Play interactive tour

Edit tour

Analysis Report https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7

Overview

General Information

Sample URL:	https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7
Analysis ID:	399808
Infos:
Most interesting Screenshot:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

HTML title does not match URL

Classification

Startup

System is w10x64

iexplore.exe (PID: 4124 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 3060 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4124 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.freeconferencecall.com/login-3?country_code=ch	HTTP Parser: Iframe src: https://www.youtube.com/embed/IO_a79PGhA4?rel=0
Source: https://www.freeconferencecall.com/login-3?country_code=ch	HTTP Parser: Iframe src: https://www.youtube.com/embed/IO_a79PGhA4?rel=0
Source: https://www.freeconferencecall.com/screen-sharing?country_code=ch	HTTP Parser: Iframe src: https://www.youtube.com/embed/_ty1kvFAO84?rel=0
Source: https://www.freeconferencecall.com/screen-sharing?country_code=ch	HTTP Parser: Iframe src: https://www.youtube.com/embed/_ty1kvFAO84?rel=0
Source: https://www.freeconferencecall.com/free-recordings?country_code=ch	HTTP Parser: Iframe src: https://www.youtube.com/embed/_ty1kvFAO84?rel=0
Source: https://www.freeconferencecall.com/free-recordings?country_code=ch	HTTP Parser: Iframe src: https://www.youtube.com/embed/_ty1kvFAO84?rel=0

Source: https://www.freeconferencecall.com/international-conferencing?country_code=ch	HTTP Parser: Title: International Conferencing \| FreeConferenceCall.com does not match URL
Source: https://www.freeconferencecall.com/international-conferencing?country_code=ch	HTTP Parser: Title: International Conferencing \| FreeConferenceCall.com does not match URL
Source: https://www.freeconferencecall.com/login	HTTP Parser: Title: Log in page \| FreeConferenceCall.com does not match URL
Source: https://www.freeconferencecall.com/login	HTTP Parser: Title: Log in page \| FreeConferenceCall.com does not match URL
Source: https://www.freeconferencecall.com/login-3?country_code=ch	HTTP Parser: Title: Log in page \| FreeConferenceCall.com does not match URL
Source: https://www.freeconferencecall.com/login-3?country_code=ch	HTTP Parser: Title: Log in page \| FreeConferenceCall.com does not match URL
Source: https://www.freeconferencecall.com/audio-conferencing?country_code=ch	HTTP Parser: Title: Audio Conferencing \| FreeConferenceCall.com does not match URL
Source: https://www.freeconferencecall.com/audio-conferencing?country_code=ch	HTTP Parser: Title: Audio Conferencing \| FreeConferenceCall.com does not match URL
Source: https://www.freeconferencecall.com/video-conferencing?country_code=ch	HTTP Parser: Title: Video Conferencing \| FreeConferenceCall.com does not match URL
Source: https://www.freeconferencecall.com/video-conferencing?country_code=ch	HTTP Parser: Title: Video Conferencing \| FreeConferenceCall.com does not match URL
Source: https://www.freeconferencecall.com/features	HTTP Parser: Title: Features \| FreeConferenceCall.com does not match URL
Source: https://www.freeconferencecall.com/features	HTTP Parser: Title: Features \| FreeConferenceCall.com does not match URL

Source: https://www.freeconferencecall.com/international-conferencing?country_code=ch	HTTP Parser: No <meta name="author".. found
Source: https://www.freeconferencecall.com/international-conferencing?country_code=ch	HTTP Parser: No <meta name="author".. found
Source: https://www.freeconferencecall.com/login	HTTP Parser: No <meta name="author".. found
Source: https://www.freeconferencecall.com/login	HTTP Parser: No <meta name="author".. found
Source: https://www.freeconferencecall.com/login-3?country_code=ch	HTTP Parser: No <meta name="author".. found
Source: https://www.freeconferencecall.com/login-3?country_code=ch	HTTP Parser: No <meta name="author".. found

Source: https://www.freeconferencecall.com/international-conferencing?country_code=ch	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freeconferencecall.com/international-conferencing?country_code=ch	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freeconferencecall.com/login	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freeconferencecall.com/login	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freeconferencecall.com/login-3?country_code=ch	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freeconferencecall.com/login-3?country_code=ch	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freeconferencecall.com/screen-sharing?country_code=ch	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freeconferencecall.com/screen-sharing?country_code=ch	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freeconferencecall.com/audio-conferencing?country_code=ch	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freeconferencecall.com/audio-conferencing?country_code=ch	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freeconferencecall.com/video-conferencing?country_code=ch	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freeconferencecall.com/video-conferencing?country_code=ch	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freeconferencecall.com/free-recordings?country_code=ch	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freeconferencecall.com/free-recordings?country_code=ch	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freeconferencecall.com/features	HTTP Parser: No <meta name="copyright".. found
Source: https://www.freeconferencecall.com/features	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 12.7.192.60:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 12.7.192.60:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.44:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.44:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.44:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.44:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.102.1.157:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.102.1.157:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.19.98:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.19.98:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.228.48:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.228.48:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 12.7.192.60:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.224.32:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.224.32:443 -> 192.168.2.5:49754 version: TLS 1.2

Source: J4MUFDO8.htm.2.dr	String found in binary or memory: "https://www.facebook.com/FreeConferenceCallCom/", equals www.facebook.com (Facebook)
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: "https://www.linkedin.com/company/freeconferencecall.com/", equals www.linkedin.com (Linkedin)
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: "https://www.youtube.com/user/freeconf", equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: "html5_qoe_intercept"):this.lj?(t=t.vss_host\|\|"s.youtube.com",this.Z("www_for_videostats")&&"s.youtube.com"===t&&(t=pD(this.xa)\|\|"www.youtube.com")):t="video.google.com";this.aj=t;qD(this,a,!0);this.L=new xC;g.H(this,this.L);t=b?b.innertubeApiKey:UC("",a.innertube_api_key);r=b?b.innertubeApiVersion:UC("",a.innertube_api_version);p=b?b.innertubeContextClientVersion:UC("",a.innertube_context_client_version);this.ue={innertubeApiKey:Fo("INNERTUBE_API_KEY")\|\|t,innertubeApiVersion:Fo("INNERTUBE_API_VERSION")\|\| equals www.youtube.com (Youtube)
Source: 1124938230859430[2].js1.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsGetTier");e.exports=function(b,c){c=a(c);c=c==null?"www.facebook.com":"www."+c+".facebook.com";return"https://"+c+"/signals/iwl.js?pixel_id="+b}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}};e.exports=new h(function(d,e){function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=function(){n.removeItem(m),a.close()};e.src=i(c,g.ENDPOINT);b.body&&b.body.appendChild(e)}var o=!1,p=function(a){return!!(e&&e.pixelsByID&&Object.prototype.hasOwnProperty.call(e.pixelsByID,a))};function q(){if(o)return;var b=n.getItem(m);if(!b)return;b=JSON.parse(b);var c=b.pixelID,d=b.graphToken,e=b.sessionStartTime;o=!0;h(c,function(){var b=p(c)?c:null;a.FacebookIWL.init(b,d,e)})}function r(b){if(o)return;h(b,func
Source: base[1].js.2.dr	String found in binary or memory: (g.Rm(b,"www.youtube.com"),c=b.toString()):c=yv(c);b=new kx(c);b.set("cmo=pf","1");d&&b.set("cmo=td","a1.googlevideo.com");return b}; equals www.youtube.com (Youtube)
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: /https://www.youtube.com/embed/IO_a79PGhA4?rel=0 equals www.youtube.com (Youtube)
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: /https://www.youtube.com/embed/_ty1kvFAO84?rel=0 equals www.youtube.com (Youtube)
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: <a href='https://www.facebook.com/FreeConferenceCallCom/' title='Facebook'> equals www.facebook.com (Facebook)
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: <a href='https://www.linkedin.com/company/freeconferencecall.com' title='LinkedIn'> equals www.linkedin.com (Linkedin)
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: <a href='https://www.youtube.com/user/freeconf' rel='noopener' target='_blank' title='YouTube'> equals www.youtube.com (Youtube)
Source: login-3[1].htm.2.dr	String found in binary or memory: <iframe allowfullscreen class='embed-responsive-item' src='https://www.youtube.com/embed/IO_a79PGhA4?rel=0'></iframe> equals www.youtube.com (Youtube)
Source: free-recordings[1].htm.2.dr	String found in binary or memory: <iframe allowfullscreen='' class='embed-responsive-item center-block' src='https://www.youtube.com/embed/_ty1kvFAO84?rel=0'></iframe> equals www.youtube.com (Youtube)
Source: screen-sharing[1].htm.2.dr	String found in binary or memory: <iframe class='embed-responsive-item' src='https://www.youtube.com/embed/_ty1kvFAO84?rel=0' title='Online Meetings from FreeConferenceCall.com YouTube video'></iframe> equals www.youtube.com (Youtube)
Source: terms-of-service[1].htm.2.dr	String found in binary or memory: <p>Free Conferencing may collect Personal Information about you when you sign in to a Free Conferencing app or website using a Facebook account. This data we collect is determined and governed by the Facebook Privacy Policy and Terms of Service as found on www.facebook.com.</p> equals www.facebook.com (Facebook)
Source: base[1].js.2.dr	String found in binary or memory: Hha,Iha);h=this.loaderUrl;var l=void 0===l?!1:l;this.rj=ov(qv(h,Jha,null),h,l,"Trusted Ad Domain URL");this.ra=T(!1,a.privembed);this.protocol=0===this.Fb.indexOf("http:")?"http":"https";this.xa=tv((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|tv(this.Fb)\|\|this.protocol+"://www.youtube.com/";l=b?b.eventLabel:a.el;h="detailpage";"adunit"===l?h=this.l?"embedded":"detailpage":"embedded"===l\|\|this.u?h=SC(h,l,Kha):l&&(h="embedded");this.Ca=h;jq();l=null;h=b?b.playerStyle:a.ps;var m=g.fb(YC,h);!h\|\|m&& equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.EM.prototype.l=function(a){var b=this;Yoa(this);var c=a.Rz,d=this.api.T();"GENERIC_WITHOUT_LINK"!==c\|\|d.C?"TOO_MANY_REQUESTS"===c?(d=this.api.getVideoData(),this.Pc(HM(this,"TOO_MANY_REQUESTS_WITH_LINK",d.em(),void 0,void 0,void 0,!1))):"HTML5_NO_AVAILABLE_FORMATS_FALLBACK"!==c\|\|d.C?this.Pc(g.FM(a.errorMessage)):this.Pc(HM(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c= equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.QD=function(a){var b=g.AD(a);!a.Z("yt_embeds_disable_new_error_lozenge_url")&&Nha.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.k.clone=function(){var a=new Vm;a.u=this.u;this.i&&(a.i=this.i.clone(),a.l=this.l);return a};var bn="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Vda=/\bocr\b/;var Wda=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var vD={uZ:"LIVING_ROOM_APP_MODE_UNSPECIFIED",rZ:"LIVING_ROOM_APP_MODE_MAIN",qZ:"LIVING_ROOM_APP_MODE_KIDS",sZ:"LIVING_ROOM_APP_MODE_MUSIC",tZ:"LIVING_ROOM_APP_MODE_UNPLUGGED",pZ:"LIVING_ROOM_APP_MODE_GAMING"};en.prototype.set=function(a,b){b=void 0===b?!0:b;0<=a&&52>a&&0===a%1&&this.i[a]!=b&&(this.i[a]=b,this.l=-1)}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.AD(this);d&&"www.youtube.com"===c?d="https://youtu.be/"+a:g.jD(this)?(d="https://"+c+"/fire",b.v=a):(d=this.protocol+"://"+c+"/watch",b.v=a,zq&&(a=Bo())&&(b.ebc=a));return g.Nd(d,b)}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.zD=function(a){a=pD(a.xa);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: oha=function(a,b){if(!a.i["0"]){var c=new IA("0","fakesb",void 0,new EA(0,0,0,void 0,void 0,"auto"),null,null,1);a.i["0"]=b?new Qz(new kx("http://www.youtube.com/videoplayback"),c,"fake"):new AA(new kx("http://www.youtube.com/videoplayback"),c,new xz(0,0),new xz(0,0),0,NaN)}}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: sJ.prototype.replace=function(a,b){a=g.q(a);for(var c=a.next();!c.done;c=a.next())delete this.i[c.value.encryptedTokenJarContents];ela(this,b)};tJ.prototype.Wn=function(a){var b,c,d=null===(b=a.responseContext)\|\|void 0===b?void 0:b.locationPlayabilityToken;void 0!==d&&(this.locationPlayabilityToken=d,this.i=void 0,"TVHTML5"===(null===(c=a.responseContext)\|\|void 0===c?void 0:c.clientName)?(this.localStorage=fla(this))&&this.localStorage.set("yt-location-playability-token",d,15552E3):g.xo("YT_CL",JSON.stringify({P5:d}),15552E3,void 0,!0))};var wJ;g.v(vJ,cs);vJ.prototype.xv=function(a,b){a=cs.prototype.xv.call(this,a,b);return Object.assign(Object.assign({},a),this.i)};var vla=/[&\?]action_proxy=1/,ula=/[&\?]token=([\w-])/,wla=/[&\?]video_id=([\w-])/,xla=/[&\?]index=([\d-])/,yla=/[&\?]m_pos_ms=([\d-])/,Bla=/[&\?]vvt=([\w-]*)/,pla="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),zla="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),rla={android:"ANDROID", equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: this.W("highrepfallback");else if(a.i){b=this.l?this.l.l.l:null;if(hxa(a)&&b&&b.isLocked())var d="FORMAT_UNAVAILABLE";else if(!this.i.C&&"auth"===a.errorCode&&"429"===a.details.rc){d="TOO_MANY_REQUESTS";var e="6"}this.W("playererror",a.errorCode,d,g.gB(a.details),e)}else this.W("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),BU(this,a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+ equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: www.freeconferencecall.com

