...`.....f.Q......S.&.Q...-.r.+./..9...EX../....>Y..EX.!/..!.>Y..!...9........!..9......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\KFOmCnqEu92Fr1Mu4mxM[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 19824, version 1.1
Category:	downloaded
Size (bytes):	19824
Entropy (8bit):	7.970306766642997
Encrypted:	false
SSDEEP:	384:ozNCb8EbW9Wg166uwroOp/taiap3K6MC4fsPPuzt+7NCXzS65XZELt:K4zbWcDVwt230hfs+x+Bb65X2
MD5:	BAFB105BAEB22D965C70FE52BA6B49D9
SHA1:	934014CC9BBE5883542BE756B3146C05844B254F
SHA-256:	1570F866BF6EAE82041E407280894A86AD2B8B275E01908AE156914DC693A4ED
SHA-512:	85A91773B0283E3B2400C773527542228478CC1B9E8AD8EA62435D705E98702A40BEDF26CB5B0900DD8FECC79F802B8C1839184E787D9416886DBC73DFF22A64
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff
Preview:	wOFF......Mp.......P........................GDEF.......G...d....GPOS...............hGSUB............7b..OS/2.......R...`tq#.cmap...........L....cvt .......T...T+...fpgm.......5....w.`.gasp...@............glyf...L..:+..j.....hdmx..Fx...g........head..F....6...6.j.zhhea..G........$....hmtx..G8...]......Vlloca..I.........?.#.maxp..Kt... ... ....name..K........t.U9.post..Ld....... .m.dprep..Lx.......I.f..x...1..P......PB..U.=l.@..B)..w.......Y.e.u.m.C.s...x.h.~R....R.....2.x.....[....#N..m.m.m.mfm....SP..NuM..9]..=.U..!...[........w...\|......^p....H......;...)..........;..EoDo....E.E.D...`.0.GG.aA.H.V.Mx\xA....../..d3.Eb_.J...R.^v........\^ob.}.z..k.x).v$f$..O)+.2..*....y}6`C6b.6cs...l...........!.........<..\|.\|..\|..\|..\|.\|....o....I%.4.L.SI.&C.6..!`...{...c..\.J.(.2.C....V.A..?.M<nG......v..m.;..R.C..aj.H...=..{.>.:.....}i_Y......:....o.&k..KY.2..6k....i]..{,.p}../.....VO3.o].fJ....R-TZ..;...RN..&V...C...3.?.......&..z.s&.D....r,.I...t.R..a$k..Mm..Y.U...+b.%kQ..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\KFOmCnqEu92Fr1Mu4mxM[2].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 20332, version 1.1
Category:	downloaded
Size (bytes):	20332
Entropy (8bit):	7.970235088150752
Encrypted:	false
SSDEEP:	384:U0iwaxoOUPVkOJJSu6SsCKTIRDqG9oHKwZh98OSv+MsgkAOY:75mlUmOSu1guh+fZhLSxkAr
MD5:	DC3E086FC0C5ADDC09702E111D2ADB42
SHA1:	B1138B84FF19EAC5F43C4202297529D389BD09B7
SHA-256:	EA50AC7FDDB61A5CE248A7F8B3A31A98FE16285E076B16E6DA6B4E10910724BB
SHA-512:	10123C785C396CF0844751A014413ECF4D058AD0C00CAAEF5F8FFEF504C370F03EACD0B3C2A49211EEE0877B7AE7D0EF6E01264F04FC910C2660584B5E943BE0
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/roboto/v27/KFOmCnqEu92Fr1Mu4mxM.woff
Preview:	wOFF......Ol.......x........................GDEF.......G...d....GPOS...............!GSUB................OS/2...L...P...`t...cmap...............#cvt .......T...T+...fpgm.......5....w.`.gasp...@............glyf...L..;...m.&.x.hdmx..H....m....'/./head..H....6...6.j.zhhea..H.... ...$....hmtx..H...........]uloca..Kp..........m,maxp..Mp... ... .4..name..M........t.U9.post..N`....... .m.dprep..Nt.......I.f..x...1..P......PB..U.=l.@..C)..N4C.\.51.3.......q.q.qu.O...OjC.cA......R.x...l\..F..3...N..q)..a\|.....^..33..c......p"y.iT....<Gg...!.3...T1...{.g0.u.y........m.\|.k..NF......mox.;...7&.Y..C.R_[.T.c..-.=...9:...aj.G...............O.Q".6...>...(?...~...._.2:..K4....S%...jbr).........e.U..-..X.3.ILQ....z..!.f:...<.W.#...e.c=...&6...lc;;..3<.s<....H.i2..N..t..)Ns...#`..".).[...._.T..T.....+l..=..O.....Z..F...r..eM.f.Y.....-...r.\.s6.r..,...:.<$..#.l..F.$.2#.e..].[.....yR...e.\|{..O..`)..U.0.e.50.Z.b../cM..i.&O._..+.Y.W...;z....j.p._.o..[CL.)n'.UGx..>).X..MJ..Fr..v

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\PolyfillsModule[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	27820
Entropy (8bit):	5.1505252888874224
Encrypted:	false
SSDEEP:	768:yZyy234992On8ksQZW/DME/T4WhuRA7/hALTwCcw:yZnq47NK7//w
MD5:	0D4D68638A5B5EA2A1DEC848F689F827
SHA1:	DBBCBA327DC406AB01D73BADCAD7E9E0EE4BBED2
SHA-256:	644DEC80640939A0E5A16990A49761A81DE7F1E7AA31D7E2DBBEAF07FA4276AB
SHA-512:	192D92061A256FF429ECE319E1728A78A6D1E70D8855B8A901EC0C594E05D5620717E22FC063A1F35115CCE3951AA56C2F7995F18F1E8EC1FBA5E39CC04E5181
Malicious:	false
Reputation:	low
IE Cache URL:	https://siteintercept.qualtrics.com/dxjsmodule/PolyfillsModule.js?Q_CLIENTVERSION=1.55.0&Q_CLIENTTYPE=web
Preview:	try{!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=4)}([function(t,e,n){"use strict";e.a=function(t){var e=this.constructor;return this.then

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\YFWRBOG6.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	497480
Entropy (8bit):	5.32597297381393
Encrypted:	false
SSDEEP:	6144:/5682OWsXOBSFmmWvAijkpefn24QTER1wsc/U:h682OWsXOBSFmmWvAijkSR1wsc/U
MD5:	55B200871F106B6DE0AC1A243A364362
SHA1:	D63E3C753F29C3644072B353A8110A826071A566
SHA-256:	6DB8305A75E2AF39A52E9EDF61C8050B4A8A6F2A21FF0E9C7914FA57B79FD3F1
SHA-512:	084FD91096FF4E314AF5C2FE18E34B705227982EA0983033D3CF75662B5BEE2E4662094C39D86CF472AEFEDDF1659F40135049FE4080FC375547438C0D35E221
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en_US">. . . . <!DOCTYPE html><html lang="en_US"><head><link rel="preload" href="/qbmds-components/styles/sbseg/fonts.css" as="style"/><script type="text/javascript">!function(e,i){e.raas=e.raas\|\|{},e.raas.csLoggingMessages=[];e.raas.CANIUSE=new function(){this.isFeatureSupported=function(t){return!!e[t]},this.addPolyFillForFeature=function(t,e,a){var n;this.attempt=a\|\|3,0<t.length&&(n="https://cdn.polyfill.io/v3/polyfill.min.js?features="+t+"&flags=gated",(a=i.createElement("script")).onload=function(){e()},a.onerror=function(){--this.attempt,0<this.attempt&&this.addPolyFillForFeature(t,e,this.attempt)},a.src=n,(n=i.getElementsByTagName("script")[0]).parentNode.insertBefore(a,n))}}}(window,document);</script><script type="text/javascript">function csLog(o,e){fetch("https://logging.api.intuit.com/v2/log/message",{method:"POST",headers:{"Content-Type":"application/json",Aut

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\_buildManifest[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	911
Entropy (8bit):	5.385096047091662
Encrypted:	false
SSDEEP:	12:Z3WrcQn8QB4v2vmiG2Z8AQ+t8BZDaJB2t8BXKH6Hu/8AQcC2JutN2ta+QR9v5rzw:Z9Q8QG2A+u6JB2KPO/JQcC1wUjXt3a
MD5:	84089416153ACB733555A907A9C386A9
SHA1:	7EC13014681184BB96E9B8EE8E800899BF3F5C8D
SHA-256:	08AFB34B9A76975B87822852FFBAB7342BF9464CF92795E9D0A9AB72DDFEAD26
SHA-512:	EE860F9F24C7D2468059F61CD976CBC6F3295521F40CB210E36258BA0563198D48F8DE49F19D4D3AAE53D34D9C47922C9EC01CD2120D5DA255F4046A624D6AE5
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/makF5OCk0XixpV5rl5Nur/_buildManifest.js
Preview:	self.__BUILD_MANIFEST = (function(a,b){return {__rewrites:[],"/_empty_document":["static\u002Fchunks\u002Fpages\u002F_empty_document-c75aaf86a9727ec4b1ee.js"],"/_error":["static\u002Fchunks\u002Fpages\u002F_error-bb067adcd641a75733eb.js"],"/_fragment_document":["static\u002Fchunks\u002Fpages\u002F_fragment_document-2d2f369eaa48b8a2c58a.js"],"/fragment/[...slug]":[a,b,"static\u002Fchunks\u002Fpages\u002Ffragment\u002F[...slug]-91f6c772d3f4dc99df4d.js"],"/page/[...slug]":[a,b,"static\u002Fchunks\u002Fpages\u002Fpage\u002F[...slug]-1b8a7a14999c453e9c68.js"],sortedPages:["\u002F_app","\u002F_empty_document","\u002F_error","\u002F_fragment_document","\u002Ffragment\u002F[...slug]","\u002Fpage\u002F[...slug]"]}}("static\u002Fchunks\u002Fd9b0afecf817124ac4331c174102947b1f764f14.a2bd21269a1f6b5cef21.js","static\u002Fcss\u002F9a86761538f08b40db66.css"));self.__BUILD_MANIFEST_CB && self.__BUILD_MANIFEST_CB()

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\activityi;src=1996823;type=fmsco864;cat=intui399;u10=US;ord=1;num=3690619526638[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	414
Entropy (8bit):	5.348921069256578
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzw9xUpCX96v6OqPbRm1ZHhqIBaguKhDZuQDrGLKQee0/a2qr:hnMQbwuOaxyCkv4A1ZHhtV5ht5a2W2KD
MD5:	823D65B417ED0EBF6DE19030EE0A1F88
SHA1:	4C2C802E288251C37B44648B4329FFD0285EC139
SHA-256:	E733AA6DCB30611D3B77531E48774DD65402D62372ECEFC04522A3CA6C60D60F
SHA-512:	0D34EDAD85B9B3595D0F3C0A474268E13C8AEE541063DC10BCFAB28B31301B8B2F7EC1326A07849513F53C2F1BC44C25BCC61C611B1C8B7B172DF475806010B2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><iframe src="https://adservice.google.com/ddm/fls/i/src=1996823;type=fmsco864;cat=intui399;u10=US;ord=1;num=3690619526638;~oref=https://www.intuit.com/" width="1" height="1" frameborder="0" style="display:none"></iframe></body></html>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\activityi;src=8344993;type=int_00;cat=intui006;ord=6480948041477;gtm=2od770;auiddc=406322288.1625899127;~oref=https___www.intuit[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	380
Entropy (8bit):	5.473367127743539
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzw9xUpCX96v6OqPbRmEH7f/3/UMMbldzTRQeEQpRi:hnMQbwuOaxyCkv4AEH733/UVbldSIRi
MD5:	90D9530C2752DB604870C7F27907AC81
SHA1:	6B6EC0827AD7903654ED6D82BA744F7D9DA53DC9
SHA-256:	2E82D37971A6C3E26146968D62F0A89448E413E62AB55311247890491E387639
SHA-512:	35A98E85F5C4C2EFBFA75DA36E0F1482BD158EBC917D914B28CCE584EE76D00898DAAF9ACE5D76BF52F33BF58B737FEF3FA5C0EEE298A837404B05D41B5E4DDB
Malicious:	false
Reputation:	low
IE Cache URL:	https://8344993.fls.doubleclick.net/activityi;src=8344993;type=int_00;cat=intui006;ord=6480948041477;gtm=2od770;auiddc=406322288.1625899127;~oref=https%3A%2F%2Fwww.intuit.com%2Fprivacy%2Fstatement%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/src=8344993;type=int_00;cat=intui006;ord=6480948041477;gtm=2od770;auiddc=*;~oref=https%3A%2F%2Fwww.intuit.com%2Fprivacy%2Fstatement%2F"/></body></html>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\anchor[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	42012
Entropy (8bit):	5.886090493542882
Encrypted:	false
SSDEEP:	768:v/S1y3q3YepAFkQ9oX0Ytf3O5k8+FeLc+MakQhn8UocZ3:Kwq3Np7QWX0Wf++JeLcXrsocZ3
MD5:	C4B4ACF385675EA3FB7CF3849ABC7188
SHA1:	EDCE7A1576C7EB5B990BA81E452731F1F847919B
SHA-256:	65788D9FC5EF275A5864611871C1F5E03EFB0CAD869EB37210D878D9A8E82D0E
SHA-512:	4FF8DFD97559D5D45C12D75DBCFD39B06178DBFD126F002B51265AD3203D79C4E8F46569BBF36348B3A7F428505F6EB66125381941C05366417A41664DD71786
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<title>reCAPTCHA</title>.<style type="text/css">.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxP.ttf) format('truetype');.}.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 500;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc9.ttf) format('truetype');.}.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 900;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc9.ttf) format('truetype');.}..</style>.<link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/TbD3vPFlUWKZD-9L4ZxB0HJI/styles__ltr.css">.<script nonce="46aHnOQMG0GEsQCjI6U3WQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/rec

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\anchor[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	42705
Entropy (8bit):	5.887248682208468
Encrypted:	false
SSDEEP:	768:v/So4Z3YepAFkQ9oX0Ytf3O5k8+FeLcnKP+40fhbmZigUn:74Z3Np7QWX0Wf++JeLcnKP+ThJn
MD5:	F18A7B60A994CE39D45023968BF389F0
SHA1:	0B1E1ECEFC666EF1B810E1AAD842AB2BB77F2FBB
SHA-256:	259E3B75546B59720B3769E3DD2F56A17980A8D0F109642EAEB1AEFAC51721C4
SHA-512:	E304029C107341C48B09B01E8E62BFFE52B41148BDC7A58A4194A63E99D507ED142271C38CE708D29DF217C46988B536B07E315F954334681E74F0D54990D457
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<title>reCAPTCHA</title>.<style type="text/css">.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxP.ttf) format('truetype');.}.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 500;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc9.ttf) format('truetype');.}.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 900;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc9.ttf) format('truetype');.}..</style>.<link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/TbD3vPFlUWKZD-9L4ZxB0HJI/styles__ltr.css">.<script nonce="GMbcK+xCcrsBdrGBf94heQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/rec

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\avenir-100[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 10108, version 1.0
Category:	downloaded
Size (bytes):	10108
Entropy (8bit):	7.956172993828042
Encrypted:	false
SSDEEP:	192:R+YD6xBjP1R2coPxb4veKltcb3WQRSkJ+RyPfVOYMJatrdiVTfCxCM/:R+YD6tWP6tcb3XRS40W9OtgDiVCsM/
MD5:	0E9FE4DDA3CF49354B99ACDD642EAB37
SHA1:	B158FDBC1D4F2B244B027DFC3AD21066D5055B84
SHA-256:	1F0F11B857FD19E2E149DD738994847659C924E0853C5A985A7CE3E9B067593D
SHA-512:	2BB004776A135C2ABD0B8A0901230E0CDA0C8693B6BF167B91874BC9E028989B28F6872A1743D401501295F0D02CC40809E315EAC36857CB5B7858530E866A15
Malicious:	false
Reputation:	low
IE Cache URL:	https://lib.intuitcdn.net/fonts/AvenirNext/1.0/en/avenir-100.woff
Preview:	wOFFOTTO..'\|......4.........................CFF .......u..!.....GPOS............L.Z.GSUB..#........\....OS/2..$d...W...`..h.cmap..$..........-./head..%L...6...6..h.hhea..%........$....hmtx..%....h........maxp..'..........{P.name..'....T...^....post..'h....... ...2x.l....@..gc.S.x.X........z.R..{.. .m2I.Mw...o.....g.5...<...........~a?.Z..!nD......g....r..n....P........n.......8m...?.\|.q..5.Nx.....p.zp..0.[p.~.....4.)s..V.t.....c.gS..3zn.U.;\|4.?.Q...{>\|r.S\|c.qUI.r.~.bT.x~`....(....bs.....(-...>..I1JXI./x.TF.R'.m.K......U.D..U...pMX.q.;JPi..........2....?..X.h.0...L.ws........o.G..$x....K.8..g..k..Zdl.g.=.......xb.Q./T@@.A..*1.DE.....%Y.#..0.....5.G<0..Q.................^.zU.W.W.@.f..3M..B.CS.9....Q.....y.y.y.y....cD.=cb..a...]f.3.Ig...f...)e62_3....d.2G...E..3.R.\.. .....P..p.n...XO.0-.b.S.r......I.!_\|../..5.....v...I0H2_P6.r.Y..dO..f..k....q.2R.....q`....c......P.]............a.Q0..&%.........4......4=...[.{n:M.......{..~s<I^.hD ?..~........I.~..+

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\avenir-400-it[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 46816, version 0.0
Category:	downloaded
Size (bytes):	46816
Entropy (8bit):	7.991553223027372
Encrypted:	true
SSDEEP:	768:spXN4IKRn3OynJGsonvg/2nj2fMnU2LC4MLQMMso44ei0pYVgQr:P5Z3OpVIuyEUwCvcrN4l/+x
MD5:	1AB3E87217A69EA750408F72B343A9C2
SHA1:	AF8AB882F34AE9745C150816A5407AB5BE97032E
SHA-256:	64C6D38C1745CD6F6774FC745F2148E8186B5A6EC0FDA7B1B87062ECD00D9FF2
SHA-512:	F9A69E82CEB84F2D9E0E25A443EFEBD606E2B51C3C9606FA16C67C1D8C6E8E1426CC2F77C1BDE6B7A6BBBDDD3661C0E48A9892388F939E06A10CF9FF0EF645DB
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/fonts/avenir-400-it.woff
Preview:	wOFF........................................GPOS...l......G...4GSUB...t...........OS/2...$...Y...`fD..VDMX............n.vBcmap.."............_cvt ..#....S.......Nfpgm..#l...+...P...glyf..(...{....\c...head.......6...6...hhea.......$...$....hmtx... ...j....c.@.loca...$.........'.$maxp....... ... ....name.......O...K.d..post........... ...2prep.........../..[.x..\.xU.~..aI !{B.... ..$...... .j..g.Z.3b.7T.U..U...R.-RKm......4..E.k.(N.4.w....pn..@..<....?......}....r.......^u...A.d $7.V...N[...sgOM.....aJ.B....^.....w....}G.>......}m{.m..v.msl;U.Y..n}..s...........>l...c.JP.2..q\|.St..L`3.......\|^.e..^..7..............X..xL.........\.k..F..[...X.{x/.....4..,^.-.\|.f..k.w...Z.....\.=./.:.-..yKm[d.....k.E.bFx+.}.m.h..-...z._o.}.%:/.Zd.E..+...\|.{..\.=......r.1.q.....[Y.=f.[m[l.}.....;1ja60..u..5{......~...q....~f.]....i'..8..x=..v..fo.<...<-.9-k.R..U.V=mW....iK.u;s...%...oe..P.....D.,3....Z..B.vA=-..s...mfN..9u....9W....J./.@.&..(O[.(....z..h....e..R1jU....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\avenir-400[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 9296, version 1.0
Category:	downloaded
Size (bytes):	9296
Entropy (8bit):	7.947468039816662
Encrypted:	false
SSDEEP:	192:ITZXnKpAgXsyeKiELsQIw5KI2Yrt5bpVPY4M4JXP0pLb+zUoP:014eiiw4Y3HPy4sL7A
MD5:	BDCA9153E00145B6E17A69A2C329ABCE
SHA1:	E2A786740816DECCCD2823EF09D83D0EF80F0588
SHA-256:	C4FEFE0AE4EB2C8806117B6CA5D818806F60161C9AB7EB5FFA99F32A426E818F
SHA-512:	8FD3C03BDB8859FCB22DCE36E7E1B9A8535180E578D006B60D6256B46AD5C52D9179B7D580EF001BE3882BFC5915B609674AF0B3D6AF9615FF14090C007832D5
Malicious:	false
Reputation:	low
IE Cache URL:	https://lib.intuitcdn.net/fonts/AvenirNext/1.0/en/avenir-400.woff
Preview:	wOFFOTTO..$P......;.........................CFF ............gj.GPOS...........>.J..GSUB.. ........,.V.tOS/2..!H...^...`..J.cmap..!............head.."0...6...6..$.hhea.."h.......$....hmtx.."....[....... maxp..#..........xP.name..#....N...T...1post..$<....... ...2x...=N.@........Q ..5.L...P..H.BA..'.$.5...#Pp.zn.....N.7.o....p..._."..i..'..I...,.\........]Q....'..h...6r....f[....o.S...~......g..f.Hs%Sm,.4.a.:.."..~..[..LQl..yW.psQ...6...y.p..>..O....`4.+.{0..@%.d.Pv].d........!.Tp......._.Kx.S.K.S..!DC....a.....X.....V..gL&...V.-............q.!...EP.X.%.(.)....QTl.....@.c.I..+I4..A.q)".b7....%..................s..S.x......G...bM.f....L..&RK.Bj#uA.h%..m.6J;W.F.M[.-..j/i...twZ....t4=..LO.g....z%....}...-.Y.<.B....._..:..Yg.y....F..uA..].n.n.n........'.ZL...}l>.%A..?.7v...=.....7.R..03.N..j.?....f.]...........P.......c..z`..^.\<g../...l.).#....t=..k.&...r`....x..[......3o..c..;m..?/Tb.1.ew..@.\|.x..jw..e.......r.P...i?(.jR..Ea?F.F..9`...6..}"'....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\avenir-400[2].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 45356, version 0.0
Category:	downloaded
Size (bytes):	45356
Entropy (8bit):	7.989959510854364
Encrypted:	false
SSDEEP:	768:N6ocR6CHn/OLJXACGhyebla/2ddZL10JUcwLbSSwlWzLsCMwCR:XcR62/OZWG/2L0xwLOSJpCR
MD5:	68028D85966967CC52A3E1F75B97D23D
SHA1:	C86E6D88411F9F97641059DD5FC450F1E941E121
SHA-256:	40481EEE8D658360D67AE90A0B81AE5055049D3AB3C800C31A49A7D6A00207DA
SHA-512:	34283A38B610590A2B46029E23E37941F0B350DE3C1B940822632CD7D8DAA7A5146B0FCA0160EDC43089CDD3669896D8A64AD867E87F2232C9C8776FCAE00FC5
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/fonts/avenir-400.woff
Preview:	wOFF.......,................................GPOS...l...b..C.q...GSUB...............OS/2.......Y...`fC..VDMX............n.v.cmap..!`..........._cvt .."t...Q.....R..fpgm.."....+...P...glyf..'...v.....L.;.head...@...6...6....hhea...x... ...$...;hmtx.......J....q-j.loca.............".lmaxp....... ... ....name.......F...3yAd#post...L....... ...2prep...`......./..[.x..[y\|U.].@.I sBB.Hb..<.@BH.....>.[........=.j..E.>.V."R.ViK....5..Y..Q.......n........@. ...f..9.~.....;{..wsA........W.;..5y.\..2ua.F.pJ....(....}&....^`.......]..(D.....m;..l;.......6..^u..b9J.&...L\.........c....x..a.vb.<h...r5..Lg6.un&.0........(B..[.J..<.......e.W.Vne..@4....W.z..k.^.}....U..u....5....&..4...:._g...E>o...Z....3.U....=.m_`...lkl..G.._..k..`....k.......a..:y...#"....>*.}.>....`.k\|..cM.{X....9...:......V....#t.}.7u.\V<zC..qX.....Fq.^...W.j.....w}......f.....k.C.M2..4S".n7h^..U..Lc..;+<..........)....o..1.{....}.>.q.okg.yF..........+.....y.O.bw~...l.ou..y..!.V...2...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\avenir-500-it[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 46828, version 0.0
Category:	downloaded
Size (bytes):	46828
Entropy (8bit):	7.989968142929276
Encrypted:	false
SSDEEP:	768:lib/75yy+O4J21f8v3zZjGNp2+0uzDz1camaIYC2XwoWxTdRFohQy+qu5FRBBBPG:Uj75cODo3zI2+0uzDzySX9WdRFStxsDo
MD5:	DA46C9E38857C84B77B546F0538C886C
SHA1:	6153CC7E31480B7012788D7C79E38119CDB4EC7C
SHA-256:	EE4682124B3805D2ECCCF1CF6A3E22135BD6565DFFEF236116980CA8C4120703
SHA-512:	9BFA8C3F5B75D591D0B1C689C1C210EC9C83BE66BFDD0EF96EA9081BEB5684205AAA073EE278CB973547A8B2E207190B4F53047D7C11BC104846B2CB6B0F17B9
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/fonts/avenir-500-it.woff
Preview:	wOFF........................................GPOS...l...=..I".,.KGSUB...............OS/2...\...Z...`f...VDMX............o.v.cmap.."@..........._cvt ..#T...Y........fpgm..#....+...P...glyf..(...{F...d.}..head.......6...6....hhea.......$...$....hmtx.......u....w 4.loca...$.........$..maxp....... ... ....name.......S...Kbx..post........... ...2prep... ......./..[.x..[y\|U.].@.....9$...y..$.!.0..E.O...Sk}}O,N.J.j..UZq(......ZETD.4.........K.F.u..8....f..9.~....;{... .H\|...+.....lDL.........Y3.{"o..=1y.<...>......n..]p.>..@....k.Fo[...0[..u...........%.......d`9.a.^..T..{q...9..kvb.S..\....q"K8...r.....#...>.A.....1..<..x.c.r..s.K..K..7s.W.^n.q..U....s....u\.e......w._j9......e.J..0.......c......?W......6.C.Zc...z....g.z...h-..`k..d.=..F....v.3\.o..v......X..Q..O.,\..\....6..\|.z\%.....4..F[.Kh3..x.y}5~k..V.<.M.Z+Ok....W.-O....qA..m..hE@.`<T.....[../...WJ....Z.#.w[5....Z.Fe..Q..U.\...!.O.us..S.m.?...).....0N.[.c..Z.i3:...Y..\.k.........h..hi....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\avenir-500[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 45748, version 0.0
Category:	downloaded
Size (bytes):	45748
Entropy (8bit):	7.988978641183871
Encrypted:	false
SSDEEP:	768:i/glpFfaOLZJTjjEd4EfSra7FKaCYZ9qmiJBy//QGsZSZkPvj8Q4sKI:i/UkODXEwaMjCwDy//Qx7d4o
MD5:	8B4ECB5D0FDF52FD1115DFA30F6EF0DD
SHA1:	D22A45852255E34B4F0E800BD4587F9056FF4A74
SHA-256:	CEFDC94F2DA9786ADDC07A91F8C2A187906257802B9B33E6C3B9C326414861B8
SHA-512:	EE7A1BEB2AD734E3100192018A2CB7430348ACAC82395E05FBA591FFE2BFC15EA85A18EDFB0C87963E9FD87A31E5832DDCA7D0344555203456714A73BFC8A7F5
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/fonts/avenir-500.woff
Preview:	wOFF........................................GPOS...l......E...GSUB...t...........OS/2...$...Y...`f...VDMX............o.v.cmap.."............_cvt ..#....T.......fpgm..#p...+...P...glyf..(...wx...@l~.head.......6...6....hhea.......!...$...thmtx.......Y......_.loca............. 8.maxp...d... ... ....name.......P...K...post........... ...2prep.........../..[.x..\.t...{ @...$..$....W.....!@[.[..ku.[...V..TD%X.j.Z.._H.RKmM..".Z...hxE.. ..........B.3Y.\|......3...}....s..h..`....~z%Z ..c.MNG......0mJ~:F.^45.y...>.p]x..k..Np.$.n.\G......W..-{.r.-..r.-.u8;f.K.:.^-.B.{gA'<....6`#6.]..>..'8F.-.I.....A..\....r./..y5..:..[y'...:!............l..4..BN.....Y.....s1.....v...,e..v:h..pK8.-...f.5K..j[....A...-.e.-K\|8..e.u.%..C..".%...o...J.R.h.L......{.9..j-..`k....p.{XKyf{?.....{.....kX......[z~.x~.o.e.x:o..x.f..;`.f..5.#......A_..m....8F.....tK....@..r.[*?.5p/.4..a,.;^...M....].V.;.....y9....Y...0...T..{..\5.Fk.~7......eU/KTG..].u........dOE.....l$...b.F...O.!;U.pTx....S..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\b18d13e9ea8a362642b7d25bce665039[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	16764
Entropy (8bit):	5.015659059704473
Encrypted:	false
SSDEEP:	96:+7oy39iUOhxSoUhWBIBGNdByrJZeGyHObsjXDRKRpQ7wvkoln1WIGeDNc6ei52Ki:6vQ6JZoRKRa05Z9GImZAJgwEWZBYF
MD5:	B18D13E9EA8A362642B7D25BCE665039
SHA1:	928BE33E3ABE8071A068BE98084F406D5F4C07E2
SHA-256:	10F69DBA0842572682B65444464A1F8879BF29B201E730D5F824BB6636536555
SHA-512:	651CB5E1435A1E72392D425E73487413EF0A035574E84F738D775D29668CA7222AFA56C5AE77AB3A0AF15ECF94467C7070727EF10C0F38820545D5C81ABE2255
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/b18d13e9ea8a362642b7d25bce665039.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="180" y1="77.807" x2="144.01" y2="77.807" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#1967d2"/>. <stop offset="0.133" stop-color="#1967d2" stop-opacity="0.98"/>. <stop offset="0.271" stop-color="#1967d2" stop-opacity="0.921"/>. <stop offset="0.411" stop-color="#1967d2" stop-opacity="0.822"/>. <stop offset="0.553" stop-color="#1967d2" stop-opacity="0.683"/>. <stop offset="0.696" stop-color="#1967d2" stop-opacity="0.505"/>. <stop offset="0.84" stop-color="#1967d2" stop-opacity="0.287"/>. <stop offset="0.983" stop-color="#1967d2" stop-opacity="0.033"/>. <stop offset="1" stop-color="#1967d2" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="191.997" y1="77.804" x2="168.003" y2="77.804" gradientUnits="userSpac

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\base[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1742342
Entropy (8bit):	5.580418402729568
Encrypted:	false
SSDEEP:	24576:qCIfkEn4Zpf3mmlSPQbuecoCIq3da0WV1RRI:qJfkEgVxl/bzrqta0WV1RRI
MD5:	70E89C354E9EF65A4A2ED3446B97F0DF
SHA1:	F4ECFD87E7557CB8650181F7E5E86BA6D9E9DD33
SHA-256:	3AA45FD847C3D4CFB20819A9B20B4376DF80CDCC8F5A99C9ABDDCE101CFDAFD2
SHA-512:	12A97D26BDB98C5D31C8F517980ED2B7AD30D66521385D2AE4B75E85350BC3F602A7D47E77B894C673D0DCA4DBA8A9476488C45469719637A67A48B7259344A0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube.com/s/player/51ff6aac/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var ba,da,aaa,ha,ia,ka,oa,pa,qa,sa,ta,ua,va,xa,baa,caa,ya,za,daa,Ba,Ca,Da,Ea,Fa,Ja,Ka,faa,gaa,Ta,Ua,Va,haa,iaa,Za,$a,ab,bb,jaa,kaa,db,kb,laa,rb,sb,maa,xb,ub,naa,vb,oaa,paa,qaa,Fb,Hb,Ib,Kb,Lb,Nb,Pb,Qb,Tb,$b,bc,fc,gc,jc,nc,oc,taa,pc,qc,tc,Bc,Cc,Ec,Jc,Pc,Qc,Tc,Rc,xaa,Aaa,Baa,Caa,Xc,Yc,ad,$c,cd,fd,Daa,Eaa,ed,Faa,id,pd,qd,rd,sd,td,wd,xd,yd,zd,Iaa,Jaa,Bd,Dd,Fd,Cd,Gd,Hd,Id,Jd,Kd,Ld,Nd,Od,Pd,Qd,Rd,Sd,Td,Ud,Vd,Wd,Xd,ee,de,ae,he,le,oe,pe,qe,Maa,te,re,ue,ve,xe,ye,Ae,Ee,Ce,Fe,Ge,He,Ie,Je,De,Ke,Le,.Ne,Pe,Me,Qe,Oaa,Qaa,Se,Te,Raa,Ue,Saa,Ve,Taa,Xe,Ye,af,bf,cf,df,ef,Uaa,mf,of,pf,rf,Waa,sf,tf,uf,vf,xf,zf,Xaa,wf,Ff,Gf,Df,Zaa,Af,yf,Kf,Lf,Mf,$aa,Qf,Sf,Vf,Zf,$f,fg,gg,jg,hg,lg,og,ng,mg,cba,Xf,zg,xg,yg,Bg,Ag,Wf,Dg,eba,Eg,Fg,Gg,fba,Lg,Ng,Pg,Qg,Sg,Tg,Wg,Yg,gba,Zg,ah,dh,$g,bh,Og,Xg,iba,gh,eh,fh,ih,hba,hh,mh,nh,oh,ph,jba,qh,rh,kba,sh,th,vh,xh,yh,zh,oba,Ah,pba,Bh,Ch,Dh,Eh,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\base[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1742342
Entropy (8bit):	5.580418402729568
Encrypted:	false
SSDEEP:	24576:qCIfkEn4Zpf3mmlSPQbuecoCIq3da0WV1RRI:qJfkEgVxl/bzrqta0WV1RRI
MD5:	70E89C354E9EF65A4A2ED3446B97F0DF
SHA1:	F4ECFD87E7557CB8650181F7E5E86BA6D9E9DD33
SHA-256:	3AA45FD847C3D4CFB20819A9B20B4376DF80CDCC8F5A99C9ABDDCE101CFDAFD2
SHA-512:	12A97D26BDB98C5D31C8F517980ED2B7AD30D66521385D2AE4B75E85350BC3F602A7D47E77B894C673D0DCA4DBA8A9476488C45469719637A67A48B7259344A0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube-nocookie.com/s/player/51ff6aac/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var ba,da,aaa,ha,ia,ka,oa,pa,qa,sa,ta,ua,va,xa,baa,caa,ya,za,daa,Ba,Ca,Da,Ea,Fa,Ja,Ka,faa,gaa,Ta,Ua,Va,haa,iaa,Za,$a,ab,bb,jaa,kaa,db,kb,laa,rb,sb,maa,xb,ub,naa,vb,oaa,paa,qaa,Fb,Hb,Ib,Kb,Lb,Nb,Pb,Qb,Tb,$b,bc,fc,gc,jc,nc,oc,taa,pc,qc,tc,Bc,Cc,Ec,Jc,Pc,Qc,Tc,Rc,xaa,Aaa,Baa,Caa,Xc,Yc,ad,$c,cd,fd,Daa,Eaa,ed,Faa,id,pd,qd,rd,sd,td,wd,xd,yd,zd,Iaa,Jaa,Bd,Dd,Fd,Cd,Gd,Hd,Id,Jd,Kd,Ld,Nd,Od,Pd,Qd,Rd,Sd,Td,Ud,Vd,Wd,Xd,ee,de,ae,he,le,oe,pe,qe,Maa,te,re,ue,ve,xe,ye,Ae,Ee,Ce,Fe,Ge,He,Ie,Je,De,Ke,Le,.Ne,Pe,Me,Qe,Oaa,Qaa,Se,Te,Raa,Ue,Saa,Ve,Taa,Xe,Ye,af,bf,cf,df,ef,Uaa,mf,of,pf,rf,Waa,sf,tf,uf,vf,xf,zf,Xaa,wf,Ff,Gf,Df,Zaa,Af,yf,Kf,Lf,Mf,$aa,Qf,Sf,Vf,Zf,$f,fg,gg,jg,hg,lg,og,ng,mg,cba,Xf,zg,xg,yg,Bg,Ag,Wf,Dg,eba,Eg,Fg,Gg,fba,Lg,Ng,Pg,Qg,Sg,Tg,Wg,Yg,gba,Zg,ah,dh,$g,bh,Og,Xg,iba,gh,eh,fh,ih,hba,hh,mh,nh,oh,ph,jba,qh,rh,kba,sh,th,vh,xh,yh,zh,oba,Ah,pba,Bh,Ch,Dh,Eh,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\billing_offers_us[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	26538
Entropy (8bit):	4.453654580606654
Encrypted:	false
SSDEEP:	384:yJ5e1szo5fpZHPy8DPB4PL/OPHPm3wba2KgKYiPyzPqr+opVPU7PtcTPGDPO7p:yJ5eTLGy/ZTo4o+iAG
MD5:	5A545D6AD8C2A18EF081076D73BAB60C
SHA1:	9BFAE5F091F2DA16C65DDB2831F05651877A6A0F
SHA-256:	38143AFAD9BCAB7AF03FDA5CC25CE55EBBF505E842F8DA2884A6E30620306FD0
SHA-512:	28B671234D3C1D3810D425BDD878D36043AAAD98962AF40FD58CE4C6F06C9C9AE292B844575AEADA87383633C0BFED19D4F55F29C898490F5172782C9F6AD829
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-data/us/billing_offers_us.json
Preview:	{. "metadata" : {. "id" : "889cadb5-03de-4847-9b29-929c96f84b30",. "generatedAt" : 1619749993535. },. "campaigns" : {. "default" : {. "default" : {. "QBCOMMERCE" : {. "QBCOMMERCE_CORE" : {. "MONTHLY" : {. "PAID" : {. "offer_id" : "20022577". }. }. }. },. "TSHEETS" : {. "QB_TSHEETS_PREMIUM" : {. "MONTHLY" : {. "TRIAL" : {. "offer_id" : "20022125". },. "PAID" : {. "offer_id" : "20022126". }. }. },. "QB_TSHEETS_ELITE" : {. "MONTHLY" : {. "TRIAL" : {. "offer_id" : "20022123". },. "PAID" : {. "offer_id" : "20022124". }. }. }. },. "QBO" : {. "QBO_PLUS" : {. "ANNUAL" : {. "TRIAL" : {.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bullet[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	447
Entropy (8bit):	7.304718288205936
Encrypted:	false
SSDEEP:	12:6v/71Cyt/JNTWxGdr+kZDWO7+4dKIv0b1GKuxu+R:/yBJNTqsSk9BTwE05su+R
MD5:	26F971D87CA00E23BD2D064524AEF838
SHA1:	7440BEFF2F4F8FABC9315608A13BF26CABAD27D9
SHA-256:	1D8E5FD3C1FD384C0A7507E7283C7FE8F65015E521B84569132A7EABEDC9D41D
SHA-512:	C62EB51BE301BB96C80539D66A73CD17CA2021D5D816233853A37DB72E04050271E581CC99652F3D8469B390003CA6C62DAD2A9D57164C620B7777AE99AA1B15
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/bullet.png
Preview:	.PNG........IHDR...............ex....PLTE...(EkFRp&@e&@e)Af)AgANjBNjDNjDNj2Vv-Xz-Y{3XyC\}E_.2j.3l.8p.7q.;j.;l.Zj.\l.5o.7q.<..aw.<..dz.E...........1..@.7..~.....9..:.....A..B..E..9..:..a..c..b..g.#M.%O.#r.#s.%y.2..4..+..-..?..@..;..p..s...G..H..M.........z`....#tRNS................................../,....mIDATx^..C..`.......S....y'...05...\|..k.X......*`.F.K....JQ..u.<.}.. ..[U..m....'r%.......yn.`.7F..).5..b..rX.T.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\c[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	12224
Entropy (8bit):	5.308359865164708
Encrypted:	false
SSDEEP:	192:8CXX5sQEcix3+i4etz9oLzhmrvB+6MTBer/LOfheacun9TSpVf2rYuC4ubwfcLT8:bnOcZeNkzhmrM6Mlu/ifQaB9uCr7C4YK
MD5:	B45EBA262538BF173A33D9DB5FEAAF17
SHA1:	D693E6044C00BEE0AC07A573143F9EAFC7458D79
SHA-256:	08CFEC4BB64DB016673D7DEBDB069AE240CF8E537BF331A9760EE4EE7466315A
SHA-512:	6B55DD0921F92311665A690BC08C7AE6CC6F9A20002B237CFBF0C115621DC788BDABD4FA3804C739F12297FDFF63E5E4B493A994C62651DBF49EC82C8709D346
Malicious:	false
Reputation:	low
Preview:	{"da_websiteId":256560,"da_account_flags":8,"da_account_flags_orig":6127,"da_sessionId_e":"68AA488A8E33AE88BC41AA134EDB4D6310","da_leadId_e":"5B997BB99A73EA132910BB990CD90768A3","da_dnsRecord":"collection.decibelinsight.net","da_anonymiseIP":true,"da_ipHandling":1,"da_sessCookieFlags":4,"da_leadCookieFlags":0,"analysisSessFlags":0,"analysisLeadFlags":0,"replaySessFlags":0,"replayLeadFlags":0,"int_state":"","curTime":1625866727,"domains":["view.ceros.com","www.intuit.com","careers.intuit.com","intuit.swoogo.com","events.quickbooksconnect.com","jobs.intuit.com"],"accountNumber":13878,"branch":"MASTER","da_autoFragmentTrack":true,"da_autoQueryTrack":true,"da_maskEmail":true,"da_maskSSN":false,"da_recursiveMasking":true,"da_deepShadowRootSearch":false,"da_processBot":false,"da_noHTML":false,"da_httpsJourney":true,"da_aggregateFields":false,"da_allowDuplicateAttribute":true,"da_collectLogs":true,"da_frameRate":5,"da_resourceRate":1,"da_minResourceSize":1000,"da_maxCss":30000,"da_sessionTime

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\case-money-laundering[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1411
Entropy (8bit):	5.937556802966794
Encrypted:	false
SSDEEP:	24:tFfTU3LirAFvro9JZeBrwtxBXus5wJXF3RxA/rvXuHyn/a6O9bxx4ray2nADxME:PbYCOvro96y7BXjyZDxA/rvuHynS6wRK
MD5:	2F5F69F51694FA5CCEB170EBEF160A35
SHA1:	49E00DF2614DE41EAF7C95B03620737755A269CA
SHA-256:	7A3E7F5EB2ACCCD6D32814635F80D834F9482045B5071FAEEC5C4127DA7884A5
SHA-512:	BFE498F0DCC2F319F43805C56679BB30C262A30FED57A34A03D53D6A230FE49E430F7660778C09EFFFF45822FAB95DA3D0CF4EF4DB43E84654485A73E842CC3C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/case-money-laundering.svg
Preview:	<svg width="45" height="40" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><image x="941" y="532" width="44.167" height="39.75" xlink:href="data:image/png;base64,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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\ccpa-widget-en[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	downloaded
Size (bytes):	484191
Entropy (8bit):	5.368072960632874
Encrypted:	false
SSDEEP:	3072:dv8loJwFMpdTa8m8TwsB3NpS72rXdhZP3hJXMkNarp8kQah6cQKkdu1mNOtRo:F/9pRa8m8nB95P3hJcaVQVlkduENOtRo
MD5:	EDA3A204DD220C6ED8E3D50E7A04EF94
SHA1:	97CF3875F59A68C52F6B9B82B4D0700D4E47BAE5
SHA-256:	BD79D2DF1C742D95CF2F0AACE1C199700E34B6C2002760EC92C91112278564AC
SHA-512:	50BF7A3590E8AC684638BB185A76F9F4297F864D53A25BBAC9676DD32F6ECAC159AC87D556E017DE1A9985F680D5B892425987D49A6C4C3008220FB93FC3332A
Malicious:	false
Reputation:	low
IE Cache URL:	https://uxfabric.intuitcdn.net/gdpr-widget/2.1.4/ccpa-widget-en.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=190)}([function(e,t,n){var r=n(4),o=n(21).f,i=n(17),a=n(18),s=n(107),c=n(136),u=n(68);e.expor

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\ccpa-widget-en[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with NEL line terminators
Category:	downloaded
Size (bytes):	282892
Entropy (8bit):	5.5121314071152625
Encrypted:	false
SSDEEP:	3072:BaVsxbxLTxY3Z2D+dj73aV6nCeDMusBM7:BaSxjYJ2cH3aVVeDMusI
MD5:	5DD55341699CF72FB8C5B7A2F4E8E17A
SHA1:	F087DB4CFAFF8F6E3FC02443AA06B6B8346F0527
SHA-256:	30478D68E0F3CB9BB7DFADD8FA1FB5B6207567CCCF771B5E7CE8A8C160654E02
SHA-512:	AD6298D27F2BA501C9B8EEC5F5737125B51463DC167D31BEEE52FCC12D0DF23A01C7A48E4DCEE4FC804156FEDCC681B65A9EF1F94A4EC03EF911E7A2D1FA9CA5
Malicious:	false
Reputation:	low
IE Cache URL:	https://uxfabric.intuitcdn.net/gdpr-widget/2.4.3/ccpa-widget-en.js
Preview:	var gdprWidget;(()=>{var e={2470:e=>{function t(){return e.exports=t=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},t.apply(this,arguments)}e.exports=t},7982:e=>{e.exports={badge:"Badge-badge-6b77e2f",iconFix:"Badge-iconFix-37e883c",value:"Badge-value-fae6712",dot:"Badge-dot-4551324",rect:"Badge-rect-1ac221f",label:"Badge-label-c766fd0",round:"Badge-round-0b76365",error:"Badge-error-dd88171",pending:"Badge-pending-b07c94c",warning:"Badge-warning-86d92f1",info:"Badge-info-192ad43",success:"Badge-success-c71839f",draft:"Badge-draft-1fe9f87",new:"Badge-new-ff120bf",beta:"Badge-beta-a08004e",numeric:"Badge-numeric-2877f9e",creditkarma:"Badge-creditkarma-466486b",light:"Badge-light-a67dbe0",dark:"Badge-dark-9a01928",mint:"Badge-mint-6d65a8f",quickbooks:"Badge-quickbooks-a9aefcc",ttfullservice:"Badge-ttfullservice-fce8b3e",turbotax:"Badge-turbotax-d6bbcc4",expert:"Badge-expert-c

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\cdc_lib_min_1.10.12[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	87734
Entropy (8bit):	5.497283699370102
Encrypted:	false
SSDEEP:	1536:MkFiS83LGGL7tcgIZ+4nbJTxxTmGMTtbCA:t+pLm5rmn
MD5:	055B08A6722D6A5C74BCE4FAAF7362C6
SHA1:	BD49EB2359DF8C19A3C7577B134FDE079A971679
SHA-256:	342E0EF411AF161CC493329F810E087030357B17B22AC678C8DA93B761B13634
SHA-512:	F14CCA514492CA948B08C19B98D25503289D3CDE74572216955A705E36467687BE3941C29544563488E06ED67310D6C0EEB637D0BB994CEE6ABEC44ED935DEE2
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.websdk.intuit.com/js/cdc_lib_min_1.10.12.js
Preview:	/2020-01-22 cdc_lib v1.10.12 Copyright 2020 Intuit Inc. All Rights Reserved./.function intuitWebAnalyticsClone(e){return!e\|\|"object"!=typeof e&&"function"!=typeof e?e:((t="function"==typeof e?e:e.constructor?new e.constructor:{}).prototype=e.prototype,function(e,t,r){var n,i;for(n in t)i=t[n],n in e&&e[n]===i\|\|(e[n]=r?r(i):i);return e}(t,e,intuitWebAnalyticsClone));var t}if(void 0!==intuit&&intuit\|\|(intuit={}),intuit.ivid\|\|(intuit.ivid={}),function(){var o,e=this;if(!o&&e.crypto&&crypto.getRandomValues){var t=new Uint8Array(16);o=function(){return crypto.getRandomValues(t),t}}if(!o){var r=new Array(16);o=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}for(var s="function"==typeof e.Buffer?e.Buffer:Array,i=[],a={},n=0;n<256;n++)i[n]=(n+256).toString(16).substr(1),a[i[n]]=n;function v(e,t){var r=t\|\|0,n=i;return n[e[r++]]+n[e[r++]]+n[e[r++]]+n[e[r++]]+"-"+n[e[r++]]+n[e[r++]]+"-"+n[e[r++]]+n[e[r++]]+"-"+n[e[r++]]+n[e[r++]]+"-"+n[

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\commondojo_all_en-us.xd[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	2088
Entropy (8bit):	5.024705423748217
Encrypted:	false
SSDEEP:	48:t9LRl68lCWLHiAc91iogDQ+mcNZc3851jht/F:tpm8IWLCz1ioN+mcNZc3851jhD
MD5:	68DE0D1552FD593EA433135EBDF9466A
SHA1:	C71BD3493A2496A2E65F3FA3296906D33F218394
SHA-256:	1E901B178FADFAA7A407DCC22586B3A3C401FD0355C2B34F1D73C75005CEBBB7
SHA-512:	007432A0E132B2FE1A2B40BF96B5C09433C2103E91AD592D8E13C02C2D95578D5A5EFF30CDAA39308AF2A78E9A1133E0A1BD5430E771CB38D28FD48AE4A9708A
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/dojotoolkit/dojo/nls/commondojo_all_en-us.xd.js
Preview:	dojo._xdResourceLoaded(function(dojo, dijit, dojox){.return {depends: [["provide", "dojo.nls.commondojo_all_en-us"],.["provide", "dijit.nls.common"],.["provide", "dijit.nls.common.en_us"],.["provide", "dijit.form.nls.validate"],.["provide", "dijit.form.nls.validate.en_us"],.["provide", "dojo.cldr.nls.number"],.["provide", "dojo.cldr.nls.number.en_us"],.["provide", "dijit.form.nls.ComboBox"],.["provide", "dijit.form.nls.ComboBox.en_us"]],.defineResource: function(dojo, dijit, dojox){dojo.provide("dojo.nls.commondojo_all_en-us");dojo.provide("dijit.nls.common");dijit.nls.common._built=true;dojo.provide("dijit.nls.common.en_us");dijit.nls.common.en_us={"buttonOk":"OK","buttonCancel":"Cancel","buttonSave":"Save","itemClose":"Close"};dojo.provide("dijit.form.nls.validate");dijit.form.nls.validate._built=true;dojo.provide("dijit.form.nls.validate.en_us");dijit.form.nls.validate.en_us={"rangeMessage":"This value is out of range.","invalidMessage":"The value entered is not valid.","missingMess

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\commonutil_global_variables[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3663
Entropy (8bit):	5.270756699139484
Encrypted:	false
SSDEEP:	96:O7PCx1JnpeGM05TBAoisoSVZB37Babb6IozJeaW2dbh9hjFaqptEj+:m8MQTBtisoSVZB37Ba36IoteaW2dt9ZN
MD5:	5D9C2D6E866EBCDDFB3913F6E3F0CAA7
SHA1:	8DA82039BA54D8CC2626F68C0F788400E33D9477
SHA-256:	E098D87C82A26DCF5A9D53A2A721DBA10114E9E10182479C0ED0EF5E48E1D130
SHA-512:	2E1EA4A1161FD61C63831E4473010AACA486525FE7B6604BA0D60DAD273018CD83AE538B2FA1D454722CB7205D0534F0715BC2EA7063BCD8B98523CE7AB55A8F
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/commonutil_global_variables.js
Preview:	var public_const_AUTORECALL_CHARGE=25;var public_const_AUTORECALL_CHARGE_CREDIT=13;var public_const_AUTORECALL_CREDIT_CARD=1;var public_const_AUTORECALL_CREDIT_CARD_CREDIT=11;var public_const_AUTORECALL_BILL=9;var public_const_AUTORECALL_BILL_CREDIT=12;var public_const_AUTORECALL_CASHPURCHASE=31;var public_const_AUTORECALL_LIABILITY_CHECK=37;var public_const_AUTORECALL_LIABILITY_CREDIT_CARD=38;var public_const_AUTORECALL_LIABILITY_REFUND=40;var public_const_AUTORECALL_PURCHASE_ORDER=46;var cu_button_accessKeyButton=null;var cu_button_accessKeyTimer=null;var public_var_last_ACTIVEX_server_call_error=null;var public_const_date_NOSECONDS=1;var public_const_date_NOLEADINGZERO=2;var public_error_serverError=null;var errorcount=0;var errorArray=new Array();var stopcount=0;var stopArray=new Array();var warningcount=0;var warningArray=new Array();var informationcount=0;var informationArray=new Array();var public_var_error_section_createEndingErrorText_SUPPRESS_TEXT=false;var FORM_NEW_ID_VALUE=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\container[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	2610
Entropy (8bit):	5.079075704792099
Encrypted:	false
SSDEEP:	24:SRgZjxjVHNdPkTC89trKCRVaIPqO1VxIQ8984IOh1QP01yNigAPhO4NU5+7XI6oL:F5jMsw7IsEgkDa4X9c05dwF20H
MD5:	0592DE7E8F3CEF7CBCD5821A8359569E
SHA1:	4BDADCDF3D898AD5842BC16CE0608719CD7EE6BA
SHA-256:	39B55570281B884A389D4A29B3A6F93B830410F147F3CB3D114490FAD0244342
SHA-512:	08E10897FB9DA85E30AB449416F5749CF13A85E58D4889E797D803A5134441447B5473B89C3BD9A2345057A3844E128865AE163AB1B8B0B9AFBF9C84FF112B60
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/qbmds/container.css
Preview:	.Container_module_bg__872b5a66{padding:0 .625rem}@media (min-width:768px){.Container_module_bg__872b5a66{padding:0 1.875rem}}.Container_module_noPadding__872b5a66{padding:0!important}.Container_module_noMargin__872b5a66{margin:0!important}.Container_module_container__872b5a66{position:relative;max-width:86.25rem;margin:0 auto}@media (min-width:1024px){.Container_module_container__872b5a66{display:-webkit-box;display:-ms-flexbox;display:flex}}.Container_module_childFluid__872b5a66 .Container_module_container__872b5a66{max-width:100%}.Container_module_foo__872b5a66{position:absolute;top:0;right:.625rem;bottom:0;left:.625rem;z-index:-1;z-index:var(--zindex-rw-sub-layer)}.Container_module_white__872b5a66{background:#fff}.Container_module_black__872b5a66{background:#000}.Container_module_grey01__872b5a66{background:#393a3d}.Container_module_grey02__872b5a66{background:#6b6c72}.Container_module_grey03__872b5a66{background:#8d9096}.Container_module_grey08__872b5a66{background:#f4f5f8}.Contain

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\d9b0afecf817124ac4331c174102947b1f764f14.a2bd21269a1f6b5cef21[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	54054
Entropy (8bit):	5.309036641623106
Encrypted:	false
SSDEEP:	768:q9RiCi7q5d8PR7JSxYJYgv6cuKCQkYm4zXVZYhPn9yaoh+vGD:qHy25qPR7JnvCP/BaXXYh1doUv8
MD5:	3BF5B03DC7AC4406C0AC62DA9B0C3064
SHA1:	EF8DAA0DDE18B22412BB26A1755B7A5DE323EF7B
SHA-256:	8F661720B8832D6A04A239343D2C22BE65FC383EB1B04D06E798E82C1ED12F7E
SHA-512:	8B49961E170BB8BB2A8C61C6F4D4EC1FCFD8AF2035D50401481BFCE4E0A020EEF78F1E2A3FB28BE53D3A332D3EC1C3B8F1972C10A935B1F988F7C190EC5821B9
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/d9b0afecf817124ac4331c174102947b1f764f14.a2bd21269a1f6b5cef21.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[6],{"/0+H":function(e,n,t){"use strict";n.__esModule=!0,n.isInAmpMode=l,n.useAmp=function(){return l(o.default.useContext(a.AmpStateContext))};var r,o=(r=t("q1tI"))&&r.__esModule?r:{default:r},a=t("lwAK");function l(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},n=e.ampFirst,t=void 0!==n&&n,r=e.hybrid,o=void 0!==r&&r,a=e.hasQuery,l=void 0!==a&&a;return t\|\|o&&l}},"/a9y":function(e,n,t){"use strict";var r=t("/GRZ"),o=t("i2R6"),a=t("48fX"),l=t("tCBg"),u=t("T0f4");function i(e){var n=function(){if("undefined"===typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"===typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){}))),!0}catch(e){return!1}}();return function(){var t,r=u(e);if(n){var o=u(this).constructor;t=Reflect.construct(r,arguments,o)}else t=r.apply(this,arguments);return l(this,t)}}var d=t("AroE");n.__esModule=!

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\down[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	748
Entropy (8bit):	7.249606135668305
Encrypted:	false
SSDEEP:	12:6v/7/2QeZ7HVJ6o6yiq1p4tSQfAVFcm6R2HkZuU4fB4CsY4NJlrvMezoW2uONroc:GeZ6oLiqkbDuU4fqzTrvMeBBlE
MD5:	C4F558C4C8B56858F15C09037CD6625A
SHA1:	EE497CC061D6A7A59BB66DEFEA65F9A8145BA240
SHA-256:	39E7DE847C9F731EAA72338AD9053217B957859DE27B50B6474EC42971530781
SHA-512:	D60353D3FBEA2992D96795BA30B20727B022B9164B2094B922921D33CA7CE1634713693AC191F8F5708954544F7648F4840BCD5B62CB6A032EF292A8B0E52A44
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............ex....PLTE....W..W..W..W..W..W..W..W..W..W..W..W..W.U..............W..W.!Y.#Z.$\.'].<r.=s.P..Q..Q..U..o..p..r..x..z..~.............................................b.............................................................................................................................................................................................................$..s...7tRNS.a.o(,.s....e......q*...................................F.Z....IDATx^%.S..@.C..jm.mTk...m.?\|;.y..S....F.t...,.......D.>..LpX=f.M...H4........=...=..xy.[h..7....7.....<.q.kH....#+....I..z.....'.ksC...X<.+..J>....%3BmqaV...h..Z._.:<.Y_jG...vN^.<>.Nu.u@.....M....?...1D.m~)s8..&....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\eed603da0e60c943f74b15a7d6aae41c[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	592
Entropy (8bit):	5.001180931761633
Encrypted:	false
SSDEEP:	12:1cKOaScH7nVgk6h/lIFsXsTKXy1bH7yzBxDWqPBIhLLCr1ALxk+vUCe:1cUdbnVgkMNIFsgJ1bbyzBxnPBIhn2Ac
MD5:	2357F8D257E03EEA66B9C17980F1D692
SHA1:	384D93BE2A20132CD25959EBC6FEF1D4CE31D731
SHA-256:	EF5BC4B604DFB9ED4E31EAAA2C7C0C99B83AA1399AA7C2F011852A89ECC77EAA
SHA-512:	C1F112C3CE20487CD3B724F6B93EA0C7A5B986E27F6341CEAF6A566A8DB3AAD7F2729519875B1431B69EB070258FF5A7599C6D991F3AC3E627553573562A8BBB
Malicious:	false
Reputation:	low
IE Cache URL:	https://nexus.ensighten.com/intuit/us_sbg_prod/code/eed603da0e60c943f74b15a7d6aae41c.js?conditionId0=244919
Preview:	Bootstrapper.bindDOMLoaded(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;Bootstrapper.loadScriptCallback("//cdn.websdk.intuit.com/js/cdc_lib_min_1.10.12.js",function(){window.getIACEndpoint=function(){var endpoint="trinity.platform.intuit.com/trinity/v1/intuit-clickstream";return endpoint};Bootstrapper.loadScriptCallback("//www.intuit.com/etc/designs/websdk/assets/sbm-config.js",function(){window.tracker=new intuit.web.analytics;window.tracker.init(window.wsdkconfig);.window.tracker.triggerEvent("page_entry")})})},3163532,331893);

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\esI-RAuOL8o[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	54293
Entropy (8bit):	5.816201742424914
Encrypted:	false
SSDEEP:	768:saKu/wB9JtItfx7/WL5VJF+9oUOqdqnL1G7jOUWELG4Gdb/p1zxoVOJnI:CKcj+9+HnA7CUC4GdDp1zKVwI
MD5:	ADFB82BA8D4372548332828E782136CA
SHA1:	95833AFCD750B57862D8D371CD52BB0CB6A502D6
SHA-256:	61309F6619D088702B9880B9D253A1E7BCA9D950F861D509965284951F3FA63D
SHA-512:	9AE423E5761A12CE88C0D58F37F1C86D67A87CD9FF4BB6F9F773AF2A19F7EDA46B11EDB65E64FB916A09608141B848DEF9EC52DA4F41D32ED9C8EC2B37488461
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><style name="www-roboto" nonce="2j+Y4LDh/f5B3LTDZZMJJA">@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff)format('woff');}</style><script name="www-roboto" nonce="WA8XKsbucpt/8eRLxqwLrA">if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "E"); document.fonts.load("500 10pt Roboto", "E");}</script><link rel="stylesheet" href="/s/player/51ff6aac/www-player.css" name="www-player" nonce="2j+Y4LDh/f5B3LTDZZMJJA"><style nonce="2j+Y4LDh/f5B3LTDZZMJJA">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100%;}h1 {text-align: center; color: #fff;}h3 {margin-top: 6px; margi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\f1d3dd19f47a29bd5e404bbe4bc73c89[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	6845
Entropy (8bit):	5.372262412456315
Encrypted:	false
SSDEEP:	96:swFrHRAn57vRVC1Db8zyhoNM0hpDDdJICumo3kJdb428scp8etkXvP1OUMUiUN:X6n57vRVC138ehgM0hpDDEGKnyfP1OgN
MD5:	CCBAC18F76FB6A1B32089AB0A96F3C6F
SHA1:	F5B6268C741BBA7CA69034C9FC8055CF24218CFF
SHA-256:	8C7D903329D1E0F154139E667F9838FFF9158E6FCA7F02451CE7B537D3BBD92F
SHA-512:	3BD59183C39E459FA96896F7107D1CBD9FED32BE5B6C48BBC128910A0539602AA05FFDCFAC201BD849FBAE638A15209D500B5487DA6F2757F67991485EA3ABB1
Malicious:	false
Reputation:	low
IE Cache URL:	https://nexus.ensighten.com/intuit/us_sbg_prod/code/f1d3dd19f47a29bd5e404bbe4bc73c89.js?conditionId0=1217320
Preview:	Bootstrapper.bindDOMLoaded(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;var dl="dataLayer";window[dl]=window[dl]\|\|[];var ids=[];ids.push("DC-8344993");var url="//www.googletagmanager.com/gtag/js?id\x3d"+ids[0]+(dl!=="dataLayer"?"\x26l\x3d"+dl:"");function callbackFunc(){for(var i=0;i<ids.length;i++)gtag("config",ids[i])}if(!window.gtag){window.gtag=function(){window[dl].push(arguments)};gtag("js",new Date);Bootstrapper.loadScriptCallback(url,.callbackFunc)}else callbackFunc()},2762202,585580);Bootstrapper.bindDOMLoaded(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;(new Image).src="https://pt.ispot.tv/v2/TC-3346-1.gif?type\x3dvisit_intuit"},2762197,520681);.Bootstrapper.bindDOMLoaded(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;var matching={};var pixelID="1827482914219447";if(false){if("")matching.em="".toLowerCase();i

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fetch-polyfill[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Pascal source, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8543
Entropy (8bit):	5.238064281324506
Encrypted:	false
SSDEEP:	192:oQHdiEslZc0rsNYNU5mSJHqI03aej6tZoaMLQO/x5/P80+HcW:ocHslLsP5muHqI0Jj6tZcUO/x5+V
MD5:	04E3CC8A9641B3F9F9C9370F4E9B5BDD
SHA1:	9602A891F583094BB04FD407B253ABCAFFB8C8D0
SHA-256:	DE6C4FFA2BD9FD283610E28D0DB2EC48607AAB39D213A51AEF248673A0A7E980
SHA-512:	58942BCC0F39D620A475B65C1AEB4F18872F68F22C89DEC076906A0DB8BC2B7CCA9357710A7824A0FA7404FF73F41013AECA34609CAACD2187414F7BD0D490D6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube-nocookie.com/s/player/51ff6aac/fetch-polyfill.vflset/fetch-polyfill.js
Preview:	/*.. Copyright (c) 2014-2016 GitHub, Inc... Permission is hereby granted, free of charge, to any person obtaining. a copy of this software and associated documentation files (the. "Software"), to deal in the Software without restriction, including. without limitation the rights to use, copy, modify, merge, publish,. distribute, sublicense, and/or sell copies of the Software, and to. permit persons to whom the Software is furnished to do so, subject to. the following conditions:.. The above copyright notice and this permission notice shall be. included in all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,. EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF. MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND. NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE. LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION. OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fonts[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2577
Entropy (8bit):	5.1126832519298935
Encrypted:	false
SSDEEP:	24:89KFiRis0/h3iDRiDsMHAiUipR/Hl3imirbzQiHiia/193ivi6N4Qiai3N1/F3iQ:cKX/5v/uq/d5/OtrJaBdt
MD5:	B4D867C25A6786EDFFA437371A753DA5
SHA1:	C90102BED60FB4E4DA0A246EAC2A9A7FCAE7FEE3
SHA-256:	F9D62D62B81C061FB87CB716430F872A0795250E8EF9903FB3D82FD0C4169681
SHA-512:	7E6715B6B6EE41398A588B64C07C8C8E490D02A46C80AB6BC04A20848099DA79842C7140C0E8AB8EE5A668F243FB2367972E5B1EC5AC0023EFDE8DEE1F461E11
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/styles/sbseg/fonts.css
Preview:	@font-face {.font-family: 'AvenirNext forINTUIT';.font-weight: 400;.font-style: normal;.font-display: swap;.src: local('Avenir Next Regular'), local('AvenirNext-Regular'),. url('../../fonts/avenir-400.woff2') format('woff2'), url('../../fonts/avenir-400.woff') format('woff');.}..@font-face {.font-family: 'AvenirNext forINTUIT';.font-weight: 400;.font-style: italic;.font-display: swap;.src: local('Avenir Next Regular Italic'), local('AvenirNext-Regular-Italic'),. url('../../fonts/avenir-400-it.woff2') format('woff2'), url('../../fonts/avenir-400-it.woff') format('woff');.}..@font-face {.font-family: 'AvenirNext forINTUIT';.font-weight: 500;.font-style: normal;.font-display: swap;.src: local('Avenir Next Medium'), local('AvenirNext-Medium'),. url('../../fonts/avenir-500.woff2') format('woff2'), url('../../fonts/avenir-500.woff') format('woff');.}..@font-face {.font-family: 'AvenirNext forINTUIT';.font-weight: 500;.font-style: italic;.font-display: swap;.src: local('Avenir Next M

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\gdprUtilBundle[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	19176
Entropy (8bit):	5.207849707925734
Encrypted:	false
SSDEEP:	384:4v6hzIq3o9doSreOzPt6hm/sABPaparcLqsB9v74eQPVLe:68oHBPt6hm/sARYHLqsB57CPVLe
MD5:	2ED676AA8A81B5D83BB9E4781E5F7B84
SHA1:	C0A5959E64997F7317172E96DCD394AA9E2A9E3E
SHA-256:	00354CADE87B402905F38DBDEC7218DDE1C7771ED7FE93C4CDD14CCE7AF77DE2
SHA-512:	B6EF01B8FF5BD93D232D326C6E6F6AAA9B1438A23DC10069F3E8EB1A62F5F9B286B3A03B765834F4FFB2E08208BE49B70DB484CDFEB20E3D8BF04B0FE591F101
Malicious:	false
Reputation:	low
IE Cache URL:	https://uxfabric.intuitcdn.net/gdpr-util/2.2.0/gdprUtilBundle.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=3)}([function(e){e.exports=JSON.parse('{"ccpa":{"regions":["US"],"endpoints":["https://consen

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\globalvars[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	5570
Entropy (8bit):	5.556588596449828
Encrypted:	false
SSDEEP:	96:jq75AbBHO8rq3v3FJPifjjcvicYpcS/AAyLQFCtwJrC3GMvbVtzYmFU/:jquu8rq3vryYvPY6S/AAyLQFCirC3GMc
MD5:	366541AE8131B6121C6E1648903EDF9E
SHA1:	F831B10D83D305CB58366A5F952798B7FAA4F879
SHA-256:	4CF965E4CAD791B563D343B3CBADF18CF17233F94BD07814D3B985D5C6008968
SHA-512:	9E45D21CC64F00E6574782331F799860922F4C0BAE3B736707CC17E86F9440B11132BD62B5A5A5209066B56570F288B933FF1A0CFAA836C9633A824F18A09125
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/globalvars.js
Preview:	if(typeof qbo==="undefined"\|\|!qbo){qbo={}}var SERVER_HOST="";function versionForFile(a){if(-1!=a.indexOf(".gif")\|\|-1!=a.indexOf(".jpg")\|\|-1!=a.indexOf(".png")){return APP_IMAGE_VER}else{if(-1!=a.indexOf(".js")){return APP_SCRIPT_VER}else{if(-1!=a.indexOf(".css")){return APP_CSS_VER}else{if(0==a.indexOf("helpwindowframeset")\|\|0==a.indexOf("frameset")\|\|0==a.indexOf("findframeset")){return APP_FRAMESET_VER}}}}return APP_REL_NUM}function hostForFile(a){if(-1!=a.indexOf(".gif")\|\|-1!=a.indexOf(".png")\|\|-1!=a.indexOf(".jpg")){return STATIC_IMAGE_HOST}else{if(-1!=a.indexOf(".css")){return STATIC_CSS_HOST}else{if(-1!=a.indexOf(".js")){return STATIC_JS_HOST}else{if(-1!=a.indexOf(".swf")){return STATIC_FLASH_HOST}else{return SERVER_HOST}}}}}function qboURL(a){return hostForFile(a)+"/c"+CLUSTER_ID+"/v"+versionForFile(a)+"/"+SERVER_GROUP+"/"+a}if(!qbo){qbo={}}if(!qbo.getUrl){qbo.getUrl=qboURL}function stopHandler(){try{if(!error_documentloadedcomplete){if(!error_stopped){document.postedonerroronce=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\google-reCAPTCHA[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4768
Entropy (8bit):	4.151365626053792
Encrypted:	false
SSDEEP:	96:I2BtcdTg5W24s714v8RI5bhAHgnyym1/59L6PseWm77cN5uiWhj6gL:N6d4G5yym1x9L6PseWm77crLMj6gL
MD5:	48B850D135653F6DA2652DE32FEE5643
SHA1:	9BD8D7A414D8E36B303674E70C0C70528CC8FBD3
SHA-256:	EEBD2DBD6B3321C0E148A158051FFE0F6B8CED4349B321F85AFBBD35D91DCA7B
SHA-512:	D3C4D5D951019D6AA6CEBD583858F4E2639EB932AF484189C62D13AFFD77FEE65A648CF0D699B03C038036921874FEA4E96E3CD1A1C066A3E685E854D6045ED8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/google-reCAPTCHA.svg
Preview:	<svg width="177" height="24" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M9.445 18.618C4.314 18.618 0 14.441 0 9.31 0 4.18 4.314 0 9.445 0c2.839 0 4.859 1.112 6.381 2.565L14.032 4.36c-1.09-1.022-2.566-1.816-4.587-1.816-3.746 0-6.675 3.02-6.675 6.766s2.929 6.766 6.675 6.766c2.43 0 3.814-.976 4.7-1.862.726-.726 1.204-1.77 1.385-3.2H9.445V8.468h8.56c.091.454.137 1 .137 1.59 0 1.907-.523 4.268-2.203 5.948-1.635 1.703-3.724 2.611-6.494 2.611z" fill="#4285F4"/><path d="M28.795 12.624c0-2.157-1.538-3.633-3.322-3.633-1.783 0-3.321 1.476-3.321 3.633 0 2.134 1.538 3.633 3.32 3.633 1.785 0 3.323-1.499 3.323-3.633m2.586 0c0 3.451-2.653 5.994-5.908 5.994-3.254 0-5.907-2.543-5.907-5.994 0-3.474 2.653-5.994 5.907-5.994 3.255 0 5.908 2.52 5.908 5.994" fill="#EA4335"/><path d="M42.039 12.624c0-2.157-1.538-3.633-3.322-3.633-1.783 0-3.322 1.476-3.322 3.633 0 2.134 1.539 3.633 3.322 3.633 1.784 0 3.322-1.499 3.322-3.633m2.586 0c0 3.451-2.653 5.994-5.908 5.994-3.255 0-5.9

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\harmony[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	84541
Entropy (8bit):	5.488130457558677
Encrypted:	false
SSDEEP:	384:k/0gSG8q6hqQ8gpiKN64zxu/a+F+Nqi90u/OdIq7jvOBZ7su/1S8uI1QwPus5pzQ:Af1v5KZqWJPus5pzUXbOgIg8v8D2i
MD5:	7646EEF01731D2D90BC3377A5357DC70
SHA1:	A94ACB55064F67F3B596CA837191692C29E334C0
SHA-256:	DBB251B9B286826FDD9FD587668654FA2255630E326EA28D1F4D9B44FF238A66
SHA-512:	7C9B9A32515B9C92F8D4D20F65ABC7044D0A747252187254BA9894F89E4ECCAFF3CE6258F8081EC8C3B4C91F1C437477973947648E4E0C7F2663731C847C1C8D
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/harmony/css/harmony.css
Preview:	.button,.button:link,[type=button],[type=submit]{background-clip:padding-box;border-radius:2px;font-family:"HelveticaNeueRoman",Helvetica,Arial,sans-serif;min-width:80px;cursor:pointer;font-size:1.4rem;height:34px;line-height:34px;padding:0 20px;border:0;margin:0;box-sizing:border-box;color:#365ebf;box-shadow:inset 0 0 0 1px #dcdcdc;background-image:-webkit-linear-gradient(top,#fff 0,#f2f2f2 100%);background-image:linear-gradient(to bottom,#fff 0,#f2f2f2 100%);-webkit-font-smoothing:subpixel-antialiased;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;white-space:nowrap}.button.mini,.button:link.mini,[type=button].mini,[type=submit].mini{font-size:1.2rem;line-height:24px;height:24px}.button:hover,.button.hover,.button:active,.button.active,.button.secondary:hover,.button.secondary.hover,.button.secondary:active,.button.secondary.active,.button:link:hover,.button:link.hover,.button:link:active,.button:link.active,.button:link.secondary:hover,.button:l

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\httpErrorPagesScripts[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	12105
Entropy (8bit):	5.451485481468043
Encrypted:	false
SSDEEP:	192:x20iniOciwd1BtvjrG8tAGGGVWnvyJVUrUiki3ayimi5ezLCvJG1gwm3z:xPini/i+1Btvjy815ZVUwiki3ayimi5f
MD5:	9234071287E637F85D721463C488704C
SHA1:	CCA09B1E0FBA38BA29D3972ED8DCECEFDEF8C152
SHA-256:	65CC039890C7CEB927CE40F6F199D74E49B8058C3F8A6E22E8F916AD90EA8649
SHA-512:	87D691987E7A2F69AD8605F35F94241AB7E68AD4F55AD384F1F0D40DC59FFD1432C758123661EE39443D624C881B01DCD228A67AFB8700FE5E66FC794A6C0384
Malicious:	false
Reputation:	low
Preview:	...function isExternalUrlSafeForNavigation(urlStr)..{..var regEx = new RegExp("^(http(s?)\|ftp\|file)://", "i");..return regEx.exec(urlStr);..}..function clickRefresh()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..window.location.replace(location.substring(poundIndex+1));..}..}..function navCancelInit()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..var bElement = document.createElement("A");..bElement.innerText = L_REFRESH_TEXT;..bElement.href = 'javascript:clickRefresh()';..navCancelContainer.appendChild(bElement);..}..else..{..var textNode = document.createTextNode(L_RELOAD_TEXT);..navCancelContainer.appendChild(textNode);..}..}..function getDisplayValue(elem

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\iftm44qkf4q8hyek[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	82874
Entropy (8bit):	5.283226763053498
Encrypted:	false
SSDEEP:	768:SGIalIHJy99M99e99c99i99t99799u99l99e99g99LAlPllPFlP7V22m8u7oqv:JIalh22mZ7oI
MD5:	B75A3DFAA7A226A01A1A56B759816D50
SHA1:	2612CFC45BD9A1D18A779ED6704C0A6B6E3389D9
SHA-256:	510CE7EBB3C6154783EB64F837D5C6E134AC9DEF9DC0322213D09354AA94A365
SHA-512:	6056B320A6777627388C1CF993389F11112DD1356AF88BFFA6839DF197D362F960DED336AB2A92482BD80EFFE75A44C270F88A42B9F4F82F9FEF3015F25D9778
Malicious:	false
Reputation:	low
Preview:	var td_0h=td_0h\|\|{};td_0h.td_1u=function(td_K,td_T){try{var td_H=[""];var td_V=0;for(var td_p=0;td_p<td_T.length;++td_p){td_H.push(String.fromCharCode(td_K.charCodeAt(td_V)^td_T.charCodeAt(td_p)));td_V++;.if(td_V>=td_K.length){td_V=0;}}return td_H.join("");}catch(td_S){return null;}};td_0h.td_3d=function(td_X){if(!String\|\|!String.fromCharCode\|\|!parseInt){return null;}try{this.td_c=td_X;this.td_d="";this.td_f=function(td_p,td_g){if(0===this.td_d.length){var td_a=this.td_c.substr(0,32);.var td_t="";for(var td_i=32;td_i<td_X.length;td_i+=2){td_t+=String.fromCharCode(parseInt(td_X.substr(td_i,2),16));}this.td_d=td_0h.td_1u(td_a,td_t);}if(this.td_d.substr){return this.td_d.substr(td_p,td_g);.}};}catch(td_b){}return null;};td_0h.td_1v=function(td_C){if(td_C===null\|\|td_C.length===null\|\|!String\|\|!String.fromCharCode){return null;}var td_m=null;try{var td_q="";var td_Q=[];var td_s=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);.var td_g=0;for(var td_Y=0;td_Y<td_C.length

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\ius-account-recovery-widget~ius-email-confirmation-widget~ius-idp-consent-flow-widget~ius-sign-in-wi~5c14c9bc-471f73da[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	14229
Entropy (8bit):	5.272794725251374
Encrypted:	false
SSDEEP:	384:2hwA5WENzo7rTL0utJN6tUvZFT3wuwyk97xvrJHE3:JtzZt3wGk99DO3
MD5:	804C37A8FFF4C121FF45924289810C78
SHA1:	B9DB1AFD4D21B8DEF737FAEF158E9FD94C1ADB2F
SHA-256:	FAB1F3F5AFC35C2D8D2F952A9756A0E8D03801148561E74555BF7D026D5F4CF3
SHA-512:	993C6C7AC3A26DB1C5662791685AC38CF3DF253A9B5069EE90BDFDEB9295D084F529CC3111FA5E4B22A9C32B625B64C15B83A9E2C04DA16702E5DEE368481756
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/ius-account-recovery-widget~ius-email-confirmation-widget~ius-idp-consent-flow-widget~ius-sign-in-wi~5c14c9bc-471f73da.js
Preview:	(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[5],{105:function(t,e,n){"use strict";var o=n(3),i=n(49).find,r=n(116),s="find",a=!0;s in[]&&Array(1).find((function(){a=!1})),o({target:"Array",proto:!0,forced:a},{find:function(t){return i(this,t,arguments.length>1?arguments[1]:void 0)}}),r(s)},1060:function(t,e){t.exports='<footer class="ius-hosted-ui ius-hosted-ui-main-footer ius-hosted-ui-main-footer-widget">\n <div id="ius-{ns}-footer-content-container" class="ius-hosted-ui-footer-container">\n\n <div id="ius-{ns}-footer-logos" class="ius-hostedui-footer-row">\n <div class="ius-hosted-ui-products ius-hosted-ui-products">\n <div id="ius-{ns}-top-footer-logo" class="ius-hosted-ui-footer-intuit-logo-container">\n \x3c!-- Dynamically injected --\x3e\n </div>\n <ul id="ius-{ns}-bottom-footer-logo" class="ius-hostedui-product-footer-logo-list">\n \t\x3c!-- Dynamically injected

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\ius-recaptcha-layout-e4a144ee[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5571
Entropy (8bit):	5.284348725960237
Encrypted:	false
SSDEEP:	96:sHqHZg1vEILa/ZttiAvAJ5twLmXTj2LSceFD/DJcq4dKG4Tu9:r3Z2A4/uCWiFDex0S
MD5:	299567707052D8DCDB23C4E44F48034C
SHA1:	8000911994AB692F2DB9B3D4F4590A8C7FDEC2F5
SHA-256:	C56CF70473AD4167E7109CAC15E26E182FFAE8F653445283D0AF50E1C82DD72E
SHA-512:	EFD6D11D46D28D4A20C9E5B1CE13478493006AF14657E1B5E452E0D273D42E4896EF676C86635DD60DF5A83368239DD808B007D09746B038990A50A71C86ED9B
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/ius-recaptcha-layout-e4a144ee.js
Preview:	(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[80],{2647:function(n,e,t){(e=t(309)(!1)).push([n.i,".grecaptcha-badge {\n display:none;\n}\n\n.ius-recaptcha-widget .ius-btn-continue-flow.ius-btn-submit {\n float: right;\n font-size: 16px;\n}\n\n.ius-recaptcha-widget .ius-btn-submit {\n float: none;\n}\n\n#ius-recaptcha-header {\n line-height: 25px;\n font-size: x-large;\n}\n\n#ius-recaptcha-fail-header {\n font-size: x-large;\n}\n\n#ius-recaptcha-sub-header {\n font-size: 1.4em;\n}\n\n#ius-recaptcha-fail-sub-header {\n font-size: 1.4em;\n}\n\n#ius-recaptcha-display-wrapper {\n margin: 0 auto;\n width: 304px;\n}\n\n#ius-recaptcha-fail-sub-header {\n padding-top: 5px;\n}\n\n#recaptcha-retry-detail {\n line-height: 1.2;\n}\n\n#ius-recaptcha-display-middle {\n min-height: 134px;\n height: 100%;\n overflow:auto;\n}\n\n.ius-invisible-recaptcha {\n padding-bottom: 0;\n padding-top: 0;\n visibility: hidden;\n height: 0;\n}\n\n.ius-recaptcha {\n padding-botto

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\ius-sign-in-layout-1e99092a[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8267
Entropy (8bit):	5.222915262634032
Encrypted:	false
SSDEEP:	96:sHqcbw65AxHAzWABeKiPAM7S9pwzFICCdRbA/LgvADXhBLmOTbX/GBJoDHi/cqx3:sa07gKII4jTzvkoDNy3
MD5:	500F9D317AB73333E598B2C8E4EAB0B7
SHA1:	522EA09511331EE1207C045B29E2CA7F337B295B
SHA-256:	0E68A4E49CFFC89F8AFFCD1213DCF5BF379F016599E34465BA81C4BD9ECB43C1
SHA-512:	9C3A7D490907C7B9DCC782DCF398A1E56DCE564B9489A46FD7D472B67BD47AEFC0837400F1097704EAC700C92E4879CE2E8836648D496E82CD06B7219A748B45
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/ius-sign-in-layout-1e99092a.js
Preview:	(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[85],{2608:function(n,e,t){(e=t(309)(!1)).push([n.i,".ius-sign-in-widget {\n overflow: visible;\n}\n\n.ius-sign-in-password-captcha {\n min-height: 107px;\n}\n\n.ius-captcha {\n padding-bottom: 15px;\n}\n\n.ius-sign-in-widget .ius-identifier-first-fieldset {\n margin-bottom: 10px;\n}\n\n.ius-identifier-first .ius-checkbox-container.ius-remember-me {\n padding-bottom: 15px;\n}\n\n.ius-sign-in-widget .ius-captcha-tos-container {\n margin: 32px -30px -30px -30px;\n padding: 16px;\n text-align: center;\n}\n\n.ius-sign-in-widget .theme-intuit-ecosystem.ius-captcha-tos-container {\n background-color: #ECEEF1;\n}\n\n.ius-ecosystem-compact .ius-sign-in-widget .ius-captcha-tos-container {\n background-color: #ECEEF1;\n margin: 10px -30px -30px -30px;\n padding: 16px;\n text-align: center;\n}\n\n.ius-sign-in-widget .ius-captcha {\n font-size: 10px;\n color: #8d9096;\n}\n\n@media (max-width: 480px) {\n .ius-sign-in-widg

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\ius-sign-in-theme-f86c1203[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	4340
Entropy (8bit):	5.295773742331159
Encrypted:	false
SSDEEP:	96:sHLWPAsWCvAhUQ6GYTBRbsJhPo/3XwWt+SoJqqUcqAdf5pO:+u4qQ7YDwAvXluluo5pO
MD5:	51891A471493A82625D6F979BF4ECB0D
SHA1:	126EFF075AE2BE63E5BCC6730B4B677030529446
SHA-256:	AC60A533B77B9C17F5C039AC84326CEB2890A3FE53166A1CB6DE7FE7628032F1
SHA-512:	0004D52977152AE15E85A8D6CD47BBBFD5412E14FB3BA117ADFF5095B6CD8F04F48D14C90D25F12BB3388D5528D4F2AC1081C73975EBB61A3F682908BC7798E4
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/ius-sign-in-theme-f86c1203.js
Preview:	(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[86],{2609:function(e,n,t){(n=t(309)(!1)).push([e.i,"\n.ius-sign-in-widget .ius-label-text-me-a-code,\n.ius-sign-in-widget .ius-channel-email,\n.ius-sign-in-widget .ius-label-email-me-a-code {\n font-weight: bold;\n}\n\n.show-focus {\n border: 1px solid #52A8EC;\n outline: 0;\n border-color: rgba(82,168,236,0.8);\n -webkit-box-shadow: 0 1px 1px rgba(0,0,0,0.075) inset, 0 0 8px rgba(82,168,236,0.6);\n box-shadow: 0 1px 1px rgba(0,0,0,0.075) inset, 0 0 8px rgba(82,168,236,0.6);\n}",""]),e.exports=n},308:function(e,n,t){"use strict";var o,r=function(){return void 0===o&&(o=Boolean(window&&document&&document.all&&!window.atob)),o},i=function(){var e={};return function(n){if(void 0===e[n]){var t=document.querySelector(n);if(window.HTMLIFrameElement&&t instanceof window.HTMLIFrameElement)try{t=t.contentDocument.head}catch(e){t=null}e[n]=t}return e[n]}}(),a=[];function c(e){for(var n=-1,t=0;t<a.length;t++)if(a[t].iden

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\jquery.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	85655
Entropy (8bit):	5.366169569576404
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOi79xfWBZ+Bjda4w9W3qT9a98Q:v4J+OlfOM9xrCW6T9a98HrU
MD5:	1DDA243AB48DB4C10F9928E23EFE03C8
SHA1:	C6ED563789A56204E762945E69AC45418F16B639
SHA-256:	DF6BF89BD3AD3F685A901660D2FBA296F12943FA7CCA136213162E8AC406BC80
SHA-512:	55D8E205AC67398483CED26F64EED9FF23246A08E58CA1749A9B12A68914A20BD5D0DCF6A782ADD836E78D7A13086FAA22CB09C98866748BFDE2EB053778D46F
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/scripts/jquery/jquery.min.js
Preview:	/! jQuery v2.2.2 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.2",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\js[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	90842
Entropy (8bit):	5.510869820153992
Encrypted:	false
SSDEEP:	1536:Jv+8meNbwB900GfIge3tb/zWrv/Z2QO+JlOry/PY9JM+a1h9PnZLWoT1:Jv5meNbR0L3FWAfvr3s+k1
MD5:	90675D2A10365437B9C7BF1118435A77
SHA1:	3F0F7AFE5347923AFFC1A6526EDB92F2DF49A432
SHA-256:	1AFEF2FCEE36C829621CF4D3DF0B46E1ADED33E1290561EA9C78739F3687A9BE
SHA-512:	1F608C6E591744F692F037AF20DFA47A2496C0B2107C3F13879816B8521BD6BBC1067026ADFA856E3DD573A131F5EB41F60CC100CE6949EC99BD09FE648700CE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtag/js?id=AW-710954691
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"1",. . "macros":[{. "function":"__e". },{. "function":"__cid". }],. "tags":[{. "function":"__rep",. "once_per_event":true,. "vtp_containerId":["macro",1],. "tag_id":1. }],. "predicates":[{. "function":"_eq",. "arg0":["macro",0],. "arg1":"gtm.js". }],. "rules":[. [["if",0],["add",0]]].},."runtime":[].....};.../.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},da=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:ba(a)}},ea="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},fa;.if("function"==typeof Object.setPrototypeOf)fa=Object.setPrototypeOf;else{var ha;a:{var ia={a:!0},ka={}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\js[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	86772
Entropy (8bit):	5.520006603860036
Encrypted:	false
SSDEEP:	1536:Jv+8meNWwB900GfIgeZtb/zWrv/A+JlOEcnjcy/PY9JM+a1h9PnZL5c1:Jv5meNWR0LZFWsvTnI3s+F1
MD5:	77CED2F1A6D681381709A54E4A28F635
SHA1:	4D02A21BBF8E1548AE47893E2AC60053DADCE48E
SHA-256:	0136288F5D9C1EEB60B4A96FBA1297E09E4F7CA845F6F1BE9CC878EC110F89E2
SHA-512:	D6AFD95D191E93CC65D601841CE30FFD6B068B60EE40D3CD34B1448CA630828CA577485D1FA61BE64062A14897543A3A325952A134FA803CDCC10A5886E09C52
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtag/js?id=DC-8344993
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"1",. . "macros":[{. "function":"__e". },{. "function":"__cid". }],. "tags":[{. "function":"__rep",. "once_per_event":true,. "vtp_containerId":["macro",1],. "tag_id":1. }],. "predicates":[{. "function":"_eq",. "arg0":["macro",0],. "arg1":"gtm.js". }],. "rules":[. [["if",0],["add",0]]].},."runtime":[].....};.../.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},da=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:ba(a)}},ea="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},fa;.if("function"==typeof Object.setPrototypeOf)fa=Object.setPrototypeOf;else{var ha;a:{var ia={a:!0},ka={}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\js[3].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	90864
Entropy (8bit):	5.510920898091253
Encrypted:	false
SSDEEP:	1536:Jv+8meNbwB900GfIgeGtb/zWrv/Z2QO+JlOry/PY9JM+a1h9KnZLWo11:Jv5meNbR0LGFWAfvr3s+h1
MD5:	1647319A98A05E4F44B74E263114A734
SHA1:	53554CC14E93AC079F1F0E622BAA19F6BB5DDC31
SHA-256:	2F7709C5441E8DC5FD81FCDA5D7FA36B0230E4736A07CD85A409CF278F3C6E3F
SHA-512:	DD2729ED8F38204E52B0830A392BE8839CCBB719E677DC11DAADCCD41CA53FD3A8E0E3FB8E197B032E0C59790FB6AED65AF9B399D92E0E5AA5D2D7597E0D5C43
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtag/js?id=AW-710954691&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"1",. . "macros":[{. "function":"__e". },{. "function":"__cid". }],. "tags":[{. "function":"__rep",. "once_per_event":true,. "vtp_containerId":["macro",1],. "tag_id":1. }],. "predicates":[{. "function":"_eq",. "arg0":["macro",0],. "arg1":"gtm.js". }],. "rules":[. [["if",0],["add",0]]].},."runtime":[].....};.../.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},da=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:ba(a)}},ea="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},fa;.if("function"==typeof Object.setPrototypeOf)fa=Object.setPrototypeOf;else{var ha;a:{var ia={a:!0},ka={}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\login[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10922
Entropy (8bit):	5.145691037295741
Encrypted:	false
SSDEEP:	192:PKaejtoFEL6EZMfkRdYmi7J8k+N727pac4:PKdtoFg6EZMfyYmi7Jzm727O
MD5:	D47BF4F571140AB707C83895A1BFD4D5
SHA1:	CE100B6054B4530043B617200078059671ADE99D
SHA-256:	AD48F9DABFEBE508BE9AD357153C4A5DE2D3FE6F83E01393DEFD213CAD26F96A
SHA-512:	B14BCC17B5ECEC7A94713F406E38EE7236D99705235060DA9D4F4D03CF1B37C061EEDFE1D28FCFF468793F97BD625FB731AC0991F6B1A6CB4E7118417C487015
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/login.css
Preview:	html{height:100%;overflow:auto !important}body{background:#193048;width:100%;height:100%;overflow:auto !important}.mobilewarning{margin:auto;padding:10px;border:1px solid #fee6ab;background-color:#fff7e6;width:850px;margin-bottom:10px;text-align:center;font-size:15px}.maincontainer{width:100%;margin-left:auto;margin-right:auto;height:100%}.leftshadow{width:875px;height:auto;margin:auto}.logocontainer{background:#193048}.first-visit .logocontainer{display:none}.qblogo{width:192px}.bodycontainer{background-color:#fff}.bodycontainer table{width:100%}.bodycontainercsbg{background-color:#fff}.footer3rdPartyLogo{position:fixed;bottom:5px;right:10px;opacity:.5}.footer3rdPartyLogo:hover{opacity:1}.bodycontainer_tos{background-color:#fff;font-family:Arial,Helvetica,sans-serif;height:90%;overflow:auto;padding:5px 30px;-webkit-overflow-scrolling:touch}.center{text-align:center}.indent25{text-indent:-.25in}.margin25{margin-left:.25in}.margin50{margin-left:.50in}.margin75{margin-left:.75in}.margin1

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\main.1da0559f[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	50783
Entropy (8bit):	5.562000830296068
Encrypted:	false
SSDEEP:	768:HB5fb43pdsRj8rCs62oiO+opB51Q1AnhAIhVulw4RzirrAoKiWQ4nvHxrp1j4tzy:gsRjX2o3+gV34ti5JWb/xrpKs
MD5:	5EC7B1209EB7ECFD6DB2552DC5105703
SHA1:	FD87FBED6655196FEF3914A85069E30936743484
SHA-256:	06C8A989A9848FF3181BF09834E0618AD6775FA16024A90F21874D79E174F4C3
SHA-512:	D1597BAE2E3F0E431277418989C143DF6906E3C457DF55568C7A7D089916C5EB6590925B168B0E07ED90F7964933F629EFD8B2C549BC18692898C71FEFFA508C
Malicious:	false
Reputation:	low
IE Cache URL:	https://s.pinimg.com/ct/lib/main.1da0559f.js
Preview:	!function(r){var i={};function e(t){if(i[t])return i[t].exports;var n=i[t]={i:t,l:!1,exports:{}};return r[t].call(n.exports,n,n.exports,e),n.l=!0,n.exports}e.m=r,e.c=i,e.d=function(t,n,r){e.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:r})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"u",{value:!0})},e.t=function(n,t){if(1&t&&(n=e(n)),8&t)return n;if(4&t&&"object"==typeof n&&n&&n.u)return n;var r=Object.create(null);if(e.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:n}),2&t&&"string"!=typeof n)for(var i in n)e.d(r,i,function(t){return n[t]}.bind(null,i));return r},e.n=function(t){var n=t&&t.u?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},e.p="",e(e.s=5)}([function(t,P,n){"use strict";(function(t){var i=n(15),o=n(16),u=n(17);function r(){return c.TYPED_ARRAY_SUPPORT?214

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\mobile-manage-expenses-feature-qbo-us-desktop@2x[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1110x500, frames 3
Category:	downloaded
Size (bytes):	90045
Entropy (8bit):	7.972007342408698
Encrypted:	false
SSDEEP:	1536:Zv69QVnwnjVa7/SUmLIDT3eWySpi3wsDi0z7/scQeeyifxsEdLLiGhODQYAAoEHe:Y9onGw9CIfeGU3wsDvePfnhODQRW5I
MD5:	D6A7B5122A74A3CADDFC40CD8E043439
SHA1:	97223A916424970B90C045F2DF577AA11717DDB0
SHA-256:	3003EF9B15F2ADB3EBCF81E574E9B91815B4EA8721127792E4CDB636F2869E78
SHA-512:	C214EA059E42C1C06D4CC4626591A7508D05BA60A9F18CCE6FC56AE9D874C6A1F0074EA49A2DE6D0499D44CB1D4F1CB1099C4C63FAF7546BA16A400C5C149780
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/feature/mobile-manage-expenses-feature-qbo-us-desktop@2x.jpg
Preview:	......JFIF..........................................................+".."+2(2<66<LHLdd.............................................+".."+2(2<66<LHLdd.........V..".................................................u......i...j.T.4.........=6s..-..W4....j.............?...S..?.M..E......~9....wO..z...K.o....t.u\...5).f..G^R...j..~bs..}2..e.........p5.Kb.....7..]...%G......{..fX.j..n.....5.Ff..<}U...K.{..%m...,.....V./^=..v.v.T.....nGk.i.T{<.~<..?G....Cy..mb.Z.'.....7..}n.r....,5}...9...3b.m../.pvn.[..Yk.K........n...>........_..}.e.f...>...>...m.e&..'.......N..j.D..Sen..sV.z..7Z..;..o.E....r...R.g..h..X4u.5.,.].......a..S.....j.f...[.n...[.V...S6yi9.L.....7b....z.v.b.T....hX)V.m.6:....v....t..J.]..d......d..H...4.1.....b.O.....z.@........%ZGk.(..C..........l^%....p..N......H.i.bd.pJCj..W.E....F.m.].@Nw...J.l.{X....Q5...6).3..%.......e...b../......p.j.._......B.3..T6.......b..y...O..q.:.hH.......b..Q...*..!)F...h.S.OH....zO.U.F.j...].

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\mobile-payment-notification-feature-qbo-us-desktop@2x[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1420x1368, frames 3
Category:	downloaded
Size (bytes):	93135
Entropy (8bit):	7.957705158789618
Encrypted:	false
SSDEEP:	1536:0ZV13nMqqb5MWH1DMZYSNGS/hKspOHiCZ1kcBEf//70j8eg2SXkmenMGvBo:0ZH8Tb5MWVMZYmGohHOCCZqcBEf3wDgb
MD5:	1F26B9E4ADF96BE23E0EE4DB3386BAD5
SHA1:	AB595EA3E7237E1FBA019077714A893698E85C64
SHA-256:	2D6EA5C962122252A4A9557D45AE6787CFC081196672FEECCCEEBC022F51AECA
SHA-512:	02A8C6C7E038C707FF68A76E69733363FAB5890FC2725767B7732AD28C2241DCB9CAB112293BE0976A84FA00AC5DB6674E4DFC5C2551C7FBCC150D5A6C525E53
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/feature/mobile-payment-notification-feature-qbo-us-desktop@2x.jpg
Preview:	......JFIF....................................&.....&:$$$$:3>2/2>3\H@@H\jYTYj.ss.............................&.....&:$$$$:3>2/2>3\H@@H\jYTYj.ss.............X...."................................................p....................................................................................................................................................................c...o.....[.:....................8.....o?*.".....P.`...................?...<?....FqH.......{....................;..\|O....H.j..^.V".k..............................<..:.af....ZJ.6.F...^...<.J.b"%kZ.i{.p.............>w..x...y..k.....aH.....]NO.._.OS...Yg.........]u.@..........g.x>7..y.V...X._K^kJgXm......=.._...:g..k..ZfP.. &ffA..}................7....JE+Z.'[^.L.X.WgoogT....~.....?.....~.?.=+L. !.332. .:zz............?.y....v.LR....v.wu..1..}.+..y....o.o..R.2..@L... GG_f..............sS:D.-k#:D/.......6.. .....y....2..@L... D'n..............x9.^t.+X...v.u.H.L.....r........ JffD..@.%=..V.......?7..<.J.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\pixel[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	17781
Entropy (8bit):	5.582110458703852
Encrypted:	false
SSDEEP:	384:xJi5iukbQbBfIJXvBP2w2Ig4YWrxJFeOsvdjHKfOCmmpDsEfeLcy:xJiiusQ1HkJF9vD5fw
MD5:	2C6FB9569ACA0B143E6B0607CDD9424A
SHA1:	8BFA09B8CE11D85A75402A96AA1420D29F0D0117
SHA-256:	44B72AF014F383676FE6B8F48BB8B4B6C0D9BAD9B479EC0B432E1819D124180D
SHA-512:	489444B11BC68DABC8CE5FFFFE80691A7620BF2A7917D082D58A49CBD5BEBAB551449DF511FD9B5F371E281466C7827A799D01F7E9C1140C262583628D3BA21C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.redditstatic.com/ads/pixel.js
Preview:	!function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){return o(e[i][1][r]\|\|r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}({1:[function(require,module,exports){var root,factory;root=this,factory=function(){var CryptoJS=CryptoJS\|\|function(Math,undefined){var create=Object.create\|\|function(){function F(){}return function(obj){var subtype;return F.prototype=obj,subtype=new F,F.prototype=null,subtype}}(),C={},C_lib=C.lib={},Base=C_lib.Base={extend:function(overrides){var subtype=create(this);return overrides&&subtype.mixIn(overrides),subtype.hasOwnProperty("init")&&this.init!==subtype.init\|\|(subtype.init=function(){subtype.$super.init.apply(this,arguments)}),(subtype.init.prototype=subtype

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\pricing[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	926096
Entropy (8bit):	5.234719423164441
Encrypted:	false
SSDEEP:	12288:OZoYueEHQtiyz6u2JrggTj6SlCErYNB/pR:CKHQtiyz6u2cSDrYNB/pR
MD5:	FC9060D5BC1E59F4902CC82D94471ABA
SHA1:	F8D215C3811B5616273B8D92F47A8EE8CAE496C5
SHA-256:	4687E75122D2166F41D309E2909F1C99E706206BF9E22998A6F772006D24185D
SHA-512:	B33A1EE0EBE0C4D5D177D3C814D941A539F4149B8E38433760A89194B2ADAC097D36638BEF472F613A004524F77617360F1577A788EED5EE8148D720CBB20D42
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en_US">. . . . <!DOCTYPE html><html lang="en_US"><head><link rel="preload" href="/qbmds-components/styles/sbseg/fonts.css" as="style"/><script type="text/javascript">!function(e,i){e.raas=e.raas\|\|{},e.raas.csLoggingMessages=[];e.raas.CANIUSE=new function(){this.isFeatureSupported=function(t){return!!e[t]},this.addPolyFillForFeature=function(t,e,a){var n;this.attempt=a\|\|3,0<t.length&&(n="https://cdn.polyfill.io/v3/polyfill.min.js?features="+t+"&flags=gated",(a=i.createElement("script")).onload=function(){e()},a.onerror=function(){--this.attempt,0<this.attempt&&this.addPolyFillForFeature(t,e,this.attempt)},a.src=n,(n=i.getElementsByTagName("script")[0]).parentNode.insertBefore(a,n))}}}(window,document);</script><script type="text/javascript">function csLog(o,e){fetch("https://logging.api.intuit.com/v2/log/message",{method:"POST",headers:{"Content-Type":"application/json",Authori

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\quickbooks-online-dashboard-product-qbo-us-desktop@2x[1].wdp Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG-XR
Category:	downloaded
Size (bytes):	34342
Entropy (8bit):	7.904067333025661
Encrypted:	false
SSDEEP:	768:hLKubuSJjwyWx8tr6/23gbnzbF9QskyLJIvTdI9Z:huEuSJjwV8FJ3cnXrtLupI9Z
MD5:	25E6D61A9C8FAEC96EE145A5B765BE12
SHA1:	ADD14BFA1925DD220A0AFA05A01F06EA4A23006E
SHA-256:	237941596E4294F35DB8B569AAEF3AD9765949083B5CE569AFD088645B64B594
SHA-512:	C6C75A932F445B4096AF752367E0C0854B859E1513938A30DA13D5F8FBD270EB7C14294D161499A1E7F68237469C7ECB119356D32DE5B467B63027D678668AA4
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/product/quickbooks-online-dashboard-product-qbo-us-desktop@2x.jpg
Preview:	II.. ...$..o.N.K..=wv........................................................................B...........B............................WMPHOTO..E.q....0...,HHR..@......+N.........`,>..... a..Z.M....%.v..lk.).%<...=..58Y..f%..!...B..E......y%....}.>..&.I.jS..y.......WJ...:...L..)...K..U.....r...5.b"["m6>.'P...5.....,....%.....W..C..2.h.3.....M...Zi8....).d.J..-.~....RH.{.........}=6........?,.....o.9<OL}R....F.3O.i.9'.R.........c...g=.......T ....UR.r..D...;.#{QJ...y......T.....(O?"..1......yN.a...B....@..`....4.:.9>.U.......g\|+\|..A.."`/...[....n...2b.]...0...~.......i..j....w.U..2_.1>...I..9.1.M.J......V@x...u.;.....D.f.^.zo!.%.......H7 ?.....$...*.L.p......[.W8...W...S..}.,.p..):. 1. i.....UR...n..[.....).DjD...@...vM.........z\..tE....b.....Tf.X._..j.{.@I.........6..tu....~&N...5D.3\._....[.g.j...mWIc=.f.F..E.@o.c."...x#..MI\._.`......:.I.}..%...td.Y.0.l,.p....H....O.....B..Ncj-.'.......{..4!.GN@.....h.R.......n...'....K...,.a0 .B.s.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\reCAPTCHA-logo@2x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 408 x 464, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18160
Entropy (8bit):	7.9507935414647015
Encrypted:	false
SSDEEP:	384:E6bVK9GIzUQWsZdSawiqS61S3z+Ai3Azy1tL62pW1l0Z86vjNPTN:E6pLIAw2aFqSWS3z+AMZ3k/6vhN
MD5:	CC6D2A2EBBDB4CA2D35C2A94F666E56C
SHA1:	7B9695FBE92878E751DB650F89A9E9A74279EE10
SHA-256:	DEDCB23076BE667A897F4A90BDE0BC80C6A6A58CFE68433BDE59546EB9B74EB5
SHA-512:	C9E27F2AAF2AEF1CA88C45EBA39DB2D1C16BAF6886EDDB39FB6723A97320E31697FB53AA8B885B1E445D2F361F91BE0A75B14399D990953D543735A400320E16
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/reCAPTCHA-logo@2x.png
Preview:	.PNG........IHDR..............0\|T..F.IDATx..[l\G..Gq[.j..-.......Q.b....:.=.K.6@#KP..U.!(B&!..i......j.B.$>g...%.(.u..H.T.....P5q..gw......H.b;.b.....f...d.....3C.....B..W.Y..o....c..>k..M$x..L....x"...@..>..N.\..}o>'...Z.=.bd.[c..g.w.9~......!....<E......!....QCd...#_..w.....r7.>...U..?....u...[G.....wG4....+....X...-.R>.,z:.X.X....c.B%60u).._...g.:......._.[...N...t-.)S.J.g<...:.3.Dv.........T..z.#..y_PL......~.nv.k...Z.#...G..^.D..k...jS..m....Ti.J........e _..j.,3j..."..4....#.!sSZ@....RS.K..1.~..d.t.Ra.........T7....L..RK4].....h....\...L./....Q...o.Y-...9.EF.].;!.NS.9.e3..!.2....U..T.'.....%c..IC2.....W.S...v?...MP.{[..7&...t.....p.........V.NF5..J....+5=n%..?T..$.....GK...&..-....3:'(.........}...-...zv2...m.T..V.R.d.Z.......a~.G.xz....M..KT...P....7......X..h<}.d..`.NU;>}\|^0k#"S1..^.i..3L.r.9\|Os.......S..>V.;.xy4..d...*.Z.\|f.pKL.....:.........=.~....;z..n...M.D1.OMC2.L..Sc..f..G.Y..L.&..h&.hX.}m..XW....P.zU..&.....d ..+.i.h.u&B......r....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\rw-accordion[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	6448
Entropy (8bit):	5.1599765122450805
Encrypted:	false
SSDEEP:	192:o7EFqdzqerCBDwo0pBO8ZHlnnPhOcCwFsev:o7YKqerCBDwo0pBO8ZHlnnPhOcCwF3v
MD5:	F93404C7F701964659F476B2B5D31A68
SHA1:	A200A2B2FDC62D9D301463ADEE61C24E875D230E
SHA-256:	E8429A9A9BD5C7E0C96605F5CA0CCD98EEFA172FDDB6C89E9CE7A23407B4E077
SHA-512:	1617DC3DDEA98A256546D29DF53807FE9D079D94E9792E571683A606CB5091BE529E4E0C6B2DBD430DF8822D469BA1625BFAE4EE549AC5E0F76EEEF0DD90BA9F
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/rw-accordion.css
Preview:	.RwAccordion_accordion__525b49d8{max-width:90rem;max-width:var(--breakpoints-xlarge);margin:0 auto}@media screen and (min-width:1024px){.RwAccordion_accordion__525b49d8{padding:0 2.5rem;padding:0 var(--spacing-large)}.RwAccordion_accordion__525b49d8.RwAccordion_fullWidth__525b49d8{max-width:100%}}@media screen and (max-width:calc(1024px - 1px)){.RwAccordion_accordion__525b49d8.RwAccordion_accordion_Rounded__525b49d8{padding:0}}.RwAccordion_accordion__title__525b49d8[class=heading]{margin:0;font-size:2.125rem;font-size:var(--font-size-07);line-height:2.75rem;line-height:var(--font-lineheight-size-07)}@media screen and (min-width:1024px){.RwAccordion_accordion__title__525b49d8[class=heading]{font-size:3rem;font-size:var(--font-size-09);line-height:3.75rem;line-height:var(--font-lineheight-size-09)}}.RwAccordion_accordion__525b49d8 .RwAccordion_accordionContainer__525b49d8,.RwAccordion_accordion__525b49d8>[class*=bg]{padding:5rem 0;padding:var(--spacing-xxlarge) 0}@media screen and (min

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\rw-cart[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1537
Entropy (8bit):	5.247826972897064
Encrypted:	false
SSDEEP:	24:vJZ+2tNhSnPqJvND2DolgnPyfkDOn9tNhoQP2wG0u8niWck3HsCWoiQsCWoT8Y:vjXNGPKvs8qPyf9TNwWF7sCNsCF
MD5:	6CBFD1E41A81D2E9CB66C014E50CDD69
SHA1:	A4EE4B059D4CA83331A41C752CC48C54C33293B3
SHA-256:	5B7D064DC24E64D7C62A645C39B92C8C20FBC28D312CD111E44E167E5BD4978A
SHA-512:	3518789074F9628DFC29C4C8E19152D4E20C3A75B4FA31DA614CD65F7A82BC85A8A211592515509B838DA89EC3B27D5D77CB907B80613103E2A2153779FC5E3B
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/rw-cart.css
Preview:	:root{--breakpointsSmall:48rem;--breakpointsMedium:64rem}.RwCart_root__fc232988{width:91.667%;width:var(--grid-column-11);margin:0 auto 2.5rem;margin:0 auto var(--spacing-large)}@media screen and (min-width:64rem){.RwCart_root__fc232988{width:50%;width:var(--grid-column-06);min-width:44.375rem;padding:0}}.RwCart_rwCart_Title__fc232988{padding:2.5rem 0 1.25rem;padding:var(--spacing-large) 0 var(--spacing-small);text-align:center;font-size:2.125rem;font-size:var(--font-size-07);font-weight:700;font-weight:var(--font-weight-bold)}@media screen and (min-width:64rem){.RwCart_rwCart_Title__fc232988{font-size:2.5rem;font-size:var(--font-size-08);padding:2.5rem 0;padding:var(--spacing-large) 0}}.RwCart_rwCart_Group__fc232988{margin:0 auto 1.25rem;margin:0 auto var(--spacing-small);max-width:var(--breakpointsXlarge)}.RwCart_rwCart_Checkout__fc232988{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:end;-ms-flex-pack:end;justify-content:flex-end;max-width:90rem;max-width:var(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\rw-feature-list[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	6180
Entropy (8bit):	5.151669564822928
Encrypted:	false
SSDEEP:	48:QmPdfj8kjZ+34O1+hIiR85rem92cYtR85rBSgdYxOEKfBsDrvl9W1qSFIRIAr0W9:7V8kjZrO1buPcYcSeYOBsXlUqSG
MD5:	CDBC2C5D3268065D7EB16CFC8887E45D
SHA1:	5FDEBE5215655AEAC47F4017375FC9987268E159
SHA-256:	EA24CE1C8F51440198636F12D333F4929F60185ACC1E7EBEE22EFF82B8E5EF77
SHA-512:	9A0B56C61A0C605F4D028B2749289A85A2D57875094D66F2392D71A9ACDDAF8CA5F740ED8E5BCA1F505644030F2C23E61604A0083AB83C27BCF26823FD80DD84
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/rw-feature-list.css
Preview:	:root{--max-tablet:63.9375rem}.RwFeatureList_rwFeatureList__a9ab4771{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:column;flex-direction:column;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;padding:0 1.25rem;padding:0 var(--spacing-small)}@media (min-width:768px){.RwFeatureList_rwFeatureList__a9ab4771{padding:0 2.5rem;padding:0 var(--spacing-large)}}@media (min-width:1024px){.RwFeatureList_rwFeatureList__a9ab4771{padding:0 2.5rem;padding:0 var(--spacing-large)}}.RwFeatureList_rwFeatureList_Title__a9ab4771{margin:0;max-width:18.875rem}@media (max-width:1023px){.RwFeatureList_rwFeatureList_Title__a9ab4771{font-size:2.125rem;font-size:var(--font-size-07);line-height:2.75rem;line-height:var(--font-lineheight-size-07)}}@media (min-width:1024px){.RwFeatureList_rwFeatureList_Title__a9ab4771{max-width:100%}}.RwFeatureList_rwF

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\rw-testimonial[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10084
Entropy (8bit):	5.08909417823314
Encrypted:	false
SSDEEP:	96:yWX//hazQnbz7SK2YoTMQ9vj8yxdA8YYqYxZL9eXxKxcjT5Fptrt2G:XvZazsF2YNoG8YYRH9eXYwptp2G
MD5:	F60BF1CD19069981A9E97523F6379564
SHA1:	0CE88707E32B1BCE408B25088E3B4E1DFB387641
SHA-256:	3FAC2EFA6CB249456D1C05FE33F930B875ECE18320A7F5D2E2FBA1723EB09CFB
SHA-512:	FDC49163907749A0592A874597F1CD9345867512CB77442845B8EDA1CB677B8B7C57605ED93D18F2CEEF711EB26761090AE12C3C5916E9D195352495208E4557
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/rw-testimonial.css
Preview:	:root{--border-radius-small:0.25rem;--border-radius-medium:0.5rem;--border-radius-pill:624.9375rem;--border-radius-rounded:50%;--border-radius-rw-jumbo:1.75em;--border-radius-rw-standard:1.2em;--border-radius-rw-mini:0.8em;--border-radius-rw-banner:0.5rem;--border-radius-rw-testimonial:1.25rem;--border-width-rw-tertiary:0.125rem;--breakpoints-xsmall:30rem;--breakpoints-small:48rem;--breakpoints-medium:64rem;--breakpoints-large:75rem;--breakpoints-xlarge:90rem;--color-green-01:#108000;--color-green-01-alt:#0d7300;--color-green-02:#2ca01c;--color-green-02-alt:#0e8900;--color-green-03:#53b700;--color-green-04:#7fd000;--color-green-05:#a9e838;--color-green-rw-mint:#94f8ba;--color-green-rw-green:#0fd46c;--color-green-rw-dark:#0a8543;--color-green-rw-darker:#086d37;--color-green-rw-light:#e8f5e3;--color-grey-01:#393a3d;--color-grey-02:#6b6c72;--color-grey-03:#8d9096;--color-grey-04:#babec5;--color-grey-05:#d4d7dc;--color-grey-06:#e3e5e8;--color-grey-07:#eceef1;--color-grey-08:#f4f5f8;--color

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\rw-text-grid[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	18305
Entropy (8bit):	5.228837744443027
Encrypted:	false
SSDEEP:	384:8Eo1YYnquOeypVysIkBcIpq1VxkW4r7CxMZHNLQjvwX:8Z1YYnepJ
MD5:	60D85E326BA1ED815BEB58D96A5B9D42
SHA1:	09FC5DD56F274DEF34399F28B216B5BAD78375FE
SHA-256:	8BC71AA1EC2FB1FA37D1351291FB9EA83CF7AFBCA216E446F4B99682294D40D0
SHA-512:	A5A23402484AE1DD66D85E8A2749E5AE21BC17DC11D13B680A1E30D706C7342CFAAC1321AC4CD295BCDF4890324F50A7F0407480A12759552FA59B2A85B23CFE
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/rw-text-grid.css
Preview:	:root{--border-radius-small:0.25rem;--border-radius-medium:0.5rem;--border-radius-pill:624.9375rem;--border-radius-rounded:50%;--border-radius-rw-jumbo:1.75em;--border-radius-rw-standard:1.2em;--border-radius-rw-mini:0.8em;--border-radius-rw-banner:0.5rem;--border-radius-rw-testimonial:1.25rem;--border-width-rw-tertiary:0.125rem;--breakpoints-xsmall:30rem;--breakpoints-small:48rem;--breakpoints-medium:64rem;--breakpoints-large:75rem;--breakpoints-xlarge:90rem;--color-green-01:#108000;--color-green-01-alt:#0d7300;--color-green-02:#2ca01c;--color-green-02-alt:#0e8900;--color-green-03:#53b700;--color-green-04:#7fd000;--color-green-05:#a9e838;--color-green-rw-mint:#94f8ba;--color-green-rw-green:#0fd46c;--color-green-rw-dark:#0a8543;--color-green-rw-darker:#086d37;--color-green-rw-light:#e8f5e3;--color-grey-01:#393a3d;--color-grey-02:#6b6c72;--color-grey-03:#8d9096;--color-grey-04:#babec5;--color-grey-05:#d4d7dc;--color-grey-06:#e3e5e8;--color-grey-07:#eceef1;--color-grey-08:#f4f5f8;--color

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\so[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	44069
Entropy (8bit):	5.7389017988904145
Encrypted:	false
SSDEEP:	768:7C/d9SvRunraUsQN4lT5+cI1tC5LkQPFJ/N443p4V5s:q6UQT0cI1w5L/1d3p4V5s
MD5:	13857BF1658B4F88A528BBF227B8D178
SHA1:	828F5B2235B6BACD8033DE0252B4F3BF35068C16
SHA-256:	F92F6D2731FB64AC5DF13D05618B57D5FDA91A911B4ADAFC810A9689B67C2564
SHA-512:	8CA9CA0A2449E465087A7BAE7F589590C6939961034DF985A55BD1797CAD65BF52F9EDCD0074017262430AAAE322418ED3C24C8D360897BFB3BE6CAC9FD9D053
Malicious:	false
Reputation:	low
IE Cache URL:	https://ogs.google.com/widget/app/so?bc=1&origin=https%3A%2F%2Fpolicies.google.com&cn=app&pid=269&spid=545&hl=en
Preview:	<!doctype html><html lang="en" dir="ltr"><head><base href="https://ogs.google.com/"><meta name="referrer" content="origin"><link rel="canonical" href="https://ogs.google.com/widget/app/so"><link rel="preconnect" href="https://www.gstatic.com"><link rel="preconnect" href="https://ssl.gstatic.com"><link rel="preconnect" href="https://apis.google.com"><link rel="prefetch" href="https://apis.google.com/js/api.js"><script data-id="_gd" nonce="Et3KDcRXwCrvX5vLXw8CZA">window.WIZ_global_data = {"DpimGf":false,"EP1ykd":["/_/*"],"FdrFJe":"-5429535151293659615","Im6cmf":"/_/OneGoogleWidgetUi","LVIXXb":1,"LoQv7e":true,"MT7f9b":[],"NrSucd":false,"OwAJ6e":false,"QrtxK":"","S06Grb":"","S1NZmd":false,"Yllh3e":"%.@.1625866775417134,179611300,1108054084]","ZwjLXe":545,"cfb2h":"boq_onegooglehttpserver_20210705.03_p0","eptZe":"/_/OneGoogleWidgetUi/","fPDxwd":[1763433,1772879,1782333],"gGcLoe":false,"ikfjnc":["https://policies.google.com"],"nQyAE":{"wcLcde":"false","tBSlob":"false"},"qwAQke":"OneGoogleWidg

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\statement[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	177376
Entropy (8bit):	4.737888218286089
Encrypted:	false
SSDEEP:	3072:2phqT+KmkNf+7/ePaI4tlyaI/y7wOQw8mpDq+69485qSkEbortU24yC3LB+7h6:2phqT+KmkZ+7/9eqREboe24y8Ll
MD5:	265C2DDAEAC8A211DE25F8B62091C166
SHA1:	8088D0B7DF181BEA745A6FA09AA7226F583C8FE9
SHA-256:	4B1E95C874FF8E69D4BA6E9EFA4308C75C45B03C7A7FBD4149502F094B9B9BE7
SHA-512:	E9B5B50AE6960946B65D66253DE7D4C907B6D0239CD08349F50EA32884EAA999D2F6F1F7B83091F78B8B2BE510657C361E0BDB24C54661E341B0F5D8C402280E
Malicious:	false
Reputation:	low
Preview:	..<!DOCTYPE html>. [if lt IE 7]> <html class="no-js lt-ie9 lt-ie8 lt-ie7"> <![endif]-->. [if IE 7]> <html class="no-js lt-ie9 lt-ie8"> <![endif]-->. [if IE 8]> <html class="no-js lt-ie9"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->..<head>..<meta charset="utf-8">..<meta http-equiv="X-UA-Compatible" content="IE=edge">..<meta name="viewport" content="width=device-width, initial-scale=1">..<title>Intuit.: Privacy \| Privacy Statement</title>... This site is optimized with the Yoast SEO Premium plugin v9.2.1 - https://yoast.com/wordpress/plugins/seo/ -->.<meta name="description" content="Our privacy statement spells out exactly what we do with your data after you share it with us. It has all the details about what we collect, who we share it with, and how we use it."/>.<link rel="canonical" href="https://www.intuit.com/privacy/statement/" />.<meta property="og:locale" content="en_US" />.<meta property="og:type" co

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\styles__ltr[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	52867
Entropy (8bit):	5.958224586944697
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKSrKebyBwd/Dl+x2d5YPcPoiDH1fkQJVEwY:4UcW6v+2rKwFDlDP7dnY
MD5:	B1207A1EFB3FC87C56B8EEC39EC65B4C
SHA1:	C1F3A3A13E5D0595AC22227B12FEF4949C7C79E0
SHA-256:	5FE20047C1CC1BE61A786D56C5C02B96453B9C60656D6C8429A1ADD79017E47F
SHA-512:	A4F7279F7C1BB35B9239712C4B954E752FF98739AB38520F1B8E12A75485EA6F2890EBA6AD7FDF074C94928FFA7ECA5A84B32AEAC9EBB10467AC6F082BE189E7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/recaptcha/releases/TbD3vPFlUWKZD-9L4ZxB0HJI/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\support[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	7559
Entropy (8bit):	5.0546159533470725
Encrypted:	false
SSDEEP:	192:XvZazsF2YNoG8YY/VcpdJwW3p8aAMApsAMAf9eT:8Eo1YY9cpdJwW3p29M
MD5:	893606761DF716A39DD023920DA9CE1D
SHA1:	DA2EEDFA7AF1C8D61223C7248C935D33C5319111
SHA-256:	27884C301A25637D4E34C70B892D4084B50902415CFC532DB0354C170F9343DE
SHA-512:	F5A47AF12E0D91B06F2EB1DD589842B343F2B2307FEC6B86BF7A656BA341D8BDF0DCE1C32E2DFA54CF0F53AAD62AC3CAA7167348593761BB248A53A73A83DCC4
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/support.css
Preview:	:root{--border-radius-small:0.25rem;--border-radius-medium:0.5rem;--border-radius-pill:624.9375rem;--border-radius-rounded:50%;--border-radius-rw-jumbo:1.75em;--border-radius-rw-standard:1.2em;--border-radius-rw-mini:0.8em;--border-radius-rw-banner:0.5rem;--border-radius-rw-testimonial:1.25rem;--border-width-rw-tertiary:0.125rem;--breakpoints-xsmall:30rem;--breakpoints-small:48rem;--breakpoints-medium:64rem;--breakpoints-large:75rem;--breakpoints-xlarge:90rem;--color-green-01:#108000;--color-green-01-alt:#0d7300;--color-green-02:#2ca01c;--color-green-02-alt:#0e8900;--color-green-03:#53b700;--color-green-04:#7fd000;--color-green-05:#a9e838;--color-green-rw-mint:#94f8ba;--color-green-rw-green:#0fd46c;--color-green-rw-dark:#0a8543;--color-green-rw-darker:#086d37;--color-green-rw-light:#e8f5e3;--color-grey-01:#393a3d;--color-grey-02:#6b6c72;--color-grey-03:#8d9096;--color-grey-04:#babec5;--color-grey-05:#d4d7dc;--color-grey-06:#e3e5e8;--color-grey-07:#eceef1;--color-grey-08:#f4f5f8;--color

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\svg-close-btn-black-1[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1400
Entropy (8bit):	5.143497455563473
Encrypted:	false
SSDEEP:	24:tPnRRL0yuM7wPDDVr3N43T2sndfwGtmcaN599b5Yngq/UsH/5tND:hRZ0yuMog5wGtmx599b5Yd/3f5tND
MD5:	7A60C821F354B7733CD27BBAF9BDDCA8
SHA1:	57FB9AB8D7F8D0771DE073A8D22F47DC2DD19E11
SHA-256:	861F4C0002290647DF3941B5550D1D3A2090AC0AD831A3F7593C9AF2A84CCFEF
SHA-512:	578036E010EE6CE9062BE87D9D335B18786CE13AEAE4054502356608D12C7505E881E2E19FAF1F674BBE1C0F374E5D2BF6E92E467E45370BC5E2A624D2EA22CF
Malicious:	false
Reputation:	low
IE Cache URL:	https://siteintercept.qualtrics.com/WRQualtricsShared/Graphics/siteintercept/svg-close-btn-black-1.svg
Preview:	<svg width="25" height="25" viewBox="0 0 25 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.<title>svg-close-btn-black-1</title>.<desc>Created using Figma</desc>.<g id="Canvas" transform="translate(835 217)">.<g id="svg-close-btn-black-1">.<g id="Close Buttons">.<g id="Group">.<g id="Group">.<g id="Oval">.<use xlink:href="#path0_fill" transform="translate(-835 -217)" fill="#222222"/>.</g>.<g id="Line">.<use xlink:href="#path1_stroke" transform="translate(-826.5 -208.5)" fill="#FFFFFF"/>.</g>.<g id="Line">.<use xlink:href="#path2_stroke" transform="translate(-826.5 -208.5)" fill="#FFFFFF"/>.</g>.</g>.</g>.</g>.</g>.</g>.<defs>.<path id="path0_fill" d="M 12.5 25C 19.4036 25 25 19.4036 25 12.5C 25 5.59644 19.4036 0 12.5 0C 5.59644 0 0 5.59644 0 12.5C 0 19.4036 5.59644 25 12.5 25Z"/>.<path id="path1_stroke" d="M -1.06066 6.93934L -2.12132 8L 0 10.1213L 1.06066 9.06066L -1.06066 6.93934ZM 9.06066 1.06066L 10.1213 0L 8 -2.12132L 6.93934 -1.060

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\table-link[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	213
Entropy (8bit):	5.065707335545789
Encrypted:	false
SSDEEP:	3:tRBRNqcwR+8IZDmJS4RKb5KVErcHgSFMNVFHNVH1o4qpYL8rl3WTOeVSz7wdNq3M:tnrZfmc4slm6N++L8rFfoNq3KDy8IAME
MD5:	F479D151ADEFBDB29AA1FCE15E39A1B2
SHA1:	20B71505AA1AEB79B14A4C808D2EBDC00821F061
SHA-256:	B0F0B9FF3CC03A8E70FE534872AE959765EB967C86D06469002B0D8A864E78CE
SHA-512:	461839BE21C0F09E994C753C084520CECB8C3999BD418781953413D325B4C85F79BCF086F1ECA303A2A36A4A621A531540F7F40366E41FF29CFC8BF4780CEB2B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/table-link.svg
Preview:	<svg width="16" height="16" xmlns="http://www.w3.org/2000/svg"><path d="M8 0a8 8 0 100 16A8 8 0 008 0zm0 13l-.884-.884 3.492-3.491H3v-1.25h7.607l-3.49-3.491L8 3l5 5-5 5z" fill="#1A73E8" fill-rule="evenodd"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\text-grid[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	565
Entropy (8bit):	5.0425705976287025
Encrypted:	false
SSDEEP:	12:vi7i5lW9J5Jybn2GebohuMZr+WU6EMIRoxRL3bRLpXN8Hn:EC0ry7uar3EToXJt+H
MD5:	AB312594E9574867E15CA1B956EAB301
SHA1:	FC5D277D430D22805A36435358C86E0C59B4DAB3
SHA-256:	E35561E955CD1F7372841A292C990C902AE04496C45BFC9A38C37B3020084939
SHA-512:	0CB88A0159C42E2FAAD819784D48DE396F07E5B7C5961C1F23C8760ACBE39237919DD57D54DD46DEC5F125766BD794DAA7DF5244BB788872CA526B628EBF5BFF
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/qbmds/text-grid.css
Preview:	:root{--breakpointsMedium:64rem;--breakpointsXlarge:90rem}.TextGrid_textgrid__9f065b0d{position:relative;display:-webkit-box;display:-ms-flexbox;display:flex;-ms-flex-wrap:wrap;flex-wrap:wrap;margin:0 auto;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center}.TextGrid_textgrid__9f065b0d.TextGrid_textGridFullWidth__9f065b0d{-webkit-box-pack:justify;-ms-flex-pack:justify;justify-content:space-between}@media (min-width:64rem){.TextGrid_textgrid__9f065b0d{max-width:85rem;max-width:calc(90rem - 80px);max-width:calc(var(--breakpointsXlarge) - 5rem)}}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\timeline-reCAPTCHA-enterprise@2x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 300 x 302, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	33734
Entropy (8bit):	7.987059363787295
Encrypted:	false
SSDEEP:	768:jq9Th/vkMLuJmpR3zR5IOO7cJ6ut97HfrKGowJj+o6oLEoWduf:jy/rLu8V5zIut9LzboVo6jd0
MD5:	9DA1B0727630062BB479CC4C0CF8F5AB
SHA1:	26C19B1038F97A4EBD895264AF90B37EDFCFC4E8
SHA-256:	3B979E4DAA07132790CC8D4F070B9F53202EDEF4B6BCE6A1C05F48E5CF892AF2
SHA-512:	BCCC8CD8A19EB1476D249035DFEC06206FFF9FD54AB4B3213A3424878A04BCA10E561604CB7C78B0953EDDA0D7E28267CDE9529EEA1F721FF7B6480041FCC09C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/timeline-reCAPTCHA-enterprise@2x.png
Preview:	.PNG........IHDR...,.........4./~....sRGB........DeXIfMM........i.......................................,.....................@.IDATx..}..U.....{_.......... .c FcM.h...../...O1F..%...1.`... ...JS...^..v...7..w......{o....[.....9g.9C..\...p).%..YRO...D......z........b.T..P--...V5AU.P....D.,..S1..D4M.........HUh.53.inU2...`ex.9S=AG?I.je.#..."..QV...@.U(./$.u.\.3.t....B.%..'1.h......\.G..k.W..G).....p5.'.._.e..X....J..D......m.a.G.[.`p{`...5.Z...-%.(..V&.F.....-.}...'=.Fzp.0..rb..D.H..a@x.(....D..U.......4TQ..=...\.&...Pf.......$..{.%..XQ.E.0\|.Z..........)b....q?)O..=.ss.0....a.bGuF.....@...R.-....1..0.Q.....)..T@./.C.gG...Ac...(...Wn.R.qs.8..L.]D!;...X....<;..I....G.L.....RK_Gr.9Mh.c.,...1.;..3.n..........h...p-.G..B.............vp..2......j;..-..K".'..NjE..`..x.zu.$.DN.. .B.a...T1.....!j0........./.\.....X.N.+A.......>XU^PF.....HW...&O.w@'O.4>...3.k..S..SL..b..)Q.......P.n.MIP ..'d..f.*....z.e..W.1..].......X..-.+%E=..h]...Qv.b....N..f..O..\.l.Z9.t.h

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\timeline-reCAPTCHA-v2@2x[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 550x450, frames 3
Category:	downloaded
Size (bytes):	32390
Entropy (8bit):	7.927041520963555
Encrypted:	false
SSDEEP:	768:+mXfP83LleAtrld5r1JICVu+Glz1X3B+Yfavm9CBG3v3:LXflUJd5UCVu+gJfUBsP
MD5:	D29265686C4D4A5272F849EF036A56BB
SHA1:	57BAB015BF383DFFE84135F258F57CFDC1C8A2F6
SHA-256:	95952F018A91C0A28D1EF9AC4789F82D794653F5775908F956DEACD2D87F46D2
SHA-512:	335017B12D80ECAD7AB5A6A0758ECE7B570D925D64D749D1CC5E69CEDA92FE3067D5CB9BA223A71B85E551499522685B1609064660829891FBEAF46A1818455B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/timeline-reCAPTCHA-v2@2x.jpg
Preview:	......JFIF.....d.d......Ducky.......K......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:dfa290bf-66db-4f32-b4ed-d8bbfbd69d66" xmpMM:DocumentID="xmp.did:F824277EA33311EA92B5833CED3E98CD" xmpMM:InstanceID="xmp.iid:F824277DA33311EA92B5833CED3E98CD" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0d56070d-274b-46f4-81ae-58df3422a2f6" stRef:documentID="xmp.did:dfa290bf-66db-4f32-b4ed-d8bbfbd69d66"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\timeline-reCAPTCHA-v3@2x[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 500x250, frames 3
Category:	downloaded
Size (bytes):	21863
Entropy (8bit):	7.873407202458621
Encrypted:	false
SSDEEP:	384:+4Du1Vxee/rPPi9m3f4P8JuGbdZdg3GlppmjzwG20xg6feIiCj:+516BkoC6WlppG40xbGaj
MD5:	09F9CF155E41F34AA92A2F1F1ED7B645
SHA1:	51BE82738D4240E3070D19CAE60DE877CAABE2FB
SHA-256:	ABF5BA22108AF7F6A99992EC3FE3203BD4D01F939CDC64F6EF3F4E7F5DCFE0B9
SHA-512:	D95B6A8FA46B157FC1A74A1F6E5CE9ECBE09A64001C49EF96DFBD67A798725B663B55FE60D9227BC5C193C6DE5C1D88EB0C73D7D1327C4D87344E4FA7E02CB1A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/timeline-reCAPTCHA-v3@2x.jpg
Preview:	......JFIF.....d.d......Ducky.......K......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:9719e915-4c25-4131-af80-44511a86b85d" xmpMM:DocumentID="xmp.did:F824277AA33311EA92B5833CED3E98CD" xmpMM:InstanceID="xmp.iid:F8242779A33311EA92B5833CED3E98CD" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:04143180-8952-43b7-89c7-6531b3e0b86e" stRef:documentID="xmp.did:9719e915-4c25-4131-af80-44511a86b85d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\tr[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	2.8317663774021287
Encrypted:	false
SSDEEP:	3:CU9yltxlHhn:mn
MD5:	B798F4CE7359FD815DF4BDF76503B295
SHA1:	F8CC6ADDF1707AD236AD9970B0A48F9733D07DA5
SHA-256:	10D8D42D73A02DDB877101E72FBFA15A0EC820224D97CEDEE4CF92D571BE5CAA
SHA-512:	921944DC10FBFB6224D69F0B3AC050F4790310FD1BCAC3B87C96512AD5ED9A268824F3F5180563D372642071B4704C979D209BAF40BC0B1C9A714769ABA7DFC7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.facebook.com/tr/?id=850485508311844&ev=Microdata&dl=https%3A%2F%2Fquickbooks.intuit.com%2Fpricing%2F&rl=&if=false&ts=1625899168256&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22QuickBooks%C2%AE%20Online%20Pricing%20%26%20Free%20Trial%20%7C%20Official%20Site%22%2C%22meta%3Adescription%22%3A%22Get%20the%20right%20QuickBooks%C2%AE%20Online%20plan%20for%20your%20business%20at%20the%20best%20possible%20price.%20Start%20your%20free%20trial%20to%20join%207%20million%20businesses%20already%20using%20QuickBooks.%22%7D&cd[OpenGraph]=%7B%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%5D&sw=1280&sh=1024&v=2.9.43&r=stable&a=tmtealium&ec=1&o=14&fbp=fb.1.1625899127849.417818535&it=1625899165982&coo=false&dpo=LDU&dpoco=0&dpost=0&es=automatic&tm=3&rqm=GET
Preview:	GIF89a.............!.......,...........D..;.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\track-event-lib-init.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8375
Entropy (8bit):	5.4826193151228795
Encrypted:	false
SSDEEP:	192:LuZjXeivkfQ/hnhg0qBI5Xv11r16huG8Rsm0wECivQwZobx5:KVeivF/hnhlqu5f11r16hRWEVonbx5
MD5:	CEF6495D7202D918E65EA1D5B149E950
SHA1:	D1C140C26D9BB91AA7AFEE2B8B56F29238F58661
SHA-256:	DDD161008CDF419129FE84CD264D78E3BB60E02F4654ECBE4AC8613D4F62F15D
SHA-512:	D85FBBE27E1597721BFD3C4DBE74EFC9B99DEA2617C38549CCA51F1E05331DE9472524D7F1A7F80C893AC5D5C89307488513F97280324DF8BA7420BD94A43DAB
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/ecs-analytics/202104142250/track-event-lib-init.min.js
Preview:	!function(){"use strict";var t={};(function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})})(t);var e={PROD:"prod",QA:"qa",DEV:"dev",GOLDEN:"golden",PREPROD:"preprod",E2E:"e2e",TEST:"test"},n=Math.floor(Date.now()/1e3),i="INFO",o="ERROR",a={env:"e2e"},c=["Intuit.data.entdataproc.trackstarwebapp"],r=function(t,i,o,a){var r=window.location.href,s=r?encodeURI(r):r,d="7afa70fe-f1cc-11e7-8c3f-9a214cf093ae",l={timestamp:"".concat(n),destination:[]};a&&c.length>1?l.destination.push(c):delete l.destination;var p=[{eventTypes:"APPLICATION_CLIENT",spanId:d,parentSpanId:d,rootSpanId:d,transactionId:"tid1",env:o,deviceId:"DeviceId1",logType:t,appId:"appId1",component:"component",url:s,userId:"TrackStar",oilProps:l,execTimeMs:100,Message:i}],u="",E="";o===e.PROD?(u="https://logging.api.intuit.com/v2/log/message",E="prdakyresvV5u8cSivv3so3GRaYFhdu22H2NUJEn"):(u="https://logging-e2e.api.i

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\vendors~jquery-c9b19fa7[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	86983
Entropy (8bit):	5.296124393057327
Encrypted:	false
SSDEEP:	1536:lLiBzcGyW+L2zU4bx60BWYd4+M8oFeVJ8dyPqKEWi0cFBzXOPkYLu+osDtuC23:zteVJ86x6Osu+C23
MD5:	F726E54938D78E2E18C4B0A1A799D381
SHA1:	CC4F4739781D3E5EE5724274C433C05BC098FD40
SHA-256:	4CB3A77669AC9A9AF553B536A3F58C34C5586165C28DEFF7AC6DB76F4A005D6F
SHA-512:	DDD0E9720E3F5606B52318B89D3A4F9F52B8CC58C1F30FA728333CA8B8B0BF8FADFE1849D6A7A1A1F23C4C4ABEC5A10D6125FF9578DC482C8C0E4BD947B23AA6
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/vendors~jquery-c9b19fa7.js
Preview:	/! For license information please see vendors~jquery-c9b19fa7.js.LICENSE.txt /.(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[118],{2822:function(e,t,n){var r;!function(t,n){"use strict";"object"==typeof e.exports?e.exports=t.document?n(t,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return n(e)}:n(t)}("undefined"!=typeof window?window:this,(function(n,i){"use strict";var o=[],a=n.document,s=Object.getPrototypeOf,u=o.slice,l=o.concat,c=o.push,f=o.indexOf,p={},d=p.toString,h=p.hasOwnProperty,g=h.toString,v=g.call(Object),m={};function y(e,t){var n=(t=t\|\|a).createElement("script");n.text=e,t.head.appendChild(n).parentNode.removeChild(n)}var x="3.1.1",b=function(e,t){return new b.fn.init(e,t)},w=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,T=/^-ms-/,C=/-([a-z])/g,E=function(e,t){return t.toUpperCase()};function k(e){var t=!!e&&"length"in e&&e.length,n=b.type(e);return"function"!==n&&!b.isWindow(e)&&("array"===n\|\|0===t\|\|"number"==typeo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\www-embed-player[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	196768
Entropy (8bit):	5.5991158351211565
Encrypted:	false
SSDEEP:	3072:jQq0mB8G508Fet3IF8jzZqovS/C5PmMlekOdWs:XJFet3IF8jzZbnlmMlQ
MD5:	143ACACDC058C189076414F7419AACFF
SHA1:	32D32CF201D91BB1B143160665FBDD9E5E08FC74
SHA-256:	6BF931D6C5F9208B846BCBA27FA4B3A581F43559911846BB811D5A848CBFE748
SHA-512:	4FD49577993E1EDDA3B4968ABB82388793DF1556CCB5248F8216AAD098606A94453DB8C65A27E3274E6B29B849DC372764E1EDA289FFCCDC59C09CD291E5618B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube-nocookie.com/s/player/51ff6aac/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function t(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.t("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e+

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\www-player[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	331395
Entropy (8bit):	5.204469815562603
Encrypted:	false
SSDEEP:	1536:xDrzltP3StI/ZPp/p9rbBMkx6MFfykOP5FRrDJciM/Byj/8486D6M7eNAvldC8vW:xDrzzV9UgzATSBxcm
MD5:	D29CC7DD5E3339028034B4F308B1CD51
SHA1:	A28539A4B5D2BBED99009BAA0B38D6D49257AF40
SHA-256:	D815775F36DE7CF811A67054EF9B292CF0B7730C61FABA018C5756FDA850F136
SHA-512:	61598B08987E30FC018AB8369AB420495E939E8112C14B32C8AC68E6B3D5E33E6385B7EC2995937119775DBB26DF3B6D929CB80C512E60D5BF0C0B7296E52087
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube-nocookie.com/s/player/51ff6aac/www-player.css
Preview:	.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);-ms-touch-action:manipulation;touch-action:manipulation;-ms-high-contrast-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode,.html5-video-player.ytp-fullscreen{background-color:#000}.ytp-big-mode{font-size:17px}.ytp-autohide{cursor:none}.html5-video-player a{color:inherit;text-decoration:none;-webkit-transition:color .1s cubic-bezier(0,0,0.2,1);transition:color .1s cubic-bezier(0,0,0.2,1);outline:0}.html5-video-player a:hover{color:#fff;-webkit-transition:color .1s cubic-bezier(0.4,0,1,1);transition:color .1s cubic-bezier(0.4,0,1,1)}.ytp-probably-keyboard-focus a:focus{box-shadow:inset

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\xdr[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	7705
Entropy (8bit):	5.267342740897501
Encrypted:	false
SSDEEP:	192:3GsjbTMrGU5akE3d76FlrzdpfKST0i0ORvuk7I9rNkSY0KvHV9M66qsNhe4vRvig:FbYIkE3d0DvdsIv4LNwZyn
MD5:	E79C0223209A33387C256A03904A98EC
SHA1:	8BFA853BCFF771C8196D738E9FADF8DD9A72DB2E
SHA-256:	B1C7CAD9F043E46190C7F18CF31A06CF05DA5311BFA1C315ADFC419414732597
SHA-512:	7994F0DDFBA0BCCCF47B45BB00D49351A73E7444EC6EF8352B0220E26A42D3B822662066FE527214FA966309D649284366DD5AE25690A70DDD612049149DD307
Malicious:	false
Reputation:	low
Preview:	...<html>.<head>..<meta name="ius-session" content="F6185787EE024A5F956E14F83A5BEFE6">..<meta name="robots" content="noindex">..<script type="text/javascript" src="scripts/ius.xdr.min.js?v=1.70.0.356"></script>........<script type="text/javascript">...// Polyfill Date.now for IE..Date.now = (Date.now \|\| function () {...return new Date().getTime();..});.. var intuitFlowId = '';. var xdrReady = null;. var receiveMessage = null;. var metaSessionId = $ ? $("meta[name='ius-session']").attr('content') : '';. var logger = null;. try {. logger = parent && parent.intuit && parent.intuit.ius && parent.intuit.ius.logger ? parent.intuit.ius.logger : null; . } catch (err) {}.....var getSessionId = function() {...var _sessionId = '';...try {....if($ && $.cookie) {....._sessionId = $.cookie('ius_session');....}........if(!_sessionId) {....._sessionId = metaSessionId \|\| "F6185787EE024A5F956E14F83A5BEFE6";....}....} catch(err) {.......}.........return _sessionId;..}....var re

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\02698a3383765bd3c250471c53a86c5a[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6789
Entropy (8bit):	4.942475749260986
Encrypted:	false
SSDEEP:	96:hHSTqdQTHkjKYk7MPEQDgJUf7qC7n+olFhT7n+olVJUf7NTehsY5:9cYk1NIRBHaTs
MD5:	02698A3383765BD3C250471C53A86C5A
SHA1:	CF1BB1E4F5DAE0C3BB0605B77565BDA2C12D75E5
SHA-256:	A1F675A555609FC86E744FA9D86B35F0924803C10D8D3DA2CA01D4171188552E
SHA-512:	BFF93C586263EEB0E70CF8FEE862DA65D5B28B5590685FAE05197F8F13C1567C3D8533C4C7E6C15620F8461B432E9A5EC223D98FE598A52030079375613484B6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/02698a3383765bd3c250471c53a86c5a.svg
Preview:	<svg id="Content" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <clipPath id="clip-path">. <path d="M48,7A41,41,0,1,0,89,48,40.989,40.989,0,0,0,48,7Z" fill="none"/>. </clipPath>. <linearGradient id="linear-gradient" x1="54.72" y1="89.276" x2="92.089" y2="51.907" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#dfe1e5"/>. <stop offset="0.077" stop-color="#e9eaed"/>. <stop offset="0.227" stop-color="#f6f6f7"/>. <stop offset="0.426" stop-color="#fdfdfd"/>. <stop offset="0.875" stop-color="#fff"/>. </linearGradient>. <clipPath id="clip-path-2">. <rect x="53.811" y="50.998" width="39.187" height="39.187" rx="3.104" ry="3.104" fill="none"/>. </clipPath>. <linearGradient id="linear-gradient-2" x1="29.406" y1="65.093" x2="66.594" y2="27.905" xlink:href="#linear-gradient"/>. <clipPath id="clip-path-3">. <rect x="28.501" y="27" width=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\1.4ee7d22df25138b17ea4.chunk[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	26421
Entropy (8bit):	5.199013981703958
Encrypted:	false
SSDEEP:	768:lEQrTKABAYAcyGIA45DAy8DiAhAPEqs8D9PsdsvgPW7a9utvTBapIBvT69aP8omi:7TKABAYAcyGIAsUiAhAPOWWsvJa8tv9N
MD5:	FA30819EDBB3F545D8AEEC76C86AC3BF
SHA1:	75D4B910DAE2EE7FC30634728F4DC926B5168075
SHA-256:	5C54081FB0F22B3291D7E8500BFB780D901F6D46675ED318C671736419BFC0BA
SHA-512:	53C0F1FE218A3F2F52CFEFB044AEB60D7D152C25EB45B741FA79E9F5433F0221B8D8B298F1DF509A08FE19C02B48E80A055FA123180EEED74777D0A925604F94
Malicious:	false
Reputation:	low
IE Cache URL:	https://siteintercept.qualtrics.com/dxjsmodule/1.4ee7d22df25138b17ea4.chunk.js?Q_CLIENTVERSION=1.55.0&Q_CLIENTTYPE=web
Preview:	try{(window["WAFQualtricsWebpackJsonP-cloud-1.55.0"]=window["WAFQualtricsWebpackJsonP-cloud-1.55.0"]\|\|[]).push([[1],{23:function(e,t,i){"use strict";i.d(t,"a",function(){return o});var n=function(e,t,i,n){return new(i\|\|(i=Promise))(function(r,o){function s(e){try{c(n.next(e))}catch(e){o(e)}}function a(e){try{c(n.throw(e))}catch(e){o(e)}}function c(e){var t;e.done?r(e.value):(t=e.value,t instanceof i?t:new i(function(e){e(t)})).then(s,a)}c((n=n.apply(e,t\|\|[])).next())})},r=function(e,t){var i,n,r,o,s={label:0,sent:function(){if(1&r[0])throw r[1];return r[1]},trys:[],ops:[]};return o={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function a(o){return function(a){return function(o){if(i)throw new TypeError("Generator is already executing.");for(;s;)try{if(i=1,n&&(r=2&o[0]?n.return:o[0]?n.throw\|\|((r=n.return)&&r.call(n),0):n.next)&&!(r=r.call(n,o[1])).done)return r;switch(n=0,r&&(o=[2&o[0],r.value]),o[0]){case 0:case 1:r=o;break

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\13062c65605335a46d14656c46af3868[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	12178
Entropy (8bit):	5.047868477962458
Encrypted:	false
SSDEEP:	192:hC5CW/p5sraARO646QfW62lBHTKqB7BIh6k4o:cx/ptB9WLlBHVB7Btg
MD5:	13062C65605335A46D14656C46AF3868
SHA1:	E9F0C2B7DDA37E448C75EDA6B6A57188ECC59F55
SHA-256:	70472A3B23DDA5B98B7A887D12AE8D7979EA8A53EC1955C237F62D6A86A14780
SHA-512:	B3340EE18D7C067D11B9806605CE214E1907CFDEFD3D2B5A3B6829A83D2859CAF35FDB884E033DA423C30A1FB4F7733464D9847E025F5929A67FF92A68109823
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/13062c65605335a46d14656c46af3868.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="30" y1="165" x2="56" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/>. <stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/>. <stop offset="0.624" stop-color="#9aa0a6" stop-opacity="0.4"/>. <stop offset="0.786" stop-color="#9aa0a6" stop-opacity="0.626"/>. <stop offset="0.946" stop-color="#9aa0a6" stop-opacity="0.898"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="815.315" y1="-230.563" x2="857.315" y2="-230.563" gradientTransform="translate(-664.532 550.377) rotate(-15)" gradientUnits="userSpaceOnUse">. <stop

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\138.0325dd387ee9cba92d33[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	6346
Entropy (8bit):	5.487556510737001
Encrypted:	false
SSDEEP:	96:78EW3h2LOf6einBwCpMzUle1T5UzXiTCHHKnN8nykHfiRUOhjar02cA:7ooOhinyCp6UuyKnNUyQwUNrr
MD5:	052A8B8CF85E770E569C6FCFF9C85416
SHA1:	F2C394307426039D2137C02C140825966DAD1BB8
SHA-256:	8B70C20301EF8DBE0AF8E87F9EB33A405DC70659642CE40DBA4409148A9A829D
SHA-512:	131DA2620A4A26976AAE81D3BBFE829C4CF9B7B2B07BBF3B1D16C9057789E106FB8FCE7F22817DB3892C238C489FD65A461D4EF5D210D5AD4BFBA682B156534C
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/138.0325dd387ee9cba92d33.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[138],{rMsy:function(e,t,o){"use strict";o.r(t),o.d(t,"useModal",(function(){return p}));var r=o("q1tI"),a=o.n(r),l=o("i8i4"),n=o.n(l);function i(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function d(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),o.push.apply(o,r)}return o}function c(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{};t%2?d(Object(o),!0).forEach((function(t){i(e,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(o)):d(Object(o)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(o,t))}))}return e}function f(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){if("undefined"!=typeof Symb

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\16.ec2404580159b543370a.chunk[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1755
Entropy (8bit):	5.249370505639515
Encrypted:	false
SSDEEP:	48:vhPmjvJllHWMQ9vz0WlsEVxt26bWM6Rc9nr/jAyHa:Jokvzj3t4pm/Ha
MD5:	C97ED667949DE354F93B3EE0C43DD47B
SHA1:	410EB05E41B3CFF40EE7F51DB01EFB2E240281D7
SHA-256:	FBB4FAE58967437E64076861B09DDE574B704A920083B0AB155C9095625C49BF
SHA-512:	A8D48FC662CCE1E2C9941960DB6DCC64FE5ED84D80F047395A62BDFBC4EC758D12F46C51771A8EDA8AC2E1790B586A9961DC172A22A0FB43474624053DD11A43
Malicious:	false
Reputation:	low
IE Cache URL:	https://siteintercept.qualtrics.com/dxjsmodule/16.ec2404580159b543370a.chunk.js?Q_CLIENTVERSION=1.55.0&Q_CLIENTTYPE=web
Preview:	try{(window["WAFQualtricsWebpackJsonP-cloud-1.55.0"]=window["WAFQualtricsWebpackJsonP-cloud-1.55.0"]\|\|[]).push([[16],{53:function(e,n,t){"use strict";t.r(n);var i=function(){return function(e,n){this.payload=n,this.type=e}}();t.d(n,"addPopunderEmbeddedDataHandler",function(){return o}),t.d(n,"updatePopunderEDCallback",function(){return a});var o=function(e){var n=window.QSI,t=n.util,i=n.windowHandler,o=n.dbg;t.observe(window,"beforeunload",e,!0);try{i.setupWindowHandles()}catch(e){o.e(e)}},d=function(e,n){if("string"==typeof e&&"string"==typeof n){var t=window.QSI.windowHandler,o=t.getWin(n);if(o){var d=new i("setTargetUrlInPlaceholderWindow",e),r=JSON.stringify(d),a=t.getWindowOrigin(window);o.postMessage(r,a)}}},r=function(e,n,t,o){if(void 0!==e&&void 0!==n&&"string"==typeof t&&"string"==typeof o){var d=window.QSI,r=d.windowHandler,a=d.dbg,w=r.getWin(t);if(w){var s=new i("setEmbeddedData",{key:e,value:n}),c=JSON.stringify(s);if(/targetwindow/.test(t))w.postMessage(c,o);else try{var l

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\1fa3e4ce8ac456f39ed02a6f9eb49b14[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6422
Entropy (8bit):	5.145755305279271
Encrypted:	false
SSDEEP:	96:h2Cy4en2j0yQldta1TvQT6oj0cDGXTmg1t0UUIPLynG6+bRP14N/3UmXjMUz:y5cK9DiTFT0UUyynGAbjz
MD5:	1FA3E4CE8AC456F39ED02A6F9EB49B14
SHA1:	11E1FEC7C61FC6E168E47FA9C2316BA83B2A883F
SHA-256:	404919D82E7FCAF8F8B31573F9483B45482988CFD984F0463C9CFD322E58F08A
SHA-512:	3DD1B9136CFEB7C1FFF636C7B735CF18F1BFF2C80FC7426113BE2219C2BBCFEF3F37036DF8D8D2BDBE0EA7EE822FA0E9C7EFD45BFD328C7C8FD264ECC0C00945
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/1fa3e4ce8ac456f39ed02a6f9eb49b14.svg
Preview:	<svg id="Content" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <linearGradient id="linear-gradient" x1="35.79" y1="10.115" x2="49.214" y2="10.115" gradientUnits="userSpaceOnUse">. <stop offset="0.001" stop-color="#23893c"/>. <stop offset="1" stop-color="#34a853"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="50.448" y1="27.536" x2="63.288" y2="19.416" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#e09108"/>. <stop offset="0.021" stop-color="#e19308"/>. <stop offset="0.37" stop-color="#efa906"/>. <stop offset="0.703" stop-color="#f7b605"/>. <stop offset="1" stop-color="#fabb05"/>. </linearGradient>. <linearGradient id="linear-gradient-3" x1="37.583" y1="34.548" x2="53.68" y2="24.367" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#b7251d"/>. <stop offset="0.126" stop-color="#c32b21"/>. <st

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\44.28693bbe5961de8116ce[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	53682
Entropy (8bit):	5.423084001918236
Encrypted:	false
SSDEEP:	768:KCiCyiU3Xd7PcFWDZHsTd3Pqt3fkB4CzvOU1KHMCvcu690MIHUaUKlAlUuPM1saq:mI2HaIMvvZe3Z9pIMCd9
MD5:	D4FE0A2998D4C881B2C450574DA07A7C
SHA1:	CEDB81DEA93E9A8CB1C6504D5942FB8DB9D504AF
SHA-256:	6A1FD55A709E286F5AEAD2F0C5D9E5C8E1520270427549D356E9EBABFFD8B849
SHA-512:	A05A8364E2CA74C1DCF95FC66F510B1364F80BA3EE285EEDEA1E9C907A63D02D74E77D30909A05BDF3A6B99FAA3D75708D8FD4A8E55F54C4B9016CAF9987E738
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/44.28693bbe5961de8116ce.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[44],{"0Yk/":function(e,t,r){"use strict";r.r(t),r.d(t,"CONSTANTS",(function(){return Ae}));var n=r("q1tI"),i=r.n(n);function o(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(){return(a=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e}).apply(this,arguments)}function d(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function s(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?d(Object(r),!0).forEach((function(t){o(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):d(Object(r)).forEach((function(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\48.a8a39c59c79d390a1b22[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	475
Entropy (8bit):	5.133026267378896
Encrypted:	false
SSDEEP:	12:lDuQybLbNSyF6wLWir6bHdINCTZo4uZMdOJplomyGDE5on:lDuQybV1FxLnr69INCTZ/uZMd1GDE5o
MD5:	D6D2B0832F90E340CF6AAA84C44A1559
SHA1:	27826BA56E102BAB3A1DF6C834A70D7911836895
SHA-256:	218A831D884E65DF4A7441CCD0FFD78E59C48C687226F058188FE87FC1EB89C1
SHA-512:	583B118A139756899CDAE6C48882B9192D76D4060F3AD1ABA6E271D94DAC8C72E4BE2244EC22C81E754738AC753177AC0838414152317995461125E3B46EE40F
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/48.a8a39c59c79d390a1b22.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[48],{oRxe:function(e,n,t){"use strict";t.r(n);var a=t("q1tI"),c=t.n(a);const l=e=>{let n=e.children,t=e.pricingContext;return c.a.createElement("div",{className:"core-block-container","data-testid":"ReusableBlocks","data-tracking":"reusable_blocks"},a.Children.map(n,e=>Object(a.cloneElement)(e,{pricingContext:t})))};l.defaultProps={children:null,pricingContext:{}},l.displayName="ReusableBlocks",n.default=l}}]);

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\4UaGrENHsxJlGDuGo1OIlL3Owpg[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 26180, version 1.1
Category:	downloaded
Size (bytes):	26180
Entropy (8bit):	7.9847487601205405
Encrypted:	false
SSDEEP:	768:axmLo3N7711ZHlB8N6yt/DvXjXjmDNzv6:bLodN78Ii7jKJv6
MD5:	4F2E00FBE567FA5C5BE4AB02089AE5F7
SHA1:	5EB9054972461D93427ECAB39FA13AE59A2A19D5
SHA-256:	1F75065DFB36706BA3DC0019397FCA1A3A435C9A0437DB038DAAADD3459335D7
SHA-512:	775404B50D295DBD9ABC85EDBD43AED4057EF3CF6DFCCA50734B8C4FA2FD05B85CF9E5D6DEB01D0D1F4F1053D80D4200CBCB8247C8B24ACD60DEBF3D739A4CF0
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owpg.woff
Preview:	wOFF......fD................................GDEF.......\.......QGPOS.......#..+...QGSUB.......y......m.OS/2...\|...U...`h...cmap...........~n...cvt .......y........fpgm...........uo..gasp................glyf......=...m...5head..Z....6...6..'.hhea..Z.... ...$.0.5hmtx..[...........).loca..]....y.....K.6maxp..`H... ... .=..name..`h.......r.i6Ppost..a..........i]\prep..d....p..... ..x.U....Q.F..=#.0ZD.@@<..... "...Zp....+.c.f...).>Z.bm.Om..?...\\.zi.f.^b...[y/.........x..Z..+..=Z...~.................0.8....r.\|...=s&oG....q.Fg...Y...:Wc..>..p..p....)......{.aX..}.?.k... .......N.=.c.Do.....~2.=.i$....0..>..!.'v.....q....>>.....o....30..0.w..\|hR&mrf....,.Y..........%<..0.#.~...._a.c......K.z...H1..u.2.Y_..0.9..`.,.:.=(.N~...a.<.D=.....V....\..>./.B.`iE..A9.S.\|?.g).Rj..8Q...h.y.G.^.kx.o.....(...#....9...,4I8...7..o.I\|@x..1.>'...H.m..$.yp..f..%..F$0.0.I.1...WR...E..8?a..\|"................A.(...ZJ.q.K\|...S.1..ht.ck....e...T.Zs,W..0..%.i.R...Ku.K.y.....j.RD..~..dpsh.fc.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\4f19891c43001db11efc8048f9bc7cdb[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2184
Entropy (8bit):	5.006709078848764
Encrypted:	false
SSDEEP:	24:t4Lu3K0HxEGSGjGeGxGE+ePCgXP/jN4J9ZQu5x/MTFJv3/ufn7d79C7RudPfdjrf:+GnHx16ZAE+eV/iUZt/iPFGsXJ2kx
MD5:	4F19891C43001DB11EFC8048F9BC7CDB
SHA1:	FB001AFC35E6B79D7771DD3893102C14718A58CD
SHA-256:	4F0D0BECD3F8A0496FA98581492B85F53AAFDF0CD51E5626B5FD0B6AB2DB9379
SHA-512:	A59528BAB7A538E4F221BCA27440EB88C873950D1595AA7718FF9613D7CE14CE40CBD29D209B0BCC3C8029360E2BC3740AB723802492E75D13C91A153D7DF457
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/4f19891c43001db11efc8048f9bc7cdb.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <linearGradient id="linear-gradient" x1="48" y1="71" x2="48" y2="33" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#5f6368"/>. <stop offset="0.232" stop-color="#5f6368" stop-opacity="0.699"/>. <stop offset="0.568" stop-color="#5f6368" stop-opacity="0.32"/>. <stop offset="0.836" stop-color="#5f6368" stop-opacity="0.086"/>. <stop offset="1" stop-color="#5f6368" stop-opacity="0"/>. </linearGradient>. </defs>. <title>site_sec_C_08</title>. <g style="isolation: isolate">. <g id="Content">. <g>. <path d="M48,7A41,41,0,1,0,89,48,40.989,40.989,0,0,0,48,7Z" fill="#e8eaed"/>. <g>. <path d="M16,33H80a0,0,0,0,1,0,0V68a3,3,0,0,1-3,3H19a3,3,0,0,1-3-3V33A0,0,0,0,1,16,33Z" fill="#fff"/>. <path d="M77,71H19a3,3,0,0,1-3-3V33H80V68A3,3,0,0,1,77,71Z" opacity="0.3" fill="url(#linear-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\52.1ee9f18769fc31e0ea93[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	13573
Entropy (8bit):	5.377741479706662
Encrypted:	false
SSDEEP:	384:MCCmARs8LdRT2j0dtndLHpPLssPxL3Kt/33mkg8byTWHmXn:MCAS2T2j0dtndCsPN+33mkg8byTWIn
MD5:	9EFC7CDC09EC9813F542F2CFE6F56BCF
SHA1:	2329DEF127E700CD96FFB2F8FA0EE5B43BB7E1E8
SHA-256:	CB62E1F3B8A04ED3BCB3152C6C48F052DFD120256ADA431F931DD2298807AFD9
SHA-512:	D576C4A9D5D39CA3CFA10F3C5AE45F4D844CC3AC852C175E56ACB7C9EF90929BC508F510BCFA6953F96B69083C9D93510D0B261ED46D96AD1BBBB946DDBB0C30
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/52.1ee9f18769fc31e0ea93.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[52],{cWRW:function(e,t,a){"use strict";a.r(t),a.d(t,"CONSTANTS",(function(){return R}));var n=a("q1tI"),r=a.n(n);function i(){return(i=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var a=arguments[t];for(var n in a)Object.prototype.hasOwnProperty.call(a,n)&&(e[n]=a[n])}return e}).apply(this,arguments)}function d(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){if("undefined"!=typeof Symbol&&Symbol.iterator in Object(e)){var a=[],n=!0,r=!1,i=void 0;try{for(var d,o=e[Symbol.iterator]();!(n=(d=o.next()).done)&&(a.push(d.value),!t\|\|a.length!==t);n=!0);}catch(e){r=!0,i=e}finally{try{n\|\|null==o.return\|\|o.return()}finally{if(r)throw i}}return a}}(e,t)\|\|function(e,t){if(e){if("string"==typeof e)return o(e,t);var a=Object.prototype.toString.call(e).slice(8,-1);return"Object"===a&&e.constructor&&(a=e.constructor.name),"Map"===a\|\|"Set"===a?Array.from(e):"Arguments"===a\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:C

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\58.121b44c6fec956d6ceba[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3106
Entropy (8bit):	5.275685086556396
Encrypted:	false
SSDEEP:	48:lDyg19XDxgHDbVyFlsJHDbVyF0WGNLFdM/R0mDTietFJFDukDFEnZaRW:FvVCrrt1La/Rd3zJF6gyZaA
MD5:	B5A8BE77B0B71F1FA87CBE9282A2D117
SHA1:	ECB050C56D202D0B9395A5C6218EECD0C2C24FC3
SHA-256:	29DDC1221086282E86483318DD421464B1EC1135743F6AFCDB35FF7227EC28DA
SHA-512:	9FED05EF47DB01DC4DDE49DF3CB0521DCCDDC6286C6ECB94F4652F4F08EDA789D2C22D185BF5EACF3CE22BBE5E2BF67FADFBCFE636CD3D01D2FB9826BF4D6B16
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/58.121b44c6fec956d6ceba.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[58],{YMXe:function(e,t,i){"use strict";i.r(t),i.d(t,"CONSTANTS",(function(){return p}));var r=i("q1tI"),s=i.n(r);function a(){return(a=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var i=arguments[t];for(var r in i)Object.prototype.hasOwnProperty.call(i,r)&&(e[r]=i[r])}return e}).apply(this,arguments)}var o=function(e,t){return function(e){!function(){var t={}.hasOwnProperty;function i(){for(var e=[],r=0;r<arguments.length;r++){var s=arguments[r];if(s){var a=typeof s;if("string"===a\|\|"number"===a)e.push(this&&this[s]\|\|s);else if(Array.isArray(s))e.push(i.apply(this,s));else if("object"===a)for(var o in s)t.call(s,o)&&s[o]&&e.push(this&&this[o]\|\|o)}}return e.join(" ")}e.exports?(i.default=i,e.exports=i):window.classNames=i}()}(t={exports:{}}),t.exports}(),n={"rw-disclaimer-item":"RwDisclaimerItem_rwDisclaimerItem__922141af","rw-disclaimer-item__text":"RwDisclaimerItem_rwDisclaimerItem__text__922141af","light-t

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\59.740f32e3b800564e6a2c[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	29616
Entropy (8bit):	5.392300293129162
Encrypted:	false
SSDEEP:	384:L3aCXir+NSfpCT+yJdjmvPl+c+C4OoN6Pu9rFQzl+4C:LqCXir+04d7CvPlkC4OoUPuXQx+L
MD5:	9F9FEC78EC6A939C01AE9995CA6B1D50
SHA1:	54B62947DCA29CDAD0F198AD7D60C6C5A23EBD83
SHA-256:	CDC304B8D4F432E8D616793F71674BD0C76CB3762BBF018BCE5CCF1EDED2575A
SHA-512:	AC1AB5A2F1E8BA9F76E8E79D306A230A45353035158F9E10280ACAA802F2942342CB52EA393F03B0E67FF8D48818B83D74E5CAF9E8AAB83FAA9BAB9CE6A811C5
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/59.740f32e3b800564e6a2c.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[59],{"P/4M":function(e,t,n){"use strict";n.r(t),n.d(t,"CONSTANTS",(function(){return Se}));var r=n("q1tI"),a=n.n(r),i=n("i8i4"),o=n.n(i);function l(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function s(){return(s=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e}).apply(this,arguments)}function c(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function u(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?c(Object(n),!0).forEach((function(t){l(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):c(Object(n

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\5959e84c2197c8a27da0a717f1cd47d5[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1812
Entropy (8bit):	5.137605121069892
Encrypted:	false
SSDEEP:	24:tDLu3OP/je+R5kHxEG5GCGoGBG8+eiCfP/jNQJQce+vlUDlnlUD5/z6jERC6TlYd:hGO/pWHxYFbw8+er/BIRz6w7rT+
MD5:	5959E84C2197C8A27DA0A717F1CD47D5
SHA1:	717BD4592135C09EF42DE6767EA4C2D7FE844C1D
SHA-256:	EC86659A0D1607B58CF5E3ED06414FA776ED65BC97F9F6B7BDF184EF2D607973
SHA-512:	F1D0CB152D197415D55DB3D274941E100257A40453379BF4502CB6AA6C0218D5D5BA29C417B6D3AD925B331248A16AA5B141B0E2541AD4876088FEADDE49DE1D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/5959e84c2197c8a27da0a717f1cd47d5.svg
Preview:	<svg id="Content" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <clipPath id="clip-path">. <path d="M48,7A41,41,0,1,0,89,48,40.989,40.989,0,0,0,48,7Z" fill="none"/>. </clipPath>. <linearGradient id="linear-gradient" x1="29.091" y1="71.218" x2="66.018" y2="34.291" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#2c66bf"/>. <stop offset="0.201" stop-color="#3572d4"/>. <stop offset="0.446" stop-color="#3c7de6"/>. <stop offset="0.704" stop-color="#4183f1"/>. <stop offset="1" stop-color="#4285f4"/>. </linearGradient>. </defs>. <title>site_sec_C_09</title>. <g>. <g>. <path d="M48,7A41,41,0,1,0,89,48,40.989,40.989,0,0,0,48,7Z" fill="#e8eaed"/>. <g clip-path="url(#clip-path)">. <path d="M35.543,42.584a10.048,10.048,0,1,0-2.421-19.789,12.572,12.572,0,0,0-22.647,4.788,7.546,7.546,0,0,0,.992,15Z" fill="#fff"/>. </g>. <g>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\5e7cd445f8861a262a3da876f855a4cc[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1068
Entropy (8bit):	5.114357448467999
Encrypted:	false
SSDEEP:	24:tDLu30ureO+exC/urN9uraurz9dde61Lj1uj+FhlHcsuUCZXHcmD0HWi4I:hG0uN+eOuvuGu4mDjuf3fi
MD5:	5E7CD445F8861A262A3DA876F855A4CC
SHA1:	B0CBB7191D67F8553B3292D5B721710F1C3994E5
SHA-256:	3F4E4B6EDE035C2ACD2917EEE9DB73B3FB4774179D03762E25C945F48C197979
SHA-512:	742E9F9D2AE39DAEFECE21516E1EEDAA4B7F531EB86801D8FE44904B49156ADC3B2B5854C519AD6AD92F9DB2FBA3431ECE3B03B8986C2A725573565D291C6954
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/5e7cd445f8861a262a3da876f855a4cc.svg
Preview:	<svg id="Content" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <clipPath id="clip-path">. <circle cx="48" cy="48" r="41" fill="none"/>. </clipPath>. </defs>. <title>site_sec_C_06</title>. <g>. <g>. <circle cx="48" cy="48" r="41" fill="#e8eaed"/>. <circle cx="48" cy="48" r="41" fill="none"/>. <circle cx="48" cy="48" r="41" fill="none"/>. <g clip-path="url(#clip-path)">. <path d="M89.981,22.441,67.05,68.843c-1.63,3.328-5.58,3.008-7.182-.581L51.8,50.168c-1.613-3.616-5.6-3.907-7.208-.526l-6.8,14.3C36.141,67.408,32.029,67,30.5,63.224L25.637,50.7a4.25,4.25,0,0,0-7.675-.708l-9.3,15.345" fill="none" stroke="#fbbc04" stroke-linecap="round" stroke-miterlimit="10" stroke-width="6"/>. </g>. <circle cx="48" cy="47.981" r="11.526" fill="#fff" stroke="#34a853" stroke-miterlimit="10" stroke-width="6"/>. <circle cx="87.5" cy="27.5" r="8.5" fill="#fbbc04"/>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\5gt2D9IcQkbcuaHd[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	84166
Entropy (8bit):	5.445605775130476
Encrypted:	false
SSDEEP:	384:Mv75GagPair0pcw//8jUG1Wgdrz69HZAlPZG8s3tqxjh0SsTgqHbHDHuH2HMHkHm:8pSwMh1WHAu68NLbSttNK8uw
MD5:	E10CEDD7FEC363BD430156FA8796A943
SHA1:	447CC4BFEF5B3C00CE2753F3F28777901571799C
SHA-256:	E604CFF1C702D46A6923ECEE55FF7FC734FAC76283DF0E5FC72A4C245849390A
SHA-512:	026CD7666D54D129867BDC1240B245B52CD4CE6B3F045ADC9438DB2B84B5D04062D1F8EA0338226C4D0916A15CC779618252B3766D9469750F8488C74CC601B6
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_3J=td_3J\|\|{};td_3J.td_1Z=function(td_L,td_F){try{var td_b=[""];var td_J=0;for(var td_a=0;td_a<td_F.length;++td_a){td_b.push(String.fromCharCode(td_L.charCodeAt(td_J)^td_F.charCodeAt(td_a)));td_J++;.if(td_J>=td_L.length){td_J=0;}}return td_b.join("");}catch(td_K){return null;}};td_3J.td_5O=function(td_t){if(!String\|\|!String.fromCharCode\|\|!parseInt){return null;}try{this.td_c=td_t;this.td_d="";this.td_f=function(td_b,td_i){if(0===this.td_d.length){var td_Z=this.td_c.substr(0,32);.var td_I="";for(var td_k=32;td_k<td_t.length;td_k+=2){td_I+=String.fromCharCode(parseInt(td_t.substr(td_k,2),16));}this.td_d=td_3J.td_1Z(td_Z,td_I);}if(this.td_d.substr){return this.td_d.substr(td_b,td_i);.}};}catch(td_W){}return null;};td_3J.td_4K=function(td_D){if(td_D===null\|\|td_D.length===null\|\|!String\|\|!String.fromCharCode){return null;}var td_O=null;try{var td_S="";var td_s=[];var td_q=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCha

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\6asvUl0epD_hebOG[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	97809
Entropy (8bit):	5.465183612493959
Encrypted:	false
SSDEEP:	1536:o/9v39vB9vBH9vp9vN9ve9v5Wr/DAULkjW/7ivGZTPF:o/9v39vB9vF9vp9vN9ve9vAr/DAULU+J
MD5:	4180785527C84C4B7D43EB86D75BD0A1
SHA1:	B52992E4EEBF4BD113384888C1AB408526A1DF00
SHA-256:	429720DDAFDDA920A865D4DC3AFD88255515CDFAA12E8C300563F797B3DAC23F
SHA-512:	9CDCA26FF99C4FE3807F67A6E6C6B9142543A7867F1AAAB8FCD46270D2A238BC782F8018E2FB1EC2FFE75EDC08858C0260F9BC9BBB968ED8DB5841FB337CCF31
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_0U=td_0U\|\|{};td_0U.td_5k=function(td_B,td_D){try{var td_G=[""];var td_x=0;for(var td_i=0;td_i<td_D.length;++td_i){td_G.push(String.fromCharCode(td_B.charCodeAt(td_x)^td_D.charCodeAt(td_i)));td_x++;.if(td_x>=td_B.length){td_x=0;}}return td_G.join("");}catch(td_p){return null;}};td_0U.td_3r=function(td_I){if(!String\|\|!String.fromCharCode\|\|!parseInt){return null;}try{this.td_c=td_I;this.td_d="";this.td_f=function(td_Y,td_t){if(0===this.td_d.length){var td_r=this.td_c.substr(0,32);.var td_N="";for(var td_V=32;td_V<td_I.length;td_V+=2){td_N+=String.fromCharCode(parseInt(td_I.substr(td_V,2),16));}this.td_d=td_0U.td_5k(td_r,td_N);}if(this.td_d.substr){return this.td_d.substr(td_Y,td_t);.}};}catch(td_b){}return null;};td_0U.td_1C=function(td_Q){if(td_Q===null\|\|td_Q.length===null\|\|!String\|\|!String.fromCharCode){return null;}var td_Y=null;try{var td_k="";var td_I=[];var td_j=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCha

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\70.246d3e1da26f980d8244[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	36772
Entropy (8bit):	5.385647039208734
Encrypted:	false
SSDEEP:	768:gT2j0d9HVeNFn3BT6MCc5nVT2j0dMM8b2Gz2qPtnitEuEMxOLgDM77k3Qq9zUfXD:7IwaG5n4IuzJ//gGF
MD5:	5B46E4F0CF8F6C15D7CF9F45471D1BA4
SHA1:	D0D902688D5E0D383CDC6F58F766F395C5166432
SHA-256:	AFB637B98229810C9D6EF85DD4866FD8BD6AE9F97188F66DD157B0ACF5DB8D2F
SHA-512:	13AEABACE101A4B20AF71F8875A800FF5D0C8669E925BA291D990FAFAC7516960FAD9A9BC1931A7B10F977F981EFAB7EB64025AAAE8F37DE479E5AE9B0AC5A19
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/70.246d3e1da26f980d8244.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[70],{mvAf:function(e,a,t){"use strict";t.r(a),t.d(a,"CONSTANTS",(function(){return de}));var n=t("q1tI"),r=t.n(n);function i(e,a,t){return a in e?Object.defineProperty(e,a,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[a]=t,e}function d(){return(d=Object.assign\|\|function(e){for(var a=1;a<arguments.length;a++){var t=arguments[a];for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])}return e}).apply(this,arguments)}function o(e,a){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);a&&(n=n.filter((function(a){return Object.getOwnPropertyDescriptor(e,a).enumerable}))),t.push.apply(t,n)}return t}var l,s,c=(l=s={exports:{}},void function(){var e={}.hasOwnProperty;function a(){for(var t=[],n=0;n<arguments.length;n++){var r=arguments[n];if(r){var i=typeof r;if("string"===i\|\|"number"===i)t.push(this&&this[r]\|\|r);else if(Array.isArray(r))t.push(a.apply(this,r));else if("o

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\88tERywSwzdi8Xvv[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	97809
Entropy (8bit):	5.453874295184857
Encrypted:	false
SSDEEP:	768:B7twzh954+7bRKoVtgv3R1cmHeEY+ztHchLyT:BBCj54+RyRY+ztH1T
MD5:	EE3F46154FF75A103B4428ED541E6C6A
SHA1:	38C35CFD28857F405F9A8C84A3D72406ADD14146
SHA-256:	80D3F39E18D6FDF4D4B31EC4E3685D7D3FA4B5FB4D6F7181E79ABB4F416EC4C1
SHA-512:	D93ECAB88E2F2652885373CD87947B5159570C998287D3F91FC3EB79B9665BDF8D376D42EE59378CF22509276BF92840F48D086CD1FBD7CE89366A31AAA29A6E
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_1k=td_1k\|\|{};td_1k.td_2R=function(td_X,td_W){try{var td_M=[""];var td_e=0;for(var td_Q=0;td_Q<td_W.length;++td_Q){td_M.push(String.fromCharCode(td_X.charCodeAt(td_e)^td_W.charCodeAt(td_Q)));td_e++;.if(td_e>=td_X.length){td_e=0;}}return td_M.join("");}catch(td_d){return null;}};td_1k.td_5U=function(td_Q){if(!String\|\|!String.fromCharCode\|\|!parseInt){return null;}try{this.td_c=td_Q;this.td_d="";this.td_f=function(td_o,td_H){if(0===this.td_d.length){var td_W=this.td_c.substr(0,32);.var td_R="";for(var td_O=32;td_O<td_Q.length;td_O+=2){td_R+=String.fromCharCode(parseInt(td_Q.substr(td_O,2),16));}this.td_d=td_1k.td_2R(td_W,td_R);}if(this.td_d.substr){return this.td_d.substr(td_o,td_H);.}};}catch(td_n){}return null;};td_1k.td_3O=function(td_q){if(td_q===null\|\|td_q.length===null\|\|!String\|\|!String.fromCharCode){return null;}var td_Q=null;try{var td_u="";var td_U=[];var td_A=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCha

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\900a793eae04f4bddd675f8d95c4a794[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4391
Entropy (8bit):	5.07432704633403
Encrypted:	false
SSDEEP:	48:+GO/YWHx4GLZ/W12HxDWj6V7QlWHxjUW+ev/3jZVV8gFOiawwEMqjJ79oqFCB2IK:+Hp2ShN4Q3ji9w8qj1C/JBWgWV
MD5:	900A793EAE04F4BDDD675F8D95C4A794
SHA1:	D79FE87CC4B220245AB72251DCF3AE4C71108544
SHA-256:	166EAB00B3516B5AEB1BB114FA70D57E0F4E021D4C06735C6969B08C5B7E1FDB
SHA-512:	E18FC18597424E69987E13E8F4E6E174A56B46C2D1616E203AC9C02EFBEFB47CCABB39ED999B0DF1784CEFC0D7444C19E2DDACA30022F45864554F999587DE13
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/900a793eae04f4bddd675f8d95c4a794.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <clipPath id="clip-path">. <path d="M48,7A41,41,0,1,0,89,48,40.989,40.989,0,0,0,48,7Z" fill="none"/>. </clipPath>. <linearGradient id="linear-gradient" x1="12" y1="68" x2="24" y2="68" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.116" stop-color="#9aa0a6" stop-opacity="0.054"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.201"/>. <stop offset="0.546" stop-color="#9aa0a6" stop-opacity="0.44"/>. <stop offset="0.823" stop-color="#9aa0a6" stop-opacity="0.768"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="46" y1="71" x2="46" y2="25" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#f29900"/>. <stop offset="0.138" stop-color="#f29900" stop-opacity="0.81

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\Asset[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	5125
Entropy (8bit):	5.093321854925754
Encrypted:	false
SSDEEP:	96:uh3MCZ3f2PlVM5QRFj4a+//lG+drAyCj3MCZ3CL2PlVM5QRFj4a+//lG+drAyf:6Zv2PlVM5YmG+drAyUZi2PlVM5YmG+dt
MD5:	EE5D4414819A18C69038B471DCC40653
SHA1:	C58045F85226E45B0C33925C9966F29A5ADFF1DD
SHA-256:	A22F55D9BA5E73D6F62283C16E4A357DC6AB066256ED2AECD589B8923E879351
SHA-512:	FA0534CDACA4E217E7C8A34B07527900442AE7F4473CDF65C24D56C0580163D3C36288DD7C3FB9D63ED2494109BDBB117DFD7B52D5483F5C9CADDF3E1AA5E667
Malicious:	false
Reputation:	low
IE Cache URL:	https://siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=SI_cUcg2bFBgkvVMWi&Version=10&Q_ORIGIN=https://quickbooks.intuit.com&Q_CLIENTVERSION=1.55.0&Q_CLIENTTYPE=web
Preview:	{"InterceptDefinition":{"BrandID":"intuitsocial","InterceptID":"SI_cUcg2bFBgkvVMWi","InterceptName":"US-EN-QB-Pricing-V2Reimagine Quant Intercept","Revision":"10","DeletedDate":null,"ActionSets":{"AS_3qjFDO9pF1gVSOW":{"ID":"AS_3qjFDO9pF1gVSOW","Label":"Control","Creative":"CR_9XiodepvzZHv2Qe","CreativeType":"PopOver","WeightedSampleRate":"","Target":{"Type":"Survey","PrimaryElement":"SV_816jBMu9ubbHqnk"},"EmbeddedData":[{"name":"DI_SID","type":"JavaScriptVal","value":"if(typeof decibelInsight === 'function' && decibelInsight.isCollecting())decibelInsight.getSessionId()"},{"name":"IVID","type":"Cookie","value":"ivid"},{"name":"Treatment ID","type":"StaticVal","value":"19415_50643 Current"},{"name":"URL","type":"CurrentPage","value":null}],"ActionOptions":{"targetNewWindow":true,"targetEmbedded":false,"targetFullScreen":false,"resizeForEmbeddedTargets":true,"targetWidth":"1000","targetHeight":"800","accessibilityTitle":"","displayElement":"","selectedDevices":{"browsers":{"Browser\|all":t

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\Asset[2].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4376
Entropy (8bit):	5.05533583036084
Encrypted:	false
SSDEEP:	96:/3R9ubDcFmH1OncDQfkX6RIdTCKWaD7i+Az/9SgxuE/H+:p9ubDcFc1ycDQfkDdTCKWOi+S/wgxuE2
MD5:	61FED9BAC5136FE48AD95ED0CC97A6E9
SHA1:	BB303011D52DCEA8FE4FE4C055C3336CE3E034D2
SHA-256:	6C5A9AF96E3B52881AC49280DC975ACC07BA0F6524E324768B2DCF7F1A3EECDC
SHA-512:	7FBF98A42D677114DF5557ED2D8E1D4D5539A42118D40FECE5FCD0E70AECEDD79DAE91B8B62FC89F66E134FBD34B75746051D14FBB596A8ADE0C8058170251DE
Malicious:	false
Reputation:	low
IE Cache URL:	https://siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=CR_9XiodepvzZHv2Qe&Version=3&Q_InterceptID=SI_cUcg2bFBgkvVMWi&Q_ORIGIN=https://quickbooks.intuit.com&Q_CLIENTVERSION=1.55.0&Q_CLIENTTYPE=web
Preview:	{"CreativeDefinition":{"BrandID":"intuitsocial","CreativeID":"CR_9XiodepvzZHv2Qe","Revision":"3","Title":"US-EN-Reimagine_Quant","ZoneID":"ZN_eW2Pz3YjX9PoGGN","Type":"PopOver","Options":{"elements":{"Elements":[{"type":"CloseButton","style":{"width":"25","height":"25","borderWidth":"0","borderColor":"rgb(0, 0, 0)","backgroundColor":"transparent","zIndex":2000000002,"opacity":70,"display":"block","borderRadius":"0"},"position":{"top":"62","bottom":"911","left":"798","right":"807"},"positionAnchors":{"positionX":"left","positionY":"top"},"content":"<span role=\"button\"><img alt=\"close\" src=\"https:\/\/siteintercept.qualtrics.com\/WRSiteInterceptEngine\/..\/WRQualtricsShared\/Graphics\/siteintercept\/svg-close-btn-black-1.svg\" \/><\/span>","unitsOfMeasurement":{"width":"px","height":"px"},"locators":false},{"type":"Target","style":{"width":"539","height":"44","borderWidth":"0","borderColor":"rgb(0, 0, 0)","backgroundColor":"transparent","zIndex":2000000000,"opacity":100,"display":"blo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\Asset[3].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3420
Entropy (8bit):	5.106345462611206
Encrypted:	false
SSDEEP:	96:jAbLca46V21pc01uaQm56xf1/wleLf0dO21g:jAbLcabV21pc01uaQ26xf1/6eLf0dOIg
MD5:	646C213FD00289FFBD0621A66C9AFEFF
SHA1:	7B0491C1F72F4FDD15D94C69CD317EC38B651EA4
SHA-256:	458236BA7E131CC5635061CD8A2DB1194ADA65A2117C93FF770B02C3B148BE6E
SHA-512:	B08229E8BBE09FC7E2A760B4C4CCAE35F50E34CCEF59975A7B7E2D81A20B98E3E0854F435674568F71D21ABD6C424E95A433BB4A4932C60B820D8D56A5991D8D
Malicious:	false
Reputation:	low
IE Cache URL:	https://siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=CR_00zSh2XljmGuGIB&Version=26&Q_InterceptID=SI_b9JqcViSHgBURE1&Q_ORIGIN=https://quickbooks.intuit.com&Q_CLIENTVERSION=1.55.0&Q_CLIENTTYPE=web
Preview:	{"CreativeDefinition":{"BrandID":"intuitsocial","CreativeID":"CR_00zSh2XljmGuGIB","Revision":"26","Title":"Feedback-for most of site-Left slider","ZoneID":"ZN_eW2Pz3YjX9PoGGN","Type":"Slider","Options":{"elements":{"Elements":[{"type":"PopOver","style":{"width":"350","height":"525","borderWidth":"1","borderColor":"rgb(186, 190, 197)","backgroundColor":"rgb(255, 255, 255)","zIndex":2000000000,"opacity":100,"display":"block","borderRadius":"0"},"position":{"top":"79","bottom":"392","left":"468","right":"365"},"positionAnchors":{"positionX":"left","positionY":"top"},"content":"","unitsOfMeasurement":{"width":"px","height":"px"},"locators":false},{"type":"EmbeddedTarget","style":{"width":"350","height":"523","borderWidth":"0","borderColor":"transparent","backgroundColor":"rgb(255, 255, 255)","zIndex":2000000000,"opacity":100,"display":"block","borderRadius":"0"},"position":{"top":"81","bottom":"394","left":"469","right":"366"},"positionAnchors":{"positionX":"left","positionY":"top"},"conte

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\Asset[4].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	2809
Entropy (8bit):	5.088548417870926
Encrypted:	false
SSDEEP:	48:YlU/bU0veast+r0nqglyN6Mn5nQhpW34kUwWFj8fa+/dlluC/C5+bYOrAys1nj/A:oUTUst2PlVM5QRFj4a+//lG+drAyD
MD5:	1C771A73FB0CA07F891A2572B44E23A3
SHA1:	79F93F21153C76E13C89EC9C879F17FBDB09007F
SHA-256:	9D5F9C51338AA32BBB74AAE2F6175CC5CFEA772DC35308FEC859A62D821D8039
SHA-512:	5E468C564815DACC7DC7472D9197ED42AFBD991D0211AEEBE5C09CBCA0B2F790A2F3093B19BBD6B9FE7AADB555FE18ECE1438C49E9107E41ED85695A74A7A956
Malicious:	false
Reputation:	low
IE Cache URL:	https://siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=SI_b9JqcViSHgBURE1&Version=11&Q_ORIGIN=https://quickbooks.intuit.com&Q_CLIENTVERSION=1.55.0&Q_CLIENTTYPE=web
Preview:	{"InterceptDefinition":{"BrandID":"intuitsocial","InterceptID":"SI_b9JqcViSHgBURE1","InterceptName":"US-EN-QB-All-Desktop-Feedback","Revision":"11","DeletedDate":null,"ActionSets":{"AS_a5nri9ML0LWuPQx":{"ID":"AS_a5nri9ML0LWuPQx","Label":"US Feedback Survey","Creative":"CR_00zSh2XljmGuGIB","CreativeType":"Slider","WeightedSampleRate":"","Target":{"Type":"Survey","PrimaryElement":"SV_e3OUNzieHGcZFw9"},"EmbeddedData":[{"name":"DI_SID","type":"JavaScriptVal","value":"if(typeof decibelInsight === 'function' && decibelInsight.isCollecting())decibelInsight.getSessionId()"},{"name":"URL","type":"CurrentPage","value":null},{"name":"IVID","type":"Cookie","value":""}],"ActionOptions":{"targetNewWindow":true,"targetEmbedded":false,"targetFullScreen":false,"resizeForEmbeddedTargets":true,"targetWidth":"1000","targetHeight":"800","accessibilityTitle":"","displayElement":"","selectedDevices":{"browsers":{"Browser\|all":true,"Browser\|Internet Explorer\|all":true,"Browser\|Firefox\|all":true,"Browser\|Chrom

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\Bootstrap[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	525167
Entropy (8bit):	5.435880846002095
Encrypted:	false
SSDEEP:	6144:AFkegjKHGsHY7KYMoYS3Lj+096SVelgzkgs5XeBaAkrssCIpcGoQxXVGs/NcCinf:beHHmKYZkgs5XeB2OBHp
MD5:	62FBA959CC7B2CC4B619836932252B9F
SHA1:	4EC5BB5F0F0C308501CBAB73C6FE08407F1FA27C
SHA-256:	90BAA9B39C594DF6A03BF21B53D02DB3DBFFB4FE0A6EA6EC0882D856526CFBC7
SHA-512:	AC6AACEE2F179E00528A79040AC82200F443A324632767C02D7D6C84D9D142D6EDFD93E2B193A089A74006F7D7247DAFCF78A22BF51AB5CC1096E5750A5978FC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.intuit.com/intuit/us_sbg_prod/Bootstrap.js
Preview:	(function ensightenInit(){var ensightenOptions = {client: "intuit", clientId: 203, publishPath: "us_sbg_prod", isPublic:0, serverComponentLocation: "nexus.ensighten.com/intuit/us_sbg_prod/serverComponent.php", staticJavascriptPath: "nexus.ensighten.com/intuit/us_sbg_prod/code/", ns: 'Bootstrapper', nexus:"nexus.ensighten.com", scUseCacheBuster: "true", enableTagAuditBeacon : "true", enablePagePerfBeacon : "true", registryNs : "ensBootstraps", generatedOn : "Mon Jun 07 21:41:17 GMT 2021", beaconSamplingSeedValue: 11};.if ( !window[ensightenOptions.ns] ) {.window[ensightenOptions.registryNs]\|\|(window[ensightenOptions.registryNs]={});.window[ensightenOptions.registryNs][ensightenOptions.ns]=window[ensightenOptions.ns]=function(f){function l(a){this.name="DependencyNotAvailableException";this.message="Dependency with id "+a+"is missing"}function m(a){this.name="BeaconException";this.message="There was an error durring beacon initialization";a=a\|\|{};this.lineNumber=a.lineNumber\|\|a.line;this

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\ErrorPageTemplate[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2168
Entropy (8bit):	5.207912016937144
Encrypted:	false
SSDEEP:	24:5+j5xU5k5N0ndgvoyeP0yyiyQCDr3nowMVworDtX3orKxWxDnCMA0da+hieyuSQK:5Q5K5k5pvFehWrrarrZIrHd3FIQfOS6
MD5:	F4FE1CB77E758E1BA56B8A8EC20417C5
SHA1:	F4EDA06901EDB98633A686B11D02F4925F827BF0
SHA-256:	8D018639281B33DA8EB3CE0B21D11E1D414E59024C3689F92BE8904EB5779B5F
SHA-512:	62514AB345B6648C5442200A8E9530DFB88A0355E262069E0A694289C39A4A1C06C6143E5961074BFAC219949102A416C09733F24E8468984B96843DC222B436
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/ErrorPageTemplate.css
Preview:	.body..{...font-family: "Segoe UI", "verdana", "arial";...background-image: url(background_gradient.jpg);...background-repeat: repeat-x;...background-color: #E8EAEF;...margin-top: 20px;...margin-left: 20px;...color: #575757;..}....body.securityError..{...font-family: "Segoe UI", "verdana" , "Arial";...background-image: url(background_gradient_red.jpg);...background-repeat: repeat-x;...background-color: #E8EAEF;...margin-top: 20px;...margin-left: 20px;..}....body.tabInfo..{...background-image: none;...background-color: #F4F4F4;..}.. ..a..{...color: rgb(19,112,171);.font-size: 1em;...font-weight: normal;...text-decoration: none;...margin-left: 0px;...vertical-align: top;..}....a:link, a:visited..{...color: rgb(19,112,171);...text-decoration: none;...vertical-align: top;..}....a:hover..{...color: rgb(7,74,229);...text-decoration: underline;..}....p..{...font-size: 0.9em;..}.....h1 /* used for Title */..{...color: #4465A2;...font-size: 1.1em;...font-weight: normal;...vertical-align

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\FX_BEHXAhE0HxwxO[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	83857
Entropy (8bit):	5.444896930905683
Encrypted:	false
SSDEEP:	384:3ZAlPZG8s3tqxjh0SsTgqHbHDHuH2HMHkHiHwHIHBH5HIHyHgH7HQHIHYHQHRHPg:Ou68J1W8bSttNK8uecSwMAQ
MD5:	F0BC93E20DBB99E40AC1A19E1B945ED4
SHA1:	BC5A2FFD37B89AC662ED69289F51493C5E52FAE5
SHA-256:	83E268C2DAE95FAA9D4A5918A2D5DDD881246DA8D75B8157C5CF0FFA04FF4CAA
SHA-512:	36F55E2F0104A6CB8A2B884710DD57BC81F6988FBCFA6295B14D55C5DF838C033D7B8842387457E41E7CABBFDF1C205071281C8244C5943FF692B7CBFFE90471
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_3J=td_3J\|\|{};td_3J.td_1Z=function(td_L,td_F){try{var td_b=[""];var td_J=0;for(var td_a=0;td_a<td_F.length;++td_a){td_b.push(String.fromCharCode(td_L.charCodeAt(td_J)^td_F.charCodeAt(td_a)));td_J++;.if(td_J>=td_L.length){td_J=0;}}return td_b.join("");}catch(td_K){return null;}};td_3J.td_5O=function(td_t){if(!String\|\|!String.fromCharCode\|\|!parseInt){return null;}try{this.td_c=td_t;this.td_d="";this.td_f=function(td_b,td_i){if(0===this.td_d.length){var td_Z=this.td_c.substr(0,32);.var td_I="";for(var td_k=32;td_k<td_t.length;td_k+=2){td_I+=String.fromCharCode(parseInt(td_t.substr(td_k,2),16));}this.td_d=td_3J.td_1Z(td_Z,td_I);}if(this.td_d.substr){return this.td_d.substr(td_b,td_i);.}};}catch(td_W){}return null;};td_3J.td_4K=function(td_D){if(td_D===null\|\|td_D.length===null\|\|!String\|\|!String.fromCharCode){return null;}var td_O=null;try{var td_S="";var td_s=[];var td_q=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCha

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\NewErrorPageTemplate[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3224
Entropy (8bit):	4.869554560514657
Encrypted:	false
SSDEEP:	48:5m73jcJqQep89TEw7UxkZCm73jcJqQep89TEw7Uxkk:5nqrehEw7U6ZCnqrehEw7U6k
MD5:	3A35614D9A6156057F7D30C91C1ED4F2
SHA1:	7DDE5D14A15F465C9BFD0B0C0B3416175E69D1BC
SHA-256:	D544FAC44B7B2CD937726C401B5C9C726F900CEF22980A7B39F8756581901B73
SHA-512:	8A31C0C90EF443E3B7AC5B930466CD8CEF1D540D2D436A7DC4D12F38686368303882A9610A57B2A1CF9AB973DB684FDA0B1831B116EAEB4D86BE816FDD627C28
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/NewErrorPageTemplate.css
Preview:	.body..{.. background-repeat: repeat-x;.. background-color: white;.. font-family: "Segoe UI", "verdana", "arial";.. margin: 0em;.. color: #1f1f1f;..}.....mainContent..{.. margin-top:80px;.. width: 700px;.. margin-left: 120px;.. margin-right: 120px;..}.....title..{.. color: #54b0f7;.. font-size: 36px;.. font-weight: 300;.. line-height: 40px;.. margin-bottom: 24px;.. font-family: "Segoe UI", "verdana";.. position: relative;..}.....errorExplanation..{.. color: #000000;.. font-size: 12pt;.. font-family: "Segoe UI", "verdana", "arial";.. text-decoration: none;..}.....taskSection..{.. margin-top: 20px;.. margin-bottom: 28px;.. position: relative; ..}.....tasks..{.. color: #000000;.. font-family: "Segoe UI", "verdana";.. font-weight:200;.. font-size: 12pt;..}....li..{.. margin-top: 8px;..}.....diagnoseButton..{.. outline: none;.. font-size: 9pt;..}.....launchInternetOptionsButton..{.. outline: none;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\O838E4K8.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	120786
Entropy (8bit):	4.6585524552235595
Encrypted:	false
SSDEEP:	1536:pphqT+KmkpwgwU7/IXHvwJDWPYXuBSIbkAt+7huO:pphqT+KmkNH7/sPYXusI3+7h1
MD5:	45E4A2B9D03A69375B5F404DF8BBBF25
SHA1:	08CDF7502C83CEB62B7E6BC3688724B5FBDB3B05
SHA-256:	C37884C168D53A1FE9BF8CEAA338E1B64DA8F8D723917A9378090EF0A55E86DB
SHA-512:	BD6546B8D3ED482C8A32762166E53E959189BC3B720B2AE48FADB2A400D17B1BA30D24A10313813DB14486408C18541AF435AB6E815981FBEFB052AAFC85E8B0
Malicious:	false
Reputation:	low
Preview:	..<!DOCTYPE html>. [if lt IE 7]> <html class="no-js lt-ie9 lt-ie8 lt-ie7"> <![endif]-->. [if IE 7]> <html class="no-js lt-ie9 lt-ie8"> <![endif]-->. [if IE 8]> <html class="no-js lt-ie9"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->..<head>..<meta charset="utf-8">..<meta http-equiv="X-UA-Compatible" content="IE=edge">..<meta name="viewport" content="width=device-width, initial-scale=1">..<title>Intuit.: Complete Financial Confidence</title>... This site is optimized with the Yoast SEO Premium plugin v9.2.1 - https://yoast.com/wordpress/plugins/seo/ -->.<meta name="description" content="See how Intuit products can work for you by joining the over 50 million people already using TurboTax, QuickBooks and Mint to power their prosperity."/>.<link rel="canonical" href="https://www.intuit.com/" />.<meta property="og:locale" content="en_US" />.<meta property="og:type" content="article" />.<meta property="og:title" con

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\PopOverModule[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	9655
Entropy (8bit):	5.247840767847725
Encrypted:	false
SSDEEP:	192:r1xuAleoiw1AcfNIjo89X0kwnxN3S91WhhxvrcJP4ULDBnk3SbTX45pZva:rbXleoiw1AcfNVnj3qR4ULDFk3Kd
MD5:	CA0223C6252D405782B16F377DF42B73
SHA1:	6603F72179AED2B4733BDFF9B5F9A4EE399AE99F
SHA-256:	0D67FB1E900AC570B160AAF2200D35AB1D41F00D0979ADE72034289E9D3AB262
SHA-512:	BF1E8BCCB800903BA21F95358627AB2A707F97C922C0EDF5CC140C03E4BAA6A08385F906587D0C0EB36CB369E6BE5918BF362E1DAAC71F16FF947005AEFE0C29
Malicious:	false
Reputation:	low
IE Cache URL:	https://siteintercept.qualtrics.com/dxjsmodule/PopOverModule.js?Q_CLIENTVERSION=1.55.0&Q_CLIENTTYPE=web
Preview:	try{!function(t){var e={};function i(s){if(e[s])return e[s].exports;var o=e[s]={i:s,l:!1,exports:{}};return t[s].call(o.exports,o,o.exports,i),o.l=!0,o.exports}i.m=t,i.c=e,i.d=function(t,e,s){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:s})},i.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},i.t=function(t,e){if(1&e&&(t=i(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var s=Object.create(null);if(i.r(s),Object.defineProperty(s,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)i.d(s,o,function(e){return t[e]}.bind(null,o));return s},i.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return i.d(e,"a",e),e},i.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},i.p="",i(i.s=0)}([function(t,e,i){t.exports=i(1)},function(t,e){(void 0===window.QSI.PopOver\|\|window.Q

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\SliderModule[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	13580
Entropy (8bit):	5.172665122613054
Encrypted:	false
SSDEEP:	384:Drrn1A7eoiidCC9qC1k4JuOcvpwNLDqJBn2oIFz3DtoC/:DrD1A7eoiidCC9DO4Jj6pwhD33DtoC/
MD5:	A9D1E5E37FE8D7F64518B9AF6F7FBA5A
SHA1:	30BB287092D8147A2385F7E6FFC7E8DCB1AB9012
SHA-256:	95A716E2366085EF49B6B4BDDF282299F0860222AF21F07E4F561672A159C0FC
SHA-512:	47575B5BFE18B1C2298CC32C7DD5FA43D4DA8B32C5085164105D132705B841F39410B5C6DCCC4698EF4444BCB7FC5F5AD64FC4D36E31B6D7D1BDCF9BE8ADFB2D
Malicious:	false
Reputation:	low
IE Cache URL:	https://siteintercept.qualtrics.com/dxjsmodule/SliderModule.js?Q_CLIENTVERSION=1.55.0&Q_CLIENTTYPE=web
Preview:	try{!function(t){var i={};function e(s){if(i[s])return i[s].exports;var o=i[s]={i:s,l:!1,exports:{}};return t[s].call(o.exports,o,o.exports,e),o.l=!0,o.exports}e.m=t,e.c=i,e.d=function(t,i,s){e.o(t,i)\|\|Object.defineProperty(t,i,{enumerable:!0,get:s})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,i){if(1&i&&(t=e(t)),8&i)return t;if(4&i&&"object"==typeof t&&t&&t.__esModule)return t;var s=Object.create(null);if(e.r(s),Object.defineProperty(s,"default",{enumerable:!0,value:t}),2&i&&"string"!=typeof t)for(var o in t)e.d(s,o,function(i){return t[i]}.bind(null,o));return s},e.n=function(t){var i=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(i,"a",i),i},e.o=function(t,i){return Object.prototype.hasOwnProperty.call(t,i)},e.p="",e(e.s=0)}([function(t,i,e){t.exports=e(1)},function(t,i){(void 0===window.QSI.Slider\|\|window.QT

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\WRSiteInterceptEngine[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	6936
Entropy (8bit):	5.48537193830316
Encrypted:	false
SSDEEP:	96:Z3julLy11KyfqkO+oXpRRFzcGicG9X6OrSDBuhOXKJZ/v2fjW3Q20n49z353B3yo:NjuhQfxodhYh6OwSDJZ/wq049jcZa
MD5:	976F340902D4D8FEEDC33C6C50F4A5D9
SHA1:	088DA229FE5178910F492F290CD338BD655B2795
SHA-256:	9D7F837DAF7DDE5B17AE2F1AF551D3CE1F28882BAB9AE8D72EAA8B6B49C64ED7
SHA-512:	A547A6FE8E832D945B6181CC216A308122A815D57ED9E0F97BED024F28E39775C1E0677B4C7219A51573560CD0E82765DA6856E6A45D988C26B5CC4E3E5D8DF2
Malicious:	false
Reputation:	low
IE Cache URL:	https://znew2pz3yjx9poggn-intuitsocial.siteintercept.qualtrics.com/WRSiteInterceptEngine/?Q_ZID=ZN_eW2Pz3YjX9PoGGN&Q_LOC=https%3A%2F%2Fquickbooks.intuit.com%2Fpricing%2F&t=1625899165733
Preview:	(function(){if(typeof window.QSI==='undefined'){window.QSI={};}.var tempQSIConfig={"hostedJSLocation":"https://siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://siteintercept.qualtrics.com","surveyTakingBaseURL":"https://s.qualtrics.com/spoke/all/jam","zoneId":"ZN_eW2Pz3YjX9PoGGN"};if(typeof window.QSI.config!=='undefined'&&typeof window.QSI.config==='object'){for(var attrname in tempQSIConfig){window.QSI.config[attrname]=tempQSIConfig[attrname];}}else{window.QSI.config=tempQSIConfig;}.window.QSI.shouldStripQueryParamsInQLoc=false;})();try{!function(e){function n(n){for(var t,r,i=n[0],a=n[1],d=0,u=[];d<i.length;d++)r=i[d],o[r]&&u.push(o[r][0]),o[r]=0;for(t in a)Object.prototype.hasOwnProperty.call(a,t)&&(e[t]=a[t]);for(c&&c(n);u.length;)u.shift()()}var t={},o={2:0};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.e=function(e){var n=[],t=o[e];if(0!==t)if(t)n.push(t[2]);else{var i=new Promis

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\YUld3Hd0Guz-1-9S[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	83857
Entropy (8bit):	5.424445780293655
Encrypted:	false
SSDEEP:	384:cG6yij/vM8OuzRYrDpt+sipUDuBWeBdf+PT4cWuMB55TAZf430qIPvlCMtE0CzXq:D6V72rDpt6f+PbPvgMzCBBsoI
MD5:	2D4560320F708A8178B75C198E676B1F
SHA1:	DBAB9046FF90BD9FD9EB60DE1B0FD6F5488CD246
SHA-256:	71440093F50D5022F9729E66A57C983619E911DBDAC85CB29F5B851838052AF0
SHA-512:	48DFE3F4F95FA5BB20FEAAD5B537AB4883CE07A22E82EBF991BC174B0665DCCED13F4EB19F59CCACCC6A16228B53073037F1088D1F2296CBC7BD97144832463F
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_4u=td_4u\|\|{};td_4u.td_0i=function(td_S,td_k){try{var td_y=[""];var td_c=0;for(var td_A=0;td_A<td_k.length;++td_A){td_y.push(String.fromCharCode(td_S.charCodeAt(td_c)^td_k.charCodeAt(td_A)));td_c++;.if(td_c>=td_S.length){td_c=0;}}return td_y.join("");}catch(td_T){return null;}};td_4u.td_5A=function(td_e){if(!String\|\|!String.fromCharCode\|\|!parseInt){return null;}try{this.td_c=td_e;this.td_d="";this.td_f=function(td_G,td_L){if(0===this.td_d.length){var td_X=this.td_c.substr(0,32);.var td_t="";for(var td_b=32;td_b<td_e.length;td_b+=2){td_t+=String.fromCharCode(parseInt(td_e.substr(td_b,2),16));}this.td_d=td_4u.td_0i(td_X,td_t);}if(this.td_d.substr){return this.td_d.substr(td_G,td_L);.}};}catch(td_M){}return null;};td_4u.td_4v=function(td_M){if(td_M===null\|\|td_M.length===null\|\|!String\|\|!String.fromCharCode){return null;}var td_g=null;try{var td_j="";var td_w=[];var td_k=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCha

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\a8e78fa7fa279aa946fe1a9d6a0508f2[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	20225
Entropy (8bit):	5.08641328988594
Encrypted:	false
SSDEEP:	192:Uzm9EDtDWs9GYb2o0qRn1ZIxdf8x2I+NJCVMZSh8iV11MS9xEWEbXZQOaLvED5:c9p2o0qn1ZIxdEx2zGvm8pLvEN
MD5:	A8E78FA7FA279AA946FE1A9D6A0508F2
SHA1:	F9F8EB782246A6C7BC79B043B66C1F3B3BF4B42B
SHA-256:	2196B3304BAA87751FD4EF3F62B307566487CD03199284BAA1E674E27E2FFA5E
SHA-512:	CE6AD1FFD1E76B916259989F8757B8489A13FDFFE30D37A8C8B6F1F5581D9896EAABD842AF38C8E370D0638AD4BE2963D627D89747EA800D6C1DB1391EC016AB
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/a8e78fa7fa279aa946fe1a9d6a0508f2.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="180" y1="26" x2="180" y2="170" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#e8eaed"/>. <stop offset="0.124" stop-color="#e8eaed" stop-opacity="0.835"/>. <stop offset="0.364" stop-color="#e8eaed" stop-opacity="0.542"/>. <stop offset="0.58" stop-color="#e8eaed" stop-opacity="0.309"/>. <stop offset="0.764" stop-color="#e8eaed" stop-opacity="0.141"/>. <stop offset="0.91" stop-color="#e8eaed" stop-opacity="0.038"/>. <stop offset="1" stop-color="#e8eaed" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="32" y1="165" x2="108" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\aa19574f47b589500f5e602ad5061cdd[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	532
Entropy (8bit):	5.242613518948007
Encrypted:	false
SSDEEP:	12:1cKOaSYcoucc5ysjoKEEo5fPsPFAzYAHs8nse:1cUDcou3ysyEof0NAJ/
MD5:	BD4986236DDA5F04E6339FAE180D4490
SHA1:	EE4B33DF627A29B328F8572975E01B5D24A57111
SHA-256:	39BC29E5ADF56D58653D2366684E3EE41749418C55D65EEA5038DA3A582944EF
SHA-512:	099CACC3E78B5CED2596006F16A27ADD34BA083A7AB8CC0BFEEAA2DF588C025FF7AC28B609A9E0EDED8A3B59707C6A4D71FDE737A984FB318C100D2827AA7E39
Malicious:	false
Reputation:	low
IE Cache URL:	https://nexus.ensighten.com/intuit/us_sbg_prod/code/aa19574f47b589500f5e602ad5061cdd.js?conditionId0=365238
Preview:	Bootstrapper.bindDOMLoaded(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;Bootstrapper.bindDOMParsed(function(){var frame=document.createElement("iframe");frame.style.display="none";frame.style.width="1px";frame.style.height="1px";frame.src="https://1996823.fls.doubleclick.net/activityi;src\x3d1996823;type\x3dfmsco864;cat\x3dintui399;u10\x3dUS;ord\x3d1;num\x3d"+Math.round(Math.random()*1E13)+"?";frame.title="No Content";document.body.appendChild(frame)})},.2386196,300771);

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\activityi;src=8344993;type=int_00;cat=intui006;ord=8945809171953;gtm=2od770;auiddc=406322288.1625899127;~oref=https___www.intuit[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	358
Entropy (8bit):	5.49147511901118
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzw9xUpCX96v6OqPbRmEH7f/3/Ux0bldzTRQeH:hnMQbwuOaxyCkv4AEH733/UybldZ
MD5:	1AA559BF43E0FCC66C3C89852E15B2D3
SHA1:	F4A9610975247E600F94B6A1A6E75A3A6EAB4766
SHA-256:	8F4D87811CF0BFBCAB7654A0B821DBAFB4F62B30D3DF4E1231D2BF16C61E008C
SHA-512:	65F674F0F26032773E0080685127D5BA80544A68FBE71321F88F937ADD459EE580A2E4C9244666AF39D44777251BB9F0AAB33A9551811A7D5C51530DF3D41173
Malicious:	false
Reputation:	low
IE Cache URL:	https://8344993.fls.doubleclick.net/activityi;src=8344993;type=int_00;cat=intui006;ord=8945809171953;gtm=2od770;auiddc=406322288.1625899127;~oref=https%3A%2F%2Fwww.intuit.com%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/src=8344993;type=int_00;cat=intui006;ord=8945809171953;gtm=2od770;auiddc=*;~oref=https%3A%2F%2Fwww.intuit.com%2F"/></body></html>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\ad_status[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\adrum-ext.18b6b3ec105ee15f14ef7c382e15f446[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	48110
Entropy (8bit):	5.37190000976776
Encrypted:	false
SSDEEP:	768:HTxv90B2G3xpwX9t8794tZ0P/o2iQoTR6KcEC5OGNhRcwgvbuGBe+8:zxv9gxctC4tZ0P/o8oTQpHTf
MD5:	8489DD163E7F88615DFC2846FE92B179
SHA1:	1049E0B21EB6D3C5BA043CA52BE7FC66872DAC12
SHA-256:	6619BA77A7043416A164874DCACBF5CA4A6B53746F720C8C62C56D1832599307
SHA-512:	1C5BA37B7D43A4E786CE2DB14CC11A7E819807D5D385BB696D77A4278657AC9D4D257F3FE99BAD0D52F769A4FC39E75A259615B241000781202B3ECFCE7009FB
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/gutenberg/static/rum/adrum-ext.18b6b3ec105ee15f14ef7c382e15f446.js
Preview:	;/* Version 18b6b3ec105ee15f14ef7c382e15f446 v:4.3.8.1, c:d8a458770802809d9cdcc3426058b95cc9d7f9fa, b:9394 n:13147-4.3.8.next-build /(function(){/... Copyright (c) 2013, AppDynamics, Inc. All rights reserved... Derivative of Google Episodes:.. Copyright 2010 Google Inc... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... See the source code here:. http://code.google.com/p/episodes/.*/.new function(){var g=window.ADRUM;if(g&&g.q&&!0!==window["adrum-disable"]){(function(a){(function(b){b.R=function(f){function e(a)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\advanced-accounting-dashboard-product-qbo-us-desktop@2x[1].wdp Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG-XR
Category:	downloaded
Size (bytes):	49404
Entropy (8bit):	7.906723164708086
Encrypted:	false
SSDEEP:	768:5pfPECkjuMS/hdWP7p8oqE8GNhb9TSEILFJEevBonEdZKryql:5TavaAChcL+PE+N/s
MD5:	8077B75E53970F249B2C1F211600F586
SHA1:	B79244DFE4EB0AD968B7DF79962DAFC92C0E3A47
SHA-256:	B32EC25A8CD4770FF9C428D52E15E58BE18A5317E071D59B88468F0F241550EE
SHA-512:	181E6BCB7CD7B07F9E985415227908500BE1AAB8BAEF557449C606AD3816BE3ECC3E901F436A53B28263F245F89FAD122ADB17186AA8FB2451985017A9E117EA
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/product/advanced-accounting-dashboard-product-qbo-us-desktop@2x.jpg
Preview:	II.. ...$..o.N.K..=wv.............................................V..........................B...........B....................v.......WMPHOTO..E.q.U..0...,HHR..@......H.U.......`\|........8I.yi.d.....K.Z..P6...@.F`b.....RZN.U..v.H.;...JC.m2..HN....5..R...F.Gt...P.M<.T.....S.....wh....\u.P ..L1I).".Q..lX<..J.?i0.........u7....r.A/..>.x.4..L....A..`..d..........F.4.&G..T.[j..Mh.(.o.K(.$...(...I.m..c.U@.G.=....$. BI:nAah...t....F7."f..B..Y.\w%.F..Q..r[gE.9VQ.?..i.>.].4G.4B.J......tyy../...j...i..D.O.c...b.1K..8.x.C+...j..?..;....%U..,].2<...pV..en.\|.._.....+..".Z...R)...@...7...dV@4....i.(.........8<.(...#h.Kd.j.Hq........>.....,..as!m.A..PB%UUcs.}..n..nBr.m!.$Ul c.YN.P/.B..{...)....P...;"^..fW .....qX.x ..Ng%.C"B%./......UUV3..K2.Ng. &h...CSb....J...g....u.F.yr2.}..[1...n.C^..JD..{...f6.O.G3................!z.T.)B.Jp..f<..@9 ....6.g.."...=fr..C..n.9@%xt.. .`..I.V...r.FJ..'.bvM....u.......k.#( &2.`..T.=b.&.pE...."............\..Be.>T.......ps..dD..x

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\amazon-business-logo[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9084
Entropy (8bit):	3.931401990982683
Encrypted:	false
SSDEEP:	192:OXAlWfVRP3etKx+5WT+aMajU+5WD+AqajcQfQMa9ajJ8Z83C2wohge66tt7E5O8W:dlIT2a+2++w+O+mwQfQMPFTgw8O/k87
MD5:	9D5458D6C3BA49C9AFD3697D00667105
SHA1:	907F2C7F7C2541AA25DE766EF8B7DB3F82944894
SHA-256:	D2D30668413B2C13EE4B6A7C49F9EFA42263B470BD639775AABD7CC16E996C51
SHA-512:	B165A93768D416F2F6E37F89C47290C2F3309BE118980191D60BD99D6255DAFBC6387E1591050FD2CF5B392DDE2A6B6D4035558F48B5093787EF2A149C845511
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/logos/amazon-business-logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100" height="84" fill="none" viewBox="0 0 100 84">. <path fill="#007CB6" d="M72.37 64.087c.911-.62 1.37-1.538 1.37-2.749s-.426-2.18-1.273-2.906c-.85-.726-2.027-1.09-3.53-1.09-1.956 0-3.485.6-4.583 1.794-1.101 1.196-1.649 2.844-1.649 4.943 0 2.05.537 3.626 1.614 4.725 1.076 1.098 2.614 1.645 4.621 1.645 1.325 0 2.58-.226 3.761-.677.21-.08.351-.173.424-.278.073-.105.108-.286.108-.545v-1.114c0-.372-.138-.559-.413-.559-.032 0-.073.006-.121.011a.965.965 0 00-.146.038c-.761.194-1.355.318-1.784.375-.428.057-.868.084-1.322.084-1.133 0-1.977-.235-2.536-.702-.558-.47-.885-1.244-.982-2.325.68.177 1.481.267 2.401.267 1.779-.003 3.125-.313 4.04-.937zm-6.392-1.44c.243-1.905 1.141-2.86 2.692-2.86 1.212 0 1.819.51 1.819 1.527 0 .518-.186.9-.559 1.15-.372.25-.97.374-1.794.374a10.83 10.83 0 01-2.158-.191zM29.69 57.706h-2.307c-.208 0-.362.043-.456.133-.098.089-.143.245-.143.472v8.666c-.802.518-1.616.777-2.45.777-1.12 0-1.681-.656-1.681-1.967V58.31c0-.227-.0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\app-integration-icon-feature[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1131
Entropy (8bit):	4.951320023815813
Encrypted:	false
SSDEEP:	24:t48DA6SYDAwhEaZ+jWszhlllHcqjJUcgL7zhlllHcxOPxuqQUPTlsC1S7UKVRROA:1SK9Z+BjgftjTlZK+A
MD5:	D4299DD54B224A1C431C146580DC6151
SHA1:	1D23BB6223D051CB150703151E4FEFC3B06CEF97
SHA-256:	5B6792FDA33FA70ADE88C22626549226F0FEFD7B2394F1E0B6741ED68E18A1DB
SHA-512:	0FFDD03CC810C5B68DB8F176F40647A84E1E36919F01826D0B05CF493D1689243FA1107D8E6D128DFBC70CE23E6D6249D4BCE3E2B439100892C3C39615F606C1
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/icon-feature/app-integration-icon-feature.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="76" height="76" fill="none" viewBox="0 0 76 76">. <rect width="76" height="76" fill="#07C4D9" rx="38"/>. <path fill="#07C4D9" d="M38 39.926a1.926 1.926 0 100-3.852 1.926 1.926 0 000 3.852z"/>. <g clip-path="url(#clip0)">. <path stroke="#fff" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M29.933 41.798l5.035-7.7M43.497 46.52H32.913M41.031 34.099l5.035 7.7"/>. <path fill="#07C4D9" stroke="#fff" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="3" d="M38.051 34.92a5.546 5.546 0 005.55-5.544 5.546 5.546 0 00-5.55-5.543 5.546 5.546 0 00-5.549 5.544 5.546 5.546 0 005.549 5.543zM26.85 52.064a5.546 5.546 0 005.549-5.544 5.546 5.546 0 00-5.55-5.543 5.546 5.546 0 00-5.548 5.543 5.546 5.546 0 005.549 5.544zM49.149 52.064a5.546 5.546 0 005.549-5.544 5.546 5.546 0 00-5.55-5.543A5.546 5.546 0 0043.6 46.52a5.546 5.546 0 005.549 5.544z"/>. </g>. <defs>. <clipPath i

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\apple-touch-icon-196x196[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 196 x 196, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2049
Entropy (8bit):	7.818372331262988
Encrypted:	false
SSDEEP:	48:OJwpdln/gPdSBIy7V4MFlUiAsbw1dAa5Ew93myxuOcKuN:OJwpn/ySTWsls1STk3m8uOcKuN
MD5:	BD5CD1781241CF4D9BA7EF3994A13C13
SHA1:	77E36CAAF8902BF5D72E7D821A47B1379B30AF4A
SHA-256:	FBB9A774485736D868563505D849CE6FB080CF6019BC0161402F3DF7F4616095
SHA-512:	A913497A4469995C16481752BA116F7A41FAC8D2EB444AFA16DED85F98780B82C82258ACE77A4333D0321D7FB02C2EB942404BD90187876422E42445253682E6
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/cas/dam/IMAGE/A7mjJ5rpg/apple-touch-icon-196x196.png
Preview:	.PNG........IHDR..............x~Y...cPLTE...,..,..,..,..,..,..,..,..,..,..,..,..,..,..,..,..T.Ga.U9...................{.qF.8..n.c....<.S....tRNS..@P...p.. `.0._fm....orNT..w....0IDATx...z.0...0#.%..6i..)O{.`.,[...e>..hX^.b./I..RE.B.<..D.......PjU....9&IV..-..f........f..lY..\|..2....3.XUD.o.j5.....m..S.$...S6e.p..,v.YU..C.!,..B@.5./.w.1"...m.J..SA...../.T+.<.B..'.e.S..2ByCW.=...@.../..p.....#..B...O.ZM...R0t..'r._...==..b=5.....0.(f.@....7..<)..~k]<b..bk_.#.a......mw.k..=....[...}B\|.......{.C..-.6..y....h./...{I.....;.}.!..5..+.FH...v ...N(..p...fP..HdZ...M....F.z..pk!cL:.v3.A....q...bPb.d}..SX"T.A.......!.8.`...b.....rCl.\|;.c`.h...U.b$.J....QE.@.U!.....d.!.aPE). .....3.....z...3<c.0\."z..5..............V-.Z9.y.r...3.W.........#.8...O..^_._.../.,..D.^.c.u...vA....@k...^...jue.......Kgk:.!P ...z.....j B..T...i{uf.A.2...t.` B.W..?..1P..@.h[D......t~.t...O{g.T..10@.V.(..C..\|\|...j.HP.v..{..\|...].[*~?..>...i3.K....... z.~7.4...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\apps[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4000
Entropy (8bit):	5.184687369779548
Encrypted:	false
SSDEEP:	24:vzjfyD3fd13gKKA/KFpsJE3hXlEGdF2HYuGSH8SHKDVaaVUv46GSzOYfVCgHNZ0T:vy7fXPoFpsJE3R/2zzel+ltH32P
MD5:	5B25055D60A40C11F594FDDE7C4F76A8
SHA1:	E2C89DB6932C975FF4E852EED8B150A479595DA4
SHA-256:	2D55528AD8B805D6C13D085F5DC1C84A65303E81F26D04F0355CADE5A2055B12
SHA-512:	90F6774C8C15FB9D5C94556CD843F05435BCF0A28EA3AB38006F5A9061A991F2D80EC6410F2D56DB43C8F29522EB9ADB8C907A80E440C9246167FE6BAE3B82C1
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/apps.css
Preview:	:root{--breakpointsSmall:48rem;--breakpointsMedium:64rem;--breakpointsLarge:75rem}.Apps_apps__d51d4c42{background-color:#fff;text-align:center;padding:5rem 0}@media only screen and (min-width:64rem){.Apps_apps__d51d4c42{padding:6.25rem 0}}.Apps_mint__d51d4c42{background-color:#94f8ba}.Apps_darkBlue__d51d4c42{background-color:#0d333f}.Apps_appsHeader__d51d4c42{font-size:2.5rem;line-height:3.25rem!important;font-weight:700;margin:0 auto;width:83.333%}@media only screen and (min-width:64rem){.Apps_appsHeader__d51d4c42{font-size:3rem;line-height:3.75rem!important}}.Apps_appsContent__d51d4c42{font-size:1rem;line-height:1.5rem!important;font-weight:600;width:83.333%;margin:.625rem auto 0}@media only screen and (min-width:64rem){.Apps_appsContent__d51d4c42{font-size:1.25rem;line-height:1.75rem!important;font-weight:500;width:26.875rem}}.Apps_appsGrid__d51d4c42{padding-top:2.5rem;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-ms

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\avenir-700[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 9952, version 1.0
Category:	downloaded
Size (bytes):	9952
Entropy (8bit):	7.959269084690751
Encrypted:	false
SSDEEP:	192:ce/P/ERiS8k+bPCmI73aIWJ4qJOzDBVf3Xg5HKMQV:ce/P/ERjl+bPv/IWJXgqFu
MD5:	59DFF6FE7B2107D87F508BF6EF0B6E17
SHA1:	76ABD6A833CCADAD3CEFA205EF9B7E2511FF3C4A
SHA-256:	52FBB56E06BAC86A1BA5F9ED883B25388FF03B902C1339A3BAAFA57204C901B8
SHA-512:	C74CEFDA4E875CBAB307D7EC4A94FD132DB8EA7B75C86E66900FF55F144743FF611E03C856488C74CCF546082D291399D4F9D4C54D35A6D75A3BB2EE1F5AA092
Malicious:	false
Reputation:	low
IE Cache URL:	https://lib.intuitcdn.net/fonts/AvenirNext/1.0/en/avenir-700.woff
Preview:	wOFFOTTO..&.......?L........................CFF .......p..#Y..T.GPOS...x.......>..vGSUB..#$.......,.V.tOS/2..#....\...`.[N.cmap..$,...........head..$....6...6..$0hhea..$........$....hmtx..%....l.....v.@maxp..&x.........xP.name..&....I...N...Bpost..&........ ...2x.l.;O.A....A.)Q.r.E...6^m.<.&hA....z.{.;.zfuglX~....J..=..7..&..F:gn.y...y...).#..S....d8...,..%B....[(...[.l5.5.y.>]_...w.gM.W..o..^.r...Gx.C....Z...p.......6.u..`.:.............Ij...?.W..w.?~m.7.k.m.../&.>.Y.......b..4X..""to.&R....s.s.S.c.B../.L.Q...d.Gz".aRY]"...D.B.8!.Y[.,.(.F.V8.,M,#+.2..Q\|V......]...SS........030...8k.ug..E..(..J..XPl..X@.-..=.FE...."b.."~._..$..cT.o6g...,&..><..{.=..s...7..Y.0...Z.n.[..l..nw....b.2..4f....o.g...P.....#..Ou..^.^.~....U.'....X.U. 6...ve..c...lv..)........{.#l)[..7.{...S..Z9...k...2R.h._A..?...!...)........U..w.. $.....w..6o.....S.M...Lk2...a.Ck.....U.0'........^...x.DUtDb....xg<.?.g.6...Z<uq...<..I../x.....T.T.K,..\|=.J.;.7...D...<....v.3jP.AI..G.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\avenir-900[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 9792, version 1.0
Category:	downloaded
Size (bytes):	9792
Entropy (8bit):	7.956983654046853
Encrypted:	false
SSDEEP:	192:VuP9IHUfiGQKP6iYCfXhqPH4mn3pquF29KvFv5LFtJK6YHq4pM1VXZl6gk:VuPUUfiGfSKRqPLpquM0/Lb8xKf1Hk
MD5:	81D7CF94A1D5047817B206F57D43DE6F
SHA1:	2BD6714030EF43A82BB4A7E97E9A97DDE5D4F314
SHA-256:	7D6AB5F2534272858B245E15B9D302DD785E4DD3DCBFEECAB1A9E6928FC2B733
SHA-512:	4C02C00A8206854A61F80CFDE4785F172C9484F162E1DA9757072616D28A6650BC5202D92918AEE19DC650396F00F245C8ED81B9C446255EC6F3DAC4D4B5485D
Malicious:	false
Reputation:	low
IE Cache URL:	https://lib.intuitcdn.net/fonts/AvenirNext/1.0/en/avenir-900.woff
Preview:	wOFFOTTO..&@......?8........................CFF ..........#6...{GPOS...........>.".%GSUB.."........,.V.tOS/2..#0...[...`.+O4cmap..#............head..$....6...6..$<hhea..$L.......$....hmtx..$l...c....#w..maxp..%..........xP.name..%....S...`...8post..&,....... ...2x.l..N.@....+.....D:...2..QZ.H..M.j..O.M.]..&`..j..'....`..u.hn3.Y....J.9...(....L........G....2........v)?..&.._.V..s.....}....fqX.-..u.a.Y.U...c...>m.....S.S...4....D=.....yW.HD....A.@.....Z/....d)..\|.w.O.X..@.....0..."4..........d...@M..Ip.7.0"B..C.g.8.Uc.q....!D-".s...!%e00.... .n9]....PR......^...w[^....;CO.`7v.mc2..F..(J\......""..nl..... ...KL......Fp....z..Y4......x..W....{._...s.T.SS.?._....b.L.L.L.M.6.b.1/5.0_3.6.....m.......ninUn.........s.....;.Nn.W..ru.%.&.%.3....X-.X:[zY.-..HK.e.%.i..ZVY.2.h.C2....S......v.i8E../....?E....WO..19aNb\|...S'j.O..."...1@7....ux........3.6.[i._...d.e.Q)....3.sw.u......u..7.T...X7......Q..Wq.Q7..m..0.....+.v..n...g.o_<.pn.......>...NI.J..IN.$?,.%s#.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\b77123e125144d1f485467226ec4f183[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1786
Entropy (8bit):	5.12510637696649
Encrypted:	false
SSDEEP:	24:1cUZ2hvK1VfOy5dUdf7bsIAjBwrOrGTbpc0kb32y2/aLd/XB72+WjiBF/IO:ZbfRUdDfrOratpM32CwKFgO
MD5:	2C4C512ECDF87EA2E7FCAAB1C66DCC3C
SHA1:	F5A116702836F81FA0FB154CCB97333715F84E8B
SHA-256:	E26EA8AD8B56D83ED979AAE6C9759D4CDE54822856157AEDF219928F708F3CB6
SHA-512:	8D59F8FF49531D5ED8183984C4D0B0506691E683059319E0C76D14899F0BC7FEA3EEBF0B0C8614882DC47267F47E453CFD553634E912554991E9482F252F8EBE
Malicious:	false
Reputation:	low
IE Cache URL:	https://nexus.ensighten.com/intuit/us_sbg_prod/code/b77123e125144d1f485467226ec4f183.js?conditionId0=422800
Preview:	Bootstrapper.bindDOMLoaded(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;var ensVar0=function(){return domainId};var domainId="256560",pubPath=Bootstrapper.ensightenOptions.publishPath.toLowerCase(),intuitArray=["www.intuit.com","careers.intuit.com","perfsp.intuit.com","qasp.intuit.com"],qboArray=["quickbooks.intuit.com","sbconnect.intuit.com","payroll.intuit.com","intuitmarket.intuit.com","signup.quickbooks.intuit.com","qasp.quickbooks.intuit.com",."perfsp.quickbooks.intuit.com","signup-e2e.quickbooks.intuit.com","signup-qa.quickbooks.intuit.com","local.sui.v3.intuit.com","qdcstage.intuitmarket.intuit.com","qasp.payroll.intuit.com","perfsp.payroll.intuit.com"],pcgArray=["proconnect.intuit.com","accountants.intuit.com","qasp.proconnect.intuit.com"],qbdtArray=["qbdtipd.qbinproduct.intuit.com","qbinproduct.intuit.com","qbdtipd-prf.qbinproduct.intuit.com","qbdtipd-qal.qbinproduct.intuit.com"],host=document.location.hostname;if(intuit

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\beacon[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	C source, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	12472
Entropy (8bit):	5.259085060101778
Encrypted:	false
SSDEEP:	384:ZORrfj44nMSGxJgaNn4p60Ci+T8f78cSLiQ5CaXh9PUVn:ZOR44nMBjNn4p60Ci+T8f78cSLiQ5Cau
MD5:	40F5FAD778DC9198B8C81AE6700B0ACF
SHA1:	AAECE4F7E86AEE001CF2840C5C69FF188FF9C324
SHA-256:	C047FA48C9AC1424589812948981D079B137A72216D64F804F2801CC370FD1F2
SHA-512:	0C5E04A9E73951967A24FFB77B8F08CA3249F97F30E45DFD04AF327E3E594ED3E64E774AC83AA0F0BDF2DFCEF55ED31A8C0BD24D7A0464F80CF9F1396813FE91
Malicious:	false
Reputation:	low
IE Cache URL:	https://marketdataservice.api.intuit.com/v1/beacon.js
Preview:	!function(e,t){function n(e){return e&&t.XDomainRequest&&!/MSIE 1/.test(navigator.userAgent)?new XDomainRequest:t.XMLHttpRequest?new XMLHttpRequest:void 0}function o(e,t,n){e[t]=e[t]\|\|n}var r=["responseType","withCredentials","timeout","onprogress"];e.ajax=function(e,a){function u(e,t){return function(){c\|\|a(void 0===f.status?e:f.status,f.response\|\|f.responseText\|\|t,f),c=!0}}var s=e.headers\|\|{},i=e.body,d=e.method\|\|(i?"POST":"GET"),c=!1,f=n(e.cors);f.open(d,e.url,!0);var l=f.onload=u(200);f.onreadystatechange=function(){4===f.readyState&&l()},f.onerror=u(null,"Error"),f.ontimeout=u(null,"Timeout"),f.onabort=u(null,"Abort"),i&&(o(s,"X-Requested-With","XMLHttpRequest"),t.FormData&&i instanceof t.FormData\|\|o(s,"Content-Type","application/x-www-form-urlencoded"));for(var p,m=0,v=r.length;v>m;m++)p=r[m],void 0!==e[p]&&(f[p]=e[p]);for(var p in s)f.setRequestHeader(p,s[p]);return f.send(i),f},t.nanoajax=e}({},function(){return this}());.var sbgm = sbgm \|\| {};../**..suji: possible race condit

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bill-com-logo[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	518
Entropy (8bit):	4.785768786133877
Encrypted:	false
SSDEEP:	12:t4RzaAx42f9cxQtOkEQo6ElUW1uf/qHQxJWfoJa+bBH4gYB:t4Rzj6s9cxQYvQo6AUW1E/k0WfWdiB
MD5:	B1253A127F93813C96B38D6A87216CA3
SHA1:	BD1D2D9B8A041427C351EA620695F3066F5DD596
SHA-256:	E82C72C04193F45057E548223AAD48C412E93C3AF984C057854CE45E750073E8
SHA-512:	B2BFBAF7DF51A6E7DA296815877A49417742A71D26A0C11EAC3A8113D3D71949F29AF2459008A4AA298AD2D20B2C579114E879A83C33DD94F5CBC8C1481A0928
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/logos/bill-com-logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="84" height="84" fill="none" viewBox="0 0 84 84">. <path fill="#F6B881" d="M37.675 27.743V11.555L54.29 23.771c3.46 2.563 5.809 6.193 6.748 10.379-3.716-4.442-8.756-6.322-12.173-6.407h-11.19z"/>. <path fill="#EF7E19" d="M48.61 59.264a3.7 3.7 0 01-3.716 3.46H34.3V42.351h10.593a3.7 3.7 0 013.715 3.46v13.453zM34.343 31.203V11H22v63h25.883c3.46 0 6.877-1.367 9.354-3.844 2.478-2.477 3.844-5.809 3.844-9.354V44.401c0-7.261-5.894-13.113-13.198-13.113h-13.54v-.085z"/>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\blank[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/dojotoolkit/dojo/resources/blank.gif
Preview:	GIF89a.............!.......,...........L..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bxeyf-Fr2cXFpJCB8wlhPWv-5EhnqU5Iu4cdDO6m6qQ[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	38177
Entropy (8bit):	5.611008963028305
Encrypted:	false
SSDEEP:	384:09SNbQbV8N804seI+HwnG0PlawsJXf62OW0q6yyGd1wsy0d2xwr4vAwQGD3XDgw/:9NUqtB+HkC6PxGV2JvHQKt8zY3eu
MD5:	21E7070A6BF1D7130C4BC9F73B2F60ED
SHA1:	C89875B02B865AE0141628E74FD8DF9EE3F6C771
SHA-256:	6F17B27FE16BD9C5C5A49081F309613D6BFEE44867A94E48BB871D0CEEA6EAA4
SHA-512:	51BFB4D94156E1C0B4F95E3DF08C8E1355F379CA994DEEB9CE17FE9AD3A88C3955122F0A6AD81D3553D067624AAAEEC3063BC5AAEE3C5DF5B761D62E704CDA05
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/js/th/bxeyf-Fr2cXFpJCB8wlhPWv-5EhnqU5Iu4cdDO6m6qQ.js
Preview:	(function(){function g(k){return k}var q=function(k){return g.call(this,k)},E=function(k,r,n,m,Z){if(!(Z=(m=n,z.trustedTypes),Z)\|\|!Z.createPolicy)return m;try{m=Z.createPolicy(r,{createHTML:q,createScript:q,createScriptURL:q})}catch(h){if(z.console)z.console[k](h.message)}return m},z=this\|\|self;(0,eval)(function(k,r){return(r=E("error","ad",null))&&1===k.eval(r.createScript("1"))?function(n){return r.createScript(n)}:function(n){return""+n}}(z)(Array(7824Math.random()\|0).join("\n")+'(function(){var rv=function(r,k,n,m,g,z,Z,q,h){return(k\|1)%((k^83)&3\|\|(g=l(m),g&n&&(g=-127-2~(g\|127)-(~g&127)+2(~g\|127)\|l(m)<<7),h=g),r)\|\|(Z=this,g={},z=function(E,d){return d=q.call(Z,[k6]),m[E%26052n%2605235(d\|0)%26052n%26052]},q=Z.K,z[Z.O]=function(E){g[1716n%26052]=E},z[Z.O](m),m=g,h=z),h},Y=function(r,k,n,m,g,z,Z,q,h){if(!((r<<1)%5))for(z=m.length,q="string"===typeof m?m.split(k):m,Z=n;Z<z;Z++)Z in q&&g.call(void 0,q[Z],Z,m);return 2==(r-6&6)&&k.D.splice(n,n,m),(r+9)%7\|\|(m.classList?m.classList

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\c1b97d74dace7e43a9ccb26841a7cae4[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6217
Entropy (8bit):	5.12197916092655
Encrypted:	false
SSDEEP:	96:hmpCgaDaIvQiJgZMDRzvrphOqqzfHm0TCgGT908uB75T:xPuB75T
MD5:	C1B97D74DACE7E43A9CCB26841A7CAE4
SHA1:	83F78C8D77BF9499B7E839345BB94C22A89616AF
SHA-256:	D9DE9633583A448CAD1268D42FFDF48D0B3C60D2693600B843A7EBE43AD06908
SHA-512:	B3986AF15A3FFB3AB35B8E3C120BC9BA8BECD5892CB7C1DE0BA5AD08A83499ACEC288B20708EE834EA43BFE446FD01ADA8CA55E0893EEBE766241913DB11A88B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/c1b97d74dace7e43a9ccb26841a7cae4.svg
Preview:	<svg id="Content" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <linearGradient id="linear-gradient" x1="41.178" y1="24.308" x2="41.368" y2="32.801" gradientUnits="userSpaceOnUse">. <stop offset="0.004" stop-color="#cdd0d5"/>. <stop offset="0.466" stop-color="#b1b6bd"/>. <stop offset="1" stop-color="#959ca5"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="29.696" y1="67.461" x2="68.387" y2="28.77" gradientUnits="userSpaceOnUse">. <stop offset="0.001" stop-color="#fff"/>. <stop offset="0.131" stop-color="#fff"/>. <stop offset="1" stop-color="#fff"/>. </linearGradient>. <clipPath id="clip-path">. <circle cx="27.84" cy="50.69" r="6.427" fill="none"/>. </clipPath>. <linearGradient id="linear-gradient-3" x1="50.224" y1="35.554" x2="50.224" y2="31.004" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#cdd0d5"/>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\cY3q-fo3kFILwEt7[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	84166
Entropy (8bit):	5.42714729095461
Encrypted:	false
SSDEEP:	384:cG6/OwiUE5ij/vMQE8JdsG6nuzRYrDpt+sipUDuBWeBdf+PT4cWuMB55TAZf430w:D6owz6k2rDpt6f+PbPvgMXsocC2
MD5:	37DDB8150B98E90101AE63F9DDDBAB2E
SHA1:	6D0DD03D2A884604D8249B72C2471436EF79953B
SHA-256:	6A98E871747C63872D969F530EC47B13ABB61EC34355CAD4E1F1FEEEDB74A980
SHA-512:	E3B68C8012EAF82C37BF4ECB24782A457D144B33A3CF1355DD33CF635E48C25A33589DBB31E622E8A95F2AE79D6D0F929C8E7EC672319F29C3A365939339E402
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_4u=td_4u\|\|{};td_4u.td_0i=function(td_S,td_k){try{var td_y=[""];var td_c=0;for(var td_A=0;td_A<td_k.length;++td_A){td_y.push(String.fromCharCode(td_S.charCodeAt(td_c)^td_k.charCodeAt(td_A)));td_c++;.if(td_c>=td_S.length){td_c=0;}}return td_y.join("");}catch(td_T){return null;}};td_4u.td_5A=function(td_e){if(!String\|\|!String.fromCharCode\|\|!parseInt){return null;}try{this.td_c=td_e;this.td_d="";this.td_f=function(td_G,td_L){if(0===this.td_d.length){var td_X=this.td_c.substr(0,32);.var td_t="";for(var td_b=32;td_b<td_e.length;td_b+=2){td_t+=String.fromCharCode(parseInt(td_e.substr(td_b,2),16));}this.td_d=td_4u.td_0i(td_X,td_t);}if(this.td_d.substr){return this.td_d.substr(td_G,td_L);.}};}catch(td_M){}return null;};td_4u.td_4v=function(td_M){if(td_M===null\|\|td_M.length===null\|\|!String\|\|!String.fromCharCode){return null;}var td_g=null;try{var td_j="";var td_w=[];var td_k=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCha

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\c[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	12227
Entropy (8bit):	5.308671248783058
Encrypted:	false
SSDEEP:	192:8QXXOsQEcix3+i4etz9oLzhmrvB+6MTBer/LOfheacun9TSpVf2rYuC4ubwfcLT8:DntcZeNkzhmrM6Mlu/ifQaB9uCr7C4YK
MD5:	A862B0FC44B1D50C7E78AD1D7A855DF0
SHA1:	E30E284AA0541DE0271F7F5BB3202DEEA7DF67E3
SHA-256:	0D866CD20D880DC905C17E4029174242404DA0BBDDAFB4EBEEF84C187676F5BE
SHA-512:	E24024F11061E6573E17B28EE12482A70BA6D2ECC924E689DF07CDD04C1100E4FCEB887F2B489A7E17CC56E1F84986871548EA7D2E6EEF092444A4A12DA2A9C8
Malicious:	false
Reputation:	low
Preview:	{"da_websiteId":256560,"da_account_flags":6095,"da_account_flags_orig":6095,"da_sessionId_e":"68AA488A8E33AE88BC41AA134EDB4D6310","da_leadId_e":"5B997BB99A73EA132910BB990CD90768A3","da_dnsRecord":"collection.decibelinsight.net","da_anonymiseIP":true,"da_ipHandling":1,"da_sessCookieFlags":4,"da_leadCookieFlags":0,"analysisSessFlags":0,"analysisLeadFlags":0,"replaySessFlags":4,"replayLeadFlags":0,"int_state":"","curTime":1625866753,"domains":["view.ceros.com","www.intuit.com","careers.intuit.com","intuit.swoogo.com","events.quickbooksconnect.com","jobs.intuit.com"],"accountNumber":13878,"branch":"MASTER","da_autoFragmentTrack":true,"da_autoQueryTrack":true,"da_maskEmail":true,"da_maskSSN":false,"da_recursiveMasking":true,"da_deepShadowRootSearch":false,"da_processBot":false,"da_noHTML":false,"da_httpsJourney":true,"da_aggregateFields":false,"da_allowDuplicateAttribute":true,"da_collectLogs":true,"da_frameRate":5,"da_resourceRate":1,"da_minResourceSize":1000,"da_maxCss":30000,"da_sessionT

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\c_i_55OEUP_q1GZa[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	83857
Entropy (8bit):	5.436703938311267
Encrypted:	false
SSDEEP:	384:JgXgfh6NAQAD5pKu1xPCqMjBKy06NAorGFeH8Mx9H6IdmakejT5gOFswu9Ha9T5g:yGg8pKuPalIHqRfGaIvlutIpHEKV22V
MD5:	740F9506B6EC5C975A20820CA93E0C27
SHA1:	212A1633C9C2EB4A3B62D3CF7CDBC1621810B9AE
SHA-256:	9B33631FAE5C88876CB7E6978CE97B5390BEE2A17B23EACB2DF7BE98A549D2E9
SHA-512:	A1693660F71FD5D6719B2F1B1F0C54FE0311E8773D47B795D8B27A5E31C7A5C410060EB849DA5C23668994C0EC264C7E8648DC933E7259F1C68A0ACF50A11BB8
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_0h=td_0h\|\|{};td_0h.td_1u=function(td_K,td_T){try{var td_H=[""];var td_V=0;for(var td_p=0;td_p<td_T.length;++td_p){td_H.push(String.fromCharCode(td_K.charCodeAt(td_V)^td_T.charCodeAt(td_p)));td_V++;.if(td_V>=td_K.length){td_V=0;}}return td_H.join("");}catch(td_S){return null;}};td_0h.td_3d=function(td_X){if(!String\|\|!String.fromCharCode\|\|!parseInt){return null;}try{this.td_c=td_X;this.td_d="";this.td_f=function(td_p,td_g){if(0===this.td_d.length){var td_a=this.td_c.substr(0,32);.var td_t="";for(var td_i=32;td_i<td_X.length;td_i+=2){td_t+=String.fromCharCode(parseInt(td_X.substr(td_i,2),16));}this.td_d=td_0h.td_1u(td_a,td_t);}if(this.td_d.substr){return this.td_d.substr(td_p,td_g);.}};}catch(td_b){}return null;};td_0h.td_1v=function(td_C){if(td_C===null\|\|td_C.length===null\|\|!String\|\|!String.fromCharCode){return null;}var td_m=null;try{var td_q="";var td_Q=[];var td_s=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCha

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\cef4d4683cd7a4bb4827ed40d782b1a2[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5223
Entropy (8bit):	5.192202042793413
Encrypted:	false
SSDEEP:	48:PeDz8Bx66Gd320EkvsobyE/+25qEJdLRMFD6vGyErGoG2ZG8GERGdfGpGopLnzpD:sGjIwbX+xLpUk+pXwiC1drbGfglU
MD5:	24FAF3F42BCF83D6109339CC530942B5
SHA1:	685572725ABC246FBC381D5DEEE3B43C784C2928
SHA-256:	1771F59CA76D458081807D5E18D356C2F4C2F925DC48B15A17ABD8821A9F04E1
SHA-512:	684EA6B163305357AB05AED11F10A6005A1639E0CA6A94B5530E91239170025E5FDECBBD60CBDEE2A7B0B83A3352FFAD491BE86C22BDEBFB10E7BB1D97C6CC4D
Malicious:	false
Reputation:	low
IE Cache URL:	https://nexus.ensighten.com/intuit/us_sbg_prod/code/cef4d4683cd7a4bb4827ed40d782b1a2.js?conditionId0=4835081
Preview:	Bootstrapper.bindDOMLoaded(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;(function(){if(document.querySelector("#icom-manage-cookies"))document.querySelector("#icom-manage-cookies").addEventListener("click",function(e){e.preventDefault();intuit_gdpr.showCookiePreference()})}).call(window)},3120582,628143);.Bootstrapper.bindDOMParsed(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;if(window.location.hostname.match(/(qasp\|perfsp\|www).intuit.com/)){var icomLocaleSkip=["/company/strategic-sourcing/purchase-order-terms/canada/","/partners/education-program/contact/","/partners/education-program/registration/educators/proconnect/","/partners/education-program/registration/students/proconnect/","/partners/education-program/registration/students/quickbooks-desktop/",."/t/home-092518/","/t/products-112918/","/oa/prosperity-bundle/","/ca/legal/accessibility/","/ca/partners/education-prog

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\common_images_logo_v2[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 571 x 139, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6987
Entropy (8bit):	7.7521848773263065
Encrypted:	false
SSDEEP:	192:PnjGsEilIF07346q6vZop5JbnPNfTB5D06XSJ:PnjGelIF0rPZop51tTB1aJ
MD5:	2FCE04271434F3F51FF4EAFF2CEF2B2D
SHA1:	8B5AE66E58D9633A2CF276E7EEA588F8FA86DB94
SHA-256:	F56397C9087C7B3AE7DB0D3BB82E72509B0199473DE582B5E150F5AB813DFB08
SHA-512:	63004B59B73456B3F2E1F6CBE63A1371BBD0D2CE413D6C1971B4526F7FBDA88F4B272E605E4CF28B3A9A4A2831C51D0BE94D5BE1B360CD8FE044E59A747FB4FB
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin-qbo.intuit.com/brand/1.1.9/common-brand/assets/images/svg/common_images_logo_v2.png
Preview:	.PNG........IHDR...;..........].5....gAMA......a.....sRGB.........PLTE.......................................................................................................................................................................................+.....+...............................................................................................-.............................+.............................+..+.......................+..,........1.-.........1..+.....+........,..+..+..+.................+..+........,..+..+.....+..+..,..-..,..+.....,.....,..+..+.............)..+..+..+..,..+..+....+..,..,..+..,.......).....+..-..+..,........+....+.....,........n.cT.G...a.U/. 3.#.....<.-{.qW.J..F.8.......?.0............L.?5.&..-..r.h...P.B.....y].PD.6}.sm.a8.)................}......k.`..x.n..h.]d.Y.............R....tRNS.0...P.` @p.............#.......(....!...U.....a.,.l.].3..6.....8f.j....v^z..<t...ZWJc...{>Nh...A.1x}.C.%........LR5F....nE....Yq..m..1.*B....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\commondojo_all.xd[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	229040
Entropy (8bit):	5.501167102313849
Encrypted:	false
SSDEEP:	3072:SS9HtQCaIOUTWHWpmOj0sZP9iT0Ht/EjkhzBPGR3z5KoVj2JNPR1I5614b:lJSCpOUq2AOjVP9E5R3NKJVR74b
MD5:	BD4878F2479530AC177465B50D849C4F
SHA1:	C0F20E2F935F37FF89A80E05004AAF7FA5F1286D
SHA-256:	D12BCEE3A3EBC12ACD05F9EA601C9F2324BB19AA8551EB6C6EEF6BDDC5622819
SHA-512:	966A62CF6E07127B87577069BE3089C0F4D393F4374FD6794686FC90B9B931C81AB9A6C34F7BCBA72E81ABA02BE8C36B04698162BC0E59B27A96622F913A7BF8
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/dojotoolkit/dojo/commondojo_all.xd.js
Preview:	/..Copyright (c) 2004-2011, The Dojo Foundation All Rights Reserved...Available via Academic Free License >= 2.1 OR the modified BSD license...see: http://dojotoolkit.org/license for details./../..This is an optimized version of Dojo, built for deployment and not for..development. To get sources and documentation, please visit:....http://dojotoolkit.org./..dojo._xdResourceLoaded(function(_1,_2,_3){return {depends:[["provide","dojo.commondojo_all"],["provide","dojo.DeferredList"],["provide","dijit.layout.StackController"],["provide","dijit.layout.StackContainer"],["provide","dijit.form.Form"],["provide","dijit.form._FormSelectWidget"],["provide","dijit.form.Select"],["provide","dijit.form.TextBox"],["provide","dijit.form.ValidationTextBox"],["provide","dojo.number"],["provide","dijit.form.NumberTextBox"],["provide","dijit.form.SimpleTextarea"],["provide","dijit.Calendar"],["provide","dijit.form._DateTimeTextBox"],["provide","dijit.form.DateTextBox"],["provide","dijit.form.ComboBox"]

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\commondojo_base.xd[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	358454
Entropy (8bit):	5.434924463209931
Encrypted:	false
SSDEEP:	6144:tQFsi/HwavZlnt02sExtHTN1aIyeKJsdfxTULA5P+qHv9W:jiwKZlntBx9yeLqy/8
MD5:	56EFD3668D963581515B5F0F9F7C5A18
SHA1:	C948B1402136CD30B55E0806109A62457AB999DD
SHA-256:	7FFDCFB9D96F7A5DCC50FE2A4ED1B788D68E1A392E097CA7E8E1410E1C98CB7B
SHA-512:	31058765BC4F0970CD2090335105546627143C05A4E4AD8D1A3FBE834EF617F2472A9E0198AD43C011D4FB0BA8F836EBD8995F16604C6E1073D5B9D5D22346CB
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/dojotoolkit/dojo/commondojo_base.xd.js
Preview:	/..Copyright (c) 2004-2011, The Dojo Foundation All Rights Reserved...Available via Academic Free License >= 2.1 OR the modified BSD license...see: http://dojotoolkit.org/license for details./../..This is an optimized version of Dojo, built for deployment and not for..development. To get sources and documentation, please visit:....http://dojotoolkit.org./..dojo._xdResourceLoaded(function(_1,_2,_3){return {depends:[["provide","dojo.commondojo_base"],["provide","dojo.date.stamp"],["provide","dojo.parser"],["provide","dojo.data.util.filter"],["provide","dojo.data.util.sorter"],["provide","dojo.data.util.simpleFetch"],["provide","dojo.data.ItemFileReadStore"],["provide","dojo.date"],["provide","dojo.cldr.supplemental"],["provide","dojo.regexp"],["provide","dojo.string"],["provide","dojo.date.locale"],["provide","dijit._base.manager"],["provide","dojo.Stateful"],["provide","dijit._WidgetBase"],["provide","dojo.window"],["provide","dijit._base.focus"],["provide","dojo.AdapterRegistry"],[

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\css[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1712
Entropy (8bit):	5.200476399295589
Encrypted:	false
SSDEEP:	48:IOEaRqP/OXaRTOpaRvOS0aNhO1aNROEaNKCOXaNbOpaNF:IOEaeOXapOpaFOS0aNhO1aNROEaNKCOE
MD5:	B8DDADE1549DB50956086953D91C0854
SHA1:	F649F2CCB6E7B9F4BB15FCA658E5F69AB2364879
SHA-256:	8E3138D0AF3F7E9CA07976E8C9997FFDB1F5A1F2260D25B36DED5374129603E6
SHA-512:	2469A969A90772CA0FDF7D0CAC3DCC2B7545A58139332D06D1B801D2C7C1458E1AEBEDD47E5CB0F3986050299B7B9513BDF7A00C4B75ABBAB976F8F0B100CE55
Malicious:	false
Reputation:	low
Preview:	/. See: https://fonts.google.com/license/googlerestricted. */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesans/v27/4UaGrENHsxJlGDuGo1OIlL3Owpg.woff) format('woff');.}.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 500;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesans/v27/4UabrENHsxJlGDuGo1OIlLU94YtzCwA.woff) format('woff');.}.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 700;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesans/v27/4UabrENHsxJlGDuGo1OIlLV154tzCwA.woff) format('woff');.}.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v27/KFOkCnqEu92Fr1MmgVxIIzQ.woff) format('woff');.}.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-d

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\customer-support-light-icon-support[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	734
Entropy (8bit):	4.904245373416986
Encrypted:	false
SSDEEP:	12:t4tpx4WRJzHcdcEFFCfPuJzhkcDWWESpPv6Oecs+CPjuJzHcNwjZLySuf3NVcs:t4tp6szHcdjKKzvWXQPv1ecS7KzHcNwY
MD5:	45E1EC0E1E0ACAE00978EC65FAE24F99
SHA1:	9821E204433679B35ABB56C19044523357084772
SHA-256:	D6B407DCFA752DA6736697341356F9E56D046672C88C9BEDF67817EE98F29C9E
SHA-512:	A42581ED14B8693DF3D3A30A6121AFE361540F2C04071FA313DD4E30056280577210C3074BF2D715BB391C5C3950E92D1D606604593892DE166A8CDB2DB9B73C
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/icon-support/customer-support-light-icon-support.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="35" height="33" fill="none" viewBox="0 0 35 33">. <path stroke="#fff" stroke-miterlimit="10" stroke-width="3" d="M6.156 15.487v-2.685c0-6.117 5.073-11.19 11.19-11.19 6.116 0 11.188 5.073 11.188 11.19v2.685"/>. <path stroke="#fff" stroke-width="3" d="M2.128 17.724c0-1.193 1.044-2.238 2.238-2.238h3.133v8.355H4.366c-1.194 0-2.238-1.045-2.238-2.238v-3.879zM27.266 15.487h3.133c1.193 0 2.237 1.044 2.237 2.238v3.879c0 1.193-1.044 2.237-2.238 2.237h-3.132v-8.354z"/>. <path stroke="#fff" stroke-miterlimit="10" stroke-width="2" d="M28.533 23.841v2.238a4.489 4.489 0 01-4.475 4.476h-6.863"/>. <path fill="#fff" d="M17.568 32.792a2.238 2.238 0 100-4.476 2.238 2.238 0 000 4.476z"/>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\dnserror[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	2997
Entropy (8bit):	4.4885437940628465
Encrypted:	false
SSDEEP:	48:u7u5V4VyhhV2lFUW29vj0RkpNc7KpAP8Rra:vIlJ6G7Ao8Ra
MD5:	2DC61EB461DA1436F5D22BCE51425660
SHA1:	E1B79BCAB0F073868079D807FAEC669596DC46C1
SHA-256:	ACDEB4966289B6CE46ECC879531F85E9C6F94B718AAB521D38E2E00F7F7F7993
SHA-512:	A88BECB4FBDDC5AFC55E4DC0135AF714A3EEC4A63810AE5A989F2CECB824A686165D3CEDB8CBD8F35C7E5B9F4136C29DEA32736AABB451FE8088B978B493AC6D
Malicious:	false
Reputation:	low
Preview:	.<!DOCTYPE HTML>..<html>.. <head>.. <link rel="stylesheet" type="text/css" href="NewErrorPageTemplate.css" >.. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.. <title>Can’t reach this page</title>.. <script src="errorPageStrings.js" language="javascript" type="text/javascript">.. </script>.. <script src="httpErrorPagesScripts.js" language="javascript" type="text/javascript">.. </script>.. </head>.... <body onLoad="getInfo(); initMoreInfo('infoBlockID');">.. <div id="contentContainer" class="mainContent">.. <div id="mainTitle" class="title">Can’t reach this page</div>.. <div class="taskSection" id="taskSection">.. <ul id="cantDisplayTasks" class="tasks">.. <li id="task1-1">Make sure the web address <span id="webpage" class="webpageURL"></span>is correct</li>.. <li id="task1-2">Search for this site on Bing</li>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\e28714c71f217892f72b2698ea5cefef[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4134
Entropy (8bit):	5.054285765130248
Encrypted:	false
SSDEEP:	48:+GOHx16ZAvHxDg+eJ/eux4tBeLDNdBeLSlBeLLpZdrzTPr+UkVr3H2c:+r1XSDQBe7BeeBeBeUkl2c
MD5:	E28714C71F217892F72B2698EA5CEFEF
SHA1:	E4257063DB9DF43DCDE90920CC3F34978BAEA51D
SHA-256:	65845E7CECBF4E88691BFF290F72B427B70887E23879F523BBC5B2B032C7609F
SHA-512:	C693B70D3EDCB32DAEA8BEC867BDF34AC2ED491F9CBC4A57A5433F462DC6EF2D0F01A0C17D7DFD457064D13D45207659ABF116B09191DFDDF38E706FC72A59BD
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/e28714c71f217892f72b2698ea5cefef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <linearGradient id="linear-gradient" x1="48" y1="71" x2="48" y2="25" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#5f6368"/>. <stop offset="0.232" stop-color="#5f6368" stop-opacity="0.699"/>. <stop offset="0.568" stop-color="#5f6368" stop-opacity="0.32"/>. <stop offset="0.836" stop-color="#5f6368" stop-opacity="0.086"/>. <stop offset="1" stop-color="#5f6368" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="76" y1="48" x2="86" y2="48" gradientTransform="translate(129 -33) rotate(90)" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#f29900"/>. <stop offset="1" stop-color="#f29900" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-3" x1="76" y1="15" x2="86" y2="15" gradientTransform="matrix(1, 0, 0, 1, 0, 0)" xlink:hr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\errorPageStrings[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	4720
Entropy (8bit):	5.164796203267696
Encrypted:	false
SSDEEP:	96:z9UUiqRxqH211CUIRgRLnRynjZbRXkRPRk6C87Apsat/5/+mhPcF+5g+mOQb7A9o:JsUOG1yNlX6ZzWpHOWLia16Cb7bk
MD5:	D65EC06F21C379C87040B83CC1ABAC6B
SHA1:	208D0A0BB775661758394BE7E4AFB18357E46C8B
SHA-256:	A1270E90CEA31B46432EC44731BF4400D22B38EB2855326BF934FE8F1B169A4F
SHA-512:	8A166D26B49A5D95AEA49BC649E5EA58786A2191F4D2ADAC6F5FBB7523940CE4482D6A2502AA870A931224F215CB2010A8C9B99A2C1820150E4D365CAB28299E
Malicious:	false
Reputation:	low
Preview:	.//Split out for localization...var L_GOBACK_TEXT = "Go back to the previous page.";..var L_REFRESH_TEXT = "Refresh the page.";..var L_MOREINFO_TEXT = "More information";..var L_OFFLINE_USERS_TEXT = "For offline users";..var L_RELOAD_TEXT = "Retype the address.";..var L_HIDE_HOTKEYS_TEXT = "Hide tab shortcuts";..var L_SHOW_HOTKEYS_TEXT = "Show more tab shortcuts";..var L_CONNECTION_OFF_TEXT = "You are not connected to the Internet. Check your Internet connection.";..var L_CONNECTION_ON_TEXT = "It appears you are connected to the Internet, but you might want to try to reconnect to the Internet.";....//used by invalidcert.js and hstscerterror.js..var L_CertUnknownCA_TEXT = "Your PC doesn\u2019t trust this website\u2019s security certificate.";..var L_CertExpired_TEXT = "The website\u2019s security certificate is not yet valid or has expired.";..var L_CertCNMismatch_TEXT = "The hostname in the website\u2019s security certificate differs from the website you are trying to visit.";..var L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\fAjswdS0KzcM9673[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	97809
Entropy (8bit):	5.4305439839086755
Encrypted:	false
SSDEEP:	384:Cu7Et0bnRHxptxgiY3WC9SD3SbMrbvyxwy2Jdl/btk9Lf933yEpGwuB+upQafdM0:CuJxxpt+EeJ2qLf9lxjzxmEd3Vu2M1z
MD5:	A5A4E749162CB93AD3683D349724B2E9
SHA1:	B3782F38F913DDBF5349EEC67453E0403BDFA9DE
SHA-256:	BA65595848ADD3FC91E5898AA49154D8D2A44CBBE26EDCEAF37458E6C644C1B0
SHA-512:	014C3D0EC977ABF0A3EEA5D8916FEA0183166B7CBDCECA775D0C91E58C12343F3B49333A04B9A239DBC3E652E8396525832D21E1F0BBA3E0CB2BCB0DA396A54C
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_5b=td_5b\|\|{};td_5b.td_0S=function(td_k,td_X){try{var td_T=[""];var td_N=0;for(var td_G=0;td_G<td_X.length;++td_G){td_T.push(String.fromCharCode(td_k.charCodeAt(td_N)^td_X.charCodeAt(td_G)));td_N++;.if(td_N>=td_k.length){td_N=0;}}return td_T.join("");}catch(td_b){return null;}};td_5b.td_5d=function(td_H){if(!String\|\|!String.fromCharCode\|\|!parseInt){return null;}try{this.td_c=td_H;this.td_d="";this.td_f=function(td_T,td_N){if(0===this.td_d.length){var td_E=this.td_c.substr(0,32);.var td_j="";for(var td_a=32;td_a<td_H.length;td_a+=2){td_j+=String.fromCharCode(parseInt(td_H.substr(td_a,2),16));}this.td_d=td_5b.td_0S(td_E,td_j);}if(this.td_d.substr){return this.td_d.substr(td_T,td_N);.}};}catch(td_x){}return null;};td_5b.td_4W=function(td_c){if(td_c===null\|\|td_c.length===null\|\|!String\|\|!String.fromCharCode){return null;}var td_T=null;try{var td_N="";var td_I=[];var td_P=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCha

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\fa9e0e90d1e7ec399dad9f3257a9bb63[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7010
Entropy (8bit):	5.014483393232849
Encrypted:	false
SSDEEP:	96:+52a4F85vujmX+SMHk8GmgDIK2VGpv67Lwy/N7JPDzjUOH:O40uy+SMHk7lDI7spv67LwSN7JPDzgy
MD5:	FA9E0E90D1E7EC399DAD9F3257A9BB63
SHA1:	7126642DDBF2DED43DC097B3521F3DD6BEF50405
SHA-256:	3EB0CFC171D8DFE795A23B5884593227EC11109EE1F9057BED4E48E5E4740604
SHA-512:	D6909D7974FCE725A0915F04812DD901010A5D798B93BF943664C254627C4511D44792C27ED4C98E8D6B16890B51CD11E1ADE80300F3101C874914A283F326A4
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/fa9e0e90d1e7ec399dad9f3257a9bb63.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="11" y1="165" x2="47" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/>. <stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/>. <stop offset="0.624" stop-color="#9aa0a6" stop-opacity="0.4"/>. <stop offset="0.786" stop-color="#9aa0a6" stop-opacity="0.626"/>. <stop offset="0.946" stop-color="#9aa0a6" stop-opacity="0.898"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="233" y1="121" x2="265" y2="121" xlink:href="#linear-gradient"/>. <clipPath id="clip-path">. <rect x="50" y="80" width="116" height="82" fill="none

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\fathom-logo[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 84 x 84, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	706
Entropy (8bit):	7.185454118418638
Encrypted:	false
SSDEEP:	12:6v/7BxAzZ0NFsmtNzoANwxo4K5sD+t4LzEjh32Aw/xuffxze630Y4mi4bXurYF6Q:AMZY1zoAIxAsDFLIl3WWRL304bXmYU78
MD5:	60E2A9586E80035256FBA73954AFE42E
SHA1:	3B4C6CF8BCF22574693B8D107BC727713F04AB9C
SHA-256:	2209C6BDDE19B8C519B2509CFB1E89253BC2E8028ABCCF5CDAA47B6D962356A3
SHA-512:	F3D9123EEC2ED81703C6B0F0FCDF0B6FF0ECCF3EA35E37EECF610B4C3B9165F2CBA105E61DC9714F777B87F810D6555CB6B6DD4E8CB1363CE8A54DCC50212142
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/logos/fathom-logo.png
Preview:	.PNG........IHDR...T...T.....+.......PLTE...J..T..J..E..K....:K..I..J..J..J..I..K..G... CD... C..C. C. D. C. C. C. C..C. C..B..C..<. C.!C. B. C. C..C..E.#F. C..D..C..C. B. C..D. C.#F.$C..A. C.!C. C..C. CJ... CK..J..I..K..K..F..J... C.\|.....>tRNS............v:/...j.%..?..q[...xU5..cM1..E.,+ ..........A(Cn....sIDATX...Yo.P........p...........i.1.IO..h.a..$..@.v..=C....................%L....n..v....Q7..c...........Wz...wr....c.j4.j`.7J7E-.....4`S.1.hc...?.i.....7.gS....b.....:Kb....<ok...l..Qn.Cdep..).;\|:.#j..M{.+.b.J..tDII.(l9m...!_......p.5......O..K..&..7m.<.)..N..j...AS.>X..\|..5..Y..[.Z.c.g5......{r.o.g..o...Ju\|U{.(p..."t.~....C........H...`.I.>..)1..^.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\favicon[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 161 x 162, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	16300
Entropy (8bit):	7.985071620554474
Encrypted:	false
SSDEEP:	384:UcbATvujkpBZoqXNbhL780eXss+txWgOXNmW4A0P6LTfIn3i:UIATkkpllV80+sragQM7niLTwny
MD5:	D29856BA15F7012516CE8A03E898E524
SHA1:	B46E7E5B672099E4BAB5597AF6E02D36D4437CB1
SHA-256:	C6561AF2D18EDC6E7350E2095B83D75F6C681E699A669A63B888D8BC7FE8937F
SHA-512:	4F677711CB04AE1F62660F707BA6E89E2FA491F4D10B78F21AA0C1BCD5CF26F56B2CA03893879F589E85E8EF08BBDFF04136F68D6578E8085EF7BA429230607A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/favicon.png
Preview:	.PNG........IHDR.............)......gAMA......a...?cIDATx..}..T.....M.].. ..Q..U...D..E..E...h..h...P4...HQ...M.EA.AT.&.(.."l....~......S..l...3.....N....o...../...>c..M./8....s.}..fI~`...Q..^.c~..-ln."lq.gvK.XK.y..l.?E.&3.d.O...$1f..S...2.K.....dI.l.$..%E.W..e.qxy.........B...+o.-..-..u.\..9?. j$....2..7._9p.'....o...N../.-.o3...b[...c....Ip........U.>_<&.mo}......J~m.T.H...>.Ig<.f.......46p.l...GX..l.A ...f.N.6..2C.\|nG.......eJ.y.>..lZk(e.{...hj.............x.....VU@W......%ZIm..oC..Z.W..F.O..6....Js.%..<(.Yv.2W..u>.....$J.n.c..2...q.$(.p.k..\...K.z..1.....~..@.wl....\..].*.NV...........T.A.2#;![..Au.d.......A..a....l<.?.......(.....D.$.Q..0.....6.3..\.i...{.....&...6.KA$..&....._..~4.ePG.P.R.7/.=........{..@....a.d.....(.G....w@'(3..0..l...o.[..+..\..y.......w5..e.4..A......y...U9i.\.0/..l....KFk...(.=./.%..C.0!..e...A..0.[J2.D...Vd7D....?....}..D... .=...,.>h...`R.:.......hE6./?.../.^....+.K.........'.t.$.6.o?.tk...%G./..W...=.U..v:..;..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\flUhRq6tzZclQEJ-Vdg-IuiaDsNa[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 134468, version 1.1
Category:	downloaded
Size (bytes):	134468
Entropy (8bit):	7.997810025445793
Encrypted:	true
SSDEEP:	3072:NPL4I4ByDTw177Oo/e21YkpEjUoAcGOCYD6HEvtOyVLro8Mj9BZ:yxMTw17ENQgkOVD6E1VLdMxBZ
MD5:	77B1B72456C0EBD4B4CB0C862B6A8263
SHA1:	EB97F43AEFDBB9FD501F4BB5641BD9F0110379EC
SHA-256:	C7B66A73A4BE9779B6F13B7AB3B3861E82460AD427985D64F3CC520D5FF8DF6D
SHA-512:	007E8EC0961B590B99B4BF392E5C26A5E0B750CACB49DE999D42CD69460D1CE1ED053DF20E8C403D2698E493A79FC973BD9B621B7C40E942151FE8E304679DAE
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/materialicons/v92/flUhRq6tzZclQEJ-Vdg-IuiaDsNa.woff
Preview:	wOFF.......D......u.........................GDEF...X...........SGPOS...t............GSUB......I......3]OS/2..J....?...`.s"ccmap..J......."...ocvt ..[............Dgasp..[.............glyf..[....G..U.Y..jhead.......6...6..R.hhea...........$....hmtx...8...1.....G.@loca...l............maxp...L....... ...Qname...l.......z..5.post...0....... ...2...................'...(....................x....+....=.d..`.L.}..\...m.m.msm...gN&7.........(..6..v..=...p.....<.......-..G...r.SZ=..z.......k\|`..\|....q._v...u.=os.=l....'=.1....7..]_...C.......o..bVq.'p+...x.O.9..7..>...:.k...'.E.....Xo.M..cFz..m..MH..^....h2ZF..h.._FKh<..F..h..Q.F.h......6>.c6...8..q7.c.m..[....so...T......6......>n..x..p..b......wM.......f/Q%%bH.\d-...7c.`.MBl....1"......)....Kl.Vz..eo.....L..S.V.......I.............h...b.M....!F.....&..T.....3 fH....@w..l\|..a33.nV<t.B.:r.u.a.Qb.3.:....k.:u.:E=L.@.M}A.A]dU...]..Y/..c}...u.m.}{.>.~....#...k.6.{...........8..u.9.s...............}....c...?..Wx.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\gdprUtilBundle[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	19258
Entropy (8bit):	5.208089413151656
Encrypted:	false
SSDEEP:	384:4v6hPIqPo9doSreOzPt6hm/sqNPapAfcLqsB9v74eQPVLe:6IoHBPt6hm/sqNYtLqsB57CPVLe
MD5:	23805E4668A5D8CEBC7781499EEC8F5D
SHA1:	663655FB417C5E90995B1D21E8F25DCD7734B108
SHA-256:	21717523EFDE49367F16340004B6FF212A1A377473031F71A34A19984A6958A3
SHA-512:	2CB694ED13FB8B48177E14B4D0D74F56689CEA5A65E0FFF4EC60ABDA34548436ED5F9D718B15F84B90F674E5E783BF9B3CC9CCCE3D50E038D1C6FDED6E238842
Malicious:	false
Reputation:	low
IE Cache URL:	https://uxfabric.intuitcdn.net/gdpr-util/2.3.0/gdprUtilBundle.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=3)}([function(e){e.exports=JSON.parse('{"ccpa":{"regions":["US"],"endpoints":["https://consen

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\googlelogo_color_74x24dp[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 74 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1622
Entropy (8bit):	7.861147443229629
Encrypted:	false
SSDEEP:	48:1iZ3jFWCXwymKs5AbKuyp/fvBheQdm+6QmWO:1iZ3ZWKZmKsCb0/fphH6QJO
MD5:	DE327BF69212B7255BBB0C8F40F52A3C
SHA1:	8C9E7517E6456E13F3F4640E39743B74F98B8F39
SHA-256:	0793CEFA320C6C622E8B143B35FAFB577BD7584C26796D3B5E1321463494FE76
SHA-512:	FDC82955CCBA3E9310CAC694197C43EB289CE9FFCB2A0784CCBAE0F3CEB5ADCF2F72D40C411290BDB6F3311E23321D13D3C2C6D20DC63E733A291A115E254060
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_74x24dp.png
Preview:	.PNG........IHDR...J.........].k.....IDATx....t.h...Y.sww?../$p............../.'-....C...K..{?,m...73d.....\|z[..U..L./.....Zp.....<...D.......TZ.....^...a`.E......}@'.i.3.s.\|&.......2nty...` .r.A.._H..e.p.-..`.'%.....a..31x>>..h....z.~.............(..6........V^..P...@u.........;..y..FY....J.B>+.....p..R.r.X.......@..V...z.M....y..)..@v..Fe..O.-8.5u9..px.. \.k....@..r..[..Y.-.}.4E...B..l@..3.G6....j..<.of...a{j..d.L.r....7..a.../.@...Y.`.l......9A....r..u..9.J..1ryC........HOt.U....b.E..{3iC.-....&!X.,9.......d..!k6......M4...l..#4.............&\|...c..?OS....\~..v.q.A...........Q..2...@..G..P.x..@.j....d..@....(..........'.....%....._..Y...k...n<wkE .Wk\.............P<...p......\' d.@..X@...$......z..N)?......S., Q.T:...@..BMZ..Z...Y..@.J/X'.....:.P... ...'..X....`....6L?....3..)+...c.K..~)pF..d..s....B0`)......si.#..J.-...cl...s<.....z$'.#./x......%-...0.-.d.........x...+."."....N.b .....7....@EQ..W.ds....;.8J....^..9@.t.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\hello[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	125911
Entropy (8bit):	5.1636102655002265
Encrypted:	false
SSDEEP:	1536:KyKhYIKUPUx4sTRZyrPvf/Pwi/YwH/XwY/gm:r6qvyHf/Pwi/YwH/XwY/gm
MD5:	DEC787BCC06DC6938196BF86F292E2CD
SHA1:	1A39FDFC38CDF7A07ED665EFA2CE89A330553C34
SHA-256:	5994CD9088EE5D907F22D51C331492CD6469130FD5BBF175C26A7E5B3637E916
SHA-512:	51F3D5288DFF75056E9CFA5FB245A30A578E1AC153FE9EB11473880F4F3224660C58279D1F4D0E9D6B1DE37B8120A3EC49757F03E7C49BC0AEE5188FB1EDF670
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en" data-shell-version="6.109.3-master-bld.1348-f3580c0a-1348"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"> .<link rel="preload" href="https://plugin.intuitcdn.net/sbg-web-shell-ui/12.33.1/dojo/dojo.js" as="script" crossorigin="anonymous">.<link rel="preload" href="https://plugin.intuitcdn.net/sbg-web-shell-ui/12.33.1/shell/boot.js" as="script">...<link rel="preload" href="https://plugin.intuitcdn.net/sbg-web-shell-ui/12.33.1/platform/web-shell-core/single-layer/web-shell-core.min.js" as="script">...<link rel="preload" href="https://plugin.intuitcdn.net/sbg-web-shell-ui/12.33.1/shell/harmony/harmony-common.css" as="style">.<link rel="preload" href="https://plugin.intuitcdn.net/sbg-web-shell-ui/12.33.1/shell/harmony/ecosystem-app/main.css" as="style">..<link rel="preload" href="https://plugin.intuitcdn.net/harmony-ui-components/28.1.1/dist/css/hui.min.css" as="style">....<script>. function initWSCScript()

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\httpErrorPagesScripts[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	12105
Entropy (8bit):	5.451485481468043
Encrypted:	false
SSDEEP:	192:x20iniOciwd1BtvjrG8tAGGGVWnvyJVUrUiki3ayimi5ezLCvJG1gwm3z:xPini/i+1Btvjy815ZVUwiki3ayimi5f
MD5:	9234071287E637F85D721463C488704C
SHA1:	CCA09B1E0FBA38BA29D3972ED8DCECEFDEF8C152
SHA-256:	65CC039890C7CEB927CE40F6F199D74E49B8058C3F8A6E22E8F916AD90EA8649
SHA-512:	87D691987E7A2F69AD8605F35F94241AB7E68AD4F55AD384F1F0D40DC59FFD1432C758123661EE39443D624C881B01DCD228A67AFB8700FE5E66FC794A6C0384
Malicious:	false
Reputation:	low
Preview:	...function isExternalUrlSafeForNavigation(urlStr)..{..var regEx = new RegExp("^(http(s?)\|ftp\|file)://", "i");..return regEx.exec(urlStr);..}..function clickRefresh()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..window.location.replace(location.substring(poundIndex+1));..}..}..function navCancelInit()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..var bElement = document.createElement("A");..bElement.innerText = L_REFRESH_TEXT;..bElement.href = 'javascript:clickRefresh()';..navCancelContainer.appendChild(bElement);..}..else..{..var textNode = document.createTextNode(L_RELOAD_TEXT);..navCancelContainer.appendChild(textNode);..}..}..function getDisplayValue(elem

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\icom-intuit-nav-logo-small[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 138 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1537
Entropy (8bit):	7.84795968116841
Encrypted:	false
SSDEEP:	48:hhF2N8FbLcd0jcqtuuTue9aL6U69+PydDi4:N9LcjuTSLywPytX
MD5:	E89E94B7159A9F420DF16E58AF503888
SHA1:	E8C0CE293E478F89C1B06DB9FEB53CF26BDDCF6E
SHA-256:	13BF607E29FAA9D1BC432925730B367DC355489DE5383D16C10E276E82554882
SHA-512:	2FAD429073F44B07E70612E146225AA1035517BEAC202F4450A4960EBF00C233A4232F80E108084FD19C8B68D886FDD02B0DBA242DCC28485094C0DDB59CC66D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.intuit.com/oicms/i_com/uploads/2019/11/icom-intuit-nav-logo-small.png
Preview:	.PNG........IHDR.......(.....!Sb.....IDATx..Y.]S....Nm..^T..PJ.%....".R...1.....AH..."bhL.....s...&xB...1...V..W......Z.{...>g....._k.....^.v.k..8...8.....x..28.....v......4.\+...p.Q..-.ve...8....W...J.d.........}.>`$.@.Q=...\b.....=.S6..EF.....QF2.(.A..Ib.......QF.Q..@.N.2.xh.Cy....5.6J.pc$./....U.E8.x.....~7......oN....7Z..6."....V....ep:...O.s(....d@+5=..".-3.`...).C...u..3<...?.MN....:.5...~.Vj.jE.:I.......~...a..}.J.+m..........Xo.(3U...C.u.....0.Q...mz..X........"...stI.R.!../p.p.Ia$..7.O...7.,c...p....p.D.w..I...`0..}....j...y...J"..9).MI......ez.mI...+....L.9;.x...m..qe..l.Zf..~Z..j.F-.m.0.t\|...9..(.g.v.T.%..i..l.Xt.a....$KGq.g...p..p.I.o...f.0...k...(.&l.T.....i?.y..8...f..Q....`o..g.?5...=.d..C.....2..j3.....I.z........\.Cz..9.....[..5.P...o...x.N...o..!.5.{^.l....\|.F......\|.,.>..$-.j.%...<...W.D....T.......yG...7..t_.!-.......y.+eS....Pd.......\`B.....G.........HnV....d~5...%...u........74l-..`...G.d..Y...F..A.{"s5..L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\icon[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	526
Entropy (8bit):	4.861333432194897
Encrypted:	false
SSDEEP:	12:jFP/sO6ZRoMqt6pHAcqJlg//s6ZmOHc9n+5cMK00k14enEsTeq:58OY7aKmJlrYmOOk4TfenEsTL
MD5:	711F0B8855335D6CFDBE0E8ABA7011CF
SHA1:	6883910B81151F041C455D0DEE57884A5DEE2147
SHA-256:	6FF47DF536C001EA150ECF2B42542A8DECBC28FE4230EDBD3F86CAF40F057A4E
SHA-512:	201B997649938B1B012351D34AA03E603F41780FD57E2817FD8A4011993F5149D9D4D87B64218A6A9C798FDFF51C5EFD4190C85361DF84D4E5A8CBF33942425C
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.googleapis.com/icon?family=Material+Icons&display=swap
Preview:	@font-face {. font-family: 'Material Icons';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/materialicons/v92/flUhRq6tzZclQEJ-Vdg-IuiaDsNa.woff) format('woff');.}...material-icons {. font-family: 'Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. font-feature-settings: 'liga';.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\info_48[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4113
Entropy (8bit):	7.9370830126943375
Encrypted:	false
SSDEEP:	96:WNTJL8szf79M8FUjE39KJoUUuJPnvmKacs6Uq7qDMj1XPL:WNrzFoQSJPnvzs6rL
MD5:	5565250FCC163AA3A79F0B746416CE69
SHA1:	B97CC66471FCDEE07D0EE36C7FB03F342C231F8F
SHA-256:	51129C6C98A82EA491F89857C31146ECEC14C4AF184517450A7A20C699C84859
SHA-512:	E60EA153B0FECE4D311769391D3B763B14B9A140105A36A13DAD23C2906735EAAB9092236DEB8C68EF078E8864D6E288BEF7EF1731C1E9F1AD9B0170B95AC134
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/info_48.png
Preview:	.PNG........IHDR.../...0.......#.....IDATx^...pUU..{....KB........!....F......jp.Q.......Vg.F..m.Q....{...,m.@.56D...&$d!.<..}....s..K9.....{............[./<..T..I.I..JR)).9.k.N.%.E.W^}....Po..............X..;.=.P......./...+...9./..s.....9..\|........7v.`..V.....-^.$S[[[......K..z......3..3....5 ...0.."/n/.c...&.{.ht..?....A..I{.n.....\|....t......N}..%.v...:.E..i....`....a.k.mg.LX..fcFU.fO-..YEfd.}...~."......}l$....^.re..'^X..}.?.^U.G..... .30...X......f[.l0.P`..KC...[..[..6....~..i..Q.\|;x..T ..........s.5...n+.0..;...H#.2..#.M..m[^3x&E.Ya..\K..{[..M..g...yf0..~....M.]7..ZZZ:..a.O.G64]....9..l[..a....N,,.h......5...f.y...}...BX{.G^...?.c.......s^..P.(..G...t.0.:.X.DCs.....]vf...py).........x..>-..Be.a...G...Y!...z...g.{....d.s.o.....%.x......R.W.....Z.b,....!..6Ub....U.qY(/v..m.a...4.`Qr\.E.G..a)..t..e.j.W........C<.1.....c..l1w....]3%....tR;.,..3..-.NW.5...t..H..h..D..b......M....)B..2J...)..o..m..M.t....wn./....+Wv....xkg....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\ius-base-reset-9aff3505[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	12954
Entropy (8bit):	5.040943341794139
Encrypted:	false
SSDEEP:	192:CAzh10mmjDKy4EoeA7jK4ds3ECO7Dd/sd:CAzlNbVvK4+0HDG
MD5:	6C7D6B50BD5594F3480BE0D786E4472F
SHA1:	121409536AF6CD0239459BFCA279EA1CA7643197
SHA-256:	F17CF3404331CF4142F97DEDEAABE99A1D8CD894ABEE2F102CC25E431F826FAD
SHA-512:	49A16C0F1F28AF57392EADAC59A6D99C15AD6625B0E6757D87278901C94BC904EE999736F6D66FC77B0CEE7DDD30D2439BFEB43D22BA853AFF56041DA0C5E6E2
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/ius-base-reset-9aff3505.js
Preview:	(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[29],{2560:function(n,e,t){(e=t(309)(!1)).push([n.i,'/! normalize.css v2.1.2 \| MIT License \| git.io/normalize /\n\n\n/* ==========================================================================\n HTML5 display definitions\n ========================================================================== /\n\n\n/ https://github.com/necolas/normalize.css/blob/master/normalize.css /\n\n\n/ same thing twitter bootstrapper and html5 boilerplate use /\n\n\n/ Added .ius-reset class for all the style to self contain the reset to the widget only /\n\n\n/\n Correct block display not defined in IE 8/9.\n /\n\n.ius-reset article,\n.ius-reset aside,\n.ius-reset details,\n.ius-reset figcaption,\n.ius-reset figure,\n.ius-reset footer,\n.ius-reset header,\n.ius-reset hgroup,\n.ius-reset main,\n.ius-reset nav,\n.ius-reset section,\n.ius-reset summary {\n display: block;\n}\n\n\n/\n Correct `inline-block` display not defined

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\ius-sign-in-widget-c64220eb[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	312708
Entropy (8bit):	5.415082442902116
Encrypted:	false
SSDEEP:	3072:gyIYw/jJfiwtzdNT4sF6VVJsJQeRFsRCyS:gyIYw/1f1pT4sF6VnebRFsRCyS
MD5:	8ABD36E104A5ADDD93C9073D1A7DA3BA
SHA1:	83A2EEB561F97992ABD69A7268970BD09CDD7713
SHA-256:	AC20ED6A321D03F2709446EEE7E081C5C9DD3844E1F8DF595F888283B3185907
SHA-512:	056892293344AB34A15840596BC80723818FE9ACA564D9A1EB237B612D3DE481BC3C11D2C80830B9C12A2BFD8C4004C643456FF85280CE2396B4784B9DC18E31
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/ius-sign-in-widget-c64220eb.js
Preview:	(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[87,7,11],{0:function(e,t,n){"use strict";n.d(t,"y",(function(){return i})),n.d(t,"x",(function(){return a})),n.d(t,"z",(function(){return r})),n.d(t,"s",(function(){return s})),n.d(t,"h",(function(){return o})),n.d(t,"P",(function(){return u})),n.d(t,"R",(function(){return c})),n.d(t,"ab",(function(){return l})),n.d(t,"B",(function(){return d})),n.d(t,"l",(function(){return f})),n.d(t,"O",(function(){return p})),n.d(t,"p",(function(){return g})),n.d(t,"Q",(function(){return m})),n.d(t,"A",(function(){return v})),n.d(t,"q",(function(){return S})),n.d(t,"C",(function(){return h})),n.d(t,"j",(function(){return I})),n.d(t,"u",(function(){return _})),n.d(t,"m",(function(){return b})),n.d(t,"S",(function(){return y})),n.d(t,"L",(function(){return A})),n.d(t,"J",(function(){return C})),n.d(t,"K",(function(){return E})),n.d(t,"T",(function(){return k})),n.d(t,"U",(function(){return T})),n.d(t,"V",(function(){return O})),n.d(t,"W",(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\ius-widget-header-footer-8a46572d[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	6400
Entropy (8bit):	5.23332817223651
Encrypted:	false
SSDEEP:	96:sHYhu5uwguWgfKBuRmuRTuRvuR7uRpj9GtTprSCgo+HCeAagD1ZQmZT9bqWiB5Ay:xIwkvRRRqRGRCRmWVaFagxZj8AaF9m2
MD5:	6F00339CB6E6F49D070EAD06CC3509C9
SHA1:	7F8774C52FEF8A831998F50B83B45689D85BE18B
SHA-256:	1B9D7193EF73E6D9B8724E30B3962AFAB7277C4FE7BB72C2F20429ADF656A00B
SHA-512:	F77D0116E24BE86177629F1A7AF231CC26539D6388DD078D8A817D5C1D5D1A5168BE0C1AA75340081EE16CCCF5E61B22A8E700A18B4BD45F4DAADB58B366F466
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/ius-widget-header-footer-8a46572d.js
Preview:	(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[102],{2605:function(n,e,i){(e=i(309)(!1)).push([n.i,".ius-hosted-ui .ius-hosted-ui-logo {\n width: 260px;\n height: 90px;\n display: inline-block;\n}\n.ius-hosted-ui.ius-hosted-ui-main-footer {\n font-size: 12px;\n color: #9c9aac;\n text-align: center;\n}\n.ius-hosted-ui.ius-hosted-ui-main-footer a {\n text-decoration: none;\n color: #0077C5;\n}\n.ius-hosted-ui.ius-hosted-ui-main-footer a:hover {\n color: #2593eb;\n}\n.ius-hosted-ui .ius-hosted-ui-footer-container {\n width: 90%;\n margin: auto;\n}\n.ius-hosted-ui .ius-hosted-ui-footer-intuit-logo-container,\n.ius-hosted-ui .ius-hosted-ui-header-intuit-logo-container {\n display: inline-block;\n max-width: 385px;\n margin: 0 auto 5px;\n}\n.ius-hosted-ui .ius-hostedui-footer-copyright {\n color: #000;\n}\n.ius-hosted-ui.ius-hosted-ui-main-footer.ius-hosted-ui-main-footer-widget .ius-hosted-ui-privacy-settings {\n background-color: #FFFFFF;\n padding: 20px;\n

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jscontext[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	C source, ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	8499
Entropy (8bit):	5.451091009970168
Encrypted:	false
SSDEEP:	192:2VZASAEFEeoBOYRWb/uFrdN9yD+eg+gEDXuezqUynU0PKp6rUFXBg6lgE9GQloo:2VZHYMb+NcazYX5zqUyRQ6kKnmh
MD5:	BC3AE67C46AAFA103B61E54103CC9FB5
SHA1:	D67BE9E7EF7B7B9A04D67FD5EA4B1F10A960B856
SHA-256:	2FEA87CD053B87847F9BB36AD1D7CA56CFEAC065C775410DFF72D2E73A243FD1
SHA-512:	C3B88F25DE5392EF8315B188F679520E99AE9B67B7BE534790680970DBBE8B8A62BF430E2496F572775C060D245C107FF3AE016B29B59FBC3B8218A5D84BBF5D
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/jscontext.js
Preview:	var __JSX__=null;function GETJSX(){try{if(__JSX__==null){__JSX__=new Object();__JSX__.window=window;__JSX__.document=document;__JSX__.topContext=top.__CTX__}}catch(a){console.log("Cannot access top.__CTX__ due to error ",a)}return __JSX__}var __SAVED_JSX__=null;function SAVE_JSX(a,b){if(__SAVED_JSX__==null){__SAVED_JSX__=new Array()}__SAVED_JSX__[a]=b}function RESTORE_JSX(a){var b=null;if(__SAVED_JSX__!=null){b=__SAVED_JSX__[a]}return b}var documentContentLoaded=false;if(document.addEventListener){document.addEventListener("DOMContentLoaded",setDocumentContentLoaded,false)}function setDocumentContentLoaded(a){documentContentLoaded=true}if(document.addEventListener){document.addEventListener("beforeunload",resetContentLoaded,false)}function resetContentLoaded(a){documentContentLoaded=false}if(window.addEventListener){window.addEventListener("load",function(a){if(window.registerDefValues!=null){registerDefValues()}},false)}else{window.attachEvent("onload",function(a){if(window.registerDe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\login_footer_sprite[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 233 x 35, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8130
Entropy (8bit):	7.971354490813781
Encrypted:	false
SSDEEP:	192:xERwWRx849MnBZXDxx304UjpR6tIKsT90LGZNScv7CyEE:SZ7dwZVtdUN0IV6G3ZqE
MD5:	608BECE0EB2BE8D851B1E00E99485AB2
SHA1:	5E5ED0F4D2F3260DCA513C6954A570532B279F2A
SHA-256:	CF2FB9E2F52A4B555A34463A64B335B6223DEDA7C5438A633D7C7AD8EAD2218A
SHA-512:	3E5D0FD6B9A6B0368C1A745DF763A8AA686A2BC81BB66272AEC9CD04CD5C7F57619492C4FF646C55A1CF3E92B3AEB86812AC2066AFF1663896F012B15FB993FA
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/images/login_footer_sprite.png
Preview:	.PNG........IHDR.......#.....qD-1....tEXtSoftware.Adobe ImageReadyq.e<...dIDATx..}.xTE...{zI....!!.v$.........2x../..F.....8........:..........1..Dd....!a......^.$........x..:}......N!.M.w..I.9....l...].e.M"..4...D....&yv.Q.$.J..y...Zm...Z1../.......Z...e\....R.d..:.@....... %.f...k......dH...rX.l..k.>.....ZL@].^.z....KgNx...h.8....?..(..5.....q....O./....b..4...u.........O.\|m._...^.B"S.i...T&.+c3.r..$FHW.}5\|.5.Z4m.\|..haw5...H.o..E....i3 5C..c.......Te.Nm...X..Z.....=......%.......S...I........S......S.I#.q....g?....}...._W.x...Wj...N..`..!%..J....O......2..T.?...R.&......i..y.....~2..8.R}9.......83....e..NWv.LH.Z..u...PG.9HT..n...D....<.$$&...W...x[.g.....2.)..y..H\|..x..\......8.....<.....t..].pop.Uy..W.........R...L.\|..X..;.>......D7.`..;..c....#1.S.y..1..Le..p..9....h.[.Gc..a.......]...}JE.X..dm.RfQ...J.'...R...r8.i..HU.P...J... %.1k...F..8...!..7.J}..g.kDu^..7.j..x.N.%..2.. .S..`...>.a$.z.d?.....'.....n%..t.D.5?.....ON.Nz........y..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\logo_48[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\main-2b24de5c109f145ac29e[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	20318
Entropy (8bit):	5.235729805512695
Encrypted:	false
SSDEEP:	384:/tW+w2voJBpTTIpDxrlf9EtKpXIy8kJMylPpeJWApbi:lW+voJBpTUDH9Et8pNlZApu
MD5:	23865BF6D1FA91C2F8974B611DC80F69
SHA1:	DD5C5B1729951C3FE53FA41A4AC18FF57ADAC01D
SHA-256:	5705F833E41A047EB9349BB1F326B33F87FD01AFB0F51598DA39103CCE067813
SHA-512:	5B6146A644D8645F935B58297070C2936283BEF3827B7ACCD842861A76B880D0F3C1C5E8DB38FC7F75A790A7C8D3EAEA109B8556DCF3CE1774C0F71C496100DC
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/main-2b24de5c109f145ac29e.js
Preview:	_N_E=(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[10],{"0sNQ":function(e,t){"trimStart"in String.prototype\|\|(String.prototype.trimStart=String.prototype.trimLeft),"trimEnd"in String.prototype\|\|(String.prototype.trimEnd=String.prototype.trimRight),"description"in Symbol.prototype\|\|Object.defineProperty(Symbol.prototype,"description",{get:function(){return/$(.+)$/.exec(this)[1]}}),Array.prototype.flat\|\|(Array.prototype.flat=function(e,t){return t=this.concat.apply([],this),e>1&&t.some(Array.isArray)?t.flat(e-1):t},Array.prototype.flatMap=function(e,t){return this.map(e,t).flat()}),Promise.prototype.finally\|\|(Promise.prototype.finally=function(e){if("function"!=typeof e)return this.then(e,e);var t=this.constructor\|\|Promise;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){throw n}))}))})},"1ccW":function(e,t){function n(){return e.exports=n=Object.assign\|\|function(e){for(var t=1;t<argume