Source: support[1].htm.2.dr	String found in binary or memory: http://audacity.sourceforge.net/
Source: vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	String found in binary or memory: http://daneden.me/animate
Source: vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	String found in binary or memory: http://demos.krajee.com
Source: fontawesome-webfont[1].eot.2.dr, vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	String found in binary or memory: http://fontawesome.io
Source: vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: fontawesome-webfont[1].eot.2.dr	String found in binary or memory: http://fontawesome.io/license/
Source: fontawesome-webfont[1].eot.2.dr	String found in binary or memory: http://fontawesome.iohttp://fontawesome.iohttp://fontawesome.io/license/http://fontawesome.io/licens
Source: vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: vendor_i18n-ff23c0e31a78753eb799d8272edca6006d4e55002cacd0358fccce151cac8f31[1].js.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: vendor_i18n-ff23c0e31a78753eb799d8272edca6006d4e55002cacd0358fccce151cac8f31[1].js.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: vendor_i18n-ff23c0e31a78753eb799d8272edca6006d4e55002cacd0358fccce151cac8f31[1].js.2.dr	String found in binary or memory: http://parsleyjs.org
Source: vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr, application_wide_page_specific-737f2145f07ac706da84a69ccc5c16cd44a68a7602f848b615bc9ef6db36842d[1].js.2.dr	String found in binary or memory: http://plugins.krajee.com
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: http://schema.org
Source: vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	String found in binary or memory: http://silviomoreto.github.io/bootstrap-select)
Source: vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: application_wide_page_specific-737f2145f07ac706da84a69ccc5c16cd44a68a7602f848b615bc9ef6db36842d[1].js.2.dr	String found in binary or memory: http://www.dropzonejs.com)
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: http://www.mozilla.com/firefox/
Source: base[1].js.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://accounts.livechatinc.com/customer?license_id=7519271&flow=button&response_type=token&client_
Source: base[1].js.2.dr	String found in binary or memory: https://admin.youtube.com
Source: js[1].js.2.dr	String found in binary or memory: https://adservice.google.com/ddm/regclk
Source: js[1].js.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: analytics[1].js.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://app.freeconferencecall.com/nc/download?system_platform=win
Source: f[1].txt.2.dr	String found in binary or memory: https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
Source: js[1].js.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: open_chat[1].htm.2.dr	String found in binary or memory: https://cdn.livechatinc.com/direct-link/livechat-chat-with-us.png
Source: open_chat[1].htm.2.dr	String found in binary or memory: https://cdn.livechatinc.com/widget/
Source: open_chat[1].htm.2.dr	String found in binary or memory: https://cdn.livechatinc.com/widget/static/js/7.40e57e4a.chunk.js
Source: open_chat[1].htm.2.dr	String found in binary or memory: https://cdn.livechatinc.com/widget/static/js/iframe.f90af3a3.chunk.js
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://community.freeconferencecall.com
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: base[1].js.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: open_chat[1].htm.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Noto
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosans/v12/o-0IIpQlx3QUlC5A4PNr6zRG.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosans/v12/o-0NIpQlx3QUlC5A4PNjXhFVatyH.woff)
Source: vendor_i18n-ff23c0e31a78753eb799d8272edca6006d4e55002cacd0358fccce151cac8f31[1].js.2.dr	String found in binary or memory: https://github.com/Eonasdan/bootstrap-datetimepicker
Source: vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	String found in binary or memory: https://github.com/Eonasdan/bootstrap-datetimepicker/
Source: vendor_i18n-ff23c0e31a78753eb799d8272edca6006d4e55002cacd0358fccce151cac8f31[1].js.2.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	String found in binary or memory: https://github.com/silviomoreto/bootstrap-select/blob/master/LICENSE)
Source: vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: J4MUFDO8.htm.2.dr, international-conferencing[1].htm.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/free-conference-call/id1076834814?mt=8
Source: js[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: js[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: base[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/osd.js
Source: J4MUFDO8.htm.2.dr, international-conferencing[1].htm.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.freeconferencecall.fccmeetingclient
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://qa-www.freeconferencecall.com/auth/apple/callback
Source: application_i18n-781dcc97f2af8886917e4f39590f98f8ef5074a18b34bce0fe9e90f5638142ff[1].js.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: base[1].js.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: open_chat[1].htm.2.dr	String found in binary or memory: https://secure.livechatinc.com/
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://secure.livechatinc.com/licence/7519271/v2/open_chat.cgi?license=7519271&group=0&embedded=1&w
Source: analytics[1].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: remote[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/7640706
Source: analytics[1].js.2.dr, f[1].txt.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://twitter.com/FreeConfCall
Source: base[1].js.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://www.apple.com/safari/
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://www.crunchbase.com/organization/freeconferencecall-com
Source: {FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.freecencecall.com/audio-conferencing?0RRMhcQwN7BdUAYqlKbkd1R3W1vwtwfmlv5Y9_57neE7Ra4_3uf
Source: {FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.freecencecall.com/featuresonal-confe0RRMhcQwN7BdUAYqlKbkd1R3W1vwtwfmlv5Y9_57neE7Ra4_3ufD
Source: {FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.freecencecall.com/free-recordings?cou0RRMhcQwN7BdUAYqlKbkd1R3W1vwtwfmlv5Y9_57neE7Ra4_3uf
Source: {FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.freecencecall.com/international-confe0RRMhcQwN7BdUAYqlKbkd1R3W1vwtwfmlv5Y9_57neE7Ra4_3uf
Source: {FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.freecencecall.com/login-3?country_code=chRoot
Source: {FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.freecencecall.com/loginRoot
Source: {FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.freecencecall.com/ogin-3?country_code=chRoot
Source: {FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.freecencecall.com/screen-sharing?coun0RRMhcQwN7BdUAYqlKbkd1R3W1vwtwfmlv5Y9_57neE7Ra4_3uf
Source: {FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.freecencecall.com/video-conferencing?0RRMhcQwN7BdUAYqlKbkd1R3W1vwtwfmlv5Y9_57neE7Ra4_3uf
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.co
Source: terms-of-service[1].htm.2.dr	String found in binary or memory: https://www.freeconferencecall.com
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://www.freeconferencecall.com/
Source: {FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.freeconferencecall.com/audio-conferenRoot
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/audio-conferencing?country_code=ch
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/audio-conferencing?country_code=chVAudio
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/fcc_favicon.ico
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.freeconferencecall.com/fcc_favicon.ico~
Source: ~DFB5ECA03928DF698F.TMP.1.dr, localization.en.0.f18dd4d9fb0b965b3781bba9707f6877_ff07b7dc4d1ea4ae21b8ebc7bdbb0031[1].js.2.dr, features[1].htm.2.dr	String found in binary or memory: https://www.freeconferencecall.com/features
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/featuresBFeatures
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/featuresonal-conferencing?country_code=ch
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/featuresonal-conferencing?country_code=chx
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/free-recordings?country_code=ch
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/free-recordings?country_code=chh
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://www.freeconferencecall.com/images/application_wide/general/logo/freeconferencecall-logo.svg
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://www.freeconferencecall.com/images/fcc_logo_fb.png
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/international-conferencing?country_code=ch
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/international-conferencing?country_code=chfInternational
Source: login[1].htm.2.dr	String found in binary or memory: https://www.freeconferencecall.com/login
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/login-3?country_code=ch
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/login-3?country_code=ch&utm_medium=email&utm_campaign=smart7#skip
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/login-3?country_code=chHLog
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/login-3?country_code=chtps://www.freeconferencecall.com/login-3?c
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/login?country_code=chFsecure.livechatinc.com%2Flicence%2F7519271%
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/loginHLog
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/ogin-3?country_code=chh
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/ogin-3?country_code=chtps://www.freeconferencecall.com/login-3?co
Source: terms-of-service[1].htm.2.dr	String found in binary or memory: https://www.freeconferencecall.com/phone/acceptableuse
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/screen-sharing?country_code=ch
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/screen-sharing?country_code=ch=ch
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/screen-sharing?country_code=chlFree
Source: support[1].htm.2.dr	String found in binary or memory: https://www.freeconferencecall.com/support
Source: {FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.freeconferencecall.com/support?utm_source=calRoot
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7#sk
Source: {FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7Roo
Source: {FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7enc
Source: ~DFB5ECA03928DF698F.TMP.1.dr, terms-of-service[1].htm.2.dr	String found in binary or memory: https://www.freeconferencecall.com/terms-of-service
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/terms-of-serviceRTerms
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/terms-of-servicee=calldr&utm_medium=email&utm_campaign=smart7#ski
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/video-conferencing?country_code=ch
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/video-conferencing?country_code=chVVideo
Source: ~DFB5ECA03928DF698F.TMP.1.dr	String found in binary or memory: https://www.freeconferencecall.com/video-conferencing?country_code=chtory
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: js[1].js.2.dr	String found in binary or memory: https://www.google.com
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://www.google.com/chrome/browser/desktop/
Source: base[1].js.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: f[1].txt.2.dr, js[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-1019974146
Source: remote[1].js.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://www.instagram.com/freeconferencecall/
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://www.linkedin.com/company/freeconferencecall.com
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://www.linkedin.com/company/freeconferencecall.com/
Source: support[1].htm.2.dr	String found in binary or memory: https://www.x.org/wiki/
Source: ~DFB5ECA03928DF698F.TMP.1.dr, login-3[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/embed/IO_a79PGhA4?rel=0
Source: ~DFB5ECA03928DF698F.TMP.1.dr, free-recordings[1].htm.2.dr, screen-sharing[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/embed/_ty1kvFAO84?rel=0
Source: base[1].js.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: J4MUFDO8.htm.2.dr	String found in binary or memory: https://www.youtube.com/user/freeconf
Source: base[1].js.2.dr	String found in binary or memory: https://youtu.be/
Source: base[1].js.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: base[1].js.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: base[1].js.2.dr	String found in binary or memory: https://yurt.corp.google.com
Source: application_wide_page_specific-737f2145f07ac706da84a69ccc5c16cd44a68a7602f848b615bc9ef6db36842d[1].js.2.dr	String found in binary or memory: https://zenorocha.github.io/clipboard.js

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 12.7.192.60:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 12.7.192.60:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.44:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.44:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.44:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.44:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.102.1.157:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.102.1.157:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.19.98:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.19.98:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.228.48:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.228.48:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 12.7.192.60:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.224.32:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.224.32:443 -> 192.168.2.5:49754 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@3/213@14/11

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{FAC35AB7-A909-11EB-90E5-ECF4BB570DC9}.dat

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DFD8DB5931168E419A.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4124 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4124 CREDAT:17410 /prefetch:2	Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe	Automated click: Accept
Source: C:\Program Files\internet explorer\iexplore.exe	Automated click: agree
Source: C:\Program Files\internet explorer\iexplore.exe	Automated click: Accept

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Source: screen-sharing[1].htm.2.dr

Binary or memory string: Rob Arnold, program manager, Unified Communications and Collaboration at Frost & Sullivan</p>