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\mobile-quickbooks-payroll-feature-qbo-us-desktop-wide[1].wdp Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG-XR
Category:	downloaded
Size (bytes):	19786
Entropy (8bit):	7.829966371702362
Encrypted:	false
SSDEEP:	384:fT5Zwm4nnzYH+Md46/Zh1Y9ZFamxmRbsq0O8C/Eyg5Sfp2nVOJij:fEm4nzYHjdj/32bNib1r/Eg4gJij
MD5:	44359B974C623709A47BE01982F7B1D2
SHA1:	5A75D38CCC894DCB163575C0D046A72388FBC223
SHA-256:	62C62A308220EC01C178E3D5717AD9BE54FE0BD485059C9CB3C31DA72307B53C
SHA-512:	3CC09D7C519D10717A01030F5F974611004B941310689F0A6E2952505B6E183F0CFF12B306A669A55D715DD4EE922219B0431A1F4175E8A2F4909E5091468333
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/feature/mobile-quickbooks-payroll-feature-qbo-us-desktop-wide.png
Preview:	II.. ...$..o.N.K..=wv.............................................+..........................B...........B.....................L......WMPHOTO..E.q...0...,HHR..@.....5.bE.......` .L.%j.&.....`B.....\..r$.A.V...n...n..'..[05B[..t.a.).X..\|W..w....[2.t\?.;\|..'WoJ5Q..........6.jLT.$..@L.4.......M.La.M.....>@....f...!... ..'...r2.......\oK..8n@2g.....e......&.Q..$.. !..O...n.M?#2.\|.z.o.h.....pG.."......i..`......Ha.,\....&...U5.Q........,..X.}..C@..@..:"&...9......HK....:.........3.......n..UL%.l$.....{..@.a..@Km..n...3.9.,.f..\B;f.0.:..>N..\|.-Ne1...^.....Y.g.yn..A..2..S.4SV..v.pE9.]2.....h1M>;.Wu.o...o.!.....o...$.f.8..kY..X.xP7.&M.y....atc..#..k.O..(..oF8....1......A...I...G..t8.O.M..Y..HRJ...dL.x.q.k..8..J...)...,]`.....+...'Q.\...(D9.A....Ym.MXLN....U.7]......x..PD0.....:1..+..x.e.(n.:nD(AW....X49.&.A.L.[...UE{....X...).:. D..U.......R.T.E,Qt..(b=.,..-Qk..EH.\|aV(.BI}<.A .j]...1.N.I.M.2...,\....\..."..QL..A...b........!.fYi..E.J....n.&..+...A._.u.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\mobile-track-expenses-feature-qbo-us@2x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 1320 x 1120, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	94207
Entropy (8bit):	7.970687886649439
Encrypted:	false
SSDEEP:	1536:EqWzyD+xAOL3kHU6KVk5A5pehnCm/Gx0/p5uyCJWruH7J5+H2W/o7JH6NUjovsDS:EqWz5xnDr6K94s0/HrriSWF7VICoV
MD5:	ACDA89087A9CC5269C148A29E13D2AF9
SHA1:	28C89900EE2F523E0AFADF679F78B286337B5E56
SHA-256:	8BB718D8B2A9ADDBFB7BF6B892A001F8A64E8B4412B8C39B038A3F11E83F2E7D
SHA-512:	87BA0A9156C7FBFFB058638D2D330DFA0FBEE9F63E0044F151D27CB2552B3CDA162E477E8D132B4E753ECD18C42F518A839106B76FA3EDBC52C6EED62A4BEB19
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/feature/mobile-track-expenses-feature-qbo-us@2x.png
Preview:	.PNG........IHDR...(...`......3H.....PLTE.....h..k..p.....l..l...........l..j.....l.....l...........k........j...........l...........l.....l..l..............................Z......l.........................................................9:>...............................................................89=..............................67:..............j...>...........347............ijp...klr125......./1..............@........qqu+..#........vwz...fgl..i..~...=>A...........\|\|..................YZ\...cdg^_a...TTW......)*-...ABD................~{...OPSCDG......LMOIJM..._....4.-K...........h..............3.....q.ls.....-....u...N......\|....K.E;..!..<.FGI.....^..e..A.:...c.]...=..G..q...V..V.O.....\|.............y..HHKj......&..3.{-.~......3.,E...a.\......w.s......-tRNS. ..u.@0.`.@O....o.0.... .?.`P...[ ....K.%...l.IDATx.........................................................................`..@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....a ...".... ......h..-%J

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\o11y-rum-web.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	9612
Entropy (8bit):	5.255648521428578
Encrypted:	false
SSDEEP:	192:H+CplZO5ki1TpPzbptbFECxFLWf35rnfFQPTbVBkUwK8Cz6:eCctV9zbbb6CrWf35rnfCHVBkzgG
MD5:	BE22065772073F426B0AE08DF61D37A7
SHA1:	1171C14A8F699C6B6F160ADA2DB192038A006DB2
SHA-256:	29E3CC608965DD721C2C7A9C1E72DE9C4D67C47E79A82DCE3E8E2BEB01C3D69C
SHA-512:	3B9D32891B50D834B4A721006296857E0AA9ADBAEFDBDC5F0F109B910237E83B0B4EE42BAB40D4E15F41C7B62A0A802A9BBC9686E5E2A7EAD9512FE645EED6D7
Malicious:	false
Reputation:	low
IE Cache URL:	https://uxfabric.intuitcdn.net/@cloud-monitoring/prod/o11y-rum-web.min.js
Preview:	(()=>{var e,t,r,n,o={107:function(e,t,r){var n,o,a;"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self&&self,o=[t,r(862),r(795)],void 0===(a="function"==typeof(n=function(n,o,a){"use strict";function i(e){return e&&e.__esModule?e:{default:e}}function u(e){return function(e){if(Array.isArray(e))return l(e)}(e)\|\|function(e){if("undefined"!=typeof Symbol&&Symbol.iterator in Object(e))return Array.from(e)}(e)\|\|function(e,t){if(e){if("string"==typeof e)return l(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);return"Object"===r&&e.constructor&&(r=e.constructor.name),"Map"===r\|\|"Set"===r?Array.from(e):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?l(e,t):void 0}}(e)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function l(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\polyfill.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	67750
Entropy (8bit):	5.262810049513841
Encrypted:	false
SSDEEP:	768:g+0gnnbhoBVDadILezMIaS+12hm7bn+yLYOYmfV+F/cTxkXHWazhDXZvOCSxcF1:fQLoXjDxymoGZvIxcF1
MD5:	6C6557576DE52DEC4BDFB2C6BADE0216
SHA1:	3AD888A543125B02FB9FDE76D2D1A2AEFB2DD5CE
SHA-256:	0F8CF6DCBA722DF0E6567CA94193A668BB250441D0DD3973875979B8E5A18D02
SHA-512:	F206F3D881CAF4EAFF27829B2B7C9D152F6621A32203206893B9794F0CA6E83A21211913EFF0C843876C488F411E2F260F802B3FB12AE0C597E3C4AE4BC025F0
Malicious:	false
Reputation:	low
Preview:	/* Disable minification (remove `.min` from URL path) for more info */..(function(self, undefined) {var _DOMTokenList=function(){var n=!0,t=function(t,e,r,o){Object.defineProperty?Object.defineProperty(t,e,{configurable:!1===n\|\|!!o,get:r}):t.__defineGetter__(e,r)};try{t({},"support")}catch(e){n=!1}return function(n,e){var r=this,o=[],i={},a=0,c=0,f=function(n){t(r,n,function(){return u(),o[n]},!1)},l=function(){if(a>=c)for(;c<a;++c)f(c)},u=function(){var t,r,c=arguments,f=/\s+/;if(c.length)for(r=0;r<c.length;++r)if(f.test(c[r]))throw t=new SyntaxError('String "'+c[r]+'" contains an invalid character'),t.code=5,t.name="InvalidCharacterError",t;for(o="object"==typeof n[e]?(""+n[e].baseVal).replace(/^\s+\|\s+$/g,"").split(f):(""+n[e]).replace(/^\s+\|\s+$/g,"").split(f),""===o[0]&&(o=[]),i={},r=0;r<o.length;++r)i[o[r]]=!0;a=o.length,l()};return u(),t(r,"length",function(){return u(),a}),r.toLocaleString=r.toString=function(){return u(),o.join(" ")},r.item=function(n){return u(),o[n]},r.conta

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\polyfills-fe16f939e328370f3e99[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	92329
Entropy (8bit):	5.333236745752218
Encrypted:	false
SSDEEP:	1536:jCNdC7dSD/v3h5q6+zX/9AZ7w9hoxiMfPx:S0kz+zVbpK
MD5:	768520B6A68FC391D01BD81C7241B508
SHA1:	FCA4B06E45EAF3F7AD235C3524E00AA6E6C6D289
SHA-256:	D65B45DD79C5368CC16A34E994147F0766EF7CAC4FA919874809BB5EDE318CCE
SHA-512:	DA16D844086151F3652CA48EADC67CF1D89ED6275C9BBCE1E60D9B0F4CD11F88E552B77889295C5B07228A1EB176162E70A32A8EA308A07FF5E9816242F53C01
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/polyfills-fe16f939e328370f3e99.js
Preview:	_N_E=(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[17],{Ri3X:function(t,e,r){(function(t){!function(){var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof t?t:"undefined"!=typeof self?self:{};function r(t,e){return t(e={exports:{}},e.exports),e.exports}var n=function(t){return t&&t.Math==Math&&t},o=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof e&&e)\|\|Function("return this")(),i=function(t){try{return!!t()}catch(t){return!0}},a=!i((function(){return 7!=Object.defineProperty({},1,{get:function(){return 7}})[1]})),u={}.propertyIsEnumerable,s=Object.getOwnPropertyDescriptor,c={f:s&&!u.call({1:2},1)?function(t){var e=s(this,t);return!!e&&e.enumerable}:u},f=function(t,e){return{enumerable:!(1&t),configurable:!(2&t),writable:!(4&t),value:e}},l={}.toString,h=function(t){return l.call(t).slice(8,-1)},p="".split,d=i((function(){return!Object("z").pr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\pxiDypQkot1TnFhsFMOfGShVF9eI[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 38064, version 1.1
Category:	downloaded
Size (bytes):	38064
Entropy (8bit):	7.985282250659124
Encrypted:	false
SSDEEP:	768:FmLfShvXTNLstzb6V8QZ3+ibkkftFHdur7Lh9JVIzdMIWRirfqiW5Pm9WmX:FmzSdXOhOOA5uDzHIz3WUrPYtmX
MD5:	E7BBF7E9E89975E144CBC167F2293FDE
SHA1:	0CB43D4E0ECF79C8AF6629CA1C386EA23FA02C02
SHA-256:	A87A298223B431522629F284F2D237773F8257B2DB427904CA95EC20DFC34CDD
SHA-512:	75AD4EF05603116A2C0D16E9C7F793D47602044611F369A83A6AED4D14279809064C43B6EA3BEA28F889F3CE65199DA67CF0685819A8F0C01F5DFC0C97969A7F
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/productsans/v9/pxiDypQkot1TnFhsFMOfGShVF9eI.woff
Preview:	wOFF..............G.........................GPOS.......K..:X....GSUB............!?-.OS/2.......Y...`k..cmap...(... ....)9.8cvt ...H...g...l...wfpgm...........a.A..gasp...............!glyf......TD...$...yhdmx..c...'m..Kha`98head...h...6...6..N{hhea....... ...$...Chmtx.......^...l}..loca... ...8...8...Pmaxp...X... ... .8..name...x........ P<.post...L...\|...{#_.sprep..............oNx.d.%@E1....wVpw......]z$S...HT.L&.L.g8.M.....ib....&.......]..${..i..<..A..Y............+.... .[..x...pL.=L.]`.mv...+..x.J.1..G<.$.B&..r..5.zs.q..W..... ?./.1.i.....?...?..uk.&~.I..\YF.6...\|<!.:..Jxg.\|...0.bb..\|..=.=.=G....&!&!CB...Y"............)ij.....r.....ku.j.9q"....hs...D"._.........X.+02.{>...";>.....3.([a.'y.L.&."..2.O....*....`..L~.l}....h>x .J...V.8u<..."..Wh......FF"#.8...........=#Q.K..........!.S}...9........bv..V......W.."/....9U}.....5....g.{"..{.....Y.v...T..o..i.s.....\|V.Hs..8d..N=..lg..g.HV...E.{;W.w6...R3&.mV..Q"%.<.3tlE.i.3yB62.....>K...l....s.(.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\quickbooks-support-icon[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	790
Entropy (8bit):	4.954559783652929
Encrypted:	false
SSDEEP:	24:t4BVR6SiaVRwVB5KzHcRLYUFX5KzPr7USF3sVS3v6XcKzHcFwjEgr1V/:lS4zs4FX2rQSFAe+4wXx
MD5:	F8BA77BC5139BC22B1F930D1082BE8AC
SHA1:	15E0C38EB6703992D45527D9AD079F2D3976BB99
SHA-256:	7A4CFC2E346AE16352692BA50B1621EBF64F23305A29602FD3C8B18C51077CBC
SHA-512:	BF5150D6CF3B8AD7876E19F1EA3EC32F052C3DB2A34B021178ACD1598D190051D64DD83D950A046E80D73FF732D7D298D26A3C8BD3FB8B7D95D7A19F78B75E35
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/icon-feature/quickbooks-support-icon.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="75" height="75" fill="none" viewBox="0 0 75 75">. <rect width="75" height="75" fill="#07C4D9" rx="37.5"/>. <path stroke="#fff" stroke-miterlimit="10" stroke-width="3" d="M26.016 36.054v-2.686c0-6.116 5.072-11.188 11.189-11.188s11.189 5.072 11.189 11.188v2.686"/>. <path stroke="#fff" stroke-width="3" d="M21.988 38.292c0-1.193 1.045-2.237 2.238-2.237h3.133v8.354h-3.133c-1.193 0-2.238-1.044-2.238-2.238v-3.879zM47.126 36.056h3.133c1.193 0 2.237 1.044 2.237 2.237v3.88c0 1.193-1.044 2.237-2.237 2.237h-3.133v-8.354z"/>. <path stroke="#fff" stroke-miterlimit="10" stroke-width="2" d="M48.393 44.406v2.238a4.489 4.489 0 01-4.476 4.476h-6.862"/>. <path fill="#fff" d="M37.429 53.358a2.238 2.238 0 100-4.475 2.238 2.238 0 000 4.475z"/>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\quickbooks-time-logo[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1570
Entropy (8bit):	4.864398763832908
Encrypted:	false
SSDEEP:	48:2GwG4MHf08oL49oAZLUt09j/vI+eOPFYLH16bA:ey/08T9VF5/AqPGx
MD5:	A304977FC7852365AB72B588A8512E49
SHA1:	415F2CA4D08EC076DF29E6C14FAD7A22C5D8F70B
SHA-256:	D3541E8DA71F36067B8181A7F6261905639908236591D366ADC65B3AFB7CAB20
SHA-512:	B8F06C5A6EC9DAF3648599E00E2C86DB61509513144C3F9760F04FE239F0D0AF3CCB4076A4BB2887BB91766F7AC9FCC5495DBA4C7DC4DDAA230628BEDE1F38C1
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/shared/logos/quickbooks-time-logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="84" height="84" fill="none" viewBox="0 0 84 84">. <mask id="a" width="84" height="84" x="0" y="0" maskUnits="userSpaceOnUse">. <circle cx="42" cy="42" r="42" fill="#C4C4C4"/>. </mask>. <g mask="url(#a)">. <path fill="url(#paint0_linear)" d="M42.034 77C23.006 77 7.5 61.561 7.5 42.534 7.5 23.506 22.939 8 41.966 8 60.994 8 76.5 23.439 76.5 42.466 76.432 61.494 61.061 76.932 42.034 77z"/>. <path fill="#fff" d="M65.547 42.5c0 12.961-10.518 23.548-23.547 23.548-13.03 0-23.548-10.519-23.548-23.548h4.75c0 10.383 8.415 18.797 18.798 18.797 10.382 0 18.797-8.414 18.797-18.797 0-10.383-8.415-18.797-18.797-18.797-.679 0-1.425.067-2.104.135l-.543-4.75c.882-.068 1.765-.136 2.647-.136C55.029 19.02 65.547 29.54 65.547 42.5zm-29.18-17.915l-1.425-4.547c-1.425.475-2.85 1.018-4.14 1.764l2.308 4.208a33.923 33.923 0 013.257-1.425zm-10.79 9.025l-4.207-2.24c-.746 1.358-1.29 2.715-1.764 4.14l4.546 1.425c.34-1.153.815-2.307 1.425-3.325zm4.547-5.564l-2.9

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\recover[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	169000
Entropy (8bit):	5.3094921369416745
Encrypted:	false
SSDEEP:	3072:yIBVYhQSxAE+UTimMlemOFaNVtnKb+Cnd8W:yIBVCQSxAwmmMlemOFaNVtYd8W
MD5:	BAD59090A36B2DD9098FDA6AAD816CF3
SHA1:	4832A33B3A247D58821679B2DE5ADF5A77763B00
SHA-256:	D00EBF0171954874C054670E9FCF11444DBBE16D36B49C50B08A21700215385D
SHA-512:	D4074C555FE164E8FB9E722CE09EFE75C6CA7DF04317218A3537BC4C3E7C003F592A75523A03B4C47B45CE619B9E04279D3DFF5490A345C92682AB2D7A970044
Malicious:	false
Reputation:	low
Preview:	<!doctype html>.<html>.<head>. <meta charset="utf-8" />. <script>. ....................// Use this file (for now) to store Localizable Strings for use in javascript..//.// Start Strings and Functions with percent percent tokens.//..var LSJ_PRODNAME_M = '%%prodname.m%%';.var LSJ_CUSTOMER_CAP_SINGULAR_STRING = '%%Customer%%';..var LSJ_WIDGET_OPTIONAL_COMMENT="Enter Optional Comments here";.var LSJ_WIDGET_EMAIL_ADDRESS="Email Address";.var LSJ_COMMON_ALL="All";.var LSJ_CALENDAR_JANUARY="January";.var LSJ_CALENDAR_FEBRUARY="February";.var LSJ_CALENDAR_MARCH="March";.var LSJ_CALENDAR_APRIL="April";.var LSJ_CALENDAR_MAY="May";.var LSJ_CALENDAR_JUNE="June";.var LSJ_CALENDAR_JULY="July";.var LSJ_CALENDAR_AUGUST="August";.var LSJ_CALENDAR_SEPTEMBER="September";.var LSJ_CALENDAR_OCTOBER="October";.var LSJ_CALENDAR_NOVEMBER="November";.var LSJ_CALENDAR_DECEMBER="December";.var LSJ_CALENDAR_TODAY="Today";.var LSJ_CALENDAR_FIND_TODAY="Find today";.var LSJ_CALENDAR_PRVIOUS_MONTH="Previous m

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\regexp.xd[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	4485
Entropy (8bit):	5.788484705732516
Encrypted:	false
SSDEEP:	96:NW3wG1FLiA1A5A+BXA1AaNZDEJ0DlD0BojYIYSz4nWQwBLdSyj1pIWz:Y2AyQZDEyDl4BlPSz4nWQwBLoO0G
MD5:	B4BE6B360660F992B51EF28337027E3B
SHA1:	58535C192A0D7295CFEC3A064F80A010EDE9A7BE
SHA-256:	981C297B0FFAFE8428A4CA16454DFBD6DAACC41DC979582C20BF4EA6297C1C3F
SHA-512:	C411C3805D7CEAC5F2E5C4859702272583234261CCCA232F088C78A017BAF44D666F9BB608FBBB0DF813FE46F1733F6624820991A79FA4B775EDCCAC0772CC51
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/dojotoolkit/dojox/validate/regexp.xd.js
Preview:	/..Copyright (c) 2004-2011, The Dojo Foundation All Rights Reserved...Available via Academic Free License >= 2.1 OR the modified BSD license...see: http://dojotoolkit.org/license for details./...dojo._xdResourceLoaded(function(_1,_2,_3){return {depends:[["provide","dojox.validate.regexp"],["require","dojo.regexp"]],defineResource:function(_4,_5,_6){if(!_4._hasResource["dojox.validate.regexp"]){_4._hasResource["dojox.validate.regexp"]=true;_4.provide("dojox.validate.regexp");_4.require("dojo.regexp");_4.mixin(_6.validate.regexp,{ipAddress:function(_7){_7=(typeof _7=="object")?_7:{};if(typeof _7.allowDottedDecimal!="boolean"){_7.allowDottedDecimal=true;}if(typeof _7.allowDottedHex!="boolean"){_7.allowDottedHex=true;}if(typeof _7.allowDottedOctal!="boolean"){_7.allowDottedOctal=true;}if(typeof _7.allowDecimal!="boolean"){_7.allowDecimal=true;}if(typeof _7.allowHex!="boolean"){_7.allowHex=true;}if(typeof _7.allowIPv6!="boolean"){_7.allowIPv6=true;}if(typeof _7.allowHybrid!="boolean"){_7.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\require.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	17493
Entropy (8bit):	5.208224058486374
Encrypted:	false
SSDEEP:	384:ayznN5k6MTQmeYl8oSdNdSoUYdHvEDezCnGgqo6N6TBIueHtf:hI6MTQxYl8oSdNdS/QHvED9StETBKHtf
MD5:	18823F6A6D208EE1E361BB266AB794D5
SHA1:	E9FA356AC13BD24C051804A6E4EC3E053BC8001C
SHA-256:	D5F10F852B112A514A19F2B778EEF5D2D1307878757F0A24539C051831CEFAF8
SHA-512:	737365F3EEE0E0B3124DDAE6EB6D72EE47FDBF74833E78712CD85C8C525B2840959E66474DDA3E2113B4E6C34B4C7FC3DEF03ABB55F7D9E8682C2ED61557617A
Malicious:	false
Reputation:	low
IE Cache URL:	https://uxfabric.intuitcdn.net/requirejs/2.3.6/require.min.js
Preview:	var requirejs,require,define;!function(global,setTimeout){var req,s,head,baseElement,dataMain,src,interactiveScript,currentlyAddingScript,mainScript,subPath,version="2.3.6",commentRegExp=/\/\[\s\S]?\\/\|([^:"'=]\|^)\/\/.$/gm,cjsRequireRegExp=/[^.]\srequire\s$\s["']([^'"\s]+)["']\s$/g,jsSuffixRegExp=/\.js$/,currDirRegExp=/^\.\//,op=Object.prototype,ostring=op.toString,hasOwn=op.hasOwnProperty,isBrowser=!("undefined"==typeof window\|\|"undefined"==typeof navigator\|\|!window.document),isWebWorker=!isBrowser&&"undefined"!=typeof importScripts,readyRegExp=isBrowser&&"PLAYSTATION 3"===navigator.platform?/^complete$/:/^(complete\|loaded)$/,defContextName="_",isOpera="undefined"!=typeof opera&&"[object Opera]"===opera.toString(),contexts={},cfg={},globalDefQueue=[],useInteractive=!1;function commentReplace(e,t){return t\|\|""}function isFunction(e){return"[object Function]"===ostring.call(e)}function isArray(e){return"[object Array]"===ostring.call(e)}function each(e,t){var i;if(e)for(i=0;i<

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\rw-global-nav[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	21488
Entropy (8bit):	5.2271454467709
Encrypted:	false
SSDEEP:	384:8Eo1YY8RTG2/bCHt6gfSFPZyVCpPCwbU2HCCN2EA8GkGW:8Z1YY8RTeSuzy2SGW
MD5:	83E4362857A42FA2D9EDEF68EE34D3FE
SHA1:	202971907D7872EB5FC29E19EF01A07D2A3EAD8E
SHA-256:	6941493F5132AF839AC63BB15506E9C6CC75BDA4EB0087C273D94E370E5674BD
SHA-512:	9D104B02C069275772A030367C54C38312A96525CDD2E2E65C2BBF6D73718850EE6B6AB57263A90EBC6933064239DE4192CDD6FA1AF3A175EB4585F24BC101F3
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/rw-global-nav.css
Preview:	:root{--border-radius-small:0.25rem;--border-radius-medium:0.5rem;--border-radius-pill:624.9375rem;--border-radius-rounded:50%;--border-radius-rw-jumbo:1.75em;--border-radius-rw-standard:1.2em;--border-radius-rw-mini:0.8em;--border-radius-rw-banner:0.5rem;--border-radius-rw-testimonial:1.25rem;--border-width-rw-tertiary:0.125rem;--breakpoints-xsmall:30rem;--breakpoints-small:48rem;--breakpoints-medium:64rem;--breakpoints-large:75rem;--breakpoints-xlarge:90rem;--color-green-01:#108000;--color-green-01-alt:#0d7300;--color-green-02:#2ca01c;--color-green-02-alt:#0e8900;--color-green-03:#53b700;--color-green-04:#7fd000;--color-green-05:#a9e838;--color-green-rw-mint:#94f8ba;--color-green-rw-green:#0fd46c;--color-green-rw-dark:#0a8543;--color-green-rw-darker:#086d37;--color-green-rw-light:#e8f5e3;--color-grey-01:#393a3d;--color-grey-02:#6b6c72;--color-grey-03:#8d9096;--color-grey-04:#babec5;--color-grey-05:#d4d7dc;--color-grey-06:#e3e5e8;--color-grey-07:#eceef1;--color-grey-08:#f4f5f8;--color

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\rw-hero[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	19866
Entropy (8bit):	5.181707466184563
Encrypted:	false
SSDEEP:	384:8Eo1YYgTZhG/uJzsctsI4t1fQqLVrSCNlkpefbgZZZ98ykZI3DZmIZ9PKcFpO0u7:8Z1YY78ee798lOFmw0cHo
MD5:	DE37397DD580C8DF0475ABAD6B26B2C8
SHA1:	3CDAE1D2D27B8986FD0A73FD52292250C57BD3FC
SHA-256:	D71F9A3964B172AC5DF93AA84E5CCA7EB70791357A4C5F742841FD14745E2ADF
SHA-512:	44D7CCD41A7C3244F15CC1EA4783119890CFBB8329A3296ECB4941469CF005D5CFC5AAB4327186C6855EC759BF7ED0D45BCB591ED7D450CDE223BB2E66D52FC4
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/rw-hero.css
Preview:	:root{--border-radius-small:0.25rem;--border-radius-medium:0.5rem;--border-radius-pill:624.9375rem;--border-radius-rounded:50%;--border-radius-rw-jumbo:1.75em;--border-radius-rw-standard:1.2em;--border-radius-rw-mini:0.8em;--border-radius-rw-banner:0.5rem;--border-radius-rw-testimonial:1.25rem;--border-width-rw-tertiary:0.125rem;--breakpoints-xsmall:30rem;--breakpoints-small:48rem;--breakpoints-medium:64rem;--breakpoints-large:75rem;--breakpoints-xlarge:90rem;--color-green-01:#108000;--color-green-01-alt:#0d7300;--color-green-02:#2ca01c;--color-green-02-alt:#0e8900;--color-green-03:#53b700;--color-green-04:#7fd000;--color-green-05:#a9e838;--color-green-rw-mint:#94f8ba;--color-green-rw-green:#0fd46c;--color-green-rw-dark:#0a8543;--color-green-rw-darker:#086d37;--color-green-rw-light:#e8f5e3;--color-grey-01:#393a3d;--color-grey-02:#6b6c72;--color-grey-03:#8d9096;--color-grey-04:#babec5;--color-grey-05:#d4d7dc;--color-grey-06:#e3e5e8;--color-grey-07:#eceef1;--color-grey-08:#f4f5f8;--color

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\rw-plan-inclusion-cards-container[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3129
Entropy (8bit):	4.991980330975408
Encrypted:	false
SSDEEP:	48:vgqAWLjbCNsC5gzkmc+k7uR8E+l6/8bN4whC0DRpmTbwtR:vgqAWLjbCNsC5gzkmK7l6/iNrDRps6
MD5:	C53C05E254EB8FEB9D738CCB1872A801
SHA1:	361C9B0309F260F663701E852D380A629F68C965
SHA-256:	BC65F5D7AA486555973D40482E2E1BFA69AF47C51CB133E65F62EB2C15410136
SHA-512:	A32EB407CB8CCABFC205EBCC4B20AB6D8A54A9949ED09A102E3463BC47BEC4353F033697BFCA142F0E03BF8B2352D3CA41A37550CDB09500713C246178BD8F6A
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/rw-plan-inclusion-cards-container.css
Preview:	:root{--breakpointsSmall:48rem;--breakpointsMedium:64rem;--planHeaderFontSize:3rem}.RwPlanInclusionCardsContainer_rwPlan__fd223ac4{padding-bottom:6.25rem;padding-bottom:calc(var(--spacing-xxlarge) + var(--spacing-small))}@media screen and (min-width:64rem){.RwPlanInclusionCardsContainer_rwPlan__fd223ac4{margin:0 auto}}.RwPlanInclusionCardsContainer_rwPlanInnerContainer__fd223ac4{display:block}@media screen and (min-width:64rem){.RwPlanInclusionCardsContainer_rwPlanInnerContainer__fd223ac4{display:-webkit-box;display:-ms-flexbox;display:flex}}.RwPlanInclusionCardsContainer_innerContainer__fd223ac4{max-width:90rem;max-width:var(--breakpoints-xlarge);margin:0 auto}.RwPlanInclusionCardsContainer_rwPlanHeaderContainer__fd223ac4{text-align:center;padding-top:6.25rem;padding-top:calc(var(--spacing-xxlarge) + var(--spacing-small))}.RwPlanInclusionCardsContainer_rwPlanHeaderContainer__fd223ac4.RwPlanInclusionCardsContainer_smallPadding__fd223ac4{padding-top:1.25rem;padding-top:var(--spacing-sma

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\rw-step-flow-item[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	99
Entropy (8bit):	4.9227736968417215
Encrypted:	false
SSDEEP:	3:feIREAd/RmaPntm7WJKSwA6s+W/Lmn:fXREkZmOnESH+Wzm
MD5:	266D6A04AA7583923F23AF0603B2CEEB
SHA1:	C389F578DBBB60AEB7A72EA261B3FFD6A83F3FAE
SHA-256:	2C1926A1395A6F288E4AD741F3AE48230327AD1796AC01BC5CB64F2E6246EFA8
SHA-512:	ACF6EA10839BDB5B09C63E19BF4C7203C5C6E7D3CFCFA360E943100AA5505DC443CB4E67BBFF2043DB412A9D3CC18835C9DF74D0FC9290535BE9EF8D634B2484
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/rw-step-flow-item.css
Preview:	:root{--breakpointsSmall:48rem;--breakpointsMedium:64rem}.RwStepFlowItem_root__58f38edd{width:100%}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\sbm-config[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1735
Entropy (8bit):	3.849095034554268
Encrypted:	false
SSDEEP:	48:ROfxRL+r5x5dEpTc/67fKvgs27fc5Mxljk6:wRULgA6JsuwMxtk6
MD5:	389A8D54C30D95D06EE1D0392F3A5CB7
SHA1:	63394F8A06DFB2AF90F3F0757F82F3645BBE5BCD
SHA-256:	7EFF515107C696E6FEB186CFFFAF5B7F38A183295CF6CDAFD48256697D47D976
SHA-512:	BD4FAFDD02027E4AD8BE90C6F9052C939A4DAD115E9E83E6B42392A926D5C4457118A97310566A98D2C883BCC487CCC5F5393787FF3A79DA8A2EFFC55EEB393B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.intuit.com/etc/designs/websdk/assets/sbm-config.js
Preview:	window.wsdkconfig={. "cec_version": "1",. "app_name": "SBM",. "generate_ivid_client_side_enabled": true,. "providers": {. "iac": {. "enable": true,. "clickstream_format_version": "1",. "server_endpoint": "http://#ENDPOINT#",. "server_endpoint_secure": "https://#ENDPOINT#". },. "siteCatalyst": {. "enable": false. }. },. "dom_events": [{. "css_selector": "a",. "event": "click",. "standard": true. }],. "custom_events": {. "page_entry": [{. "capture":{. "iac": [{. "properties" : {. "event.event_name": "page_view",. "event.page.page_name": "#STD_PAGENAME#". }. }]. }. }],. "sui_custom_events": [{. "capture":{. "iac": [{. "properties" : {. "even

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\seal[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	14237
Entropy (8bit):	4.32554089964844
Encrypted:	false
SSDEEP:	384:c7gaZ9ZyqWfND5EK+jJugveV+X0yigHbJ0:3WefF5ExjAM0yig72
MD5:	95229FD11EDE9626DFFD1AACDB28F606
SHA1:	D2E250E631F39BA7329CFEAB05395674CE8BD3AE
SHA-256:	4B8271A7147141530B4450016F74D728419E6CEA808360ACDF2C25CE1AB6CF96
SHA-512:	30A22C8DC2EEDDEC44EA8C7B478B7559430C9584B289C0FFF4CFA9229B8A8EF2122EE872973E263D8DDEE5295F67F5EBBEE9126591D27A46AE60FBE07781D7EE
Malicious:	false
Reputation:	low
IE Cache URL:	https://privacy-policy.truste.com/privacy-seal/seal?rid=7fc012b5-d53b-42d8-b980-c4f9091a97e1
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="141.7" height="45" viewBox="0 0 141.7 45"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#929497;}.cls-3{fill:#5fc323;}.cls-4{fill:#231f20;}.cls-5{fill:#004676;}.cls-6{fill:none;stroke:#231f20;stroke-miterlimit:10;stroke-width:0.5px;}</style></defs><title>Seal_CertifiedPrivacy-2</title><path class="cls-1" d="M26.21,44.83A16.41,16.41,0,0,1,10.15,32.1V32l-1.4-.07a9,9,0,0,1-8.55-9V.17H136.05a5.48,5.48,0,0,1,5.47,5.47V39.35a5.49,5.49,0,0,1-5.47,5.48Z" transform="translate(0)"/><path class="cls-2" d="M136.05.35a5.31,5.31,0,0,1,5.3,5.29V39.35a5.32,5.32,0,0,1-5.3,5.3H26.15A16.21,16.21,0,0,1,10.32,32.06l-.06-.25H10l-1.27-.06A8.82,8.82,0,0,1,.35,22.92V.35h135.7m0-.35H0V22.92a9.17,9.17,0,0,0,8.71,9.16l1.27.06A16.67,16.67,0,0,0,26.18,45H136.05a5.65,5.65,0,0,0,5.65-5.65V5.64A5.65,5.65,0,0,0,136.05,0Z" transform="translate(0)"/><path class="cls-3" d="M4.72,4.72V22.89a5.38,5.38,0,0,0,5.12,5.37A16.15,16.15,0,0,1,23.15,12.07,1

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\settings[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	2625
Entropy (8bit):	4.910758165907418
Encrypted:	false
SSDEEP:	48:YyejGR0CyCN/W2cwNWWfVKBByBXBylgLHlnY+4mLO+iHYQmY7YFgb+Za5:uGRTy2WINWdBByBXFn1yHE6kg0y
MD5:	CC4F66C02C76C0CAF30E669701658E9A
SHA1:	17957560E4CDABFEE8D618FA8A46AC5974FC6352
SHA-256:	80EE396477AD474AFF864D1301ADD902D21F61DD7A819A07ADBD01E158E7FAFB
SHA-512:	356A619D3609F4AA450EF346EB5D5ED130DF61EC5215D1B3356ECCC85C5FAE61349FBA6A6DF5A93329E37E9CBB9B3774FEC8AA33CCE9000E03DBF60DB91E7BE0
Malicious:	false
Reputation:	low
IE Cache URL:	https://segment.intuitcdn.net/v1/projects/JkqkEqRmy39m2X5IB4albZRjCQHMiKTA/settings
Preview:	{"integrations":{"Adobe Analytics":{"contextValues":{"url_host_name":"url_host_name","userAgent":"user_agent"},"customDataPrefix":"","disableVisitorId":false,"eVars":{"site_section":"eVar1","global_cookie":"eVar12","internal_campaign":"eVar21","campaign_channel_stacking":"eVar22","priority_code":"eVar23","qbo_conversion_cookie":"eVar26","url":"eVar27","urs_traffic_source":"eVar28","locale":"eVar60","icom_user_action":"eVar65","campaign":"eVar66","experiment_ids":"eVar71","ivid":"eVar54","application_id":"eVar57","candidate_id":"eVar59","job_category":"eVar6","job_title":"eVar7","job_location":"eVar8","lead_category":"eVar9","icom_job_search":"eVar10","org":"eVar64"},"enableTrackPageName":true,"events":[{"segmentEvent":"content:engaged","adobeEvents":["event1"]},{"segmentEvent":"page:loaded","adobeEvents":["event2"]}],"eventsV2":{},"hVars":{},"heartbeatTrackingServerUrl":"","lVars":{"aam_segment_ids":"list1","experiment_ids":"list2"},"marketingCloudOrgId":"969430F0543F253D0A4C98C6@Adobe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\stylesheet.atoms_molecules_globals[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	479452
Entropy (8bit):	5.36755007853189
Encrypted:	false
SSDEEP:	12288:pub9nT9YE1VmpffL5QrFf4TD808MHNfNhlaVZZmMKriPLm0CZ5187tYmXbr7hAh+:4nT9YE1Vmpff7rSzZ/fN
MD5:	FB07327CB68DDF356950195775417BEE
SHA1:	4DCC368575FCD179BF710CED570FCB7D122788D6
SHA-256:	C4DD294215EDF5E576D743B254539DFBA00DF8A9B05AF1672629690049AA2B4F
SHA-512:	1FD0E824F4407C9052130C49A0FF18270F01ED357D90925443B11CD1E68F30777914F9385D0431F6EAA25846771D31E445FD8F8A6E83B3BF658D1AAAD9749366
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/stylesheet.atoms_molecules_globals.css
Preview:	:root{--breakpointsSmall:48rem;--breakpointsMedium:64rem}.@-webkit-keyframes RwSpinner_rotation__40787df5{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}8%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(470deg);transform:rotate(470deg)}}@keyframes RwSpinner_rotation__40787df5{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}8%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(470deg);transform:rotate(470deg)}}@-webkit-keyframes RwSpinner_pulseSize__40787df5{8%{-webkit-transform:translateY(0) scale(1);transform:translateY(0) scale(1)}50%{-webkit-transform:translateY(-1.875rem) scale(.6);transform:translateY(-1.875rem) scale(.6);-webkit-transform:translateY(calc(var(--spacing-xlarge)/-2)) scale(.6);transform:translateY(calc(var(--spacing-xlarge)/-2)) scale(.6)}56%{-webkit-transform:translateY(-1.875rem) scale(.6);transform:translateY(-1.875rem) scale(.6);-webkit-transform:translateY(calc(var(--spacing-xl

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\tr[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	2.8317663774021287
Encrypted:	false
SSDEEP:	3:CU9yltxlHhn:mn
MD5:	B798F4CE7359FD815DF4BDF76503B295
SHA1:	F8CC6ADDF1707AD236AD9970B0A48F9733D07DA5
SHA-256:	10D8D42D73A02DDB877101E72FBFA15A0EC820224D97CEDEE4CF92D571BE5CAA
SHA-512:	921944DC10FBFB6224D69F0B3AC050F4790310FD1BCAC3B87C96512AD5ED9A268824F3F5180563D372642071B4704C979D209BAF40BC0B1C9A714769ABA7DFC7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.facebook.com/tr/?id=1827482914219447&ev=PageView&dl=https%3A%2F%2Fwww.intuit.com%2Fprivacy%2Fstatement%2F&rl=&if=false&ts=1625899153445&sw=1280&sh=1024&v=2.9.43&r=stable&a=tmensighten&ec=0&o=13&fbp=fb.1.1625899127849.417818535&it=1625899153349&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET
Preview:	GIF89a.............!.......,...........D..;.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\tr[2].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	2.8317663774021287
Encrypted:	false
SSDEEP:	3:CU9yltxlHhn:mn
MD5:	B798F4CE7359FD815DF4BDF76503B295
SHA1:	F8CC6ADDF1707AD236AD9970B0A48F9733D07DA5
SHA-256:	10D8D42D73A02DDB877101E72FBFA15A0EC820224D97CEDEE4CF92D571BE5CAA
SHA-512:	921944DC10FBFB6224D69F0B3AC050F4790310FD1BCAC3B87C96512AD5ED9A268824F3F5180563D372642071B4704C979D209BAF40BC0B1C9A714769ABA7DFC7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.facebook.com/tr/?id=850485508311844&ev=PageView&dl=https%3A%2F%2Fquickbooks.intuit.com%2Fpricing%2F&rl=&if=false&ts=1625899166666&cd[region]=us&sw=1280&sh=1024&v=2.9.43&r=stable&a=tmtealium&ec=0&o=14&fbp=fb.1.1625899127849.417818535&it=1625899165982&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET
Preview:	GIF89a.............!.......,...........D..;.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\utag.54[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2539
Entropy (8bit):	5.2185465464113445
Encrypted:	false
SSDEEP:	48:uTaz2WNX6IMj5wB/td+QRHSdQJUGctiYgLbHJDDRtRuNb5zM:uT74XejuB/b/ydQJUGcwYgLrJDDRtRug
MD5:	8CDA3C6F0287B945D20126A36888ECD1
SHA1:	B8C4BC31657B52A158B42CCB84CF903F9C942EE0
SHA-256:	276852DA2373334805251EB51905A50FA9B56951DE1670AB8D93EFDD19D8E146
SHA-512:	086584A6AFE46112E90C13CBC59CC7E5DD3AE9CB836EF47DC99F3D1A1C7056582C73E17F44B7A77DD3B8B3DBB35740DA7CD25CA4F6B1552F60D98F0644BBC68A
Malicious:	false
Reputation:	low
IE Cache URL:	https://tags.tiqcdn.com/utag/intuit/sbseg-us/prod/utag.54.js?utv=ut4.46.202107012052
Preview:	//tealium universal tag - utag.54 ut4.0.202105122018, Copyright 2021 Tealium.com Inc. All Rights Reserved..window._da_=window._da_\|\|[];try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag===undefined){utag={};}if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function(o){var a,b,c,l;a=document;if(o.type==="iframe"){b=a.createElement("iframe");b.setAttribute("height","1");b.setAttribute("width","1");b.setAttribute("style","display:none");b.setAttribute("src",o.src);}else if(o.type==="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";b.src=o.src;}if(o.id){b.id=o.id;}if(typeof o.cb==="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechange=function(){if(this.readyState==="complete"\|\|this.readyState==="loaded"){this.onreadystatechange=null;o.cb();}};}}l=o.loc\|\|"h

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\www-widgetapi[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	127925
Entropy (8bit):	5.5340480315880685
Encrypted:	false
SSDEEP:	1536:BFqoAUCaJhMKG76SyO/TTuJmOtjAh7MNZgLUlRZbbi3me0XOmbwJwRxZZhK3Z9KE:ZJeTKtcIsHmkHs1Rs
MD5:	97640B9FF09841ADE0FD410064001549
SHA1:	1A9A267EF19194C8EED8DE7B5B2C927689DAFAE9
SHA-256:	A2699CC909BDEF9AF6474579102A1114F4F81AD3B7319B0E89F09BE85A57664F
SHA-512:	F22F66B662E8643796BF8C151F121A0BA83B8DDC67FB1658A5224DD7C72307B3BBEE49024A331C75800C1A7C667FDA30418ED1E289EDC34A25C8A34B6E8F5174
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube.com/s/player/51ff6aac/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function r(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e+

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\xdr[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	13550
Entropy (8bit):	5.307558470703771
Encrypted:	false
SSDEEP:	384:xbEIkE3d0DvdsIv4LNwlAb1IkE3d0DvdsIv4LNwwz:JEIkNJsIv4p51IkNJsIv4pj
MD5:	1C335D81559C0E35D522C4D40E9181B5
SHA1:	C6060FD8996D75D232A95C6C1387034996A6C2E1
SHA-256:	C4F517921BF0B1DCD1801ED31B6CF3A7A4285E2DC0F6B7CA7E97F696C724C2F7
SHA-512:	8A419DD404CDE3C5CBECF23D6FFB91471C116343ADD12F2F43F75F5315469193401F2CCC4FBAC50E183808FF28FBCCACABD8CACA5BCFEA0E81A6DFD7E29EB077
Malicious:	false
Reputation:	low
Preview:	...<html>.<head>..<meta name="ius-session" content="C4CF3BE1632E47368FE82D90015B9836">..<meta name="robots" content="noindex">..<script type="text/javascript" src="scripts/ius.xdr.min.js?v=1.70.0.356"></script>........<script type="text/javascript">...// Polyfill Date.now for IE..Date.now = (Date.now \|\| function () {...return new Date().getTime();..});.. var intuitFlowId = '';. var xdrReady = null;. var receiveMessage = null;. var metaSessionId = $ ? $("meta[name='ius-session']").attr('content') : '';. var logger = null;. try {. logger = parent && parent.intuit && parent.intuit.ius && parent.intuit.ius.logger ? parent.intuit.ius.logger : null; . } catch (err) {}.....var getSessionId = function() {...var _sessionId = '';...try {....if($ && $.cookie) {....._sessionId = $.cookie('ius_session');....}........if(!_sessionId) {....._sessionId = metaSessionId \|\| "C4CF3BE1632E47368FE82D90015B9836";....}....} catch(err) {.......}.........return _sessionId;..}....var re

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\zOqHF3DpZS1zsGL2[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	84166
Entropy (8bit):	5.4374769989301095
Encrypted:	false
SSDEEP:	768:yGGpKu5vlutIpHEEalIHLv78aYcZGOV22V:pGx5WEalk7FYXi22V
MD5:	C45DE0DC1965BB28BB78AE62C1948010
SHA1:	C9B090CD79C293A3CC9D4BF76FB67094D7ADA9E3
SHA-256:	A5E8C913EE838FE73E04897484237BAD10C4ED16FB82548D417D3C0414E32808
SHA-512:	365535F9C03BC63F311AE3B8EAB1AC669222A78F4FE99B31351D2E03457C45016611A12CE54E95D820A4FFAD8A5DA0EDBC0539DF1E63F5227ED1BDFEC29C2376
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_0h=td_0h\|\|{};td_0h.td_1u=function(td_K,td_T){try{var td_H=[""];var td_V=0;for(var td_p=0;td_p<td_T.length;++td_p){td_H.push(String.fromCharCode(td_K.charCodeAt(td_V)^td_T.charCodeAt(td_p)));td_V++;.if(td_V>=td_K.length){td_V=0;}}return td_H.join("");}catch(td_S){return null;}};td_0h.td_3d=function(td_X){if(!String\|\|!String.fromCharCode\|\|!parseInt){return null;}try{this.td_c=td_X;this.td_d="";this.td_f=function(td_p,td_g){if(0===this.td_d.length){var td_a=this.td_c.substr(0,32);.var td_t="";for(var td_i=32;td_i<td_X.length;td_i+=2){td_t+=String.fromCharCode(parseInt(td_X.substr(td_i,2),16));}this.td_d=td_0h.td_1u(td_a,td_t);}if(this.td_d.substr){return this.td_d.substr(td_p,td_g);.}};}catch(td_b){}return null;};td_0h.td_1v=function(td_C){if(td_C===null\|\|td_C.length===null\|\|!String\|\|!String.fromCharCode){return null;}var td_m=null;try{var td_q="";var td_Q=[];var td_s=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCha

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\zhn7177ugjhl0edv[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	82874
Entropy (8bit):	5.276408016680888
Encrypted:	false
SSDEEP:	384:8G6/R1E0CzXAlCb01WuMB55TAZf430qIPvlCM6q1WSM/hgrAghA3JZgyW2SGH9bF:j65CsPvgMh2mGu2a7a
MD5:	41A40A2F7D976070FA00C2E8F4900798
SHA1:	26FA50493D2F184296491A1CE3F7BA80BE488BD6
SHA-256:	1408CCDB6823E27132396A7D9AB26CAD3C0379FB952510BF1BAE18AB12641A22
SHA-512:	BC35DC07BE5979C83183CFC7EB5BA4F99C332482CCA8136EE5F6D462D9122508D649665E692BD3BD548166FEDB14DAA1988771F04FB70B2CD091FFC87E747514
Malicious:	false
Reputation:	low
Preview:	var td_4u=td_4u\|\|{};td_4u.td_0i=function(td_S,td_k){try{var td_y=[""];var td_c=0;for(var td_A=0;td_A<td_k.length;++td_A){td_y.push(String.fromCharCode(td_S.charCodeAt(td_c)^td_k.charCodeAt(td_A)));td_c++;.if(td_c>=td_S.length){td_c=0;}}return td_y.join("");}catch(td_T){return null;}};td_4u.td_5A=function(td_e){if(!String\|\|!String.fromCharCode\|\|!parseInt){return null;}try{this.td_c=td_e;this.td_d="";this.td_f=function(td_G,td_L){if(0===this.td_d.length){var td_X=this.td_c.substr(0,32);.var td_t="";for(var td_b=32;td_b<td_e.length;td_b+=2){td_t+=String.fromCharCode(parseInt(td_e.substr(td_b,2),16));}this.td_d=td_4u.td_0i(td_X,td_t);}if(this.td_d.substr){return this.td_d.substr(td_G,td_L);.}};}catch(td_M){}return null;};td_4u.td_4v=function(td_M){if(td_M===null\|\|td_M.length===null\|\|!String\|\|!String.fromCharCode){return null;}var td_g=null;try{var td_j="";var td_w=[];var td_k=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);.var td_l=0;for(var td_L=0;td_L<td_M.length

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\02f8664b95445de6f27ba682f3c5f9ab[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4026
Entropy (8bit):	5.165425025048119
Encrypted:	false
SSDEEP:	96:+O2aTjjawLtBx0tdmK9YYlfBWX5oM4rLEa:DTj+wVeY0S4r7
MD5:	02F8664B95445DE6F27BA682F3C5F9AB
SHA1:	EFF0C42E5C642D81EF76995CE6B6C059CB38DCB6
SHA-256:	343B575C37BF08A1FDC972D0D86BCFAFF9C405DE625516C8656B60D37DCBA927
SHA-512:	2F58F0E0D46B9DE2F47CA8EC41B15E4B78A02EF9C7172B7C673CF85A3FD8D8870F00AF04C82768893A86B3F787B64464DF5613C801B6D85F1FC16A614F25CCF6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/02f8664b95445de6f27ba682f3c5f9ab.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="108" y1="165" x2="180" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/>. <stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/>. <stop offset="0.624" stop-color="#9aa0a6" stop-opacity="0.4"/>. <stop offset="0.786" stop-color="#9aa0a6" stop-opacity="0.626"/>. <stop offset="0.946" stop-color="#9aa0a6" stop-opacity="0.898"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="242" y1="149" x2="284" y2="149" xlink:href="#linear-gradient"/>. <linearGradient id="linear-gradient-3" x1="34" y1="149" x2="76" y2="149" xlink:href=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\164.a1fb35d1def16c1ddb9c[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	20796
Entropy (8bit):	5.372960020705625
Encrypted:	false
SSDEEP:	384:wJlP/ZHFuVI/tOLxBI9GRT2j0dTnHpmG2gXR2lai9PKaTi76b3AxJVcmgQV:KuS/tOLxBvT2j0dTB2gBWaMPKZu3AxJ5
MD5:	CA0A97A69173351F85F867FBEDC1E15F
SHA1:	2E141741C94549EA2A479BEFB7F6B0634A7A8873
SHA-256:	F4F850AC1304811292416734765024F5881E8742147AA8F06A4386177CDFBF7B
SHA-512:	10BC2FE061F6A02ED9D61F401AC20D5AED11A9F82B767E8165BECD95D192AB0A1D0CB4C5EAF42123BF3718DE0013906AFCD7BA760EBDD5BAAFDD69B85FB45D11
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/164.a1fb35d1def16c1ddb9c.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[164],{TELa:function(e,t,a){"use strict";a.r(t);var i=a("q1tI"),n=a.n(i);function r(){return(r=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var a=arguments[t];for(var i in a)Object.prototype.hasOwnProperty.call(a,i)&&(e[i]=a[i])}return e}).apply(this,arguments)}var d,o,l=(d=o={exports:{}},void function(){var e={}.hasOwnProperty;function t(){for(var a=[],i=0;i<arguments.length;i++){var n=arguments[i];if(n){var r=typeof n;if("string"===r\|\|"number"===r)a.push(this&&this[n]\|\|n);else if(Array.isArray(n))a.push(t.apply(this,n));else if("object"===r)for(var d in n)e.call(n,d)&&n[d]&&a.push(this&&this[d]\|\|d)}}return a.join(" ")}d.exports?(t.default=t,d.exports=t):window.classNames=t}(),o.exports),s={"item-columns":"TextGridItem_itemColumns__ac693c19",column:"TextGridItem_column__ac693c19","left-aligned":"TextGridItem_leftAligned__ac693c19","center-aligned":"TextGridItem_centerAligned__ac693c19","grid-header-image":"T

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\18.1dd6c10664528e970005[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	49866
Entropy (8bit):	5.374174623347824
Encrypted:	false
SSDEEP:	768:uT2j0dmEWSw2uTmIOLzbGT2j0dQQEQ+wdcPsIRU3T442uRjQuTmNOLxbMxT2j0dY:xIo2ouIV+wN2tqfIt1kIAR
MD5:	2477AFF72ACE8181A0653FB7523933F2
SHA1:	04DB2CEA52484F92BA4CEFF777784043706A6167
SHA-256:	75C7DCBE95452EB9538A279830536E469B8A7E7A7BAC6956081878AE9D0A1985
SHA-512:	54F0DCEB30159BF7148341CB9EF53134EE42E99F679D7F5EFDD07CF5874013E62F8D42CA15F27AC5CDE83F8057E34914474D4273B1214D55A28B39A8176C621A
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/18.1dd6c10664528e970005.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[18],{DN2R:function(e,t,a){"use strict";a.r(t),a.d(t,"CONSTANTS",(function(){return xe}));var i=a("q1tI"),n=a.n(i);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function d(){return(d=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var a=arguments[t];for(var i in a)Object.prototype.hasOwnProperty.call(a,i)&&(e[i]=a[i])}return e}).apply(this,arguments)}function o(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,i)}return a}function l(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?o(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):o(Object(a)).forEach((function(t)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\1827482914219447[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	266843
Entropy (8bit):	5.473332836933455
Encrypted:	false
SSDEEP:	6144:Rk1HgCSntDV/HaK8V/Ha8NEPjQHguH3HpQrwz8GWN:kNE73
MD5:	99FA8196B70FE9008310BFE9EFCED2D2
SHA1:	E1A1A3E8F1ACFED612D09AD11B5A2F3DEB2CAC7C
SHA-256:	FB067B1DBC44ACDB9EACABB0C4C4171FB866F4BEB2D67F49E8C0C9AADFB3D122
SHA-512:	46B3FC41C6FB5CC610FD21FE2D1B589421FF3380DC5D7CDE55498D3900A970EF8A58CBB82A22F0868802403A12C3882B7B4DCEC266D7700610A2FE59A86FA273
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/signals/config/1827482914219447?v=2.9.43&r=stable
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\2951277d4c35389d7d304ed78d4fb6f6[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3437
Entropy (8bit):	5.159691776325374
Encrypted:	false
SSDEEP:	48:+GzHx4GLZ/W1wHxJCXvGUQoHxno+e//Ij0jiO0ijy1uHldlzvgYx:+G2UCv0Ij0jH0P+ldlzvgYx
MD5:	2951277D4C35389D7D304ED78D4FB6F6
SHA1:	936A9062B6E78E198BA1CD7ACDB42DEA29920890
SHA-256:	F3E55293686B1A4BCB8095896F8ADA506D3CE3E8BAD1DE89EAB56AFBEF3AD793
SHA-512:	8A9B5F0DAE9DFBD5C1FC7FCBEE51FD9A40302856C2F305FF0343DB2BA46D9C05B5F25A6F90AAE4AAFCEB6ACEFF7813157617773E2147954928B1E9227B581415
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/2951277d4c35389d7d304ed78d4fb6f6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <linearGradient id="linear-gradient" x1="24" y1="77" x2="48" y2="77" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.116" stop-color="#9aa0a6" stop-opacity="0.054"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.201"/>. <stop offset="0.546" stop-color="#9aa0a6" stop-opacity="0.44"/>. <stop offset="0.823" stop-color="#9aa0a6" stop-opacity="0.768"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="48" y1="80" x2="48" y2="16" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#1967d2"/>. <stop offset="0.043" stop-color="#1967d2" stop-opacity="0.942"/>. <stop offset="0.305" stop-color="#1967d2" stop-opacity="0.611"/>. <stop offset="0.54" stop-color="#1967d2" sto

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\2b4481b875a76cfe8116c6f505ed25a4[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	228034
Entropy (8bit):	5.434937028713125
Encrypted:	false
SSDEEP:	3072:0jVlMB3AFeypO00vObjcYDE+L/WNNqamfN:0jV0wFe9vO0YaN7ml
MD5:	8827F5EEE5A2F023A7CE1D30467757BA
SHA1:	B15E47B349AF77872A5644576CF3CA2F38DE17EB
SHA-256:	02985C59381E8D4EE6BC9EBDBB1D1C43E172CF4159824665A61CB49C36C029A4
SHA-512:	FA2ECF71889E3F6D458B46271D27277AB94B18F25F0CACC0D8EFFCFA17319C27347B1E9DCE558E56B39AF3170F4231A3638A87B7988380D9FC5AD90020CA0BCC
Malicious:	false
Reputation:	low
IE Cache URL:	https://nexus.ensighten.com/intuit/us_sbg_prod/code/2b4481b875a76cfe8116c6f505ed25a4.js?conditionId0=422800
Preview:	/.. Adobe Visitor API for JavaScript version: 5.0.1. Copyright 2020 Adobe, Inc. All Rights Reserved. More info available at https://marketing.adobe.com/resources/help/en_US/mcvid/./.Bootstrapper.bindDependencyDOMLoaded(function(){Bootstrapper.ensEvent.add(["ICom - Button Click to QB"],function(){var ensEventContext=this;if(ensEventContext==window)ensEventContext=undefined;var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;var data={};if("")data["value"]="";if("")data["currency"]="";if("")data["content_name"]="";if("")data["content_category"]="";if("")data["content_ids"]=""?"".split(","):"";if("")data["content_type"]="";if("")data["num_items"]=."";if("")data["search_string"]="";if("")data["status"]="";var eventTrackingPixelId="1827482914219447";var eventType="CustomEvent"==="CustomEvent"?"exit_quickbooks":"CustomEvent";var trackString="CustomEvent"==="CustomEvent"?eventTrackingPixelId?"trackSingleCustom":"trackCustom":eventTrackingPixelId?"track

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\32b3c7801c1145fe36007c28efe556333bf3a62a.bc8a42ac2534d7b087d0[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	8545
Entropy (8bit):	5.317476651731221
Encrypted:	false
SSDEEP:	192:w0QluZynV44xjssioHiQgQhvGHJ9nOUqAvEQS:w0ZZyV44xjssQuG1qbQS
MD5:	8872110C27E555E9C905B1CC6D457D7B
SHA1:	425DBD9C3749A3DF151F80EB828BCE1A6ADF961B
SHA-256:	E59A94CEA0BD33420266D64A541F424CB3FF98550F03C87F15D2A7F401D5F28C
SHA-512:	1512CBC4BCD75337170F76161A4F74CF53F509E42C393728BAB7B45BD134F189CD0B4C5367322264D70469900072BC5C066D08639FFBC9CA3F1B9A551EF0E53B
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/32b3c7801c1145fe36007c28efe556333bf3a62a.bc8a42ac2534d7b087d0.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[4],{"8oxB":function(t,e){var n,r,o=t.exports={};function i(){throw new Error("setTimeout has not been defined")}function u(){throw new Error("clearTimeout has not been defined")}function a(t){if(n===setTimeout)return setTimeout(t,0);if((n===i\|\|!n)&&setTimeout)return n=setTimeout,setTimeout(t,0);try{return n(t,0)}catch(e){try{return n.call(null,t,0)}catch(e){return n.call(this,t,0)}}}!function(){try{n="function"===typeof setTimeout?setTimeout:i}catch(t){n=i}try{r="function"===typeof clearTimeout?clearTimeout:u}catch(t){r=u}}();var c,s=[],f=!1,l=-1;function g(){f&&c&&(f=!1,c.length?s=c.concat(s):l=-1,s.length&&h())}function h(){if(!f){var t=a(g);f=!0;for(var e=s.length;e;){for(c=s,s=[];++l<e;)c&&c[l].run();l=-1,e=s.length}c=null,f=!1,function(t){if(r===clearTimeout)return clearTimeout(t);if((r===u\|\|!r)&&clearTimeout)return r=clearTimeout,clearTimeout(t);try{r(t)}catch(e){try{return r.call(null,t)}catch(e){return r.call(this,t)}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\3394102be0315326fd760e503b31c7b6[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1997
Entropy (8bit):	4.972761923159453
Encrypted:	false
SSDEEP:	48:+G0uMHxFi+eeunuGuQmDjuf3XU8MtUPFWl:+3vHxAr8Cn4tgWl
MD5:	3394102BE0315326FD760E503B31C7B6
SHA1:	8D80ABE58002CB8CF2A9C05EC5CE61F6A528AA6C
SHA-256:	FD266CACD5FD6FACBA81DEB7274AD226D7916B8883F23480A86F6F9C015913C8
SHA-512:	769DDC47AAA142961A8E00CDE3566DE62A6A6CA28D6EF568D5ECF67A0A5D8EF8806CF2428B653D58B9313E86161B6099D73362E6CEA6097D0B48DF4846253FE8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/3394102be0315326fd760e503b31c7b6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <clipPath id="clip-path">. <circle cx="48" cy="48" r="41" fill="none"/>. </clipPath>. <linearGradient id="linear-gradient" x1="51" y1="78" x2="93" y2="78" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6"/>. <stop offset="1" stop-color="#9aa0a6" stop-opacity="0"/>. </linearGradient>. </defs>. <title>site_sec_C_01</title>. <g style="isolation: isolate">. <g id="Content">. <g>. <g>. <g>. <circle cx="48" cy="48" r="41" fill="#e8eaed"/>. <circle cx="48" cy="48" r="41" fill="none"/>. <circle cx="48" cy="48" r="41" fill="none"/>. <g clip-path="url(#clip-path)">. <path d="M89.981,22.441,67.05,68.843c-1.63,3.328-5.58,3.008-7.182-.581L51.8,50.168c-1.613-3.616-5.6-3.907-7.208-.526l-6.8,14.3C36.141,67.408,32.029,67,30.5,63.224L25.63

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\47.34c44cfffcdccf8a763f[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	13433
Entropy (8bit):	5.410092900148474
Encrypted:	false
SSDEEP:	384:E/wC0Cn40GNPapsERT2j0dFHHpyiRJSZSv:EIC0C40oPahT2j0dFUiTSZSv
MD5:	106AD44C3A01BF0EDC72D02E9396E4D7
SHA1:	D16B92E059242C238E18AB783FA2C47ADBAA3427
SHA-256:	D9733C1F2B6B5753A27F1E54DE51D3EE3057FD292D1226E9851067C4CB76854C
SHA-512:	D554E01DBDABE5D0ECE277CB0283A812E04D34A6D1A3744E637870AEC2DF003FEC45987C749868D0C85734B3FDE38EE87335DEF992C5834C6A09BE3ADE4C0247
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/47.34c44cfffcdccf8a763f.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[47],{GRaq:function(e,t,n){"use strict";n.r(t),n.d(t,"CONSTANTS",(function(){return P}));var i=n("q1tI"),a=n.n(i);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(){return(o=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(e[i]=n[i])}return e}).apply(this,arguments)}function d(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,i)}return n}function l(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?d(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):d(Object(n)).forEach((function(t){

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\4UaGrENHsxJlGDuGo1OIlL3Owpg[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 26228, version 1.1
Category:	downloaded
Size (bytes):	26228
Entropy (8bit):	7.98323449413518
Encrypted:	false
SSDEEP:	768:DBOEuz6T0146JY/J6unqhOYK0GJenzOoyo6:DBHuea4j/vnqo304enzUo6
MD5:	6DD4AD69D53830BDF5232A13482BD50D
SHA1:	6FFF1079D7E5D02A2259CB5D7833E790239E01CF
SHA-256:	5CE48D9E9D748AD4686094D3CC33F5AE1E272A5B618F5C6D146C4D12EF02E4A6
SHA-512:	FC91E8C4EAE384D38667E330C5A5E4BF82EBAC9A23AB88439D7C22CCDD125DE7F1371DD953F18DEE60EF68B680DF49A32F684157D90F20E1DAC3BFFC9DF84118
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/googlesans/v27/4UaGrENHsxJlGDuGo1OIlL3Owpg.woff
Preview:	wOFF......ft.......`........................GDEF.......\.......RGPOS.......#..+..P.LGSUB................OS/2.......U...`h...cmap...........~n..cvt .......y........fpgm...$.......uo..gasp................glyf......=...m..N..head..Z....6...6..'.hhea..[.... ...$.0.6hmtx..[<.........})9loca..]....z.....&..maxp..`p... ... .>..name..`........r.i6Ppost..a<........O...prep..e....p..... ..x.U....Q.F..=#.`ZD.@@<..... "...Zp....+.c.f...).>Z.bm.Om..?...\\.zi.f.^b...[y/.........x..Z.......%......033333333...e....r......U..u.r.....sV..Z..^..c..>v..p7.x...w.i...Y.....X...N<.k...0...kc];.u......4.j...@....y."......,....#.;..........9...1....q..b..c...{....i2.H..g..:.....du.FX.].w3...{y...G....E.....~..RdX.\|.\..U.^.x!....e.\|.:.RX.Wxg....&.5....2n.Q...5.{..2....Ia.Vb%....:.Yn..QI.Z...x..Z.6..?........G..W.^#.e..#\|l2p.S+.?'.<E..<....M.H..".>..d....>n%.(..."....<"........U/z.%..=...Le.cL3.4..4..znxgX!JD%.....s....&.a..z1._....O+..g.dm.?.9Vj.1...B...8..S........ ._.E.... .[#_..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\4UabrENHsxJlGDuGo1OIlLU94YtzCwA[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 26464, version 1.1
Category:	downloaded
Size (bytes):	26464
Entropy (8bit):	7.981932066790926
Encrypted:	false
SSDEEP:	768:OIYb4Auz6mM1gBEL1WuL1BU91c6HJ8Y4mAS:OI84AueNmwHpBU91qY4m7
MD5:	08F80DE0ACF68D82AABAB974A47D9E5F
SHA1:	E6F1C0F5395A9C297AA162468961C1FAF0EC1ED9
SHA-256:	4070911A1BB9CC52C4E4CD5E85CA186DCDE89308A0517A8FAA4715C2E0A9D45E
SHA-512:	720DE47FDDA648AF7CE5F3F574EFA3322191C4D0001E31181739D65FFE0CCECED56635AF58E5E828072A17EEE1ED1E318AF467B8ED7F4185EE0F5155501CD8D0
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/googlesans/v27/4UabrENHsxJlGDuGo1OIlLU94YtzCwA.woff
Preview:	wOFF......g`.......d........................GDEF.......q........GPOS.......$..+..K.MGSUB................OS/2.......U...`i`..cmap...........~n..cvt ................fpgm...T.......uo..gasp................glyf...(..>W..mNU!.)head..[....6...6..'.hhea..[.... ...$...4hmtx..[..........1'jloca..^....~......t.maxp..a.... ... ....name..a4.......V..4.post..a.........O...prep..e........^....x.D...Q...3..I.=D.@@....@....."...}......`.%.....x.........umW...g.WwO.....J..^?.Jci^N{.Nr..Jw@.n(.....t4....i...x..Z...6.=r...............q`.>....m.....fy.g..y4N...tAg.."KWWW.j.....8...n.3..:..1....9.+.}...b]....0..6V..).G.r........N...,R(.o.t.LU....;.{.l.y....i..w.{F..;p'.....,.........:3...\|..,.`pGPAV.?....q!......=.(cn.'<......sK_...]..U.W.......b....E\|.o..Jp.n.uX....J.q'SFy...l..Cd..XZ..RP...#.w...C)..s../..D..1.G...Sx...e.....x.o.mJ...~./L..r...Y..sD./.......>$R`..&.v......D..w.). .f.Y."<..V/.zQ{.8./...X................B..Jp#%.7.e>+L.Q.1..hd..k._...f..u....+....Q...N..\|....$Lv.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\4UabrENHsxJlGDuGo1OIlLU94YtzCwA[2].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 26412, version 1.1
Category:	downloaded
Size (bytes):	26412
Entropy (8bit):	7.982191465892414
Encrypted:	false
SSDEEP:	768:BXFxTA19K8CdHMT6KHQO8LWhHCWN1ekhzLS:9f29ZYMTwO8qh1nm
MD5:	142CAD8531B3C073B7A3CA9C5D6A1422
SHA1:	A33B906ECF28D62EFE4941521FDA567C2B417E4E
SHA-256:	F8F2046A2847F22383616CF8A53620E6CECDD29CF2B6044A72688C11370B2FF8
SHA-512:	ED9C3EEBE1807447529B7E45B4ACE3F0890C45695BA04CCCB8A83C3063C033B4B52FA62B0621C06EA781BBEA20BC004E83D82C42F04BB68FD6314945339DF24A
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwA.woff
Preview:	wOFF......g,................................GDEF.......q........GPOS.......%..+...RGSUB.......y......m.OS/2.......U...`i`..cmap...........~n...cvt ................fpgm...@.......uo..gasp................glyf......>F..m>Q..head..[\...6...6..'.hhea..[.... ...$...3hmtx..[..........<'3loca..^l...{...._.{.maxp..`.... ... ....name..a........V..4.post..a..........i]\prep..et.......^....x.D...Q...3..IX=D.@@....@....."...}......`.%.....x.........umW...g.WwO.....J..^?.Jci^N{.Nr..Jw@.n(.....t4....g...x.....6.E..8..........affff.0.B..&.L...B.Nzy..n.T.t~w&..%[.dYzzz.Oe" ..lE.........m..7[s}...[l..)..)...(H.A.@q.57..S.@.._..]..j.-^N.R...'...]v.0..2n.6...~....X..xN.DN.T..b..Q5.E.).,QI.....M....6.P."..\|...tI5.......t..r.(...{M..T}..@.kbNP.I.9-...=E.U'.{.....p\|.t..qJE.9...'......z...L./.....rnXQ.6.\|.....n.V.....K.?.G...<..<..Q.....C..K(s.PR.x\(..P@.P..z.DL.1.$../.8A.8Q.r.Pr[e.Rt+~.}9.)E.'.U..z.G..G..OH/H...L.../..{S...EP.%........o.................uN...'.}%..9.F

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\4UabrENHsxJlGDuGo1OIlLV154tzCwA[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 26164, version 1.1
Category:	downloaded
Size (bytes):	26164
Entropy (8bit):	7.983292364847896
Encrypted:	false
SSDEEP:	768:L9QwjnXN11zY7+dePzz5Othh7STtySTygbOg9zp:L9pjz1kCePzQthJSYgbRp
MD5:	CCDA7B53E281A638F36ED62514815268
SHA1:	CF6D39BAB2A012D008EC9EDF95F4F4BDACF93770
SHA-256:	673F112749C21E5BE0D1338E1709A1D981053E239E98CE09D0BB849BB34FCD98
SHA-512:	20645A09B2FF157E50C71D862AA4FE6729FFD8BE18FB3D390B3714DEEC4F4FFF49FAC16EC509F8D620E476DC1942C67C95A95ABF14A06585F5B504FB4BE89F58
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLV154tzCwA.woff
Preview:	wOFF......f4.......\|........................GDEF.......q.......~GPOS.......#..+...UGSUB.......y......m.OS/2.......U...`j(..cmap...........~n...cvt ............(...fpgm...`.......uo..gasp...(............glyf...4..=...k....head..Z<...6...6.x'.hhea..Zt... ...$....hmtx..Z...........%.loca..] ...y......%.maxp.._.... ... ....name.._........Z.L3.post..`d.........i]\prep..d$........t...x.E......E.}&$a......A.. ....,....`..}....q....+o...9 ....B.J..WS..w2.{...o.D~!X.D:..Muq...[1 ..[.I...]..#-..0...x....+..E.pg....bfffffffff.0.+ef.5..N.0..K..r....Y...@..V.t.~.......[q....h+..y...1s.#.>.%....CX.,@.F..t.H..t..{.q.c.>..\?..J.".J.+.M.L...:l%..I\....<......._....M..-....7.BP.J.d2.T..,G...E?.Z.p..].w..=z....9.p{..<._O+..r._...]U.]..?.r.JoQi..k..P........=.X.:U.....\.....h.....r....L....J..Sn..<9..V..=.x=:x..x..yCr.#e.._..o.>...s.<!M.......!..o....!....j.#$.:A..Bn.2.$..,..E...{...G_.....L............jw..P.]!..wE.R..a..rK4...k.._.W24^...cuh..fTIH.Z.TJ....&.x

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\64.4f74b8ce3171ba9c8ad3[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	34706
Entropy (8bit):	5.459297340115397
Encrypted:	false
SSDEEP:	768:nCDlX1ucoqf31w0VgC4GCKlt7P4aro5crfjDluzP9OLsBMvWoFFMyx4rp9fBZ4:KllOgkGJXl4O4rpN4
MD5:	EE5C7B74908B82F7BE7A05549569E590
SHA1:	2227B54B0B49B53ABD4F40439503CF19A1C18A7E
SHA-256:	81B1D9D22D85F1C6169265A3CFEC5DB99C6B0E2F7C0359DC4800F5692345B262
SHA-512:	3101ABE33436A90172D6C93E2CA96FBC59945955698D6EFE3686A501B51596913972467FF23EC23441A1A77AE98157742E85C93A05C8CAAB9B43542C1E40A53C
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/64.4f74b8ce3171ba9c8ad3.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[64],{oPMI:function(e,t,a){"use strict";a.r(t),a.d(t,"CONSTANTS",(function(){return ae}));var r=a("q1tI"),n=a.n(r),o=a("i8i4"),i=a.n(o);function l(){return(l=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var a=arguments[t];for(var r in a)Object.prototype.hasOwnProperty.call(a,r)&&(e[r]=a[r])}return e}).apply(this,arguments)}function d(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){if("undefined"!=typeof Symbol&&Symbol.iterator in Object(e)){var a=[],r=!0,n=!1,o=void 0;try{for(var i,l=e[Symbol.iterator]();!(r=(i=l.next()).done)&&(a.push(i.value),!t\|\|a.length!==t);r=!0);}catch(e){n=!0,o=e}finally{try{r\|\|null==l.return\|\|l.return()}finally{if(n)throw o}}return a}}(e,t)\|\|function(e,t){if(e){if("string"==typeof e)return c(e,t);var a=Object.prototype.toString.call(e).slice(8,-1);return"Object"===a&&e.constructor&&(a=e.constructor.name),"Map"===a\|\|"Set"===a?Array.from(e):"Arguments"===a\|\|/^(?:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\79.a095c54a8bd478011336[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	2293
Entropy (8bit):	5.214797773969395
Encrypted:	false
SSDEEP:	48:lD7A2SzmQklg2xzcXHYnUnQJpFek/I+0CGw/Iou6xjz+Q18V:GrCHgEzleUVg6l1Y
MD5:	845DCBC4F32FDF019BCB0EC2DF571E2C
SHA1:	B2A315865E87EDFD8EF83EA1700ADE414C296F5F
SHA-256:	86082F8D38138DEE20691FB9FE698EA28E862E4AE36D18E916DE328FB7487218
SHA-512:	1C5EB8717834C71265969D0E4FCB5D7E5F9B07B47CE4C7667E3F0FF3D88CE2DE97E8B27B5893D6619990595677A1205FFB520F6D2B48CBA0B21B8A743EB27F9B
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/79.a095c54a8bd478011336.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[79],{SRqA:function(e,t,r){"use strict";r.r(t),r.d(t,"CONSTANTS",(function(){return u}));var n=r("q1tI"),o=r.n(n);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function c(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?c(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):c(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}var a=function(e,t){return function(e){!function(){var t={}.hasOwnProperty;function r(){for(var e=[],n=0;n<arguments.length;n++){va

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\80.aa40658498e06eba9876[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	72455
Entropy (8bit):	5.434698573483991
Encrypted:	false
SSDEEP:	1536:ozDWANdF23TAMd6feCMYJgYXvyIgm9pR98K:WDvNL2jJiPMYJgYXvyY9pH8K
MD5:	5077A98A41FE0761235A0355C1B1EBAC
SHA1:	A95599F13B57FDC81F2B6244C75F64D2B7C9E857
SHA-256:	2C08D8182E2370005C70669406420750D67C8B2E9968714D0DF05F78472F43AC
SHA-512:	D991DF278C0FAD476B6D12EA291619222B932FD033A7D58C75A9CBD3FBCFF2231DE8BB2B6EBE8777154335FF0F19D99093C14E985BC1DC925ACB2059917DD0A4
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/80.aa40658498e06eba9876.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[80],{YNgq:function(e,t,r){"use strict";r.r(t),r.d(t,"CONSTANTS",(function(){return ht}));var n=r("q1tI"),a=r.n(n);function o(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(){return(i=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e}).apply(this,arguments)}function c(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?c(Object(r),!0).forEach((function(t){o(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):c(Object(r)).forEach((function(t)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\96.e2ae03dcd43cdb142e1c[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	20062
Entropy (8bit):	5.3771042123106865
Encrypted:	false
SSDEEP:	384:TG2aU9lRT2j0d0RURHpOBGuTGhpOLUbPMtRT2j0dlR7JqHpGGnHIjX3DrgEveu+x:TG2V7T2j0d3GBGuTmpOLUbUjT2j0dfJ4
MD5:	E2233D647AB8B56DFFBF7400FF83CA86
SHA1:	AB72AE3ED8FBEB5BE19539BE1CC187CC4F170B68
SHA-256:	A0C71950AD3C205FE650B334196424C475DFD57E432B45AF2DE151D36E4333C4
SHA-512:	028CF8C6744092EE6167885E5194903A0F1E76A66BC309995B0A48018DA2A66539C85C3A8FB3BFC418C8160A2CD291531AAB5B8B4D6501F5704CD148F9B2BD6E
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/96.e2ae03dcd43cdb142e1c.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[96],{"1QIp":function(e,a,t){"use strict";t.r(a),t.d(a,"CONSTANTS",(function(){return T}));var i=t("q1tI"),d=t.n(i);function r(e,a,t){return a in e?Object.defineProperty(e,a,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[a]=t,e}function n(){return(n=Object.assign\|\|function(e){for(var a=1;a<arguments.length;a++){var t=arguments[a];for(var i in t)Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i])}return e}).apply(this,arguments)}function l(e,a){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);a&&(i=i.filter((function(a){return Object.getOwnPropertyDescriptor(e,a).enumerable}))),t.push.apply(t,i)}return t}function o(e){for(var a=1;a<arguments.length;a++){var t=null!=arguments[a]?arguments[a]:{};a%2?l(Object(t),!0).forEach((function(a){r(e,a,t[a])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):l(Object(t)).forEach((function(a

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\CoreModule[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	94650
Entropy (8bit):	5.407592168748303
Encrypted:	false
SSDEEP:	1536:1Umx0T4vncOX+zNg/r/bMEDEHH8EZD5CB7KM+WkfvK2:2TonjWAnEZDi7KfWkF
MD5:	480AB892FDA4AAD9E72B524F25633FFA
SHA1:	99D651D03434E95A52B77C51D237A0FFE9B3B1B4
SHA-256:	342A2BFEC06DE8C181B8B8F146DC2FBA5886FEC9D77F94AEE3ACCC51146990DA
SHA-512:	45E2B8A7DC5CB20E372B478EDCD648C893BEF4F98AC49326FDBAF245424C3400D73930C41DD1093986EFBDAE91BCBBC8E2AAAE8382FCB9851F178B2C0EDAAF4B
Malicious:	false
Reputation:	low
IE Cache URL:	https://siteintercept.qualtrics.com/dxjsmodule/CoreModule.js?Q_CLIENTVERSION=1.55.0&Q_CLIENTTYPE=web
Preview:	try{!function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)n.d(i,r,function(t){return e[t]}.bind(null,r));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=4)}([function(e,t,n){"use strict";n.r(t),n.d(t,"creativeTypes",function(){return r}),n.d(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\LP_Hero-Image[1].wdp Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG-XR
Category:	downloaded
Size (bytes):	36628
Entropy (8bit):	7.945484228966144
Encrypted:	false
SSDEEP:	768:Xk6T1mP0wNmb/PhuYLvgO1stCJJuRuikU+zhBOb9bRqUJ77H88/acjQZMS/4Adn:XpkmZrLvgOstCBc+zrQ1EO75/a4QJvd
MD5:	5939D7857B252981D51EB8169A2B21F9
SHA1:	3B2F951B817C5E50C293B4D32985019DB1A0FCF8
SHA-256:	3B054BCE9D29C1551E8C446CA013E1B7085A213AA30B8B84B63F7FE7C362EE56
SHA-512:	9BC68578A06A383C9E143A618B70131EDCA7C744A65F5BEE17ED67DA1217C44181EBAFA51ED8DECC785FB2AB4295FD2321B1B447F7179EB2F120B7EE9CEA3C0E
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/cas/dam/IMAGE/A4PsyGyjy/LP_Hero-Image.jpg
Preview:	II.. ...$..o.N.K..=wv.............................................,...........A..............B...........B............................WMPHOTO..E.q.+.@0...,HHR..@......&S.J........(<..X.Y....G..u..D..^%.f........N....p.."Nz.&V.u...B%..Rs....1u....+......\|U ..B.Rh.......?.<kA.l .......6.;.......WxQ&M(o>nA..D......XJ...1`..m..,..>qa.O7z..Bk....c.P.....Z..f../.g....Qc..ck=...A.:.&(fE_?DF._......R[.....t.#]...+.........h...P#D.M^..V..\|...C/...."....M...\|..e.A..!....."6.\|..c...@...\HO.......@..g.9...X..m.4;D...F....b."...G4.. k.1^D..Ot0.kZ..h...J.D.....2M`..di..?<..p.`....N?P..4.7]d....(.p.8.F4[.}....."....G .....X=...R.~..qN.......e.p......f....bGJB..q...7..t..Y2.8.=.U..0...6E......{...e.A....`..F..N..Q...H....f ...`..yI...:.i&=Z..Il.K&kuVkG.u&..p.9.(D..`.h/$..@@.v.b.Tr.....x(...K.VG#.....$u.Y.#.>....."."=.;J.a.U.$i..)7..j.. v.A.F2..1..]..E.C.....Xn...R.1HU..}X.m.F..:..<.$.y.q.......c...u......)8...:E.Nw.Cs.f.#...._.Y....M.I.ZR..E.kyx...YRR..(1Y.n.QU..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\NewErrorPageTemplate[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	1612
Entropy (8bit):	4.869554560514657
Encrypted:	false
SSDEEP:	24:5Y0bQ573pHpACtUZtJD0lFBopZleqw87xTe4D8FaFJ/Doz9AtjJgbCzg:5m73jcJqQep89TEw7Uxkk
MD5:	DFEABDE84792228093A5A270352395B6
SHA1:	E41258C9576721025926326F76063C2305586F76
SHA-256:	77B138AB5D0A90FF04648C26ADDD5E414CC178165E3B54A4CB3739DA0F58E075
SHA-512:	E256F603E67335151BB709294749794E2E3085F4063C623461A0B3DECBCCA8E620807B707EC9BCBE36DCD7D639C55753DA0495BE85B4AE5FB6BFC52AB4B284FD
Malicious:	false
Reputation:	low
Preview:	.body..{.. background-repeat: repeat-x;.. background-color: white;.. font-family: "Segoe UI", "verdana", "arial";.. margin: 0em;.. color: #1f1f1f;..}.....mainContent..{.. margin-top:80px;.. width: 700px;.. margin-left: 120px;.. margin-right: 120px;..}.....title..{.. color: #54b0f7;.. font-size: 36px;.. font-weight: 300;.. line-height: 40px;.. margin-bottom: 24px;.. font-family: "Segoe UI", "verdana";.. position: relative;..}.....errorExplanation..{.. color: #000000;.. font-size: 12pt;.. font-family: "Segoe UI", "verdana", "arial";.. text-decoration: none;..}.....taskSection..{.. margin-top: 20px;.. margin-bottom: 28px;.. position: relative; ..}.....tasks..{.. color: #000000;.. font-family: "Segoe UI", "verdana";.. font-weight:200;.. font-size: 12pt;..}....li..{.. margin-top: 8px;..}.....diagnoseButton..{.. outline: none;.. font-size: 9pt;..}.....launchInternetOptionsButton..{.. outline: none;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\_app-5b75ef902015adf3b805[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	5992
Entropy (8bit):	5.219822218277216
Encrypted:	false
SSDEEP:	96:iAFiSHT2m5yI66mEoZIMjX4ZZJEjYjX1rostqA+YjxpZmz3rEZvuZMnG2ycFAMo9:VFic2Y56CoZIMjX7stQYjxpZmjrCPmcy
MD5:	FDC53C1AC6950637D5C8A9B32AF87C1E
SHA1:	995B541C1CBCC5078EDB4D6725D0BAE44A443F18
SHA-256:	48387F73231A3C41B0D875A7AF3466303472993BCBE239221E46706000A310CC
SHA-512:	B511D8B8D1D445966D841D2DBA3BE9CEBD698553E2916BA28E977707CC90724831085F348BF465409C387A62AC354682DB9C3EB3BF7C7F04B0C58F92A961FAE5
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/pages/_app-5b75ef902015adf3b805.js
Preview:	_N_E=(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[11],{0:function(e,n,t){t("GcxT"),e.exports=t("nOHt")},"1TCz":function(e,n,t){"use strict";t.r(n),t.d(n,"reportWebVitals",(function(){return P}));var r=t("o0o1"),o=t.n(r),i=t("rePB"),c=t("HaE+"),a=t("q1tI"),u=t.n(a),s=t("8Bbg"),p=t.n(s),f=t("A5uP"),l=t("TUgf"),g=u.a.createElement;function d(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);n&&(r=r.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,r)}return t}function w(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?d(Object(t),!0).forEach((function(n){Object(i.a)(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):d(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function m(e){var n=e.Component,t=e.pageProps;return g(n,t)}m.getInit

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\_ssgManifest[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.327646996939871
Encrypted:	false
SSDEEP:	3:k0WYL12AkZ/W6QfpX/W6Qen:UYR2Ak06EpXO6h
MD5:	ABEE47769BF307639ACE4945F9CFD4FF
SHA1:	C0A0DC51EE8A2852BAF5FF30C33B1478FF302585
SHA-256:	653F3E53E89B4F8548FF86C19E92BB3C6B84B6BE7485A320B1E00893ED877479
SHA-512:	2B074799106698DF69A28FCD8255C3CFD1CCF40FD4C1BF5D463C42E63B32856F801E066706FBD960A0DA4EBE645C070C398DCF01BD722DC4FA592266361AE81A
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/makF5OCk0XixpV5rl5Nur/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set;self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB()

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\acad335ad7ba163209d8c3e671b2c445[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9346
Entropy (8bit):	4.909678911846309
Encrypted:	false
SSDEEP:	96:+12aGkB/pvtjRn5EC9QeOgyCVWV3h4yx2WFt1PMXdDWCkgiQAJ9FnPDbs/A2i:6jt9nGCG4SxMhkyAJfnPD4ti
MD5:	ACAD335AD7BA163209D8C3E671B2C445
SHA1:	6FFD6741AE59ED5B7AAA33505EF2F57F86A1D082
SHA-256:	BBD9E8EDDB8A9888E40E0CF19EA2E0898D7C2FA534B4E70F3922B7A1A20A584D
SHA-512:	C96EAF974A77B8D17723F02F84A4C28DC9B9A34C7DB0867CE7674C51A5772667152EE9057C137EA639DAA1728C23C22917DB05758BE7A56588D10D744A52C991
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/acad335ad7ba163209d8c3e671b2c445.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="119" y1="165" x2="147" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/>. <stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/>. <stop offset="0.624" stop-color="#9aa0a6" stop-opacity="0.4"/>. <stop offset="0.786" stop-color="#9aa0a6" stop-opacity="0.626"/>. <stop offset="0.946" stop-color="#9aa0a6" stop-opacity="0.898"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="67" y1="165" x2="115" y2="165" xlink:href="#linear-gradient"/>. <linearGradient id="linear-gradient-3" x1="107.557" y1="61.557" x2="119.557" y2="49.5

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\analytics[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	49377
Entropy (8bit):	5.521008419138659
Encrypted:	false
SSDEEP:	768:/yR3fYFBCwsNDsP5XqY0TyPnHpl1TY3SoavyVv6PU+CgYUD0lgEw0stZK:/y9g1r5h0UHp/Y3SowCw0sy
MD5:	042B7183D8645F5CF9D0D6ACD5FF8358
SHA1:	447A98467EA31E253ECB63EE8564C8B5E1E77D58
SHA-256:	73D6A5EA11FB7BF6E6A6CCD44B1635D52C79B0A00623D0387C9DDDD4B7C68E89
SHA-512:	72AA2F221BB5EFEC3A9C0CBC2D01DEBD827361369F7E84AA613D4CA70838FF68EA2C3300167FB263A4F416A857BABF0354A1FF8B3EC669BF88452633981CA18F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};var q={},r=function(){q.TAGGING=q.TAGGING\|\|[];q.TAGGING[1]=!0};var t=function(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])},v=function(a){for(var b in a)if(a.hasOwnProperty(b))return!0;return!1};var x=/^(?:(?:https?\|mailto\|ftp):\|[^:/?#]*(?:[/?#]\|$))/i;var y=window,z=document,A=function(a,b){z.addEventListener?z.addEventListener(a,b,!1):z.attachEvent&&z.attachEvent("on"+a,b)};var B=/:[0-9]+$/,C=function(a,b,c){a=a.split("&");for(var d=0;d<a.length;d++){var e=a[d].split("=");if(decodeURIComponent(e[0]).replace(/\+/g," ")===b)return b=e.slice(1).join("="),c?b:decodeURIComponent(b).replace(/\+/g," ")}},F=function(a,b){b&&(b=String(b).toLowerCase());if("p

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\avenir-500[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 9704, version 1.0
Category:	downloaded
Size (bytes):	9704
Entropy (8bit):	7.950130774317326
Encrypted:	false
SSDEEP:	192:bV7PpPFOJjGGwghEY9rqSYJqYsZ/Id+f6jV3V6fxYXajsz:bNMlwg6SrBZ/e5jNVU5i
MD5:	AF042B79F2366EF85632D31E57058973
SHA1:	07D0691D1A54E27E3E2ACE5BB11919538B40674A
SHA-256:	EB5E00CBAEFBDA7802EDAEEDF6384BD88B6422311DD2D6794239B6945A00A4F9
SHA-512:	BDF9BB24757D478F1226B9C84A03AE5D588707BB0D1C4A645ED7677E96D7CB6F88D6D2E7E1500D8B3EA9BD0251A14A5A4FE1F289BB81032300387F18B1A0CD4B
Malicious:	false
Reputation:	low
IE Cache URL:	https://lib.intuitcdn.net/fonts/AvenirNext/1.0/en/avenir-500.woff
Preview:	wOFFOTTO..%.......=@........................CFF .......`..!<5...GPOS...h.......>./..GSUB.."4.......,.V.tOS/2.."....Z...`..K.cmap..#<...........head..#....6...6..$.hhea..#........$....hmtx..$....\.....f.umaxp..%x.........xP.name..%....T...b...>post..%........ ...2x.D..N.@...\.$./1.@..n..Dq../H`..0...@.i.L...._.w.I\|._...-..\|.I...[.Va.e5..JA#\|1...h...w..t^>.r`y..[;,oW.j~Rk.....X},..z....B...[..l..fUVg..5X..X...(..'J.RI..).X....q...87.H.....\B...y...5{0TR.,A..O.lp....4.j...6.#.....C(nUD..1p2.f..p}.\...F.H....L.......H.M.>j.J...&..)..A...........g............,j...2.d .(...L...D-...)n(........."U.....T..+b..jE......"Zv.."..dz.~.;.~..>.....=......=.9......j.f.f...r.\...v.$.].]..Y.[.....V....:.....>L._.:.d]o]..0].n.n.n...].n.n.n..S.O..;.;.;.+...U..uOt.u.u....82&.7...2..(&.Y.,cV0.1.L:.....d....K...^Xmj8.64..$Z.>.O........z......U..>....h..;..:.:.......F^...%pF... ..;:.3h.B....Y........5..]....%.~./e.....4>v.......f)....Y..?.cB{4...vl..h.......^CbF.....P....^x....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\avenir-600[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 9560, version 1.0
Category:	downloaded
Size (bytes):	9560
Entropy (8bit):	7.94004592087066
Encrypted:	false
SSDEEP:	192:ezM0X0uZXWSVzfJft0Ghng2Q5SZ5yDh6PlvHxNMelMu1mddrscsTVngDZvflXQve:GMEj3VzEgQ5626FRNpMuYsTVn2HN
MD5:	258A2058B30AA6D579E110B3596AAE4E
SHA1:	67B8188ECD019B1964DEE58D2072077FD18D4C4A
SHA-256:	F200C4EC51E279FDD48D8237D320DC3A5A3B6E065D4F1FB7645E6BFB9D0CEA1C
SHA-512:	A6088DD3EEE35001FE92AB1DC3029C5BB89E14A4A9B483ACF77D170E3753DA9EB83A0C517A706EC641C487D654FD5D191EFCD6B0359F7C9F6E290CDA265A2871
Malicious:	false
Reputation:	low
IE Cache URL:	https://lib.intuitcdn.net/fonts/AvenirNext/1.0/en/avenir-600.woff
Preview:	wOFFOTTO..%X......=.........................CFF ..........!....GPOS...........>....GSUB..!........,.V.tOS/2.."P...Z...`..L.cmap.."............head..#4...6...6.i%.hhea..#l.......$....hmtx..#....Y.....B..maxp..$..........xP.name..$....S...^....post..%D....... ...2x...KN.@....Z.f4....E.dX. ..x...3 "!..t...mUw...H....D\."..l..J../.V.!..".xD.nfx8.?...JTy<....;.!.V...\|......z.~m........B...r.._E9T.....-.....;.[5.25.I#.\.....<o..<....0r8.#.:=(xx.....m\..^'..>.q....L.xEA...X.frJX..(-c.../....XI.W.t$F.....%....T.D..U..Df8!L.8.:.Pi..;Yx.de.....-..dr..1..L.f..e......"(Xw......nUA...Vm-.`...b....W.....V.T......}}.../....s..O2uFB.s..........E...D3....5.0..p.R.-..\|.lc.3.......1.8..k.d.n.a<l<f<k...X....;...`.....v-.9..=..b....-..[.`...c2..L.M.......)..a.i.1M4M..._.....5G..a.X.e..{.v.F..;ag0v..W./.V{].....pD.+..R...../...M.(.....gbWl.-.....#.H...B+..N.V..W.tb.........oJl.z..WPpd.Q...9#..f\|.....&..A[r..sp.\FZy.<...!CF8.wV.....<.....).V.q`g.0.?.<...n]...[

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\c[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	12227
Entropy (8bit):	5.308671248783058
Encrypted:	false
SSDEEP:	192:8QXXOsQEcix3+i4etz9oLzhmrvB+6MTBer/LOfheacun9TSpVf2rYuC4ubwfcLT8:DntcZeNkzhmrM6Mlu/ifQaB9uCr7C4YK
MD5:	A862B0FC44B1D50C7E78AD1D7A855DF0
SHA1:	E30E284AA0541DE0271F7F5BB3202DEEA7DF67E3
SHA-256:	0D866CD20D880DC905C17E4029174242404DA0BBDDAFB4EBEEF84C187676F5BE
SHA-512:	E24024F11061E6573E17B28EE12482A70BA6D2ECC924E689DF07CDD04C1100E4FCEB887F2B489A7E17CC56E1F84986871548EA7D2E6EEF092444A4A12DA2A9C8
Malicious:	false
Reputation:	low
IE Cache URL:	https://collection.decibelinsight.net/i/13878/256560/c.json
Preview:	{"da_websiteId":256560,"da_account_flags":6095,"da_account_flags_orig":6095,"da_sessionId_e":"68AA488A8E33AE88BC41AA134EDB4D6310","da_leadId_e":"5B997BB99A73EA132910BB990CD90768A3","da_dnsRecord":"collection.decibelinsight.net","da_anonymiseIP":true,"da_ipHandling":1,"da_sessCookieFlags":4,"da_leadCookieFlags":0,"analysisSessFlags":0,"analysisLeadFlags":0,"replaySessFlags":4,"replayLeadFlags":0,"int_state":"","curTime":1625866753,"domains":["view.ceros.com","www.intuit.com","careers.intuit.com","intuit.swoogo.com","events.quickbooksconnect.com","jobs.intuit.com"],"accountNumber":13878,"branch":"MASTER","da_autoFragmentTrack":true,"da_autoQueryTrack":true,"da_maskEmail":true,"da_maskSSN":false,"da_recursiveMasking":true,"da_deepShadowRootSearch":false,"da_processBot":false,"da_noHTML":false,"da_httpsJourney":true,"da_aggregateFields":false,"da_allowDuplicateAttribute":true,"da_collectLogs":true,"da_frameRate":5,"da_resourceRate":1,"da_minResourceSize":1000,"da_maxCss":30000,"da_sessionT