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Drive-by Compromise1	Windows Management Instrumentation	Path Interception	Process Injection2	Masquerading1	OS Credential Dumping	Process Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection2	LSASS Memory	File and Directory Discovery1	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7	0%	Virustotal		Browse
https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7	0%	Avira URL Cloud	safe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://www.dropzonejs.com)	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE	0%	Avira URL Cloud	safe
https://www.freecencecall.com/featuresonal-confe0RRMhcQwN7BdUAYqlKbkd1R3W1vwtwfmlv5Y9_57neE7Ra4_3ufD	0%	Avira URL Cloud	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://www.freecencecall.com/screen-sharing?coun0RRMhcQwN7BdUAYqlKbkd1R3W1vwtwfmlv5Y9_57neE7Ra4_3uf	0%	Avira URL Cloud	safe
https://www.freecencecall.com/ogin-3?country_code=chRoot	0%	Avira URL Cloud	safe
http://silviomoreto.github.io/bootstrap-select)	0%	Avira URL Cloud	safe
https://www.freecencecall.com/international-confe0RRMhcQwN7BdUAYqlKbkd1R3W1vwtwfmlv5Y9_57neE7Ra4_3uf	0%	Avira URL Cloud	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
https://www.freecencecall.com/login-3?country_code=chRoot	0%	Avira URL Cloud	safe
https://www.freecencecall.com/audio-conferencing?0RRMhcQwN7BdUAYqlKbkd1R3W1vwtwfmlv5Y9_57neE7Ra4_3uf	0%	Avira URL Cloud	safe
https://zenorocha.github.io/clipboard.js	0%	Avira URL Cloud	safe
https://www.freeconferencecall.co	0%	Avira URL Cloud	safe
http://daneden.me/animate	0%	URL Reputation	safe
http://daneden.me/animate	0%	URL Reputation	safe
http://daneden.me/animate	0%	URL Reputation	safe
https://www.freecencecall.com/free-recordings?cou0RRMhcQwN7BdUAYqlKbkd1R3W1vwtwfmlv5Y9_57neE7Ra4_3uf	0%	Avira URL Cloud	safe
https://redux.js.org/api/store#subscribelistener	0%	Avira URL Cloud	safe
http://fontawesome.iohttp://fontawesome.iohttp://fontawesome.io/license/http://fontawesome.io/licens	0%	Avira URL Cloud	safe
https://www.freecencecall.com/loginRoot	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.de	172.217.20.3	true	false	high
scontent.xx.fbcdn.net	31.13.92.14	true	false	high
tls13.taboola.map.fastly.net	151.101.1.44	true	false	unknown
stats.l.doubleclick.net	66.102.1.157	true	false	high
googleads.g.doubleclick.net	172.217.19.98	true	false	high
freeconferencecall.com	12.7.192.60	true	false	high
cds.taboola.com	141.226.224.32	true	false	high
am-vip001.taboola.com	141.226.228.48	true	false	high
trc.taboola.com	unknown	unknown	false	high
secure.livechatinc.com	unknown	unknown	false	high
api.livechatinc.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
accounts.livechatinc.com	unknown	unknown	false	high
cdn.livechatinc.com	unknown	unknown	false	high
www.freeconferencecall.com	unknown	unknown	false	high
stats.g.doubleclick.net	unknown	unknown	false	high
cdn.taboola.com	unknown	unknown	false	high
trc-events.taboola.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7	false	high
https://www.freeconferencecall.com/terms-of-service	false	high
https://www.freeconferencecall.com/login-3?country_code=ch	false	high
https://www.freeconferencecall.com/video-conferencing?country_code=ch	false	high
https://www.freeconferencecall.com/features	false	high
https://www.freeconferencecall.com/	false	high
https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7#skip-nav	false	high
https://www.freeconferencecall.com/international-conferencing?country_code=ch	false	high
https://www.freeconferencecall.com/login	false	high
https://www.freeconferencecall.com/screen-sharing?country_code=ch	false	high
https://www.freeconferencecall.com/free-recordings?country_code=ch	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	fontawesome-webfont[1].eot.2.dr, vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	false		high
https://github.com/carhartl/jquery-cookie	vendor_i18n-ff23c0e31a78753eb799d8272edca6006d4e55002cacd0358fccce151cac8f31[1].js.2.dr	false		high
https://www.freeconferencecall.com/login	login[1].htm.2.dr	false		high
https://accounts.livechatinc.com/customer?license_id=7519271&flow=button&response_type=token&client_	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://www.freeconferencecall.com/login-3?country_code=chtps://www.freeconferencecall.com/login-3?c	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://www.freeconferencecall.com/images/fcc_logo_fb.png	J4MUFDO8.htm.2.dr	false		high
https://www.instagram.com/freeconferencecall/	J4MUFDO8.htm.2.dr	false		high
http://www.dropzonejs.com)	application_wide_page_specific-737f2145f07ac706da84a69ccc5c16cd44a68a7602f848b615bc9ef6db36842d[1].js.2.dr	false	Avira URL Cloud: safe	low
https://www.freeconferencecall.com/terms-of-servicee=calldr&utm_medium=email&utm_campaign=smart7#ski	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://www.freeconferencecall.com/login-3?country_code=chHLog	~DFB5ECA03928DF698F.TMP.1.dr	false		high
http://youtube.com/streaming/otf/durations/112015	base[1].js.2.dr	false		high
https://app.freeconferencecall.com/nc/download?system_platform=win	J4MUFDO8.htm.2.dr	false		high
http://audacity.sourceforge.net/	support[1].htm.2.dr	false		high
https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE	application_i18n-781dcc97f2af8886917e4f39590f98f8ef5074a18b34bce0fe9e90f5638142ff[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://admin.youtube.com	base[1].js.2.dr	false		high
https://www.freecencecall.com/featuresonal-confe0RRMhcQwN7BdUAYqlKbkd1R3W1vwtwfmlv5Y9_57neE7Ra4_3ufD	{FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://www.crunchbase.com/organization/freeconferencecall-com	J4MUFDO8.htm.2.dr	false		high
https://connect.facebook.net/en_US/fbevents.js	J4MUFDO8.htm.2.dr	false		high
http://getbootstrap.com)	vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	false	Avira URL Cloud: safe	low
https://www.freecencecall.com/screen-sharing?coun0RRMhcQwN7BdUAYqlKbkd1R3W1vwtwfmlv5Y9_57neE7Ra4_3uf	{FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	analytics[1].js.2.dr	false		high
https://www.freecencecall.com/ogin-3?country_code=chRoot	{FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false	Avira URL Cloud: safe	unknown
http://silviomoreto.github.io/bootstrap-select)	vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	false	Avira URL Cloud: safe	unknown
https://www.freeconferencecall.com/login-3?country_code=ch	~DFB5ECA03928DF698F.TMP.1.dr	false		high
http://demos.krajee.com	vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	false		high
https://secure.livechatinc.com/	open_chat[1].htm.2.dr	false		high
https://secure.livechatinc.com/licence/7519271/v2/open_chat.cgi?license=7519271&group=0&embedded=1&w	~DFB5ECA03928DF698F.TMP.1.dr	false		high
http://momentjs.com/guides/#/warnings/zone/	vendor_i18n-ff23c0e31a78753eb799d8272edca6006d4e55002cacd0358fccce151cac8f31[1].js.2.dr	false		high
http://www.mozilla.com/firefox/	J4MUFDO8.htm.2.dr	false		high
https://www.youtube.com/generate_204?cpn=	base[1].js.2.dr	false		high
https://www.freeconferencecall.com/screen-sharing?country_code=ch	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://www.freecencecall.com/international-confe0RRMhcQwN7BdUAYqlKbkd1R3W1vwtwfmlv5Y9_57neE7Ra4_3uf	{FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://www.freeconferencecall.com/images/application_wide/general/logo/freeconferencecall-logo.svg	J4MUFDO8.htm.2.dr	false		high
https://www.freeconferencecall.com/international-conferencing?country_code=ch	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7Roo	{FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false		high
https://www.x.org/wiki/	support[1].htm.2.dr	false		high
http://youtube.com/yt/2012/10/10	base[1].js.2.dr	false		high
https://cct.google/taggy/agent.js	js[1].js.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.freeconferencecall.com/video-conferencing?country_code=chtory	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://www.freeconferencecall.com/support?utm_source=calRoot	{FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false		high
https://www.freeconferencecall.com/video-conferencing?country_code=ch	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://www.freeconferencecall.com/ogin-3?country_code=chh	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7#sk	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://www.freeconferencecall.com/ogin-3?country_code=chtps://www.freeconferencecall.com/login-3?co	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://www.google.%/ads/ga-audiences	analytics[1].js.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	low
http://www.youtube.com/videoplayback	base[1].js.2.dr	false		high
https://www.freeconferencecall.com/screen-sharing?country_code=chlFree	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://www.freeconferencecall.com/login?country_code=chFsecure.livechatinc.com%2Flicence%2F7519271%	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	false		high
https://www.freecencecall.com/login-3?country_code=chRoot	{FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://www.linkedin.com/company/freeconferencecall.com/	J4MUFDO8.htm.2.dr	false		high
https://www.freeconferencecall.com/free-recordings?country_code=chh	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://www.freecencecall.com/audio-conferencing?0RRMhcQwN7BdUAYqlKbkd1R3W1vwtwfmlv5Y9_57neE7Ra4_3uf	{FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://www.freeconferencecall.com/audio-conferenRoot	{FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false		high
https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7enc	{FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false		high
https://cdn.livechatinc.com/widget/	open_chat[1].htm.2.dr	false		high
https://www.freeconferencecall.com/free-recordings?country_code=ch	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://www.freeconferencecall.com/terms-of-service	~DFB5ECA03928DF698F.TMP.1.dr, terms-of-service[1].htm.2.dr	false		high
https://cdn.livechatinc.com/widget/static/js/iframe.f90af3a3.chunk.js	open_chat[1].htm.2.dr	false		high
https://zenorocha.github.io/clipboard.js	application_wide_page_specific-737f2145f07ac706da84a69ccc5c16cd44a68a7602f848b615bc9ef6db36842d[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://community.freeconferencecall.com	J4MUFDO8.htm.2.dr	false		high
http://youtube.com/streaming/metadata/segment/102015	base[1].js.2.dr	false		high
https://www.youtube.com/embed/_ty1kvFAO84?rel=0	~DFB5ECA03928DF698F.TMP.1.dr, free-recordings[1].htm.2.dr, screen-sharing[1].htm.2.dr	false		high
https://youtu.be/	base[1].js.2.dr	false		high
https://www.freeconferencecall.com/	J4MUFDO8.htm.2.dr	false		high
http://schema.org	J4MUFDO8.htm.2.dr	false		high
https://qa-www.freeconferencecall.com/auth/apple/callback	J4MUFDO8.htm.2.dr	false		high
https://www.freeconferencecall.co	~DFB5ECA03928DF698F.TMP.1.dr	false	Avira URL Cloud: safe	unknown
http://daneden.me/animate	vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.freeconferencecall.com/featuresonal-conferencing?country_code=chx	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://cdn.livechatinc.com/widget/static/js/7.40e57e4a.chunk.js	open_chat[1].htm.2.dr	false		high
https://www.freecencecall.com/free-recordings?cou0RRMhcQwN7BdUAYqlKbkd1R3W1vwtwfmlv5Y9_57neE7Ra4_3uf	{FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://www.freeconferencecall.com/international-conferencing?country_code=chfInternational	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://www.freeconferencecall.com/loginHLog	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://www.freeconferencecall.com/screen-sharing?country_code=ch=ch	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://github.com/Eonasdan/bootstrap-datetimepicker/	vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	false		high
https://www.freeconferencecall.com/fcc_favicon.ico~	imagestore.dat.2.dr	false		high
https://www.freeconferencecall.com/features	~DFB5ECA03928DF698F.TMP.1.dr, localization.en.0.f18dd4d9fb0b965b3781bba9707f6877_ff07b7dc4d1ea4ae21b8ebc7bdbb0031[1].js.2.dr, features[1].htm.2.dr	false		high
https://www.freeconferencecall.com/video-conferencing?country_code=chVVideo	~DFB5ECA03928DF698F.TMP.1.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0	vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	false		high
https://redux.js.org/api/store#subscribelistener	base[1].js.2.dr	false	Avira URL Cloud: safe	unknown
http://fontawesome.iohttp://fontawesome.iohttp://fontawesome.io/license/http://fontawesome.io/licens	fontawesome-webfont[1].eot.2.dr	false	Avira URL Cloud: safe	unknown
https://youtube.com/api/drm/fps?ek=uninitialized	base[1].js.2.dr	false		high
https://www.freecencecall.com/loginRoot	{FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://www.freeconferencecall.com/audio-conferencing?country_code=chVAudio	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7	~DFB5ECA03928DF698F.TMP.1.dr	false		high
https://github.com/silviomoreto/bootstrap-select/blob/master/LICENSE)	vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	false		high
http://opensource.org/licenses/MIT	vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css.2.dr	false		high
https://www.freeconferencecall.com/terms-of-serviceRTerms	~DFB5ECA03928DF698F.TMP.1.dr	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
12.7.192.60	freeconferencecall.com	United States	30115	WIDEVOICEUS	false
172.217.16.102	unknown	United States	15169	GOOGLEUS	false
172.217.18.78	unknown	United States	15169	GOOGLEUS	false
31.13.92.14	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
216.58.214.214	unknown	United States	15169	GOOGLEUS	false
151.101.1.44	tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
66.102.1.157	stats.l.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.161	unknown	United States	15169	GOOGLEUS	false
141.226.228.48	am-vip001.taboola.com	Israel	200478	TABOOLA-ASIL	false
141.226.224.32	cds.taboola.com	Israel	200478	TABOOLA-ASIL	false
172.217.19.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false