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\c[3].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	11453
Entropy (8bit):	5.312928666986109
Encrypted:	false
SSDEEP:	192:80XXWsQoxRz5SuSo3+i4eFcyON1MpiPNV8pbeokibyofXOlH:rn1bSuiee7PNute/DlH
MD5:	D7F1275E40C28CA5C72ABC1ADBED44BA
SHA1:	C6964D99DCEDF9A9D6D78DA55B12CA03D0C3573C
SHA-256:	6D97D6FB6C0F220E3208E0F1BB0A3A52673FD033D34C56408670B7AF5AFD719E
SHA-512:	A8130C1EDDF748A18B1CD2FE6C69B2E306E148D6A5881D0B9AA0C456B52E2E8844038F6FFB970C312738A27D997E118AFF8435EBB3B666635E21F7501AB55008
Malicious:	false
Reputation:	low
Preview:	{"da_websiteId":264972,"da_account_flags":6095,"da_account_flags_orig":6095,"da_sessionId_e":"68AA488A8E33AE88BC41AA134EDB4D6310","da_leadId_e":"5B997BB99A73EA132910BB990CD90768A3","da_dnsRecord":"collection.decibelinsight.net","da_anonymiseIP":true,"da_ipHandling":1,"da_sessCookieFlags":4,"da_leadCookieFlags":0,"analysisSessFlags":0,"analysisLeadFlags":0,"replaySessFlags":4,"replayLeadFlags":0,"int_state":"","curTime":1625866767,"domains":["signup.quickbooks.intuit.com","intuitmarket.intuit.com","sbconnect.intuit.com","payroll.intuit.com","quickbooks.intuit.com","*.qbo.intuit.com","qbo.intuit.com","qasp.quickbooks.intuit.com","perfsp.quickbooks.intuit.com","qasp.sbconnect.intuit.com","perfsp.sbconnect.intuit.com","signup-e2e.quickbooks.intuit.com","signup-qa.quickbooks.intuit.com","local.sui.v3.intuit.com","qdcstage.intuitmarket.intuit.com","qasp.payroll.intuit.com","perfsp.payroll.intuit.com","qdcstage.intuitmarket.intuit.com","backflip.surge.sh","intuitsocial.az1.qualtrics.com","dis

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\c[4].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	11453
Entropy (8bit):	5.312928666986109
Encrypted:	false
SSDEEP:	192:80XXWsQoxRz5SuSo3+i4eFcyON1MpiPNV8pbeokibyofXOlH:rn1bSuiee7PNute/DlH
MD5:	D7F1275E40C28CA5C72ABC1ADBED44BA
SHA1:	C6964D99DCEDF9A9D6D78DA55B12CA03D0C3573C
SHA-256:	6D97D6FB6C0F220E3208E0F1BB0A3A52673FD033D34C56408670B7AF5AFD719E
SHA-512:	A8130C1EDDF748A18B1CD2FE6C69B2E306E148D6A5881D0B9AA0C456B52E2E8844038F6FFB970C312738A27D997E118AFF8435EBB3B666635E21F7501AB55008
Malicious:	false
Reputation:	low
IE Cache URL:	https://collection.decibelinsight.net/i/13878/264972/c.json
Preview:	{"da_websiteId":264972,"da_account_flags":6095,"da_account_flags_orig":6095,"da_sessionId_e":"68AA488A8E33AE88BC41AA134EDB4D6310","da_leadId_e":"5B997BB99A73EA132910BB990CD90768A3","da_dnsRecord":"collection.decibelinsight.net","da_anonymiseIP":true,"da_ipHandling":1,"da_sessCookieFlags":4,"da_leadCookieFlags":0,"analysisSessFlags":0,"analysisLeadFlags":0,"replaySessFlags":4,"replayLeadFlags":0,"int_state":"","curTime":1625866767,"domains":["signup.quickbooks.intuit.com","intuitmarket.intuit.com","sbconnect.intuit.com","payroll.intuit.com","quickbooks.intuit.com","*.qbo.intuit.com","qbo.intuit.com","qasp.quickbooks.intuit.com","perfsp.quickbooks.intuit.com","qasp.sbconnect.intuit.com","perfsp.sbconnect.intuit.com","signup-e2e.quickbooks.intuit.com","signup-qa.quickbooks.intuit.com","local.sui.v3.intuit.com","qdcstage.intuitmarket.intuit.com","qasp.payroll.intuit.com","perfsp.payroll.intuit.com","qdcstage.intuitmarket.intuit.com","backflip.surge.sh","intuitsocial.az1.qualtrics.com","dis

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\case-account-takeovers[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2048
Entropy (8bit):	5.974976907789136
Encrypted:	false
SSDEEP:	48:tClh1ro9HP9pRafL2t8GYUVQtlbO20scS7+t33zSe5M6hD:tg8PlaDIkttlr0snMnN2SD
MD5:	76B14D872B92969D5AE0B009E7D09F30
SHA1:	44C7553F36B795C398516C946304A65290B534EF
SHA-256:	7D85C11F3C9D2CB1A3289BA2EDFC10FB384D96E0544CED25D9473271080028DD
SHA-512:	D3D24D789CE780593718C0B553D6E2A4AE81F1337C482EAB485C2504E6638D8D9CF32924770FB7B24D6F2C773443571767FE7412D0AFB37392186B89621740D4
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/case-account-takeovers.svg
Preview:	<svg width="53" height="37" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><image x="932" y="199" width="53" height="53" xlink:href="data:image/png;base64,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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\case-false-posts[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2736
Entropy (8bit):	6.003940231127533
Encrypted:	false
SSDEEP:	48:qFCCh1ro9HPIX6u9RkUDmRjUu8hpmUhynRLCMSJwpO9YZnsOshVdEWxuALj:mX8PIX6urRqV6mUhyRWt19vOu6WxuAv
MD5:	DAB362087D41CCB342C6A73BD7C9CA4E
SHA1:	58CCAEFD5AC7D734AC5B724AD4C0284B661A951B
SHA-256:	157BF224C5ED83E703331793EE71BE180D2CA49D0B34D6E66F00695B8F731C86
SHA-512:	BBF1EA716BDF0110D1E91C7876B6B299559CFE411668D0FDABDFE055D50049B2DD9EC116AFDE2489306688C9792C4BB16F87AE9F27D6C4C9E5F4393B04683495
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/case-false-posts.svg
Preview:	<svg width="42" height="45" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><image x="606" y="525" width="53" height="53" xlink:href="data:image/png;base64,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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\case-fraudulent-transactions[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1140
Entropy (8bit):	5.837136939901307
Encrypted:	false
SSDEEP:	24:tFfaLirB8/Ae+gX9z50rV/IvCWUTKl5ya+5yaALTk2S4obl4xME:PmCMPXX9mg6jI5ya+5yaaIDQ
MD5:	B8F38D509AC2B7CCDADC803C1A547174
SHA1:	C800752C7A35120AE5471D2044837F5A4E4CC5BE
SHA-256:	E7022C3535F3CB3D969CA1AF3344463611153B53C93D904653E54212CA74541C
SHA-512:	1D6D16EF1F696F4FAEC94B2B7BCFDCEE92D9CBE3677D09A5E55BCE249C45B302B7B46DA9B2B9C10D39ABA93EBD7607CB213DF52AD064A7D08091186F6DA86290
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/case-fraudulent-transactions.svg
Preview:	<svg width="45" height="37" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><image x="610.417" y="204.833" width="44.167" height="35.333" xlink:href="data:image/png;base64,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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\case-synthetic-accounts[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1932
Entropy (8bit):	5.941498658244463
Encrypted:	false
SSDEEP:	48:oCwh1ro9HPDJxdznvDSWR/j9dAC2kJ4IU58iQJWO:od8PDv1nvD7oC2kuDuJWO
MD5:	2E730CBE9CF6A609CF2C7FDB4E0289CE
SHA1:	96F4C8DD81B25D8D539C0A65AB4D6A88137BD41E
SHA-256:	242022B31B71F0C58BD9F35FA49BC00D15AAF4C11A9C00D4F0281655C979F91B
SHA-512:	1E11F9F1067A6EF507C0C6E45C91AC029E468160C8FF300865F3022A82552893055DA961C8FD4E54015D8504747C83AA1E762A6613E3554134FBB894820F791B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/images/case-synthetic-accounts.svg
Preview:	<svg width="49" height="31" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><image x="280" y="525" width="53" height="53" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAGAAAABgCAYAAADimHc4AAAABGdBTUEAALGOfPtRkwAAAERlWElmTU0AKgAAAAgAAYdpAAQAAAABAAAAGgAAAAAAA6ABAAMAAAABAAEAAKACAAQAAAABAAAAYKADAAQAAAABAAAAYAAAAACpM19OAAAES0lEQVR4Ae2bsYoUQRCGVzEwMDAwMBCc0MDATANBM0NDBQMDA0MfxQe4B1AwMDAwuEgUPFFQMFA44RSFu+wCBQMF/eu4hb6ht/+e6a6Znd2/oG5nurqqq7662Zvp3ZvNJCIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAutG4BwK3oB+hP6buL5H/g+hp6E5wuplMUr9Zw1W2IeyQFOz76CmnCawuhAmKaX+s6cIz4JM1W5XAhNWW1X/45Fo1yNjqzK0dLUdi5C134BVlljNYb2s/qr+sSsgTEbHzgTUAGfALLwawAg529UAZ8AsvBrACDnb1QBnwCz8CTbBwb6FmI+hb6B7h/Ft6+Ma9Db04uHY2r6wJ8G+9m0QvZFB9Q7m7EL7rsP8WApj+7sU/hJVn2GVB/YGx5+gDEYfe7BM9JDFjDoFg6X+1Ys2kDmbYEENB4cNfnpcCe112uelAEv9qzfgarvCDuf2dsQK6mpny7N43v5VC37Gss2w1/5Mgi05aAO8b0PtbqdUasQozcHN37sBLypkXiNGhTR8Qng34EeFtGvEqJCGTwjvBtTI+m+NIMsaw7sBZysUbk/JKyveDbhcgVyNGBXS8Anh3QDb2y

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\commonutil_min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	131484
Entropy (8bit):	5.652768086688514
Encrypted:	false
SSDEEP:	3072:HFEikLvZ2J+hOg7pcDcl9wSo+Lo3VLYM+rGPL3XfjYBZzCe:W7pcDcl9wSo+LolLYMDL3XfjwZzCe
MD5:	31637AAA53A82C1EF518421B81340D17
SHA1:	BAEAD4F9D40E56DFFA2B8D5B854F9479E8584949
SHA-256:	65DDB077D48724250EA628AC877FE90FE3DFAFD0B3A88B74188EB1AC648CF289
SHA-512:	39116F70E3AE5C41115FFD07744D27AF4FAA993831BEC34235E7BED41A688A3D7A533EDE98EC462FFCD0A08D7A5A9A39A72D3E224C0E3B5106425E7DEF32DE22
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/commonutil_min.js
Preview:	var private_const_browser_version_checkBrowser=new private_browser_version_checkBrowser();function private_browser_version_checkBrowser(){this.usrAgent=navigator.userAgent;this.ie11=(this.usrAgent.indexOf("Trident/7.0")>-1)?1:0;this.ie10=(this.usrAgent.indexOf("Trident/6.0")>-1)?1:0;this.ie9=(this.usrAgent.indexOf("Trident/5.0")>-1)?1:0;this.ie8=(this.usrAgent.indexOf("Trident/4.0")>-1)?1:0;this.ie7=!this.ie11&&!this.ie10&&!this.ie9&&!this.ie8&&(this.usrAgent.indexOf("MSIE 7")>-1)?1:0;this.is7OrNewer=(this.ie7\|\|this.ie8\|\|this.ie9\|\|this.ie10\|\|this.ie11)?1:0;this.is8OrNewer=(this.ie8\|\|this.ie9\|\|this.ie10\|\|this.ie11)?1:0;this.is9OrNewer=(this.ie9\|\|this.ie10\|\|this.ie11)?1:0;this.is8OrOlder=(this.ie7\|\|this.ie8)?1:0;this.firefox=(this.usrAgent.indexOf("Firefox/")>-1)?1:0;this.chrome=(this.usrAgent.indexOf("Chrome")>-1)?1:0;this.sf4=!this.chrome&&(this.usrAgent.indexOf("Safari")>-1&&this.usrAgent.indexOf("Version/4")>-1)?1:0;this.sf5=!this.chrome&&(this.usrAgent.indexOf("Safari")>-1&&this.usr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\core[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1142
Entropy (8bit):	5.060321279287482
Encrypted:	false
SSDEEP:	24:Xcw6BmAVFGa94c6o/dmSdHlc4/1zJ96I6ak5TSVHZtRWZor6L:MdVie/dVdZg/akQVwge
MD5:	ACB775799FA2F1D3F27F6A1F7A366D9F
SHA1:	8F279632F7303BD8958851F2E68830812F10D8D4
SHA-256:	88192D9A0093C05814D865A67998245F91ADAED930871EB77DACCD169876C16B
SHA-512:	27159268232508AAE971640568A20A333CAE467C229AD9B89054D8470B3C44D4116499E9C38E0CCBDEADD9AB156D15C1DB3375B4A02A9D4D9ED3F6C81FC68ED1
Malicious:	false
Reputation:	low
IE Cache URL:	https://s.pinimg.com/ct/core.js
Preview:	!function(e){var r={};function u(n){if(r[n])return r[n].exports;var t=r[n]={i:n,l:!1,exports:{}};return e[n].call(t.exports,t,t.exports,u),t.l=!0,t.exports}u.m=e,u.c=r,u.d=function(n,t,e){u.o(n,t)\|\|Object.defineProperty(n,t,{enumerable:!0,get:e})},u.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"e",{value:!0})},u.t=function(t,n){if(1&n&&(t=u(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.e)return t;var e=Object.create(null);if(u.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var r in t)u.d(e,r,function(n){return t[n]}.bind(null,r));return e},u.n=function(n){var t=n&&n.e?function(){return n.default}:function(){return n};return u.d(t,"a",t),t},u.o=function(n,t){return Object.prototype.hasOwnProperty.call(n,t)},u.p="",u(u.s=0)}([function(n,t){!function(n,t){var e=n.createElement("script");e.async=!0,e.src="https://s.pinimg.com/ct/lib/main.1da

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cu_callstack[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	709
Entropy (8bit):	5.268067567806991
Encrypted:	false
SSDEEP:	12:ALybYOvSV931qdysyFcM0amUfN5fvpx876O9Vf3Wp2Lyu6amUtxO7B2OFePOjC3a:eOvm931x0awrN3WcLD/m8bRL2
MD5:	B404B349FA09E8D3968950E831ADD157
SHA1:	765547DF504428DA61E8A5523D6CB2107CE3021A
SHA-256:	85A1DEABFA65CA82BB0924C7A2F9441C6CBACB99296971C2DC0B178FC99AAC3A
SHA-512:	3D8925F77A56EE081CED1ADC7E53898F641DA1028BAC9DAF568CD21C12BABB71FD8FECB1F70FCC1B5C4480695DF1B7E3B46058B349F7FD9A46BE044077CA4429
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/cu_callstack.js
Preview:	function cu_show_callstack(g,m){var o="";var i=0;if(m==null){m=5}var h=300;while(g!=null&&i++<m){try{var l=/ [^ (]+/;var d=l.exec(g.toString());var a=(d!=null)?d[0]:" anonymous";if(a[0]=="{"){a=" anonymous"}if(a==" anonymous"\|\|a==" command"\|\|a==" commandOne"\|\|a==" commandTwo"){var c=g.toString();var b=c.substring(c.indexOf("{"),c.length);var n=" ANON: ";if(a==" command"){n=" CMD: "}if(b.length<h){o+=n+b}else{o+=n+b.substring(0,h)+"..."}}else{o+=" FUNC:"+a}}catch(k){try{if(g.toString().length<h){o+="???:"+g.toString()}else{o+="???:"+g.toString().substring(0,h)}}catch(j){o+="???: func.tostring() failed!"}}try{g=g.caller}catch(k){}}if(g==null){o+=" FUNC: window"}return o}var cu_callstack_js_loaded=true;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\d1b68e2cd423aba52d74f02573df2d2d[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9849
Entropy (8bit):	4.969315565687199
Encrypted:	false
SSDEEP:	96:+d0yV2aITB9sHTzAIyIdeoaqRF+6/wWN7c2RGd8V:CAWyoaqRF+6I8H
MD5:	D1B68E2CD423ABA52D74F02573DF2D2D
SHA1:	9FAA2F472EEAA4B61BE00B1A0AE2E1DE3082E407
SHA-256:	2041BF4F141AC095ABE365C86BB814509EF11DC741BA3B7E70FE60766432110E
SHA-512:	B1B798397D00943958E8E00CB73243CF40129921EFFF9DB852891B47711F0B32CB616EC1D24A8CCAFF939CED0F24399649FCF9C7614D8F880899C7152D9D525E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/d1b68e2cd423aba52d74f02573df2d2d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="338" y1="92" x2="354" y2="92" gradientTransform="translate(-238)" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#1967d2"/>. <stop offset="1" stop-color="#1967d2" stop-opacity="0"/>. </linearGradient>. <clipPath id="clip-path">. <rect x="97" y="107" width="50" height="51" fill="none"/>. </clipPath>. <linearGradient id="linear-gradient-2" x1="126" y1="147.5" x2="156" y2="147.5" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#188038"/>. <stop offset="1" stop-color="#188038" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-3" x1="254" y1="165" x2="270" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opac

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\dnserror[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	2997
Entropy (8bit):	4.4885437940628465
Encrypted:	false
SSDEEP:	48:u7u5V4VyhhV2lFUW29vj0RkpNc7KpAP8Rra:vIlJ6G7Ao8Ra
MD5:	2DC61EB461DA1436F5D22BCE51425660
SHA1:	E1B79BCAB0F073868079D807FAEC669596DC46C1
SHA-256:	ACDEB4966289B6CE46ECC879531F85E9C6F94B718AAB521D38E2E00F7F7F7993
SHA-512:	A88BECB4FBDDC5AFC55E4DC0135AF714A3EEC4A63810AE5A989F2CECB824A686165D3CEDB8CBD8F35C7E5B9F4136C29DEA32736AABB451FE8088B978B493AC6D
Malicious:	false
Reputation:	low
Preview:	.<!DOCTYPE HTML>..<html>.. <head>.. <link rel="stylesheet" type="text/css" href="NewErrorPageTemplate.css" >.. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.. <title>Can’t reach this page</title>.. <script src="errorPageStrings.js" language="javascript" type="text/javascript">.. </script>.. <script src="httpErrorPagesScripts.js" language="javascript" type="text/javascript">.. </script>.. </head>.... <body onLoad="getInfo(); initMoreInfo('infoBlockID');">.. <div id="contentContainer" class="mainContent">.. <div id="mainTitle" class="title">Can’t reach this page</div>.. <div class="taskSection" id="taskSection">.. <ul id="cantDisplayTasks" class="tasks">.. <li id="task1-1">Make sure the web address <span id="webpage" class="webpageURL"></span>is correct</li>.. <li id="task1-2">Search for this site on Bing</li>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\down[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	748
Entropy (8bit):	7.249606135668305
Encrypted:	false
SSDEEP:	12:6v/7/2QeZ7HVJ6o6yiq1p4tSQfAVFcm6R2HkZuU4fB4CsY4NJlrvMezoW2uONroc:GeZ6oLiqkbDuU4fqzTrvMeBBlE
MD5:	C4F558C4C8B56858F15C09037CD6625A
SHA1:	EE497CC061D6A7A59BB66DEFEA65F9A8145BA240
SHA-256:	39E7DE847C9F731EAA72338AD9053217B957859DE27B50B6474EC42971530781
SHA-512:	D60353D3FBEA2992D96795BA30B20727B022B9164B2094B922921D33CA7CE1634713693AC191F8F5708954544F7648F4840BCD5B62CB6A032EF292A8B0E52A44
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/down.png
Preview:	.PNG........IHDR...............ex....PLTE....W..W..W..W..W..W..W..W..W..W..W..W..W.U..............W..W.!Y.#Z.$\.'].<r.=s.P..Q..Q..U..o..p..r..x..z..~.............................................b.............................................................................................................................................................................................................$..s...7tRNS.a.o(,.s....e......q*...................................F.Z....IDATx^%.S..@.C..jm.mTk...m.?\|;.y..S....F.t...,.......D.>..LpX=f.M...H4........=...=..xy.[h..7....7.....<.q.kH....#+....I..z.....'.ksC...X<.+..J>....%3BmqaV...h..Z._.:<.Y_jG...vN^.<>.Nu.u@.....M....?...1D.m~)s8..&....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\e60586c0029adec0bacd3e48470ca6c6[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	15934
Entropy (8bit):	5.044031692686615
Encrypted:	false
SSDEEP:	96:+5rsHBQMyBNWB85GfnAWlkVzLIV2amGj31zBJqDb5PiStUseyXDhMln9UTfQLUQo:LHEQmGb1wgWX1CGkbjf+LJnx
MD5:	E60586C0029ADEC0BACD3E48470CA6C6
SHA1:	2660A543EDC31CC35115F37CFF36CC4DA7B95151
SHA-256:	DA83F15D25A23E295CBA8AF285B22F5AEB46394C6B13DFCD29EA3B6415F90DF7
SHA-512:	2FA00B15E609C22D343901BE202D66ED071A5E9989827DE3F3E486DBC33D62CDA296B66BB30875A905AA3BCC97A068F5ECA62FBD4B10EE5CC60CE2C0AFF37A00
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/e60586c0029adec0bacd3e48470ca6c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="264" y1="165" x2="328" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#bdc1c6" stop-opacity="0"/>. <stop offset="0.137" stop-color="#bdc1c6" stop-opacity="0.021"/>. <stop offset="0.279" stop-color="#bdc1c6" stop-opacity="0.084"/>. <stop offset="0.424" stop-color="#bdc1c6" stop-opacity="0.189"/>. <stop offset="0.57" stop-color="#bdc1c6" stop-opacity="0.336"/>. <stop offset="0.718" stop-color="#bdc1c6" stop-opacity="0.525"/>. <stop offset="0.864" stop-color="#bdc1c6" stop-opacity="0.753"/>. <stop offset="1" stop-color="#bdc1c6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="175" x2="199" xlink:href="#linear-gradient"/>. <linearGradient id="linear-gradient-3" x1="196" y1="165" x2="252" y2="165" gradientUnits="userSpac

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\e79ea0ed464fc8952d5b5582f9f9ae53[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	13232
Entropy (8bit):	5.004489515608496
Encrypted:	false
SSDEEP:	96:+9luEGZ2aRcZGDTBmQLBnEGRDzQeqzNOo4HFvdRX1ju6RGumD6k9i4AIkwNgFFro:HBBJQeq07fXDIumDf9lAuNgFFrpi
MD5:	E79EA0ED464FC8952D5B5582F9F9AE53
SHA1:	7C64CD9D283C3E87EC34160A70688A52D6144766
SHA-256:	FC432273DBD2B5233238B2BCA3E167CE7DD6BCB5318B3D06DC664ED15F309637
SHA-512:	3A5DE44AF0E40C6E226E4AACCE0BB7C9F78FE4DFB301B0FAB28586D7112456CC812F399DE163285CB6B79E1316DC87BF04ADA33A20AF9825417E33C122063A0A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/e79ea0ed464fc8952d5b5582f9f9ae53.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="-56.701" y1="323.063" x2="3.299" y2="323.063" gradientTransform="matrix(0, 1, -1, 0, 614.584, 137.96)" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#202124" stop-opacity="0"/>. <stop offset="0.023" stop-color="#202124" stop-opacity="0.079"/>. <stop offset="0.257" stop-color="#202124" stop-opacity="0.751"/>. <stop offset="0.4" stop-color="#202124"/>. <stop offset="0.615" stop-color="#202124" stop-opacity="0.751"/>. <stop offset="0.965" stop-color="#202124" stop-opacity="0.079"/>. <stop offset="1" stop-color="#202124" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="273.911" y1="117.637" x2="297.393" y2="102.387" gradientTransform="translate(333.87 -192.271) rotate(78)" gradientUnits="userSpaceOnUse">. <stop off

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\embed[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	25339
Entropy (8bit):	5.5040992714812536
Encrypted:	false
SSDEEP:	384:XYRgyq+e8HeR/ZyUVP4M0HRC9EnyjXuABwGueneVzt4XhsQT7k7jwRhMi9SHwtz4:b+1Hee9/xCnBBjY+XhwjI9SHwtzMTPLZ
MD5:	1A5C3C7FB79DDA638241D449FE01A706
SHA1:	C50FC8158362A2905CD9126D0FC4B344DBA63144
SHA-256:	73DC54806E35B3FAEF0E6550F125F7D1F3B368227197EACDF5060341704E4EC2
SHA-512:	225C66BD3CAA8B43F2CA42CC561A7C99706088266DDC75B0D5191A485978D65F2C74CB7F507528B1418FFFA692AF6CB4680B4B6DC578CD89BA78E389D181DED9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube.com/s/player/51ff6aac/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;'use strict';var gOa=function(a,b){var c=(b-a.i)/(a.l-a.i);if(0>=c)return 0;if(1<=c)return 1;for(var d=0,e=1,f=0,h=0;8>h;h++){f=g.Yq(a,c);var l=(g.Yq(a,c+1E-6)-f)/1E-6;if(1E-6>Math.abs(f-b))return c;if(1E-6>Math.abs(l))break;else f<b?d=c:e=c,c-=(f-b)/l}for(h=0;1E-6<Math.abs(f-b)&&8>h;h++)f<b?(d=c,c=(c+e)/2):(e=c,c=(c+d)/2),f=g.Yq(a,c);return c},j5=function(){return{D:"svg",.U:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},S:[{D:"path",Kb:!0,K:"ytp-svg-fill",U:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .09,0 c .3,.5 .71,.88 1.21,1.18 .5,.3 1.08,.40 1.68,.40 1.1,0 1.99,-0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\errorPageStrings[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	9440
Entropy (8bit):	5.164796203267696
Encrypted:	false
SSDEEP:	192:JsUOG1yNlX6ZzWpHOWLia16Cb7b4sUOG1yNlX6ZzWpHOWLia16Cb7bk:JsDhpNOWLiIb7b4sDhpNOWLiIb7bk
MD5:	9FDEE838E7C036092E81A4E7CC949643
SHA1:	364FC6C36972FFD803E5999AD501F3D7A2216FDF
SHA-256:	C6BF586821E13F7F6D6EF75AA82E69BD5E3E1336615C85AE513C70704F5C0787
SHA-512:	622BC3BD9F0615C191B03F2E8D018867C9D9ADCF1015DA5FB4D3462D71512B72558B32CA9F74A925C150B57FD232ABD48AFFC8D32128C50540DF02FCA8ECBB2B
Malicious:	false
Reputation:	low
Preview:	.//Split out for localization...var L_GOBACK_TEXT = "Go back to the previous page.";..var L_REFRESH_TEXT = "Refresh the page.";..var L_MOREINFO_TEXT = "More information";..var L_OFFLINE_USERS_TEXT = "For offline users";..var L_RELOAD_TEXT = "Retype the address.";..var L_HIDE_HOTKEYS_TEXT = "Hide tab shortcuts";..var L_SHOW_HOTKEYS_TEXT = "Show more tab shortcuts";..var L_CONNECTION_OFF_TEXT = "You are not connected to the Internet. Check your Internet connection.";..var L_CONNECTION_ON_TEXT = "It appears you are connected to the Internet, but you might want to try to reconnect to the Internet.";....//used by invalidcert.js and hstscerterror.js..var L_CertUnknownCA_TEXT = "Your PC doesn\u2019t trust this website\u2019s security certificate.";..var L_CertExpired_TEXT = "The website\u2019s security certificate is not yet valid or has expired.";..var L_CertCNMismatch_TEXT = "The hostname in the website\u2019s security certificate differs from the website you are trying to visit.";..var L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\errorPageStrings[2] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4720
Entropy (8bit):	5.164796203267696
Encrypted:	false
SSDEEP:	96:z9UUiqRxqH211CUIRgRLnRynjZbRXkRPRk6C87Apsat/5/+mhPcF+5g+mOQb7A9o:JsUOG1yNlX6ZzWpHOWLia16Cb7bk
MD5:	D65EC06F21C379C87040B83CC1ABAC6B
SHA1:	208D0A0BB775661758394BE7E4AFB18357E46C8B
SHA-256:	A1270E90CEA31B46432EC44731BF4400D22B38EB2855326BF934FE8F1B169A4F
SHA-512:	8A166D26B49A5D95AEA49BC649E5EA58786A2191F4D2ADAC6F5FBB7523940CE4482D6A2502AA870A931224F215CB2010A8C9B99A2C1820150E4D365CAB28299E
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/errorPageStrings.js
Preview:	.//Split out for localization...var L_GOBACK_TEXT = "Go back to the previous page.";..var L_REFRESH_TEXT = "Refresh the page.";..var L_MOREINFO_TEXT = "More information";..var L_OFFLINE_USERS_TEXT = "For offline users";..var L_RELOAD_TEXT = "Retype the address.";..var L_HIDE_HOTKEYS_TEXT = "Hide tab shortcuts";..var L_SHOW_HOTKEYS_TEXT = "Show more tab shortcuts";..var L_CONNECTION_OFF_TEXT = "You are not connected to the Internet. Check your Internet connection.";..var L_CONNECTION_ON_TEXT = "It appears you are connected to the Internet, but you might want to try to reconnect to the Internet.";....//used by invalidcert.js and hstscerterror.js..var L_CertUnknownCA_TEXT = "Your PC doesn\u2019t trust this website\u2019s security certificate.";..var L_CertExpired_TEXT = "The website\u2019s security certificate is not yet valid or has expired.";..var L_CertCNMismatch_TEXT = "The hostname in the website\u2019s security certificate differs from the website you are trying to visit.";..var L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\f6078781a05fe1bcb0902d23dbbb2662c8d200b3.243bd8614b3f00747a7b[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	25893
Entropy (8bit):	5.265500485719315
Encrypted:	false
SSDEEP:	384:0K4nkeEECaat2c/CxQ4csZ6wBzT+v55xEI79cyxoC9blFHCDu:btdiJKB5xjroC9JFHCy
MD5:	D1F587D18E413A6F385550F3327B8F5D
SHA1:	453265F29DFE8F41678942CDA72DF559004129C7
SHA-256:	A50632A5336A411C61B36A1C62637A0744555B2B0A9F3B1364AF93BC008251C6
SHA-512:	27398142AD3BB38E65C60F433B91DBB097438C0C5960B0E981FACECD89A8EF6D02ED5A400273DF0FCAE785178BC0BCE2CAA8145F801A44C13E7F8BC8F8F61982
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/_next/static/chunks/f6078781a05fe1bcb0902d23dbbb2662c8d200b3.243bd8614b3f00747a7b.js
Preview:	(window.webpackJsonp_N_E=window.webpackJsonp_N_E\|\|[]).push([[7],{"/jkW":function(e,t,r){"use strict";t.__esModule=!0,t.isDynamicRoute=function(e){return n.test(e)};var n=/\/\[[^/]+?\](?=\/\|$)/},"0Bsm":function(e,t,r){"use strict";var n=r("AroE");t.__esModule=!0,t.default=function(e){function t(t){return a.default.createElement(e,Object.assign({router:(0,o.useRouter)()},t))}t.getInitialProps=e.getInitialProps,t.origGetInitialProps=e.origGetInitialProps,!1;return t};var a=n(r("q1tI")),o=r("nOHt")},"3WeD":function(e,t,r){"use strict";var n=r("zoAU");function a(e){return"string"===typeof e\|\|"number"===typeof e&&!isNaN(e)\|\|"boolean"===typeof e?String(e):""}t.__esModule=!0,t.searchParamsToUrlQuery=function(e){var t={};return e.forEach((function(e,r){"undefined"===typeof t[r]?t[r]=e:Array.isArray(t[r])?t[r].push(e):t[r]=[t[r],e]})),t},t.urlQueryToSearchParams=function(e){var t=new URLSearchParams;return Object.entries(e).forEach((function(e){var r=n(e,2),o=r[0],i=r[1];Array.isArray(i)?i.forEa

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\f[1].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	7957
Entropy (8bit):	5.292489920551267
Encrypted:	false
SSDEEP:	192:WjA2BCNX6e4neZMBScBFhvhZn6WHhjhYO7uUZ:Ey6H+MBSendHk6
MD5:	31F41BECAD68356E063B2BC8CAC491C5
SHA1:	4E40ECE80135DC03D1F84FFA5780115B4E0E0472
SHA-256:	966EE1486939F4B7C9815A6CE8DD42420C5859A42EFDBBD5B91AFF45E0B1CC38
SHA-512:	CB0C8F557851717D9616A6462D3AACF9CA1CF93CD9E14D4E4C4F4E21B1367BF16FB8F98713DA81FEAD2570704B18710AC0C2123B46FB2A5D90A25D67460266CA
Malicious:	false
Reputation:	low
IE Cache URL:	https://pagead2.googlesyndication.com/pagead/js/r20210701/r20110914/elements/html/omrhp.js
Preview:	(function(){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function h(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function k(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:h(a)}}function l(a){for(var b,c=[];!(b=a.next()).done;)c.push(b.value);return c}var m="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},n; .if("function"==typeof Object.setPrototypeOf)n=Object.setPrototypeOf;else{var p;a:{var q={a:!0},r={};try{r.__proto__=q;p=r.a;break a}catch(a){}p=!1}n=p?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var t=n; .function u(a,b){a.prototype=m(b.prototype);a.prototype.constructor=a;if(t)t(a,b);else for(var c in b)if("prototype"!=c)if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.o

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\favicon[1].ico Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	415
Entropy (8bit):	7.298852572425641
Encrypted:	false
SSDEEP:	12:6v/7XOiMLJckyb6rOYfKzOeKTqUMN4ahz:LFybsfKzgqpN4ax
MD5:	8342308EA07BCAE26E83A5D4BC69F31B
SHA1:	FAF4412D5A0A93113BD946298D674E5891779641
SHA-256:	1E9E67392D2CA8BC013492737973FF7DD89F0FB30E56460EE32A2214756284C9
SHA-512:	E63B414451059110EEB5697AF57987D478F3A710AAB7DFB2CC06EE5D84A517AF9CE0B55B40ACA9A392B4777C66017753708D31C95163414F4D7089576D4141E6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.intuit.com/etc/designs/harmony/images/favicon/icom/favicon.ico
Preview:	.PNG........IHDR................a...fIDAT8...OK.Q.......a..s.(.E.6..b6~..\I.%ZI...`h...."E.9....M.f.Q.....s..r.`.....P.L...)..........h....p4+:..Pk.b.#../...r.k..4.0..N..W.{.......12..,.(..VD...........edT.skq..Hg0..wO..@..$.a.\...'P.v........~.....)...n.4......e..2...F....R.D/..8~;i.n]..?..F.L...BD....'`I][..;.........9........;.....MSTB'...k...\...A0.\|.e...9..4.(Z.o.!.........{....K....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\favicon[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	303
Entropy (8bit):	6.4188114641524825
Encrypted:	false
SSDEEP:	6:6v/lhPfQkeJ78+9QQQQQQGygX7wGOzX+8TcNdk1Za9/7aGQQqHVKn43bp:6v/7Te+QQQQQGyuleXcMZa9euqHVKn41
MD5:	8C9ABB3B341267527A3786490E6D64CF
SHA1:	0FDD86FA333567F1B43683325FAF5587CEBDC8DC
SHA-256:	B4CD687EB48207422BC12365B804B14B55F974F45B54EC6FD24931CBCADDC2F3
SHA-512:	BA7EBEC0FEB66B0B6C1ECF132C6A62727CE2738C7E80F66AECD3EBB4AD3CA6BCB2546EACD9201F80A69C25817BE6E7B7E6B7D021E8C8FEB80D6B0671C1EFD00E
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/cas/dam/IMAGE/A348MDYum/favicon.png
Preview:	.PNG........IHDR.............(-.S...ZPLTE...3..3..3..3..4..4..4..4..4..4..4..4..#......z.4..#...........................w..\|..............tRNS.2.....2.......O......orNT..w....gIDAT..e.G.. ..c.[............~...]..PP.V...?&.aq..f.dX3.....g2%#`.1^7.....E\|P.,.....%k.a.t..".g../...]........IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\fb61fc4bfc85ad86f11342e699d685e9[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	13663
Entropy (8bit):	4.850378997553469
Encrypted:	false
SSDEEP:	96:+y2aZrsHBAPC0GDy8gUFnD0alywjj/+TjD66Nt1ygnCL1YsrHwITnrU2TJbIrbon:baH/WMJYaNUyXNIr0n
MD5:	FB61FC4BFC85AD86F11342E699D685E9
SHA1:	5EA7B864D6A727F9A7CF5023BB556CC221564FEF
SHA-256:	92C06932C12A74573114DB6FEAA94C43A980FB7B5DC0014A1AEF32F8C222F849
SHA-512:	DD782F29B937B2CB6365C758B246D020BA5B718C797E5208EA0401EE3B599C77826219CE5612F137BADC34F97D59C80A427965F455A56829BEA790D2E756E605
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/policies/privacy/fb61fc4bfc85ad86f11342e699d685e9.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="12" y1="143" x2="32" y2="143" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/>. <stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/>. <stop offset="0.624" stop-color="#9aa0a6" stop-opacity="0.4"/>. <stop offset="0.786" stop-color="#9aa0a6" stop-opacity="0.626"/>. <stop offset="0.946" stop-color="#9aa0a6" stop-opacity="0.898"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="72" y1="165" x2="144" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#bdc1c6" stop-opacity="0"/>. <stop offset="0.137" s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\fbevents[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	193548
Entropy (8bit):	5.393968298907177
Encrypted:	false
SSDEEP:	1536:YM+OWtI6ay9Xes12KqQqfUThe7Kdv0a9sIOs1jaV7vu5Dm20C+QNSMngySZYSlIq:YzOW5jSVnYDGeWzOW5jSVnYDGeB
MD5:	C743B794CF7C44A3A53B65DBBF44C2D9
SHA1:	91D8B00A42727D571EB41F545C843F6FD871C8AD
SHA-256:	F59ED5DB1EBDAEFA953390796EECC3EEDB32C111B4034BDA1BD973E25662F60B
SHA-512:	BD529CF4B55D0807E48351DC7F5C7A3C85083D997DD48E264A457FDF19F3ACDA1A25D18A7506EEFFD54D976D15093D5AC1ACC01BBDF28BAF073E12D3E26F92AA
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\fdc2b659c99428f4330d4325bdd9e159[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	506
Entropy (8bit):	5.170695519650428
Encrypted:	false
SSDEEP:	6:BwKT1WKbu3h837gbwuqmL2A5iOi8mgO9lVjw3AhuRmJRw+WRouwz+RwjH7w3jHeQ:1cKOaSn2yul8mfZcqUerOnGAyif
MD5:	3D989FCF53BBD3FEA90D845FC159F515
SHA1:	4AE7AF85621C044B6DD88DCD73E46892CDB56C9C
SHA-256:	086A3E79F298FAF5C2195F64AEB0DE12EC6AA102BA0E0DE65554154BA5E21798
SHA-512:	9B87D5AFEAF07436D5388A2CE94DD1D66D653E2571900C327D995603B72671C79B323C563B91A27895036E6903FEC9C0DCEBC6A8EEAA091910A8F09A96D8120F
Malicious:	false
Reputation:	low
IE Cache URL:	https://nexus.ensighten.com/intuit/us_sbg_prod/code/fdc2b659c99428f4330d4325bdd9e159.js?conditionId0=4884820
Preview:	Bootstrapper.bindDOMParsed(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;try{var tr=(new Date).getTime();var iTag=document.createElement("img");iTag.setAttribute("src","//insight.adsrvr.org/track/pxl/?adv\x3dk572t27\x26ct\x3d0:4o7vc7v\x26fmt\x3d3");iTag.setAttribute("width","1");iTag.setAttribute("height","1");iTag.setAttribute("style","border-style:none;");itag.setAttribute("alt","");document.body.appendChild(iTag)}catch(err){}},3294277,649499);

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\fetch-polyfill[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Pascal source, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8543
Entropy (8bit):	5.238064281324506
Encrypted:	false
SSDEEP:	192:oQHdiEslZc0rsNYNU5mSJHqI03aej6tZoaMLQO/x5/P80+HcW:ocHslLsP5muHqI0Jj6tZcUO/x5+V
MD5:	04E3CC8A9641B3F9F9C9370F4E9B5BDD
SHA1:	9602A891F583094BB04FD407B253ABCAFFB8C8D0
SHA-256:	DE6C4FFA2BD9FD283610E28D0DB2EC48607AAB39D213A51AEF248673A0A7E980
SHA-512:	58942BCC0F39D620A475B65C1AEB4F18872F68F22C89DEC076906A0DB8BC2B7CCA9357710A7824A0FA7404FF73F41013AECA34609CAACD2187414F7BD0D490D6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube.com/s/player/51ff6aac/fetch-polyfill.vflset/fetch-polyfill.js
Preview:	/*.. Copyright (c) 2014-2016 GitHub, Inc... Permission is hereby granted, free of charge, to any person obtaining. a copy of this software and associated documentation files (the. "Software"), to deal in the Software without restriction, including. without limitation the rights to use, copy, modify, merge, publish,. distribute, sublicense, and/or sell copies of the Software, and to. permit persons to whom the Software is furnished to do so, subject to. the following conditions:.. The above copyright notice and this permission notice shall be. included in all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,. EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF. MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND. NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE. LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION. OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\form[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4630
Entropy (8bit):	5.18762452757951
Encrypted:	false
SSDEEP:	48:vHDeEakbiwqTIKqtADbQB9Sjp1cqi3lFcXlSQfK:vaEakcMtXSjjc/bc1HfK
MD5:	63BC60178119FB15DF44D9E58BF9F59D
SHA1:	4A3D245ED0167D9C06F146FFAD02420131584EE6
SHA-256:	C756375E9F77417FBB4F353BCBA732804E83A27BD33CBAEFA0EAD4FFC96A1C96
SHA-512:	7C7725527F5B3FD6424788AFC01789FA0140BFB97F9259964B349C4E89A2C8A8CB484485A42E5BFC6EC44CFC6581CFA714F104C49245C63265C6915D900DED4C
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/form.css
Preview:	:root{--breakpointsSmall:48rem;--breakpointsMedium:64rem}@media (min-width:48rem){.Form_form__d93dd8eb{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center}}@media (max-width:48rem){.Form_formFieldsContainer__d93dd8eb{width:100%}}.Form_vpadding__d93dd8eb{padding-top:2.5rem;padding-bottom:2.5rem}.Form_hpadding__d93dd8eb{padding-left:2.5rem;padding-right:2.5rem}.Form_wrap__d93dd8eb{width:100%;max-width:85rem;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center}.Form_img__d93dd8eb img{width:100%;vertical-align:bottom}.Form_grey08__d93dd8eb{background:#f4f5f8;background:var(--color-grey-08)}.Form_white__d93dd8eb{background:#fff;background:var(--color-white)}.Form_transparent__d93dd8eb{background:transparent}.Form_sand02__d93dd8eb{background:#f7f8f3;background:var(--color-sand-02)}.Form_tofu__d93dd8eb{background:#f3f2ef;background:var(--color-rw-tofu)}.Form

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\gtm[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	88423
Entropy (8bit):	5.519802990570138
Encrypted:	false
SSDEEP:	1536:5g+8meNNwB900GfIge7tb/zWrv/Y7HlOty/P8paP+a1h9PZwKajY0ak:5g5meNNR0L7FWU8tPM+/Yzk
MD5:	6D7761AD02112183555BA1B6C4477266
SHA1:	E2A13DA30045A64B69C4A4BFA76A324E64F14A38
SHA-256:	9DA39C7D38702F9CDF19061D7DC9D710FE1CDBB82E866015AC19E902C46DE57C
SHA-512:	A0933435A0C0616551552589D0C4753EF65BAB7E6742BEF1BA59EBB997960989ACAB96853E20AD35E2BF2D8FAA8C4C6103E70813C14DCA842C7989716EF4FBCB
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtm.js?id=GTM-KJ4KF2F
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"1",. . "macros":[{. "function":"__e". },{. "function":"__gas",. "vtp_cookieDomain":"auto",. "vtp_doubleClick":false,. "vtp_setTrackerName":false,. "vtp_useDebugVersion":false,. "vtp_useHashAutoLink":false,. "vtp_decorateFormsAutoLink":false,. "vtp_enableLinkId":false,. "vtp_enableEcommerce":false,. "vtp_trackingId":"UA-18267335-2",. "vtp_enableRecaptchaOption":false,. "vtp_enableUaRlsa":false,. "vtp_enableUseInternalVersion":false,. "vtp_enableGA4Schema":false. },{. "function":"__v",. "vtp_name":"gtm.triggers",. "vtp_dataLayerVersion":2,. "vtp_setDefaultValue":true,. "vtp_defaultValue":"". },{. "function":"__v",. "vtp_name":"gtm.elementUrl",. "vtp_dataLayerVersion":1. },{. "function":"__u",. "vtp_component":"URL",. "vtp_enableMultiQueryKeys

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\httpErrorPagesScripts[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	24210
Entropy (8bit):	5.451485481468043
Encrypted:	false
SSDEEP:	384:xPini/i+1Btvjy815ZVUwiki3ayimi5eqBG1fm304Pini/i+1Btvjy815ZVUwik5:8i6+1B1y815PUNZ3ab3fBK9i6+1B1y8d
MD5:	7B6C8BD51E49F7F56E2B21311D0EA59B
SHA1:	EDB0F7D21BCEC6C48DEDC14E9ED41383740BAE37
SHA-256:	620BD33A4E0358498D9429FE2DBA00F85A86D6059FA796B482E2A9F6B0794F2D
SHA-512:	DD1D524872EE165D230BE5B3872DEE108B806AB684AACFA955F07B7A87C1ACA63FA3B59210442E1E3C9A2D33409583E0AC3B1A6A0D4EB91BBEEF62D311FD1BC4
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/httpErrorPagesScripts.js
Preview:	...function isExternalUrlSafeForNavigation(urlStr)..{..var regEx = new RegExp("^(http(s?)\|ftp\|file)://", "i");..return regEx.exec(urlStr);..}..function clickRefresh()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..window.location.replace(location.substring(poundIndex+1));..}..}..function navCancelInit()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..var bElement = document.createElement("A");..bElement.innerText = L_REFRESH_TEXT;..bElement.href = 'javascript:clickRefresh()';..navCancelContainer.appendChild(bElement);..}..else..{..var textNode = document.createTextNode(L_RELOAD_TEXT);..navCancelContainer.appendChild(textNode);..}..}..function getDisplayValue(elem

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\icom-hp-areawehire-mint-logo[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 220 x 81, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4070
Entropy (8bit):	7.777735378549729
Encrypted:	false
SSDEEP:	96:xz7iv/FKwLazWuqWYRCGn9Jln2Hb07eBKyL3unUMHrE4gkcm:d76FmWvwGnZu0ix3ut7zcm
MD5:	CE0DBB689F42FF4AAEBD0773C83A58BF
SHA1:	F24D5423CC2D4846AAF7E4C8678393D536966E74
SHA-256:	5993CAC75E313AF2DA62F789E3BD5D7894E6B8B31D37862ED42C54B6A8EA2BF8
SHA-512:	9A40A478F80219061C890449017C88FF1EBAFE3E7F211010B1BBD040255736EFF1B3C1E89F2B57767DD4161BDC56B369CC8DEBE2C7FAAC329763D26CDC5C8DC3
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.intuit.com/oicms/i_com/uploads/2021/01/icom-hp-areawehire-mint-logo.png
Preview:	.PNG........IHDR.......Q......t.....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:853523DB51DD11EBBB5AF9A83BE88C20" xmpMM:InstanceID="xmp.iid:853523DA51DD11EBBB5AF9A83BE88C20" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1C44560A123F11EB9A5B84B34D78D07B" stRef:documentID="xmp.did:1C44560B123F11EB9A5B84B34D78D07B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.$.....YIDATx...p..........E .Rn..9.Rk-..P.....B..ZF:..:U..8..S...QH.GU..]@9...p... !..<x.........N.........o

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\icom-hp-areawehire-quickbooks-logo[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 220 x 81, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7279
Entropy (8bit):	7.883860224677228
Encrypted:	false
SSDEEP:	96:j2qiIQNaASBgquVEokQKctF1uJX/8mtB/PPu1b2RNZkX1s1bo8l+X2hPVQ5:zaqumJctFeXUmtBWBmkX1s1FIX2hPVQ5
MD5:	8D4EC199F2BCFB8B15E287B1B1F4C48B
SHA1:	1108F2321D6F77C7F2D3811DCE5151F0B7002C80
SHA-256:	F3AD624E4F79435DF9B2A5F4EA8D89694444FB970F1EEEA9E91191A2C71D993A
SHA-512:	864A439165E136B5661457D24F9C8002EE4BD0A3A765F467A1ABF54CA533E0257E7E789B0020A6C0262C9DE790BC0B2762F5443528C0927C6A9FE675F605A297
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.intuit.com/oicms/i_com/uploads/2020/10/icom-hp-areawehire-quickbooks-logo.png
Preview:	.PNG........IHDR.......Q......t.....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmpMM:InstanceID="xmp.iid:0B6F132A123F11EB95419DC04847DB16" xmpMM:DocumentID="xmp.did:0B6F132B123F11EB95419DC04847DB16"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0B6F1328123F11EB95419DC04847DB16" stRef:documentID="xmp.did:0B6F1329123F11EB95419DC04847DB16"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.=/6....IDATx..]..]E....o..{...!$..,.".".0.D..Bf..Q.....n@..A.2..7.!N.40...H.a.. ..$.,...t....~..eN.w^.rs_..@.......V.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\icom-hp-areawehire-turbotax-logo[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 220 x 81, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6327
Entropy (8bit):	7.902540736836254
Encrypted:	false
SSDEEP:	96:j2oaWs8FkQFfOaw+Z6MExQDJKyVAswikFkNgcz9Ad0crdwCGjHzkh0m:rfOawe0gJpOsEFygcq/dw7kh0m
MD5:	4D83756A0D4AA0261546F5B36926EF3A
SHA1:	4C6BB327358F55905DCDFA218374854158DFA706
SHA-256:	07049599ADDFA866FB60E5B2FD7FB4E81118D7EC285F0ACB176A39601362E3FA
SHA-512:	03FC58CB3A2826DD682D3B779A4426A2AF306B2D687F13DE9048D3AD76244F52C618D27B9D0FE92722D8C79E9EEF9E7D8E1A4B5747E3B41B11665B42E5F78C17
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.intuit.com/oicms/i_com/uploads/2020/10/icom-hp-areawehire-turbotax-logo.png
Preview:	.PNG........IHDR.......Q......t.....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmpMM:InstanceID="xmp.iid:FCA71899123E11EB8B56DF68C81EB5B6" xmpMM:DocumentID="xmp.did:FCA7189A123E11EB8B56DF68C81EB5B6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FCA71897123E11EB8B56DF68C81EB5B6" stRef:documentID="xmp.did:FCA71898123E11EB8B56DF68C81EB5B6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx..]...U..^Uu.t.=.9rBL...}.r..B..d.#."....(."!......,9@\.U. ....AV0H@.E..I&3..=3}...z.M.zf.!".......x..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ie11CustomProperties.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	8581
Entropy (8bit):	5.339359916611532
Encrypted:	false
SSDEEP:	192:Cl5qIVrV75WdEjQ2fOH78KXrGMog4hFwORZOVyGpYoI5rfr9zkC:Cl/FIdEDfs8Kv8mORUyiC5rxzkC
MD5:	1CFECAB2D76F6FC29F235283FA0CACF7
SHA1:	BB09C4906B0E9C47B075C9A32F9A22F43435D9D6
SHA-256:	E229703C6D56D7A907A82499F8379621CE740CAFE763EC05205B7E5FC5F2CB2F
SHA-512:	A69FC3965C0FD75AE475A14274B407C3B273CE6709F4F2146F5B98F63F27986CB546A7B70933EB2DD0D18661315F24925137E7B8C56434590540717BD6EAC738
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.jsdelivr.net/gh/nuxodin/ie11CustomProperties@4.1.0/ie11CustomProperties.min.js
Preview:	/*. Minified by jsDelivr using Terser v3.14.1.. * Original file: /gh/nuxodin/ie11CustomProperties@4.1.0/ie11CustomProperties.js. . Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files. */.!function(){"use strict";var e=document.createElement("i");if(e.style.setProperty("--x","y"),"y"!==e.style.getPropertyValue("--x")&&e.msMatchesSelector){Element.prototype.matches\|\|(Element.prototype.matches=Element.prototype.msMatchesSelector);var t,r=[],n=document,o=!1;document.addEventListener("DOMContentLoaded",function(){o=!0}),"classList"in Element.prototype\|\|H("classList",HTMLElement.prototype,Element.prototype),"innerHTML"in Element.prototype\|\|H("innerHTML",HTMLElement.prototype,Element.prototype),"runtimeStyle"in Element.prototype\|\|H("runtimeStyle",HTMLElement.prototype,Element.prototype),"sheet"in SVGStyleElement.prototype\|\|Object.defineProperty(SVGStyleElement.prototype,"sheet",{get:function(){for(var e,t=document.styl

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\index[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	236
Entropy (8bit):	5.24876147747423
Encrypted:	false
SSDEEP:	3:IskN20EFNjJ8S/7A+KWRIJiYEUFLZxs4bSl02rBsSZ7NE7uR0Lq9DISLIxXWKtv4:wRkrQWR0iYBtqWt2aSyujLIhNtZoP
MD5:	6F5C0709F8592F44958ECA2DF708F80A
SHA1:	99545CB8D41335ADD12E7F628038082D06288579
SHA-256:	809C5BC6ECB9DEFB18CD31F6DFA5D2B68A6EAD03E4EDB0338B8F961145E3B96D
SHA-512:	59F6D82DC25A2A3500C9543DD553CA115959A49F3CC17DF2BDC34DDDDF1E1FFDF263F81FEBA9CBD1D3A12D6ACD599E9B72A7D102EFDBB1C165FF0CAAB5C2BF7F
Malicious:	false
Reputation:	low
Preview:	<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8">.<TITLE>301 Moved</TITLE></HEAD><BODY>.<H1>301 Moved</H1>.The document has moved.<A HREF="https://www.google.com/recaptcha/about/">here</A>...</BODY></HTML>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\insight.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	4774
Entropy (8bit):	5.518986103890679
Encrypted:	false
SSDEEP:	96:yvc+dEEqOmEM0fUBpL5CN6jKaYmd97KHijQcAoyvXe/J2Gnzr8D/e:x1EOEgzAK7N+oyvIJhv2e
MD5:	C4440888B2ED74F2A104115FC1D3C737
SHA1:	81359FD8D29CF6AFFD5B27317C379E53DDAEF00F
SHA-256:	6E6E6A03E72A528C28884B50BF296425667F38DD0AAF1DD17CE89199FFC85271
SHA-512:	5BE97F4FB111C4BBF32543B7581796AEBB3277585B5F7AF909E4E99765523ECCAFF300DA81533F6F0FE2A27D4A775DE3F3731E6B4E837B5070CC988A7A699C09
Malicious:	false
Reputation:	low
IE Cache URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(){return(new Date).getTime()}function c(n,e){var i=n.cookie.match(new RegExp("(?:^\|; )"+encodeURIComponent(e).replace(/([\.$?\|{}\[\]\\\/\+^])/g,"\\$1")+"=([^;])"));return i?decodeURIComponent(i[1]):""}function l(n,e,i,r){var o=r.days_until_expiration,t=void 0===o?1:o,a=r.path,d=void 0===a?"/":a,_=r.domain,c=void 0===_?null:_,l=function(n){var e=(new Date).getTime()+n,i=new Date;return i.setTime(e),i.toUTCString()}(864e5*t),s=encodeURIComponent(e)+"="+encodeURIComponent(i);s=s+";expires="+l,c&&(s=s+";domain="+c),s=s+";path="+d,n.cookie=s}function r(n){return n.webkit&&n.webkit.messageHandlers&&n.webkit.messageHandlers.LIPixli\|\|!1}function e(n,e){var i="https://px.ads.linkedin.com/collect?"+e;r(n)?n.webkit.messageHandlers.LIPixli.postMessage(i):(new n.Image).src=i}function i(n,e){var i="https://px.ads.linkedin.com/insight_tag_errors.gif?"+e;r(n)?n.webkit.messageHandlers.LIPixli.postMessage(i):(new n.Image).src=i}function s(n){return n.map(functio

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\invoice-payments-product-qbo-us-desktop@2x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 1440 x 1008, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	48603
Entropy (8bit):	7.9589605453677486
Encrypted:	false
SSDEEP:	768:8eA6yiV64K0Ip57vsn7z38lCNzglvfla9jz/vjTC0IQw+YUPN89k70p31lun0YEj:8/lPpU7z3zw3Q9jz/S18YUckwpFlunRE
MD5:	A8CEEC74FF20FF43F3555C70A3AEE92B
SHA1:	3F26D31DF0C5AB581DE3F14C176CB8C3E20271EA
SHA-256:	4B18A81087E59566307EE6C5D4018B5CEAA7EA649366532E88B953B53CCF085B
SHA-512:	780319CC72BC6A94734B98200D49C1231DC9942310C124D4F1585DE815A0452852E3924A8C87AE0446A75DF04B4EE9504EE34CA78B624482F520233DC1BAE95F
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/product/invoice-payments-product-qbo-us-desktop@2x.png
Preview:	.PNG........IHDR.............. )7....PLTE............................................................___bbb......```......=....................ZZZ.........................89:......?DE.....pppwww...aaa......]]].Wa....dn..........x..y..........9:=.....................4........,.....ILO............................................................................vvw.........{{{...rrr.............hs....jv\|}....Tmp......jko...PPSRRUghk......DEH...abe...._.....mxwx\|\]`.{..............p{.......................#e...211......#2u...$9.......s....sst^.R......N..4a0.....8F9......$?.......UWZ.v.E.8%G.$D........{.q........G.9..........@@@g.......9..W.....x.w.n.............m.c~..:F.w..=W....sy...4/.#..............T]..Oa..n..R......Zh.....i6R5.3....Z..ey.Xm.s...}..yU......u......Z...AtRNS.......p .U`M&iD-<5...$y...@`......P."e.\|9..CU....f......X......RIDATx...M..0..PNa+v.,,....w.@j..n.....K...........B.K)1.a..Iw...;....g1.R.>.\|..y.9.c..t..G...!.s^......%...-?g

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ius-base-e51b3b3c[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	256592
Entropy (8bit):	5.8641380578758415
Encrypted:	false
SSDEEP:	3072:G50ephJw+A5o0jOopE79jwrxuoLZvNZcSuVVaMGS2XyTkBy+2Om:Ga7hOoO9aZ8SuVLTrd
MD5:	18AA08C13AEE23F09A5F905432D424D7
SHA1:	9A9AC1792539639E9F63774C369519727C31D640
SHA-256:	6250CFB70FF4C463BEA4BA23DD7F089B489945E468B5CA91EE9447DF0A768A19
SHA-512:	807806D5D5FE002CA2EB461ACEA29858D7B59E6CBD795ABBF4AD423FDC367256F6E579DFEA3C1B5E488423F473D25C4EA9D53504E1516745F282A61264366512
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/ius-base-e51b3b3c.js
Preview:	/! For license information please see ius-base-e51b3b3c.js.LICENSE.txt /.(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[27,111],{1577:function(n,e,t){"use strict";t.r(e),t.d(e,"ReactComponent",(function(){return a}));var i=t(324);function c(){return(c=Object.assign\|\|function(n){for(var e=1;e<arguments.length;e++){var t=arguments[e];for(var i in t)Object.prototype.hasOwnProperty.call(t,i)&&(n[i]=t[i])}return n}).apply(this,arguments)}var l=i.createElement("path",{fillRule:"evenodd",clipRule:"evenodd",d:"M8 0c2.796 0 4.893 2.184 4.996 5.262L13 5.5V7h1a2 2 0 012 2v9a2 2 0 01-2 2H2a2 2 0 01-2-2V9a2 2 0 012-2h1V5.5C3 2.298 5.133 0 8 0zm6 9H2v9h12V9zm-6 2a2 2 0 011.001 3.732L9 15.2c0 .442-.448.8-1 .8-.513 0-.936-.309-.993-.707L7 15.2v-.468A2 2 0 018 11zm0-9C6.332 2 5.088 3.277 5.005 5.282L5 5.5V7h6V5.5C11 3.37 9.728 2 8 2z",fill:"#fff"});function a(n){return i.createElement("svg",c({width:16,height:20,fill:"none",xmlns:"http://www.w3.org/2000/svg"},n),l)}e.default="data:ima

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ius-recaptcha-widget-d8cc2b8e[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	27140
Entropy (8bit):	5.3907111708217
Encrypted:	false
SSDEEP:	384:oxtVXagVLuvyMEGqVVtZ2ds5qiiraxpyoiiWRPOtAb37hkU010CIa9CDGGay+zrH:aPhw70qvmxpoLR2tA7NkU0HIasDGGdgb
MD5:	3181E182FF2B4E386AA65601AA0F1937
SHA1:	0229541E2CDDAB04E7AFFF3F1F5817D71D6D1DF6
SHA-256:	7A63CA2139108FADCFADFC3AB0A0E976E4412D878F7B587D6699A7C577B4E5F1
SHA-512:	3C587E2225DFAA27AD518D2EF2D13A3CE4058F427613E3D46C396A5E8BD5170C9C97691F8EB631F512B7D3E0543F2B80E077BA404F53D029155F55A008F613DC
Malicious:	false
Reputation:	low
IE Cache URL:	https://plugin.intuitcdn.net/identity-authn-core-ui/scripts/ius-recaptcha-widget-d8cc2b8e.js
Preview:	(window.iuxWebWebackJsonP=window.iuxWebWebackJsonP\|\|[]).push([[81],{105:function(e,t,n){"use strict";var i=n(3),a=n(49).find,r=n(116),c="find",o=!0;c in[]&&Array(1).find((function(){o=!1})),i({target:"Array",proto:!0,forced:o},{find:function(e){return a(this,e,arguments.length>1?arguments[1]:void 0)}}),r(c)},107:function(e,t,n){var i=n(3),a=n(175);i({global:!0,forced:parseInt!=a},{parseInt:a})},11:function(e,t,n){"use strict";n(26),n(12),n(168);var i=function(e){var t={};try{var n,i=/\+/g,a=/([^&=]+)=?([^&]*)/g,r=function(e){return decodeURIComponent(e.replace(i," "))},c=window?window.location.search.substring(1):void 0;for(t.query=c?"?".concat(c):"";n=a.exec(c);)t[r(n[1])]=r(n[2])}catch(e){return t}return t}();t.a=i},130:function(e,t,n){"use strict";n(64);t.a=function(e,t,n,i){var a=0;"function"!=typeof t&&console.warn("Warning - using retry with a non-reevaluable stopCondition does not make sense.");var r=setInterval((function(){return("function"==typeof t?t():t)?(clearInterval(r),e(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ius.xdr.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	115129
Entropy (8bit):	5.451734645535224
Encrypted:	false
SSDEEP:	1536:N6664h1dpr9e6xb+SWqQKN7EQkPeBYJNXevxjfGvK0DsDaRIfANYS09K55UXWFpt:PdHPQKNIPeBc5CSzdtAu3/
MD5:	BA8915C88EA25E757BD9613AE601285C
SHA1:	546989D99F1EE00B77D964E0484BBA1C17E21E11
SHA-256:	60D119357A6569748336A4B86F35EAA287D4B6BC507B6C583425E12A35C3C04A
SHA-512:	97C71A429E893256EED1C9EFC40E2094D7045864C08AB809F110CE17C38D28B82804EA8868698C39098B51E5BA7F84CEC45A735DB57B8348FE0F103A2A73A800
Malicious:	false
Reputation:	low
IE Cache URL:	https://accounts.intuit.com/scripts/ius.xdr.min.js?v=1.70.0.356
Preview:	(function(s,p){function ba(a){return c.isWindow(a)?a:9===a.nodeType?a.defaultView\|\|a.parentWindow:!1}function na(a){if(!ca[a]){var b=n.body,e=c("\x3c"+a+"\x3e").appendTo(b),d=e.css("display");e.remove();if("none"===d\|\|""===d){G\|\|(G=n.createElement("iframe"),G.frameBorder=G.width=G.height=0);b.appendChild(G);if(!I\|\|!G.createElement)I=(G.contentWindow\|\|G.contentDocument).document,I.write(("CSS1Compat"===n.compatMode?"\x3c!doctype html\x3e":"")+"\x3chtml\x3e\x3cbody\x3e"),I.close();e=I.createElement(a);.I.body.appendChild(e);d=c.css(e,"display");b.removeChild(G)}ca[a]=d}return ca[a]}function J(a,b){var e={};c.each(oa.concat.apply([],oa.slice(0,b)),function(){e[this]=a});return e}function fb(){P=p}function pa(){setTimeout(fb,0);return P=c.now()}function qa(){try{return new s.XMLHttpRequest}catch(a){}}function da(a,b,e,d){if(c.isArray(b))c.each(b,function(b,f){e\|\|gb.test(a)?d(a,f):da(a+"["+("object"==typeof f\|\|c.isArray(f)?b:"")+"]",f,e,d)});else if(!e&&null!=b&&"object"==typeof b)for(var f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ividFrame[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	3668
Entropy (8bit):	4.7770487059015645
Encrypted:	false
SSDEEP:	48:BGEJAN2jigD5UtlgMzq1IalV+XnRKLWth0vGGKChWJhoDXlCyiIwreDT2Qj:BGEJoWhGte1vansVvGCcJmzlCyyA
MD5:	0EA23DDAFB70FEBD1CE5E0BA9245ACFB
SHA1:	1502B55E00CDB8AE4069C50DD50F31B566685A26
SHA-256:	0D2AB7896BC22A031F1E00B88E6C3980831256606BC1D46801944944E24F4719
SHA-512:	1E1D522917904D156318ED5601CD0BF528B362E5C552D466B16850DEA72940AB473B1E0719930181B3F57CEC716F0F55CBFDFC53FA157254992B32BB297BAE78
Malicious:	false
Reputation:	low
Preview:	..<html>.<head>..<meta name="robots" content="noindex">..<script type="text/javascript" src="scripts/oii-ivid-perisistence.js?v=1.17"></script>..<script>window.JSON \|\| document.write('<script src="/scripts/libs/v2/json3.min.js"><\/script>');</script>.</head>.<body>.<script type="text/javascript">. var rdto = new rdt();.. var expirationDate = new Date();.. expirationDate.setDate(expirationDate.getDate()+1+3655);.. var cookieOptions = {. expires : expirationDate,.. domain : '.intuit.com',.. path : '/',. secure : true. };.. var getParameterByName = function(name) {.. name = name.replace(/[\[]/, "\\[").replace(/[\]]/, "\\]");.. var regex = new RegExp("[\\?&]" + name + "=([^&#])"),.. results = regex.exec(window.location.search);.. return results === null ? "" : decodeURIComponent(results[1].replace(/\+/g, " "));.. };.. // Although the /ividFrame java may overwrite the ivid cookie before we land in this

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\js[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	86794
Entropy (8bit):	5.520060115572995
Encrypted:	false
SSDEEP:	1536:Jv+8meNWwB900GfIge0tb/zWrv/A+JlOEcnjcy/PY9JM+a1h9KnZL5u1:Jv5meNWR0L0FWsvTnI3s+41
MD5:	31A71B8C5FADD2AFC2E0FF2F533861D1
SHA1:	09F56AE44FA45AEB7B2F76C8EAA18B4110F7B5A6
SHA-256:	A9796ACD42451029E6941D8A8B16C3A139BB9F9FBF4E22350CBA50E7236D83EF
SHA-512:	F1E0B3382BBE0999EEDD90D284E35FFBECD64AB637E63AF6F08512055640FE0E812FD25A46AFB0982CF29E72724070E83860B924E5599AF2C2339D99960FCBB1
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtag/js?id=DC-8344993&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"1",. . "macros":[{. "function":"__e". },{. "function":"__cid". }],. "tags":[{. "function":"__rep",. "once_per_event":true,. "vtp_containerId":["macro",1],. "tag_id":1. }],. "predicates":[{. "function":"_eq",. "arg0":["macro",0],. "arg1":"gtm.js". }],. "rules":[. [["if",0],["add",0]]].},."runtime":[].....};.../.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},da=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:ba(a)}},ea="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},fa;.if("function"==typeof Object.setPrototypeOf)fa=Object.setPrototypeOf;else{var ha;a:{var ia={a:!0},ka={}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\keyboard_arrow_up_24px[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	147
Entropy (8bit):	4.9621270003690565
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5zMcBH8+hHiATcvXjXRHoNcHgDXFUVLUJRVFiAdFUvuIIb:tI9mc4slzXdhC/O4gSVLU9FRF0ulb
MD5:	1F5DC0C5F607EC3BF9E3089FEBD9C373
SHA1:	1D8D1276A56A42B3EA7393767A8674CD45C43439
SHA-256:	00D8F7123BB5EF3F7FAD786905F5407CC5FB8B4C55E1B0511803F6C8C01E3903
SHA-512:	98C5C969A12B196176ADDD9C7DD8234C9D81EC513DE453F116E766DFA32E5B99AD2AEB68609353B349A65F7B26E68166C42337668B2BF1C8513FF4C77200271D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/images/icons/material/system/svg/keyboard_arrow_up_24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M7.41 15.41L12 10.83l4.59 4.58L18 14l-6-6-6 6z"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\live-bookkeeping-logo[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3545
Entropy (8bit):	4.420222791715187
Encrypted:	false
SSDEEP:	48:c+3hVS6pkTluu1nnEma0dXQwT73U6Pvjf5/Yl8U5mDGgDpNIlTzUh87sflTK/h8i:77euirdXlBJdDxDXnWDtdS1uFg8
MD5:	4B7FF808E9F24228FD815D338232DE70
SHA1:	CCB839C46961F30A5DD9481B89B1FB86E4ABB813
SHA-256:	03D9082FC1EB37DEC8FA882A1D87A066834B8DBFD6A2CA6303FBC769453DE0AE
SHA-512:	6441D7E72A89F86E3501706A49AF51EC8E3AE52BBB9D6E4CFDA8683D2E14C4BCAD5290BC5A4E6743442C2A8440AFF0E5D7DD5CBA5DEA1021DF356B9176D2B5A7
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/banner-and-badges/live-bookkeeping-logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="230" height="39"><defs><path id="a" d="M0 39h229.962V.567H0z"/></defs><g fill="none" fill-rule="evenodd" transform="translate(0 -1)"><path fill="#2EA048" d="M0 1v39h23.858v-5.753H5.803V6.754h60.394v27.493H31.595L25.792 40H72V1z"/><path fill="#2EA048" d="M48 27V13h10.6v2.868h-6.925v2.63h6.546v2.709h-6.546v2.906H59V27zM12 27V13h3.857v11.054H22V27zM26 27h4V13h-4zM40.632 27h-3.363L32 13h3.776L39 22.927h.079L42.284 13H46z"/><path fill="#020303" d="M86.59 25.121h2.735c1.574 0 3.825-.308 3.825-2.51 0-1.751-1.235-2.368-3.704-2.368H86.59v4.878zm0-7.434h2.71c2.035 0 3.123-.83 3.123-2.273 0-1.492-1.088-2.084-3.388-2.084h-2.446v4.357zm-3.05-6.82h6.68c2.59 0 5.254 1.161 5.254 4.215 0 1.894-1.21 3.149-2.978 3.67v.048c2.155.284 3.704 1.704 3.704 3.954 0 3.646-3.244 4.877-6.488 4.877H83.54V10.868zm21.158 14.727c2.3 0 3.366-1.918 3.366-3.693 0-1.776-1.066-3.646-3.366-3.646s-3

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\loginHelp[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4571
Entropy (8bit):	5.201078924813806
Encrypted:	false
SSDEEP:	96:PS04z5FjFWBFZAM0OPk2R6SJgKL+xq5QYLat:Pr4zPOPk2Rf+xqxat
MD5:	C2FEE971D9B3DFF0F31F08D5BD757A3A
SHA1:	D5DA942855BDF38B3C370E87815C194AB25925E5
SHA-256:	EC380C713B38B1862F1D1FB3AB6BC656952E78B42DCE13EB6722997988BE65AD
SHA-512:	6DCF1FE7D7B0AD3ACEC1EF3C74F65492194D6F24EEDC1F7B13BDAC20E294A637B39CE639B9F8BD8CD8A561C2163F0F2C77AEB02702721824D894E78B4ACBE817
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/loginHelp.css
Preview:	html{height:100%;overflow:auto !important}body{background:#193048;width:100%;height:100%;overflow:auto !important;font-size:14px}.spacing32{height:32px}.fake-link{color:#3965ce;text-decoration:underline;cursor:pointer;font-size:1.2rem}.right{float:right}.bold{font-weight:bold}#mainContent{width:800px;margin:auto}#languageSwitch{text-align:right;font-size:11px;padding-bottom:2px}#languageSwitch a:link,#languageSwitch a:visited,#languageSwitch a:hover,#languageSwitch a:active{color:#76818c}#bottomLinks{width:785px;margin:15px auto auto;color:#76818c;font-size:11px}#bottomLinks a{color:#76818c}.logocontainer{background:#193048}.qblogo{width:240px}#innerContent{padding:20px 25px 10px 25px;background-color:#FFF}.qbaFirmContent{display:block;width:500px}.header{font-size:22px;padding-bottom:15px}.subHeader{padding-bottom:10px}#mainSection{padding-bottom:10px}.subSection{padding-bottom:15px}.firmSubsection{padding-top:20px}#errorSection{padding:17px 13px 17px 13px;border:solid 1px;border-colo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\login[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	40055
Entropy (8bit):	4.954020466112179
Encrypted:	false
SSDEEP:	768:jIlCShKXQ7+GDurfeeYn7qAiQOzsj4UhOGseRSewY:jIlxn2AiQOAkUhT
MD5:	24A0EB6CC17C6206B8F4F1774B34F6B0
SHA1:	041269FD2739B51DA5BF8B729F2A41477B56DFE2
SHA-256:	E1A5616DCF2F6F1C24DDDD8A3E9483574512B626F9877C5B8F015B08C6D9014E
SHA-512:	E3741E3F213499D5B5ED10DDA832B3CC92DCCE06E5BBB49B84D4224655C89CBD80A85F4FBE823F1B4FE60AACC50AC078B5A4E15D305670D3F2A2E46FE04EC543
Malicious:	false
Reputation:	low
Preview:	.To developers attention: When changing this, have a look at iam_login_mobile_ius.xp and change that accordingly..-->.<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <meta http-equiv="x-ua-compatible" content="IE=edge" />.. <meta name="msapplication-TileColor" content="#193048"/>. <meta name="msapplication-square150x150logo" content="https://uiclassic.intuitcdn.net/v1960.161/images/QBOlogo.png"/>. <meta name="description" content="Log into your QuickBooks Online account here to access the #1 rated cloud accounting and bookkeeping software for small business. Try us for free!">. <meta name="google-site-verification" content="oUUAhE078O4_RvIGerAuNMAaOjK2HbMM1W1J_dMZXNw" />. <meta name="robots" content="noindex, follow">.. <meta name="ius-bu" content="sbg">. <meta name="ius-theme" content="intuit-ecosystem">.. <link rel="canonical" href="https://qbo.intuit.com/qbo1/login" />.. <title>QuickBooks L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\logo[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 480 x 94, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4978
Entropy (8bit):	7.799954125913524
Encrypted:	false
SSDEEP:	96:OMttrSNkLwxSPeSE035CIXHLgATZxHLw+p1KfCY0CI8UmPzsS8tRx7HVTa5f:Z7OWcxSmSE035XXdTZimKfCY0BUOtRxE
MD5:	389383C0ADDDAB3B2767D36CD3007676
SHA1:	4A331AB3012CA80640DA430BE123E3136ED920BD
SHA-256:	6614D62603A46F9DC3A69F5DC2094FCB378A870F9ED604F6FC121797339B5A64
SHA-512:	86F5E0D59BA6063056E4BEDE7E6A89DB0D13880847AB6C7C364162C4468A3C8414663F8FCD2DAB1A3552B4A2F60CD45778665AD28E44BA32F206CC5A4DE09325
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/harmony/images/logo.png
Preview:	.PNG........IHDR.......^......7.....PLTE......................................................................................................................................................-.......................,....................,..........................,.....1.!............-..-........-..2.....>."......-..,..,.....,.....-..,..,..-........,..............,.....-..,..,.....-..,..1.",.....-..=.)...,......e.Y>./q.g......2.#......V.I@.2..~.tP.B.................\|7.(......F.8......!y.w...ytRNS..,B).......r.3.6....WY...P...F..%l@2..`#..d.....S..<..h9...........zTM.w.....}d ..H/..J..xm..[D3...t....J..M?....u....IDATx....[.A.../(F.....DY.D.xT.&.O..Yf.}?.......s..hv.f.`3.}..3.>...f.Y@.O.S.w.....T....S.w.....k...%.z..'.?...h.I\9s>@......t.}..O..x.Q...4.W..m.Cx..q.)....9....3.....\|.\sHQ....(......[..jR...r.....#y....aR..n.9Jtq.....O.J.G...@,B..t]aE.V.2._ZIE....c..`....yr..N...Hn.<...am....X..0i*......cjI..W..:....89..+..(...2>...h..D...~.Y.f.F7...#r..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\main.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	10086
Entropy (8bit):	5.130882077456134
Encrypted:	false
SSDEEP:	192:SzEJSJeAype8Hib8bQbJK26YC5gXNGczZesLZlaIiOhPOGS5nZN/iuG11Gu2GX:IBbGczZesLZjT
MD5:	DF0482A2A923AF1576C981054339F769
SHA1:	EF760EA927FF340FAE75BAA3319D6D411ED29621
SHA-256:	F6731D4D84847AEC5FFB830BCE03860285C3203B14B53139834F1ED7939D1FCE
SHA-512:	D8E3E8DE548F133C61FEC39EDFA3355BE8F31B3FF2715B3D73462CDBF60420BA9DEE7E34429673A1B5CD25CB962310C58CD3BFD5849E7E0220DB78813CECA0EC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/css/main.min.css
Preview:	.ytmodal{cursor:pointer}.ytmodal-player{display:none;height:100%;left:0;opacity:0;position:fixed;top:0;transform:scale(1.15);transition:all 0.3s cubic-bezier(0.4, 0, 0.2, 1);visibility:hidden;width:100%;z-index:2000}.ytmodal-player--enabled{display:block}.ytmodal-player--visible{opacity:1;transform:scale(1);visibility:visible}.ytmodal-player__x{align-items:center;background:#000;border:2px solid rgba(99,96,96,0.6);border-radius:50%;color:#fff;cursor:pointer;display:flex;font-size:50px;height:50px;justify-content:center;line-height:50px;opacity:0.8;overflow:hidden;position:absolute;right:3.69853vw;text-align:center;top:3.69853vw;transition:all 0.3s;width:50px;z-index:2003}.ytmodal-player__x:before{content:"\00D7";display:block;font-family:'arial', sans-serif;font-size:40px;height:40px;line-height:1;text-align:center;margin-top:2px;width:40px}.ytmodal-player__x:hover{color:#000;background:#fff}.ytmodal-player__mask{background:#000;height:100%;left:0;position:absolute;top:0;width:100%;z-i

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\main.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	200588
Entropy (8bit):	5.274194945695101
Encrypted:	false
SSDEEP:	3072:6ZEymdm6xbEujzXIUwFpVYm50gCNdLG1YHsTTHAw9B+JqYdq:MUo6xrYUwFp7CNQYHsTTmJqF
MD5:	5F51F175D4ED6606B766E3E3ECAA9EF9
SHA1:	401E19F8AF969B7C90ADF3E6211301C465F0B8D1
SHA-256:	E9BE5DB4A64205942059F1B6EED7AFC6DA335A9DE7ECB9050B62E374D2AF357E
SHA-512:	B5EE778EEE7FBC8F473CA96A9F9CF7AB11E2A1E64BA3BFC97E75FA056B10F112C72952963828574D03D74319DA167F9E824AE1BEB3E547DF1E97ABA24B72A4F0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/recaptcha/about/js/main.min.js
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)n.d(r,i,function(e){return t[e]}.bind(null,i));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=3)}([function(t,e,n){"use strict";n.d(e,"a",(function(){return r}));class r{constructor(t,e){

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\master[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with NEL line terminators
Category:	downloaded
Size (bytes):	101231
Entropy (8bit):	5.292660680919189
Encrypted:	false
SSDEEP:	1536:gL914ZGsPkIfBcUqEveS1NH4YUAk/xBYV3udN:m914TPkIwyk/xBYV3s
MD5:	E3E5D344A900A6E5FD07432ECF12BD94
SHA1:	68C072376E282C8D6D19C19FEEF743B067030FE1
SHA-256:	4FB2BAB0177A59EA938F08762D4F2C7470D34E9D0623C4A9469DFE5A20B3C6CF
SHA-512:	455001C8B25665F0B733D78E81BCD26C4EDFDC3987E5E56544BEB2AFA2092BE1CD3D75C30BCFC09C0973ABBD89D51C6C309DC7CCA70628807364E5D03F589182
Malicious:	false
Reputation:	low
IE Cache URL:	https://static-assets.fs.liveperson.com/intuit/build/master.js
Preview:	!function(t){var n={};function e(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,e),o.l=!0,o.exports}e.m=t,e.c=n,e.d=function(t,n,r){e.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:r})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,n){if(1&n&&(t=e(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(e.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var o in t)e.d(r,o,function(n){return t[n]}.bind(null,o));return r},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},e.p="",e(e.s=125)}([function(t,n,e){var r=e(1),o=e(7),i=e(14),c=e(11),u=e(17),a=function(t,n,e){var s,f,l,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\mischief-don-photo-qbo-us-desktop@2x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 624 x 624, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	99558
Entropy (8bit):	7.9788678352631335
Encrypted:	false
SSDEEP:	1536:Me1q7L/FS2Yghy5M0AxGibbY72JaMuD7krdjfE+IqaBNOw561SwoDpqk7yaoy8pT:hq7DFqcxGG8aJpjUUw0mpqcyawp4nI
MD5:	88964479FEF9B2B27D901C0C0D50E251
SHA1:	748739200B4668D51AEEFF2D066B91BAB2DEA10B
SHA-256:	81162F79F8B746A92577772ED1497954ED41E429200CC4E1611A69E6EAFF3623
SHA-512:	427D6416510602DBC2FFCFC0CA6460A80F179DF4062C92613AF84DADF47807037080ACB0492EAE07D86F0B881A294BA37311C4C755598339CCF2C9192F086DBF
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/photo/mischief-don-photo-qbo-us-desktop@2x.png
Preview:	.PNG........IHDR...p...p.....>.....vPLTE......BB0...........pCA0.~<=.........@=376.......64/..................................UC8=<3.......V.tX..ak>.Z..^.........42-:82............6,$($.E:0RC8M@5XF;.&gRE...CA;V(....]NC^+."..bNA...]I=URMoYK...WKAD..OIC..gVL...:..e^Wkfay_P........P".@1'IGA(..^ZUf. ../K$...0......j...2......s`SJ..paX...1..tnj....yu......................'...........ztp....5....~\|vg_....&.....z.. ..&.....yc{og...a5'...eT.tl..{....;.p].ua.{r...S0'.jW..g=.nD5.......Qb7..}......wL=.#ZhA....)-.l`..]<m.ctG...w"Z>2..r5'[......~rGy.:V Em.Ty)...?oxW.~M.UE.-t.Ce..e.Ha,5_.v...s.H3HT/..P...\|.d........u...eP..j.L%.{5.M)!O..u.C...)tRNS..?..<..8f..m...h.a..f..P...t=..>.....wZ.3.(....IDATx...O.W...(..Qh!.....f..\|....HbV.uLJ{...,..V.Hm.....&j"$....H..l.......y83.../<...9...{.3S;L.L..y.......c.S.L&C?....c....'z..S.....1.<y.n.\.P6e*..H(p+gF...!....A..IS.zO...;NdU.<.8.....5vJ.B..I\.........8i.'.<v.."..qr....xh........g.g"Q;.}.d.[..oe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\moto-guild-craig-photo-qbo-us-desktop@2x[1].wdp Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG-XR
Category:	downloaded
Size (bytes):	95457
Entropy (8bit):	7.705147287073829
Encrypted:	false
SSDEEP:	1536:mA8D3H8okm4iKt9lEbzOneAduCvEdHyg4hU2jYytwQzYtYnY/YdLXe1OKWv3xj:28okmpKt4OneANW28yHzYtYnY/Yhe1By
MD5:	F267A62EBAB84C45F50029F0ACD827A8
SHA1:	777E6C158D7AF12058C97FB40783673340AEFAEC
SHA-256:	B9F1687E78D899FBA6BB5927B16CFA2AD5EAB7CE96509278AEA6FBE975C82F52
SHA-512:	AE26224F020C9F7A7B8A07B756E2E5E554A5D9FB305A77A831C84A7FD5EAA2BDA1F0D6E548C75D88CD781705412732DA38662A5A8F638BB3148A87529A1A3C5E
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/feature/moto-guild-craig-photo-qbo-us-desktop@2x.png
Preview:	II.. ...$..o.N.K..=wv.............................................p...........p..............B...........B....................D.....................t......WMPHOTO..E.q.o.o0...,HHR..@......1v....... .... .........U.e,..uU...i'...f1).....%UUUUS1...@Yg+.......\m...L.k.,oI..X]F.J .J....c.v..?V..DdS.C f7WZ~{+....<..r"b.4....E%.@ .UUZ`..e...+......N...t...b!.s....D...tzH.....)..0 .......X ..}.....BJ~V../..6.%(.W.Q.(GB....sSu..\...)$.......@....U....GG.....-.j..3.K.%t.R..yUK....f.......H...]........@&..YK...>..c...U...DII8..R.0.JV.\...{0...@.V.@.....uR#....(...N...mq....n..1)q.d...dE.?.z....9/P9....H.....A....z4.ct.H`.C"..ff..$...@tl....;S..+..{.7...Z..Su.ZE.U.c7rv.R.V{@........@.ea...d.......6:6....U..:L.S..la.R...*......#.BJi.............O.....'.....S..{....0...m7h(....:_..fM/.>".,j...X...A.P..<G..Y-..h......@...H...!H...$G.\|....R..d...M........5..T.{.?..l..=h!BJn..~.+...([+.e.J...M.....-...7,..1...KI....x...,.!.'...yu.i^..:D(k.+....7.S..Z...Jv.u

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\native-soil-angelina-photo-qbo-us-desktop@2x%202[1].wdp Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG-XR
Category:	downloaded
Size (bytes):	118629
Entropy (8bit):	7.793619305078227
Encrypted:	false
SSDEEP:	3072:OoOgdEMtW0QsbhKl7VNxRNeAYN2FpVYNBEk9zGWkzk:CgdE+0NxRN/YN2FzYNNok
MD5:	BA0AB92A4C8E43874671121A53BC22B3
SHA1:	5697FD54288FCC3634D6B1DF61D82E7F91F2E61A
SHA-256:	2E18FB10A0EC06F890766F793AA3B1D97D335A0C49541047AF5630141770B819
SHA-512:	A8E8EFB78EABA05E486A8D9E56ADF13161C521460AB526C0425127391795D9B9BD9552B7A3B8AE97A23841699E7BD71080D5C209A0734A91B8840F43F9F276AB
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/photo/native-soil-angelina-photo-qbo-us-desktop@2x%202.png
Preview:	II.. ...$..o.N.K..=wv.............................................p...........p..............B...........B....................9.....................e.......WMPHOTO..E.q.o.o0...,HHR..@.....#=......... .... .........U.a...9..L,.H.1...PR..e..Q4........p..#...s.m8Sx..6.....k9.i..s1m....R...J....FK.L1.$)X..c.\|..0.n3NGh.f.....0.G...M..p'...@..D......(.#h.`B..i.O1E..T..po.....E.l....~7..#.G..C'E....!..J[..`.....2.\|.e..P.:.[.y.F.o....f.....pUp?..Rk]...V.N...."UL!.A9...........e.....r.o)..2...!.....E.'u3X.Q...9..D6..jb&b.@B%Lq..i...g..0..DF.W{...._...PWp..[.<W&.i......o.p.,..r \|C@c.I.W.`Z.........').z.[.cC9l @...)eq.@.>:JT8]..AB........w..0R..aE4.V.).1TIop........F......)...,....a.......C4.7S.&.d."q,%.....I..vk.].Q...u.;M..]..]....f.oj...F.......2..k...YU.1.g..a.2F7..KR.2.v.......tUL....z.$.b..X...@@ZL..t.$._J.f./..Rf[[.$..[QG.:.q.H..9./...9...........O....JA....}..... ...A..@(.(...F...t..v..m.B..H.....xJ\"]xe.m.5...C%j,...>.@J..%."..L?...0..M...I..v.8

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\oii-ivid-perisistence[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	12249
Entropy (8bit):	5.6639204417450095
Encrypted:	false
SSDEEP:	192:NZ7aoxI/rFz3SHsQYX4AcHu8b2OUlYmSK6xF3jp+9R:NooKTFz3chOWgkK6xlp+v
MD5:	28593B53B224712571C94AAFB3E5B568
SHA1:	6F5745389B55F059B0F0F59545CDA0E80E2499EC
SHA-256:	366650BF66F8B1A3F31275E0A093FD3182A4FADCEBFE4301C8BA8E8F63369160
SHA-512:	ACFAD41F7516ABBBC25C0DB6FB868D9EA863D2EAE0702633025549FB53D2B3D7F1C0C6CB109FC78FBB594AA0BB93187DB863EFF4300036A99B70953E3A521B75
Malicious:	false
Reputation:	low
IE Cache URL:	https://accounts.intuit.com/scripts/oii-ivid-perisistence.js?v=1.17
Preview:	(function(g,h,k){var d=".intuit.com .turbotaxonline.ca .mint.com .intuit.net .turbotax.com .quickbooks.com .quickbooks.com.br .quickbooks.co.uk .localhost .check.me .docstoc.com .freefilefillableforms.com .statefillableforms.com .paycheckrecords.com .zeropaper.com.br .apimock.xyz .iux.cloud .managepayroll.com .tsheets.com .tsheets-dev.com".split(" "),e=".co.uk .com.au .com.mx .com.br .fr .ca .in .mx .hk .sg".split(" ");g.iusDomainResolver=function(){var c=null,a,f,b=h.location.host;if(b=b.split(":")[0]){a=.0;for(f=d.length;a<f;a++)-1!==b.indexOf(d[a],b.length-d[a].length)&&(c=d[a].substring(1));if(null==c){a=0;for(f=e.length;a<f;a++)-1!==b.indexOf(".intuit"+e[a],b.length-(".intuit"+e[a]).length)&&(c="intuit"+e[a])}}if(null==c)throw Error("Not a intuit domain");return c}})(window,document);.var _rdt_history=0,_rdt_tests=5,_rdt_baseurl="/scripts/did/",_rdt_domain=".intuit.com";iusDomainResolver&&(_rdt_domain=iusDomainResolver());function _rdt_replace(f,h,n){if(-1<f.indexOf("\x26"+h+"\x3d

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\privacy_checkup_icon[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2183
Entropy (8bit):	4.54347991131289
Encrypted:	false
SSDEEP:	48:q8STtLI+xuWwnZ8ct9jmN1dxo9/nFKz2fWTKrfp+t2:qL1U8cf41Ho9/F/02
MD5:	C75528C0EE848EDF85766240B68B2E24
SHA1:	77494574B9FF9AA00FF43F8114B694F7F78447BC
SHA-256:	0AB2FFD0160D09C189AF9772353C7853E833759E369B65874A00BED2F76830AD
SHA-512:	16ED48AADDE68DB93887A515BAD101958B247E5B93AD37D1A90B63F3FA6BDDB3E233333AD443B5AC0256225D085FC217CEC6D5C3FE39858C36B06E5675E5D90E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/identity/boq/policies/privacy/privacy_checkup_icon.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="53" height="62" viewBox="0 0 70 82" fill="none">. <path d="M 26.8292,75.5938 C 44.7667,67.0521 51.173,51.5917 52.7959,40.4021 53.1376,37.925 53.3084,35.3625 53.3938,32.8 V 14.0084 L 26.9147,5.8938 0.4355,14.0084 V 32.8 c 0.0854,2.5625 0.2562,5.0396 0.5979,7.6021 1.5375,11.1896 7.9438,26.65 25.7958,35.1917 z" fill="#4285f4"/>. <path d="m 12.9917,49.3708 c 0,-3.7583 6.6625,-6.8333 14.0083,-7.0042 7.4313,0.1709 14.0084,3.2459 14.0084,7.0042 v 0.3417 c 5.8083,-7.4313 5.0396,-18.023 -1.8792,-24.5146 -6.8333,-6.4063 -17.5104,-6.4063 -24.3437,0 -6.8334,6.4916 -7.6875,17.0833 -1.7938,24.5146 z" fill="#3362b5"/>. <path d="m 41.0084,49.3709 c 0,-3.7584 -6.6625,-6.8334 -14.0084,-7.0042 -7.3458,0.1708 -14.0083,3.2458 -14.0083,7.0042 v 0.3416 c 6.0646,7.7729 17.2542,9.1396 25.0271,2.9896 1.1104,-0.8542 2.1354,-1.8792 2.9896,-2.9896 z" fill="#ffffff"/>. <path d="m 27,39.2917 c 3.8683,0 7.0042,-3.1741 7.0042,-7.0896 0,-3.9154 -3.1359,-7.0896 -7.0042,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\privacy_illustration[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	17329
Entropy (8bit):	5.1099250055903545
Encrypted:	false
SSDEEP:	192:xjy/JFxKSYW7g41eXA8rb4Ki/tGHtgpA3TubXWTvUWSuWqiPEMwIj0m0N2jiSixG:ZItY7/rBi1GHtP/OjUIjiO
MD5:	38B85604709A03A6EDED024ACE0658A5
SHA1:	DD43720C61B45BC4FEC2E253045C5FAAF69082D0
SHA-256:	26A9A11E723631253C50ED9FCB595861246146C849CA1FBA16E23636A380B7CD
SHA-512:	8A627E64CDC780C5B37A741903E4592DB97212DEDE1E32B4C9DB1ABEB3071EE92F359B0355219F395933D172F1362412457F50CE094266B5E1984CCD292C16FA
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/identity/boq/policies/privacy/privacy_illustration.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204"><defs><linearGradient id="linear-gradient" x1="25" y1="165" x2="50" y2="165" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/><stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/><stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/><stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/><stop offset="0.624" stop-color="#9aa0a6" stop-opacity="0.4"/><stop offset="0.786" stop-color="#9aa0a6" stop-opacity="0.626"/><stop offset="0.946" stop-color="#9aa0a6" stop-opacity="0.898"/><stop offset="1" stop-color="#9aa0a6"/></linearGradient><linearGradient id="linear-gradient-2" x1="64" y1="139" x2="64" y2="146" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#5f6368"/><stop offset="1" stop-color="#5f6368" stop-opacity="0"/></linearGradient><clipPath id="clip-path"><circle cx="64" cy="112" r="28

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\product-finder-question[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	8972
Entropy (8bit):	5.093182420125887
Encrypted:	false
SSDEEP:	48:vJ3pVrxGdgPUuR04q6Shm83Dzd56NUmtDOjxmFPAPc+KBP5+bvYlPcHij+B7acH8:vJ5Ima4ij6nAbYcycQ6vDsRXCuj/jWQ
MD5:	7A24196D44FA9220144B4D1141456AB9
SHA1:	5DF289A0E94994BA4069F1FA5B6CD99D6F92F3C0
SHA-256:	8C450C6D92FC8A8A6D79E319A915D7FCB6D6285D297C1EF6C6FD565BC8F1C036
SHA-512:	0D4526D418C86E2DD5EA7EC3F92C496F6F90A864A8817FAA6D49AD1E837E63123A73EE83E75BAA43ADA13703B9CF7F97F547A042E0F0269193C31E1810761239
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/product-finder-question.css
Preview:	:root{--breakpointsSmall:48rem;--breakpointsMedium:64rem}.ProductFinderQuestion_root__6d0efe8c.ProductFinderQuestion_product_finder__6d0efe8c{padding-left:0;padding-right:0}.ProductFinderQuestion_productFinderQuestion__6d0efe8c{width:100%;position:relative;background:#0d333f;background:var(--color-blue-rw-dark);min-height:calc(100vh - 6.25rem);min-height:calc(100vh - var(--spacing-xxlarge) - var(--spacing-small))}@media (min-width:64rem){.ProductFinderQuestion_productFinderQuestion__6d0efe8c{width:calc(100% - 2.5rem);width:calc(100% - var(--grid-gutter)*2);min-height:calc(100vh - 7.5rem);min-height:calc(100vh - var(--spacing-xxxlarge));margin-left:1.25rem;margin-left:var(--grid-gutter);margin-right:1.25rem;margin-right:var(--grid-gutter)}}.ProductFinderQuestion_productFinderQuestion__6d0efe8c .ProductFinderQuestion_productFinderQuestion__wrapper__6d0efe8c{padding:2.5rem 2.0625rem 8.9375rem;padding:var(--spacing-large) 2.0625rem calc(var(--spacing-xxxlarge) + var(--spacing-small) + var(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\recaptcha__en[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	348721
Entropy (8bit):	5.731385846674716
Encrypted:	false
SSDEEP:	6144:f73MWOymv0RZaQzuJX4OV0zGTeg6pyMHrcUmhKBGAD3UTslMkO93l/KUQ1tnrAqp:T31JRQQzrEesKBGArcPM16qbjIWnIDaH
MD5:	A273CD8A9269CE410770784830EA9A5B
SHA1:	4B0426B26C26282C07892D8E77997189AD7C4C77
SHA-256:	839392B626A00E09CE3EC77706959D551DE27CCA63C559FCD4A6415AEF3E722A
SHA-512:	898B86113EE31CD380E3BA3EFB1B09E6C7162DBCF18C3A36A5B523AFD736D73DF5E481903C51795FACC89E9601BBDAECCDC7BE514F207F2D25358EDB6D331AA6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.gstatic.com/recaptcha/releases/TbD3vPFlUWKZD-9L4ZxB0HJI/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var a=function(){return[function(U,x,H,R,y,P,S,Z,Q,v,b,J){if(!((U\|(J=[52,0,4],6))%5)){if(y=new (v=[0,7,2],Q=function(k,g){return g.length>=k.length?g:k},xR),h[32](1,v[1])){for(S=a[32](39,u[9](72,97)(x,R,function(k){return parseInt((k.match(/(1[2-9]\d{8,11})/g)\|\|[]).reduce(Q,"").substring(1,6),10)})),Z=S.next();!Z.done;Z=S.next())if(P=Z.value)u[5](12,1,y,(M[38](J[0],y,1)\|\|v[J[1]])+1),M[31](8,3,y,Math.max(M[38](J[0],y,3)\|\|v[J[1]],P)),M[22](J[2],v[2],y,Math.min(M[38](J[0],y,v[2])\|\|P,P)),L[5](J[2],J[2],.y,(M[38](J[0],y,J[2])\|\|v[J[1]])+P);M[38](J[0],y,1)&&L[5](5,J[2],y,Math.floor(M[38](13,y,J[2])/M[38](J[0],y,1)))}b=y.Z5()}if(!(U+((((U-7)%5\|\|(R=[16,15,4],H=x.charCodeAt(J[1]),b="%"+(H>>R[2]&R[1]).toString(R[J[1]])+(H&R[1]).toString(R[J[1]])),U+1)&15)==J[2]&&x.T&&h[J[1]](53,x.T,H),9)&13))u[46](49,M[18](38,"rc-imageselect-progress",void 0),"width",x-H/R*x+"%");return(U>>1)%10\|\|(R=h[2](50,2),b=u[39](