General Information

Joe Sandbox Version:	32.0.0 Black Diamond
Analysis ID:	399808
Start date:	29.04.2021
Start time:	09:42:23
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 6m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@3/213@14/11
Cookbook Comments:	Adjust boot time Enable AMSI Browsing link: https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7#skip-nav Browsing link: https://www.freeconferencecall.com/terms-of-service Browsing link: https://www.freeconferencecall.com/login-3?country_code=ch Browsing link: https://www.freeconferencecall.com/ Browsing link: https://www.freeconferencecall.com/login Browsing link: https://www.freeconferencecall.com/audio-conferencing?country_code=ch Browsing link: https://www.freeconferencecall.com/video-conferencing?country_code=ch Browsing link: https://www.freeconferencecall.com/screen-sharing?country_code=ch Browsing link: https://www.freeconferencecall.com/free-recordings?country_code=ch Browsing link: https://www.freeconferencecall.com/international-conferencing?country_code=ch Browsing link: https://www.freeconferencecall.com/features
Warnings:	Show All Excluded IPs from analysis (whitelisted): 93.184.220.29, 104.42.151.234, 204.79.197.200, 13.107.21.200, 52.255.188.83, 92.122.145.220, 88.221.62.148, 172.217.20.14, 172.217.20.8, 104.126.36.192, 104.126.36.209, 172.217.16.98, 172.217.16.100, 95.101.22.176, 172.217.18.74, 172.217.20.3, 184.30.24.56 Excluded domains from analysis (whitelisted): gstaticadssl.l.google.com, cs9.wac.phicdn.net, www.googleadservices.com, e39296.f.akamaiedge.net, store-images.s-microsoft.com-c.edgekey.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, secure.livechat.com.edgekey.net, e11290.dspg.akamaiedge.net, e12564.dspb.akamaiedge.net, go.microsoft.com, ocsp.digicert.com, www.googletagmanager.com, www-bing-com.dual-a-0001.a-msedge.net, bat.bing.com, www.google.com, watson.telemetry.microsoft.com, cdn.livechat.com.edgekey.net, prod.fs.microsoft.com.akadns.net, www.google-analytics.com, www.bing.com, fonts.googleapis.com, accounts.livechat.com.edgekey.net, fs.microsoft.com, www-google-analytics.l.google.com, dual-a-0001.a-msedge.net, fonts.gstatic.com, www-googletagmanager.l.google.com, e1723.g.akamaiedge.net, e39296.b.akamaiedge.net, skypedataprdcoleus17.cloudapp.net, bat-bing-com.a-0001.a-msedge.net, a-0001.a-afdentry.net.trafficmanager.net, store-images.s-microsoft.com, blobcollector.events.data.trafficmanager.net, go.microsoft.com.edgekey.net, skypedataprdcolwus16.cloudapp.net, api.livechat.com.edgekey.net Report size exceeded maximum capacity and may have missing behavior information. Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtQueryAttributesFile calls found. Report size getting too big, too many NtSetValueKey calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\8P7RGF10\www.youtube[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	7059
Entropy (8bit):	5.085221363303464
Encrypted:	false
SSDEEP:	96:wcl9lNU9lNU9lNU9lNUw9lNU9lNUT9lNU9lN79lN79lN79lN7s9lN79lN7m9lN7W:KD
MD5:	CDAD8EDD8D11FAA70A2C4FC8B9E3EA40
SHA1:	7DB1A1E3DBDC6F756E716FA0D384F570DC6E8ECF
SHA-256:	C88F626EE68B572DAFDDA45FDFF454C4383B0A99911F6252F1C30FC80A6EE4AA
SHA-512:	2CEF2C6D9009931A96EF64C8F57543E863AD8CD90B9400251299C4EF5B2F4D307310B10A1A3BEAA2E84B3E1445FE9A13606C61B925949CB23FB9313F0A5D380E
Malicious:	false
Reputation:	low
Preview:	<root></root><root></root><root></root><root></root><root></root><root><item name="__sak" value="1" ltime="3524136176" htime="30883094" /></root><root></root><root></root><root></root><root><item name="yt-remote-device-id" value="{"data":"ca6a2d66-ed83-423f-9c89-73f183d71d41","expiration":1651250626022,"creation":1619714626038}" ltime="3531896176" htime="30883094" /></root><root><item name="yt-remote-device-id" value="{"data":"ca6a2d66-ed83-423f-9c89-73f183d71d41","expiration":1651250626022,"creation":1619714626038}" ltime="3531896176" htime="30883094" /><item name="yt-remote-connected-devices" value="{"data":"[]","expiration":1619801026223,"creation":1619714626223}" ltime="3532936176" htime="30883094" /></root><root><item name="yt-remote-device-id" value="{"data":"ca6a2d66-ed83-423f-9c89-73f183d71d41","expiration":1651250626022,"cre

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\DURNCK2N\www.freeconferencecall[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	188882
Entropy (8bit):	5.481789567067187
Encrypted:	false
SSDEEP:	384:ngggmQ+mQ+mQk9YmQk9YmQk9YmQk9fmQk9BmQk9BmQk9FmQk9amQk9amQk9fmQkk:l
MD5:	F1EF386F1E92828A9E43AF95EBA95F76
SHA1:	CAC32ECEB78BC72F85FF6F5E85E5DD0DAB5F36C9
SHA-256:	C3D721CD09D8E9DC74E8CAD6765D4ED13D92F74F613FE75B00B2AA252F7753C7
SHA-512:	039DF87638E36C598F62ECE13401AFA8D9ABC3D33D188E3264EAEEDCDE65B3B7F5500928A330F349BCB18F526F0432888F59942840F60A090B6D6D796F3059D6
Malicious:	false
Reputation:	low
Preview:	<root></root><root></root><root></root><root></root><root><item name="_taboolaStorageDetection" value="1619714594779" ltime="3218476176" htime="30883094" /></root><root></root><root><item name="eng_mt" value="{"ver":27,"sessionStartTime":1619714594779,"scrollDepth":0,"sessionDepth":[],"timeOnSite":0,"numOfTimesMetricsSent":0}" ltime="3218636176" htime="30883094" /></root><root><item name="eng_mt" value="{"ver":27,"sessionStartTime":1619714594779,"scrollDepth":0,"sessionDepth":[],"timeOnSite":0,"numOfTimesMetricsSent":0}" ltime="3218636176" htime="30883094" /></root><root><item name="eng_mt" value="{"ver":27,"sessionStartTime":1619714594779,"scrollDepth":0,"sessionDepth":[],"timeOnSite":0,"numOfTimesMetricsSent":0}" ltime="3218636176" htime="30883094" /></root><root><item name="eng_mt" value="{"ver":

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\QALADACS\secure.livechatinc[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	7139
Entropy (8bit):	5.0902554657831836
Encrypted:	false
SSDEEP:	96:HdddBsGcv9BbdBsAen9BGdBsAen9BG25r9/tdBsAen9BG25r9/tHFTYJK7kHdBsg:zZoF3F2VF2iF2K
MD5:	2E949341E82E9F5AB7BD868908EDB945
SHA1:	9220869162E0D8E3C9BA2919DCF0D19B5A0E865F
SHA-256:	5279BB4B8A69EBE8288E79E283F20B51D7FD27B0D5AB6139549873ED1B30FF8E
SHA-512:	AFDE89DE9D2FA807AF8655A073B74CC88793174E49D67AF1D2AC5FE51C2DFCA8D33A763CFC013391A71BC7DFBBC2C13A5FB251F650870EEF329B493B2C9372F9
Malicious:	false
Reputation:	low
Preview:	<root></root><root></root><root><item name="_livechat_has_visited" value="true" ltime="3238926176" htime="30883094" /></root><root><item name="_livechat_has_visited" value="true" ltime="3238926176" htime="30883094" /></root><root><item name="_livechat_has_visited" value="true" ltime="3238926176" htime="30883094" /></root><root><item name="_livechat_has_visited" value="true" ltime="3238926176" htime="30883094" /><item name="7519271:state" value="{"clientLimitExceededLifted":{"value":false,"expires":1619716397018},"eyeCatcherHidden":{"value":false,"expires":1619716397018},"invitationHiddenIds":{"value":[],"expires":1619716397018},"invitationDisplayedIds":{"value":[],"expires":1619716397018},"maximized":{"value":false,"expires":1619716397018},"visibility":{"value":{"state":"minimized"},"expires&qu

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{FAC35AB7-A909-11EB-90E5-ECF4BB570DC9}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	30296
Entropy (8bit):	1.8542672313013149
Encrypted:	false
SSDEEP:	96:rTZIZ+2RWkt78bf7U3yhKMIUt5q8UHTQ812xf81by06X:rTZIZ+2RWktAfUNMSg/fO8X
MD5:	C5CF03D88AD32A509C70BD2027BCE00A
SHA1:	62F4114B7EFC2653D0E3A2C681AD7F3A5C26596E
SHA-256:	D7E8838501863C87C0533C6DA8DC75464C549D3AC580BE40358577BEF3E6969C
SHA-512:	77761452FE4999B0CA8BCCEECEF108397CF95ECA06587EDA2BF26C4CEB77333346FD787DF1E377AB0260C847F6FBE5422B858376E08FB668DF45741D6F233316
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{018586C3-A90A-11EB-90E5-ECF4BB570DC9}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.5654678662225765
Encrypted:	false
SSDEEP:	48:IwXGcprKlhGwpa0G4pQsGrapbS5GQpKvG7HpRJGTGIpG:rdZ+7QE6qBSTA+TJyA
MD5:	F30415101931503F6C8CFFF0A47A767A
SHA1:	C6C9A101380A7901750099C2F3D320DFB8184CC9
SHA-256:	5E22F7B0110CDB2EEFB2727217333E5A914879A1F04C65D507E438D86AA40C64
SHA-512:	43954DB7E6C92259216B8C69992A05E8DC8E14C6DCA4F02717EBCBEB0BA01F3CD2810EBA485ED87F9C8AC7FC732D7FE935E9D3B98209615DF554B9B38381AE8E
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{FAC35AB9-A909-11EB-90E5-ECF4BB570DC9}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	209384
Entropy (8bit):	2.7845476722673297
Encrypted:	false
SSDEEP:	768:WwroWV6VpWi4mngwAltOCb6jiAQiQqQP5RqAev1HpAeOPEva/CH45K3MgzNFjBsp:/kFjBs5Uq5mrkUq5Kd5BxpKwa
MD5:	B4263CBE854AAD795E165FC44EEB89B4
SHA1:	13461815FA0D6BD277878B2F7E1E5144B5B7D19D
SHA-256:	42C19EF445B772FC115C9B32594D48CD7902A21E146DE306F9F991793DE6F09C
SHA-512:	6090464D52CFAD3EE7B6B572F294C8F44866A312349CD95B6269FFB33159B027F7ECB9851D56B745679624CABA9DB4B7A2036BB45E9AF078629F4562E9A72245
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	1032
Entropy (8bit):	6.3506613358223145
Encrypted:	false
SSDEEP:	12:h+rs/plu4nKKhauvaG+vVXDS+2AoTUppcIzBxnzmUb1Rp3vD+bh8q81PC:h+rouqPCrTeAgUgiB1zmUb1Rpsz8U
MD5:	438390D93F267ADE3083DEA037106086
SHA1:	3BCF90916F382E6324815CC1FAEBDDECB20B9440
SHA-256:	E72EBAB2916B55FC805C5D5318E4B4FB73CBF0CB8454E38C25E311621FBDC7FC
SHA-512:	80E8849092B3E4CD5D4A3F6FB191AE0E5584BE734BE382F7A5D3953BDA94562092790366B18DE749AC3B3F9A9A6A26631657BCF53A5912885ED3CFF748FD72D2
Malicious:	false
Reputation:	low
Preview:	2.h.t.t.p.s.:././.w.w.w...f.r.e.e.c.o.n.f.e.r.e.n.c.e.c.a.l.l...c.o.m./.f.c.c._.f.a.v.i.c.o.n...i.c.o.~.................h.......(....... ...............H...H...................................................................................................................................................................................................................g.S..S...g......qWg='.\|r....................z=.T..w:.....i.._...X@V........................i$.T...g...Q..I.....{^1.....................\|A.Y..q1.............qTe6.......................i.r*..c.......{uA...n..................W..h......y7.[..N.}G..vU.iU]4"..............p1.g...................bO..{...................d.v2..j..g..K.xE.nD.bC...................................x..............................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1124938230859430[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	260134
Entropy (8bit):	5.469217481548313
Encrypted:	false
SSDEEP:	6144:Rk1HgCSntDV/HaK3V/Ha8NEPjQHguH3HpQrwzzmi:dNESP
MD5:	D4564BD905CCD8F87FEA0C13778ABF3F
SHA1:	218DAF3942B933DF3E0E1348389289151FDA7531
SHA-256:	9E203A1C5D80D9EE3C6D9DDA82A34435820BD95A8F0EEE7FFC76D22FCEDC263D
SHA-512:	E0D78ABDCC24CD6BF36A323F83B4C729924A4AAFDF28D489AB2DE9D369248F21280478101397DA8ED291D5F22E53845F452AD0593E1E200E8FA72DBDFE1CF854
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\7.40e57e4a.chunk[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	405902
Entropy (8bit):	5.414725541536152
Encrypted:	false
SSDEEP:	6144:eyvHFPpphQfp/+jL0zsqkjLk6ORZaPN90:e8FPTK/++b
MD5:	2D64778C7BFE151C7FBB5D077604700B
SHA1:	BBC60BA1136F96D5AD798B428F2EAE1BC112CFD3
SHA-256:	DBA5627DBB16B68C3FC8E07AAC22687B439564403EEC4ADF8A28DBD130615517
SHA-512:	2B28FB10E5D024F5164767DFAB44B3386EB8BB5665690BF07136ED9A3725F73DA6178FE53069C5E96005AED83D157EC3BE2AE320A7A368D278F9A762070DF48E
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.livechatinc.com/widget/static/js/7.40e57e4a.chunk.js
Preview:	/! For license information please see 7.40e57e4a.chunk.js.LICENSE.txt /.(this["webpackJsonp@livechat/chat-widget"]=this["webpackJsonp@livechat/chat-widget"]\|\|[]).push([[7],[function(e,t,n){"use strict";e.exports=n(294)},function(e,t,n){"use strict";function r(){return(r=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e}).apply(this,arguments)}n.d(t,"a",(function(){return r}))},,,function(e,t,n){"use strict";function r(e,t){if(null==e)return{};var n,r,o={},i=Object.keys(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0\|\|(o[n]=e[n]);return o}n.d(t,"a",(function(){return r}))},,,function(e,t,n){e.exports=n(295)()},,,,,function(e,t,n){"use strict";n.d(t,"k",(function(){return v})),n.d(t,"d",(function(){return _})),n.d(t,"b",(function(){return I})),n.d(t,"a",(function(){return z})),n.d(t,"c",(function(){return R})),n.d(t,"i",(function(){return L})),n.d(t,"e",(function(){return U})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\IO_a79PGhA4[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	50024
Entropy (8bit):	5.8224574585801285
Encrypted:	false
SSDEEP:	768:5FKIPShqekShTWDF/MsbJ2JPRNINhHNGd9c7FUKfuBHJp:iBGMxpENe3cRUBHJp
MD5:	AF69BA081331D33706656A7EA453A14B
SHA1:	9F6E7ACD27F2BAE8B95D55830004735690ED568B
SHA-256:	F2C3CA5775BBDDDEEA874A6B277F7CCDDC95A7DDAE33C63CD9566F54B9B791B3
SHA-512:	88D4E380B0C5E95E15C847F3C1CC1ACD562F7338F9315ED6FD369B5DB461ABDEEE0FB7AF295E55C089C24BE66FC68EFFE8557ED54EF160247BA23F5F076E4386
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><style name="www-roboto" nonce="HOkt58TnlmzW1tMdQVkpHg">@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff)format('woff');}</style><script name="www-roboto" nonce="HOkt58TnlmzW1tMdQVkpHg">if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "E"); document.fonts.load("500 10pt Roboto", "E");}</script><link rel="stylesheet" href="/s/player/cb5bd7e6/www-player.css" name="www-player" nonce="HOkt58TnlmzW1tMdQVkpHg"><style nonce="HOkt58TnlmzW1tMdQVkpHg">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100%;}h1 {text-align: center; color: #fff;}h3 {margin-top: 6px; margi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ad_status[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\application_wide_page_specific-737f2145f07ac706da84a69ccc5c16cd44a68a7602f848b615bc9ef6db36842d[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	131107
Entropy (8bit):	5.330916128012577
Encrypted:	false
SSDEEP:	1536:s/pvXFif8MyTLj8yzPeGPek7liGwSb9odrlKeDwScxZwSmsieH5SlqVQ8EmTLush:m08clDR3h83qHtQ/Z
MD5:	AD42DFCF3B613642FFE1FE8415E4C758
SHA1:	6BFE247F222F35D2A81F2A70B4F25249539BCDD4
SHA-256:	737F2145F07AC706DA84A69CCC5C16CD44A68A7602F848B615BC9EF6DB36842D
SHA-512:	B04154CAB865C266B8D2877D16663278F83BE9F24C7EA61E6864601883B247E91DCFB382A434AAAD7931A6BAE24F07EF31729DFB4755728E34C4F4BED91281FF
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/assets/application_wide_page_specific-737f2145f07ac706da84a69ccc5c16cd44a68a7602f848b615bc9ef6db36842d.js
Preview:	var ContactUs=function($){function onSubmitfrmcontact(){var errors=!1;"Comments are required"!=document.frmcontact.comments.value&&(memComments=document.frmcontact.comments.value),""!=document.frmcontact.comments.value&&"Comments are required"!=document.frmcontact.comments.value\|\|($("#comments").val("Comments are required"),showInvalidFeedback("#comments","#validation_contactus_comments"),errors=!0),"Invalid Email"!=document.frmcontact.email.value&&(memEmail=document.frmcontact.email.value),""!=document.frmcontact.email.value&&"Invalid Email"!=document.frmcontact.email.value&&isValidEmail(memEmail)\|\|($("#email").val("Invalid Email"),showInvalidFeedback("#email","#validation_contactus_email"),errors=!0);var phone=document.frmcontact.phone.value;return"Invalid Phone Number"!=phone&&(memPhone=phone),""==phone\|\|"Invalid Phone Number"!=phone&&isPhoneNumber(phone)\|\|($("#phone").val("Invalid Phone Number"),showInvalidFeedback("#phone","#validation_contactus_phone"),errors=!0),errors?($("#comm

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ar[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	32322
Entropy (8bit):	4.956420600606449
Encrypted:	false
SSDEEP:	768:3rHlbmsjxFxYrbYspd5/YQGQx5w5eESOoDKuA93CgKeh:7HfbxYZ/YQGQx5w5e/OoOuA93CgKo
MD5:	87041327B412B117E5144E8FC115E148
SHA1:	59E18DA9FFEA6BF88F5638690858DFE3880CAD4F
SHA-256:	76D75F10A4A1D345BBA6A60A276B76419291029B75BB5813956725FD9CB700A3
SHA-512:	DD2A34B72D0030442C81C077BAB4454E0A39FC808B9DA79A99A29F5D4F7CC67A925B84A5E25EEC1FE188485D47FE3125860DB47343BC134F3A12A50F82A551F4
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/ar.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0-.01h640.003v160.43h-640.003z" fill="#00c4ff"/><path d="m0 159.763h640.003v160.43h-640.003z" fill="#fff"/><path d="m0 319.536h640.003v160.43h-640.003z" fill="#00c4ff"/></g><path d="m382.49 221.33c0 14.564-11.864 26.37-26.499 26.37s-26.499-11.806-26.499-26.37 11.864-26.37 26.499-26.37 26.499 11.806 26.499 26.37z" fill="#ffd600" fill-rule="evenodd" stroke="#000" stroke-opacity=".387" stroke-width=".625" transform="matrix(1.645 0 0 1.62 -265.894 -116.567)"/><path d="m364.43 195.28c-4.34-1.049-8.785.422-10.185.318-1.925 0-6.79-1.68-10.185 0" fill="none" stroke="#000" stroke-opacity=".387" stroke-width=".5" transform="matrix(1.27 0 0 1.231 -130.873 -28.912)"/><path d="m338.71 200.49c4.305-3.01 9.115 1.086 10.394.315 3.492-2.294 6.736-1.868 10.08.21 2.155 1.272 5.914-3.71 10.289.315" fill="none" stroke="#000" stroke-opacity=".387" stroke-width=".5" transform="matrix(1.27 0 0 1.231 -130.873 -28.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ba[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1596
Entropy (8bit):	4.629365492551878
Encrypted:	false
SSDEEP:	48:KC+ICNHFoWNHFRJHFRYFRvmFR5N7FR5NuR5NLR5Nn5NH7:qICNHFoWNHFRJHFRYFRvmFR5N7FR5Nu7
MD5:	604E07876E1C3B4CFE25B7A1D594D322
SHA1:	527A753DF6829F0EF876DCC5D5889AAFD2977013
SHA-256:	4C11F4CDE37B823C79E332DD8C4977B70958F67903FBD94D31E032082892B091
SHA-512:	F30B006079652668F434FE9E3CF4A1335468DA11070EB0E69A95121F0B8F6F72FC268EEA40F7394F5B6A04B45C058F05C124C8628811508473AB25AA46A584B4
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/ba.svg
Preview:	<svg height="480" viewBox="0 0 512 512" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-85.333 0h682.67v512h-682.67z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><path d="m-85.333 0h682.67v512h-682.67z" fill="#009"/><path d="m-85.333 0 682.67 512v-512z" fill="#fc0"/><g fill="#fff"><path d="m-21.46 75.087-24.397-17.725-24.397 17.725 9.319-28.68-24.397-17.726h30.156l9.319-28.68 9.319 28.68h30.156l-24.397 17.726z"/><path d="m30.093 111.977-24.397 17.725 9.319-28.68-24.397-17.726h30.156l9.319-28.68 9.319 28.68h30.156l-24.397 17.726 9.319 28.68z"/><path d="m81.639 184.313 9.319-28.68-24.397-17.726h30.156l9.319-28.68 9.319 28.68h30.156l-24.397 17.726 9.319 28.68-24.397-17.725z"/><path d="m166.906 210.252-24.397-17.726h30.156l9.319-28.68 9.319 28.68h30.156l-24.397 17.726 9.319 28.68-24.397-17.725-24.397 17.725z"/><path d="m218.458 247.137h30.156l9.319-28.68 9.319 28.68h30.156l-24.397 17.726 9.319 28.68-24.397-17.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\be[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	265
Entropy (8bit):	5.032421571571848
Encrypted:	false
SSDEEP:	6:tI9mc4slhobibtAtMjR4Sz0HWaEEXd0HWa4d0HWc:t4nobibtAtMjqMgWarXdgWa4dgWc
MD5:	5D8409F950C63551EE0815738315CE2A
SHA1:	E32366B74036138E9175B8D97F7CA337D1765C49
SHA-256:	7FFD8E2AF9360C56BDC0B0CDC5A812DDF626D752AD0E22EA7EFD438DF77F473F
SHA-512:	A3EB3E4BEBE0D1B1FD14E0664A9B8280F15B54539A0D5018F5295160C7CF872719A7449E3D21B5C5CF4025A0E5F83B8044388C6BF21DB750FF21818F1E79282E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/be.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="480" width="640"><g fill-rule="evenodd"><path d="M0 0h213.335v479.998h-213.335z"/><path fill="#ffd90c" d="M213.335 0h213.335v479.998h-213.335z"/><path fill="#f31830" d="M426.67 0h213.335v479.998h-213.335z"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bg[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	254
Entropy (8bit):	4.878371150481322
Encrypted:	false
SSDEEP:	6:tI9mc4slhobibtAtMjR93UMbqbFETzDaRuuHWc0aRBBu505U0aX:t4nobibtAtMjf37qb/3RDBBut
MD5:	B574B95E3B8D74EC49A63C56EC3C9D9B
SHA1:	13FFAD981900E68D25561497AFD563CBC13F3892
SHA-256:	CA19CFC81B854FEE5A60EF24B685A97793C25625C761553799301E6A49800F21
SHA-512:	209F13A1B3BE0D2C26632BC71AA30BAAAD410AECF7B155729A883DAB3B4EC0E0625FC3E007EC3C1B25C9F89E2E2E6BA257FE75DBFEB1259CCF48582CF1C67811
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/bg.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="480" width="640"><g fill-rule="evenodd"><path fill="#de2110" d="M0 319.997h640v160.003h-640z"/><path fill="#fff" d="M0 0h640v160.003h-640z"/><path fill="#319400" d="M0 160.003h640v160.003h-640z"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\business-people-talking-on-the-phone[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, baseline, precision 8, 360x235, frames 3
Category:	downloaded
Size (bytes):	24639
Entropy (8bit):	7.700282646396805
Encrypted:	false
SSDEEP:	768:He1HS2lniyMnSCc6363P1t0/PpyMNrJscG:H52lniyMdcgoG3xLG
MD5:	7E2D76FFFB1D7C3751DFB57BC2E42743
SHA1:	908677C38BCCD69C5AB40B91E378C04F90E71D57
SHA-256:	A6D309C895E7FC42845431906DFFB86146C0AA8E607B0250D87E552FD9E4847A
SHA-512:	4FCFAE4470DF14709397E22C4B88EA8417938B1C42AD4CEBC0686B3E20B3927F7FD79526ABF91CFC5CFAB3B4967D4124DF8B9C34CB1958BCC91D6A04FC562925
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/international/business-people-talking-on-the-phone.jpg
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\business-woman-looking-at-mobile-phone[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, baseline, precision 8, 360x235, frames 3
Category:	downloaded
Size (bytes):	22540
Entropy (8bit):	7.663159290338977
Encrypted:	false
SSDEEP:	384:HPkj286rF3ksSLTKontUhxln+lypTHLYo2lFHa3uGI36YH1MrHC8u:HPkKrKRLTKCuhx/tBXw36YH1Uhu
MD5:	94E1E9C6D2BCB876F7C4F56138134D71
SHA1:	BA8437F80DFB41A10E54EB621699FACDC09D2FCC
SHA-256:	54E41E018CA2DA4DE875D914A83DFDF2244796FB53ABFB20AD033BED62D1DDE1
SHA-512:	2FBEC280D101CBB7E45E7E88E0CEC9CE72690ABD953E18E60263600F5F7C072411E83E1483BEB96F74F659569D169C3F97C91ABBBD044E9349986685F9BD83E4
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/international/business-woman-looking-at-mobile-phone.jpg
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ch[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	266
Entropy (8bit):	4.882387486145111
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZDMjR4tfvAUtwQR4xifdxf/icEd/XtBeHUi:t9bibt03jMjqpv3wlcfffkdftBYUi
MD5:	53E3C3D9950A221BA3357A839F447C56
SHA1:	FFC5F755A24AD57040C3165CD0BAF885A2C7B374
SHA-256:	1362642492DC5D3F596A1F63CB3406AE82D11FED35742154F3D0C86E2F59E683
SHA-512:	515645B587B9F2378B1F887ED9C3697A3C89E015D9976DBFFA011B87ACA72FA486E36815634C9E3313B3E817648798E464484EEE5CB8F17CF6544107D7165F9C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/ch.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h640v480h-640z" fill="#fa000b"/><g fill="#fff"><path d="m169.999 194.997h299.996v89.997h-299.996z"/><path d="m274.999 89.997h89.997v299.996h-89.997z"/></g></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\cm[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	565
Entropy (8bit):	5.110821994461187
Encrypted:	false
SSDEEP:	12:t9bibt03/KYa5drnMjq9dDDGWWFFtI3s/7PqxKWWAx/VSJJeY3ZSiV7OIe:t9bKt03La/M5RFI8/7K3ZUAi1OIe
MD5:	0F2A960007261856D106C40A5C1D43FB
SHA1:	FADCC690D560A35A2F094FDE3BF4CDF253253FC6
SHA-256:	538CACFC2E6BF61770F324C66AD648A5BF95DB1F40511CD85579D0F1C3834FCA
SHA-512:	C07F7326020A8C0611A481126E0DA6A02A352CEE0D26F506BD8E38006755481F25AA290B068257F15179B2D649CBD293195464623BA5F9235EF22B779B5195E6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/cm.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m0 0h640v480h-640z"/></clipPath><g clip-path="url(#a)"><g fill-rule="evenodd"><path d="m426.662-80h213.338v640h-213.338z" fill="#fff001"/><path d="m0-80h212.013v640h-212.013z" fill="#009811"/><path d="m212.013-80h215.987v640h-215.987z" fill="#c20000"/></g><path d="m386.238 329.438-58.624-44.32-64.234 45.678 24.41-76.032-66.563-45.123 79.945-1.394 21.016-73.935 24.976 74.241 78.319-1.05-65.454 48.163z" fill="#fff001"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\desktop-computer-on-desk[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1800x669, frames 3
Category:	downloaded
Size (bytes):	67206
Entropy (8bit):	7.954183156308308
Encrypted:	false
SSDEEP:	1536:bABhZOeG0A1O1OeESuwKF1FJCfeqOCKnNcLksUTRhQiJCX:bABnOhg1OWrC/UeqhkZs6FG
MD5:	847A005078240903649B56E571B2C91C
SHA1:	D34943E6F331FC66501274933F9D937284EC2ABD
SHA-256:	033A5B37DEEB8F6B107A6CEA3D956178D0F61FFFF780E693414E9FAFB16859A1
SHA-512:	50DD20DA98BBCB2917104FF1BC2D5B9C62FD3E0B49E99E6DA13D22A320F9F0C53243226BCE5F698ADE650F526E8CC9511CD4EC6B9B4CDB46F88EAAB0E9CFEFBE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/index/2018-design/desktop-computer-on-desk.jpg
Preview:	......JFIF.............C....................................#,%.!!..&4'./121.%6:60:,010...C...........0 . 00000000000000000000000000000000000000000000000000............................................................................................W......@...t..ac@akF.....C.h......1...-.ADhS...FE..@`...8.P.0..p.p....r.c.-rKk.)j..LeE.H.5.."...HR..x.5..u.Y.j..a\&$E..B.C.5eJ..!..... ...L........AD...@.....S.I5$.....AD.$......0....4(.... .akF1.#..t.h#.1.G`0.4(Z..%0.h.dQX.....8.P.1..pC...h%kP.\...\.T.RV.9ir.U..%..n-jR..W.<k$..m..s(.#..0.IKZ,.$..c(r.e2.YT..C..(...a...............4.$.....0..(.$...?....0........(e.aLaM.M....r.c.;.c....C..r.t.......R0..8.....@5p.qM8cZ.2....qR....%fL.2-.-.-.eJ.).<j.....n..kr..F3.a1..E..H.c.YR.-r.K,u@5.. .Qc.P........P ....@.$.HD.B.F...@!D........0....4(....c@c.c...h.t..c.1.#..cB...h..).;..c..e....1.e..c...J..Z.EKqKR..r.T.t..-.[3.....T.-.-J...mcYe..6k9.......H.E.5....n-m2.S!e..@.a 1S......Q.8.....*.@ .B.B.@C.... $.HI.'..w..........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\do[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	376259
Entropy (8bit):	4.70665847910788
Encrypted:	false
SSDEEP:	1536:ZMXg/BS/GGDL8rsasQstEejvIoKX1oTfNODJotht1+v5nKeWOm2K+MRdtOvd3tJu:G+VT970
MD5:	021E4E916B374C12AB9CC5348A8E24DA
SHA1:	7E35E09FA1A75A89763559C8B590F5AE51541CD2
SHA-256:	79C640601F5C4E9F05A1413299D2907F79041DF2111DC1D35E9CE47989488E6A
SHA-512:	82E9EB54B7AFF220552C65E354FA3368C16E58B5F112935A62835EA0318602ACC92E5BAF3F55DA284A28D477F1C66299ACD7239850FF523542754BD45495E978
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/do.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-222.55-115.23h957.95v718.46h-957.95z"/></clipPath><g clip-path="url(#a)"><path d="m363.832 296.781h298.275v182.983h-298.275z" fill="#00319c" fill-rule="evenodd"/><path d="m-22.799 297.349h297.427v182.415h-297.427z" fill="#d62918" fill-rule="evenodd"/><path d="m-22.231.002h297.427v204.028h-297.427z" fill="#00319c" fill-rule="evenodd"/><path d="m365.542 1.712h295.991v204.235h-295.991z" fill="#d62918" fill-rule="evenodd"/><path d="m-22.625 204.003h685.394v94.662h-685.394z" fill="#fff" fill-rule="evenodd"/><path d="m273.893 1.004h92.377v478.994h-92.377z" fill="#fff" fill-rule="evenodd"/><path d="m313.337 206.783.47.447z" fill="#cecece"/><path d="m313.812 206.783.47.447z" fill="#bdbdbd"/><path d="m314.279 206.783.47.447z" fill="#ada5a5"/><path d="m317.566 206.783.47.447z" fill="#848c9c"/><path d="m318.355 206.93.313.149z" fill="#848ca5"/><path d="m318.976 2