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\recoverAccount[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3885
Entropy (8bit):	5.108776760136416
Encrypted:	false
SSDEEP:	96:FbVNGAJXG+xqaH1lR2bujbMTt65qwvfyBk/QmR:9VNGAJXG+xqaH3R2ebwghvfyBrm
MD5:	763B05C1009183018A0571855A6AF32D
SHA1:	9964B02195238A0F686F0FA6C230B11969A289DE
SHA-256:	432D3A3D529A65B0A8EA55A3796E9C19761144BCDC732F52E9BF014C422B4FD5
SHA-512:	9F9468382E8B0510748389AEBFAF5B90BCB64638F9B5701C320C401A2771D9462579DAD7900491FB46FD3419BD94A8BE33DEC672461A07F2426A6331A6AA8B9A
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/recoverAccount.js
Preview:	dojo.provide("dojo.recover_account");if(typeof qbo==="undefined"\|\|!qbo){qbo={}}dojo.require("dojo.parser");dojo.require("dijit.form.Button");dojo.require("dijit.form.ValidationTextBox");dojo.require("dojox.validate.regexp");if(!qbo.login){qbo.login={}}if(!qbo.login.recover){qbo.login.recover={}}dojo.addOnLoad(function(){dojo.parser.parse(dojo.body());var a=qbo.login.recover;dojo.query(".loginLink").forEach(function(b){dojo.connect(b,"onclick",a,function(){a.gotoLogin("signin")})});dojo.query(".signinQbseLink").forEach(function(b){dojo.connect(b,"onclick",a,a.gotoQbseLogin)});dojo.query(".signupLink").forEach(function(b){dojo.connect(b,"onclick",a,a.gotoSignup)});dojo.query(".signupAcctLink").forEach(function(b){dojo.connect(b,"onclick",a,a.gotoAcctSignup)});dojo.query(".recoverLink").forEach(function(b){dojo.connect(b,"onclick",a,a.gotoRecover)});dojo.query(".chatLink").forEach(function(b){dojo.connect(b,"onclick",a,a.gotoChat)});dojo.query(".chatLinkV2").forEach(function(b){dojo.conne

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\recover[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	169000
Entropy (8bit):	5.309446851117184
Encrypted:	false
SSDEEP:	3072:yIBVYhQSxAE+UTimMlemOFaNVtnK++Cnd8W:yIBVCQSxAwmmMlemOFaNVtFd8W
MD5:	CA64E49FC796BB16369242F716C781F7
SHA1:	08B5028C292EFEB169274FECC593F5D3E7553D46
SHA-256:	29C5010EAC76995FF53ADCB9E9D2E014671B1CDA4C8D14713532A4F939A4FD03
SHA-512:	8F305604B7FC197D00D07D0BCCC2CBCC0D42B50A2F9804DDBEAECC3FE3892C1A18984902FAD146951C476071D53261FC8A8B4B1EA8D5CCA5219C4CE2D0C17067
Malicious:	false
Reputation:	low
Preview:	<!doctype html>.<html>.<head>. <meta charset="utf-8" />. <script>. ....................// Use this file (for now) to store Localizable Strings for use in javascript..//.// Start Strings and Functions with percent percent tokens.//..var LSJ_PRODNAME_M = '%%prodname.m%%';.var LSJ_CUSTOMER_CAP_SINGULAR_STRING = '%%Customer%%';..var LSJ_WIDGET_OPTIONAL_COMMENT="Enter Optional Comments here";.var LSJ_WIDGET_EMAIL_ADDRESS="Email Address";.var LSJ_COMMON_ALL="All";.var LSJ_CALENDAR_JANUARY="January";.var LSJ_CALENDAR_FEBRUARY="February";.var LSJ_CALENDAR_MARCH="March";.var LSJ_CALENDAR_APRIL="April";.var LSJ_CALENDAR_MAY="May";.var LSJ_CALENDAR_JUNE="June";.var LSJ_CALENDAR_JULY="July";.var LSJ_CALENDAR_AUGUST="August";.var LSJ_CALENDAR_SEPTEMBER="September";.var LSJ_CALENDAR_OCTOBER="October";.var LSJ_CALENDAR_NOVEMBER="November";.var LSJ_CALENDAR_DECEMBER="December";.var LSJ_CALENDAR_TODAY="Today";.var LSJ_CALENDAR_FIND_TODAY="Find today";.var LSJ_CALENDAR_PRVIOUS_MONTH="Previous m

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\rp[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
IE Cache URL:	https://alb.reddit.com/rp.gif?ts=1625899166049&id=t2_msyi4ws&event=PageVisit&uuid=1018968d-8a35-4a09-92ef-f44f18c4c387&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_87c5745b
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\rw-cards-container[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	6315
Entropy (8bit):	5.162718094102763
Encrypted:	false
SSDEEP:	48:vu4UaFDzODCD+2DZHDxtjA+D0q+DtuookpJvjzDKoBcxlBtjPFhDGpIy2vq1wCmy:vuOHahuQpwoyLOpIy2v6nahRVv2
MD5:	374C48A44808A656C774C3AB0FA83A61
SHA1:	73D44EFCA54E47F0A0F06BCC210154A5FAC7A170
SHA-256:	AFA39965919C32A0956AB9F48E376FA7BDD25F092632A1CECD44CA8E08BBA714
SHA-512:	AA3992A805A5F2D56C3C68E0D9BF0EE614FF24D4B02C3083579F75F9873A4663AE4FDD1621BE6E8B3FE86BCFADA299BB059A5E9C1406E4199656169332CEFCC9
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/rw-cards-container.css
Preview:	:root{--breakpointsSmall:48rem;--breakpointsMedium:64rem;--breakpointsLarge:75rem;--breakpointMaxSmall:47.9375rem}@media (min-width:64rem){.RwCardsContainer_cardsContainer__b8d93eb6.RwCardsContainer_roundedBg__b8d93eb6{max-width:90rem;max-width:var(--breakpoints-xlarge);margin:0 auto;padding:0 2.5rem;padding:0 var(--spacing-large)}}.RwCardsContainer_cardsContainer__b8d93eb6.RwCardsContainer_roundedBg__b8d93eb6 .RwCardsContainer_container__b8d93eb6{border-radius:.5rem;border-radius:var(--spacing-xxsmall)}.RwCardsContainer_cardsContainer__b8d93eb6 [class^=RwCarousel_rwGroup]>div>div>div:only-child{margin:0 auto;-webkit-transform:translateX(-.625rem);transform:translateX(-.625rem)}.RwCardsContainer_container__b8d93eb6{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:column;flex-direction:column;-webkit-box-align:center;-ms-flex-align:center;align-items:center;padding-bottom:5rem;padding-bottom:var(--spacing-xx

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\rw-carousel[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	6900
Entropy (8bit):	5.157087195972847
Encrypted:	false
SSDEEP:	192:v19JMyk2X9nBUABFT9SdfcsEKb7X2ipApg/:d9Jxk2X9nBUAtSdfcI7X2ipApg/
MD5:	D2B8C0A31A2FC4E10D168A1593A47CD9
SHA1:	17DE44F3A041A0F993D0EC5611F17DD82FCBB994
SHA-256:	A05E79A4E2B019BC8695DBC95C0C5C0E52DD9D9DEA4BE0B76E34C7124B19C3BF
SHA-512:	A7892F1E76E066806182AADD2C15963A3ED17C60D050AE6596F9E06B3033E856C127EDC0F87FDEB3631D156BBA3402E05E1E2BABABC8464EA6CDE3B3C8C7FAFF
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/rw-carousel.css
Preview:	:root{--breakpointsSmall:48rem;--breakpointsMedium:64rem;--breakpointsLarge:75rem}.RwCarousel_rwGroup__a2f1d0cc{width:calc(83.333% + 2rem);width:calc(var(--grid-column-10) + 2rem);position:relative;padding:0;max-width:76.875rem;margin:0 auto}.RwCarousel_carouselWrapper__a2f1d0cc{overflow:hidden}.RwCarousel_carouselContainer__a2f1d0cc{display:none;width:100%;position:relative;-ms-overflow-style:none;scrollbar-color:transparent transparent;scrollbar-width:0;scroll-behavior:smooth;padding-top:1rem;padding-top:var(--spacing-xsmall);padding-bottom:1rem;padding-bottom:var(--spacing-xsmall);padding-left:1.125rem;padding-left:calc(var(--spacing-small) - .125rem)}.RwCarousel_active__a2f1d0cc{display:-webkit-box;display:-ms-flexbox;display:flex}.RwCarousel_carouselContainer__a2f1d0cc::-webkit-scrollbar{width:0}.RwCarousel_carouselItem2__a2f1d0cc{-ms-flex:0 0 calc(50% - 1.125rem);flex:0 0 calc(50% - 1.125rem)}.RwCarousel_carouselItem2__a2f1d0cc,.RwCarousel_carouselItem3__a2f1d0cc{-webkit-box-flex

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\rw-price-card-container[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10883
Entropy (8bit):	5.121870423097833
Encrypted:	false
SSDEEP:	192:vWvhR02Myj/1YXnqN0Qck2+R8dR1oJ3dBJiljeYFnyQZy7KVPycev8UaWayivw+I:ixiXot0ZEpApIKHb6
MD5:	1B5677C93FD5D7682B76FA689800023B
SHA1:	BDD7AF353CE033521D07E11714974C410670F842
SHA-256:	4AB75C9D80898452EA8AE67CF06434B3941AA06389F52C96C28173A7147D0F70
SHA-512:	70B814428D19D2DE81173E9203005348C094301651BBDC32F1AB3836604C0970D78C90A2AE9022520A8A98A1B18484199E75C8F3A4F77193E02ABC820743E4F2
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/qbmds-components/releases/2258/styles/quickbooks/mds/rw-price-card-container.css
Preview:	:root{--breakpointsSmall:48rem;--breakpointsMedium:64rem}.RwPriceCardContainer_rwPriceCardsContainer__ae463912{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-ms-flex-direction:row;flex-direction:row;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:stretch;-ms-flex-align:stretch;align-items:stretch;padding-top:2.5rem;padding-top:var(--spacing-large);padding-bottom:2.5rem;padding-bottom:var(--spacing-large)}.RwPriceCardContainer_carouselWrapper__ae463912{overflow:hidden;display:none;position:relative;padding-top:2.5rem;padding-top:var(--spacing-large);background-color:inherit}.RwPriceCardContainer_carouselContainer__ae463912{display:-webkit-box;display:-ms-flexbox;display:flex;width:100%;position:relative;-ms-overflow-style:none;scrollbar-color:transparent transparent;scrollbar-width:0;scroll-behavior:smooth;padding-top:1rem;padding-top:var(--spacing-xsmall);padding-bottom:1rem;padding-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\settings[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	16362
Entropy (8bit):	4.70831212225142
Encrypted:	false
SSDEEP:	192:OkgyAV2Vz4lF6p7tFr0b4Uql6kWlmy/TRME+VSKPdeI:My5VzBp7tF9UA6HL/TRMrVDeI
MD5:	01C4137472F69F58098F59F439A4C351
SHA1:	72809A850507A4C8221008BC551EB3AC53E2E480
SHA-256:	18C8D4E9CF5524F215BB2963915BC26BEC83EB6C6CDF35CFFC8FDFC85E91FE30
SHA-512:	1A43F9099844D616B50DBA79F848BDDA9CF700EB809ED747B27AAACEFD54D1AA33C9790DA81D15458CB7DBEE1A5C9A26A47AAC356545CEBB3F4DB96EF1191761
Malicious:	false
Reputation:	low
IE Cache URL:	https://segment.intuitcdn.net/v1/projects/49ALC2bJOz8hBADcZ9GQOO1DOFuH1DEp/settings
Preview:	{"integrations":{"Adobe Analytics":{"contextValues":{"messageId":"messageId","page_timing_total_time":"page_timing_total_time","page_timing_dom_ready":"page_timing_dom_ready"},"customDataPrefix":"","disableVisitorId":false,"eVars":{"locale":"eVar10","ivid":"eVar13","sign_up_flow":"eVar14","sku":"eVar15","lead_xref_id":"eVar60","page_geography":"eVar63","url_query_param":"eVar65","url":"eVar64","channel_cookie_90day":"eVar26","company_id":"eVar59","realm_id":"eVar58","server_enrichment_ip_address_flag_is_internal":"eVar50","server_enrichment_ua_parser_is_crawler":"eVar51","server_enrichment_ua_parser_crawler_name":"eVar52","experiment_ids":"eVar71","experiment_ids_experienced":"eVar72"},"enableTrackPageName":true,"events":[{"segmentEvent":"oii_account_creation:create_succeeded","adobeEvents":["event9"]},{"segmentEvent":"oii_account_creation:create_attempted","adobeEvents":["event8"]},{"segmentEvent":"walink:interacted","adobeEvents":["event65"]},{"segmentEvent":"lead:create_submitted","

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\sharedScripts[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	16197
Entropy (8bit):	5.386767674908872
Encrypted:	false
SSDEEP:	384:jyX1n+zxdw8eeczBJ3GmWukG5ypKEJpvRbGWjuBWlScJVnxiiywBFoOXgwCf2W9x:g+zxdw8eeczBJ3GmWukGgpKELJbGW6Br
MD5:	B62764C5376F2D853D42BC65BD4AE640
SHA1:	655E195E7F8F669CBE34DD3DB33297DC1AE5943C
SHA-256:	2B3607D6FC42F9FA39C439DD00CB83CD77DF3EAF8F15FA4895E75CFA17B11AFB
SHA-512:	346F2481CFBB6CC95DA3A6160AEDA236D65A771720B12A8A7F4C60ECED0157C0C5A6D8B43B4F60727BC7EE638529001AD966B56B511792B884488E42EA9C77CA
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/sharedScripts.js
Preview:	if(typeof qbo==="undefined"\|\|!qbo){qbo={}}if(!qbo.common){qbo.common={}}qbo.clusterId=qbo.clusterId\|\|CLUSTER_ID;qbo.serverGroup=qbo.serverGroup\|\|SERVER_GROUP;qbo.versionForFile=qbo.versionForFile\|\|versionForFile;qbo.hostForFile=qbo.hostForFile\|\|hostForFile;qbo.getJSX=function(){if(!qbo.JSX){qbo.JSX={window:window,document:document,topContext:top.__CTX__}}return qbo.JSX};if(!qbo.navigate){qbo.navigate=function(a){CJP.qbo_navigate(qbo.getJSX(),a)}}if(!qbo.navigateInNewWindow){qbo.navigateInNewWindow=function(a){var b=qbo.getUrl("frameset")+"?page="+a;window.open(b)}}if(!qbo.getUrl){qbo.getUrl=function(a){return qbo.hostForFile(a)+"/c"+qbo.clusterId+"/v"+qbo.versionForFile(a)+"/"+qbo.serverGroup+"/"+a}}if(!qbo.getUIServiceUrl){qbo.getUIServiceUrl=function(a){return CJP.SERVLET_ROOT+"/uiservice/"+a}}if(!qbo.getLegacyUIServiceUrl){qbo.getLegacyUIServiceUrl=function(b,a){if(!a){a="v2009_06_11"}return CJP.SERVLET_ROOT+"/qbosvcs/"+b+"/"+a+"/"}}if(!qbo.getUrlWithTimeStamp){qbo.getUrlWithTimeSta

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\sitefooter[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	846
Entropy (8bit):	4.931613571369565
Encrypted:	false
SSDEEP:	12:2XVXmqD4L7nLSLyCenLSZ9C8W+ItWjkek/1llLJeWPYOw:2XMJzLSLKLSZ4e/oPlDeUw
MD5:	3692F8A7AAD1B5694EE3549C970DAA78
SHA1:	F0432C3C7E31A81F9DD402BA60AD1DC0326FCCC7
SHA-256:	CDE8091221AD5338B744DC0970487F035289F8E6D7CB8BD716A2EA5A33327070
SHA-512:	C392D48CD23352A3581AA6394F041653DBC93E319BBA7250ED84111F63D132FEC5237F6D9C133570B252DB7F770E033C395DC674EAEC6EC097AE167D5BA823C3
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/sitefooter.css
Preview:	html,body{height:100%;min-width:960px}#fullPageBody{min-height:100%;min-width:100%}#pageBody{overflow:visible}.siteFooterLinks a:hover{text-decoration:underline}.siteFooterLinks a{color:#76818c !important;cursor:pointer;text-decoration:none}.siteFooterLinks a.feedbackLinkSelected{color:#fff !important;cursor:pointer;text-decoration:none}.siteFooterLinks span{margin-right:10px}#sitefooter{background:white;height:27px;padding-top:20px;padding-bottom:10px;position:relative;clear:both;width:100%;bottom:0;left:0;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;-ms-box-sizing:content-box;box-sizing:content-box}.siteFooterMainDiv{border-style:solid none none none;border-top:1px solid #dfdfdf;background:white;margin-left:20px;margin-right:20px}.siteFooterTextDiv{margin-top:12px;font:normal 11px Arial;color:#76818c;position:relative}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\the-baconer-manufacturing-testimonial-photo-qbo-us@2x[1].wdp Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG-XR
Category:	downloaded
Size (bytes):	33817
Entropy (8bit):	7.95198935605348
Encrypted:	false
SSDEEP:	768:W9RRwwarPnCKrSHmEXbDeEs+DU/suyds6YYLb/RMfFU:WnRwwEPCKemEXbS+DZFe6/6U
MD5:	DCF881001A7C508DA18D762FFD16CEB1
SHA1:	6A37F401AFE6628A3D563EE03ED0E766902B5CF2
SHA-256:	086C3E17A5CE21C3012904C1CE7B80CE48D0254D8AA532B3600273C5A003B376
SHA-512:	A5D0B38D3B16C23C5C9B9D2C945F849A34FAE0A25CB4BEAC3680B03B00FF20F5673B0FF1251EF541499FF0D36E4CBDEE84205119A9123E872F21B1D4EEB8165F
Malicious:	false
Reputation:	low
IE Cache URL:	https://quickbooks.intuit.com/oidam/intuit/sbseg/en_us/quickbooks-online/web/image/photo/the-baconer-manufacturing-testimonial-photo-qbo-us@2x.jpg
Preview:	II.. ...$..o.N.K..=wv.............................................p...........q..............B...........B............................WMPHOTO..E.q.o.p0...,HHR..@......-..(.......0. ..((....a..E..M..4Kf.n.I...Ekm.k..q..q...'V..nH....U....P.7/U`cM....8..t......g8\|.)3s...+.....B..0x&...w....d..>.\;[.mN.E.k."B .#.%..O<.#..7..bw>.pX.)......8.._.....;j..&..e..F..m.Fz..4..\|"...]+}.;.s....O...-..b...d0"...i....V...u.X-.Z...d...L.Z.,.P..z..-.N.SA...El........r"...E3<#.Z.~...)...6.A...^.U.Z.f/.H.Z..&U.+}...v..^...... 3.\...t..'....J...\|-.c...W..>a(.]!..\|UT..M6.}.....9[P@...ks.....&..d.d.}.t..)6Y...0....P.!O....k:..=.9l.j..\|.i.n....}}...(...ZY8+...jV...N.l1QZ.m=7y.#q.H..A.Zu#.....M>.e:.Ol<.....&.v.......7~?.{V.lA7+..."8s..9..HZ....A.-..md._...>,H...,...c....B...7..J[.,..j...ni.....8..&.....z#3..M.'.V"4..V...t..J...U.<'.kHU.z.'.e w..$\|I.G....t..d...yt..V).. ...kX.1.nu{Q....---..M......gh.g.~o[C..].....>BU.\|.y...\|.2..?d......m"K.Z......0..S..z....S..-../..U.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\track-event-lib-performance.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2524
Entropy (8bit):	5.082509729121411
Encrypted:	false
SSDEEP:	48:DU9skiq0zlRSl1Wy9Vgkt76yO5B97dMpdJLoHWg5ltD0v2z4zejCgycs6:WynSlAAVgkNK7dMhoHWg5ltc2z4ze20
MD5:	41F96574F309B84D43E60DA09113F1D9
SHA1:	A03FB74485A41D88BD3DB32BE0A24D33111B90DA
SHA-256:	E32E6D94860B1EE5C93D5942F0A17028CBFA414D200A0CFAD9C6563D0EDA07CC
SHA-512:	CBFDA2EE768BD61E1616E300FD21B5AEB763A322017790AD76190BA1145AFA2A8E2AD1F0262225B68DFCEE3E30028C62B4FE3B94787134B3BD2D2017A1239804
Malicious:	false
Reputation:	low
IE Cache URL:	https://uxfabric.intuitcdn.net/analytics/202104142250/track-event-lib-performance.min.js
Preview:	!function(){"use strict";var t={d:function(e,n){for(var r in n)t.o(n,r)&&!t.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},o:function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r:function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};function n(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function r(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function o(t){for(var e=1;e<arguments.length;e++){var o=null!=arguments[e]?arguments[e]:{};e%2?r(Object(o),!0).forEach((function(e){n(t,e,o[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(o)):r(Object(o)).forEach((function(e)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\track-event-lib.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	176630
Entropy (8bit):	5.338157663563204
Encrypted:	false
SSDEEP:	3072:2GMZuPzzNF4nytzz4F4/DzzxF4o0eX1DNVrH0AGK4ojah0N6KXzzkF4ynb14f:2xkN6yp44xDX1DNVrFPa+vkDb1i
MD5:	053AA583D3581AE5E8E847ACE6AA9CB6
SHA1:	70AE7DE26911E8BCFFFCB3D0C5B2ACE0FBB5D44B
SHA-256:	237D8E5040D821FFF0420ABD2C23D691C17104C0CF4446F3DA7149BAE6139D90
SHA-512:	980B1F3DEB24073302349447BB7C7D3A0642F467066943FE39E884CDCCF0E8F68B6607AD122553E673F45BD0967D9B49B256DF5FCD2CA54BA767840AB01A08A7
Malicious:	false
Reputation:	low
IE Cache URL:	https://uxfabric.intuitcdn.net/analytics/202104142250/track-event-lib.min.js
Preview:	/! For license information please see track-event-lib.min.js.LICENSE.txt /.!function(){var t={8435:function(t){"use strict";t.exports=JSON.parse('{"default_version":"3.3","common":[{"getBrowserProperties":{"parameterValues":["browser_encoding","browser_height","browser_java_enabled","browser_plugins","locale","screen_color_depth","url_host_name","url_query_param","campaign","browser_cookies_enabled","page_language"],"targetLocations":{"track":["properties"],"page":["properties"]}}},{"getCookieProperties":{"parameterValues":["aam_segment_ids","adobe_fid"],"targetLocations":{"track":["properties"],"page":["properties"]}}},{"getCookieProperties":{"parameterValues":["pseudonym_id"],"targetLocations":{"track":["properties"],"page":["properties"],"identify":["traits"]}}},{"getCcpaGdprPreferences":{"targetLocations":{"track":["properties"],"page":["properties"],"identify":["traits"]}}},{"getAdobeIntegrationProperties":{"targetLocations":{"track":["integrations.Adobe Analytics"],"page":["int

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\utag.v[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:Rn:R
MD5:	7BC0EE636B3B83484FC3B9348863BD22
SHA1:	EBBFFB7D7EA5362A22BFA1BAB0BFDEB1617CD610
SHA-256:	A2C2339691FC48FBD14FB307292DFF3E21222712D9240810742D7DF0C6D74DFB
SHA-512:	4D094B64124366530E7E327B1AD5D06C0FD1CEB96387D6A143E9F561C2F9FF7CA9D68E7C23B8B14AAB5309C202A8DCED9A38D950662A50984D2841577293CD64
Malicious:	false
Reputation:	low
IE Cache URL:	https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=intuit/sbseg-us/202107012157&cb=1625899166037
Preview:	//

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\verisignseal[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 97 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4640
Entropy (8bit):	7.943368930575111
Encrypted:	false
SSDEEP:	96:K3mdUT7rZh9X/0AwPimMx5SU1+c5meGUSy8AY04vKk6syyjt:JGw6vj4cyNyzBXkjt
MD5:	324E6043413D4BB481BA0CC4888C5020
SHA1:	4AAF993797F63093F5BDA02D44228BC87DDD5B9B
SHA-256:	0A64227A29465D4E11FDBC843CAF73309286DAB8B414EE12118554A863F62658
SHA-512:	88D5F716E8A7783413F82E576DF01C87D605D5E59D7223B6529E772FD0E953075964F3AB9B71CD374684673AC6929AFC1C8A555959B1049D84828826C9A6CED7
Malicious:	false
Reputation:	low
IE Cache URL:	https://uiclassic.intuitcdn.net/v1960.161/scripts/harmony/images/verisignseal.png
Preview:	.PNG........IHDR...a...(......Q.....$iCCPICC Profile..8..U.o.T.>.oR..? XG...US[......I...J....$.:7......O{.7...@...H<!..b{....IS..IH{...!&..U.vb'S.\...9.9.;.^.D=_i...U......$......M...K...N-..................N.#.z..."O.n..}...Q..k.K.....i.......6.....}..x..'=N!?.........<..f/.a_....Un.."f....ar../.q.1....u..].X....c....+.T..?....K._..Ia......\|.x.Q...}t..G__......{.p..M.ju1{.....%..#8.ug......V...c..Si.a..J}.._.qV...Z...#.d......?.......:73...KWkn..A..YQ..2.;^..)m.......v....J...&..fzg............t..y.?.:/....].Rb...G.DD#N.-b.J;.P.2..F6<%2....a1"O..l.y9.......-.Q.;.p..X?S....b..0.g...7...K.:....rm:..}(..OuT.:NP..@}(.Q..........K+.#O.14[.. ..hu7.>.kk?..<......kkt.q..m.6.n.....-.mR.;`z.....v..x#.=\..%..o.Y..R.......#&.?.>........n._....;j..;.$}*}+.(}'}/.L.tY.".$].....9..%.{._a..]h.k.5'SN.{.......<...._..............t..jM.{-...4.%.....T..t.Y...R6....#.v\..x:..'H..O...3.....^.&.......0::.m,L%.3.:qVE..t...]~....I.v.6..W...).\|.2].G...4...(6

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\www-embed-player[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	196768
Entropy (8bit):	5.5991158351211565
Encrypted:	false
SSDEEP:	3072:jQq0mB8G508Fet3IF8jzZqovS/C5PmMlekOdWs:XJFet3IF8jzZbnlmMlQ
MD5:	143ACACDC058C189076414F7419AACFF
SHA1:	32D32CF201D91BB1B143160665FBDD9E5E08FC74
SHA-256:	6BF931D6C5F9208B846BCBA27FA4B3A581F43559911846BB811D5A848CBFE748
SHA-512:	4FD49577993E1EDDA3B4968ABB82388793DF1556CCB5248F8216AAD098606A94453DB8C65A27E3274E6B29B849DC372764E1EDA289FFCCDC59C09CD291E5618B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube.com/s/player/51ff6aac/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function t(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.t("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e+

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\www-player[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	331395
Entropy (8bit):	5.204469815562603
Encrypted:	false
SSDEEP:	1536:xDrzltP3StI/ZPp/p9rbBMkx6MFfykOP5FRrDJciM/Byj/8486D6M7eNAvldC8vW:xDrzzV9UgzATSBxcm
MD5:	D29CC7DD5E3339028034B4F308B1CD51
SHA1:	A28539A4B5D2BBED99009BAA0B38D6D49257AF40
SHA-256:	D815775F36DE7CF811A67054EF9B292CF0B7730C61FABA018C5756FDA850F136
SHA-512:	61598B08987E30FC018AB8369AB420495E939E8112C14B32C8AC68E6B3D5E33E6385B7EC2995937119775DBB26DF3B6D929CB80C512E60D5BF0C0B7296E52087
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube.com/s/player/51ff6aac/www-player.css
Preview:	.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);-ms-touch-action:manipulation;touch-action:manipulation;-ms-high-contrast-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode,.html5-video-player.ytp-fullscreen{background-color:#000}.ytp-big-mode{font-size:17px}.ytp-autohide{cursor:none}.html5-video-player a{color:inherit;text-decoration:none;-webkit-transition:color .1s cubic-bezier(0,0,0.2,1);transition:color .1s cubic-bezier(0,0,0.2,1);outline:0}.html5-video-player a:hover{color:#fff;-webkit-transition:color .1s cubic-bezier(0.4,0,1,1);transition:color .1s cubic-bezier(0.4,0,1,1)}.ytp-probably-keyboard-focus a:focus{box-shadow:inset

C:\Users\user\AppData\Local\Temp\~DF11773E0F0314E2DE.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	263386
Entropy (8bit):	2.617192119558045
Encrypted:	false
SSDEEP:	768:AUTGKWC9TGKWER210o0d0HUFvZrZUFvAUbwvae5toQ:y777ER210o0d0goEvaW
MD5:	441BD07840A5879889CB3207AE00BA00
SHA1:	FC8B7E25F1DB9F1E378942368A8A769B4FF2B692
SHA-256:	3F248D710B4C62DE3D900820053EE3017E5A3188B5F711F71C3F83F3732ADB6C
SHA-512:	0A8F9DC49DD54C1FF22C854861DD738F7BB462BECC705AFB6495DD0F5AABD122B161AE2B2A7958BD3D36BC350B1F0E8E791088C50C1CCC6EEC7049153DB830DD
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFBC5A4053861E0462.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	29745
Entropy (8bit):	0.3250083256038852
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9lRx/9lRJ9lTb9lTb9lSSU9lSSU9laAa/9laA5REX9laAC/:kBqoxxJhHWSVSEab8jQ2y
MD5:	14129D1C852F1AB4DEBF6817CD0AECFE
SHA1:	0F91A6E39A017F02D6D79EC29B658A9BE3A5D2D8
SHA-256:	F125A737ED71227A2E0D09DC3719C12B5D35FB3A524B08FAC64EFFFF4CD65BB7
SHA-512:	71FF65E4B274B9FAE656BFB358B0370C7354C5272B54E265FBD66DB8F670948B036963176D5867D679276786367A0566664E019DA671E304EE564DDBA182D053
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFFDCEE51B26878627.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	13077
Entropy (8bit):	0.5173231391652717
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9lojF9lop9lWwW3rsjrgc:kBqoIyswW3rsjrgc
MD5:	A7FBDB3B94E0BA593EF760FA50FDB600
SHA1:	FFE1C8B718ED96866059EC3EC52128730E92090D
SHA-256:	93782BB8F3B0E58BDDB12C10CF0AE0F5BB77320B75C4DA73C37A2D79DFA6F068
SHA-512:	11140169FAC1B7C7A1D23C2CE859378B49884E489AA39CEF8672775F74D820BF28EE0175CC0E9A056379E0B73378BCE683B6AF8AC2CF7B51D9BE0A34D18E6B12
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3UE8IXVTZAELQ7T3K0O4.temp Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	3440
Entropy (8bit):	3.1931520777946107
Encrypted:	false
SSDEEP:	48:GdirP6ITC9GrIoeAsASFvdirP6ITh683GrIoeAczH:ZP6d9S+AJVP6e3S+AG
MD5:	A23211591436898C451B5B89B553B95F
SHA1:	C819C4B4326DE33C16B1A5C3FD4B015CDDCDC335
SHA-256:	1C7DE4D0BB5CD99924B82D5CB773095A8A0381AAFCFF8AA57141892DD83C85DC
SHA-512:	59AA0E3F9D7308EAEF145BB825CCF0561857893651A22FD923A2D2E31D79B5E199602963CF7E95CDB77493C6B6AD0CFA4425002A991A8F6D015E8CDF6F437BA8
Malicious:	false
Reputation:	low
Preview:	...................................FL..................F.@.. .....@.>...#..&Vu....?.c................................P.O. .:i.....+00.../C:\.....................1.....>Q=w..PROGRA~1..t......L.>QCw....E...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....l.1......L.J..INTERN~1..T......L..R.4..............................i.n.t.e.r.n.e.t. .e.x.p.l.o.r.e.r.....f.2......L.9 .iexplore.exe..J......L.J.R.4.....R..........x.............i.e.x.p.l.o.r.e...e.x.e.......^...............-.......]...........(.......C:\Program Files\internet explorer\iexplore.exe....-.p.r.i.v.a.t.e...C.:.\.W.i.n.d.o.w.s.\.S.Y.S.T.E.M.3.2.\.I.E.F.R.A.M.E...d.l.l.........%SystemRoot%\SYSTEM32\IEFRAME.dll...................................................................................................................................................................................................................................%.S.y.s.t.e.m.R.o.o.t.%.\.S.Y.S.T.E.M.3.2.\.I

Static File Info

No static file info

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
07/09/21-23:38:15.150134	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49753	443	192.168.2.3	91.235.134.131
07/09/21-23:38:15.150458	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49754	443	192.168.2.3	91.235.134.131
07/09/21-23:38:37.838764	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49796	443	192.168.2.3	91.235.134.131
07/09/21-23:38:37.841393	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49797	443	192.168.2.3	91.235.134.131