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\fHNHL_433QGOmcYQNL4RY5TVkl6IVvj6cfWbC8j9b9c[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	38091
Entropy (8bit):	5.691786855784507
Encrypted:	false
SSDEEP:	384:JUOsN253mX4mwouZ9IjnUEtUdjMuvxFf/65rcMLyXaOmlDYevhK2UrhBUBIoHUzN:e25ldZ6vtUdjM0Z65gMKmhHhK2/3S9N
MD5:	87FD94AC8CECF61FC1F9C69CCF2BB321
SHA1:	55D2E0B112A90694CDEE8C9EC3F9E503F7EFDE95
SHA-256:	7C73472FFE37DD018E99C61034BE116394D5925E8856F8FA71F59B0BC8FD6FD7
SHA-512:	B2925F57A40E149555A3C843ED2F7D3FB9BBBCA108986DAA73A8285B1FDBB15C70BE7FC736FEB4F3A85FFD0DD3B7F6E9736230A9E5264702FB2102E290C81EFA
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google.com/js/th/fHNHL_433QGOmcYQNL4RY5TVkl6IVvj6cfWbC8j9b9c.js
Preview:	(function(){function m(N){return N}var X=function(N){return m.call(this,N)},a=this\|\|self,v=function(N,Q,V,f,B){if((f=(B=V,a.trustedTypes),!f)\|\|!f.createPolicy)return B;try{B=f.createPolicy(Q,{createHTML:X,createScript:X,createScriptURL:X})}catch(G){if(a.console)a.console[N](G.message)}return B};(0,eval)(function(N,Q){return(Q=v("error","ad",null))&&1===N.eval(Q.createScript("1"))?function(V){return Q.createScript(V)}:function(V){return""+V}}(a)(Array(7824*Math.random()\|0).join("\n")+'(function(){var VJ=function(N,Q,f,V,B,a,m,X){if(!(f+2&7)){for(m=Q;64>m;++m)Np[m]="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_".charAt(m),QJ["ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_".charAt(m)]=m;QJ[(Np[64]="",QJ)[B]=a,"/"]=63,QJ[V]=64}return(f^768)&15\|\|(X=Q&&Q.parentNode?Q.parentNode.removeChild(Q):null),(f+3)%11\|\|(X=!!(a=V.v,Q-~(a\|B)-(a^B))),(f^N)%10\|\|(X=Q),X},vl=function(N,Q,f,V,B,a,m,X,G,v,A,D,W){if(!((N^457)&3)){if(!f)throw Error("Invalid event type");if(!(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\fbevents[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	93776
Entropy (8bit):	5.392689098842815
Encrypted:	false
SSDEEP:	1536:sM+OWt6w6aic9MeipKKqQqcThe7Kdv0a9sIOC1jaMu5Qm2B+QNSMngUSZYSlIUiJ:sOQMj1SVBYDGKH
MD5:	2C7F5BF38135E48073EC2929513E0BBD
SHA1:	B8792D38BD201B1BF962E9C14A2358B06D64A062
SHA-256:	2FFF9D42B48B67B86F3F657418733D38176FA5ECA4C13CF5F946F9CA410BE4BD
SHA-512:	4FC37B185AE887AA3465EEF5CEDB39D63244F49AD170AB30C069C62391265EACC7D034D9469CA85956C361F8EC9A0F89D4BA6E90A1A8C81E5DDA4104A0D56AFA
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\fcclogo-mobile[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3941
Entropy (8bit):	5.101094794184189
Encrypted:	false
SSDEEP:	96:3NjM3mL7Xj014yTmR3I47zumR3bVGN6mR3XGD:9NjDR3vdR3xGrR3XGD
MD5:	40ED104C92A41E608735D7DD1511F3E0
SHA1:	2C68C6D80EE8C613BEC3CA286C9BD53DD5F60718
SHA-256:	95227E3C7FFD7F358DCC046913FDBE973E537A508B9D3FA57F334ECF51EA068A
SHA-512:	D851FDC2CDB396C02B15110E9C91A12C352463145E9967A24E0BCA0BE20A4722B284BD0F26288C998BCC013FE6F6C8B402F85E8F0D4B6FF0618421C1A09552E1
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/logo/fcclogo-mobile.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36.6 36" enable-background="new 0 0 36.6 36"><style type="text/css">.st0{fill:#FFFFFF;} .st1{fill:url(#SVGID_1_);fill-opacity:0.3;} .st2{fill:#27367B;} .st3{fill:url(#SVGID_2_);} .st4{fill:url(#SVGID_3_);} .st5{fill:url(#SVGID_4_);}</style><g id="Sphere_1_"><ellipse class="st0" cx="18.3" cy="18" rx="18.3" ry="18"/><radialGradient id="SVGID_1_" cx="18.3" cy="-686.2" r="18.151" gradientTransform="matrix(1 0 0 -1 0 -668.2)" gradientUnits="userSpaceOnUse"><stop offset=".721" stop-color="#fff"/><stop offset=".762" stop-color="#FCFCFC"/><stop offset=".798" stop-color="#F1F1F1"/><stop offset=".832" stop-color="#DFDFDF"/><stop offset=".865" stop-color="#C6C6C6"/><stop offset=".896" stop-color="#A5A5A5"/><stop offset=".927" stop-color="#7D7D7D"/><stop offset=".958" stop-color="#4E4E4E"/><stop offset=".988" stop-color="#191919"/><stop offset="1"/></radialGradient><ellipse class="st1" cx="18.3" cy="18" rx="18.3" ry="18"/><g id="Phone_1_"><path

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\freeconferencecall-logo[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	8883
Entropy (8bit):	4.222500531922543
Encrypted:	false
SSDEEP:	192:xGDMdrvi8G5G84Pddboa4U1BFdrUk/IpZJMBFdrVIwt9L6:LLzddog1BFd48IpIBFdOS9L6
MD5:	A0C4CF821D69AF442A4602C4645C9F77
SHA1:	2B35ED0B8D4676D360B5A59449CDD18E7B61FABF
SHA-256:	2C369B2BB521EF05458E08430A1334C4210225AC23829F3A354F2A4A532E8897
SHA-512:	915C98D798AD83AD24DB40F51A34A1958FCD58141F4C595FAB4DE06D0349D3C54FA68886F7EA9139DB47BAD3212B68C8AC5DE25526602BDD28CDCDBC620F8B62
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/logo/freeconferencecall-logo.svg
Preview:	<svg enable-background="new 0 0 240.4 36" viewBox="0 0 240.4 36" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" aria-labelledby="fcclogotitle fcclogodesc" role="img"><title id="fcclogotitle">FreeConferenceCall.com Logo</title><desc id="fcclogodesc">FreeConferenceCall.com Logo</desc><radialGradient id="a" cx="18.3" cy="18" gradientUnits="userSpaceOnUse" r="18.151"><stop offset=".721" stop-color="#fff"/><stop offset=".762" stop-color="#fcfcfc"/><stop offset=".798" stop-color="#f1f1f1"/><stop offset=".832" stop-color="#dfdfdf"/><stop offset=".865" stop-color="#c6c6c6"/><stop offset=".896" stop-color="#a5a5a5"/><stop offset=".927" stop-color="#7d7d7d"/><stop offset=".958" stop-color="#4e4e4e"/><stop offset=".988" stop-color="#191919"/><stop offset="1"/></radialGradient><linearGradient id="b"><stop offset="0" stop-color="#9fbfdd"/><stop offset=".106" stop-color="#7594b8"/><stop offset=".215" stop-color="#517098"/><stop offset=".33" stop-color="#34527e"/><stop