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 9, 2021 23:38:11.387423992 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.388315916 CEST	49721	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.553872108 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.553999901 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.563950062 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.565823078 CEST	443	49721	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.565980911 CEST	49721	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.566978931 CEST	49721	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.730185986 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.731029034 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.731070995 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.731203079 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.731232882 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.731244087 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.731283903 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.731405973 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.744312048 CEST	443	49721	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.745342016 CEST	443	49721	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.745383024 CEST	443	49721	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.745420933 CEST	443	49721	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.745451927 CEST	443	49721	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.745497942 CEST	49721	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.745534897 CEST	49721	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.748080969 CEST	49721	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.772452116 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.773277044 CEST	49721	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.779198885 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.779309988 CEST	49721	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.779419899 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.938977957 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.939088106 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.939105034 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.939181089 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.940768003 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.945491076 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.945568085 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.950608015 CEST	443	49721	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.950651884 CEST	443	49721	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.950735092 CEST	49721	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.951205015 CEST	49721	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.951419115 CEST	49721	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.956702948 CEST	443	49721	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.956783056 CEST	49721	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.961009026 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.961114883 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.961136103 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.961193085 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.961236000 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.961277008 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.961283922 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.961318970 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.961337090 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.961359978 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.961386919 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.961402893 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:11.961402893 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:11.961448908 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.106585979 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.106612921 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.106627941 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.106643915 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.106671095 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.106699944 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.110249043 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.110713959 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.111156940 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.111716986 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.111738920 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.111783028 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.111804008 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.129373074 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.129446030 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.129549026 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.129573107 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.129597902 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.129607916 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.129622936 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.129648924 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.129673958 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.129719019 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.129736900 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.129760027 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.129781961 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.129802942 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.129826069 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.129846096 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.129863024 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.129883051 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.129905939 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.129931927 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.129946947 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.129965067 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.129975080 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.129997969 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.130012989 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.130034924 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.130074978 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.130119085 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.173906088 CEST	443	49721	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.275084972 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.275146961 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.275161982 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.275193930 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.275203943 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.275226116 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.275242090 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.275263071 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.278717995 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.292459011 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.292496920 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.292517900 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.292558908 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.292583942 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.293245077 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.293267012 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.293283939 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.293320894 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.293355942 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.294991016 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.295063972 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.295110941 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.295181036 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.297327042 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.297360897 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.297403097 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.297421932 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.297808886 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.297832966 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.297858000 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.297883034 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.297895908 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.297920942 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.297926903 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.297947884 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.297966003 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.297979116 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.298000097 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.298015118 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.298031092 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.298041105 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.298047066 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.298089981 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.298110962 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.298131943 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.298154116 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.298180103 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.298182011 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.298199892 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.298250914 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:12.298259974 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:12.298317909 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:13.561929941 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.562930107 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.584954977 CEST	443	49737	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.585064888 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.585922003 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.586031914 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.593149900 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.615176916 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.615864992 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.615907907 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.615950108 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.615993977 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.616029024 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.616034985 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.701416016 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.708909988 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:13.709774971 CEST	49739	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:13.718082905 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.718445063 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.718677044 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.722942114 CEST	443	49737	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.723757029 CEST	443	49737	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.723804951 CEST	443	49737	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.723850965 CEST	443	49737	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.723860979 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.723900080 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.723906994 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.733468056 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.734123945 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.742492914 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.742522001 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.742599010 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.742626905 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.742707968 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.744174004 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.744230986 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.744342089 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.754740953 CEST	443	49737	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.754817009 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.755460024 CEST	443	49737	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.755517960 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.759156942 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.806062937 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.820842981 CEST	443	49737	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.875299931 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:13.875521898 CEST	443	49739	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:13.875598907 CEST	49739	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:13.875600100 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:13.955290079 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:13.956478119 CEST	49741	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:13.956671000 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:13.960521936 CEST	49739	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:13.976103067 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:13.997905970 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.999304056 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:13.999430895 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:14.119519949 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.119658947 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.120304108 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.120495081 CEST	443	49741	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.120580912 CEST	49741	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.121082067 CEST	49741	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.123128891 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.124638081 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.124701023 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.124783039 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.124799013 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.124806881 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.124829054 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.124881029 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.124895096 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.126867056 CEST	443	49739	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.128474951 CEST	443	49739	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.128500938 CEST	443	49739	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.128562927 CEST	49739	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.128585100 CEST	443	49739	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.128602982 CEST	443	49739	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.128626108 CEST	49739	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.128633976 CEST	49739	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.128664017 CEST	49739	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.140769005 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.145034075 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.145715952 CEST	49739	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.145886898 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.146188974 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.146588087 CEST	49739	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.146979094 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.172003984 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.172143936 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.172156096 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.172247887 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.174388885 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.174875021 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.197592974 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.197628975 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.202368021 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.202416897 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.202445984 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.202466011 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.202486992 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.202517986 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.202526093 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.202553034 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.202560902 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.202567101 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.202572107 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.202575922 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.202585936 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.202605963 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.202608109 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.202624083 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.202625990 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.202658892 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.202687025 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.213774920 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.214354992 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.216634989 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.239207983 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.239348888 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.240278006 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.240314007 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.240407944 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.240430117 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.240443945 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.240474939 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.240495920 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.240500927 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.240529060 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.240535975 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.240547895 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.240566969 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.240587950 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.240595102 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.240617037 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.240622044 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.240653038 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.240663052 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.244529009 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.244676113 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.244704962 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.244769096 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.270924091 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.273542881 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.286360979 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.286895990 CEST	443	49741	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.288206100 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.288364887 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.288383007 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.288410902 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.288431883 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.288451910 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.288497925 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.288501024 CEST	443	49741	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.288568974 CEST	443	49741	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.288575888 CEST	49741	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.288626909 CEST	49741	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.288630962 CEST	443	49741	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.288651943 CEST	443	49741	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.288676023 CEST	49741	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.288712978 CEST	49741	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.297024012 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.297158957 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.299910069 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.300930023 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.301224947 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.307363987 CEST	49741	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.307693958 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.307715893 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.307785988 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.307796955 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.307801962 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.307816982 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.307821989 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.307830095 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.307851076 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.307869911 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.307878017 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.307898998 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.307914972 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.307934046 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.307944059 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.307950020 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.307954073 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.307987928 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.308007002 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.308120966 CEST	49741	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.308296919 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.308311939 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.308397055 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.314104080 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.315644979 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.315754890 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.316181898 CEST	443	49739	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.316196918 CEST	443	49739	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.316209078 CEST	443	49739	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.316241026 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.316258907 CEST	49739	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.316327095 CEST	49739	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.316869974 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.328809023 CEST	49739	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:14.332442045 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.332547903 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.332945108 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.332967043 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.332987070 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333005905 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333014965 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.333024979 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333030939 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.333045006 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333085060 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.333127975 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333172083 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.333600998 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333623886 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333642960 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333647013 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.333668947 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333679914 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.333692074 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333710909 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333713055 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.333730936 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333739996 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.333750010 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333769083 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333769083 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.333779097 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.333787918 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333816051 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.333842993 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333847046 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.333863974 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.333887100 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.333913088 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.359313965 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.359428883 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.368083954 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:14.376954079 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:14.464288950 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.464315891 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.464328051 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.464338064 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.464379072 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.464427948 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.464433908 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.466336966 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.466417074 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.472456932 CEST	443	49741	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.472471952 CEST	443	49741	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.472543955 CEST	49741	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.472583055 CEST	49741	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.472702026 CEST	443	49741	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.472752094 CEST	49741	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.474653006 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.475852013 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.476457119 CEST	49741	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:14.497863054 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.497884035 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.497893095 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.497984886 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.498009920 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.499936104 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.499953985 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.522954941 CEST	443	49743	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:14.523099899 CEST	49743	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:14.525017023 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.537055969 CEST	443	49739	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:14.537921906 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:14.538041115 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:14.548693895 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:14.548717976 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:14.548787117 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:14.548827887 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:14.655404091 CEST	49744	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.656230927 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.682333946 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.682641983 CEST	443	49741	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:14.769925117 CEST	443	49744	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:14.770051956 CEST	49744	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.770092964 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:14.770180941 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.770829916 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.771910906 CEST	49744	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.881233931 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:14.882019997 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:14.882062912 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:14.882098913 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:14.882142067 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:14.882169962 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.882222891 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.882230043 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.882235050 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.882267952 CEST	443	49744	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:14.883189917 CEST	443	49744	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:14.883250952 CEST	443	49744	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:14.883274078 CEST	49744	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.883292913 CEST	443	49744	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:14.883328915 CEST	49744	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.883372068 CEST	49744	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.883372068 CEST	443	49744	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:14.883419991 CEST	49744	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.890187025 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.891128063 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.891511917 CEST	49744	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.891988039 CEST	49744	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:14.892200947 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.002105951 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.002134085 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.002280951 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.002331972 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.002815962 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.002914906 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.003134012 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.003349066 CEST	443	49744	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.003417015 CEST	443	49744	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.003447056 CEST	49744	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.003496885 CEST	49744	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.003976107 CEST	49744	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.003982067 CEST	443	49744	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.004095078 CEST	49744	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.024444103 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.024482012 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.024514914 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.024543047 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.024563074 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.024586916 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.024614096 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.024684906 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.024751902 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.024760008 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.024765015 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.024769068 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.072360039 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.076055050 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.094358921 CEST	49748	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.099808931 CEST	49749	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.100578070 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.100661039 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.100675106 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.100718021 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.100749016 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.100776911 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.100800037 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.100814104 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.100821972 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.100825071 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.100845098 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.100861073 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.100889921 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.100894928 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.100905895 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.100918055 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.100944996 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.100959063 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.101011038 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.101061106 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.101582050 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.101802111 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.102621078 CEST	49750	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.102763891 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.103884935 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:15.105076075 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:15.110490084 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.110707045 CEST	49752	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.110979080 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.112694025 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.112771988 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.112786055 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.112799883 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.112870932 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.112906933 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.112963915 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.112984896 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.113471985 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.113535881 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.113586903 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.113651037 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.120212078 CEST	443	49748	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.120306015 CEST	49748	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.120886087 CEST	49748	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.124334097 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.124494076 CEST	49754	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.125663042 CEST	443	49749	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.125746965 CEST	49749	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.126446962 CEST	49749	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.128400087 CEST	443	49750	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.128496885 CEST	49750	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.129045010 CEST	49750	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.129101038 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.129264116 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.129331112 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.129769087 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.131822109 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.133841991 CEST	49755	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.134021044 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:15.134207964 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:15.134438992 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:15.134529114 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:15.136383057 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.136449099 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.136508942 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.136562109 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.136598110 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.136636972 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.136673927 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.136689901 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.136742115 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.136785030 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.136807919 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.136821032 CEST	443	49752	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.136890888 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:38:15.137017012 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.137023926 CEST	49752	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.137232065 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.139039040 CEST	49752	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.139218092 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.139970064 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.146439075 CEST	443	49748	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.146786928 CEST	443	49748	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.146981001 CEST	49748	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.147351027 CEST	49748	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.148964882 CEST	443	49753	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.149107933 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.149154902 CEST	443	49754	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.149190903 CEST	49748	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.149290085 CEST	49754	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.150134087 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.150458097 CEST	49754	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.150830030 CEST	443	49749	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.151097059 CEST	443	49749	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.151180983 CEST	49749	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.151602030 CEST	49749	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.153115034 CEST	443	49750	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.153245926 CEST	443	49750	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.153326035 CEST	49750	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.153683901 CEST	49750	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.154036045 CEST	49749	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.156739950 CEST	443	49744	3.16.63.147	192.168.2.3
Jul 9, 2021 23:38:15.157457113 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.158997059 CEST	443	49755	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.159100056 CEST	49755	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.159581900 CEST	49755	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.160334110 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.160378933 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.160425901 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.160469055 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.160475969 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.160523891 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.160569906 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.160664082 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.160695076 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.160743952 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.160764933 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.160789967 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.160825968 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.160826921 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.160849094 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.160866976 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.160906076 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.160907030 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.160954952 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.161959887 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.162293911 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.162316084 CEST	443	49752	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.162364006 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.162416935 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.162471056 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.162511110 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.162540913 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.162579060 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.162626982 CEST	443	49752	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.162638903 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.162652016 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.162674904 CEST	443	49752	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.162736893 CEST	443	49752	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.162769079 CEST	443	49752	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.162794113 CEST	49752	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.162820101 CEST	49752	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.162834883 CEST	49752	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.162849903 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.162925959 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.163265944 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.163347960 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.163444996 CEST	443	49752	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.163528919 CEST	49752	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.164465904 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.164613962 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.172194958 CEST	443	49748	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.172238111 CEST	443	49748	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.172396898 CEST	49748	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.173259020 CEST	443	49753	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.173291922 CEST	443	49753	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.173331022 CEST	443	49753	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.173378944 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.173409939 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.173504114 CEST	443	49753	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.173527956 CEST	443	49753	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.173549891 CEST	443	49754	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.173580885 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.173607111 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.173671961 CEST	443	49754	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.173703909 CEST	443	49754	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.173758984 CEST	49754	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.173796892 CEST	49754	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.173830032 CEST	443	49754	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.173856974 CEST	443	49754	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.173974991 CEST	49754	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.174031019 CEST	443	49753	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.174077034 CEST	443	49753	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.174089909 CEST	49754	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.174124002 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.174154043 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.174580097 CEST	443	49754	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.174612045 CEST	443	49754	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.174693108 CEST	49754	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.176961899 CEST	443	49749	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.177059889 CEST	443	49749	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.177587986 CEST	49749	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.182641983 CEST	443	49755	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.182722092 CEST	443	49755	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.182805061 CEST	49755	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.183764935 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.183844090 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.184230089 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.190676928 CEST	49754	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.191158056 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.191596031 CEST	49755	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.198911905 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.200098038 CEST	49752	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.200957060 CEST	49757	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.201253891 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.201958895 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.207752943 CEST	443	49753	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.207851887 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.213943005 CEST	443	49754	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.214029074 CEST	49754	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.214358091 CEST	443	49753	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.214389086 CEST	443	49753	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.214421034 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.214452028 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.214584112 CEST	443	49753	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.214648008 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.214696884 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.214726925 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.216483116 CEST	443	49750	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.222301960 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.222400904 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.223479986 CEST	443	49752	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.223613977 CEST	49752	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.227092981 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.227190018 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.227299929 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.227349043 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.227371931 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.227396965 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.227427959 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.227436066 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.227474928 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.227475882 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.227499008 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.227514029 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.227550983 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.227554083 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.227586985 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.227607012 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.231420994 CEST	443	49757	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.231534958 CEST	49757	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.232208014 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.232327938 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.232717037 CEST	49757	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.234071016 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.238112926 CEST	443	49753	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:15.238200903 CEST	49753	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:15.247411966 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.247524977 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.247554064 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.247592926 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.252016068 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.252119064 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.252197981 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:15.252320051 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:15.253818989 CEST	443	49755	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.262645006 CEST	443	49757	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.262871981 CEST	443	49757	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.262923956 CEST	443	49757	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.262945890 CEST	49757	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.262989998 CEST	49757	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.264458895 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.264796019 CEST	443	49757	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.264832020 CEST	443	49757	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.264884949 CEST	49757	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.265093088 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.265141964 CEST	49757	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.265187025 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.265326023 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.265398026 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.267203093 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.267235994 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.267312050 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.267343998 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.269939899 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:15.273745060 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:15.274904013 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.275335073 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.275441885 CEST	49757	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.275573015 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.275641918 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.275924921 CEST	49757	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.299021959 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:15.299073935 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:15.305308104 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:15.305349112 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:15.305377007 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:15.305421114 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:15.305449963 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:38:15.305488110 CEST	443	49757	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.305494070 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:15.305499077 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.305515051 CEST	443	49757	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.305533886 CEST	443	49757	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.305543900 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:38:15.305560112 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.305593967 CEST	443	49757	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.305630922 CEST	49757	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.305681944 CEST	443	49757	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.305707932 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.305763960 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.305788994 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.305793047 CEST	49757	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.305820942 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.305849075 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.308058977 CEST	49757	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.309118032 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.311635017 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.311695099 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.311748981 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.311795950 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.311810970 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.311872005 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.311986923 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.312436104 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.312530994 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.312757015 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.312858105 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.312890053 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.312952042 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.313314915 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.313401937 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.313412905 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.313484907 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.313860893 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.313910007 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.314004898 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.314033985 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.314678907 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.314727068 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.314743996 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.314783096 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.315663099 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.315690994 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.315799952 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.315885067 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.316097975 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.316139936 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.316176891 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.316188097 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.316215992 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.316231966 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.316252947 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.316282988 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.316324949 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.316333055 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.316463947 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.316525936 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.316740990 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.316804886 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:15.338638067 CEST	443	49757	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.343774080 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:15.510878086 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:15.522048950 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:15.534648895 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:15.534765959 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:15.647588968 CEST	49749	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.669912100 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.671058893 CEST	443	49749	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.671137094 CEST	49749	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.689249992 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:15.689327955 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:15.694817066 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.695883036 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:15.695956945 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:15.699822903 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:15.700007915 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:15.700393915 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:15.865242958 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:15.867959976 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:38:15.868107080 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:38:16.301316023 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:16.324681044 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:16.325720072 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:16.325803995 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:16.847141981 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:16.871392012 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:16.871833086 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:16.871901989 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.166708946 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:17.166749954 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:17.166816950 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.167792082 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.173615932 CEST	443	49748	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:17.173649073 CEST	443	49748	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:17.173695087 CEST	49748	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.175468922 CEST	49748	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.228555918 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:17.228585005 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:17.228663921 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:17.322475910 CEST	49748	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.322519064 CEST	49748	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.322810888 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.322838068 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.323561907 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.346898079 CEST	443	49748	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:17.346942902 CEST	443	49742	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:17.346993923 CEST	49748	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.347031116 CEST	49742	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.348527908 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:17.348778963 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:17.348860025 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.409687996 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.433456898 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:17.434628010 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:17.434741974 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.672806978 CEST	443	49749	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:17.672851086 CEST	443	49749	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:17.672939062 CEST	49749	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.673007965 CEST	49749	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.844528913 CEST	49749	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.844566107 CEST	49749	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.845493078 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.868853092 CEST	443	49749	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:17.868931055 CEST	49749	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:17.870682955 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:17.871634960 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:17.871714115 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:18.405798912 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:18.432785988 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:18.433619022 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:18.433706045 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:18.896559000 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:18.922616005 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:18.922641039 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:18.922704935 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:19.388391972 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:19.415107012 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:19.415994883 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:19.416140079 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:19.873262882 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:19.897217035 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:19.897921085 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:19.898078918 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:20.375910997 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:20.399337053 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:20.400125027 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:20.400213003 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:20.856364965 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:20.879842043 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:20.880796909 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:20.880928993 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:21.341512918 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:21.368784904 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:21.368833065 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:21.368963957 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:21.826504946 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:21.854572058 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:21.855715036 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:21.855820894 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:22.334956884 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:22.358535051 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:22.359622955 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:22.359739065 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:22.831820965 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:22.858294010 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:22.859268904 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:22.859337091 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:23.348593950 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:23.376462936 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:23.597995043 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:23.598109961 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:23.780910015 CEST	443	49737	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:23.781016111 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:23.848315954 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:23.871705055 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:23.872728109 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:23.872859001 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:24.988338947 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:25.017097950 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:25.017160892 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:25.017250061 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:25.565059900 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:25.565237045 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:26.197946072 CEST	49750	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:26.198301077 CEST	49755	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:26.198775053 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:26.223385096 CEST	443	49750	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:26.223436117 CEST	443	49750	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:26.223602057 CEST	49750	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:26.223643064 CEST	49750	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:26.224303007 CEST	443	49755	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:26.224333048 CEST	443	49755	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:26.224430084 CEST	49755	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:26.224477053 CEST	49755	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:26.225509882 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:26.228116989 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:26.228229046 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:26.745502949 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:26.775593996 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:26.775640011 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:26.775660038 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:26.775684118 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:26.775816917 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:26.775868893 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:27.597290039 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:27.597361088 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:27.624629974 CEST	443	49747	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:27.624762058 CEST	49747	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:27.641581059 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:27.668158054 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:27.668418884 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:27.673362970 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:27.674489975 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:27.699044943 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:27.699136972 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:27.699188948 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:27.699198008 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:27.699306965 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:27.700227022 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:27.760385036 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:27.763870955 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:27.767191887 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:27.786514997 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:27.786560059 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:27.786602020 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:27.786748886 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:27.791169882 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:27.791212082 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:27.791306019 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:27.840411901 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:27.905003071 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:28.017949104 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:28.018090963 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:28.799293041 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:28.824017048 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:28.825011015 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:28.825120926 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:29.295650005 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:29.319899082 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:29.320883036 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:29.321053028 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:29.779196024 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:29.806471109 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:29.807317972 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:29.807487011 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:30.266437054 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:30.289882898 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:30.290846109 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:30.290997982 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:30.747809887 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:30.771739960 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:30.772319078 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:30.772521019 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:31.225924015 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:31.251157045 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:31.252268076 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:31.252497911 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:31.724410057 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:31.750858068 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:31.751682043 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:31.751816034 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:32.198338032 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:32.224385977 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:32.225377083 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:32.225555897 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:32.681955099 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:32.705888987 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:32.706494093 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:32.706610918 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:33.183155060 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:33.208240032 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:33.209080935 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:33.209233999 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:33.667320013 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:33.693375111 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:33.694483995 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:33.694654942 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:33.924989939 CEST	443	49737	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:33.925110102 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:34.151592016 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:34.176145077 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:34.176906109 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:34.177078962 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:34.628458977 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:34.652455091 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:34.653569937 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:34.653728008 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:34.791520119 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:34.818826914 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:34.818898916 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:34.818972111 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:34.822510958 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.002818108 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.002882004 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.002921104 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.002959967 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.002999067 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003007889 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003043890 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003046989 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003050089 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003089905 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003104925 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003139973 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003168106 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003206015 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003226995 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003245115 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003268003 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003283024 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003293991 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003319025 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003328085 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003357887 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003371000 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003391981 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003417969 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003438950 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003438950 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003490925 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003493071 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003530979 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003544092 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003573895 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003578901 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003622055 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003627062 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003659964 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003674984 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003700018 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003712893 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003736973 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003746033 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003774881 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003787994 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003814936 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003823042 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003854036 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003861904 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003901005 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003906012 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003943920 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003974915 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.003977060 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.003998041 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.004013062 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.004019976 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.004050970 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.004080057 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.004087925 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.004100084 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.004125118 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.004137993 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.004162073 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.004189014 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.004208088 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.004214048 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.004249096 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.004262924 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.004285097 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.004301071 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.004323006 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.004339933 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.004360914 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.004373074 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.004396915 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.004410028 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.004436016 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.004455090 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.004472971 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.004486084 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.004515886 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.004532099 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.004569054 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.170906067 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.170981884 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171026945 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171034098 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171078920 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171083927 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171099901 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171132088 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171176910 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171228886 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171231031 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171283960 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171293020 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171345949 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171348095 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171389103 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171402931 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171444893 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171446085 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171493053 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171505928 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171545029 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171550989 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171587944 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171596050 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171636105 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171639919 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171684027 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171696901 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171739101 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171740055 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171782017 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171801090 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171833038 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171838999 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171884060 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171885014 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171936035 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171951056 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.171983957 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.171987057 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172028065 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172040939 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172080040 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172080994 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172130108 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172136068 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172184944 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172195911 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172224998 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172240973 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172270060 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172281981 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172307968 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172314882 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172352076 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172357082 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172396898 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172406912 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172455072 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172468901 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172524929 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172527075 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172602892 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172607899 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172646046 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172672033 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172683001 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172698975 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172730923 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172738075 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172780037 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172791958 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172831059 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172835112 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172892094 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172898054 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172940969 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.172951937 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172987938 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.172990084 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173041105 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173053026 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173096895 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173103094 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173147917 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173156977 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173197985 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173206091 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173249960 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173253059 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173302889 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173310041 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173357010 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173368931 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173424006 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173425913 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173484087 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173485041 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173540115 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173541069 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173580885 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173595905 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173631907 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173640013 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173681021 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173693895 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173722982 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173736095 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173775911 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173783064 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173820019 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173830986 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173872948 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173877001 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173927069 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.173928976 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173975945 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.173986912 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174020052 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174030066 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174065113 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174069881 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174101114 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174124002 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174149990 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174159050 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174199104 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174207926 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174243927 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174247980 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174283981 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174298048 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174319983 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174336910 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174356937 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174371004 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174395084 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174406052 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174429893 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174453020 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174468040 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174483061 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174506903 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174518108 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174552917 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174554110 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174595118 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174604893 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174629927 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174653053 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174668074 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174680948 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174704075 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174719095 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174740076 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174753904 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174777031 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174787045 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174813032 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174833059 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174858093 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174863100 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174897909 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174912930 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174935102 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174945116 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.174972057 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.174982071 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.175019979 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.175020933 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.175052881 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.175070047 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.175103903 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.182395935 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.182611942 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.183809996 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.350003958 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.359428883 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.359488010 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.359528065 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.359549046 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.359555960 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.359591961 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.359599113 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.359602928 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.363749981 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.363806963 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.363847017 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.363850117 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.363881111 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.363893986 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.363899946 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.363936901 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.363954067 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.363974094 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.363997936 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364012003 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364033937 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364048958 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364085913 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364085913 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364105940 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364124060 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364137888 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364161968 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364181042 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364207983 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364223003 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364250898 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364259958 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364281893 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364301920 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364320993 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364330053 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364358902 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364368916 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364401102 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364415884 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364449978 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364459991 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364487886 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364531994 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364537001 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364578962 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364579916 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364614964 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364619017 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364650965 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364653111 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364670992 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364690065 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364706039 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364726067 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364739895 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364763021 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364779949 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364800930 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364814997 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364847898 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364851952 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364888906 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364900112 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364928007 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364942074 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.364969015 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.364978075 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365005970 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365019083 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365041971 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365058899 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365080118 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365087986 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365117073 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365129948 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365163088 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365166903 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365204096 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365211964 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365240097 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365256071 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365278006 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365292072 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365315914 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365333080 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365353107 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365370035 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365391016 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365405083 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365427017 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365441084 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365473032 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365474939 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365515947 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365530014 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365551949 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365571976 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365590096 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365605116 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365627050 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365644932 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365663052 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365677118 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365700006 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365714073 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365737915 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365751982 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365783930 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365787029 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365823984 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365838051 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365859985 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365880013 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365897894 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365915060 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365935087 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365948915 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.365971088 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.365987062 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366008043 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366020918 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366039038 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366056919 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366085052 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366090059 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366127014 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366136074 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366163969 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366180897 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366199970 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366209984 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366238117 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366251945 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366274118 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366292953 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366311073 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366326094 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366348028 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366381884 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366394043 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366398096 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366435051 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366442919 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366472006 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366487026 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366525888 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366528988 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366568089 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366580963 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366597891 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366616964 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366635084 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366650105 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366671085 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366688967 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366718054 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366720915 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366759062 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366765976 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366795063 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366808891 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366837025 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366853952 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366873980 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366909027 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366911888 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366926908 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366946936 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366951942 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.366982937 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.366990089 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367023945 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367028952 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367072105 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367075920 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367106915 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367113113 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367156029 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367185116 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367224932 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367232084 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367260933 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367273092 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367299080 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367305994 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367335081 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367341042 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367371082 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367377043 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367408037 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367425919 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367440939 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367453098 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367482901 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367489100 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367532015 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367535114 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367568016 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367578983 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367604971 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367609024 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367643118 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367650032 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367677927 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367686033 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367714882 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367719889 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367749929 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367758036 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367794991 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367795944 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367836952 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367839098 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367872953 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367883921 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367909908 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367913961 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367945910 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367952108 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.367975950 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.367995024 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368012905 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368016958 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368048906 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368058920 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368093014 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368096113 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368138075 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368140936 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368174076 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368181944 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368211031 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368217945 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368247986 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368252993 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368283987 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368294954 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368319988 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368323088 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368355989 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368362904 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368401051 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368402004 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368443012 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368447065 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368479013 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368486881 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368511915 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368522882 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368547916 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368554115 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368583918 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368596077 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368621111 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368624926 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368657112 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368664026 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368699074 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368702888 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368743896 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368748903 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368781090 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368787050 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368818045 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368822098 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368854046 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368864059 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368890047 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368901014 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368926048 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368928909 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.368963003 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.368969917 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.369005919 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.369009018 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.369050026 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.369052887 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.369085073 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.369091988 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.369112968 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.369128942 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.369138956 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.369158030 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.369179964 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.906742096 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:35.906842947 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:35.933258057 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:35.933393955 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:36.821044922 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:36.821096897 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:36.821216106 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:36.821713924 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.154414892 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.154438972 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.155041933 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.178132057 CEST	443	49776	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.178184032 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.178312063 CEST	49776	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.181720018 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.181766987 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.181802034 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.181827068 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.181835890 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.181864023 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.181870937 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.181902885 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.181904078 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.181941986 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.181946993 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.181960106 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.181987047 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.182028055 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.182058096 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.182075024 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.182113886 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.185204983 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.185358047 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.458595991 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.461973906 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.475442886 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:37.483185053 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.483270884 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.484050989 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.485626936 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.485726118 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.486259937 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.495167971 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.507659912 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.510672092 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.510724068 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.510802984 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.515085936 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.515229940 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.515280962 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.515311956 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.515322924 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.515332937 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.515361071 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.515366077 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.515400887 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.515415907 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.515446901 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.515494108 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.515531063 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.515542984 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.515573978 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.515578032 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.515624046 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.515630007 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.515646935 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.515691996 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.517333031 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.518632889 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.518760920 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.532484055 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.538566113 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.538614035 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.538644075 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.538650990 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.538685083 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.538707018 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.538744926 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.538758993 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.538786888 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.538794041 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.538846016 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.538909912 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.539242983 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.539335012 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.539624929 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.539696932 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.539943933 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.540060043 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.540122032 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.540206909 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.540522099 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.540584087 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.540769100 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.540831089 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.541042089 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.541089058 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.541328907 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.541376114 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.542215109 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.542392015 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.542423964 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.542428017 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.542439938 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.542464018 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.542498112 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.542507887 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.542526960 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.542542934 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.542543888 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.542555094 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.542567968 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.542601109 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.542654991 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.555988073 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.556029081 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.556103945 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.556581974 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.564743996 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.564843893 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.581298113 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:37.603713989 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:37.605844975 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:37.605947018 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:37.620907068 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.625323057 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.649003029 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.649029016 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.649044991 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.649072886 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.649104118 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.649219990 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.649250031 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.652842999 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:37.652862072 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:38:37.652921915 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:37.652970076 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:38:37.672621012 CEST	443	49777	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.672729015 CEST	49777	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.742809057 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.744870901 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.746910095 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.746962070 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.747272968 CEST	49752	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.747294903 CEST	49752	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.748579979 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.748713970 CEST	49792	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.762473106 CEST	49794	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.768322945 CEST	49795	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.768399000 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.768420935 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.768507004 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.769093037 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.769356012 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.769381046 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.769460917 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.769484997 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.769495010 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.769521952 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.769546032 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.769546986 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.769563913 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.769568920 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.769603968 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.769618034 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.769643068 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.769665956 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.769685030 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.769702911 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.769752979 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.769776106 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.769798040 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.769820929 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.770265102 CEST	443	49751	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.770328999 CEST	443	49752	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.770349026 CEST	49751	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.770349979 CEST	443	49752	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.770370960 CEST	49752	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.770395041 CEST	49752	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.771903992 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.771939993 CEST	443	49792	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.772015095 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.772087097 CEST	49792	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.772557974 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.773148060 CEST	49792	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.787079096 CEST	443	49794	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.788114071 CEST	49794	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.788713932 CEST	49794	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.793783903 CEST	443	49795	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.793895006 CEST	49795	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.794812918 CEST	49795	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.795001984 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.796493053 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.797385931 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.797426939 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.797545910 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.797585964 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.797619104 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.797647953 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.797661066 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.797663927 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.797667980 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.797698975 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.797709942 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.797729969 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.797734976 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.797750950 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.797770023 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.797804117 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.797837019 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.797872066 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.797874928 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.797898054 CEST	443	49792	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.797935963 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.797974110 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.798001051 CEST	443	49792	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.798046112 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.798053980 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.798403978 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.798479080 CEST	49792	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.800823927 CEST	49792	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.802684069 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.803744078 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.813016891 CEST	49796	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.813801050 CEST	443	49794	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.813838005 CEST	443	49794	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.813921928 CEST	49794	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.813992977 CEST	49797	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.814450979 CEST	49794	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.818151951 CEST	49794	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.819370031 CEST	443	49795	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.819575071 CEST	443	49795	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.819657087 CEST	49795	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.820085049 CEST	49795	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.823793888 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.824151039 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.827872038 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.828718901 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.829163074 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.830975056 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.831016064 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.831053019 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.831089973 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.831091881 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.831135035 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.831165075 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.831182003 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.831238985 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.831273079 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.831305027 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.831319094 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.831357956 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.831387997 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.831393957 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.831424952 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.831430912 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.831459045 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.831459999 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.831512928 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.831526041 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.838038921 CEST	443	49796	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.838141918 CEST	49796	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.838735104 CEST	443	49797	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.838763952 CEST	49796	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.838845968 CEST	49797	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.841392994 CEST	49797	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.843568087 CEST	443	49794	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.843888044 CEST	443	49794	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.843970060 CEST	49794	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:37.856781006 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.856837034 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.856936932 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:37.864474058 CEST	443	49796	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.864527941 CEST	443	49796	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.864567995 CEST	443	49796	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.864603996 CEST	443	49796	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.864607096 CEST	49796	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.864626884 CEST	49796	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.864640951 CEST	443	49796	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.864655018 CEST	49796	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.864691973 CEST	49796	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.865209103 CEST	443	49796	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.865242958 CEST	443	49796	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.865272045 CEST	49796	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.865305901 CEST	49796	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.865804911 CEST	443	49792	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:37.867072105 CEST	443	49797	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.867189884 CEST	443	49797	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.867328882 CEST	443	49797	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.867348909 CEST	49797	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.867367983 CEST	443	49797	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.867393017 CEST	443	49797	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.867423058 CEST	49797	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.867459059 CEST	49797	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.868187904 CEST	443	49797	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.868217945 CEST	443	49797	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.868299961 CEST	49797	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.868439913 CEST	49797	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.872157097 CEST	49796	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.872879028 CEST	49796	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.873060942 CEST	49797	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.884953976 CEST	443	49795	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:37.898777008 CEST	443	49796	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.898900032 CEST	49796	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.898926020 CEST	443	49797	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.899019957 CEST	443	49796	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.899055958 CEST	443	49796	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.899087906 CEST	443	49796	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:37.899087906 CEST	49796	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.899111032 CEST	49796	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.899142981 CEST	49796	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.899142981 CEST	49797	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.900161982 CEST	49796	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:37.927059889 CEST	443	49796	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:38.278470993 CEST	49794	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:38.279195070 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:38.302061081 CEST	443	49794	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:38.302510977 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:38.302599907 CEST	49794	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:38.303910017 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:38.304019928 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:38.538649082 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:38.562442064 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:38.562498093 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:38.562724113 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:38.962429047 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:38.996140003 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:38.998493910 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:38.998548985 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:38.998653889 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:38.998670101 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:38.998728037 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:38.998784065 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:38.999075890 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:38.999139071 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.798841000 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:39.798886061 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:39.798995972 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:39.799029112 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:39.832887888 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:39.832942963 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:38:39.832986116 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:39.833050966 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:38:39.880614042 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.909301996 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.912909031 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.915766954 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.915879965 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.915930033 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.915976048 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.916188955 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.916239977 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.916270018 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.916332006 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.916861057 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.916937113 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.944551945 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.944603920 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.944679976 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.944735050 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.944843054 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.944881916 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.944905996 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.944931030 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.945624113 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.945666075 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.945713043 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.945735931 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.946507931 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.946588039 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.959758997 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.994307041 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.994399071 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.994415045 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.994473934 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.994762897 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.994806051 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.994842052 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.994864941 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.995784044 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.995824099 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.995858908 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.995882034 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.996526957 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.996566057 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.996607065 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.996628046 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.997277021 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.997351885 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.997478962 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.997559071 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.998091936 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.998166084 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.998229980 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.998280048 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.998853922 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.998924971 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.999098063 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:39.999167919 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:39.999953985 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.000011921 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.000049114 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.000070095 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.000709057 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.000737906 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.000766993 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.000798941 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.001532078 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.001601934 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.001619101 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.001668930 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.002388954 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.002451897 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.002460957 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.002516031 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.003199100 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.003257036 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.003271103 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.003321886 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.004148006 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.004185915 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.004225969 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.004259109 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.004832029 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.004884005 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.005037069 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.005096912 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.005652905 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.005740881 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.005770922 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.005816936 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.006522894 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.006607056 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.006623030 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.006670952 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.007534027 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.007572889 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.007596970 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.007617950 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.008241892 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.008291006 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.008295059 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.008335114 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.009138107 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.009192944 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.009232044 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.009284019 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.009962082 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.010004997 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.010020018 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.010111094 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.010823011 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.010870934 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.010884047 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.010926008 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.011636019 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.011704922 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.011774063 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.011830091 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.012602091 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.012665033 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.012671947 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.012718916 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.013524055 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.013580084 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.013613939 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.013637066 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.014158010 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.014235020 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.014314890 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.014370918 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.015065908 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.015130997 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.015242100 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.015265942 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.015867949 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.015908957 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.015938044 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.015961885 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.016661882 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.016726971 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.016820908 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.016870975 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.017553091 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.017613888 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.017664909 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.017714024 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.018465996 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.018532038 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.018554926 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.018609047 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.027307034 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.027405024 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.027549982 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.027610064 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.027817011 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.027878046 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.028893948 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.028925896 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.028975010 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.029000998 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.029155016 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.029216051 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.029226065 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.029275894 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.030241013 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.030313969 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.030365944 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.030426025 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.030858040 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.030926943 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.031220913 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.031393051 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.031764984 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.031847954 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.031922102 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.032018900 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.032567978 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.032599926 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.032625914 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.032665968 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.033340931 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.033418894 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.033529997 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.033590078 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.034219980 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.034265041 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.034306049 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.034369946 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.035031080 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.035134077 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.035155058 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.035224915 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.035897970 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.035969973 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.036256075 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.036318064 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.037125111 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.037172079 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.037195921 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.037230015 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.037724018 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.037763119 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.037795067 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.037842035 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.038701057 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.038738966 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.038773060 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.038810015 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.039453983 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.039490938 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.039530039 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.039554119 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.040225983 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.040266991 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.040340900 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.040836096 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.041251898 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.041291952 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.041333914 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.041379929 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.041838884 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.041922092 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.041994095 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.042068958 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.042732000 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.042772055 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.042797089 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.042824030 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.043606997 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.043646097 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.043730974 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.044346094 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.044414043 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.044502974 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.044559002 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.045274973 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.045357943 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.045672894 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.045718908 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.045744896 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.045775890 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.144661903 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.145253897 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.178642988 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.181529999 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.181551933 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.181603909 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.181615114 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.182197094 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.182250023 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.183378935 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.183407068 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.183432102 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.183438063 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.183475971 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.183538914 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.183563948 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.183577061 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.183590889 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.183615923 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.183878899 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.183917999 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.183931112 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.183944941 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.183969975 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.183986902 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.184000969 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.184061050 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.184068918 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.184075117 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.184694052 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.184736967 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.184752941 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.184779882 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.184798002 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.184849024 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.184901953 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.184928894 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.184984922 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.185000896 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.185662985 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.185692072 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.185743093 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.185751915 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.185760975 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.185790062 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.185848951 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.185868979 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.185981035 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.186052084 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.186628103 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.186656952 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.186681032 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.186686039 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.186706066 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.186712027 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.186741114 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.186754942 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.186783075 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.186837912 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.187431097 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.187488079 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.187514067 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.187541008 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.187561035 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.187565088 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.187578917 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.187591076 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.187608957 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.187639952 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.188414097 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.188487053 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.188585043 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.188602924 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.188618898 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.188637018 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.188654900 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.188666105 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.188711882 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.188757896 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.189460993 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.189477921 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.189515114 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.189515114 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.189552069 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.189562082 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.189563990 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:38:40.189625978 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.189738989 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:38:40.271424055 CEST	49803	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.301408052 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.303699017 CEST	443	49803	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.303808928 CEST	49803	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.304085970 CEST	49804	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.304152966 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.304723978 CEST	443	49794	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:40.304770947 CEST	443	49794	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:40.304802895 CEST	49794	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:40.304831982 CEST	49794	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:40.331984997 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.332108974 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.333534002 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.333623886 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.334455967 CEST	443	49804	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.334557056 CEST	49804	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.388367891 CEST	49803	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.388691902 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.388896942 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.389096022 CEST	49804	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.420480013 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.420500994 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.420718908 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.420744896 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.420815945 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.420833111 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.420886993 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.420898914 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.421005011 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.421098948 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.421139002 CEST	443	49803	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.421160936 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.421201944 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.421220064 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.421255112 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.421639919 CEST	443	49804	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.421891928 CEST	443	49804	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.421957970 CEST	49804	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.422025919 CEST	443	49804	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.422048092 CEST	443	49804	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.422084093 CEST	49804	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.422101974 CEST	49804	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.422827959 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.422894001 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.423085928 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.423145056 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.423928022 CEST	443	49804	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.423988104 CEST	49804	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.424869061 CEST	443	49803	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.424927950 CEST	443	49803	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.424956083 CEST	49803	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.424963951 CEST	443	49803	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.424978018 CEST	49803	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.425021887 CEST	49803	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.428538084 CEST	443	49803	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.428611994 CEST	49803	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.564100981 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:40.564126015 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:38:40.564218998 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:40.564270973 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:38:40.573569059 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.573993921 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.583693981 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.588041067 CEST	49804	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.588133097 CEST	49803	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.588155985 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.588604927 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.589015961 CEST	49803	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.602782965 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.603147984 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.603288889 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.603326082 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.604533911 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.604595900 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.604620934 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.604640961 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.604664087 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.604705095 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.604707956 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.604727983 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.604749918 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.604765892 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.605611086 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.605633020 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.605671883 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.605689049 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.606239080 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.606293917 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.606477022 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.606525898 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.607136965 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.607218981 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.607269049 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.607319117 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.608119011 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.608190060 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.613003016 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.613105059 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.613181114 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.613302946 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.613348961 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.617259979 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.617513895 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.617584944 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.617659092 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.617855072 CEST	443	49803	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.618179083 CEST	443	49804	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.618453979 CEST	443	49804	99.84.15.81	192.168.2.3
Jul 9, 2021 23:38:40.618518114 CEST	49804	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:38:40.618727922 CEST	443	49803	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.619504929 CEST	443	49803	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.619606018 CEST	443	49803	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.619620085 CEST	49803	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.619657993 CEST	49803	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.620543957 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.620563030 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.620575905 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.620632887 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.620661974 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.687901020 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.718449116 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:40.856117010 CEST	49803	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:38:40.889568090 CEST	443	49803	99.84.15.9	192.168.2.3
Jul 9, 2021 23:38:42.772994995 CEST	49807	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.773111105 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.793181896 CEST	443	49807	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.793253899 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.793421030 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.793428898 CEST	49807	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.794492006 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.797458887 CEST	49807	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.814168930 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.815023899 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.815196037 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.815213919 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.815443039 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.817290068 CEST	443	49807	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.818583012 CEST	443	49807	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.818615913 CEST	443	49807	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.818629980 CEST	443	49807	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.818692923 CEST	49807	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.818839073 CEST	49807	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.836425066 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.836429119 CEST	49807	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.837306976 CEST	49807	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.837316036 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.837548971 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.856434107 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.856455088 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.856579065 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.856648922 CEST	443	49807	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.856792927 CEST	443	49807	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.856805086 CEST	443	49807	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.857263088 CEST	49807	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.857310057 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.858014107 CEST	49807	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.859658003 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.859874964 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.860063076 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.861078024 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.861093998 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.862231016 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:42.920943022 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:42.921022892 CEST	443	49807	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.602577925 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.607604027 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.609857082 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.610647917 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.614319086 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.618283033 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.621160984 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.626203060 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.628542900 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.628954887 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.629025936 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.629065037 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.629116058 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.629169941 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.629174948 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.629199028 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.629215002 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.629215956 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.629328012 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.629374981 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.629374981 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.629427910 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.629472017 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.629481077 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.630305052 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.636543989 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.647759914 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.647844076 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.647900105 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.647939920 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.648046970 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.648076057 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.648077965 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.648127079 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.648266077 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.648309946 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.648367882 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.648396969 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.648425102 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.648478985 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.648479939 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.648533106 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.648581028 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.648587942 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.648648977 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.648699045 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.648703098 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.648753881 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.648808002 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.648813009 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.648864031 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.648909092 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.648916006 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.648969889 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.649015903 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.654279947 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.666840076 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.666858912 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.666871071 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.666888952 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.666901112 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.666914940 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.666996002 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.667016029 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.667032957 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.667057991 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.667649984 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.667666912 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.667680025 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.667692900 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.667695999 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.667763948 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.667766094 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.667787075 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.667807102 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.667826891 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.667861938 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.667870045 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.667900085 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.667963028 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.667978048 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.667989016 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.667999983 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.668010950 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.668020964 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.668032885 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.668045044 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.668065071 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.668083906 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.668101072 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.668124914 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.668159962 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.668171883 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.668179989 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.668239117 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.668252945 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.668273926 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.670233011 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.706295967 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.723550081 CEST	443	49737	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:43.724942923 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.725070953 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:38:43.725225925 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:38:43.725230932 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:44.826761961 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.826771975 CEST	49812	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.862520933 CEST	443	49811	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:44.862612009 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.864831924 CEST	443	49812	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:44.864908934 CEST	49812	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.879662991 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.880400896 CEST	49812	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.917283058 CEST	443	49811	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:44.918632030 CEST	443	49811	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:44.918719053 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.918730974 CEST	443	49811	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:44.918746948 CEST	443	49811	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:44.918764114 CEST	443	49811	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:44.918782949 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.918803930 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.918824911 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.920644045 CEST	443	49812	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:44.922163010 CEST	443	49812	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:44.922180891 CEST	443	49812	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:44.922195911 CEST	443	49812	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:44.922208071 CEST	443	49812	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:44.922225952 CEST	49812	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.922247887 CEST	49812	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.926827908 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.928534031 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.930589914 CEST	49812	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.964211941 CEST	443	49811	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:44.964329958 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.966236115 CEST	443	49811	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:44.966326952 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.968461037 CEST	443	49812	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:44.968540907 CEST	49812	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:44.970232010 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:45.009345055 CEST	443	49811	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:45.009387970 CEST	443	49811	52.211.62.226	192.168.2.3
Jul 9, 2021 23:38:45.009454012 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:45.009500027 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:38:45.243915081 CEST	443	49754	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:45.243940115 CEST	443	49754	91.235.134.131	192.168.2.3
Jul 9, 2021 23:38:45.244010925 CEST	49754	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:45.244059086 CEST	49754	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:38:45.267057896 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.267967939 CEST	49814	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.302714109 CEST	443	49813	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.302802086 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.303549051 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.305903912 CEST	443	49814	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.306040049 CEST	49814	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.306544065 CEST	49814	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.340055943 CEST	443	49813	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.341033936 CEST	443	49813	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.341078997 CEST	443	49813	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.341113091 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.341116905 CEST	443	49813	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.341142893 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.341145992 CEST	443	49813	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.341170073 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.341206074 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.346468925 CEST	443	49814	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.346935034 CEST	443	49814	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.347104073 CEST	49814	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.347151995 CEST	443	49814	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.347280025 CEST	49814	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.347309113 CEST	443	49814	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.347348928 CEST	443	49814	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.347382069 CEST	49814	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.347400904 CEST	49814	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.349570036 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.349900007 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.350081921 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.362850904 CEST	49814	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.363286972 CEST	49814	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.385476112 CEST	443	49813	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.385515928 CEST	443	49813	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.385554075 CEST	443	49813	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.385603905 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.385662079 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.386277914 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.386771917 CEST	443	49813	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.386810064 CEST	443	49813	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.386883020 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.387968063 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.401267052 CEST	443	49814	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.401319027 CEST	443	49814	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.401367903 CEST	443	49814	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.401426077 CEST	49814	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.401468039 CEST	49814	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.403961897 CEST	49814	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:38:45.462939978 CEST	443	49813	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.485064983 CEST	49815	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.485280991 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.487442970 CEST	443	49814	34.254.127.126	192.168.2.3
Jul 9, 2021 23:38:45.501596928 CEST	49817	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.502407074 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.502759933 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.502896070 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.503616095 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.504486084 CEST	443	49815	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.504606962 CEST	49815	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.505306959 CEST	49815	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.520916939 CEST	443	49817	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.520967960 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.521030903 CEST	49817	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.521580935 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.521631956 CEST	49817	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.521711111 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.522073030 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.522180080 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.522208929 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.522228956 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.522260904 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.522296906 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.522454023 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.524595022 CEST	443	49815	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.525674105 CEST	443	49815	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.525693893 CEST	443	49815	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.525789976 CEST	49815	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.525821924 CEST	49815	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.525827885 CEST	443	49815	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.525903940 CEST	49815	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.531876087 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.532247066 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.532545090 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.533611059 CEST	49815	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.534252882 CEST	49815	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.540129900 CEST	443	49817	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.540585041 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.541224957 CEST	443	49817	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.541241884 CEST	443	49817	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.541251898 CEST	443	49817	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.541316032 CEST	49817	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.541343927 CEST	49817	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.541627884 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.541692019 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.541732073 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.541738033 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.541755915 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.541800022 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.550602913 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.550837994 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.550971985 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.550976992 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.550997972 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.551014900 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.551088095 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.551450968 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.551532030 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.551534891 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.551594973 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.553890944 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.554385900 CEST	443	49815	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.554780006 CEST	443	49815	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.554861069 CEST	49815	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.555180073 CEST	443	49815	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.555243969 CEST	49815	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.555373907 CEST	443	49815	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.555425882 CEST	49815	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.571136951 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.571201086 CEST	49817	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.571312904 CEST	49815	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:38:45.572050095 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.572649956 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.573143959 CEST	49817	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.573179960 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.589657068 CEST	443	49817	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.589715004 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.589992046 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.590012074 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.590032101 CEST	443	49817	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.590049982 CEST	443	49817	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.590128899 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.590136051 CEST	49817	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.590162039 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.590173960 CEST	49817	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.590617895 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.591228962 CEST	443	49815	151.101.12.157	192.168.2.3
Jul 9, 2021 23:38:45.591253042 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.591264963 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.591341972 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.591638088 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.591659069 CEST	443	49817	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.591747999 CEST	49820	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.591908932 CEST	443	49817	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.591990948 CEST	49817	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.592771053 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.592845917 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.593676090 CEST	49817	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.593821049 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:45.612716913 CEST	443	49817	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.612886906 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:45.620285988 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.620480061 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.621040106 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.622270107 CEST	443	49820	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.622387886 CEST	49820	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.623086929 CEST	49820	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.637347937 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.638233900 CEST	49824	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.650161982 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.652086973 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.652196884 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.652515888 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.652530909 CEST	443	49824	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.652602911 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.652648926 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.652656078 CEST	49824	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.652705908 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.653264046 CEST	443	49820	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.653479099 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.653553009 CEST	443	49820	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.653634071 CEST	443	49820	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.653640032 CEST	49820	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.653676987 CEST	49820	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.653810978 CEST	49824	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.655695915 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.655713081 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.655795097 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.655801058 CEST	443	49820	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.655816078 CEST	443	49820	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.655817032 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.655874014 CEST	49820	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.655895948 CEST	49820	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.663636923 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.664454937 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.665235996 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.666742086 CEST	443	49824	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.667372942 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.667516947 CEST	49820	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.667865992 CEST	49820	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.679342031 CEST	443	49824	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.679433107 CEST	49824	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.679527998 CEST	443	49824	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.679588079 CEST	49824	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.679595947 CEST	443	49824	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.679617882 CEST	443	49824	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.679651976 CEST	49824	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.679672003 CEST	49824	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.680329084 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.680352926 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.680422068 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.680448055 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.680476904 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.680497885 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.680558920 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.680566072 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.691672087 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.692074060 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.692296028 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.692701101 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.693176031 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.693234921 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.693427086 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.693479061 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.695225954 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.695242882 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.695310116 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.695941925 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.697348118 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.697392941 CEST	49824	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.697427988 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.697441101 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.697447062 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.697484016 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.697505951 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.697519064 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.697597980 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.698240042 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.698260069 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.698378086 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.698419094 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.698611021 CEST	49824	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.699018002 CEST	443	49820	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.699038982 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.699071884 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.699191093 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.699217081 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.699361086 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.699759960 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.699826956 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.699942112 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.699955940 CEST	443	49820	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.699987888 CEST	443	49820	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.699997902 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.700042009 CEST	49820	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.700259924 CEST	443	49820	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.700335979 CEST	49820	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.700685978 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.700705051 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.700758934 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.701507092 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.701587915 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.701611996 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.701663017 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.702294111 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.702311039 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.702343941 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.702361107 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.703224897 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.703263044 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.703306913 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.703329086 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.703891039 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.703941107 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.703948975 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.703995943 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.704741955 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.704792976 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.705921888 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.705935955 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.705951929 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.706001997 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.706032991 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.711136103 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.711152077 CEST	443	49824	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.711164951 CEST	443	49824	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.711229086 CEST	49824	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.712073088 CEST	443	49824	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.712132931 CEST	49824	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.722219944 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.722294092 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.722400904 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.722465038 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.722543955 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.722556114 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.722596884 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.722621918 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.725450039 CEST	49820	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:38:45.730102062 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.733773947 CEST	49824	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.742116928 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.750490904 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:45.752038956 CEST	443	49824	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.757263899 CEST	443	49820	13.35.199.92	192.168.2.3
Jul 9, 2021 23:38:45.761198044 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:45.762901068 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.783253908 CEST	49829	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.783421993 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.795944929 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.795970917 CEST	443	49829	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.796089888 CEST	49829	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.796099901 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.797302961 CEST	49829	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.797410011 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.809973955 CEST	443	49829	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.809998035 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.822777987 CEST	443	49829	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.822830915 CEST	443	49829	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.822864056 CEST	443	49829	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.822890997 CEST	443	49829	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.822981119 CEST	49829	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.822998047 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.823012114 CEST	49829	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.823036909 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.823070049 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.823097944 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.823117018 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.823139906 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.823174953 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.823187113 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.831818104 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.832272053 CEST	49829	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.832451105 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.832808018 CEST	49829	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.833020926 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.844372034 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.844496965 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.844537020 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.844676971 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.845207930 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.845406055 CEST	443	49829	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.845419884 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.845428944 CEST	443	49829	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.845452070 CEST	443	49829	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.845546961 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.845632076 CEST	49829	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.845649004 CEST	49829	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.845952988 CEST	49829	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.851039886 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.857646942 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.863595009 CEST	443	49829	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.868751049 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.868817091 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.868901968 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.868964911 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.868982077 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.869018078 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.869041920 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.869235039 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:38:46.887208939 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:38:46.900186062 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:46.919965029 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:46.920913935 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:46.921008110 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:46.973738909 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:46.974190950 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:46.998281002 CEST	443	49737	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:46.998322010 CEST	443	49737	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:46.998450041 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:46.998584986 CEST	49737	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:46.998750925 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:47.000296116 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:47.000538111 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:47.003326893 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.004158020 CEST	49832	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.008585930 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.008685112 CEST	49836	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.013273954 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.014266014 CEST	49838	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.016360044 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.016458988 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.016685963 CEST	443	49832	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.017468929 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.017519951 CEST	49832	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.019577026 CEST	49832	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.029921055 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.030721903 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.030766964 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.030796051 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.030849934 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.030890942 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.032187939 CEST	443	49832	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.033198118 CEST	443	49832	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.033242941 CEST	443	49832	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.033266068 CEST	443	49832	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.033320904 CEST	49832	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.033358097 CEST	49832	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.038537025 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.038839102 CEST	443	49836	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.038934946 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.039222002 CEST	49836	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.041064024 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.043539047 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.044272900 CEST	443	49838	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.044781923 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.044787884 CEST	49838	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.049520969 CEST	49832	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.050916910 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.052365065 CEST	49838	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.052539110 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.053278923 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.053524017 CEST	49832	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.053565979 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.053642988 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.053656101 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.053709030 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.053728104 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.054078102 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.055094957 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.055953026 CEST	49840	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.056015968 CEST	49841	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.056022882 CEST	49839	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.056093931 CEST	49836	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.056097984 CEST	49842	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.062067986 CEST	443	49832	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.062104940 CEST	443	49832	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.062128067 CEST	443	49832	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.062208891 CEST	49832	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.062830925 CEST	49832	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.065295935 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.065377951 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.065462112 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.065817118 CEST	443	49832	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.065951109 CEST	443	49832	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.066082954 CEST	49832	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.066140890 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.066200972 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.066239119 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.066298962 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.066343069 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.066366911 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.066387892 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.066399097 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.066437006 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.066462040 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.067315102 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.067414999 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.067456007 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.067534924 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.068196058 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.068260908 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.068280935 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.068319082 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.069031000 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.069088936 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.069144011 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.069169998 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.070019960 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.070080996 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.070110083 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.070147991 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.070925951 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.074098110 CEST	443	49841	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.074148893 CEST	443	49840	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.074187040 CEST	443	49839	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.074238062 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.074260950 CEST	49841	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.074342966 CEST	49840	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.074450016 CEST	49839	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.076076984 CEST	443	49842	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.076205015 CEST	49841	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.076328993 CEST	49842	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.076894999 CEST	49840	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.077056885 CEST	49839	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.077624083 CEST	49842	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.078308105 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.078351021 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.078428030 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.078515053 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.078675985 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.078716993 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.078784943 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.079543114 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.079581976 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.079622030 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.079675913 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.080182076 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.080212116 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.080274105 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.080291986 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.080384016 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.080881119 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.080919981 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.080956936 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.081001997 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.081036091 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.081043005 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.082509041 CEST	443	49838	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.082576036 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.082633018 CEST	443	49838	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.082714081 CEST	49838	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.082719088 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.082751989 CEST	443	49838	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.082803965 CEST	49838	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.083431005 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.084052086 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.084100962 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.084244967 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.084650040 CEST	443	49838	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.084738016 CEST	49838	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.085661888 CEST	443	49836	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.085928917 CEST	443	49836	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.085994005 CEST	49836	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.086050034 CEST	443	49836	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.086088896 CEST	443	49836	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.086121082 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.086133957 CEST	49836	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.086189985 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.088012934 CEST	443	49836	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.088087082 CEST	49836	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.093811989 CEST	443	49841	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.094412088 CEST	443	49840	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.094481945 CEST	443	49839	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.095355988 CEST	443	49841	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.095432043 CEST	443	49841	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.095484972 CEST	443	49841	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.095520020 CEST	49841	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.095571995 CEST	49841	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.095619917 CEST	443	49840	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.095679998 CEST	443	49840	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.095733881 CEST	443	49840	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.095778942 CEST	49840	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.095794916 CEST	443	49839	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.095798016 CEST	49840	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.095854044 CEST	443	49839	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.095890045 CEST	49839	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.095901966 CEST	443	49839	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.095969915 CEST	49839	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.095983028 CEST	49839	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.097115040 CEST	443	49842	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.098238945 CEST	443	49842	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.098426104 CEST	443	49842	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.098470926 CEST	443	49842	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.098539114 CEST	49842	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.098587990 CEST	49842	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.116981030 CEST	443	49832	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.136302948 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.136310101 CEST	49836	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.136349916 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.136369944 CEST	49838	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.136409998 CEST	49841	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.136442900 CEST	49840	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.141179085 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.141218901 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.141221046 CEST	49836	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.141278982 CEST	49838	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.141602993 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.141654968 CEST	49841	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.141658068 CEST	49839	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.141668081 CEST	49840	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.141881943 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.141951084 CEST	49841	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.141983986 CEST	49840	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.142348051 CEST	49842	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.142584085 CEST	49839	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.142854929 CEST	49842	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.156245947 CEST	443	49840	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.156301022 CEST	443	49841	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.156584024 CEST	443	49840	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.156622887 CEST	443	49841	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.156685114 CEST	49840	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.158606052 CEST	49841	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.162516117 CEST	443	49841	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.162590981 CEST	443	49839	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.162681103 CEST	443	49840	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.162709951 CEST	443	49840	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.162735939 CEST	443	49840	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.162760019 CEST	443	49841	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.162785053 CEST	443	49841	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.162811041 CEST	443	49839	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.162832022 CEST	49840	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.162862062 CEST	49841	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.162966013 CEST	49839	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.163101912 CEST	443	49839	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.163163900 CEST	443	49839	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.164191961 CEST	49839	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.165257931 CEST	443	49842	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.165436029 CEST	443	49842	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.165754080 CEST	443	49842	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.165888071 CEST	49842	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.165936947 CEST	443	49842	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.166076899 CEST	49842	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.167488098 CEST	443	49836	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.167515039 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.167541981 CEST	443	49838	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.167593002 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.167771101 CEST	443	49838	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.167798042 CEST	443	49836	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.167833090 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.167853117 CEST	49838	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.167862892 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.167906046 CEST	49836	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.167931080 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.167944908 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.167989016 CEST	443	49838	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.168021917 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.168046951 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.168071032 CEST	443	49836	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.168073893 CEST	49838	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.168126106 CEST	49836	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.168127060 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.168148994 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.171529055 CEST	49840	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.171577930 CEST	49841	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.172221899 CEST	49842	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.172236919 CEST	49838	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.172318935 CEST	49836	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.172482967 CEST	49839	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.172599077 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.172697067 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.173646927 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.173676014 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.173692942 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.173718929 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.173743963 CEST	443	49838	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.173769951 CEST	443	49836	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.173769951 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.173793077 CEST	443	49836	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.173818111 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.173841000 CEST	443	49838	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.173881054 CEST	49836	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.173907042 CEST	49838	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.173921108 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.174220085 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.176167965 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.176286936 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.176357985 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.176419020 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.176434994 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.176456928 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.176522970 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.178019047 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.178086996 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.178138018 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.178167105 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.178392887 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.178464890 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.178581953 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.178654909 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.178703070 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.178714991 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.178749084 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.178927898 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.178972006 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.179037094 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.180186033 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.180227995 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.180250883 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.180270910 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.180368900 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.180411100 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.180437088 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.180461884 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.180975914 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.181015968 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.181046963 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.181056976 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.181082964 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.181127071 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.181179047 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.181205988 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.181521893 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.181595087 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.181658030 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.181664944 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.181711912 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.181723118 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.181755066 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.182009935 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.182068110 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:38:47.182178020 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.182216883 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.182233095 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.182621956 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.182634115 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.182658911 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.182707071 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.182971001 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.183012009 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.183063984 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.183744907 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.183785915 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.183850050 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.184546947 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.184590101 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.184653997 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.185400009 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.185439110 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.185507059 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.186121941 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.186184883 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.186187983 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.186240911 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.186975956 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.187025070 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.187079906 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.193321943 CEST	443	49842	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.200948954 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.201047897 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.201070070 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.201345921 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.201385021 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.201402903 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.201433897 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.202850103 CEST	443	49838	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.202959061 CEST	443	49836	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.203442097 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.203465939 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:38:47.204375029 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.204415083 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.204474926 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.209490061 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.209531069 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.209650993 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.209780931 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.209820986 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.209877014 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.211328030 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.211368084 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.211448908 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.211796999 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.212047100 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.212104082 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.212380886 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.212471962 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.212527037 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.213257074 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.213300943 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.213352919 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.214190960 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.214246988 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.214266062 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.214368105 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.214953899 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.215003014 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.215070009 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.215933084 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.215981007 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.216034889 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.219096899 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.219156981 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:38:47.219242096 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:38:47.231015921 CEST	443	49841	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.231249094 CEST	443	49840	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.232132912 CEST	443	49839	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.272389889 CEST	443	49840	104.244.42.67	192.168.2.3
Jul 9, 2021 23:38:47.273866892 CEST	49840	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:38:47.279824972 CEST	443	49841	104.244.42.69	192.168.2.3
Jul 9, 2021 23:38:47.282418966 CEST	49841	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:38:47.328800917 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.328984976 CEST	49843	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.340997934 CEST	443	49843	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.341590881 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.341723919 CEST	49843	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.342732906 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.342806101 CEST	49843	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.343002081 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.354765892 CEST	443	49843	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.355700016 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.366945982 CEST	443	49843	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.366986990 CEST	443	49843	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.367024899 CEST	443	49843	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.367054939 CEST	443	49843	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.367094994 CEST	49843	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.367136002 CEST	49843	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.368182898 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.368248940 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.368288994 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.368315935 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.368330002 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.368376017 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.368382931 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.368469000 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.376264095 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.376576900 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.376826048 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.377415895 CEST	49843	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.377857924 CEST	49843	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.389357090 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.389391899 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.389416933 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.389455080 CEST	443	49843	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.389484882 CEST	443	49843	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.389513969 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.389543056 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.389552116 CEST	49843	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.389579058 CEST	49843	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.389697075 CEST	443	49843	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.389753103 CEST	49843	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.390105009 CEST	49843	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.390569925 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.393287897 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.403033972 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.406230927 CEST	443	49843	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.411184072 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.411305904 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.411312103 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.411461115 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.412260056 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.412328005 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.412427902 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.412493944 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.412599087 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:47.430231094 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:47.466401100 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:38:47.540116072 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.553344965 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.553447008 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.587500095 CEST	49846	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.588888884 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.630762100 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:38:47.633996964 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:38:47.634915113 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:38:47.652641058 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.653450012 CEST	49849	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.670656919 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.670774937 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.671509027 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.671547890 CEST	443	49849	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.671648979 CEST	49849	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.672276974 CEST	49849	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.690078020 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.690181017 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.690339088 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.690376997 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.690414906 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.690423965 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.690459013 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.690483093 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.691772938 CEST	443	49849	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.691838026 CEST	443	49849	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.691884995 CEST	443	49849	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.691921949 CEST	443	49849	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.691948891 CEST	443	49849	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.691970110 CEST	49849	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.692009926 CEST	49849	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.692018986 CEST	49849	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.692025900 CEST	49849	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.697396040 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.697514057 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.698359013 CEST	443	49849	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.698437929 CEST	49849	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.704993010 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.705647945 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.715255022 CEST	443	49846	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:47.715441942 CEST	49846	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.717109919 CEST	49849	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.719094038 CEST	49846	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.723015070 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.723046064 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.723243952 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.723650932 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.724040985 CEST	443	49847	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:47.724250078 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.724288940 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.724345922 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.724369049 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.724375963 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.724385977 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.724396944 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.724425077 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.724437952 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.724445105 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.724462986 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.724476099 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.724500895 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.724567890 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.725214958 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.735407114 CEST	443	49849	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.735451937 CEST	443	49849	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.735547066 CEST	49849	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.799216032 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:38:47.800160885 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:38:47.800247908 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:38:47.800404072 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:38:47.800421953 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:38:47.800435066 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:38:47.800493002 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:38:47.800510883 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:38:47.829917908 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:38:47.846487045 CEST	443	49846	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:47.847873926 CEST	443	49846	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:47.847980976 CEST	49846	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.848083019 CEST	443	49846	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:47.848241091 CEST	49846	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.848453045 CEST	443	49846	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:47.848536015 CEST	49846	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.860316038 CEST	443	49847	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:47.861509085 CEST	443	49847	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:47.861593008 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.861682892 CEST	443	49847	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:47.861697912 CEST	443	49847	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:47.861737013 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.861754894 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.876972914 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.879214048 CEST	49846	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.886075020 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.887614012 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.889202118 CEST	49846	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:47.899806023 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.905581951 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.905603886 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.905628920 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.905649900 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.905668020 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.905668974 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.905682087 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.905687094 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.905689955 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.905706882 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.905709028 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.905738115 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.905769110 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.906321049 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.906394958 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.906481028 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.906503916 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.906543970 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.906574011 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.907083988 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.907104015 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.907212973 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.907484055 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.907506943 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.907521963 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.907526970 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.907541037 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.907572985 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.908369064 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.908390045 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.908422947 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.908452034 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.908651114 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.908672094 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.908705950 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.908720016 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.908837080 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.908885956 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.909604073 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.909627914 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.909655094 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.909667969 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.909670115 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.909714937 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.910090923 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.910149097 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.910161018 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.910208941 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.910238028 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.910284042 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.911413908 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.911442041 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.911473989 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.911487103 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.911511898 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.911537886 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.911694050 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.911721945 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.911762953 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.911777973 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.911780119 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.911853075 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.912456036 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.912475109 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.912544966 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.912625074 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.912709951 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.913137913 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.913202047 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.913208961 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.913325071 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.913398981 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.913460970 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.918638945 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.918664932 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.918689013 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.918714046 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.918711901 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.918739080 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.918741941 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.918746948 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.918760061 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.918797016 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.918845892 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.919070959 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:47.919096947 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.919142008 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.919178009 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:47.919182062 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.919219017 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.919398069 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.919454098 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.919914961 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.919943094 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.919967890 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.919989109 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.920053005 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.920072079 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.920531034 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.920573950 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.920608044 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.920634031 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.920777082 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.920836926 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.921263933 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.921304941 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.921336889 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.921353102 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.921363115 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.921420097 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.921897888 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.921969891 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.922019958 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.922070980 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.922086954 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.922132015 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.922923088 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.922957897 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:38:47.923019886 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.926670074 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:38:47.927027941 CEST	49854	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:47.927392960 CEST	49855	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:47.962902069 CEST	443	49854	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:47.963010073 CEST	49854	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:47.963035107 CEST	443	49855	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:47.963146925 CEST	49855	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:47.963737965 CEST	49855	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:47.964224100 CEST	49854	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:47.995476007 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:38:47.995543003 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:38:47.995615005 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:38:47.997375011 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:38:47.999778986 CEST	443	49855	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:47.999804020 CEST	443	49854	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:48.000648022 CEST	443	49855	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:48.000665903 CEST	443	49855	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:48.000679016 CEST	443	49855	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:48.000688076 CEST	443	49855	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:48.000735998 CEST	49855	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:48.000776052 CEST	49855	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:48.001347065 CEST	443	49854	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:48.001410961 CEST	49854	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:48.001559019 CEST	443	49854	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:48.001589060 CEST	443	49854	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:48.001615047 CEST	443	49854	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:48.001641989 CEST	49854	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:48.001660109 CEST	49854	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:48.001662970 CEST	49854	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:48.006820917 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:38:48.006932020 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:38:48.007116079 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:38:48.009761095 CEST	443	49846	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:48.009850025 CEST	49846	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:48.009929895 CEST	443	49846	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:48.009943008 CEST	443	49846	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:48.009989023 CEST	49846	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:48.010004997 CEST	49846	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:48.011169910 CEST	49846	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:48.013238907 CEST	49855	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:48.013544083 CEST	49855	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:48.013856888 CEST	49854	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:48.014280081 CEST	443	49847	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:48.014343977 CEST	443	49847	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:48.014378071 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:48.014384031 CEST	443	49847	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:48.014394999 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:48.014461040 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:48.015304089 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:48.019226074 CEST	443	49846	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:48.019309044 CEST	49846	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:48.026092052 CEST	443	49847	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:48.026187897 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:48.043994904 CEST	443	49847	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:48.044109106 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:48.049019098 CEST	443	49855	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:48.049139023 CEST	49855	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:48.050548077 CEST	443	49854	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:48.050652027 CEST	49854	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:48.050889969 CEST	443	49855	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:48.050998926 CEST	443	49855	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:48.051023006 CEST	49855	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:48.051048994 CEST	49855	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:48.051048994 CEST	443	49855	52.19.186.105	192.168.2.3
Jul 9, 2021 23:38:48.051095009 CEST	49855	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:38:48.070952892 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.075304031 CEST	49859	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.089356899 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.089477062 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.092905998 CEST	443	49859	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.092994928 CEST	49859	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.096808910 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.097821951 CEST	49859	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.114574909 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.115288973 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.115350962 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.115379095 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.115397930 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.115403891 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.115437984 CEST	443	49859	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.115453005 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.115890980 CEST	443	49859	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.115974903 CEST	49859	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.115991116 CEST	443	49859	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.116028070 CEST	443	49859	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.116050959 CEST	49859	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.116081953 CEST	49859	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.123042107 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.123223066 CEST	49859	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.125781059 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.126043081 CEST	49859	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.126543045 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.141616106 CEST	443	49859	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.141661882 CEST	443	49859	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.141693115 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.141720057 CEST	443	49859	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.141808033 CEST	49859	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.141829967 CEST	49859	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.141833067 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.141884089 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.142129898 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.142187119 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.142319918 CEST	49859	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.142554998 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.143889904 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.143938065 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.144031048 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.144326925 CEST	443	49859	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.144356012 CEST	443	49859	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.144417048 CEST	49859	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.145853043 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.145889997 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.145946980 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.145970106 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:38:48.169950008 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:38:48.170053005 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:38:48.170059919 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:38:48.178294897 CEST	443	49846	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:48.190073013 CEST	443	49847	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:48.201459885 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.202366114 CEST	443	49859	31.13.86.36	192.168.2.3
Jul 9, 2021 23:38:48.332138062 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:48.467489004 CEST	443	49847	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:48.485318899 CEST	443	49847	108.174.11.69	192.168.2.3
Jul 9, 2021 23:38:48.485445023 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:38:49.790638924 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:49.810296059 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:38:49.810672998 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:49.811511993 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:38:49.814884901 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:38:49.848907948 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:49.864306927 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:49.900578976 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:49.900640965 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:49.900717974 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:49.901402950 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:49.901576996 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:49.901653051 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:49.901771069 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:49.902220011 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:38:49.920155048 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:38:49.979314089 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:38:49.979439020 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:38:49.980413914 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:38:50.147454023 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:38:50.148711920 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:38:50.148761034 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:38:50.148801088 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:38:50.148850918 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:38:50.148945093 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:38:50.148993015 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:38:50.165678024 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:38:50.281289101 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.281348944 CEST	49864	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.333233118 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:38:50.334918976 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:38:50.335869074 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:38:50.444726944 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.444863081 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.445583105 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.447674036 CEST	443	49864	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.450949907 CEST	49864	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.451834917 CEST	49864	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.545567989 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:38:50.607635975 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.609160900 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.609206915 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.609250069 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.609294891 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.609311104 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.609355927 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.609363079 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.610094070 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.618237019 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.618367910 CEST	443	49864	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.618928909 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.619904995 CEST	443	49864	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.619946957 CEST	443	49864	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.619983912 CEST	443	49864	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.619985104 CEST	49864	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.620017052 CEST	443	49864	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.620023966 CEST	49864	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.620091915 CEST	49864	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.620104074 CEST	49864	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.620603085 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.624377966 CEST	49864	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.624753952 CEST	49864	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.771409035 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.771534920 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.781200886 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.781219959 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.781267881 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.781296015 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.781338930 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.782176971 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.785769939 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.785878897 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.791640043 CEST	443	49864	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.791659117 CEST	443	49864	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.791760921 CEST	443	49864	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:50.791856050 CEST	49864	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.792577028 CEST	49864	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:50.988348961 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:51.000246048 CEST	443	49864	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:57.437165976 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:38:57.437326908 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:38:59.429929018 CEST	49849	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:59.429954052 CEST	49849	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:59.430676937 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:59.438399076 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:38:59.441824913 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:38:59.445528030 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:59.448560953 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:38:59.449692965 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:59.451817989 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:59.452953100 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:59.453339100 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:59.453382015 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:59.453399897 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:59.453421116 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:59.453430891 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:59.453458071 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:59.453486919 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:59.453495979 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:59.453505993 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:59.453531981 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:59.453557014 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:59.453573942 CEST	443	49848	18.198.240.31	192.168.2.3
Jul 9, 2021 23:38:59.453579903 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:59.453632116 CEST	49848	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:38:59.585302114 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:38:59.604584932 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:38:59.610394001 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:38:59.611561060 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:38:59.611680984 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:38:59.611711979 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:38:59.611993074 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:38:59.612066984 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:38:59.612240076 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:38:59.612270117 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:38:59.612294912 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:38:59.613895893 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:38:59.615824938 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:38:59.657752037 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:38:59.749361038 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:00.564510107 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:00.726568937 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:00.733479023 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:00.733525991 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:00.733630896 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:00.735778093 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:00.877120972 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:00.910118103 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:00.910228014 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:00.939903021 CEST	49804	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:39:00.939985991 CEST	49804	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:39:00.940745115 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:39:00.969923973 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:39:00.972266912 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:39:00.972414970 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:39:03.357429028 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:39:03.365948915 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.366082907 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.386972904 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:39:03.391496897 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:39:03.391541004 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:39:03.391673088 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:39:03.391845942 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:39:03.391938925 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:39:03.396851063 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:39:03.396883011 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:39:03.396987915 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:39:03.397735119 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.398514032 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.398667097 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.398793936 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.398864031 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.398964882 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.399028063 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.400110960 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.400160074 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.400197029 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.400235891 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.400259972 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.400273085 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.400310040 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.400351048 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.400367022 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.400407076 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.400507927 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.400549889 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.400566101 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.400588989 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.400610924 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.400625944 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.400645971 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.400677919 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.400763988 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.400823116 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.401411057 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.401456118 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.401485920 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.401489973 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.401519060 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.401540995 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.401686907 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.401741028 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.401796103 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.401838064 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.401856899 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.401874065 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.401891947 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.401912928 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.401937008 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.401974916 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.406104088 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.406243086 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.406306982 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.406375885 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.406431913 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.406500101 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.406510115 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.406549931 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.406572104 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.406594992 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.406610012 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.406645060 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.406649113 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.406689882 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.406697989 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.406735897 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.406739950 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.406780958 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.406788111 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.406827927 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.406827927 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.406868935 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.406879902 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.406918049 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.406922102 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.406970024 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.406976938 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.407021999 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.407028913 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.407090902 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.407150030 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.407182932 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.407219887 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.407221079 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.407255888 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.407269955 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.407284975 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.407324076 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.407356024 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.407406092 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.407959938 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.407995939 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:03.408039093 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:03.408062935 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:04.851172924 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.851330042 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.865806103 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.865995884 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.866163015 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.866344929 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.866575956 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.866821051 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.867199898 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.867513895 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.867676020 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.867840052 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.868005991 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.868172884 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.868340969 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.880646944 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.880748987 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.880830050 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.880908966 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.880989075 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.881067038 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.881150007 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.881325960 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.881356001 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.902339935 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.928769112 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.941427946 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.943579912 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.948565960 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.955406904 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.958265066 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.965365887 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.977514982 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.982572079 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.986634970 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.989764929 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.993618011 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.996201038 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:04.998687983 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.001535892 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.004045010 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.014692068 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.017379045 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.017405033 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.017489910 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.017529964 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.026519060 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.028357029 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.028866053 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.028966904 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.030175924 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.030940056 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.031192064 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.031303883 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.031411886 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.032253027 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.032272100 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.032372952 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.032449007 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.032470942 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.032491922 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.032555103 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.032582045 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.034742117 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.037137985 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.038233995 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.038248062 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.038259983 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.038319111 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.038350105 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.038603067 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.040787935 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.048228025 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.054049969 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.054198027 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.055875063 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.057521105 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.057898045 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.058037996 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.058276892 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.060352087 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.062378883 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.064590931 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.065454006 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.065618992 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.065711975 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.065782070 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.065854073 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.065936089 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.066004992 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.066087008 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.066174030 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.066231966 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.075498104 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.075944901 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.076025009 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.076117039 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.076255083 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.092422009 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.108501911 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.118721008 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.127566099 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.146101952 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.151942015 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.159773111 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.163997889 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.179604053 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.179658890 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.179697037 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.179733038 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.179815054 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.180172920 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.187310934 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.190299034 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.191239119 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.193506002 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.193555117 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.193610907 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.193643093 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.194240093 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.194279909 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.194318056 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.194331884 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.194364071 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.194372892 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.194413900 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.194474936 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.194741011 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.194780111 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.194816113 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.194818974 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.194839954 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.194856882 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.194869041 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.194902897 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.201364040 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.202531099 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.202574968 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.202677965 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.203039885 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.217261076 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.219568014 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.220109940 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.221251965 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.221733093 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.222135067 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.222944021 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.223661900 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.224562883 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.225162029 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.225730896 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.226314068 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.226722002 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.227020025 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.229831934 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.230560064 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.230848074 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.230876923 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.230911016 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.230947018 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.231350899 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.233186960 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.233305931 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.233334064 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.233438969 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.233493090 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.234618902 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.236196995 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.238095045 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.239368916 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.239413977 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.239453077 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.239475965 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.239485979 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.239703894 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.240972996 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.242388010 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.243684053 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.245018005 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.246298075 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.247684002 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.249914885 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.251493931 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.252895117 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.254298925 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.254527092 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.254671097 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.255935907 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.257308006 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.258707047 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.259226084 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.259352922 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.260973930 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.261317015 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.261441946 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.261558056 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.261674881 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.261799097 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.261895895 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.261962891 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.262038946 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.262106895 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.262275934 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.262392998 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.263271093 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.263470888 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.265063047 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.267520905 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.267960072 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.268142939 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.268322945 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.268546104 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.268651009 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.269159079 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.269292116 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.269423962 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.269520998 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.269664049 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.269757986 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.269886017 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.269978046 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.270334005 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.270437956 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.270566940 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.270665884 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.270788908 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.270885944 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.271013021 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.271109104 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.271365881 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.271708965 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.271856070 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.271938086 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.272099018 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.272234917 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.272512913 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.272650003 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.272911072 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.273287058 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.273473978 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.273603916 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.273730993 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.273888111 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.274008989 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.274161100 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.344438076 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.344487906 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.344527006 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.344604969 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.344626904 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.344640970 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.344650984 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.344655991 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.344660997 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.344739914 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.354760885 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.354955912 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.385859966 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.388480902 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.389477968 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.391866922 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.394165039 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.394210100 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.394387960 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.394437075 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.395704985 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.398855925 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.405045033 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.405076981 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.407783031 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.410459042 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.413938046 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.415750027 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.416982889 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.418354034 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.422171116 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.423383951 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.424218893 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.424257994 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.424491882 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.424573898 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.425129890 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.428491116 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.428519964 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.428653002 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.428695917 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.430480003 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.430520058 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.430636883 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.430674076 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.430747986 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.430731058 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.430798054 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.430808067 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.430882931 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.430885077 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.430949926 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.431054115 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.431469917 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.431588888 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.431761980 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.431830883 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.431873083 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.431934118 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.432338953 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.432365894 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.432440042 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.432459116 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.432703972 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.432739973 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.432769060 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.432785988 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.432812929 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.432856083 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.432868004 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.432883978 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.433594942 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.433635950 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.433659077 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.433660984 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.433675051 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.433679104 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.433747053 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.434974909 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.435132980 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.435635090 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.435661077 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.435827971 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.436841011 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.437283039 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.437309027 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.437359095 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.437381029 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.438319921 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.438363075 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.438400984 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.438410997 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.438436985 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.438438892 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.438472033 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.438489914 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.438688040 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.438716888 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.438760042 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.438779116 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.439088106 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.439174891 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.439174891 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.439232111 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.439580917 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.439618111 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.439654112 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.439673901 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.440188885 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.440227032 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.440262079 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.440279961 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.440376997 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.440435886 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.507862091 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.507894039 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.507916927 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.507939100 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.507956028 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.508016109 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.508030891 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.508044004 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.508048058 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.508085012 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.508090019 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.508091927 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.508094072 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.508099079 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.508146048 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.522242069 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.522263050 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.522382021 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.522423983 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.522882938 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.522949934 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.556792974 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.556827068 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.556853056 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.556879044 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.556905031 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.556943893 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.556951046 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.556957006 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:05.592613935 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:05.592720985 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:07.677350998 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:39:07.677556038 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:39:07.856097937 CEST	443	49792	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:07.856170893 CEST	443	49792	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:07.856308937 CEST	49792	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:07.856386900 CEST	49792	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:07.874910116 CEST	443	49795	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:07.874953032 CEST	443	49795	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:07.875029087 CEST	49795	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:07.875060081 CEST	49795	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:07.925776958 CEST	443	49797	91.235.134.131	192.168.2.3
Jul 9, 2021 23:39:07.925817966 CEST	443	49797	91.235.134.131	192.168.2.3
Jul 9, 2021 23:39:07.925926924 CEST	49797	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:39:07.925972939 CEST	49797	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:39:09.274950981 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:09.276995897 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:39:09.307279110 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:39:09.309422016 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:39:09.309473038 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:09.309578896 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:39:09.310187101 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:09.525145054 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:39:09.555927038 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:39:09.559508085 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:39:09.559607029 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:39:10.285274982 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:39:10.310601950 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:39:10.310652018 CEST	443	49808	18.195.42.228	192.168.2.3
Jul 9, 2021 23:39:10.310684919 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:39:10.310729027 CEST	49808	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:39:11.530400991 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:11.694139004 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:11.694350004 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:12.493182898 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:39:12.512868881 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:39:12.513248920 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:39:12.513360977 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:39:12.736385107 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:39:12.756269932 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:39:12.756400108 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:39:13.152946949 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:13.165663958 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:13.194323063 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:13.194360018 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:13.194396973 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:13.194431067 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:13.194444895 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:13.194475889 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:13.194488049 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:13.194493055 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:13.195230007 CEST	49830	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:13.212205887 CEST	443	49830	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:13.233894110 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:39:13.253142118 CEST	443	49818	3.124.119.57	192.168.2.3
Jul 9, 2021 23:39:13.253314972 CEST	49818	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:39:13.266688108 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:39:13.269608974 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.271572113 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:13.282960892 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.283013105 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.283052921 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.283112049 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.283137083 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.283139944 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.283173084 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.283222914 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.283238888 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.283265114 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.283265114 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.283302069 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.283308029 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.283339024 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.283356905 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.283376932 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.283389091 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.283420086 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.283787966 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.283829927 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.283839941 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.283869028 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.283873081 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.283905983 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.283915043 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.283946991 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.283982992 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.284022093 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.284028053 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.284066916 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.284512043 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.284570932 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.284657955 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.284708023 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.284739971 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.284786940 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.284787893 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.284825087 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.284836054 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.284873009 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.285145044 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.285171986 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.285197973 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.285227060 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.288423061 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:39:13.289978027 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:39:13.290136099 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:39:13.291444063 CEST	49840	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:39:13.301476002 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:13.303276062 CEST	49841	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:39:13.303347111 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:13.303533077 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:13.312717915 CEST	443	49840	104.244.42.67	192.168.2.3
Jul 9, 2021 23:39:13.324141979 CEST	443	49841	104.244.42.69	192.168.2.3
Jul 9, 2021 23:39:13.396575928 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:39:13.404472113 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:39:13.420861959 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:39:13.422267914 CEST	443	49840	104.244.42.67	192.168.2.3
Jul 9, 2021 23:39:13.422424078 CEST	49840	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:39:13.431236029 CEST	443	49841	104.244.42.69	192.168.2.3
Jul 9, 2021 23:39:13.431376934 CEST	49841	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:39:13.441436052 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:39:13.441651106 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:39:13.441760063 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:39:13.441807985 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:39:13.441865921 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:39:13.441894054 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:39:13.442047119 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:39:13.442200899 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:39:13.442364931 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:39:13.442691088 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:39:13.462368965 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:39:13.544667006 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.557260990 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.557425976 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.558249950 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.558289051 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.558305979 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.558355093 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.558372021 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.558442116 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.558473110 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.558489084 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.558505058 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.558542013 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.558571100 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.558574915 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.558630943 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.558631897 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.558682919 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.559001923 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.559082985 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.559143066 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.559159040 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.559170961 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.559185028 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.559221029 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.559235096 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.559338093 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.559391022 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.559753895 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.559784889 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.559799910 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.559835911 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.559853077 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.559865952 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.559907913 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.559953928 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.559993982 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.560004950 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.560022116 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.560038090 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.560048103 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.560097933 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.560106039 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.560620070 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.560637951 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.560652971 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.560671091 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.560688019 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.560691118 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.560702085 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.560713053 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.560740948 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.560765982 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.560947895 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.560965061 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.560993910 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.561016083 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.561522961 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.561599970 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.561713934 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.561772108 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.561794043 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.561810970 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.561851978 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.561861038 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.561872959 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.561887980 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.561913013 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.561918020 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.561933041 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.561944962 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.561961889 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.561984062 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.562561035 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.562623978 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.562637091 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.562671900 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.562680006 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.562691927 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.562709093 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.562716961 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.562725067 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.562737942 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.562741041 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.562757969 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.562764883 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.562810898 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.563096046 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:39:13.563410997 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.563430071 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.563446045 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.563462019 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.563473940 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.563486099 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.563510895 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.563524961 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.563556910 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.563597918 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.563617945 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.563635111 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.563642979 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.563666105 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.563687086 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.564565897 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.564635038 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.564709902 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.564727068 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.564742088 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.564754963 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.564757109 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:13.564775944 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.564815044 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:13.588793993 CEST	49868	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.588844061 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.603624105 CEST	443	49847	108.174.11.69	192.168.2.3
Jul 9, 2021 23:39:13.603707075 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:39:13.607100964 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.607251883 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.607326031 CEST	443	49868	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.607440948 CEST	49868	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.607940912 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.608525991 CEST	49868	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.627145052 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.627274990 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.627336025 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.627882004 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.628175020 CEST	443	49868	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.628185987 CEST	443	49868	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.628268957 CEST	49868	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.629232883 CEST	49868	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.629674911 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.642855883 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:39:13.646858931 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.648437023 CEST	443	49868	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.648538113 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.650095940 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.650177956 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.650240898 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.650263071 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.650288105 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.650310993 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.650326014 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.650367975 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.650379896 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.650429010 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.650489092 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.659874916 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:39:13.660547972 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:39:13.660634041 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:39:13.660872936 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:39:13.660945892 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:39:13.723087072 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:13.727817059 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:39:13.754785061 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:13.755707979 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:39:13.772155046 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:13.772933006 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.791053057 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.791701078 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.791740894 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.791779995 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.791846991 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.791882038 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.791887999 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.791897058 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.791939974 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.791979074 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.792005062 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.792010069 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:13.792016029 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.792031050 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.792068005 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:13.891199112 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:39:13.891238928 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:39:13.916806936 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:13.918508053 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:39:13.921644926 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:39:13.921741962 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:39:13.941011906 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:13.941065073 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:13.941211939 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:14.496438980 CEST	443	49739	35.81.121.166	192.168.2.3
Jul 9, 2021 23:39:14.496484995 CEST	443	49739	35.81.121.166	192.168.2.3
Jul 9, 2021 23:39:14.496851921 CEST	49739	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:39:14.522475958 CEST	49739	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:39:14.523190022 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:39:14.523401022 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:39:14.691021919 CEST	443	49739	35.81.121.166	192.168.2.3
Jul 9, 2021 23:39:14.691920996 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:14.692315102 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:14.692454100 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:14.692507029 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:14.693314075 CEST	49721	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.693523884 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:14.693653107 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:39:14.765861988 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.872183084 CEST	443	49721	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.872334003 CEST	49721	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.881083965 CEST	443	49744	3.16.63.147	192.168.2.3
Jul 9, 2021 23:39:14.881127119 CEST	443	49744	3.16.63.147	192.168.2.3
Jul 9, 2021 23:39:14.881151915 CEST	443	49744	3.16.63.147	192.168.2.3
Jul 9, 2021 23:39:14.881205082 CEST	49744	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:39:14.881237984 CEST	49744	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:39:14.932359934 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.949520111 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.949558973 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.949578047 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.949592113 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.949606895 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.949625969 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.949742079 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.949764967 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.949825048 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.949862003 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.949873924 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.949884892 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.949887991 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.949894905 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.949911118 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.949928999 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.949943066 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.949953079 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.949971914 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.949981928 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.949992895 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950011015 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950035095 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950081110 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950088978 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950112104 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950151920 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950160980 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950177908 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950207949 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950251102 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950287104 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950309038 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950315952 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950330019 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950341940 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950378895 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950402021 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950432062 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950454950 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950478077 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950499058 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950501919 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950517893 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950561047 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950563908 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950611115 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950629950 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950659990 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950675011 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950697899 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950721025 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950725079 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950742960 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950768948 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950799942 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950808048 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950828075 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950896978 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950896978 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950917959 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950965881 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950969934 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.950979948 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.950993061 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951014996 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951045036 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951071978 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951081038 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951132059 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951155901 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951179981 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951200962 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951206923 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951220989 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951226950 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951250076 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951280117 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951292992 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951303959 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951361895 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951366901 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951384068 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951390982 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951415062 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951440096 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951459885 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951483965 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951494932 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951533079 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951562881 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951570034 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951580048 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951634884 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951699972 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951723099 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951769114 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951788902 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951864958 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951886892 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951913118 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.951926947 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951951027 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951977015 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.951981068 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952035904 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952049017 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952059031 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952106953 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952120066 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952145100 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952167034 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952188015 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952209949 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952215910 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952231884 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952250004 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952256918 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952286005 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952289104 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952313900 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952342987 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952394962 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952415943 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952461958 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952462912 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952476025 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952527046 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952533007 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952544928 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952586889 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952594042 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952614069 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952619076 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952640057 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952661037 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952666044 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952681065 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952682018 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952703953 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952706099 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952727079 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952755928 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952783108 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952802896 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952822924 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952847004 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952861071 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952867985 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952889919 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952903032 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952910900 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.952912092 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952944040 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952959061 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952985048 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.952995062 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953017950 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953063011 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953078985 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953080893 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953107119 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953129053 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953150034 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953176022 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953186035 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953186989 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953191996 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953205109 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953227043 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953243017 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953248978 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953315973 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953325987 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953329086 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953370094 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953393936 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953407049 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953432083 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953455925 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953493118 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953516006 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953556061 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953558922 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953574896 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953578949 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953602076 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953615904 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953624010 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953646898 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953660965 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953692913 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953701019 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953715086 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953721046 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953731060 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953733921 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.953763962 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953784943 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.953824997 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.954006910 CEST	49744	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:39:14.958668947 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.958705902 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.958724976 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.958739996 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.958760977 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.958779097 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.958801985 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.958822966 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.958842039 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.958849907 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.958862066 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.958883047 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.958884001 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.958905935 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.958911896 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.958926916 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.958945990 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.958946943 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.958990097 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.959032059 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.959927082 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.959994078 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.960010052 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.960012913 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.960032940 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.960050106 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.960091114 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.960094929 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.960119963 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.960134029 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.960141897 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.960165977 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.960191965 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.960239887 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.960282087 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.960303068 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.960303068 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.960324049 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.960342884 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.960344076 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.960359097 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:14.960361004 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.960386038 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:14.960423946 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.025083065 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:39:15.025108099 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:39:15.025118113 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:39:15.025233984 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:39:15.025269985 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:39:15.030417919 CEST	49745	443	192.168.2.3	3.16.63.147
Jul 9, 2021 23:39:15.064280987 CEST	443	49744	3.16.63.147	192.168.2.3
Jul 9, 2021 23:39:15.073437929 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.074183941 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.145867109 CEST	443	49745	3.16.63.147	192.168.2.3
Jul 9, 2021 23:39:15.151063919 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.242141008 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.260481119 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.260538101 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.260627031 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.260641098 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.260648012 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.260783911 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.260785103 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.260845900 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.260909081 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.260946035 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.260960102 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.260977030 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.260977030 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261018038 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261055946 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261056900 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261092901 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261096954 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261130095 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261156082 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261193991 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261231899 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261281013 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261310101 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261322021 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261356115 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261399984 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261425972 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261464119 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261506081 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261533976 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261545897 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261584044 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261601925 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261619091 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261620998 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261627913 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261662006 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261682034 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261699915 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261722088 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261739969 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261759996 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261778116 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261799097 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261816025 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261837959 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261851072 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261871099 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261885881 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261907101 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261921883 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261940956 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.261955023 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.261991978 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.262006998 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.262305021 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.262343884 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.262372017 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.262378931 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.262394905 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.262398005 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.262415886 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.262423038 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.262447119 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.262464046 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.262504101 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.262542009 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.262558937 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.262581110 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.262597084 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.262609005 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.262639999 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.262645960 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.262653112 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.262675047 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.262700081 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.262701988 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.262722015 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.262725115 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.262748957 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.262756109 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.262768030 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.262811899 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.263159990 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.263225079 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.263227940 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.263256073 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.263284922 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.263297081 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.263300896 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.263346910 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.263364077 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.263405085 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.263420105 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.263441086 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.263465881 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.263482094 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.263493061 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.263520956 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.263534069 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.263559103 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.263576031 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.263597965 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.263612986 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.263624907 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.263650894 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.263657093 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.263673067 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.263681889 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.263720036 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.263735056 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.263955116 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264024019 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264025927 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264061928 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264081955 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264094114 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264130116 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264166117 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264173031 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264194965 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264199972 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264204025 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264214039 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264235020 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264261961 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264297962 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264316082 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264332056 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264333963 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264337063 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264341116 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264370918 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264384985 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264410019 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264424086 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264446020 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264460087 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264487028 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264496088 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264527082 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264539003 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264564037 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264580965 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264588118 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264619112 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264622927 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264638901 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264674902 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264811039 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264847994 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264882088 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264913082 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264914989 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264954090 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.264970064 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.264993906 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.265012980 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.265045881 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.265063047 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.265526056 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.265567064 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.265599966 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.265626907 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.265640020 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.265649080 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.265657902 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.265671015 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.265691996 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.265696049 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.265719891 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.265744925 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.265868902 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.265897036 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.265921116 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.265944004 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.265945911 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.265963078 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.265970945 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.265973091 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.265990019 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266005039 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266022921 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266031981 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266051054 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266052961 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266098022 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266110897 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266458988 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266498089 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266535997 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266560078 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266573906 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266575098 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266580105 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266612053 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266621113 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266644001 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266665936 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266696930 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266753912 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266767979 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266781092 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266783953 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266803980 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266818047 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266819000 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266846895 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266870022 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266880035 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266891956 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266911983 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266928911 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.266963959 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.266983032 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.267052889 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.267627001 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.267677069 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.267700911 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.267715931 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.267721891 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.267744064 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.267769098 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.267771006 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.267786026 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.267802000 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.267812014 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.267855883 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.267863035 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.267891884 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.267909050 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.267929077 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.267940998 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.267970085 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.267985106 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.267998934 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.268018961 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.268023014 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.268038988 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.268049002 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.268074989 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.268075943 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.268085957 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.268100023 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.268115997 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.268121958 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.268153906 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.268197060 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.269603968 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.269668102 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.335805893 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.335839987 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.335874081 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.335915089 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.335966110 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.336015940 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.336015940 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.336047888 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.336054087 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.336061954 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.336072922 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.336107016 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.336122036 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.336158037 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.336167097 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.336220980 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.336221933 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.336270094 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.336277008 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.336308956 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.336323023 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.336344957 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.336359978 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.336380005 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.336394072 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.336417913 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.336431026 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.336453915 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.336468935 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.336499929 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.336504936 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.336534023 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.336555958 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.336560011 CEST	443	49720	44.241.139.147	192.168.2.3
Jul 9, 2021 23:39:15.336591005 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.336606979 CEST	49720	443	192.168.2.3	44.241.139.147
Jul 9, 2021 23:39:15.868180037 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:39:15.868221998 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:39:15.868330956 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:39:15.868367910 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:39:15.927026033 CEST	49738	443	192.168.2.3	35.81.121.166
Jul 9, 2021 23:39:16.093278885 CEST	443	49738	35.81.121.166	192.168.2.3
Jul 9, 2021 23:39:22.132998943 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.133644104 CEST	49790	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.134401083 CEST	49794	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.134489059 CEST	49794	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.134985924 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.135328054 CEST	49791	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.135344982 CEST	49795	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.135678053 CEST	49795	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.136322975 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.137106895 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.156554937 CEST	443	49790	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.157366037 CEST	443	49794	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.158211946 CEST	443	49791	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.158297062 CEST	443	49795	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.158392906 CEST	49795	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.159240961 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.159429073 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.160119057 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.160213947 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.161063910 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.184189081 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.184237003 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.184355021 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.189686060 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.190143108 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.195508957 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.213263035 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.213308096 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.213390112 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.214860916 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.218795061 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.221894026 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.221956015 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.221997976 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.222034931 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.222044945 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.222073078 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.222081900 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.222091913 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.222099066 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.222111940 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.222145081 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.222167969 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.222207069 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.222246885 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.222266912 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.222305059 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.222405910 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.222444057 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.222464085 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.222506046 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.251049042 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.251868010 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.275418997 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.275473118 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.275500059 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.275585890 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.283759117 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.283813000 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.283850908 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.283876896 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.283889055 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.283900023 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.283917904 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.283926964 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.283938885 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.283968925 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.283973932 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.284024954 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.284029961 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.284077883 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.284077883 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.284121990 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.284133911 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.284177065 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.284188986 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.284252882 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.307384968 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.307455063 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.307497978 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.307497978 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.307535887 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.307550907 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.307584047 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.307585001 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.307590008 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.307622910 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.307647943 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.307677984 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.307770014 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.307806969 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.307840109 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.307853937 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.307862043 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.307895899 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.307924032 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.307954073 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.307986975 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.307991982 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.308006048 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.308029890 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.308047056 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.308080912 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.308087111 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.308129072 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.308141947 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.308177948 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.308188915 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.308233023 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.308238983 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.308295965 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.308300018 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.308346033 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.308346987 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.308384895 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.308403015 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.308439016 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.325444937 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:39:22.330903053 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.331012964 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.335501909 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.347345114 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:39:22.348934889 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:39:22.349047899 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:39:22.358652115 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.358930111 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.359019995 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.390839100 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.414650917 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.414694071 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.414777040 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.414803028 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.414810896 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.414848089 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.414854050 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.414988995 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.415002108 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.438328028 CEST	443	49874	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.438420057 CEST	49874	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.520694971 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.522805929 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.525228977 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.525268078 CEST	49793	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.525604963 CEST	49792	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.525644064 CEST	49792	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.526588917 CEST	49876	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.528192997 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.539815903 CEST	49878	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.543869019 CEST	49879	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.545337915 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.547384977 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.547476053 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.548069000 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.548088074 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.548119068 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.548166990 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.548172951 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.548191071 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.548217058 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.548248053 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.548284054 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.548299074 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.548311949 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.548361063 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.548368931 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.548397064 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.548414946 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.548455954 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.548458099 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.548501015 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.548512936 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.548548937 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.549491882 CEST	443	49876	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.549534082 CEST	443	49793	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.549561024 CEST	443	49792	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.549611092 CEST	49876	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.549634933 CEST	49792	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.551273108 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.551386118 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.553030014 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.554425001 CEST	49876	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.562391043 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.564133883 CEST	443	49878	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.564234018 CEST	49878	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.567888021 CEST	443	49879	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.567986965 CEST	49879	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.571604013 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.571721077 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.571800947 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.576875925 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.576908112 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.576991081 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.577331066 CEST	443	49876	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.577420950 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.577486038 CEST	443	49876	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.577598095 CEST	49876	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.578337908 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.581562996 CEST	49878	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.582585096 CEST	49876	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.584264040 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.585892916 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.586620092 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.586827993 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.586921930 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.587327957 CEST	49880	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.587779999 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.589477062 CEST	49879	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.605403900 CEST	443	49878	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.605454922 CEST	443	49878	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.605554104 CEST	49878	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.606077909 CEST	49878	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.608268023 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.608876944 CEST	49878	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.609671116 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.610229015 CEST	443	49880	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.610354900 CEST	49880	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.611006021 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.611051083 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.611087084 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.611107111 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.611181974 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.611236095 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.611254930 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.611295938 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.611300945 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.611306906 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.611337900 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.611351967 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.611368895 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.611412048 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.611449003 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.611449957 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.611454964 CEST	49880	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.611485004 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.611501932 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.611515999 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.611522913 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.611552954 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.611876965 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.612533092 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.612607002 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.612802029 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.612854004 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.612886906 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.612894058 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.612906933 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.612932920 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.612977028 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.612983942 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.613048077 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.613095999 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.613096952 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.613126993 CEST	443	49879	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.613142014 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.613187075 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.613228083 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.613238096 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.613262892 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.613274097 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.613301039 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.613307953 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.613327980 CEST	443	49879	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.613346100 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.613385916 CEST	49879	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.615362883 CEST	49879	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.632170916 CEST	443	49878	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.632237911 CEST	443	49878	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.632328987 CEST	49878	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.634829044 CEST	443	49880	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.634867907 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.634954929 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.635016918 CEST	443	49880	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.635101080 CEST	49880	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.635832071 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.635865927 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.635971069 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.636035919 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:22.636655092 CEST	49880	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:22.645543098 CEST	443	49876	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:22.681696892 CEST	443	49879	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:22.699944019 CEST	443	49880	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:23.047184944 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:23.049350023 CEST	49878	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:23.072529078 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:23.072551012 CEST	443	49878	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:23.072757006 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:23.072822094 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:23.073719025 CEST	443	49878	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:23.073906898 CEST	49878	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:23.367769003 CEST	49878	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:23.393804073 CEST	443	49878	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:23.394064903 CEST	443	49878	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:23.394172907 CEST	49878	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:23.908297062 CEST	49757	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:23.908823967 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:23.927578926 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:39:23.940361023 CEST	443	49757	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:23.940560102 CEST	49757	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:23.944602966 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:23.944833994 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:23.961180925 CEST	443	49805	99.84.15.81	192.168.2.3
Jul 9, 2021 23:39:23.961340904 CEST	49805	443	192.168.2.3	99.84.15.81
Jul 9, 2021 23:39:24.183337927 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:39:24.216365099 CEST	443	49802	99.84.15.9	192.168.2.3
Jul 9, 2021 23:39:24.216533899 CEST	49802	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:39:24.614017010 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:24.614041090 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:24.614135981 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:24.614878893 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:24.615046024 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:24.615048885 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:24.615129948 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:25.075054884 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:25.075095892 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:25.075193882 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:25.077939987 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:25.255884886 CEST	49884	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.255961895 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.395736933 CEST	443	49878	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:25.395780087 CEST	443	49878	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:25.395848989 CEST	49878	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:25.395895958 CEST	49878	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:25.422296047 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.422374964 CEST	443	49884	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.422430038 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.422473907 CEST	49884	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.423393011 CEST	49884	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.423938990 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.561975956 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.589992046 CEST	443	49884	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.590368986 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.591825008 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.591871023 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.591897964 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.591905117 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.591928005 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.591954947 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.591985941 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.592016935 CEST	443	49884	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.592042923 CEST	443	49884	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.592072010 CEST	443	49884	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.592093945 CEST	443	49884	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.592127085 CEST	49884	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.592164993 CEST	49884	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.592174053 CEST	49884	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.592180967 CEST	49884	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.595335007 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.595390081 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.595427036 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.595457077 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.595496893 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.595524073 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.595556021 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.595563889 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.595568895 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.595613956 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.595686913 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.595740080 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.601243019 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.601675034 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.601874113 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.601970911 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.603440046 CEST	49884	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.603849888 CEST	49884	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.768603086 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.768651962 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.768703938 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.768731117 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.768758059 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.768798113 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.768810034 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.770982981 CEST	443	49884	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.771029949 CEST	443	49884	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.771130085 CEST	49884	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.771163940 CEST	49884	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.773835897 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.773889065 CEST	49884	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.777647018 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.777733088 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.782736063 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.782855034 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:25.801223993 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.810591936 CEST	49885	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.811770916 CEST	49886	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.812843084 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.813931942 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.813966036 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.814057112 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.814070940 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.814076900 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.814115047 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.814208031 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.814215899 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.814246893 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.814286947 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.814325094 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.814340115 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.814352989 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.814394951 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.814430952 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.814434052 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.814564943 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.814574957 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.814812899 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.814896107 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.814955950 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.814969063 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.814980030 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.815026999 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.815049887 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.815077066 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.815078974 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.815109968 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.815161943 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.815659046 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.815709114 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.815769911 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.815790892 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.815839052 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.815845966 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.815886974 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.815928936 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.815956116 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.816004992 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.816104889 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.816134930 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:25.816200018 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.816211939 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:25.821396112 CEST	49887	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:39:25.822174072 CEST	49888	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:39:25.830151081 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:39:25.839849949 CEST	443	49885	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.839973927 CEST	49885	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.841917038 CEST	443	49886	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.842010975 CEST	49886	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.843662024 CEST	49885	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.844435930 CEST	49886	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.847249985 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.847327948 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.847403049 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.847461939 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.847491980 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.847544909 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.847549915 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.847589016 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.847603083 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.847635031 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.847675085 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:39:25.847767115 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.847807884 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.847822905 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.847856998 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.847882032 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.847929001 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.847929955 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.847969055 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.847984076 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.847995043 CEST	443	49816	151.101.12.157	192.168.2.3
Jul 9, 2021 23:39:25.848017931 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.848054886 CEST	49816	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:39:25.848750114 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.848823071 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.849000931 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.849049091 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.849064112 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.849090099 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.849097967 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.849126101 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.849140882 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.849175930 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.849571943 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.849623919 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.849879026 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.849920988 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.849941969 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.849956989 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.849967957 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.849996090 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.850008011 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.850048065 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.850583076 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.850641012 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.850644112 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.850697994 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.850708961 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.850752115 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.850758076 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.850789070 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.850799084 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.850840092 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.851460934 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.851541042 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.851582050 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.851638079 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.851759911 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.851798058 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.851819038 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.851834059 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.851857901 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.851895094 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.852458954 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.852521896 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.852539062 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.852602959 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.852669001 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.852716923 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.852720976 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.852765083 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.852812052 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.852859974 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.853430033 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.853518009 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.853655100 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.853697062 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.853715897 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.853734016 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.853746891 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.853770971 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.853780031 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.853857994 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.854530096 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.854569912 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.854583025 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.854605913 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.854614019 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.854644060 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.854679108 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.854679108 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.854690075 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.854727983 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.855432034 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.855518103 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.855525970 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.855566978 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.855590105 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.855603933 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.855618954 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.855645895 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.855655909 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.855698109 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.856297970 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.856360912 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.856364965 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.856411934 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.856417894 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.856460094 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.856467962 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.856496096 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.856508017 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.856553078 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.857321024 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.857388020 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.857391119 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.857433081 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.857445955 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.857460976 CEST	443	49756	99.84.15.96	192.168.2.3
Jul 9, 2021 23:39:25.857486010 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.857501984 CEST	49756	443	192.168.2.3	99.84.15.96
Jul 9, 2021 23:39:25.872889996 CEST	443	49885	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.872941017 CEST	443	49885	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.873034954 CEST	49885	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.873097897 CEST	443	49885	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.873167992 CEST	49885	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.874070883 CEST	49893	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:25.874651909 CEST	443	49886	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.874875069 CEST	443	49885	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.874942064 CEST	443	49886	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.874959946 CEST	49885	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.874985933 CEST	443	49886	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.875031948 CEST	49886	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.876795053 CEST	443	49886	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.876851082 CEST	49886	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.876877069 CEST	49886	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.878935099 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:25.890373945 CEST	49886	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.890727997 CEST	49886	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.893585920 CEST	49885	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.922626972 CEST	49897	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:25.922657967 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:25.922738075 CEST	443	49887	34.194.154.95	192.168.2.3
Jul 9, 2021 23:39:25.922769070 CEST	443	49888	34.194.154.95	192.168.2.3
Jul 9, 2021 23:39:25.922821999 CEST	443	49886	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.922842026 CEST	49887	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:39:25.922851086 CEST	443	49886	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.922878981 CEST	49888	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:39:25.923396111 CEST	443	49886	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.923463106 CEST	49886	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.924133062 CEST	443	49885	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.924376011 CEST	443	49885	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.924442053 CEST	49885	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.924690962 CEST	49887	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:39:25.925055027 CEST	49888	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:39:25.925367117 CEST	443	49886	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.925431013 CEST	443	49886	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:25.925441027 CEST	49886	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.925482988 CEST	49886	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:25.943094015 CEST	49899	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:25.943270922 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:25.959028006 CEST	443	49899	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:25.959069967 CEST	443	49900	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:25.959155083 CEST	49899	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:25.959163904 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:25.960167885 CEST	49899	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:25.960457087 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:25.974296093 CEST	443	49893	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:25.974401951 CEST	49893	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:25.976008892 CEST	443	49899	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:25.976140022 CEST	443	49900	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:25.976914883 CEST	443	49899	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:25.976954937 CEST	443	49899	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:25.977004051 CEST	443	49899	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:25.977061987 CEST	49899	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:25.977103949 CEST	49899	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:25.977109909 CEST	49899	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:25.977364063 CEST	443	49900	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:25.977401972 CEST	443	49900	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:25.977442026 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:25.977442980 CEST	443	49900	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:25.977471113 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:25.977509022 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:25.979252100 CEST	443	49894	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:25.979345083 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:25.981192112 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.981440067 CEST	443	49884	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:25.984481096 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:25.996898890 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:25.997011900 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.000607014 CEST	49904	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.013243914 CEST	443	49904	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.013370991 CEST	49904	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.018302917 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.025289059 CEST	443	49887	34.194.154.95	192.168.2.3
Jul 9, 2021 23:39:26.025320053 CEST	443	49888	34.194.154.95	192.168.2.3
Jul 9, 2021 23:39:26.026221991 CEST	443	49887	34.194.154.95	192.168.2.3
Jul 9, 2021 23:39:26.026292086 CEST	443	49887	34.194.154.95	192.168.2.3
Jul 9, 2021 23:39:26.026331902 CEST	443	49887	34.194.154.95	192.168.2.3
Jul 9, 2021 23:39:26.026376963 CEST	49887	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:39:26.026434898 CEST	49887	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:39:26.026556015 CEST	443	49888	34.194.154.95	192.168.2.3
Jul 9, 2021 23:39:26.026597023 CEST	443	49888	34.194.154.95	192.168.2.3
Jul 9, 2021 23:39:26.026627064 CEST	443	49888	34.194.154.95	192.168.2.3
Jul 9, 2021 23:39:26.026640892 CEST	49888	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:39:26.026753902 CEST	49888	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:39:26.030407906 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.043160915 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.043235064 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.043272018 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.043283939 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.043312073 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.043350935 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.043395042 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.060590029 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.061042070 CEST	49888	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:39:26.061714888 CEST	49887	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:39:26.062410116 CEST	49904	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.063303947 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.063364029 CEST	49899	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.064251900 CEST	49888	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:39:26.064613104 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.064901114 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.065221071 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.065282106 CEST	49899	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.065526962 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.069245100 CEST	49893	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.069788933 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.073661089 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.073697090 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.073802948 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.073841095 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.074356079 CEST	443	49904	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.075155020 CEST	443	49893	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.076997995 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.077095032 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.080065012 CEST	443	49900	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.080108881 CEST	443	49900	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.080135107 CEST	443	49899	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.080169916 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.080193043 CEST	443	49899	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.080270052 CEST	49899	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.081064939 CEST	443	49894	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.081568956 CEST	443	49899	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.081598043 CEST	443	49900	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.081623077 CEST	443	49900	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.081648111 CEST	443	49899	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.081671953 CEST	443	49900	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.081685066 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.081707954 CEST	49899	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.082103014 CEST	443	49900	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.082173109 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.082195997 CEST	443	49900	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.082248926 CEST	443	49900	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.082253933 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.082288027 CEST	443	49900	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.082307100 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.082338095 CEST	443	49900	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.082341909 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.082386017 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.083082914 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.087219000 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.088192940 CEST	443	49904	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.088234901 CEST	443	49904	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.088270903 CEST	443	49904	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.088300943 CEST	443	49904	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.088355064 CEST	49904	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.088396072 CEST	49904	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.088403940 CEST	49904	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.088408947 CEST	49904	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.089428902 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.089550972 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.090560913 CEST	443	49897	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.090646982 CEST	49897	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.092165947 CEST	49900	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.092529058 CEST	49899	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.096708059 CEST	49904	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.099698067 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.100820065 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.100888968 CEST	49897	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.104821920 CEST	49904	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.106784105 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:39:26.107918024 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.107964039 CEST	443	49900	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.108009100 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.108011007 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.108052969 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.108091116 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.108091116 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.108123064 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.108144045 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.108225107 CEST	443	49899	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.108510017 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.108577013 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.108597994 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.108628035 CEST	443	49904	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.108659983 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.108705997 CEST	49904	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.108880997 CEST	443	49904	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.108971119 CEST	49904	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.109195948 CEST	49904	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.109545946 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.109626055 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.109628916 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.109707117 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.109915972 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.109987020 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.110101938 CEST	49903	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.116699934 CEST	443	49904	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.116791964 CEST	49904	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:39:26.125735044 CEST	443	49904	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.128149986 CEST	443	49903	172.217.168.38	192.168.2.3
Jul 9, 2021 23:39:26.156892061 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:39:26.158894062 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:39:26.162996054 CEST	443	49888	34.194.154.95	192.168.2.3
Jul 9, 2021 23:39:26.163089991 CEST	49888	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:39:26.163290024 CEST	443	49887	34.194.154.95	192.168.2.3
Jul 9, 2021 23:39:26.163367033 CEST	49887	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:39:26.171176910 CEST	443	49893	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.171236038 CEST	443	49894	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.171794891 CEST	443	49893	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.171823025 CEST	443	49893	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.171847105 CEST	443	49893	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.171868086 CEST	49893	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.171879053 CEST	443	49893	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.171894073 CEST	49893	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.171904087 CEST	443	49893	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.171911001 CEST	49893	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.171932936 CEST	49893	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.171958923 CEST	49893	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.172126055 CEST	443	49894	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.172152042 CEST	443	49894	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.172183037 CEST	443	49894	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.172230959 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.172247887 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.172254086 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.172266006 CEST	443	49894	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.172297955 CEST	443	49894	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.172342062 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.172384977 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.183233023 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.183861971 CEST	443	49888	34.194.154.95	192.168.2.3
Jul 9, 2021 23:39:26.183942080 CEST	49888	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:39:26.184087992 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.184310913 CEST	49893	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.184464931 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.194370985 CEST	443	49893	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.194447041 CEST	49893	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.194912910 CEST	443	49894	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.194993973 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.196074963 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.196214914 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.233805895 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.243299961 CEST	49907	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.243599892 CEST	49908	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.259253979 CEST	49910	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.262267113 CEST	49909	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.265796900 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.266042948 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.266158104 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.266298056 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.266387939 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.266443014 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.266508102 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.266530037 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.266588926 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.267081976 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.267151117 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.267174959 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.267189026 CEST	443	49897	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.267260075 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.267482042 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.267510891 CEST	49911	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.267529964 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.267554045 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.267577887 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.267580032 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.267622948 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.267625093 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.267667055 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.267893076 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.267961979 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.267992020 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.268043995 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.268495083 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.268536091 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.268553019 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.268606901 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.268748999 CEST	49912	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.268909931 CEST	443	49897	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.268951893 CEST	443	49897	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.268986940 CEST	49897	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.268987894 CEST	443	49897	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.269010067 CEST	49897	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.269030094 CEST	49897	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.269032001 CEST	443	49897	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.269084930 CEST	49897	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.269187927 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.269257069 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.269351959 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.269414902 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.269730091 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.269798040 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.269921064 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.269995928 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.270473003 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.270540953 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.270589113 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.270651102 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.271274090 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.271312952 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.271364927 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.271382093 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.271770954 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.271888018 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.271924973 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.271976948 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.272470951 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.272535086 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.272587061 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.272639036 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.273243904 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.273283005 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.273309946 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.273330927 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.273821115 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.273860931 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.273890972 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.273916960 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.274529934 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.274570942 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.274585009 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.274630070 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.275170088 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.275213957 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.275232077 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.275263071 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.275913000 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.275945902 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.275968075 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.275988102 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.276462078 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.276663065 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.276730061 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.276737928 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.276778936 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.277234077 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.277304888 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.277409077 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.277465105 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.277776003 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.277837992 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.277868986 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.277951002 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.278558016 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.278628111 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.278682947 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.278738022 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.279164076 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.279231071 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.279238939 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.279288054 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.279447079 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.279834032 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.279898882 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.279952049 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.280004025 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.280133963 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.280463934 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.280524969 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.280657053 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.280713081 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.281544924 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.281611919 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.281616926 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.281666994 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.282315969 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.282357931 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.282422066 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.282605886 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.282633066 CEST	443	49835	99.84.15.94	192.168.2.3
Jul 9, 2021 23:39:26.282646894 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.282671928 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.282685041 CEST	49835	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:39:26.283253908 CEST	443	49911	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.283330917 CEST	49911	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.284785986 CEST	443	49912	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.284864902 CEST	49912	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.284868002 CEST	443	49894	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.284928083 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.285933971 CEST	443	49893	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.285998106 CEST	49893	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.288659096 CEST	443	49894	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.288755894 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.291225910 CEST	49897	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.294698954 CEST	49911	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.295593977 CEST	49912	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.296411037 CEST	49897	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.298424959 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.310524940 CEST	443	49911	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.310638905 CEST	443	49847	108.174.11.69	192.168.2.3
Jul 9, 2021 23:39:26.310722113 CEST	49847	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:39:26.311537981 CEST	443	49911	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.311569929 CEST	443	49912	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.311599016 CEST	443	49911	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.311629057 CEST	49911	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.311631918 CEST	443	49911	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.311655045 CEST	49911	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.311672926 CEST	49911	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.312669039 CEST	443	49912	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.312711000 CEST	443	49912	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.312742949 CEST	443	49912	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.312838078 CEST	49912	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.312885046 CEST	49912	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.312892914 CEST	49912	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.319427013 CEST	49912	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.319493055 CEST	49911	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.320023060 CEST	49912	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.320106983 CEST	49911	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.320225000 CEST	49912	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.320413113 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:39:26.335082054 CEST	443	49912	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.335650921 CEST	443	49911	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.335719109 CEST	443	49912	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.335768938 CEST	443	49911	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.335799932 CEST	49912	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.335803986 CEST	443	49912	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.335823059 CEST	49911	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.336038113 CEST	443	49911	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.336075068 CEST	443	49912	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.336102962 CEST	443	49912	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.336122990 CEST	49912	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.336158037 CEST	443	49911	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.336219072 CEST	49911	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.340529919 CEST	49912	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.340704918 CEST	49911	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.344286919 CEST	443	49907	52.206.83.104	192.168.2.3
Jul 9, 2021 23:39:26.344331026 CEST	443	49908	52.206.83.104	192.168.2.3
Jul 9, 2021 23:39:26.344382048 CEST	49907	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.344455004 CEST	49908	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.346100092 CEST	49908	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.350552082 CEST	49907	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.356338978 CEST	443	49912	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.356389046 CEST	443	49911	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.360644102 CEST	443	49910	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.360761881 CEST	49910	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.362910032 CEST	443	49909	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.362976074 CEST	49909	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.367388964 CEST	49910	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.375657082 CEST	49909	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.378983974 CEST	49840	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:39:26.381474018 CEST	49841	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:39:26.396573067 CEST	443	49840	104.244.42.67	192.168.2.3
Jul 9, 2021 23:39:26.401964903 CEST	443	49841	104.244.42.69	192.168.2.3
Jul 9, 2021 23:39:26.421763897 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.422895908 CEST	49920	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.437633991 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.437808037 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.438636065 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.438764095 CEST	443	49920	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.438962936 CEST	49920	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.439565897 CEST	49920	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.441176891 CEST	443	49894	52.94.232.32	192.168.2.3
Jul 9, 2021 23:39:26.441239119 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:39:26.442008972 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.442095995 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.442109108 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.442158937 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.443851948 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.445341110 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.445461988 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.445504904 CEST	443	49912	151.101.1.140	192.168.2.3
Jul 9, 2021 23:39:26.445569038 CEST	49912	443	192.168.2.3	151.101.1.140
Jul 9, 2021 23:39:26.446487904 CEST	443	49908	52.206.83.104	192.168.2.3
Jul 9, 2021 23:39:26.447223902 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.447310925 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.447910070 CEST	443	49908	52.206.83.104	192.168.2.3
Jul 9, 2021 23:39:26.447971106 CEST	443	49908	52.206.83.104	192.168.2.3
Jul 9, 2021 23:39:26.447988033 CEST	49908	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.448013067 CEST	49908	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.448096991 CEST	443	49908	52.206.83.104	192.168.2.3
Jul 9, 2021 23:39:26.448144913 CEST	49908	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.451212883 CEST	443	49907	52.206.83.104	192.168.2.3
Jul 9, 2021 23:39:26.451818943 CEST	49908	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.452018023 CEST	443	49907	52.206.83.104	192.168.2.3
Jul 9, 2021 23:39:26.452111959 CEST	49907	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.452162027 CEST	443	49907	52.206.83.104	192.168.2.3
Jul 9, 2021 23:39:26.452200890 CEST	443	49907	52.206.83.104	192.168.2.3
Jul 9, 2021 23:39:26.452269077 CEST	49907	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.452305079 CEST	49907	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.452552080 CEST	49908	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.454608917 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.455876112 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.455903053 CEST	443	49920	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.455940008 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.455972910 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.456033945 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.456080914 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.456088066 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.456137896 CEST	49907	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.456578016 CEST	443	49920	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.456615925 CEST	443	49920	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.456649065 CEST	49920	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.456676960 CEST	49920	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.456789970 CEST	443	49920	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.456842899 CEST	49920	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.457962036 CEST	443	49897	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.458024025 CEST	443	49897	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.458050966 CEST	49897	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.458092928 CEST	49897	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.462768078 CEST	443	49897	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.462857008 CEST	49897	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.465090036 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.465425014 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.465622902 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.467767954 CEST	443	49910	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.469805002 CEST	443	49910	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.469841003 CEST	443	49910	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.469862938 CEST	49910	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.469873905 CEST	443	49910	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.469885111 CEST	49910	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.469911098 CEST	49910	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.473618031 CEST	49920	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.473995924 CEST	49920	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.476126909 CEST	443	49909	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.478226900 CEST	443	49909	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.478306055 CEST	49909	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.478364944 CEST	443	49909	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.478415966 CEST	49909	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.478458881 CEST	443	49909	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.478506088 CEST	49909	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.481048107 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.481120110 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.481180906 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.481322050 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.481337070 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.481383085 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.481466055 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.482393980 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.490284920 CEST	443	49920	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.490324974 CEST	443	49920	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.490397930 CEST	49920	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.490571976 CEST	443	49920	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.490601063 CEST	443	49920	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.490653992 CEST	49920	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.494086027 CEST	49909	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.494348049 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:26.494908094 CEST	49909	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.495086908 CEST	49897	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.495634079 CEST	49920	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.497833014 CEST	49910	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.498025894 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.499970913 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:26.504776955 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.504939079 CEST	443	49840	104.244.42.67	192.168.2.3
Jul 9, 2021 23:39:26.505016088 CEST	49840	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:39:26.505125046 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:39:26.505234957 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:39:26.506501913 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:26.511598110 CEST	443	49920	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.512614012 CEST	443	49841	104.244.42.69	192.168.2.3
Jul 9, 2021 23:39:26.512722969 CEST	49841	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:39:26.520854950 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:39:26.533480883 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:39:26.549624920 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.549681902 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.549720049 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.549757004 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.549771070 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.549794912 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.549794912 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.549799919 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.549841881 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.549860001 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.549884081 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.549902916 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.549949884 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.550033092 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.550096989 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.550154924 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.550194025 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.550225973 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.550257921 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.550259113 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.550308943 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.550324917 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.550348043 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.550370932 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.550389051 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.550410032 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.550438881 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.550787926 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.550863028 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.550971031 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.551004887 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.551029921 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.551064014 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.552653074 CEST	443	49908	52.206.83.104	192.168.2.3
Jul 9, 2021 23:39:26.552741051 CEST	49908	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.556983948 CEST	443	49907	52.206.83.104	192.168.2.3
Jul 9, 2021 23:39:26.557109118 CEST	49907	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.567919016 CEST	443	49908	52.206.83.104	192.168.2.3
Jul 9, 2021 23:39:26.568026066 CEST	49908	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.568073034 CEST	443	49908	52.206.83.104	192.168.2.3
Jul 9, 2021 23:39:26.568123102 CEST	49908	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:39:26.587414026 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:39:26.587496042 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:39:26.587498903 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:39:26.587551117 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:39:26.587980986 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:39:26.588054895 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:39:26.588097095 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:39:26.588156939 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:39:26.588288069 CEST	49844	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:39:26.588438034 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.588527918 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.588637114 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.588675976 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.588695049 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.588725090 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.588818073 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.588857889 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.588885069 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.588891029 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.588928938 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.588960886 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.594780922 CEST	443	49909	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.595573902 CEST	443	49909	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.595613003 CEST	443	49909	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.595681906 CEST	49909	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.598426104 CEST	443	49910	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.598997116 CEST	443	49910	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.599195004 CEST	49910	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.600594044 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.600635052 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.600671053 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.600686073 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.600697994 CEST	443	49844	172.217.168.34	192.168.2.3
Jul 9, 2021 23:39:26.600703001 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.600734949 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.600763083 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.600773096 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.600801945 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.600815058 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.600863934 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.600868940 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.603235960 CEST	443	49909	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.603312969 CEST	49909	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.607351065 CEST	49909	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.612925053 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.612963915 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.613010883 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.613012075 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.613033056 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.613059044 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.613204956 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.613275051 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.613344908 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.613374949 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.613393068 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.613419056 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.632354021 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.632395983 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.632432938 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.632437944 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.632457018 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.632468939 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.632479906 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.632507086 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.632514954 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.632544041 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.632558107 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.632587910 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.632638931 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.632684946 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.639470100 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.639518976 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.639556885 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.639569044 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.639590025 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.639592886 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.639594078 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.639632940 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.639653921 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.639662027 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.639674902 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.639702082 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.644114971 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.644155025 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.644200087 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.644228935 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.644418955 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.644459009 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.644495010 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.644496918 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.644511938 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.644525051 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.644543886 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.644565105 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.649223089 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.649261951 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.649306059 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.649349928 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.649406910 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.649454117 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.649454117 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.649496078 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.649497986 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.649523973 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.649538994 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.649569035 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.652764082 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.653609991 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.653647900 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.653676987 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.653704882 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.653815985 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.653852940 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.653866053 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.653892040 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.653898954 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.653919935 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.653938055 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.653963089 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.660548925 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:26.666661024 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:26.668628931 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:39:26.668682098 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:39:26.670186996 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.672746897 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:26.672775984 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:26.672836065 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:26.678711891 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.678761005 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.678802967 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.678828955 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.678841114 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.678886890 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.678890944 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.678945065 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.678983927 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.679054976 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.683197975 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:26.683271885 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:26.693371058 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.693411112 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.693449020 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.693460941 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.693486929 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.693521976 CEST	443	49898	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.693525076 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.693531036 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.693533897 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.693581104 CEST	49898	443	192.168.2.3	52.13.47.186
Jul 9, 2021 23:39:26.695660114 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:26.695704937 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:26.695753098 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:26.695786953 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:26.705537081 CEST	443	49897	52.13.47.186	192.168.2.3
Jul 9, 2021 23:39:26.706932068 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.707082987 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.707340002 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.709392071 CEST	443	49909	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.716172934 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.717952967 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.721013069 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.721071959 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.723198891 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.723983049 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.725428104 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.726746082 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.727962971 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.729278088 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.730477095 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.734285116 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.734461069 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.734616041 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.735954046 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.737127066 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.738519907 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.740714073 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.742084026 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.753592014 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.759810925 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.764285088 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.789695978 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.789913893 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.790133953 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.794980049 CEST	443	49909	142.0.160.13	192.168.2.3
Jul 9, 2021 23:39:26.795047998 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.795078039 CEST	49909	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:39:26.841785908 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:39:26.845017910 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.847675085 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.852543116 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.855578899 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.857640028 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.858613968 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:39:26.858762980 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:39:26.858835936 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:39:26.859751940 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:39:26.859816074 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:39:26.861449003 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.864342928 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.870688915 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.873619080 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.873672962 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.873761892 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.874545097 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.874596119 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.874649048 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.876388073 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.877546072 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.879769087 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.880601883 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.880752087 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.880824089 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.883618116 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.883650064 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.883723974 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.885638952 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.885725975 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.887588978 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.888324976 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.888412952 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.888525009 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.888552904 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.888582945 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.889993906 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.890021086 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.890064955 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.890085936 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.890960932 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.891027927 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.892086029 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.892155886 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.892997026 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.893083096 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.894058943 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.894123077 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.896409035 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.897209883 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.898092031 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.898235083 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.898309946 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.898896933 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.898994923 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.899350882 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.899454117 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.900191069 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.901864052 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.902148962 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.902266979 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.902326107 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.904285908 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.906102896 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.906419039 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.906450987 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.910116911 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.918104887 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.919343948 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.923727036 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.924776077 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.928661108 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.929198027 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.951975107 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.953610897 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.953663111 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.953753948 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.953948021 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.954036951 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.958250999 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:26.958456993 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:26.958648920 CEST	49868	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:26.958686113 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:26.961102962 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:26.974986076 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:26.978143930 CEST	443	49868	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:26.979315042 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:26.979366064 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:26.979475021 CEST	49868	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:26.979510069 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:27.008956909 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.009114027 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.011746883 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.014096975 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.017182112 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.017290115 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.018987894 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.021837950 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.021895885 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.022001028 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.025482893 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.025587082 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.029090881 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.030107975 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.034421921 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.034538031 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.043311119 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.045125008 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.045152903 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.045377970 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.063539028 CEST	49925	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.063545942 CEST	49924	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.073489904 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.074130058 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.075229883 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:27.075731039 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:27.077969074 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:39:27.078440905 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:39:27.089921951 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.092443943 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.094141006 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.095820904 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.097510099 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.098897934 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.100646019 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.102313995 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.103753090 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.105127096 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.106699944 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.107417107 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.108356953 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.110079050 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.111682892 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.113404036 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.115134954 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.116542101 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.118093014 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.119873047 CEST	49927	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.119931936 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.120824099 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.121423960 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.122893095 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.124198914 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.125564098 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.127269983 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.128617048 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.130393028 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.131755114 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.132968903 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.134321928 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.135910988 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.137734890 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.139183044 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.140567064 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.141947985 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.143384933 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.145133018 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.146471977 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.147870064 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.149363995 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.150871038 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.153481960 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:27.153688908 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:27.175250053 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:27.175288916 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:27.175316095 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:27.175343037 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:27.175393105 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:27.175435066 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:27.213112116 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.213346004 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.213598967 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.213793039 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.213846922 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.213959932 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.214092016 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.214194059 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.214359045 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.214488983 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.214646101 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.214781046 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.214898109 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.214920044 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.215003014 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.215068102 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.215152979 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.215224981 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.215293884 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.215368032 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.215432882 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.215504885 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.215572119 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.215662003 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.215713024 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.215791941 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.215853930 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.215928078 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.215993881 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.216067076 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.216180086 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.216243982 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.216319084 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.216440916 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.216514111 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.216613054 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.216727018 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.216790915 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.216873884 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.216937065 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.217010975 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.217479944 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.217618942 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.217665911 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.217740059 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.223694086 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.225050926 CEST	443	49924	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.225506067 CEST	49924	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.226675034 CEST	443	49925	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.226763964 CEST	49924	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.226835966 CEST	49925	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.228693008 CEST	49925	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.233350992 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.233407021 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.233458996 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.233555079 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.233602047 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.234287024 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.234340906 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.234411001 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.234445095 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.234503984 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.235193014 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.235248089 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.235255003 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.235297918 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.235301018 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.235363007 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.236038923 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.236109972 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.236118078 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.236171961 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.236296892 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.236346006 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.236998081 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.237070084 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.237170935 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.237226963 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.237281084 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.237333059 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.237797976 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.237859964 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.238043070 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.238104105 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.238162041 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.239069939 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.239137888 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.239152908 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.239208937 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.239217043 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.239269018 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.239626884 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.239736080 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.239800930 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.239840031 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.239902020 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.240525007 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.240586996 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.240694046 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.240750074 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.240787983 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.240808010 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.241590023 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.241626978 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:39:27.241645098 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.241847992 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.241908073 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.241961002 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.242302895 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:27.242336988 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:27.242378950 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:27.242403984 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:27.242440939 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:27.244308949 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:39:27.244354963 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:39:27.244419098 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:39:27.244473934 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.246376991 CEST	443	49845	44.239.250.146	192.168.2.3
Jul 9, 2021 23:39:27.247215986 CEST	49845	443	192.168.2.3	44.239.250.146
Jul 9, 2021 23:39:27.252501965 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.252552032 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.252580881 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.252609015 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.252619982 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.252662897 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.252664089 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.252712965 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.252713919 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.252759933 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.252764940 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.252818108 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.252819061 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.252868891 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.252877951 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.252931118 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.252932072 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.252980947 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.252988100 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.253026009 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.253046036 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.253078938 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.253081083 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.253129959 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.253587008 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.253638983 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.253642082 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.253690958 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.253787994 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.253838062 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.253895998 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.254496098 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.254547119 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.254575968 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.254591942 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.254600048 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.254647970 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.254652023 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.254703999 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.255091906 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.255160093 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.255410910 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.255460978 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.255480051 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.255513906 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.255522013 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.255675077 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.256046057 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.256091118 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.256143093 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.256150007 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.256153107 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.256170034 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.256385088 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.256453037 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.256561041 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.256637096 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.256706953 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.256727934 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.256781101 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.256784916 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.256845951 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.256938934 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.257244110 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.257291079 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.257317066 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.257334948 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.257350922 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.257401943 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.257405996 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.257453918 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.257456064 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.257504940 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.258013010 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.258075953 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.258191109 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.258251905 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.258306026 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.258306980 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.258315086 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.258358002 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.258361101 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.258408070 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.258690119 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.258742094 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.258800030 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.258848906 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.258852005 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.258897066 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.258903027 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.258949995 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.258956909 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.259013891 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.259196997 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.259617090 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.259670019 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.259685040 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.259716988 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.259721041 CEST	443	49919	151.101.1.192	192.168.2.3
Jul 9, 2021 23:39:27.259766102 CEST	49919	443	192.168.2.3	151.101.1.192
Jul 9, 2021 23:39:27.261760950 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.265224934 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.268474102 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.271920919 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:27.273648977 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.273777962 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.276942968 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.277555943 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:39:27.278306961 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.279230118 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.279248953 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:39:27.279309988 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:39:27.279365063 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:39:27.279411077 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:39:27.279469967 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.279510021 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.279515982 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.279742956 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.279850006 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.281344891 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.283448935 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.284548998 CEST	443	49927	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:27.284636021 CEST	49927	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.285269022 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.285451889 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.286007881 CEST	49930	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.286813021 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.287406921 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.288028955 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.288100958 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.288639069 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.288759947 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:27.289417028 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.289865971 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.290070057 CEST	49927	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.290761948 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.291971922 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.292083979 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.292224884 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.292363882 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.292439938 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.292511940 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.292582989 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.292648077 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.292716980 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.292782068 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.292860985 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.292927027 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.292999983 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.293066025 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.293138981 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.293209076 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.293281078 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.293345928 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.293421984 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.293484926 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.293555975 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.293622971 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.293695927 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.293761969 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.293833017 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.293895960 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.294451952 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.295268059 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:27.295320988 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:27.295360088 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:27.295361042 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:27.295394897 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:27.295397043 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:27.295416117 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:27.295433044 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:27.295454979 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:27.296858072 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.296945095 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:27.299298048 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:27.299439907 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.300148010 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.300319910 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.303670883 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.305665016 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.307220936 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:27.307261944 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:27.307322025 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:27.307378054 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:27.307410955 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:27.307419062 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:27.307427883 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:39:27.307558060 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:39:27.309027910 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.311563015 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:39:27.311597109 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:39:27.311692953 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.312339067 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.312658072 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.312777996 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.312979937 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.315785885 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.330688953 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:39:27.330952883 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:39:27.331063032 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.365159988 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:27.377734900 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.378233910 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.378484011 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.378576040 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.379471064 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.379690886 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.379734993 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.379771948 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.379857063 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.379935026 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.379968882 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.380085945 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.380255938 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.380495071 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.380655050 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.381058931 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.381093025 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.381463051 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.381498098 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.382353067 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.382385969 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.383501053 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.383529902 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.383646011 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.388026953 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.388070107 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.388138056 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.388169050 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.390341997 CEST	443	49924	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.391885042 CEST	443	49924	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.391936064 CEST	443	49924	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.391990900 CEST	443	49924	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.392031908 CEST	49924	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.392055988 CEST	443	49924	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.392065048 CEST	49924	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.392071009 CEST	49924	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.393249989 CEST	49924	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.393847942 CEST	443	49925	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.395474911 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.395509005 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.395560980 CEST	443	49925	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.395598888 CEST	443	49925	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.395625114 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.395636082 CEST	49925	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.395648003 CEST	443	49925	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.395653009 CEST	49925	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.395704031 CEST	49925	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.395706892 CEST	443	49925	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.395802021 CEST	49925	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.397716045 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.397753954 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.397867918 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.397896051 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.401949883 CEST	49924	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.403362989 CEST	49924	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.403691053 CEST	49924	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.408463001 CEST	49925	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.415846109 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.415880919 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.415972948 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.429650068 CEST	49925	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.442015886 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.442061901 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:27.443173885 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:27.443229914 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:27.443288088 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:27.443326950 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:27.443392038 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.443439007 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.443450928 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.446365118 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.446916103 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.446959019 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.447041988 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.449012041 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.450000048 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.450045109 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.450196981 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.451392889 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.451431990 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.451486111 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.451510906 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.451608896 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.452048063 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.452088118 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.452135086 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.452157021 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.453152895 CEST	443	49930	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:27.453428030 CEST	443	49927	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:27.453552008 CEST	49930	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.454356909 CEST	443	49927	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:27.454382896 CEST	443	49927	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:27.454416037 CEST	443	49927	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:27.454427958 CEST	443	49927	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:27.454468966 CEST	49927	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.454519987 CEST	49927	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.454963923 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.455157995 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.455176115 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.455234051 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.455260992 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.455470085 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.455790997 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.457345009 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.457362890 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.457437992 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.459110022 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.459192991 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.459286928 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.459657907 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.459714890 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.459719896 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.459769964 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.460091114 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.460105896 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.460170984 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.460500002 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.463403940 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:27.464555025 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:39:27.464859962 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:39:27.465071917 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.465595961 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:39:27.465611935 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:39:27.465750933 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.465800047 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:39:27.465913057 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.468810081 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.468831062 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.468885899 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.468899965 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.468914986 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.468924046 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.468965054 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.468981028 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.468990088 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.469014883 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.469130993 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.469145060 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.469162941 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.469176054 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.469186068 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.469189882 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.469209909 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.469218016 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.469238997 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.469249010 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.469294071 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.469393015 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.469445944 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.469562054 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.469611883 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.469727993 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.469743013 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.469796896 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.470027924 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470040083 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470078945 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470133066 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470150948 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470207930 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.470240116 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470247030 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.470299959 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.470347881 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470362902 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470381021 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470393896 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470407009 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470416069 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470433950 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470443964 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470457077 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470467091 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470588923 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.470619917 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.470628023 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.470630884 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470633984 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.470639944 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.470645905 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.470730066 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.471081018 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.471153021 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.471168995 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.471249104 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.472167015 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.472184896 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.472240925 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.474411964 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.474427938 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.474495888 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.475306034 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.475321054 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.475388050 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.475817919 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.475832939 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.475851059 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.475864887 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.475881100 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.475902081 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.475913048 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.476735115 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.476751089 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.476794004 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.476799965 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:27.476808071 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.477639914 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:27.477726936 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.477730989 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:27.477771997 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.477802038 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:27.477821112 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:27.477843046 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.477864027 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.486110926 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.486135006 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.486228943 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.491147041 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:27.491856098 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.492331982 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:39:27.492698908 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.492717981 CEST	443	49863	35.163.214.119	192.168.2.3
Jul 9, 2021 23:39:27.492815971 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.492855072 CEST	49863	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:39:27.506026983 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.506048918 CEST	49934	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.534693003 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:27.536003113 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.536102057 CEST	443	49934	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.536145926 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.536165953 CEST	49934	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.553164005 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:39:27.563673019 CEST	443	49924	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.563711882 CEST	443	49924	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.563904047 CEST	49924	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.565406084 CEST	443	49924	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.565484047 CEST	49924	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.566464901 CEST	443	49924	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.570193052 CEST	49924	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.571993113 CEST	443	49925	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.572123051 CEST	49925	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.572200060 CEST	443	49925	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.572258949 CEST	49925	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.592617035 CEST	443	49925	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.594185114 CEST	49925	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.600929022 CEST	49930	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.604372978 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.629911900 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:27.654020071 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:27.654053926 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:27.654232025 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.654280901 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.657393932 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:27.657426119 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:27.658157110 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:27.680845022 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:27.680897951 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:27.680923939 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:27.681040049 CEST	49883	443	192.168.2.3	44.233.214.243
Jul 9, 2021 23:39:27.726011038 CEST	49934	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.726063013 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.728379965 CEST	49925	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.728564024 CEST	49924	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.728620052 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.730113029 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.730326891 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.731818914 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.732475042 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.758527994 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.758562088 CEST	443	49934	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.758610010 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.758654118 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.758692026 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.758806944 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.758843899 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.759783983 CEST	443	49934	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.759826899 CEST	443	49934	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.759861946 CEST	443	49934	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.759893894 CEST	49934	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.759932041 CEST	49934	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.761193037 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.761828899 CEST	443	49934	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.761888027 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.762006998 CEST	49934	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.765153885 CEST	443	49883	44.233.214.243	192.168.2.3
Jul 9, 2021 23:39:27.768721104 CEST	443	49930	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:27.769510984 CEST	443	49930	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:27.769553900 CEST	443	49930	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:27.769591093 CEST	443	49930	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:27.769632101 CEST	443	49930	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:27.769649982 CEST	49930	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.769684076 CEST	49930	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.769690037 CEST	49930	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.769694090 CEST	49930	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.781908989 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:27.781949997 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:27.782074928 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.782099962 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.789588928 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.799204111 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.799896002 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.827795029 CEST	49934	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.829849958 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.829881907 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.830086946 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.830373049 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.840559006 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.842168093 CEST	49930	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.842786074 CEST	49924	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:27.846235037 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.858941078 CEST	443	49934	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.859256983 CEST	443	49934	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:27.862179995 CEST	49934	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:27.894737959 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:27.894880056 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:27.897083044 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:27.908610106 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:27.908694029 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.911267996 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:27.911370039 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.934082985 CEST	49927	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:27.938271999 CEST	443	49924	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.939727068 CEST	443	49925	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:27.940557003 CEST	49927	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:28.003707886 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:28.005150080 CEST	443	49924	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:28.009038925 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:28.010492086 CEST	443	49930	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:28.010529041 CEST	443	49930	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:28.010636091 CEST	49930	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:28.010694981 CEST	49930	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:28.011763096 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:28.011823893 CEST	49930	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:28.012042999 CEST	49930	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:28.014321089 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:28.014411926 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:28.057988882 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:28.059406996 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:28.061408997 CEST	443	49924	44.238.207.51	192.168.2.3
Jul 9, 2021 23:39:28.061564922 CEST	49924	443	192.168.2.3	44.238.207.51
Jul 9, 2021 23:39:28.061789036 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:28.065711975 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:28.065723896 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:28.099770069 CEST	443	49927	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:28.099828005 CEST	443	49927	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:28.099884987 CEST	49927	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:28.099905968 CEST	49927	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:28.107623100 CEST	49927	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:28.109492064 CEST	443	49927	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:28.109569073 CEST	49927	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:28.172013998 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.172043085 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.172055960 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.172068119 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.172090054 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.172106981 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.172195911 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.172238111 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.172585011 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.172605038 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.172684908 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.173419952 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.173441887 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.173480034 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.173497915 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.173501015 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.174213886 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.174288034 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.174318075 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.174371958 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.175036907 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.175106049 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.175157070 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.175205946 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.175956011 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.175976992 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.176022053 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.176037073 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.176630974 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.176655054 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.176693916 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.176706076 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.177689075 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.177709103 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.177761078 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.177778006 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.178383112 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.178406954 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.178462982 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.179230928 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.179276943 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.179296017 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.179394007 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.179462910 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.180109024 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.180130005 CEST	443	49933	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:28.180179119 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.180211067 CEST	49933	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:28.180221081 CEST	443	49930	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:28.180284023 CEST	49930	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:28.215827942 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:28.222034931 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:28.222218037 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:28.225619078 CEST	443	49930	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:28.227667093 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:28.231345892 CEST	443	49926	44.225.202.106	192.168.2.3
Jul 9, 2021 23:39:28.231528997 CEST	49926	443	192.168.2.3	44.225.202.106
Jul 9, 2021 23:39:28.235315084 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:28.235335112 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:28.238888025 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:28.242563009 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:28.253515005 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:28.253566027 CEST	443	49928	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:28.253622055 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:28.253654003 CEST	49928	443	192.168.2.3	44.235.182.173
Jul 9, 2021 23:39:28.311022043 CEST	443	49927	44.235.182.173	192.168.2.3
Jul 9, 2021 23:39:28.532708883 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:39:28.533206940 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:39:28.549021006 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:39:28.549597979 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:39:28.549644947 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:39:28.549704075 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:39:28.549757957 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:39:28.740201950 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:28.848732948 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:39:28.848865986 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:39:28.848953009 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:39:29.014374971 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.014417887 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.014441967 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.014470100 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.014542103 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:39:29.014566898 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.014571905 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:39:29.014595032 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.014739037 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.014970064 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.015002966 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.015028000 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.015050888 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.015319109 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.015347004 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.015448093 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.015475988 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.015501022 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.015639067 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.015732050 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.180536985 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.180547953 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.180566072 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.180578947 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.180589914 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.181365013 CEST	443	49860	54.148.149.218	192.168.2.3
Jul 9, 2021 23:39:29.181519032 CEST	49860	443	192.168.2.3	54.148.149.218
Jul 9, 2021 23:39:32.766017914 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:39:32.766602993 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:39:43.005275965 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:39:43.005400896 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:39:45.254606962 CEST	443	49811	52.211.62.226	192.168.2.3
Jul 9, 2021 23:39:45.254765987 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:39:45.256213903 CEST	443	49812	52.211.62.226	192.168.2.3
Jul 9, 2021 23:39:45.256313086 CEST	49812	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:39:45.346235991 CEST	443	49814	34.254.127.126	192.168.2.3
Jul 9, 2021 23:39:45.346261024 CEST	443	49814	34.254.127.126	192.168.2.3
Jul 9, 2021 23:39:45.346288919 CEST	443	49814	34.254.127.126	192.168.2.3
Jul 9, 2021 23:39:45.346352100 CEST	49814	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:39:45.346385956 CEST	49814	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:39:45.346393108 CEST	49814	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:39:45.363991022 CEST	49814	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:39:45.386740923 CEST	443	49813	34.254.127.126	192.168.2.3
Jul 9, 2021 23:39:45.386780977 CEST	443	49813	34.254.127.126	192.168.2.3
Jul 9, 2021 23:39:45.386806965 CEST	443	49813	34.254.127.126	192.168.2.3
Jul 9, 2021 23:39:45.386815071 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:39:45.386858940 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:39:45.386864901 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:39:45.390409946 CEST	49813	443	192.168.2.3	34.254.127.126
Jul 9, 2021 23:39:45.402482986 CEST	443	49814	34.254.127.126	192.168.2.3
Jul 9, 2021 23:39:45.426189899 CEST	443	49813	34.254.127.126	192.168.2.3
Jul 9, 2021 23:39:48.389159918 CEST	443	49855	52.19.186.105	192.168.2.3
Jul 9, 2021 23:39:48.389178038 CEST	443	49854	52.19.186.105	192.168.2.3
Jul 9, 2021 23:39:48.389239073 CEST	49855	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:39:48.389276981 CEST	49854	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:39:50.266151905 CEST	443	49811	52.211.62.226	192.168.2.3
Jul 9, 2021 23:39:50.266335964 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:39:50.267313004 CEST	443	49812	52.211.62.226	192.168.2.3
Jul 9, 2021 23:39:50.267384052 CEST	49812	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:39:52.082256079 CEST	443	49832	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:52.082302094 CEST	443	49832	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:52.082329988 CEST	443	49832	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:52.082483053 CEST	49832	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:52.082659006 CEST	49832	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:52.262342930 CEST	49832	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:39:52.276628971 CEST	443	49832	157.240.17.15	192.168.2.3
Jul 9, 2021 23:39:52.349585056 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:39:52.349694967 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:39:52.635869026 CEST	443	49876	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:52.635906935 CEST	443	49876	91.235.132.130	192.168.2.3
Jul 9, 2021 23:39:52.635979891 CEST	49876	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:52.636004925 CEST	49876	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:39:52.668750048 CEST	443	49879	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:52.668797016 CEST	443	49879	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:52.668906927 CEST	49879	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:52.672297955 CEST	49879	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:52.690860033 CEST	443	49880	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:52.690907001 CEST	443	49880	91.235.133.92	192.168.2.3
Jul 9, 2021 23:39:52.690987110 CEST	49880	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:52.691025019 CEST	49880	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:39:53.160337925 CEST	443	49859	31.13.86.36	192.168.2.3
Jul 9, 2021 23:39:53.160384893 CEST	443	49859	31.13.86.36	192.168.2.3
Jul 9, 2021 23:39:53.160554886 CEST	49859	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:39:53.160572052 CEST	443	49859	31.13.86.36	192.168.2.3
Jul 9, 2021 23:39:53.160687923 CEST	49859	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:39:53.401062012 CEST	443	49855	52.19.186.105	192.168.2.3
Jul 9, 2021 23:39:53.401110888 CEST	443	49854	52.19.186.105	192.168.2.3
Jul 9, 2021 23:39:53.401276112 CEST	49855	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:39:53.404413939 CEST	49854	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:39:54.094949007 CEST	49859	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:39:54.114602089 CEST	443	49859	31.13.86.36	192.168.2.3
Jul 9, 2021 23:39:55.870313883 CEST	443	49885	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:55.870363951 CEST	443	49885	99.84.15.42	192.168.2.3
Jul 9, 2021 23:39:55.870603085 CEST	49885	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:39:57.349313021 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:39:57.349419117 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:39:57.567008018 CEST	443	49934	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:57.567059040 CEST	443	49934	99.84.15.117	192.168.2.3
Jul 9, 2021 23:39:57.567169905 CEST	49934	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:57.568727970 CEST	49934	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:39:58.350137949 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:39:58.350188971 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:39:58.350284100 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:39:58.350353956 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:39:58.356585026 CEST	49736	443	192.168.2.3	15.236.176.210
Jul 9, 2021 23:39:58.378562927 CEST	443	49736	15.236.176.210	192.168.2.3
Jul 9, 2021 23:40:00.949582100 CEST	49934	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:40:00.953020096 CEST	49934	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:40:00.958060026 CEST	49910	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:40:00.958106041 CEST	49910	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:40:00.958587885 CEST	49907	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:40:00.959043026 CEST	49907	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:40:00.959069014 CEST	49893	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:40:00.959084988 CEST	49893	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:40:00.959840059 CEST	49887	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:40:00.959872007 CEST	49887	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:40:00.960205078 CEST	49885	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:40:00.960232973 CEST	49885	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:40:00.960391998 CEST	49864	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:40:00.961122036 CEST	49855	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:40:00.961147070 CEST	49855	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:40:00.961395979 CEST	49854	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:40:00.961421013 CEST	49854	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:40:00.961765051 CEST	49846	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:40:00.961832047 CEST	49843	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:40:00.961915016 CEST	49842	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:40:00.962136030 CEST	49839	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:40:00.962224007 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:40:00.962305069 CEST	49838	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:40:00.962361097 CEST	49836	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:40:00.963154078 CEST	49829	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:40:00.963296890 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:40:00.963376045 CEST	49824	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:40:00.963509083 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:40:00.963578939 CEST	49820	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:40:00.963641882 CEST	49817	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:40:00.963701963 CEST	49815	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:40:00.964102983 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:40:00.964129925 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:40:00.964417934 CEST	49812	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:40:00.964441061 CEST	49812	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:40:00.964521885 CEST	49807	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:40:00.964574099 CEST	49803	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:40:00.976790905 CEST	443	49843	172.217.168.34	192.168.2.3
Jul 9, 2021 23:40:00.976900101 CEST	49843	443	192.168.2.3	172.217.168.34
Jul 9, 2021 23:40:00.977917910 CEST	443	49824	172.217.168.38	192.168.2.3
Jul 9, 2021 23:40:00.978008032 CEST	49824	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:40:00.978636026 CEST	443	49829	172.217.168.38	192.168.2.3
Jul 9, 2021 23:40:00.978724003 CEST	49829	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:40:00.978889942 CEST	443	49823	172.217.168.38	192.168.2.3
Jul 9, 2021 23:40:00.978959084 CEST	49823	443	192.168.2.3	172.217.168.38
Jul 9, 2021 23:40:00.982539892 CEST	443	49839	104.244.42.67	192.168.2.3
Jul 9, 2021 23:40:00.982568979 CEST	443	49839	104.244.42.67	192.168.2.3
Jul 9, 2021 23:40:00.982630968 CEST	49839	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:40:00.982656002 CEST	49839	443	192.168.2.3	104.244.42.67
Jul 9, 2021 23:40:00.983390093 CEST	443	49934	99.84.15.117	192.168.2.3
Jul 9, 2021 23:40:00.983472109 CEST	49934	443	192.168.2.3	99.84.15.117
Jul 9, 2021 23:40:00.984500885 CEST	443	49842	104.244.42.69	192.168.2.3
Jul 9, 2021 23:40:00.984527111 CEST	443	49842	104.244.42.69	192.168.2.3
Jul 9, 2021 23:40:00.984637022 CEST	49842	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:40:00.984888077 CEST	443	49817	3.124.119.57	192.168.2.3
Jul 9, 2021 23:40:00.984966040 CEST	49817	443	192.168.2.3	3.124.119.57
Jul 9, 2021 23:40:00.984976053 CEST	49842	443	192.168.2.3	104.244.42.69
Jul 9, 2021 23:40:00.986099958 CEST	443	49815	151.101.12.157	192.168.2.3
Jul 9, 2021 23:40:00.986125946 CEST	443	49815	151.101.12.157	192.168.2.3
Jul 9, 2021 23:40:00.986150980 CEST	443	49815	151.101.12.157	192.168.2.3
Jul 9, 2021 23:40:00.986309052 CEST	49815	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:40:00.986450911 CEST	443	49807	18.195.42.228	192.168.2.3
Jul 9, 2021 23:40:00.986491919 CEST	49815	443	192.168.2.3	151.101.12.157
Jul 9, 2021 23:40:00.986552954 CEST	49807	443	192.168.2.3	18.195.42.228
Jul 9, 2021 23:40:00.992328882 CEST	443	49885	99.84.15.42	192.168.2.3
Jul 9, 2021 23:40:00.992412090 CEST	49885	443	192.168.2.3	99.84.15.42
Jul 9, 2021 23:40:00.994800091 CEST	443	49837	99.84.15.110	192.168.2.3
Jul 9, 2021 23:40:00.994935036 CEST	443	49838	99.84.15.110	192.168.2.3
Jul 9, 2021 23:40:00.994936943 CEST	49837	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:40:00.995074034 CEST	49838	443	192.168.2.3	99.84.15.110
Jul 9, 2021 23:40:00.995718956 CEST	443	49836	99.84.15.94	192.168.2.3
Jul 9, 2021 23:40:00.995748997 CEST	443	49819	13.35.199.92	192.168.2.3
Jul 9, 2021 23:40:00.995805979 CEST	49836	443	192.168.2.3	99.84.15.94
Jul 9, 2021 23:40:00.995820999 CEST	49819	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:40:00.997368097 CEST	443	49820	13.35.199.92	192.168.2.3
Jul 9, 2021 23:40:00.997466087 CEST	49820	443	192.168.2.3	13.35.199.92
Jul 9, 2021 23:40:00.997900963 CEST	443	49803	99.84.15.9	192.168.2.3
Jul 9, 2021 23:40:00.997981071 CEST	49803	443	192.168.2.3	99.84.15.9
Jul 9, 2021 23:40:00.999799013 CEST	443	49855	52.19.186.105	192.168.2.3
Jul 9, 2021 23:40:00.999882936 CEST	49855	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:40:01.002202034 CEST	443	49854	52.19.186.105	192.168.2.3
Jul 9, 2021 23:40:01.002305031 CEST	49854	443	192.168.2.3	52.19.186.105
Jul 9, 2021 23:40:01.002496004 CEST	443	49811	52.211.62.226	192.168.2.3
Jul 9, 2021 23:40:01.002563953 CEST	49811	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:40:01.004918098 CEST	443	49812	52.211.62.226	192.168.2.3
Jul 9, 2021 23:40:01.005007029 CEST	49812	443	192.168.2.3	52.211.62.226
Jul 9, 2021 23:40:01.062294006 CEST	443	49907	52.206.83.104	192.168.2.3
Jul 9, 2021 23:40:01.062330961 CEST	443	49907	52.206.83.104	192.168.2.3
Jul 9, 2021 23:40:01.062356949 CEST	443	49910	142.0.160.13	192.168.2.3
Jul 9, 2021 23:40:01.062381983 CEST	443	49910	142.0.160.13	192.168.2.3
Jul 9, 2021 23:40:01.062478065 CEST	49910	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:40:01.062490940 CEST	49907	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:40:01.062516928 CEST	49907	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:40:01.062649012 CEST	443	49893	52.94.232.32	192.168.2.3
Jul 9, 2021 23:40:01.062716961 CEST	49910	443	192.168.2.3	142.0.160.13
Jul 9, 2021 23:40:01.062757969 CEST	49893	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:40:01.092329979 CEST	443	49846	108.174.11.69	192.168.2.3
Jul 9, 2021 23:40:01.092469931 CEST	49846	443	192.168.2.3	108.174.11.69
Jul 9, 2021 23:40:01.119314909 CEST	49797	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:40:01.119867086 CEST	49797	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:40:01.119896889 CEST	49754	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:40:01.119915962 CEST	49754	443	192.168.2.3	91.235.134.131
Jul 9, 2021 23:40:01.120199919 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:40:01.120237112 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:40:01.120515108 CEST	49876	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:40:01.120556116 CEST	49876	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:40:01.120872021 CEST	49878	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:40:01.120909929 CEST	49878	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:40:01.121264935 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:40:01.121310949 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:40:01.121485949 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:40:01.121525049 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:40:01.121738911 CEST	49879	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:40:01.121763945 CEST	49879	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:40:01.126715899 CEST	49880	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:40:01.126863956 CEST	49880	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:40:01.126977921 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:40:01.127163887 CEST	49741	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:40:01.128380060 CEST	443	49864	35.163.214.119	192.168.2.3
Jul 9, 2021 23:40:01.128448963 CEST	49864	443	192.168.2.3	35.163.214.119
Jul 9, 2021 23:40:01.145050049 CEST	443	49797	91.235.134.131	192.168.2.3
Jul 9, 2021 23:40:01.145761013 CEST	443	49877	91.235.132.130	192.168.2.3
Jul 9, 2021 23:40:01.145850897 CEST	49877	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:40:01.146348000 CEST	443	49876	91.235.132.130	192.168.2.3
Jul 9, 2021 23:40:01.146380901 CEST	443	49878	91.235.133.92	192.168.2.3
Jul 9, 2021 23:40:01.146466017 CEST	49876	443	192.168.2.3	91.235.132.130
Jul 9, 2021 23:40:01.146485090 CEST	49878	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:40:01.146867037 CEST	443	49873	91.235.133.92	192.168.2.3
Jul 9, 2021 23:40:01.146898985 CEST	443	49875	91.235.133.92	192.168.2.3
Jul 9, 2021 23:40:01.146970987 CEST	49875	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:40:01.147006989 CEST	49873	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:40:01.147176027 CEST	443	49879	91.235.133.92	192.168.2.3
Jul 9, 2021 23:40:01.147239923 CEST	49879	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:40:01.151650906 CEST	443	49880	91.235.133.92	192.168.2.3
Jul 9, 2021 23:40:01.151766062 CEST	49880	443	192.168.2.3	91.235.133.92
Jul 9, 2021 23:40:01.291799068 CEST	443	49741	52.36.132.22	192.168.2.3
Jul 9, 2021 23:40:01.291852951 CEST	443	49740	52.36.132.22	192.168.2.3
Jul 9, 2021 23:40:01.291922092 CEST	49741	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:40:01.291990042 CEST	49740	443	192.168.2.3	52.36.132.22
Jul 9, 2021 23:40:08.872251987 CEST	49960	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:08.873048067 CEST	49961	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:08.874131918 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:08.877983093 CEST	49963	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.879556894 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.887538910 CEST	443	49960	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:08.887726068 CEST	49960	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:08.888071060 CEST	443	49961	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:08.888175011 CEST	49961	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:08.888772964 CEST	49961	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:08.889300108 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:08.889383078 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:08.889890909 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:08.892663002 CEST	443	49963	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:08.892770052 CEST	49963	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.893671989 CEST	49963	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.894974947 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:08.895087004 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.895591021 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.904422045 CEST	443	49961	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:08.905199051 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:08.908682108 CEST	443	49963	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:08.911005020 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:08.917716980 CEST	443	49961	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:08.917782068 CEST	443	49961	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:08.917820930 CEST	443	49961	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:08.917864084 CEST	443	49961	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:08.917920113 CEST	49961	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:08.917970896 CEST	49961	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:08.917982101 CEST	49961	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:08.917988062 CEST	49961	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:08.919497013 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:08.919538021 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:08.919572115 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:08.919575930 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:08.919608116 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:08.919606924 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:08.919634104 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:08.919651031 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:08.920552015 CEST	443	49963	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:08.920618057 CEST	443	49963	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:08.920669079 CEST	443	49963	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:08.920703888 CEST	49963	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.920711040 CEST	443	49963	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:08.920749903 CEST	443	49963	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:08.920768976 CEST	49963	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.920775890 CEST	49963	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.920780897 CEST	49963	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.920819044 CEST	443	49963	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:08.920874119 CEST	49963	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.920898914 CEST	49963	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.923604012 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:08.923649073 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:08.923685074 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:08.923722982 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:08.923731089 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.923751116 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.923755884 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.923759937 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.923759937 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:08.923790932 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:08.923810005 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:08.923830986 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.011851072 CEST	49960	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.023786068 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.024174929 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.024393082 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.024468899 CEST	443	49960	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.024492979 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.024610996 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.025995016 CEST	49961	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.026258945 CEST	49961	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.029093027 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.029218912 CEST	49963	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.029592991 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.030002117 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.030039072 CEST	49963	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.036801100 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.036830902 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.036868095 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.036899090 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.037075043 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.037106991 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.037161112 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.037518978 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.037955999 CEST	443	49960	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.037970066 CEST	443	49960	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.038001060 CEST	443	49960	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.038033962 CEST	443	49960	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.038073063 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.038096905 CEST	49960	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.038120985 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.038126945 CEST	49960	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.038127899 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.038134098 CEST	49960	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.038165092 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.038193941 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.038201094 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.038222075 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.038245916 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.038686991 CEST	443	49961	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.038791895 CEST	49961	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.038836956 CEST	443	49961	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.038872957 CEST	443	49961	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.038918972 CEST	49961	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.038927078 CEST	49961	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.038970947 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.039046049 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.039055109 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.039155960 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.040209055 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.040288925 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.040447950 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.040514946 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.041232109 CEST	443	49963	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:09.041270018 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.041316032 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.041346073 CEST	443	49963	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:09.041377068 CEST	49961	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.041383028 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.041410923 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.041414976 CEST	49963	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.041445017 CEST	49963	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.041835070 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:09.041865110 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:09.041891098 CEST	443	49963	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:09.041914940 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:09.041945934 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.041961908 CEST	49963	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.041979074 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.042503119 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.042568922 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.043324947 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:09.043400049 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.043549061 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:09.043607950 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.044037104 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:09.044068098 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:09.044099092 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.044118881 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.044517040 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:09.044594049 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.045433044 CEST	49963	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.048434019 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.048666954 CEST	49964	443	192.168.2.3	172.217.168.33
Jul 9, 2021 23:40:09.049089909 CEST	49960	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.050040960 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.050084114 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.050108910 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.050156116 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.050390959 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.050436974 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.050443888 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.050491095 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.051451921 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.051516056 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.051580906 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.051644087 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.051831007 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.052068949 CEST	49960	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.054529905 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.054572105 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.054622889 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.054646015 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.055028915 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.055095911 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.055274010 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.055332899 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.056472063 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.056514025 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.056543112 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.056613922 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.057360888 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.057420969 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.057581902 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.057641983 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.058518887 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.058567047 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.058582067 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.058614016 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.059391975 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.059429884 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.059449911 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.059473991 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.060076952 CEST	443	49961	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.060333967 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.060388088 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.060534000 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.060590029 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.061207056 CEST	443	49964	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:09.061260939 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.061296940 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.061316013 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.061347008 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.061786890 CEST	443	49960	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.061815977 CEST	443	49960	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.061903000 CEST	49960	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.062156916 CEST	49960	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.062463045 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.062489033 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.062529087 CEST	443	49963	172.217.168.33	192.168.2.3
Jul 9, 2021 23:40:09.062592983 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.063708067 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.063750029 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.063781977 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.063803911 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.064369917 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.064407110 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.064440012 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.064440966 CEST	443	49960	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.064455032 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.064502001 CEST	49960	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.064660072 CEST	49960	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.065232992 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.065300941 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.065304041 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.065354109 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.065723896 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.065773010 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.065776110 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.065817118 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.065831900 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.065856934 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.066509008 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.066574097 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.066778898 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.066822052 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.066827059 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.066874027 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.067393064 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.067440033 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:09.067482948 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.069703102 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:09.082315922 CEST	443	49960	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.323784113 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:17.339387894 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.339416027 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.339488029 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:17.339504957 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:17.339595079 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.339612007 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.339632988 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.339647055 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:17.339654922 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.339677095 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.339684010 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:17.339699030 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.339720011 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.339736938 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:17.339740992 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.339759111 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.339760065 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:17.339778900 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.339780092 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:17.339801073 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.339812040 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:17.339823008 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.339828968 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:17.339842081 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.339852095 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:17.339857101 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.339868069 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:17.339900017 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:17.349984884 CEST	49962	443	192.168.2.3	216.58.215.246
Jul 9, 2021 23:40:17.370059967 CEST	443	49962	216.58.215.246	192.168.2.3
Jul 9, 2021 23:40:17.489449024 CEST	49967	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.490330935 CEST	49968	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.520922899 CEST	443	49967	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.520965099 CEST	443	49968	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.521053076 CEST	49967	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.521126986 CEST	49968	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.522455931 CEST	49967	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.522578955 CEST	49968	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.550954103 CEST	443	49967	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.551362991 CEST	443	49967	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.551404953 CEST	443	49967	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.551433086 CEST	443	49967	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.551453114 CEST	49967	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.551489115 CEST	49967	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.551497936 CEST	49967	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.552098036 CEST	443	49968	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.552702904 CEST	443	49968	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.552767992 CEST	443	49968	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.552809000 CEST	443	49968	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.552884102 CEST	49968	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.552918911 CEST	49968	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.552928925 CEST	49968	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.561868906 CEST	49968	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.562243938 CEST	49968	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.562426090 CEST	49968	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.566101074 CEST	49967	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.566446066 CEST	49967	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.590356112 CEST	443	49968	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.590467930 CEST	49968	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.590553045 CEST	443	49968	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.590629101 CEST	49968	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.590748072 CEST	443	49968	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.590815067 CEST	49968	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.591243982 CEST	49968	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.591304064 CEST	443	49968	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.591339111 CEST	443	49968	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.591350079 CEST	443	49968	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.591370106 CEST	49968	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.591408014 CEST	49968	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.591623068 CEST	49968	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.593995094 CEST	443	49967	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.594026089 CEST	443	49967	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.594062090 CEST	49967	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.594099045 CEST	49967	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.594238997 CEST	443	49967	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.594378948 CEST	49967	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.594877958 CEST	49967	443	192.168.2.3	142.250.153.154
Jul 9, 2021 23:40:17.620270014 CEST	443	49968	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:17.627412081 CEST	443	49967	142.250.153.154	192.168.2.3
Jul 9, 2021 23:40:27.101743937 CEST	443	49888	34.194.154.95	192.168.2.3
Jul 9, 2021 23:40:27.102144957 CEST	49888	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:40:27.259265900 CEST	443	49908	52.206.83.104	192.168.2.3
Jul 9, 2021 23:40:27.259532928 CEST	49908	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:40:27.465733051 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:40:27.465756893 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:40:27.465764999 CEST	443	49929	18.194.201.176	192.168.2.3
Jul 9, 2021 23:40:27.465878010 CEST	49929	443	192.168.2.3	18.194.201.176
Jul 9, 2021 23:40:31.194382906 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:40:31.194431067 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:40:31.194449902 CEST	443	49831	157.240.17.15	192.168.2.3
Jul 9, 2021 23:40:31.194664955 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:40:31.194760084 CEST	49831	443	192.168.2.3	157.240.17.15
Jul 9, 2021 23:40:31.442794085 CEST	443	49894	52.94.232.32	192.168.2.3
Jul 9, 2021 23:40:31.442840099 CEST	443	49894	52.94.232.32	192.168.2.3
Jul 9, 2021 23:40:31.443062067 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:40:31.443672895 CEST	49894	443	192.168.2.3	52.94.232.32
Jul 9, 2021 23:40:32.102432013 CEST	443	49888	34.194.154.95	192.168.2.3
Jul 9, 2021 23:40:32.102565050 CEST	49888	443	192.168.2.3	34.194.154.95
Jul 9, 2021 23:40:32.262996912 CEST	443	49908	52.206.83.104	192.168.2.3
Jul 9, 2021 23:40:32.263223886 CEST	49908	443	192.168.2.3	52.206.83.104
Jul 9, 2021 23:40:32.306592941 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:40:32.306621075 CEST	443	49869	18.198.240.31	192.168.2.3
Jul 9, 2021 23:40:32.306844950 CEST	49869	443	192.168.2.3	18.198.240.31
Jul 9, 2021 23:40:33.550189972 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:40:33.550240040 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:40:33.550277948 CEST	443	49856	31.13.86.36	192.168.2.3
Jul 9, 2021 23:40:33.550379038 CEST	49856	443	192.168.2.3	31.13.86.36
Jul 9, 2021 23:40:33.550481081 CEST	49856	443	192.168.2.3	31.13.86.36