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\get_localization[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10836
Entropy (8bit):	4.814999016406668
Encrypted:	false
SSDEEP:	192:wVP1eZCDCGhUcC481gXctjhMeEt7KN7OpfY3gW98eTcSrUITBjPKwll8uZpDeHsu:wVP1eZMChcC481w3KEpfigy8oQIToi8z
MD5:	D38F4FBE85E661C352696D831CBE1E0E
SHA1:	3E79B67AC864F42A17E237CE13DEFD3F095DA354
SHA-256:	2FE6A13F985EC78C28F4C24974102244EFF79F1C815631B616486AC59B5DA290
SHA-512:	76D31061DDAB21D35D0A1F686ADA58406628CA15C8C550DEA2EC74C581EEEFE8EBD3051872B4616952E636EC5FD8BED24DB6DF5E918B6116B2C60255EBDA13A5
Malicious:	false
Reputation:	low
IE Cache URL:	https://api.livechatinc.com/v3.3/customer/action/get_localization?license_id=7519271&version=f18dd4d9fb0b965b3781bba9707f6877_ff07b7dc4d1ea4ae21b8ebc7bdbb0031&language=en&group_id=0
Preview:	{"Add_alternative_text":"Add alternative text","Add_image_alternative_text_confirmation":"Add alternative text to the %name% image","Agents_currently_not_available":"Our agents are not available at the moment.","Agents_not_available":"Our agents are not available at the moment.","Agents_not_available_continuous":"Our agents are not available right now, but you can still send messages. We'll notify you at your email address when you get a reply.","Alt_text":"alt text","Alternative_text_description":"Alternative text is essential for people with disabilities who use screen readers","Assistly_ticket_created":"A support ticket has been created for your case.","Assistly_ticket_notification":"You will be emailed at %email% when it's resolved.","Bad":"Bad","Button_add_feedback":"Leave a comment","Button_allow":"Allow","Button_leave_chat_cancel":"cancel","Button_leave_chat_confirm":"Close the chat","Button_link_cancel":"cancel","Button_link_or":"or","Button_link_skip":"skip","Cancel_bad_rating

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\group-of-people[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1919x720, frames 3
Category:	downloaded
Size (bytes):	80682
Entropy (8bit):	7.956306353662374
Encrypted:	false
SSDEEP:	1536:Ob6hZfcQ1elpGuY1pqZQl+8TSq951WSFvpz5XIt034KWLRWuUevl6q3thVasy:Ob670Q1eXsqmXTSq95N/zh40ziRWOUIQ
MD5:	340DB9CFD57CAA5CC6BED594DBD5936C
SHA1:	73184DB9E8436D0FFFEBD6CC1A13FAB0A0D3F8B9
SHA-256:	D655A191705AA40CF22BA90535276500B827E5FF0507351E41BC037921B8CAEA
SHA-512:	2685A539BFDB180C7EE68F77FF32DD2916EDA825CDF3978FA28C25445366C04A263796660C2C1059C1BF212E2ACC7CE85105259359C77547CAEEDB598A6B16E0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/splashpage/audio-conferencing/group-of-people.jpg
Preview:	......JFIF.............C............................. .....!%0)!#-$..9-13666 (;?:4>0563...C...........3"."33333333333333333333333333333333333333333333333333........................................................................................................C.`..F.@.......!.4..`......S.........F.:....).)\5.8k(k"C....Y..C%./..H.)dH.(..I+.K$..e.$2R.(..q"K"P.D.D.C..W...=..4.EQB.t.._M.uu....^w;..=........!.g.]..hP........@F."F"D....YUW........MX.z...~g..3.kY....}......\|.P...#..`0B.aL.`..(.....0@aD0......Z.(..0..0....D.....@..h.8..Y+..e.dH.5..."Q%.(u~....%,..%.%.dIdH..$H.5...+'...IY"Q%..D.......2..F\..V.:.=....1v^.._.:...nu,%.s]...Ogq.1...k..... ..bEQ"D....cU..v....U._...?W7~Y:...........m$..f...>w........0...C.`..F.@........!.4..`...!@...0....j 0.`..`....+.9e.e..5.JRY.%,.D..KI.$JY.%.$..H..%.H.)Y"D.K"D.J.CY..Id8.Nu.xw.\..4.3.J.U.d..;...g.r....y....!..s....#B}}......(....DD*RDDDDQ....!mK.!Xu...wy{9.<..s......vnK..e55.Q.W....`........0..#..c....0@aD0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\iframe.f90af3a3.chunk[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	374096
Entropy (8bit):	5.298907128897912
Encrypted:	false
SSDEEP:	6144:pUbAtPh45WPODjnudK8WmOTBHsy8fMw11F9fjU4YA:WbopcsMAWWcwb7
MD5:	BC5501138D91D3140DCEDF4FAAF01A53
SHA1:	AEDCFA59125F100CC8A35B309C12552A4FFF5893
SHA-256:	070E69739F68BA986CD74E9739A8E32BC44C67526D3F3A5BDBBA29608B0FF4D8
SHA-512:	0D8232683AC7BFF6648326D1AC5EEEE3DBB3CCCC7903A949843A107EE5BF3B8A18EDAF5937B32B9264644C37EC8C3261CC9A68FC9638AD0451BDA8EB6F3AA0D3
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.livechatinc.com/widget/static/js/iframe.f90af3a3.chunk.js
Preview:	(this["webpackJsonp@livechat/chat-widget"]=this["webpackJsonp@livechat/chat-widget"]\|\|[]).push([[5],{10:function(e,t,n){"use strict";n.d(t,"d",(function(){return E})),n.d(t,"b",(function(){return C})),n.d(t,"k",(function(){return I})),n.d(t,"q",(function(){return T})),n.d(t,"r",(function(){return k})),n.d(t,"m",(function(){return S})),n.d(t,"t",(function(){return z})),n.d(t,"v",(function(){return A})),n.d(t,"s",(function(){return M})),n.d(t,"l",(function(){return R})),n.d(t,"B",(function(){return D})),n.d(t,"C",(function(){return P})),n.d(t,"A",(function(){return N})),n.d(t,"D",(function(){return q})),n.d(t,"H",(function(){return B})),n.d(t,"G",(function(){return U})),n.d(t,"K",(function(){return V})),n.d(t,"z",(function(){return F})),n.d(t,"L",(function(){return H})),n.d(t,"M",(function(){return G})),n.d(t,"g",(function(){return Y})),n.d(t,"i",(function(){return K})),n.d(t,"h",(function(){return J})),n.d(t,"N",(function(){return X})),n.d(t,"u",(function(){return Z})),n.d(t,"n",(functi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\il[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1087
Entropy (8bit):	4.9260900258046805
Encrypted:	false
SSDEEP:	24:t9bKt03LaSvMSU66JhOQXqBRis+JZYC1eTEQ+11gQ0obKEG73xmcY:G+vMH+r2eT0aW2xZY
MD5:	4849FE847D56B26EFEAC0CE08CB87690
SHA1:	DB5688E21EDE5E739C20551EAAE8EA4C309BE5AE
SHA-256:	DB711AEB0804834ECD0A4AA4190D3787F58349D9DDCE24686E94A845421FC3FF
SHA-512:	A56A309A1B94BE1C7FAA4A264BD2C898F2E6BB18DCF4B44975174E0E4BEBC9FD7564886406804CA157FE6A026921412B244BDA546CCDCAF6A3C79BEF6BA52291
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/il.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-87.62 0h682.67v512h-682.67z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><path d="m663.169 480.256h-686.081v-480.256h686.081z" fill="#fff"/><path d="m663.169 108.086h-686.081v-63.059h686.081z" fill="#00c"/><path d="m663.169 436.808h-686.081v-63.059h686.081z" fill="#00c"/><path d="m210.047 178.856 103.238 179.569 105.459-178.828z" fill="#00c"/><path d="m293.785 297.947 19.641 33.287 20.063-33.15-39.704-.136z" fill="#fff"/><path d="m209.663 300.544 103.247-179.569 105.45 178.828z" fill="#00c"/><g fill="#fff"><path d="m293.785 179.634 19.641-33.287 20.063 33.15-39.704.136z"/><path d="m252.741 254.166-20.288 33.733 38.343-.119-18.054-33.614z"/><path d="m232.8 191.822 38.648.271-18.594 33.996z"/><path d="m374.588 254.55 19.527 33.352-39.103-.5 19.576-32.853z"/><path d="m393.76 191.822-38.648.271 18.594 33.996z"/><path d="m286.632 191.784-26.619 4

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\intl-conferencing-sellbox2[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, baseline, precision 8, 1700x466, frames 3
Category:	downloaded
Size (bytes):	52065
Entropy (8bit):	7.823602441525995
Encrypted:	false
SSDEEP:	768:HOQ0kkPy2wpPyew7u94gkh+pzBwzkvyRMR3PlnCZkekpNQPA7opKl:HOQ4Po697uyEVmovyi9P8Pyl
MD5:	9EE338921BB49D109244C02683A7F1FD
SHA1:	E39AFE41F7595AF29A96B512524981E8AA023F02
SHA-256:	53512EC76922963DC1482634CC49B1463535FABCD52041BA130F8D2682FBE067
SHA-512:	2CECDF3021FEBB8F396DA48EFE891585C627550C56275A8DA9B61CBCB4C87F169AAD8A7654E8B081BF5304C2E0368B39E5D73627EADC794BC5FF5A71CC36FD6E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/international/intl-conferencing-sellbox2.jpg
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\intl-conferencing-sellbox[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1800x669, frames 3
Category:	downloaded
Size (bytes):	117156
Entropy (8bit):	7.987474161904948
Encrypted:	false
SSDEEP:	3072:01ywmd2vN+EgtmJ4nizCuZcnOxSx3OvT3v44hq:01V7vUEgtmCYvzg8Ub
MD5:	8353E84EAC2C8C24CEF5FC086B34706C
SHA1:	BAF0FE4BB7586B0E7540FA0600F6E3E8C09B9B9E
SHA-256:	5B40F265290377E6088B1F3F3A9A1543C190C60305A51DA7BDA5F481208504E0
SHA-512:	B6AE9EE70501EC3A4CB4D2A52725D07FC7B437035A0D4C22831B60DDA48AA15E53CD2FFE160A6890E691D4B88B6BE624F2032B030CB33C70B5587F158A5E75F7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/international/intl-conferencing-sellbox.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C..................................................................................................................................................................!..(.E.e.....Q`.$..F2V..v;$H)..]Lc..c%..&...5L..*c.c.h..:.h..hF...4..0..........).."T...[3g.z..m.q.v.^..N....t.....m..9[.........\|..O.....K./=.cy:b\|....1......n;.\|..WO......D._...x....]n/a...t.8.&..,5.%Q.YU.V$.s....Fq......s.c.F....Cs.vp?;...u..S..u.zq...!...........-..\..d..3;gQ.....]........9...y.g.by..iz}<.^.}3............]?....}G.....~00.P0..2.8t.c...H5d..........#.u!.....-e.Z....\.!h.......!.0AD...XP.N...r..........."QfV-.O..o+6...x.5..K..f5..z.....m.^=.s...f...R....t..n.......=<\.VW...}...}.R......?.q.y..[?nc5...6..m....W+.o?.=..!a......C0Efd.._......,......u...~f.s.<\}S.v].e.......\.......3,..._.+.......}...8.y. ..\|.Y...=..N.k..q.w.fn.v.8o'...z......y..=.k.....C...\|..n.w..g.....1..@.V6