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 9, 2021 23:38:03.154764891 CEST	55984	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:03.170197010 CEST	53	55984	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:04.162923098 CEST	64185	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:04.175628901 CEST	53	64185	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:04.824187040 CEST	65110	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:04.837238073 CEST	53	65110	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:05.613594055 CEST	58361	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:05.629298925 CEST	53	58361	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:06.588902950 CEST	63492	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:06.602381945 CEST	53	63492	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:07.294574976 CEST	60831	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:07.308305025 CEST	53	60831	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:07.947652102 CEST	60100	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:07.961605072 CEST	53	60100	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:09.029902935 CEST	53195	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:09.042659044 CEST	53	53195	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:09.789232016 CEST	50141	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:09.802455902 CEST	53	50141	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:10.120909929 CEST	53023	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:10.135373116 CEST	53	53023	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:10.540752888 CEST	49563	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:10.553751945 CEST	53	49563	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:11.322431087 CEST	51352	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:11.368618011 CEST	53	51352	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:11.632636070 CEST	59349	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:11.646153927 CEST	53	59349	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:12.041501999 CEST	57084	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:12.057365894 CEST	58823	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:12.061137915 CEST	57568	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:12.076006889 CEST	53	58823	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:12.085381985 CEST	53	57084	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:12.086107016 CEST	53	57568	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:12.478363991 CEST	50540	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:12.498639107 CEST	53	50540	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:13.072433949 CEST	54366	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:13.111757994 CEST	53	54366	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:13.527286053 CEST	53034	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:13.558556080 CEST	53	53034	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:13.559716940 CEST	57762	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:13.702713013 CEST	53	57762	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:13.732630968 CEST	55435	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:13.795077085 CEST	53	55435	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:14.095134020 CEST	50713	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:14.126121998 CEST	53	50713	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:14.634517908 CEST	56132	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:14.652642012 CEST	53	56132	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:14.685729027 CEST	58987	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:14.699908018 CEST	53	58987	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:15.084666967 CEST	56579	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:15.092587948 CEST	60633	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:15.107961893 CEST	53	56579	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:15.121385098 CEST	53	60633	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:15.156361103 CEST	61292	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:15.157284021 CEST	63619	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:15.161957979 CEST	64938	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:15.175359964 CEST	53	64938	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:15.175738096 CEST	53	63619	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:15.175951958 CEST	53	61292	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:15.342400074 CEST	61946	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:15.393187046 CEST	53	61946	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:15.605995893 CEST	64910	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:15.619963884 CEST	53	64910	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:15.720355034 CEST	52123	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:15.733778000 CEST	53	52123	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:15.758548975 CEST	56130	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:15.771331072 CEST	53	56130	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:16.185739994 CEST	56338	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:16.213360071 CEST	53	56338	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:17.119932890 CEST	59420	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:17.134922028 CEST	53	59420	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:17.973617077 CEST	58784	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:17.988667965 CEST	53	58784	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:19.170192003 CEST	63978	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:19.186610937 CEST	53	63978	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:20.249422073 CEST	62938	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:20.263622046 CEST	53	62938	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:29.627370119 CEST	55708	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:29.760957003 CEST	53	55708	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:33.610512018 CEST	56803	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:33.646065950 CEST	53	56803	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:37.782913923 CEST	57145	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:37.811220884 CEST	53	57145	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:38.773993969 CEST	55359	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:38.793948889 CEST	53	55359	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:38.967381954 CEST	58306	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:38.988662004 CEST	53	58306	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:40.158580065 CEST	64124	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:40.231436014 CEST	53	64124	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:40.273313999 CEST	49361	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:40.290760040 CEST	53	49361	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:40.920125961 CEST	63150	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:40.936691999 CEST	53	63150	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:41.704917908 CEST	53279	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:41.719363928 CEST	53	53279	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:41.942858934 CEST	63150	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:41.958358049 CEST	53	63150	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:42.740104914 CEST	53279	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:42.747364998 CEST	56881	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:42.755045891 CEST	53	53279	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:42.770351887 CEST	53	56881	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:42.995551109 CEST	63150	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:43.009087086 CEST	53	63150	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:44.078367949 CEST	53279	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:44.091732025 CEST	53	53279	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:44.658657074 CEST	53642	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:44.691440105 CEST	53	53642	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:44.803759098 CEST	55667	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:44.824486971 CEST	53	55667	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:45.043103933 CEST	63150	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:45.056869030 CEST	53	63150	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:45.250137091 CEST	54833	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:45.263031960 CEST	53	54833	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:45.466538906 CEST	62476	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:45.474987030 CEST	49705	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:45.481828928 CEST	53	62476	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:45.497574091 CEST	53	49705	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:45.540736914 CEST	61477	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:45.574668884 CEST	61633	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:45.583718061 CEST	53	61477	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:45.587841988 CEST	53	61633	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:45.608387947 CEST	55949	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:45.635751963 CEST	53	55949	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:45.696955919 CEST	57601	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:45.724411964 CEST	53	57601	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:46.116319895 CEST	53279	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:46.130122900 CEST	53	53279	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:46.753345013 CEST	49342	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:46.764082909 CEST	56253	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:46.778110027 CEST	53	56253	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:46.781069040 CEST	53	49342	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:46.981152058 CEST	49667	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:46.985608101 CEST	55439	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:46.989546061 CEST	57069	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:46.993679047 CEST	57659	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:47.001321077 CEST	53	55439	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:47.002223015 CEST	53	49667	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:47.006139994 CEST	53	57069	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:47.009541035 CEST	53	57659	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:47.020267010 CEST	54717	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:47.023423910 CEST	63975	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:47.033562899 CEST	53	54717	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:47.036855936 CEST	53	63975	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:47.294996023 CEST	56639	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:47.308871984 CEST	53	56639	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:47.441718102 CEST	51856	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:47.464668989 CEST	53	51856	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:47.556432962 CEST	56546	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:47.585326910 CEST	53	56546	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:47.635677099 CEST	62152	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:47.644668102 CEST	53470	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:47.650293112 CEST	53	62152	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:47.685349941 CEST	53	53470	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:47.757293940 CEST	56446	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:47.770596981 CEST	53	56446	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:47.877296925 CEST	59631	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:47.902333021 CEST	53	59631	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:48.048046112 CEST	55515	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:48.055063963 CEST	64547	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:48.061283112 CEST	53	55515	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:48.070442915 CEST	53	64547	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:49.096983910 CEST	63150	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:49.113348961 CEST	53	63150	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:49.788057089 CEST	51759	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:49.805304050 CEST	53	51759	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:50.042107105 CEST	59207	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:50.070360899 CEST	53	59207	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:50.163846970 CEST	53279	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:50.176827908 CEST	53	53279	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:50.258586884 CEST	54269	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:50.272686005 CEST	53	54269	8.8.8.8	192.168.2.3
Jul 9, 2021 23:38:58.202728033 CEST	54856	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:38:58.218167067 CEST	53	54856	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:21.832022905 CEST	64140	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:21.845356941 CEST	53	64140	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:24.513494015 CEST	62271	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:24.533149958 CEST	53	62271	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:25.200026035 CEST	57404	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:25.252804995 CEST	53	57404	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:25.791372061 CEST	62997	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:25.793610096 CEST	57712	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:25.800347090 CEST	60065	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:25.807745934 CEST	55068	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:25.808763027 CEST	53	57712	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:25.813740969 CEST	53	62997	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:25.823729038 CEST	64700	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:25.825764894 CEST	53	55068	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:25.836633921 CEST	53	64700	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:25.841671944 CEST	61998	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:25.850322008 CEST	53724	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:25.854706049 CEST	53	61998	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:25.877167940 CEST	53	53724	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:25.908195972 CEST	53	60065	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:25.924242020 CEST	52328	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:25.924832106 CEST	58051	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:25.935245991 CEST	64130	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:25.936270952 CEST	53	52328	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:25.937272072 CEST	53	58051	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:25.945271015 CEST	50491	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:25.962917089 CEST	53	64130	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:25.989145041 CEST	53	50491	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:26.214368105 CEST	53004	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:26.234878063 CEST	52529	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:26.241245985 CEST	53	53004	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:26.252259970 CEST	53656	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:26.256424904 CEST	53	52529	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:26.263055086 CEST	62724	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:26.265705109 CEST	53	53656	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:26.276587963 CEST	53	62724	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:26.300909042 CEST	56059	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:26.303047895 CEST	63060	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:26.321443081 CEST	53	63060	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:26.327260017 CEST	53	56059	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:26.359292984 CEST	51498	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:26.407226086 CEST	59943	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:26.417566061 CEST	53	51498	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:26.440057993 CEST	53	59943	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:27.036276102 CEST	50118	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:27.057723999 CEST	53	50118	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:27.081317902 CEST	58357	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:27.090873003 CEST	55804	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:27.105685949 CEST	53	58357	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:27.118190050 CEST	53	55804	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:27.198298931 CEST	58079	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:27.219620943 CEST	53	58079	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:27.374603033 CEST	52080	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:27.394107103 CEST	55238	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:27.410227060 CEST	53	52080	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:27.419553041 CEST	53	55238	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:29.177376032 CEST	49289	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:29.213278055 CEST	53	49289	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:29.481884003 CEST	61034	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:29.496756077 CEST	53	61034	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:29.958245039 CEST	51964	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:29.973505020 CEST	53	51964	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:30.233288050 CEST	58241	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:30.251522064 CEST	53	58241	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:30.891196012 CEST	59571	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:30.920233011 CEST	53	59571	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:31.613105059 CEST	51708	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:31.654006958 CEST	53	51708	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:32.261816025 CEST	60709	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:32.275325060 CEST	53	60709	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:35.318804026 CEST	63643	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:35.346730947 CEST	53	63643	8.8.8.8	192.168.2.3
Jul 9, 2021 23:39:58.918922901 CEST	62823	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:39:58.956638098 CEST	53	62823	8.8.8.8	192.168.2.3
Jul 9, 2021 23:40:05.337182999 CEST	63750	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:40:05.371668100 CEST	53	63750	8.8.8.8	192.168.2.3
Jul 9, 2021 23:40:08.838898897 CEST	61959	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:40:08.842313051 CEST	63554	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:40:08.852142096 CEST	53	61959	8.8.8.8	192.168.2.3
Jul 9, 2021 23:40:08.859150887 CEST	53	63554	8.8.8.8	192.168.2.3
Jul 9, 2021 23:40:17.414655924 CEST	57723	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:40:17.441344976 CEST	53	57723	8.8.8.8	192.168.2.3
Jul 9, 2021 23:40:17.471183062 CEST	58663	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:40:17.487724066 CEST	53	58663	8.8.8.8	192.168.2.3
Jul 9, 2021 23:40:18.422487974 CEST	50980	53	192.168.2.3	8.8.8.8
Jul 9, 2021 23:40:18.437887907 CEST	53	50980	8.8.8.8	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jul 9, 2021 23:38:11.322431087 CEST	192.168.2.3	8.8.8.8	0x1b5d	Standard query (0)	c31.qbo.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:12.041501999 CEST	192.168.2.3	8.8.8.8	0xcb7c	Standard query (0)	uiclassic.intuitcdn.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:12.057365894 CEST	192.168.2.3	8.8.8.8	0xc976	Standard query (0)	plugin.intuitcdn.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:12.061137915 CEST	192.168.2.3	8.8.8.8	0x4dc3	Standard query (0)	accounts.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:12.478363991 CEST	192.168.2.3	8.8.8.8	0xf35b	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.072433949 CEST	192.168.2.3	8.8.8.8	0xbbc3	Standard query (0)	plugin-qbo.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.527286053 CEST	192.168.2.3	8.8.8.8	0xa81a	Standard query (0)	sci.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.559716940 CEST	192.168.2.3	8.8.8.8	0x2026	Standard query (0)	zion.qbo.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.732630968 CEST	192.168.2.3	8.8.8.8	0x89b	Standard query (0)	edge.experimentation.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:14.095134020 CEST	192.168.2.3	8.8.8.8	0xa2d2	Standard query (0)	pf.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:14.634517908 CEST	192.168.2.3	8.8.8.8	0xecd6	Standard query (0)	app.qbo.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.084666967 CEST	192.168.2.3	8.8.8.8	0x7614	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.092587948 CEST	192.168.2.3	8.8.8.8	0xcfff	Standard query (0)	v60nf4ojrrfcwgzpevbope5zgu7jjxte6xa7tado5beaf20338e5cddbam1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.156361103 CEST	192.168.2.3	8.8.8.8	0x8098	Standard query (0)	uxfabric.intuitcdn.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.157284021 CEST	192.168.2.3	8.8.8.8	0x4c05	Standard query (0)	uxfabric.intuitcdn.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.161957979 CEST	192.168.2.3	8.8.8.8	0x960a	Standard query (0)	plugin.intuitcdn.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.342400074 CEST	192.168.2.3	8.8.8.8	0x5b0a	Standard query (0)	lib.intuitcdn.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:29.627370119 CEST	192.168.2.3	8.8.8.8	0x1349	Standard query (0)	c31.qbo.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:37.782913923 CEST	192.168.2.3	8.8.8.8	0x8954	Standard query (0)	v60nf4ojkjtrh5z4sqvgxui7uvb4c3jwmjhlulkc6fcf216556112378am1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:38.773993969 CEST	192.168.2.3	8.8.8.8	0x191e	Standard query (0)	www.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:38.967381954 CEST	192.168.2.3	8.8.8.8	0x1d71	Standard query (0)	quickbooks.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:40.158580065 CEST	192.168.2.3	8.8.8.8	0xd0a	Standard query (0)	segment.intuitcdn.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:40.273313999 CEST	192.168.2.3	8.8.8.8	0x6577	Standard query (0)	privacy-policy.truste.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:42.747364998 CEST	192.168.2.3	8.8.8.8	0xcc09	Standard query (0)	nexus.ensighten.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:44.803759098 CEST	192.168.2.3	8.8.8.8	0x35f7	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.250137091 CEST	192.168.2.3	8.8.8.8	0x24db	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.466538906 CEST	192.168.2.3	8.8.8.8	0x5003	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.474987030 CEST	192.168.2.3	8.8.8.8	0x37fc	Standard query (0)	data.privacy.ensighten.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.540736914 CEST	192.168.2.3	8.8.8.8	0x2567	Standard query (0)	cdn.websdk.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.608387947 CEST	192.168.2.3	8.8.8.8	0x3ea9	Standard query (0)	1996823.fls.doubleclick.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.696955919 CEST	192.168.2.3	8.8.8.8	0xcbb9	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:46.753345013 CEST	192.168.2.3	8.8.8.8	0x2a3e	Standard query (0)	8344993.fls.doubleclick.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:46.981152058 CEST	192.168.2.3	8.8.8.8	0x301b	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:46.985608101 CEST	192.168.2.3	8.8.8.8	0x5279	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:46.989546061 CEST	192.168.2.3	8.8.8.8	0x602c	Standard query (0)	cdn.decibelinsight.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:46.993679047 CEST	192.168.2.3	8.8.8.8	0x66e0	Standard query (0)	cdn.appdynamics.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.020267010 CEST	192.168.2.3	8.8.8.8	0x77f0	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.023423910 CEST	192.168.2.3	8.8.8.8	0x1edf	Standard query (0)	t.co	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.294996023 CEST	192.168.2.3	8.8.8.8	0x1277	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.441718102 CEST	192.168.2.3	8.8.8.8	0xac1a	Standard query (0)	trinity.platform.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.556432962 CEST	192.168.2.3	8.8.8.8	0x2aeb	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.635677099 CEST	192.168.2.3	8.8.8.8	0x4ce1	Standard query (0)	collection.decibelinsight.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.644668102 CEST	192.168.2.3	8.8.8.8	0x9ab4	Standard query (0)	www.google.ch	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.877296925 CEST	192.168.2.3	8.8.8.8	0xdc37	Standard query (0)	turbotax.demdex.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:48.048046112 CEST	192.168.2.3	8.8.8.8	0xe100	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:48.055063963 CEST	192.168.2.3	8.8.8.8	0xcc1f	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:49.788057089 CEST	192.168.2.3	8.8.8.8	0xe278	Standard query (0)	col.eum-appdynamics.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:50.042107105 CEST	192.168.2.3	8.8.8.8	0xfa75	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:50.258586884 CEST	192.168.2.3	8.8.8.8	0x4a2b	Standard query (0)	logging.api.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:24.513494015 CEST	192.168.2.3	8.8.8.8	0x346b	Standard query (0)	tags.tiqcdn.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.200026035 CEST	192.168.2.3	8.8.8.8	0x7a1c	Standard query (0)	experimentation.us.api.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.791372061 CEST	192.168.2.3	8.8.8.8	0x418c	Standard query (0)	vid1005.d41.co	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.793610096 CEST	192.168.2.3	8.8.8.8	0x83b9	Standard query (0)	cdn-0.d41.co	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.800347090 CEST	192.168.2.3	8.8.8.8	0x9a17	Standard query (0)	marketdataservice.api.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.807745934 CEST	192.168.2.3	8.8.8.8	0xfa9	Standard query (0)	img.en25.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.823729038 CEST	192.168.2.3	8.8.8.8	0xa424	Standard query (0)	pt.ispot.tv	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.841671944 CEST	192.168.2.3	8.8.8.8	0x1e9e	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.850322008 CEST	192.168.2.3	8.8.8.8	0x39b6	Standard query (0)	s.pinimg.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.924242020 CEST	192.168.2.3	8.8.8.8	0x4e33	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.935245991 CEST	192.168.2.3	8.8.8.8	0x2e6c	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.945271015 CEST	192.168.2.3	8.8.8.8	0x50d1	Standard query (0)	znew2pz3yjx9poggn-intuitsocial.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.214368105 CEST	192.168.2.3	8.8.8.8	0xa13a	Standard query (0)	vi4820.d41.co	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.234878063 CEST	192.168.2.3	8.8.8.8	0xcf5a	Standard query (0)	s113755760.t.eloqua.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.252259970 CEST	192.168.2.3	8.8.8.8	0x81ad	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.300909042 CEST	192.168.2.3	8.8.8.8	0xc42c	Standard query (0)	googleads4.g.doubleclick.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.303047895 CEST	192.168.2.3	8.8.8.8	0x9d74	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.359292984 CEST	192.168.2.3	8.8.8.8	0xea29	Standard query (0)	lptag-cdn.liveperson.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.407226086 CEST	192.168.2.3	8.8.8.8	0xe94a	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.036276102 CEST	192.168.2.3	8.8.8.8	0x1627	Standard query (0)	intuitvisitorid.api.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.081317902 CEST	192.168.2.3	8.8.8.8	0xfd81	Standard query (0)	eventbus.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.090873003 CEST	192.168.2.3	8.8.8.8	0x7da9	Standard query (0)	xds-writesvc.api.intuit.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.198298931 CEST	192.168.2.3	8.8.8.8	0xa98a	Standard query (0)	collect.tealiumiq.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.374603033 CEST	192.168.2.3	8.8.8.8	0x47d5	Standard query (0)	accdn.lpsnmedia.net	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.394107103 CEST	192.168.2.3	8.8.8.8	0xc3c8	Standard query (0)	static-assets.fs.liveperson.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:29.177376032 CEST	192.168.2.3	8.8.8.8	0x230	Standard query (0)	az1.qualtrics.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:31.613105059 CEST	192.168.2.3	8.8.8.8	0xd5bb	Standard query (0)	www.youtube-nocookie.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:40:08.838898897 CEST	192.168.2.3	8.8.8.8	0x1f23	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:40:08.842313051 CEST	192.168.2.3	8.8.8.8	0xf550	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)
Jul 9, 2021 23:40:17.471183062 CEST	192.168.2.3	8.8.8.8	0xfd72	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jul 9, 2021 23:38:11.368618011 CEST	8.8.8.8	192.168.2.3	0x1b5d	No error (0)	c31.qbo.intuit.com	c31-prd.sbg-qbo-prod.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:11.368618011 CEST	8.8.8.8	192.168.2.3	0x1b5d	No error (0)	c31-prd.sbg-qbo-prod.a.intuit.com	c31-prod.qbomono3prdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:11.368618011 CEST	8.8.8.8	192.168.2.3	0x1b5d	No error (0)	c31-prod.qbomono3prdusw2.iks2.a.intuit.com		44.241.139.147	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:11.368618011 CEST	8.8.8.8	192.168.2.3	0x1b5d	No error (0)	c31-prod.qbomono3prdusw2.iks2.a.intuit.com		52.43.62.23	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:11.368618011 CEST	8.8.8.8	192.168.2.3	0x1b5d	No error (0)	c31-prod.qbomono3prdusw2.iks2.a.intuit.com		52.40.6.241	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:12.076006889 CEST	8.8.8.8	192.168.2.3	0xc976	No error (0)	plugin.intuitcdn.net	int-qbo.intuitcdn.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:12.085381985 CEST	8.8.8.8	192.168.2.3	0xcb7c	No error (0)	uiclassic.intuitcdn.net	int-qbo.intuitcdn.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:12.086107016 CEST	8.8.8.8	192.168.2.3	0x4dc3	No error (0)	accounts.intuit.com	accounts-prd.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:12.498639107 CEST	8.8.8.8	192.168.2.3	0xf35b	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:13.111757994 CEST	8.8.8.8	192.168.2.3	0xbbc3	No error (0)	plugin-qbo.intuit.com	http-download.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:13.558556080 CEST	8.8.8.8	192.168.2.3	0xa81a	No error (0)	sci.intuit.com	intuit.com.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:13.558556080 CEST	8.8.8.8	192.168.2.3	0xa81a	No error (0)	intuit.com.ssl.sc.omtrdc.net		15.236.176.210	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.558556080 CEST	8.8.8.8	192.168.2.3	0xa81a	No error (0)	intuit.com.ssl.sc.omtrdc.net		13.36.218.177	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.558556080 CEST	8.8.8.8	192.168.2.3	0xa81a	No error (0)	intuit.com.ssl.sc.omtrdc.net		15.188.95.229	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.702713013 CEST	8.8.8.8	192.168.2.3	0x2026	No error (0)	zion.qbo.intuit.com	zion.sbgnode.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:13.702713013 CEST	8.8.8.8	192.168.2.3	0x2026	No error (0)	zion.sbgnode.a.intuit.com		35.81.121.166	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.702713013 CEST	8.8.8.8	192.168.2.3	0x2026	No error (0)	zion.sbgnode.a.intuit.com		44.234.233.54	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.702713013 CEST	8.8.8.8	192.168.2.3	0x2026	No error (0)	zion.sbgnode.a.intuit.com		52.25.157.43	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.795077085 CEST	8.8.8.8	192.168.2.3	0x89b	No error (0)	edge.experimentation.intuit.com	experimentassignment.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:13.795077085 CEST	8.8.8.8	192.168.2.3	0x89b	No error (0)	experimentassignment.prd.api.a.intuit.com	experimentassignment-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:13.795077085 CEST	8.8.8.8	192.168.2.3	0x89b	No error (0)	experimentassignment-us-west-2.prd.api.a.intuit.com	sw1_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:13.795077085 CEST	8.8.8.8	192.168.2.3	0x89b	No error (0)	sw1_us-west-2_web.prd.api.a.intuit.com	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:13.795077085 CEST	8.8.8.8	192.168.2.3	0x89b	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		52.36.132.22	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.795077085 CEST	8.8.8.8	192.168.2.3	0x89b	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		44.241.51.40	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.795077085 CEST	8.8.8.8	192.168.2.3	0x89b	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		44.239.62.57	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.795077085 CEST	8.8.8.8	192.168.2.3	0x89b	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		44.236.224.21	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.795077085 CEST	8.8.8.8	192.168.2.3	0x89b	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		52.42.104.13	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.795077085 CEST	8.8.8.8	192.168.2.3	0x89b	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		35.80.97.182	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.795077085 CEST	8.8.8.8	192.168.2.3	0x89b	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		52.27.19.53	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:13.795077085 CEST	8.8.8.8	192.168.2.3	0x89b	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		35.82.107.6	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:14.126121998 CEST	8.8.8.8	192.168.2.3	0xa2d2	No error (0)	pf.intuit.com	h-intuit.online-metrix.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:14.126121998 CEST	8.8.8.8	192.168.2.3	0xa2d2	No error (0)	h-intuit.online-metrix.net		91.235.133.92	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:14.652642012 CEST	8.8.8.8	192.168.2.3	0xecd6	No error (0)	app.qbo.intuit.com	prod.sbg-qbo-shell-prd.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:14.652642012 CEST	8.8.8.8	192.168.2.3	0xecd6	No error (0)	prod.sbg-qbo-shell-prd.a.intuit.com	app-shell-qboshellservice-use2-prd.devpuxfabricprduse2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:14.652642012 CEST	8.8.8.8	192.168.2.3	0xecd6	No error (0)	app-shell-qboshellservice-use2-prd.devpuxfabricprduse2.iks2.a.intuit.com		3.16.63.147	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:14.652642012 CEST	8.8.8.8	192.168.2.3	0xecd6	No error (0)	app-shell-qboshellservice-use2-prd.devpuxfabricprduse2.iks2.a.intuit.com		3.128.213.221	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:14.652642012 CEST	8.8.8.8	192.168.2.3	0xecd6	No error (0)	app-shell-qboshellservice-use2-prd.devpuxfabricprduse2.iks2.a.intuit.com		3.140.44.218	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.107961893 CEST	8.8.8.8	192.168.2.3	0x7614	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.121385098 CEST	8.8.8.8	192.168.2.3	0xcfff	No error (0)	v60nf4ojrrfcwgzpevbope5zgu7jjxte6xa7tado5beaf20338e5cddbam1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.175359964 CEST	8.8.8.8	192.168.2.3	0x960a	No error (0)	plugin.intuitcdn.net	int-qbo.intuitcdn.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:15.175738096 CEST	8.8.8.8	192.168.2.3	0x4c05	No error (0)	uxfabric.intuitcdn.net	uxfabric.intuitcdn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:15.175738096 CEST	8.8.8.8	192.168.2.3	0x4c05	No error (0)	uxfabric.intuitcdn.a.intuit.com		99.84.15.96	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.175738096 CEST	8.8.8.8	192.168.2.3	0x4c05	No error (0)	uxfabric.intuitcdn.a.intuit.com		99.84.15.109	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.175738096 CEST	8.8.8.8	192.168.2.3	0x4c05	No error (0)	uxfabric.intuitcdn.a.intuit.com		99.84.15.107	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.175738096 CEST	8.8.8.8	192.168.2.3	0x4c05	No error (0)	uxfabric.intuitcdn.a.intuit.com		99.84.15.106	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.175951958 CEST	8.8.8.8	192.168.2.3	0x8098	No error (0)	uxfabric.intuitcdn.net	uxfabric.intuitcdn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:15.175951958 CEST	8.8.8.8	192.168.2.3	0x8098	No error (0)	uxfabric.intuitcdn.a.intuit.com		99.84.15.107	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.175951958 CEST	8.8.8.8	192.168.2.3	0x8098	No error (0)	uxfabric.intuitcdn.a.intuit.com		99.84.15.109	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.175951958 CEST	8.8.8.8	192.168.2.3	0x8098	No error (0)	uxfabric.intuitcdn.a.intuit.com		99.84.15.96	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.175951958 CEST	8.8.8.8	192.168.2.3	0x8098	No error (0)	uxfabric.intuitcdn.a.intuit.com		99.84.15.106	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:15.393187046 CEST	8.8.8.8	192.168.2.3	0x5b0a	No error (0)	lib.intuitcdn.net	lib.intuitcdn.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:29.760957003 CEST	8.8.8.8	192.168.2.3	0x1349	No error (0)	c31.qbo.intuit.com	c31-prd.sbg-qbo-prod.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:29.760957003 CEST	8.8.8.8	192.168.2.3	0x1349	No error (0)	c31-prd.sbg-qbo-prod.a.intuit.com	c31-prod.qbomono3prdusw2.iks2.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:29.760957003 CEST	8.8.8.8	192.168.2.3	0x1349	No error (0)	c31-prod.qbomono3prdusw2.iks2.a.intuit.com		52.43.62.23	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:29.760957003 CEST	8.8.8.8	192.168.2.3	0x1349	No error (0)	c31-prod.qbomono3prdusw2.iks2.a.intuit.com		44.241.139.147	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:29.760957003 CEST	8.8.8.8	192.168.2.3	0x1349	No error (0)	c31-prod.qbomono3prdusw2.iks2.a.intuit.com		52.40.6.241	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:37.811220884 CEST	8.8.8.8	192.168.2.3	0x8954	No error (0)	v60nf4ojkjtrh5z4sqvgxui7uvb4c3jwmjhlulkc6fcf216556112378am1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:38.793948889 CEST	8.8.8.8	192.168.2.3	0x191e	No error (0)	www.intuit.com	mktg.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:38.988662004 CEST	8.8.8.8	192.168.2.3	0x1d71	No error (0)	quickbooks.intuit.com	mktg.intuit.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:40.231436014 CEST	8.8.8.8	192.168.2.3	0xd0a	No error (0)	segment.intuitcdn.net	segment.intuitcdn.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:40.231436014 CEST	8.8.8.8	192.168.2.3	0xd0a	No error (0)	segment.intuitcdn.a.intuit.com		99.84.15.9	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:40.231436014 CEST	8.8.8.8	192.168.2.3	0xd0a	No error (0)	segment.intuitcdn.a.intuit.com		99.84.15.98	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:40.231436014 CEST	8.8.8.8	192.168.2.3	0xd0a	No error (0)	segment.intuitcdn.a.intuit.com		99.84.15.99	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:40.231436014 CEST	8.8.8.8	192.168.2.3	0xd0a	No error (0)	segment.intuitcdn.a.intuit.com		99.84.15.129	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:40.290760040 CEST	8.8.8.8	192.168.2.3	0x6577	No error (0)	privacy-policy.truste.com	d2pj9rkatqbt38.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:40.290760040 CEST	8.8.8.8	192.168.2.3	0x6577	No error (0)	d2pj9rkatqbt38.cloudfront.net		99.84.15.81	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:40.290760040 CEST	8.8.8.8	192.168.2.3	0x6577	No error (0)	d2pj9rkatqbt38.cloudfront.net		99.84.15.102	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:40.290760040 CEST	8.8.8.8	192.168.2.3	0x6577	No error (0)	d2pj9rkatqbt38.cloudfront.net		99.84.15.14	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:40.290760040 CEST	8.8.8.8	192.168.2.3	0x6577	No error (0)	d2pj9rkatqbt38.cloudfront.net		99.84.15.43	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:42.770351887 CEST	8.8.8.8	192.168.2.3	0xcc09	No error (0)	nexus.ensighten.com		18.195.42.228	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:44.824486971 CEST	8.8.8.8	192.168.2.3	0x35f7	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:44.824486971 CEST	8.8.8.8	192.168.2.3	0x35f7	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:44.824486971 CEST	8.8.8.8	192.168.2.3	0x35f7	No error (0)	edge-irl1.demdex.net	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:44.824486971 CEST	8.8.8.8	192.168.2.3	0x35f7	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.211.62.226	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:44.824486971 CEST	8.8.8.8	192.168.2.3	0x35f7	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.16.73.168	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:44.824486971 CEST	8.8.8.8	192.168.2.3	0x35f7	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.171.168.191	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:44.824486971 CEST	8.8.8.8	192.168.2.3	0x35f7	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.76.54.153	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:44.824486971 CEST	8.8.8.8	192.168.2.3	0x35f7	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.19.186.105	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:44.824486971 CEST	8.8.8.8	192.168.2.3	0x35f7	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.19.195.165	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:44.824486971 CEST	8.8.8.8	192.168.2.3	0x35f7	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.211.113.33	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:44.824486971 CEST	8.8.8.8	192.168.2.3	0x35f7	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.195.125.109	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.263031960 CEST	8.8.8.8	192.168.2.3	0x24db	No error (0)	insight.adsrvr.org	insight-566961044.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:45.263031960 CEST	8.8.8.8	192.168.2.3	0x24db	No error (0)	insight-566961044.eu-west-1.elb.amazonaws.com		34.254.127.126	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.263031960 CEST	8.8.8.8	192.168.2.3	0x24db	No error (0)	insight-566961044.eu-west-1.elb.amazonaws.com		52.213.189.245	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.263031960 CEST	8.8.8.8	192.168.2.3	0x24db	No error (0)	insight-566961044.eu-west-1.elb.amazonaws.com		34.255.138.57	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.263031960 CEST	8.8.8.8	192.168.2.3	0x24db	No error (0)	insight-566961044.eu-west-1.elb.amazonaws.com		52.30.148.233	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.263031960 CEST	8.8.8.8	192.168.2.3	0x24db	No error (0)	insight-566961044.eu-west-1.elb.amazonaws.com		99.80.189.193	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.263031960 CEST	8.8.8.8	192.168.2.3	0x24db	No error (0)	insight-566961044.eu-west-1.elb.amazonaws.com		54.77.48.133	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.263031960 CEST	8.8.8.8	192.168.2.3	0x24db	No error (0)	insight-566961044.eu-west-1.elb.amazonaws.com		52.31.175.99	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.263031960 CEST	8.8.8.8	192.168.2.3	0x24db	No error (0)	insight-566961044.eu-west-1.elb.amazonaws.com		52.50.64.214	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.481828928 CEST	8.8.8.8	192.168.2.3	0x5003	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:45.481828928 CEST	8.8.8.8	192.168.2.3	0x5003	No error (0)	platform.twitter.map.fastly.net		151.101.12.157	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.497574091 CEST	8.8.8.8	192.168.2.3	0x37fc	No error (0)	data.privacy.ensighten.com	ens-edge.edge.nc0.co		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:45.497574091 CEST	8.8.8.8	192.168.2.3	0x37fc	No error (0)	ens-edge.edge.nc0.co	edge-geo.nc0.co		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:45.497574091 CEST	8.8.8.8	192.168.2.3	0x37fc	No error (0)	edge-geo.nc0.co		3.124.119.57	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.583718061 CEST	8.8.8.8	192.168.2.3	0x2567	No error (0)	cdn.websdk.intuit.com	d2pdr92cvtkw6v.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:45.583718061 CEST	8.8.8.8	192.168.2.3	0x2567	No error (0)	d2pdr92cvtkw6v.cloudfront.net		13.35.199.92	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.583718061 CEST	8.8.8.8	192.168.2.3	0x2567	No error (0)	d2pdr92cvtkw6v.cloudfront.net		13.35.199.111	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.583718061 CEST	8.8.8.8	192.168.2.3	0x2567	No error (0)	d2pdr92cvtkw6v.cloudfront.net		13.35.199.129	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.583718061 CEST	8.8.8.8	192.168.2.3	0x2567	No error (0)	d2pdr92cvtkw6v.cloudfront.net		13.35.199.24	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.635751963 CEST	8.8.8.8	192.168.2.3	0x3ea9	No error (0)	1996823.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:45.635751963 CEST	8.8.8.8	192.168.2.3	0x3ea9	No error (0)	dart.l.doubleclick.net		172.217.168.38	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:45.724411964 CEST	8.8.8.8	192.168.2.3	0xcbb9	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:46.781069040 CEST	8.8.8.8	192.168.2.3	0x2a3e	No error (0)	8344993.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:46.781069040 CEST	8.8.8.8	192.168.2.3	0x2a3e	No error (0)	dart.l.doubleclick.net		172.217.168.38	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.001321077 CEST	8.8.8.8	192.168.2.3	0x5279	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:47.001321077 CEST	8.8.8.8	192.168.2.3	0x5279	No error (0)	scontent.xx.fbcdn.net		157.240.17.15	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.002223015 CEST	8.8.8.8	192.168.2.3	0x301b	No error (0)	snap.licdn.com	wildcard.licdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:47.006139994 CEST	8.8.8.8	192.168.2.3	0x602c	No error (0)	cdn.decibelinsight.net		99.84.15.94	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.006139994 CEST	8.8.8.8	192.168.2.3	0x602c	No error (0)	cdn.decibelinsight.net		99.84.15.26	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.006139994 CEST	8.8.8.8	192.168.2.3	0x602c	No error (0)	cdn.decibelinsight.net		99.84.15.115	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.006139994 CEST	8.8.8.8	192.168.2.3	0x602c	No error (0)	cdn.decibelinsight.net		99.84.15.66	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.009541035 CEST	8.8.8.8	192.168.2.3	0x66e0	No error (0)	cdn.appdynamics.com		99.84.15.110	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.009541035 CEST	8.8.8.8	192.168.2.3	0x66e0	No error (0)	cdn.appdynamics.com		99.84.15.118	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.009541035 CEST	8.8.8.8	192.168.2.3	0x66e0	No error (0)	cdn.appdynamics.com		99.84.15.104	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.009541035 CEST	8.8.8.8	192.168.2.3	0x66e0	No error (0)	cdn.appdynamics.com		99.84.15.21	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.033562899 CEST	8.8.8.8	192.168.2.3	0x77f0	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:47.033562899 CEST	8.8.8.8	192.168.2.3	0x77f0	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:47.033562899 CEST	8.8.8.8	192.168.2.3	0x77f0	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.033562899 CEST	8.8.8.8	192.168.2.3	0x77f0	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.033562899 CEST	8.8.8.8	192.168.2.3	0x77f0	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.033562899 CEST	8.8.8.8	192.168.2.3	0x77f0	No error (0)	s.twitter.com		104.244.42.131	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.036855936 CEST	8.8.8.8	192.168.2.3	0x1edf	No error (0)	t.co		104.244.42.69	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.036855936 CEST	8.8.8.8	192.168.2.3	0x1edf	No error (0)	t.co		104.244.42.133	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.036855936 CEST	8.8.8.8	192.168.2.3	0x1edf	No error (0)	t.co		104.244.42.197	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.036855936 CEST	8.8.8.8	192.168.2.3	0x1edf	No error (0)	t.co		104.244.42.5	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.308871984 CEST	8.8.8.8	192.168.2.3	0x1277	No error (0)	googleads.g.doubleclick.net		172.217.168.34	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.464668989 CEST	8.8.8.8	192.168.2.3	0xac1a	No error (0)	trinity.platform.intuit.com	trinity.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:47.464668989 CEST	8.8.8.8	192.168.2.3	0xac1a	No error (0)	trinity.a.intuit.com		44.239.250.146	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.464668989 CEST	8.8.8.8	192.168.2.3	0xac1a	No error (0)	trinity.a.intuit.com		54.185.206.157	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.464668989 CEST	8.8.8.8	192.168.2.3	0xac1a	No error (0)	trinity.a.intuit.com		35.160.18.144	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.464668989 CEST	8.8.8.8	192.168.2.3	0xac1a	No error (0)	trinity.a.intuit.com		52.36.129.161	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.464668989 CEST	8.8.8.8	192.168.2.3	0xac1a	No error (0)	trinity.a.intuit.com		54.202.203.214	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.464668989 CEST	8.8.8.8	192.168.2.3	0xac1a	No error (0)	trinity.a.intuit.com		52.43.248.156	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.585326910 CEST	8.8.8.8	192.168.2.3	0x2aeb	No error (0)	px.ads.linkedin.com	mix.linkedin.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:47.585326910 CEST	8.8.8.8	192.168.2.3	0x2aeb	No error (0)	mix.linkedin.com	glb-na.mix.linkedin.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:47.585326910 CEST	8.8.8.8	192.168.2.3	0x2aeb	No error (0)	glb-na.mix.linkedin.com	pop-eda6.mix.linkedin.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:47.585326910 CEST	8.8.8.8	192.168.2.3	0x2aeb	No error (0)	pop-eda6.mix.linkedin.com		108.174.11.69	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.650293112 CEST	8.8.8.8	192.168.2.3	0x4ce1	No error (0)	collection.decibelinsight.net		18.198.240.31	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.685349941 CEST	8.8.8.8	192.168.2.3	0x9ab4	No error (0)	www.google.ch		172.217.168.67	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.902333021 CEST	8.8.8.8	192.168.2.3	0xdc37	No error (0)	turbotax.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:47.902333021 CEST	8.8.8.8	192.168.2.3	0xdc37	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:47.902333021 CEST	8.8.8.8	192.168.2.3	0xdc37	No error (0)	edge-irl1.demdex.net	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:47.902333021 CEST	8.8.8.8	192.168.2.3	0xdc37	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.19.186.105	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.902333021 CEST	8.8.8.8	192.168.2.3	0xdc37	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.31.68.29	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.902333021 CEST	8.8.8.8	192.168.2.3	0xdc37	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.243.30.18	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.902333021 CEST	8.8.8.8	192.168.2.3	0xdc37	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.248.156.174	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.902333021 CEST	8.8.8.8	192.168.2.3	0xdc37	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.251.129.229	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.902333021 CEST	8.8.8.8	192.168.2.3	0xdc37	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.171.219.200	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.902333021 CEST	8.8.8.8	192.168.2.3	0xdc37	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.17.54.18	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:47.902333021 CEST	8.8.8.8	192.168.2.3	0xdc37	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		3.250.252.43	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:48.061283112 CEST	8.8.8.8	192.168.2.3	0xe100	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:48.061283112 CEST	8.8.8.8	192.168.2.3	0xe100	No error (0)	star-mini.c10r.facebook.com		31.13.86.36	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:48.070442915 CEST	8.8.8.8	192.168.2.3	0xcc1f	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:49.805304050 CEST	8.8.8.8	192.168.2.3	0xe278	No error (0)	col.eum-appdynamics.com		54.148.149.218	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:49.805304050 CEST	8.8.8.8	192.168.2.3	0xe278	No error (0)	col.eum-appdynamics.com		54.148.161.66	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:49.805304050 CEST	8.8.8.8	192.168.2.3	0xe278	No error (0)	col.eum-appdynamics.com		52.88.47.42	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:49.805304050 CEST	8.8.8.8	192.168.2.3	0xe278	No error (0)	col.eum-appdynamics.com		44.237.170.186	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:49.805304050 CEST	8.8.8.8	192.168.2.3	0xe278	No error (0)	col.eum-appdynamics.com		44.237.12.73	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:49.805304050 CEST	8.8.8.8	192.168.2.3	0xe278	No error (0)	col.eum-appdynamics.com		52.88.99.210	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:49.805304050 CEST	8.8.8.8	192.168.2.3	0xe278	No error (0)	col.eum-appdynamics.com		34.216.58.237	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:49.805304050 CEST	8.8.8.8	192.168.2.3	0xe278	No error (0)	col.eum-appdynamics.com		54.68.72.220	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:50.070360899 CEST	8.8.8.8	192.168.2.3	0xfa75	No error (0)	static.doubleclick.net	static-doubleclick-net.l.google.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:50.272686005 CEST	8.8.8.8	192.168.2.3	0x4a2b	No error (0)	logging.api.intuit.com	logging.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:50.272686005 CEST	8.8.8.8	192.168.2.3	0x4a2b	No error (0)	logging.prd.api.a.intuit.com	logging-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:50.272686005 CEST	8.8.8.8	192.168.2.3	0x4a2b	No error (0)	logging-us-west-2.prd.api.a.intuit.com	sw1_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:50.272686005 CEST	8.8.8.8	192.168.2.3	0x4a2b	No error (0)	sw1_us-west-2_web.prd.api.a.intuit.com	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:38:50.272686005 CEST	8.8.8.8	192.168.2.3	0x4a2b	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		35.163.214.119	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:50.272686005 CEST	8.8.8.8	192.168.2.3	0x4a2b	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		52.27.19.53	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:50.272686005 CEST	8.8.8.8	192.168.2.3	0x4a2b	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		44.235.139.39	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:50.272686005 CEST	8.8.8.8	192.168.2.3	0x4a2b	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		35.82.177.200	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:50.272686005 CEST	8.8.8.8	192.168.2.3	0x4a2b	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		52.36.132.22	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:50.272686005 CEST	8.8.8.8	192.168.2.3	0x4a2b	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		44.236.224.21	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:50.272686005 CEST	8.8.8.8	192.168.2.3	0x4a2b	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		34.210.199.150	A (IP address)	IN (0x0001)
Jul 9, 2021 23:38:50.272686005 CEST	8.8.8.8	192.168.2.3	0x4a2b	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		52.13.47.186	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:24.533149958 CEST	8.8.8.8	192.168.2.3	0x346b	No error (0)	tags.tiqcdn.com	tags.tiqcdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:25.252804995 CEST	8.8.8.8	192.168.2.3	0x7a1c	No error (0)	experimentation.us.api.intuit.com	prd.us.experimentation.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:25.252804995 CEST	8.8.8.8	192.168.2.3	0x7a1c	No error (0)	prd.us.experimentation.a.intuit.com		44.233.214.243	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.252804995 CEST	8.8.8.8	192.168.2.3	0x7a1c	No error (0)	prd.us.experimentation.a.intuit.com		35.162.103.77	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.252804995 CEST	8.8.8.8	192.168.2.3	0x7a1c	No error (0)	prd.us.experimentation.a.intuit.com		52.10.236.211	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.808763027 CEST	8.8.8.8	192.168.2.3	0x83b9	No error (0)	cdn-0.d41.co		99.84.15.42	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.808763027 CEST	8.8.8.8	192.168.2.3	0x83b9	No error (0)	cdn-0.d41.co		99.84.15.96	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.808763027 CEST	8.8.8.8	192.168.2.3	0x83b9	No error (0)	cdn-0.d41.co		99.84.15.8	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.808763027 CEST	8.8.8.8	192.168.2.3	0x83b9	No error (0)	cdn-0.d41.co		99.84.15.80	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.813740969 CEST	8.8.8.8	192.168.2.3	0x418c	No error (0)	vid1005.d41.co	ecf.d41.co		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:25.813740969 CEST	8.8.8.8	192.168.2.3	0x418c	No error (0)	ecf.d41.co	vici-asg-elb-1598172991.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:25.813740969 CEST	8.8.8.8	192.168.2.3	0x418c	No error (0)	vici-asg-elb-1598172991.us-east-1.elb.amazonaws.com		34.194.154.95	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.813740969 CEST	8.8.8.8	192.168.2.3	0x418c	No error (0)	vici-asg-elb-1598172991.us-east-1.elb.amazonaws.com		52.206.83.104	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.813740969 CEST	8.8.8.8	192.168.2.3	0x418c	No error (0)	vici-asg-elb-1598172991.us-east-1.elb.amazonaws.com		34.193.58.217	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.825764894 CEST	8.8.8.8	192.168.2.3	0xfa9	No error (0)	img.en25.com	wildcard.en25.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:25.836633921 CEST	8.8.8.8	192.168.2.3	0xa424	No error (0)	pt.ispot.tv	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:25.854706049 CEST	8.8.8.8	192.168.2.3	0x1e9e	No error (0)	s.amazon-adsystem.com		52.94.232.32	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.877167940 CEST	8.8.8.8	192.168.2.3	0x39b6	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:25.877167940 CEST	8.8.8.8	192.168.2.3	0x39b6	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0006.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:25.908195972 CEST	8.8.8.8	192.168.2.3	0x9a17	No error (0)	marketdataservice.api.intuit.com	marketdataservice.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:25.908195972 CEST	8.8.8.8	192.168.2.3	0x9a17	No error (0)	marketdataservice.prd.api.a.intuit.com	marketdataservice-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:25.908195972 CEST	8.8.8.8	192.168.2.3	0x9a17	No error (0)	marketdataservice-us-west-2.prd.api.a.intuit.com	sw1_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:25.908195972 CEST	8.8.8.8	192.168.2.3	0x9a17	No error (0)	sw1_us-west-2_web.prd.api.a.intuit.com	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:25.908195972 CEST	8.8.8.8	192.168.2.3	0x9a17	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		52.13.47.186	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.908195972 CEST	8.8.8.8	192.168.2.3	0x9a17	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		35.80.97.182	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.908195972 CEST	8.8.8.8	192.168.2.3	0x9a17	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		44.235.139.39	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.908195972 CEST	8.8.8.8	192.168.2.3	0x9a17	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		44.239.62.57	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.908195972 CEST	8.8.8.8	192.168.2.3	0x9a17	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		34.210.199.150	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.908195972 CEST	8.8.8.8	192.168.2.3	0x9a17	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		44.237.249.140	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.908195972 CEST	8.8.8.8	192.168.2.3	0x9a17	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		52.36.132.22	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.908195972 CEST	8.8.8.8	192.168.2.3	0x9a17	No error (0)	sw1prdwebbluealb-144153673.us-west-2.elb.amazonaws.com		44.241.51.40	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.936270952 CEST	8.8.8.8	192.168.2.3	0x4e33	No error (0)	www.redditstatic.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:25.936270952 CEST	8.8.8.8	192.168.2.3	0x4e33	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.936270952 CEST	8.8.8.8	192.168.2.3	0x4e33	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.936270952 CEST	8.8.8.8	192.168.2.3	0x4e33	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.936270952 CEST	8.8.8.8	192.168.2.3	0x4e33	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.962917089 CEST	8.8.8.8	192.168.2.3	0x2e6c	No error (0)	ad.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:25.962917089 CEST	8.8.8.8	192.168.2.3	0x2e6c	No error (0)	dart.l.doubleclick.net		172.217.168.38	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:25.989145041 CEST	8.8.8.8	192.168.2.3	0x50d1	No error (0)	znew2pz3yjx9poggn-intuitsocial.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:25.989145041 CEST	8.8.8.8	192.168.2.3	0x50d1	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:26.241245985 CEST	8.8.8.8	192.168.2.3	0xa13a	No error (0)	vi4820.d41.co	ecf.d41.co		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:26.241245985 CEST	8.8.8.8	192.168.2.3	0xa13a	No error (0)	ecf.d41.co	vici-asg-elb-1598172991.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:26.241245985 CEST	8.8.8.8	192.168.2.3	0xa13a	No error (0)	vici-asg-elb-1598172991.us-east-1.elb.amazonaws.com		52.206.83.104	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.241245985 CEST	8.8.8.8	192.168.2.3	0xa13a	No error (0)	vici-asg-elb-1598172991.us-east-1.elb.amazonaws.com		34.193.58.217	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.241245985 CEST	8.8.8.8	192.168.2.3	0xa13a	No error (0)	vici-asg-elb-1598172991.us-east-1.elb.amazonaws.com		34.194.154.95	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.256424904 CEST	8.8.8.8	192.168.2.3	0xcf5a	No error (0)	s113755760.t.eloqua.com	p03.t.eloqua.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:26.256424904 CEST	8.8.8.8	192.168.2.3	0xcf5a	No error (0)	p03.t.eloqua.com		142.0.160.13	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.265705109 CEST	8.8.8.8	192.168.2.3	0x81ad	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:26.265705109 CEST	8.8.8.8	192.168.2.3	0x81ad	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.265705109 CEST	8.8.8.8	192.168.2.3	0x81ad	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.265705109 CEST	8.8.8.8	192.168.2.3	0x81ad	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.265705109 CEST	8.8.8.8	192.168.2.3	0x81ad	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.321443081 CEST	8.8.8.8	192.168.2.3	0x9d74	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:26.321443081 CEST	8.8.8.8	192.168.2.3	0x9d74	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:26.327260017 CEST	8.8.8.8	192.168.2.3	0xc42c	No error (0)	googleads4.g.doubleclick.net		172.217.168.2	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.417566061 CEST	8.8.8.8	192.168.2.3	0xea29	No error (0)	lptag-cdn.liveperson.net	geo.lptag-cdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:26.417566061 CEST	8.8.8.8	192.168.2.3	0xea29	No error (0)	lptag-cdn-liveperson-net.map.fastly.net		151.101.1.192	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.417566061 CEST	8.8.8.8	192.168.2.3	0xea29	No error (0)	lptag-cdn-liveperson-net.map.fastly.net		151.101.65.192	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.417566061 CEST	8.8.8.8	192.168.2.3	0xea29	No error (0)	lptag-cdn-liveperson-net.map.fastly.net		151.101.129.192	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.417566061 CEST	8.8.8.8	192.168.2.3	0xea29	No error (0)	lptag-cdn-liveperson-net.map.fastly.net		151.101.193.192	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:26.440057993 CEST	8.8.8.8	192.168.2.3	0xe94a	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:26.440057993 CEST	8.8.8.8	192.168.2.3	0xe94a	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:26.440057993 CEST	8.8.8.8	192.168.2.3	0xe94a	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:27.057723999 CEST	8.8.8.8	192.168.2.3	0x1627	No error (0)	intuitvisitorid.api.intuit.com	intuitvisitorid.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:27.057723999 CEST	8.8.8.8	192.168.2.3	0x1627	No error (0)	intuitvisitorid.prd.api.a.intuit.com	intuitvisitorid-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:27.057723999 CEST	8.8.8.8	192.168.2.3	0x1627	No error (0)	intuitvisitorid-us-west-2.prd.api.a.intuit.com	sw6_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:27.057723999 CEST	8.8.8.8	192.168.2.3	0x1627	No error (0)	sw6_us-west-2_web.prd.api.a.intuit.com	sw6prdwebbluealb-1985872400.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:27.057723999 CEST	8.8.8.8	192.168.2.3	0x1627	No error (0)	sw6prdwebbluealb-1985872400.us-west-2.elb.amazonaws.com		44.238.207.51	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.057723999 CEST	8.8.8.8	192.168.2.3	0x1627	No error (0)	sw6prdwebbluealb-1985872400.us-west-2.elb.amazonaws.com		52.35.123.166	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.057723999 CEST	8.8.8.8	192.168.2.3	0x1627	No error (0)	sw6prdwebbluealb-1985872400.us-west-2.elb.amazonaws.com		54.70.163.156	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.057723999 CEST	8.8.8.8	192.168.2.3	0x1627	No error (0)	sw6prdwebbluealb-1985872400.us-west-2.elb.amazonaws.com		35.166.51.232	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.057723999 CEST	8.8.8.8	192.168.2.3	0x1627	No error (0)	sw6prdwebbluealb-1985872400.us-west-2.elb.amazonaws.com		44.233.173.183	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.057723999 CEST	8.8.8.8	192.168.2.3	0x1627	No error (0)	sw6prdwebbluealb-1985872400.us-west-2.elb.amazonaws.com		44.238.183.33	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.057723999 CEST	8.8.8.8	192.168.2.3	0x1627	No error (0)	sw6prdwebbluealb-1985872400.us-west-2.elb.amazonaws.com		52.25.106.34	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.057723999 CEST	8.8.8.8	192.168.2.3	0x1627	No error (0)	sw6prdwebbluealb-1985872400.us-west-2.elb.amazonaws.com		44.238.202.218	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.105685949 CEST	8.8.8.8	192.168.2.3	0xfd81	No error (0)	eventbus.intuit.com	eventbus.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:27.105685949 CEST	8.8.8.8	192.168.2.3	0xfd81	No error (0)	eventbus.a.intuit.com		44.225.202.106	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.105685949 CEST	8.8.8.8	192.168.2.3	0xfd81	No error (0)	eventbus.a.intuit.com		100.21.164.152	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.105685949 CEST	8.8.8.8	192.168.2.3	0xfd81	No error (0)	eventbus.a.intuit.com		52.10.91.149	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.105685949 CEST	8.8.8.8	192.168.2.3	0xfd81	No error (0)	eventbus.a.intuit.com		35.83.34.137	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.105685949 CEST	8.8.8.8	192.168.2.3	0xfd81	No error (0)	eventbus.a.intuit.com		52.27.152.23	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.105685949 CEST	8.8.8.8	192.168.2.3	0xfd81	No error (0)	eventbus.a.intuit.com		52.10.131.83	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.105685949 CEST	8.8.8.8	192.168.2.3	0xfd81	No error (0)	eventbus.a.intuit.com		54.212.39.29	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.105685949 CEST	8.8.8.8	192.168.2.3	0xfd81	No error (0)	eventbus.a.intuit.com		35.83.35.4	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.118190050 CEST	8.8.8.8	192.168.2.3	0x7da9	No error (0)	xds-writesvc.api.intuit.com	ixp-data-svc.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:27.118190050 CEST	8.8.8.8	192.168.2.3	0x7da9	No error (0)	ixp-data-svc.prd.api.a.intuit.com	ixp-data-svc-us-west-2.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:27.118190050 CEST	8.8.8.8	192.168.2.3	0x7da9	No error (0)	ixp-data-svc-us-west-2.prd.api.a.intuit.com	sw4_us-west-2_web.prd.api.a.intuit.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:27.118190050 CEST	8.8.8.8	192.168.2.3	0x7da9	No error (0)	sw4_us-west-2_web.prd.api.a.intuit.com	sw4prdwebbluealb-1913782926.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:27.118190050 CEST	8.8.8.8	192.168.2.3	0x7da9	No error (0)	sw4prdwebbluealb-1913782926.us-west-2.elb.amazonaws.com		44.235.182.173	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.118190050 CEST	8.8.8.8	192.168.2.3	0x7da9	No error (0)	sw4prdwebbluealb-1913782926.us-west-2.elb.amazonaws.com		35.82.180.220	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.118190050 CEST	8.8.8.8	192.168.2.3	0x7da9	No error (0)	sw4prdwebbluealb-1913782926.us-west-2.elb.amazonaws.com		52.38.224.229	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.118190050 CEST	8.8.8.8	192.168.2.3	0x7da9	No error (0)	sw4prdwebbluealb-1913782926.us-west-2.elb.amazonaws.com		52.35.46.80	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.118190050 CEST	8.8.8.8	192.168.2.3	0x7da9	No error (0)	sw4prdwebbluealb-1913782926.us-west-2.elb.amazonaws.com		52.39.194.211	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.118190050 CEST	8.8.8.8	192.168.2.3	0x7da9	No error (0)	sw4prdwebbluealb-1913782926.us-west-2.elb.amazonaws.com		54.203.13.110	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.118190050 CEST	8.8.8.8	192.168.2.3	0x7da9	No error (0)	sw4prdwebbluealb-1913782926.us-west-2.elb.amazonaws.com		44.239.106.195	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.118190050 CEST	8.8.8.8	192.168.2.3	0x7da9	No error (0)	sw4prdwebbluealb-1913782926.us-west-2.elb.amazonaws.com		54.189.84.86	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.219620943 CEST	8.8.8.8	192.168.2.3	0xa98a	No error (0)	collect.tealiumiq.com		18.194.201.176	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.219620943 CEST	8.8.8.8	192.168.2.3	0xa98a	No error (0)	collect.tealiumiq.com		3.121.173.26	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.219620943 CEST	8.8.8.8	192.168.2.3	0xa98a	No error (0)	collect.tealiumiq.com		3.125.98.73	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.219620943 CEST	8.8.8.8	192.168.2.3	0xa98a	No error (0)	collect.tealiumiq.com		52.29.99.33	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.219620943 CEST	8.8.8.8	192.168.2.3	0xa98a	No error (0)	collect.tealiumiq.com		35.158.246.242	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.219620943 CEST	8.8.8.8	192.168.2.3	0xa98a	No error (0)	collect.tealiumiq.com		3.120.49.41	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.410227060 CEST	8.8.8.8	192.168.2.3	0x47d5	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:27.419553041 CEST	8.8.8.8	192.168.2.3	0xc3c8	No error (0)	static-assets.fs.liveperson.com	dh1y47vf5ttia.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:27.419553041 CEST	8.8.8.8	192.168.2.3	0xc3c8	No error (0)	dh1y47vf5ttia.cloudfront.net		99.84.15.117	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.419553041 CEST	8.8.8.8	192.168.2.3	0xc3c8	No error (0)	dh1y47vf5ttia.cloudfront.net		99.84.15.24	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.419553041 CEST	8.8.8.8	192.168.2.3	0xc3c8	No error (0)	dh1y47vf5ttia.cloudfront.net		99.84.15.100	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:27.419553041 CEST	8.8.8.8	192.168.2.3	0xc3c8	No error (0)	dh1y47vf5ttia.cloudfront.net		99.84.15.94	A (IP address)	IN (0x0001)
Jul 9, 2021 23:39:29.213278055 CEST	8.8.8.8	192.168.2.3	0x230	No error (0)	az1.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:39:31.654006958 CEST	8.8.8.8	192.168.2.3	0xd5bb	No error (0)	www.youtube-nocookie.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:40:08.852142096 CEST	8.8.8.8	192.168.2.3	0x1f23	No error (0)	i.ytimg.com		216.58.215.246	A (IP address)	IN (0x0001)
Jul 9, 2021 23:40:08.852142096 CEST	8.8.8.8	192.168.2.3	0x1f23	No error (0)	i.ytimg.com		172.217.168.22	A (IP address)	IN (0x0001)
Jul 9, 2021 23:40:08.852142096 CEST	8.8.8.8	192.168.2.3	0x1f23	No error (0)	i.ytimg.com		172.217.168.54	A (IP address)	IN (0x0001)
Jul 9, 2021 23:40:08.852142096 CEST	8.8.8.8	192.168.2.3	0x1f23	No error (0)	i.ytimg.com		172.217.168.86	A (IP address)	IN (0x0001)
Jul 9, 2021 23:40:08.859150887 CEST	8.8.8.8	192.168.2.3	0xf550	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:40:08.859150887 CEST	8.8.8.8	192.168.2.3	0xf550	No error (0)	photos-ugc.l.googleusercontent.com		172.217.168.33	A (IP address)	IN (0x0001)
Jul 9, 2021 23:40:17.487724066 CEST	8.8.8.8	192.168.2.3	0xfd72	No error (0)	stats.g.doubleclick.net	stats.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jul 9, 2021 23:40:17.487724066 CEST	8.8.8.8	192.168.2.3	0xfd72	No error (0)	stats.l.doubleclick.net		142.250.153.154	A (IP address)	IN (0x0001)
Jul 9, 2021 23:40:17.487724066 CEST	8.8.8.8	192.168.2.3	0xfd72	No error (0)	stats.l.doubleclick.net		142.250.153.156	A (IP address)	IN (0x0001)
Jul 9, 2021 23:40:17.487724066 CEST	8.8.8.8	192.168.2.3	0xfd72	No error (0)	stats.l.doubleclick.net		142.250.153.157	A (IP address)	IN (0x0001)
Jul 9, 2021 23:40:17.487724066 CEST	8.8.8.8	192.168.2.3	0xfd72	No error (0)	stats.l.doubleclick.net		142.250.153.155	A (IP address)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Jul 9, 2021 23:38:11.731232882 CEST	44.241.139.147	443	192.168.2.3	49720	CN=qbo.intuit.com, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Nov 19 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Wed Nov 24 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:11.745451927 CEST	44.241.139.147	443	192.168.2.3	49721	CN=qbo.intuit.com, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Nov 19 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Wed Nov 24 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:13.615950108 CEST	15.236.176.210	443	192.168.2.3	49736	CN=sci.intuit.com, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Nov 18 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020	Mon Dec 20 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
Jul 9, 2021 23:38:13.615950108 CEST	15.236.176.210	443	192.168.2.3	49736	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		3faf2df7ab96c36419c31725cb1fa7d6
Jul 9, 2021 23:38:13.723850965 CEST	15.236.176.210	443	192.168.2.3	49737	CN=sci.intuit.com, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Nov 18 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020	Mon Dec 20 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
Jul 9, 2021 23:38:13.723850965 CEST	15.236.176.210	443	192.168.2.3	49737	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		3faf2df7ab96c36419c31725cb1fa7d6
Jul 9, 2021 23:38:14.124806881 CEST	35.81.121.166	443	192.168.2.3	49738	CN=*.sbgnode.a.intuit.com, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Feb 12 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Thu Feb 17 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:14.128585100 CEST	35.81.121.166	443	192.168.2.3	49739	CN=*.sbgnode.a.intuit.com, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Feb 12 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Thu Feb 17 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:14.202445984 CEST	91.235.133.92	443	192.168.2.3	49742	CN=pf.intuit.com, OU=Intuit CTO-DEV, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Aug 28 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Thu Sep 23 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:14.202585936 CEST	91.235.133.92	443	192.168.2.3	49743	CN=pf.intuit.com, OU=Intuit CTO-DEV, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Aug 28 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Thu Sep 23 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:14.288431883 CEST	52.36.132.22	443	192.168.2.3	49740	CN=*.experimentation.intuit.com, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Jul 03 02:00:00 CEST 2021 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Sat Jul 09 01:59:59 CEST 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:14.288651943 CEST	52.36.132.22	443	192.168.2.3	49741	CN=*.experimentation.intuit.com, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Jul 03 02:00:00 CEST 2021 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Sat Jul 09 01:59:59 CEST 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:14.882142067 CEST	3.16.63.147	443	192.168.2.3	49745	CN=qbo-shell-service-app.devpuxfabricprduse2.iks2.a.intuit.com, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Feb 26 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Thu Mar 03 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:14.883372068 CEST	3.16.63.147	443	192.168.2.3	49744	CN=qbo-shell-service-app.devpuxfabricprduse2.iks2.a.intuit.com, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Feb 26 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Thu Mar 03 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:15.163265944 CEST	91.235.132.130	443	192.168.2.3	49751	C=US, ST=Georgia, L=Alpharetta, O=LexisNexis Risk Solutions FL Inc., CN=h.online-metrix.net EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US	EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Thu Jan 21 12:10:12 CET 2021 Thu Sep 01 16:35:35 CEST 2016 Tue Nov 07 20:31:18 CET 2006	Fri Jan 21 12:09:12 CET 2022 Sun Sep 29 16:35:35 CEST 2024 Mon Dec 31 20:40:55 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US	CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Thu Sep 01 16:35:35 CEST 2016	Sun Sep 29 16:35:35 CEST 2024
					CN=SecureTrust CA, O=SecureTrust Corporation, C=US	CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Tue Nov 07 20:31:18 CET 2006	Mon Dec 31 20:40:55 CET 2029
Jul 9, 2021 23:38:15.163444996 CEST	91.235.132.130	443	192.168.2.3	49752	C=US, ST=Georgia, L=Alpharetta, O=LexisNexis Risk Solutions FL Inc., CN=h.online-metrix.net EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US	EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Thu Jan 21 12:10:12 CET 2021 Thu Sep 01 16:35:35 CEST 2016 Tue Nov 07 20:31:18 CET 2006	Fri Jan 21 12:09:12 CET 2022 Sun Sep 29 16:35:35 CEST 2024 Mon Dec 31 20:40:55 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US	CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Thu Sep 01 16:35:35 CEST 2016	Sun Sep 29 16:35:35 CEST 2024
					CN=SecureTrust CA, O=SecureTrust Corporation, C=US	CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Tue Nov 07 20:31:18 CET 2006	Mon Dec 31 20:40:55 CET 2029
Jul 9, 2021 23:38:15.174031019 CEST	91.235.134.131	443	192.168.2.3	49753	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jul 9, 2021 23:38:15.174580097 CEST	91.235.134.131	443	192.168.2.3	49754	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jul 9, 2021 23:38:15.264796019 CEST	99.84.15.96	443	192.168.2.3	49757	CN=uxfabric.intuitcdn.net, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Aug 18 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Mon Nov 15 13:00:00 CET 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:15.267203093 CEST	99.84.15.96	443	192.168.2.3	49756	CN=uxfabric.intuitcdn.net, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Aug 18 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Mon Nov 15 13:00:00 CET 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:37.865209103 CEST	91.235.134.131	443	192.168.2.3	49796	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jul 9, 2021 23:38:37.868187904 CEST	91.235.134.131	443	192.168.2.3	49797	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jul 9, 2021 23:38:40.422827959 CEST	99.84.15.81	443	192.168.2.3	49805	CN=*.truste.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Tue Feb 16 01:00:00 CET 2021 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Fri Mar 18 00:59:59 CET 2022 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Jul 9, 2021 23:38:40.423085928 CEST	99.84.15.9	443	192.168.2.3	49802	CN=segment.intuitcdn.net, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Nov 04 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Tue Nov 09 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:40.423928022 CEST	99.84.15.81	443	192.168.2.3	49804	CN=*.truste.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Tue Feb 16 01:00:00 CET 2021 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Fri Mar 18 00:59:59 CET 2022 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Jul 9, 2021 23:38:40.428538084 CEST	99.84.15.9	443	192.168.2.3	49803	CN=segment.intuitcdn.net, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Nov 04 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Tue Nov 09 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:42.815213919 CEST	18.195.42.228	443	192.168.2.3	49808	CN=nexus.ensighten.com, O="Ensighten, Inc", L=SAN JOSE, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 09 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Mon Oct 11 02:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:42.815213919 CEST	18.195.42.228	443	192.168.2.3	49808	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:42.818629980 CEST	18.195.42.228	443	192.168.2.3	49807	CN=nexus.ensighten.com, O="Ensighten, Inc", L=SAN JOSE, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 09 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Mon Oct 11 02:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:42.818629980 CEST	18.195.42.228	443	192.168.2.3	49807	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:44.918764114 CEST	52.211.62.226	443	192.168.2.3	49811	CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Dec 02 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Mon Jan 03 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:44.922208071 CEST	52.211.62.226	443	192.168.2.3	49812	CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Dec 02 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Mon Jan 03 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:45.341116905 CEST	34.254.127.126	443	192.168.2.3	49813	CN=*.adsrvr.org CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3 CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Thu Mar 18 23:45:32 CET 2021 Tue Jul 28 02:00:00 CEST 2020 Wed Mar 18 11:00:00 CET 2009	Wed Apr 20 00:45:32 CEST 2022 Sun Mar 18 01:00:00 CET 2029 Sun Mar 18 11:00:00 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Jul 28 02:00:00 CEST 2020	Sun Mar 18 01:00:00 CET 2029
					CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed Mar 18 11:00:00 CET 2009	Sun Mar 18 11:00:00 CET 2029
Jul 9, 2021 23:38:45.347309113 CEST	34.254.127.126	443	192.168.2.3	49814	CN=*.adsrvr.org CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3 CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Thu Mar 18 23:45:32 CET 2021 Tue Jul 28 02:00:00 CEST 2020 Wed Mar 18 11:00:00 CET 2009	Wed Apr 20 00:45:32 CEST 2022 Sun Mar 18 01:00:00 CET 2029 Sun Mar 18 11:00:00 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Jul 28 02:00:00 CEST 2020	Sun Mar 18 01:00:00 CET 2029
					CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed Mar 18 11:00:00 CET 2009	Sun Mar 18 11:00:00 CET 2029
Jul 9, 2021 23:38:45.541251898 CEST	3.124.119.57	443	192.168.2.3	49817	CN=*.privacy.ensighten.com, O="Ensighten, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Thu Feb 17 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:45.541251898 CEST	3.124.119.57	443	192.168.2.3	49817	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:45.541738033 CEST	3.124.119.57	443	192.168.2.3	49818	CN=*.privacy.ensighten.com, O="Ensighten, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Thu Feb 17 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:45.541738033 CEST	3.124.119.57	443	192.168.2.3	49818	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:45.655695915 CEST	13.35.199.92	443	192.168.2.3	49819	CN=*.websdk.intuit.com, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jul 30 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Mon Sep 20 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:45.655801058 CEST	13.35.199.92	443	192.168.2.3	49820	CN=*.websdk.intuit.com, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jul 30 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Mon Sep 20 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:45.679617882 CEST	172.217.168.38	443	192.168.2.3	49824	CN=*.doubleclick.net CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Tue Jun 22 15:33:28 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Tue Sep 14 15:33:27 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jul 9, 2021 23:38:45.680497885 CEST	172.217.168.38	443	192.168.2.3	49823	CN=*.doubleclick.net CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Tue Jun 22 15:33:28 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Tue Sep 14 15:33:27 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jul 9, 2021 23:38:46.822890997 CEST	172.217.168.38	443	192.168.2.3	49829	CN=*.doubleclick.net CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Tue Jun 22 15:33:28 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Tue Sep 14 15:33:27 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jul 9, 2021 23:38:46.823097944 CEST	172.217.168.38	443	192.168.2.3	49830	CN=*.doubleclick.net CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Tue Jun 22 15:33:28 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Tue Sep 14 15:33:27 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jul 9, 2021 23:38:47.030796051 CEST	157.240.17.15	443	192.168.2.3	49831	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed May 26 02:00:00 CEST 2021 Tue Oct 22 14:00:00 CEST 2013	Wed Aug 25 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.030796051 CEST	157.240.17.15	443	192.168.2.3	49831	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.033266068 CEST	157.240.17.15	443	192.168.2.3	49832	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed May 26 02:00:00 CEST 2021 Tue Oct 22 14:00:00 CEST 2013	Wed Aug 25 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.033266068 CEST	157.240.17.15	443	192.168.2.3	49832	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.082576036 CEST	99.84.15.94	443	192.168.2.3	49835	CN=*.decibelinsight.net CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Mon Mar 15 01:00:00 CET 2021 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Thu Apr 14 01:59:59 CEST 2022 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Jul 9, 2021 23:38:47.084650040 CEST	99.84.15.110	443	192.168.2.3	49838	CN=*.appdynamics.com, O=AppDynamics LLC, L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Jun 21 02:00:00 CEST 2021 Wed Apr 14 02:00:00 CEST 2021	Sat Jul 23 01:59:59 CEST 2022 Mon Apr 14 01:59:59 CEST 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.084650040 CEST	99.84.15.110	443	192.168.2.3	49838	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Apr 14 02:00:00 CEST 2021	Mon Apr 14 01:59:59 CEST 2031		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.086121082 CEST	99.84.15.110	443	192.168.2.3	49837	CN=*.appdynamics.com, O=AppDynamics LLC, L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Jun 21 02:00:00 CEST 2021 Wed Apr 14 02:00:00 CEST 2021	Sat Jul 23 01:59:59 CEST 2022 Mon Apr 14 01:59:59 CEST 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.086121082 CEST	99.84.15.110	443	192.168.2.3	49837	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Apr 14 02:00:00 CEST 2021	Mon Apr 14 01:59:59 CEST 2031		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.088012934 CEST	99.84.15.94	443	192.168.2.3	49836	CN=*.decibelinsight.net CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Mon Mar 15 01:00:00 CET 2021 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Thu Apr 14 01:59:59 CEST 2022 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Jul 9, 2021 23:38:47.095484972 CEST	104.244.42.69	443	192.168.2.3	49841	CN=t.co, O="Twitter, Inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Feb 05 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Sat Feb 05 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.095484972 CEST	104.244.42.69	443	192.168.2.3	49841	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.095733881 CEST	104.244.42.67	443	192.168.2.3	49840	CN=*.twitter.com, O="Twitter, Inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Feb 05 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Sat Feb 05 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.095733881 CEST	104.244.42.67	443	192.168.2.3	49840	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.095901966 CEST	104.244.42.67	443	192.168.2.3	49839	CN=*.twitter.com, O="Twitter, Inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Feb 05 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Sat Feb 05 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.095901966 CEST	104.244.42.67	443	192.168.2.3	49839	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.098470926 CEST	104.244.42.69	443	192.168.2.3	49842	CN=t.co, O="Twitter, Inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Feb 05 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Sat Feb 05 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.098470926 CEST	104.244.42.69	443	192.168.2.3	49842	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.367054939 CEST	172.217.168.34	443	192.168.2.3	49843	CN=*.g.doubleclick.net CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Tue Jun 22 15:35:26 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Tue Sep 14 15:35:25 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jul 9, 2021 23:38:47.368315935 CEST	172.217.168.34	443	192.168.2.3	49844	CN=*.g.doubleclick.net CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Tue Jun 22 15:35:26 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Tue Sep 14 15:35:25 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jul 9, 2021 23:38:47.697396040 CEST	18.198.240.31	443	192.168.2.3	49848	CN=*.decibelinsight.net CN=RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Dec 21 01:00:00 CET 2020 Thu Jul 16 14:25:27 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Sat Jan 22 00:59:59 CET 2022 Thu Jun 01 01:59:59 CEST 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jul 16 14:25:27 CEST 2020	Thu Jun 01 01:59:59 CEST 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:47.698359013 CEST	18.198.240.31	443	192.168.2.3	49849	CN=*.decibelinsight.net CN=RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Dec 21 01:00:00 CET 2020 Thu Jul 16 14:25:27 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Sat Jan 22 00:59:59 CET 2022 Thu Jun 01 01:59:59 CEST 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jul 16 14:25:27 CEST 2020	Thu Jun 01 01:59:59 CEST 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:47.800421953 CEST	44.239.250.146	443	192.168.2.3	49845	CN=trinity.platform.intuit.com, OU=Intuit Data Fabric, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Jul 28 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Thu Aug 12 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:47.848453045 CEST	108.174.11.69	443	192.168.2.3	49846	CN=px.ads.linkedin.com, O=LinkedIn Corporation, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Apr 15 02:00:00 CEST 2021 Wed Sep 23 02:00:00 CEST 2020	Sat Oct 16 01:59:59 CEST 2021 Mon Sep 23 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.848453045 CEST	108.174.11.69	443	192.168.2.3	49846	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 23 02:00:00 CEST 2020	Mon Sep 23 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.861697912 CEST	108.174.11.69	443	192.168.2.3	49847	CN=px.ads.linkedin.com, O=LinkedIn Corporation, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Apr 15 02:00:00 CEST 2021 Wed Sep 23 02:00:00 CEST 2020	Sat Oct 16 01:59:59 CEST 2021 Mon Sep 23 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:47.861697912 CEST	108.174.11.69	443	192.168.2.3	49847	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 23 02:00:00 CEST 2020	Mon Sep 23 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:48.000679016 CEST	52.19.186.105	443	192.168.2.3	49855	CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Dec 02 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Mon Jan 03 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:48.001615047 CEST	52.19.186.105	443	192.168.2.3	49854	CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Dec 02 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Mon Jan 03 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:38:48.115397930 CEST	31.13.86.36	443	192.168.2.3	49856	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed May 26 02:00:00 CEST 2021 Tue Oct 22 14:00:00 CEST 2013	Wed Aug 25 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:48.115397930 CEST	31.13.86.36	443	192.168.2.3	49856	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:48.116028070 CEST	31.13.86.36	443	192.168.2.3	49859	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed May 26 02:00:00 CEST 2021 Tue Oct 22 14:00:00 CEST 2013	Wed Aug 25 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:48.116028070 CEST	31.13.86.36	443	192.168.2.3	49859	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:50.148801088 CEST	54.148.149.218	443	192.168.2.3	49860	CN=*.eum-appdynamics.com, O=AppDynamics LLC, L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Jun 14 02:00:00 CEST 2021 Wed Apr 14 02:00:00 CEST 2021	Sat Jul 16 01:59:59 CEST 2022 Mon Apr 14 01:59:59 CEST 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:50.148801088 CEST	54.148.149.218	443	192.168.2.3	49860	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Apr 14 02:00:00 CEST 2021	Mon Apr 14 01:59:59 CEST 2031		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:38:50.620017052 CEST	35.163.214.119	443	192.168.2.3	49864	CN=*.platform.intuit.ca, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Apr 13 02:00:00 CEST 2021 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Tue Apr 19 01:59:59 CEST 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:39:25.591928005 CEST	44.233.214.243	443	192.168.2.3	49883	CN=experimentation.us.api.intuit.com, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sun Dec 06 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Wed Dec 15 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:39:25.592093945 CEST	44.233.214.243	443	192.168.2.3	49884	CN=experimentation.us.api.intuit.com, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sun Dec 06 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Wed Dec 15 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:39:25.874875069 CEST	99.84.15.42	443	192.168.2.3	49885	CN=*.d41.co, O=The Dun & Bradstreet Corporation, L=Short Hills, ST=New Jersey, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Feb 18 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Tue Mar 22 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:25.874875069 CEST	99.84.15.42	443	192.168.2.3	49885	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:25.876795053 CEST	99.84.15.42	443	192.168.2.3	49886	CN=*.d41.co, O=The Dun & Bradstreet Corporation, L=Short Hills, ST=New Jersey, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Feb 18 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Tue Mar 22 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:25.876795053 CEST	99.84.15.42	443	192.168.2.3	49886	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:25.977004051 CEST	151.101.1.140	443	192.168.2.3	49899	CN=www.redditstatic.com, O=Reddit Inc., L=SAN FRANCISCO, ST=CALIFORNIA, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sun May 23 02:00:00 CEST 2021 Thu Sep 24 02:00:00 CEST 2020	Fri Nov 19 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:25.977004051 CEST	151.101.1.140	443	192.168.2.3	49899	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:25.977442980 CEST	151.101.1.140	443	192.168.2.3	49900	CN=www.redditstatic.com, O=Reddit Inc., L=SAN FRANCISCO, ST=CALIFORNIA, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sun May 23 02:00:00 CEST 2021 Thu Sep 24 02:00:00 CEST 2020	Fri Nov 19 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:25.977442980 CEST	151.101.1.140	443	192.168.2.3	49900	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.026331902 CEST	34.194.154.95	443	192.168.2.3	49887	CN=*.d41.co, O=The Dun & Bradstreet Corporation, L=Short Hills, ST=New Jersey, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Feb 18 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Tue Mar 22 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.026331902 CEST	34.194.154.95	443	192.168.2.3	49887	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.026627064 CEST	34.194.154.95	443	192.168.2.3	49888	CN=*.d41.co, O=The Dun & Bradstreet Corporation, L=Short Hills, ST=New Jersey, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Feb 18 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Tue Mar 22 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.026627064 CEST	34.194.154.95	443	192.168.2.3	49888	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.043312073 CEST	172.217.168.38	443	192.168.2.3	49903	CN=*.doubleclick.net CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Tue Jun 22 15:33:28 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Tue Sep 14 15:33:27 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jul 9, 2021 23:39:26.088300943 CEST	172.217.168.38	443	192.168.2.3	49904	CN=*.doubleclick.net CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Tue Jun 22 15:33:28 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Tue Sep 14 15:33:27 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jul 9, 2021 23:39:26.171904087 CEST	52.94.232.32	443	192.168.2.3	49893	CN=s.amazon-adsystem.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Fri Aug 28 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Fri Aug 20 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Jul 9, 2021 23:39:26.172297955 CEST	52.94.232.32	443	192.168.2.3	49894	CN=s.amazon-adsystem.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Fri Aug 28 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Fri Aug 20 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Jul 9, 2021 23:39:26.267622948 CEST	52.13.47.186	443	192.168.2.3	49898	CN=*.platform.intuit.ca, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Apr 13 02:00:00 CEST 2021 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Tue Apr 19 01:59:59 CEST 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:39:26.269032001 CEST	52.13.47.186	443	192.168.2.3	49897	CN=*.platform.intuit.ca, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Apr 13 02:00:00 CEST 2021 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Tue Apr 19 01:59:59 CEST 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:39:26.311631918 CEST	151.101.1.140	443	192.168.2.3	49911	CN=*.reddit.com, O=Reddit Inc., L=SAN FRANCISCO, ST=CALIFORNIA, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sun May 23 02:00:00 CEST 2021 Thu Sep 24 02:00:00 CEST 2020	Fri Nov 19 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.311631918 CEST	151.101.1.140	443	192.168.2.3	49911	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.312742949 CEST	151.101.1.140	443	192.168.2.3	49912	CN=*.reddit.com, O=Reddit Inc., L=SAN FRANCISCO, ST=CALIFORNIA, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sun May 23 02:00:00 CEST 2021 Thu Sep 24 02:00:00 CEST 2020	Fri Nov 19 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.312742949 CEST	151.101.1.140	443	192.168.2.3	49912	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.448096991 CEST	52.206.83.104	443	192.168.2.3	49908	CN=*.d41.co, O=The Dun & Bradstreet Corporation, L=Short Hills, ST=New Jersey, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Feb 18 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Tue Mar 22 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.448096991 CEST	52.206.83.104	443	192.168.2.3	49908	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.452200890 CEST	52.206.83.104	443	192.168.2.3	49907	CN=*.d41.co, O=The Dun & Bradstreet Corporation, L=Short Hills, ST=New Jersey, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Feb 18 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Tue Mar 22 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.452200890 CEST	52.206.83.104	443	192.168.2.3	49907	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.455972910 CEST	151.101.1.192	443	192.168.2.3	49919	CN=liveperson.net CN=GlobalSign Atlas R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Atlas R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed May 12 00:55:43 CEST 2021 Tue Jul 28 02:00:00 CEST 2020	Mon Jun 13 00:55:42 CEST 2022 Sun Mar 18 01:00:00 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.455972910 CEST	151.101.1.192	443	192.168.2.3	49919	CN=GlobalSign Atlas R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Jul 28 02:00:00 CEST 2020	Sun Mar 18 01:00:00 CET 2029		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.456789970 CEST	151.101.1.192	443	192.168.2.3	49920	CN=liveperson.net CN=GlobalSign Atlas R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Atlas R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed May 12 00:55:43 CEST 2021 Tue Jul 28 02:00:00 CEST 2020	Mon Jun 13 00:55:42 CEST 2022 Sun Mar 18 01:00:00 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.456789970 CEST	151.101.1.192	443	192.168.2.3	49920	CN=GlobalSign Atlas R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Jul 28 02:00:00 CEST 2020	Sun Mar 18 01:00:00 CET 2029		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.469873905 CEST	142.0.160.13	443	192.168.2.3	49910	CN=*.t.eloqua.com, OU=Oracle ELOQUA TORONTO, O=Oracle Corporation, L=Redwood City, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Mar 09 01:00:00 CET 2020 Fri Mar 08 13:00:00 CET 2013	Fri Apr 08 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.469873905 CEST	142.0.160.13	443	192.168.2.3	49910	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.478458881 CEST	142.0.160.13	443	192.168.2.3	49909	CN=*.t.eloqua.com, OU=Oracle ELOQUA TORONTO, O=Oracle Corporation, L=Redwood City, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Mar 09 01:00:00 CET 2020 Fri Mar 08 13:00:00 CET 2013	Fri Apr 08 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:26.478458881 CEST	142.0.160.13	443	192.168.2.3	49909	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:39:27.279411077 CEST	18.194.201.176	443	192.168.2.3	49929	CN=*.tealiumiq.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Fri Oct 23 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Tue Nov 23 00:59:59 CET 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Jul 9, 2021 23:39:27.392055988 CEST	44.238.207.51	443	192.168.2.3	49924	CN=*.intuit.com, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Sep 08 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Sun Oct 10 02:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:39:27.395706892 CEST	44.238.207.51	443	192.168.2.3	49925	CN=*.intuit.com, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Sep 08 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Sun Oct 10 02:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:39:27.443288088 CEST	44.225.202.106	443	192.168.2.3	49926	CN=trinity.platform.intuit.com, OU=Intuit Data Fabric, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Jul 28 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Thu Aug 12 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:39:27.454427958 CEST	44.235.182.173	443	192.168.2.3	49927	CN=*.platform.intuit.ca, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Apr 13 02:00:00 CEST 2021 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Tue Apr 19 01:59:59 CEST 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:39:27.477821112 CEST	44.235.182.173	443	192.168.2.3	49928	CN=*.platform.intuit.ca, OU=Technology Operations, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Apr 13 02:00:00 CEST 2021 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Tue Apr 19 01:59:59 CEST 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:39:27.761193037 CEST	99.84.15.117	443	192.168.2.3	49933	CN=fs.liveperson.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Sun Aug 23 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Thu Sep 23 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Jul 9, 2021 23:39:27.761828899 CEST	99.84.15.117	443	192.168.2.3	49934	CN=fs.liveperson.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Sun Aug 23 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Thu Sep 23 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Jul 9, 2021 23:39:27.769591093 CEST	44.225.202.106	443	192.168.2.3	49930	CN=trinity.platform.intuit.com, OU=Intuit Data Fabric, O=INTUIT INC., L=San Diego, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Jul 28 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Thu Aug 12 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jul 9, 2021 23:40:08.917864084 CEST	216.58.215.246	443	192.168.2.3	49961	CN=edgestatic.com CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Tue Jun 22 15:34:41 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Tue Sep 14 15:34:40 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jul 9, 2021 23:40:08.919608116 CEST	216.58.215.246	443	192.168.2.3	49962	CN=edgestatic.com CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Tue Jun 22 15:34:41 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Tue Sep 14 15:34:40 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jul 9, 2021 23:40:08.920819044 CEST	172.217.168.33	443	192.168.2.3	49963	CN=*.googleusercontent.com CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Tue Jun 22 17:08:13 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Tue Sep 14 17:08:12 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jul 9, 2021 23:40:08.923790932 CEST	172.217.168.33	443	192.168.2.3	49964	CN=*.googleusercontent.com CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Tue Jun 22 17:08:13 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Tue Sep 14 17:08:12 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jul 9, 2021 23:40:09.038033962 CEST	216.58.215.246	443	192.168.2.3	49960	CN=edgestatic.com CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Tue Jun 22 15:34:41 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Tue Sep 14 15:34:40 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jul 9, 2021 23:40:17.551404953 CEST	142.250.153.154	443	192.168.2.3	49967	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Jun 22 15:35:18 CEST 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Sep 14 15:35:17 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:40:17.551404953 CEST	142.250.153.154	443	192.168.2.3	49967	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:40:17.552767992 CEST	142.250.153.154	443	192.168.2.3	49968	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Jun 22 15:35:18 CEST 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Sep 14 15:35:17 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jul 9, 2021 23:40:17.552767992 CEST	142.250.153.154	443	192.168.2.3	49968	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 3448 Parent PID: 792

General

Start time:	23:38:09
Start date:	09/07/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff7f8c00000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: iexplore.exe PID: 1808 Parent PID: 3448

General

Start time:	23:38:10
Start date:	09/07/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3448 CREDAT:17410 /prefetch:2
Imagebase:	0x1360000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Disassembly

Reset < >

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Network device logs, Network intrusion detection system, Packet capture, Process use of network, SSL/TLS inspection, Web proxy
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Data loss prevention, File monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system. Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	API monitoring, PowerShell logs, Process command-line parameters, Process monitoring
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Windows Analysis Report https://c31.qbo.intuit.com/c31/v1929.214/0/login?redirect=true&pagereq=qboHelp&cid=oopcu-redirect

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

Process Tree

Malware Configuration

Yara Overview

Sigma Overview

Jbx Signature Overview

Phishing:

Compliance:

Spreading:

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 3448 Parent PID: 792

General

Chronological Activities

Analysis Process: iexplore.exe PID: 1808 Parent PID: 3448

General

Chronological Activities

Disassembly