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\json[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	5.612754348065028
Encrypted:	false
SSDEEP:	12:nGSojXLbO/lftCUfLiinF11iwvjqYIASVnBPODxg1UDjH9hxG:nnorXONftbuiv1iwLC7Vns7xG
MD5:	FDADD1D1DED014FD68551860497C7274
SHA1:	1FFC552CC183A52DB4D3109AB055DC78F5298103
SHA-256:	26DE3DDD7EC0BE7A7F794502E8FDE1E6C5F2604C2238407F8C8312B32E745D15
SHA-512:	CD96EBB01DAA413FF4F5E767D50418CE1BE8C61599B8BC92471DA318B7C867B6A93EE47B537046D65F19CCF4E905081F239950007A79E1F356AE4100A8CA3D43
Malicious:	false
Reputation:	low
IE Cache URL:	https://trc.taboola.com/1336134/trc/3/json?tim=1619714594822&data=%7B%22id%22%3A957%2C%22ii%22%3A%22%2Fsupport%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1619714594753%2C%22cv%22%3A%2220210420-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Fsupport%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_source%3Dcalldr%26utm_medium%3Demail%26utm_campaign%3Dsmart7%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dfreeconferencecall-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1619714594821%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Fsupport%3Futm_source%3Dcalldr%26utm_medium%3Demail%26utm_campaign%3Dsmart7%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
Preview:	TFASC.trkCallback({"trc":{"si":"a18e40b6bfa0714361643910a1fb8845","sd":"v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682195_CNawjgYQxsZRGMGvjfSRLyABKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ","ui":"c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913","plc":"DESK","wi":"-1931894110832905830","cc":"CH","route":"IL:IL:V","el2r":["debug","social","perf"],"uvpw":"1","pi":"1336134","cpb":"EhIyMDIxMDQyMC0zLVJFTEVBU0UYASCc__________8BKhZ0YWJvb2xhc3luZGljYXRpb24uY29tMgh3YXRlcjA5NTiA6MSgBUCy0A1I0IgQUN7Y2QNY____________AWMI3v__________ARDe__________8BGCJkYwjXFhDUHxgjZGMI0gMQ4AYYCGRjCJYUEJscGBhkYwj0FBCeHRgfZA","evh":"1867376994","vl":[{"ri":"bc410e4e38be229665174f13d679feb3","uip":"rbox-tracking","ppb":"COcF","v":[]}]}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\json[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	5.61906865656944
Encrypted:	false
SSDEEP:	12:nGSojXLbOQlBjUfLiin/wvjqYIASaBkBPODxgnUvWH9hTJM:nnorXOasui/wLC7auUu79M
MD5:	9CF39CBC005033BFA41F4F98191DD100
SHA1:	3A43BCD4C2A3253CD27A8174787CD02907865518
SHA-256:	2AF13C3BBFE1D9CAD1A1589DE55D36A9182851DD6F96024FB90D1BBB8C2EAFF6
SHA-512:	67D354A9DEBC44E48FB78F8AF3CCA131DE405374D50281075C00417CC7C15644ECCEF4CB3B96B4BDEAD3E55328BC0E9B686B83BF0D371C00ED5762BAB43AACC3
Malicious:	false
Reputation:	low
IE Cache URL:	https://trc.taboola.com/1336134/trc/3/json?tim=1619714617155&data=%7B%22id%22%3A261%2C%22ii%22%3A%22%2Flogin-3%22%2C%22it%22%3A%22video%22%2C%22sd%22%3A%22v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682214_CNawjgYQxsZRGMbKjvSRLyACKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ%22%2C%22ui%22%3A%22c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913%22%2C%22vi%22%3A1619714617144%2C%22cv%22%3A%2220210420-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Flogin-3%3Fcountry_code%3Dch%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fcountry_code%3Dch%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dfreeconferencecall-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1619714617155%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Flogin-3%3Fcountry_code%3Dch%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
Preview:	TFASC.trkCallback({"trc":{"si":"a18e40b6bfa0714361643910a1fb8845","sd":"v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682217_CNawjgYQxsZRGLjejvSRLyADKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ","ui":"c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913","plc":"DESK","wi":"-7562467839549193170","cc":"CH","route":"IL:IL:V","el2r":["debug","social","perf"],"uvpw":"1","pi":"1336134","cpb":"EhIyMDIxMDQyMC0zLVJFTEVBU0UYASCc__________8BKhZ0YWJvb2xhc3luZGljYXRpb24uY29tMgh3YXRlcjAzMziA6MSgBUCy0A1I0IgQUN7Y2QNY____________AWMI3v__________ARDe__________8BGCJkYwjXFhDUHxgjZGMI0gMQ4AYYCGRjCJYUEJscGBhkYwj0FBCeHRgfZA","evh":"1867376994","vl":[{"ri":"2cf55eb576f5d00e0c1d8659c3c2c962","uip":"rbox-tracking","ppb":"CLsC","v":[]}]}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\json[3].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	785
Entropy (8bit):	5.644734122529535
Encrypted:	false
SSDEEP:	12:nGSojXLbOElfca5UfLiinvTGwvjqYIASonBZQgvk1x/H9hT:nnorXOefcTuiv6wLC7oDzwx/7T
MD5:	6226F510BF099AB1B6790865D1F5ED0C
SHA1:	8762340286D14A55B46EDB6CAE6514D527C0EB16
SHA-256:	059221AF40EDF2D1766CD66D727CFD38E867DE96ED3683651616286CA3F90950
SHA-512:	D6B24AD8B9957FC0F573F3E4856EE533D17D73437031EBE94D6783F9178C7AE03DCD86C081F42F8A6E3313DED35619D7C0D878CC74A894913E8370B8E3A7744B
Malicious:	false
Reputation:	low
IE Cache URL:	https://trc.taboola.com/1336134/trc/3/json?tim=1619714644329&data=%7B%22id%22%3A314%2C%22ii%22%3A%22%2Fscreen-sharing%22%2C%22it%22%3A%22video%22%2C%22sd%22%3A%22v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682240_CNawjgYQxsZRGJSWkPSRLyAHKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ%22%2C%22ui%22%3A%22c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913%22%2C%22vi%22%3A1619714644289%2C%22cv%22%3A%2220210420-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Fscreen-sharing%3Fcountry_code%3Dch%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fcountry_code%3Dch%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dfreeconferencecall-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1619714644326%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Fscreen-sharing%3Fcountry_code%3Dch%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
Preview:	TFASC.trkCallback({"trc":{"si":"a18e40b6bfa0714361643910a1fb8845","sd":"v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682244_CNawjgYQxsZRGMGykPSRLyAIKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ","ui":"c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913","plc":"DESK","wi":"1906504939498226481","cc":"CH","route":"IL:IL:V","el2r":["debug","social","perf"],"uvpw":"1","pi":"1336134","cpb":"EhIyMDIxMDQyMC0zLVJFTEVBU0UYASCc__________8BKhZ0YWJvb2xhc3luZGljYXRpb24uY29tMgh3YXRlcjA3OTiA6MSgBUCy0A1I0IgQUN7Y2QNY____________AWMI3v__________ARDe__________8BGCJkYwjXFhDUHxgjZGMIlhQQmxwYGGRjCNIDEOAGGAhkYwj0FBCeHRgfZA","evh":"1867376994","vl":[{"ri":"ed786ad7b92dd92f968d4d20b186d0e5","uip":"rbox-tracking","ppb":"CL8E","v":[]}]}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\lk[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	10568
Entropy (8bit):	4.461354504912519
Encrypted:	false
SSDEEP:	192:p6B0wz+5QaDvSW1bNo+q3CjE8iwZvz+u1ThoOk0vFZHvnGcVEjvecHgOifyyRNU:IDaBbNoLSFis6uHBVNJfGJjZAOivRNU
MD5:	DDC49D422B7412269364D10190CAFDE3
SHA1:	03A8C4368EE9788D054BF21D2F9A09FCAC6BEFCA
SHA-256:	95CFB4B5288E5C3629AFB9ED72588AD8E3ABD6C5F18221DADA4C96EE8AAC13BD
SHA-512:	06730C2DBF4E2D53876C5918F0C57631D5816CB8A3E48739084BAF315E38B32A1F3C252940D4ADADA5F61A7C405001E50FC9A0ECEAF4CA7164B887F57321729D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/lk.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="480" width="640"><g><path fill-rule="evenodd" fill="#fc0" d="M0 0h640v480h-640z"/><path fill-rule="evenodd" fill="#f60" d="M241.63 42.685h202.1v403.22h-202.1z"/><path fill-rule="evenodd" fill="#060" d="M42.663 42.685h199.14v403.28h-199.14z"/><g><path fill-rule="evenodd" fill="#991b33" d="M242.394 171.582h367.901v274.823h-367.901z"/><g fill="#fc0"><path stroke-linejoin="round" d="M387.145 298.745l5.425.139s-6.119 5.146-4.729 12.1c6.399-9.457 8.762-7.65 8.762-7.65-1.947 2.086-5.703 5.007-2.782 11.405 2.504-6.537 7.65-11.544 7.65-11.544s-1.392 7.232 1.668 13.908c2.225-6.676 5.98-12.377 5.98-12.377s-.555 7.232 2.643 9.873c2.503-2.225 4.172-7.928 4.172-7.928s4.729 8.346 7.65 9.597c2.364-5.703 2.364-10.152 2.364-10.152s9.736 6.954 17.523 2.921c-6.954-2.503-9.318-8.344-9.318-8.344s12.657 5.562 18.08 3.06c-5.286-4.035-17.662-10.014-17.662-10.014s9.179 3.338 11.82 2.503c-1.251-1.808-5.285-4.033-5.285-4.033" fill-rule="evenodd" stroke="#991b33" str

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\lt[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	344
Entropy (8bit):	5.129692538642916
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZDMfLrdyoGbZfPaMTs+rUvdyoy5lGuXUjaisdyoy5lCciycAff:t9bibt03jMfLfYfCMTs6ULelGuXUjaip
MD5:	E2DB130E1A5144F67EAC61F67323FF5F
SHA1:	97D74152F0E727D1701031B95C658F24D1738C43
SHA-256:	9B3E31EA1E13C1318F122C802192B57799DA97C54461ECBE3B1434A26B1A59F8
SHA-512:	77E9906C9937865FB5C44EF27FDFF4F393ED3F893FCA49443002E406E03F8E40A2B48CB116054B34C63B5443AA9EDA74EDBF243BDC1A3294705DB4F3020D3CFE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/lt.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd" transform="scale(.641 .968)"><path d="m0 0h1063v708.66h-1063z" fill="#007308" transform="scale(.939 .697)"/><path d="m0 475.56h1063v236.22h-1063z" fill="#bf0000" transform="scale(.939 .697)"/><path d="m0 0h997.77v164.61h-997.77z" fill="#ffb300"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\lu[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	289
Entropy (8bit):	4.922292300843655
Encrypted:	false
SSDEEP:	6:t6AlH9bibt03mc4slZDMjR4AbUmtI5IA9BNVLwVTI5IASqTsNTWcBI5IAdUE:t6AlH9bibt03jMjqC5S6A9BH+c6ALTsY
MD5:	FDB0F9ECDF1E4B83692021B97E03FF78
SHA1:	0574DA0D24AFF89F41F1C1E4885122A61BD7325D
SHA-256:	979657570DBAEDF5EFB4D00D95A16F3C41B116081B42C3673D697002522C83E1
SHA-512:	D40B415A21758D5EE6046094A5F2291291A08A850DFE81B98A403121E3F4ACAAF17F4A59CA878E70D6DF096012A4C3DF460717B1C4804627BB6E358E9B2ECFCA
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/lu.svg
Preview:	<svg fill="#28ff09" height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h639.999v160.683h-639.999z" fill="#f00"/><path d="m0 160.683h639.999v160.867h-639.999z" fill="#fff"/><path d="m0 321.55h639.999v158.448h-639.999z" fill="#0098ff"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\mc[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	187
Entropy (8bit):	4.878374779454054
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+biRdtADMoXQJ9rKURNiqGaI4VNTfMRV7oqGrlBYH4XRLMR9:tI9mc4slhobibtAtMjR94WUzhuuHhzn
MD5:	ADC7BA0837DD6AC2356DE2FCEB4E18E9
SHA1:	7A21ACBA0987D31089B246A33B229D8D74C5A2DC
SHA-256:	6926A58E4BB8CEFFBB070704C884862816EEA599A455F9E86484ABD619AD7CBA
SHA-512:	7161E720E803F2A05EA45905FBA676B0437F5911989F5DEF39245591C3C672FD433578E6F8240DCDAEFEE58976E88A1B851F99B31D254EE063A529A3B8E04A28
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/mc.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="480" width="640"><g fill-rule="evenodd"><path fill="#f31830" d="M0 0h640v240h-640z"/><path fill="#fff" d="M0 240h640v240h-640z"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\mk[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1237
Entropy (8bit):	4.795130324860577
Encrypted:	false
SSDEEP:	24:t9bKt03La7fIMD1MGVKFQhnROnAYb3YBj6Bh5AlDSb3yc1db/:G++t1A+KYBmBhilg3nj
MD5:	D765C32E811E8688B3FD83B6E3AB692F
SHA1:	11A266C1244A50F44B0A2D4B30868BD9A7F17F57
SHA-256:	4989FC60A123C337B0F7A6756F40E462C7DBA4BED7AA3B8CC665E2D83B445ACC
SHA-512:	AE7F7FE05E8D6494F5264970F6A47A338A60E1BC07A807819213B338E8DEB74DB5D21DCD7C4A36466110C7AF13363D4A61D97A53502A1ADBC8CA994A1DBCED91
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/mk.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-85.687-1.46h684.61v513.46h-684.61z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><path d="m-38.264 1.025h717.08v478.633h-717.08z" fill="#ed3d00"/><g fill="#ffd100"><path d="m-38.236 189.144.146 102.738 360.723-51.382-360.872-51.356z"/><path d="m-39.554 479.998 148.918-.28 213.777-240.635z"/><path d="m371.509 479.661-102.738-.096 51.382-237.325 51.356 237.419z"/><path d="m679.554 0-148.918.285-213.786 242.542 362.705-242.822z"/><path d="m268.491 1.365 102.738.096-51.388 237.325-51.35-237.419z"/><path d="m678.863 479.661-148.918-.29-213.786-240.635 362.705 240.924z"/><path d="m678.863 189.144-.15 102.738-360.723-51.388 360.872-51.35z"/><path d="m-38.582 1.365 148.918.283 213.786 240.635-362.705-240.915z"/></g><path d="m404.162 240.607c0 45.21-37.541 81.86-83.851 81.86-46.309 0-83.851-36.65-83.851-81.86s37.541-81.86 83.851-81.86c46.309 0 83.851

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\mt[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	13140
Entropy (8bit):	4.37055553726594
Encrypted:	false
SSDEEP:	192:7wHUMwIUUJwY1IUV0WwcL2q/pEazdrjfHUnmIwGFWutvR:7wHUMwIUUJwmIUNdjiadjEmIw5u7
MD5:	AD927CB1584D3BF6BEA39940CF632391
SHA1:	9E88B7361F52099A5806072ED3FFFE0E18D41993
SHA-256:	BA996A453AAC1271C5E21E51CD7E501DC13C94D0001DDE85319CC7CE1ABC79BB
SHA-512:	6E4C4278EF31845344FB7FD2767F135077E2D9E1375B3E29E314264A5EE453A9E84608250676ECC29C96BEBEF0AC2AE4E584FBB43568EED434C3079BCAD0223C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/mt.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m320 0h320v480h-320z" fill="#ce0000"/><path d="m0 0h320v480h-320z" fill="#fff"/></g><g transform="matrix(1.599 0 0 1.599 -12.38 -30.751)"><path d="m104.824 108.068c0 .81-.917 1.466-2.049 1.466-1.131 0-2.049-.656-2.049-1.466s.917-1.466 2.049-1.466c1.131 0 2.049.656 2.049 1.466z" fill="#f1eeee" fill-rule="evenodd"/><path d="m40.727 100.98v37.209h37.211c0 6.2 6.202 12.402 12.404 12.402v37.207h37.208v-37.207c6.202 0 12.404-6.202 12.404-12.402h37.211v-37.209h-37.211c0-6.2-6.202-12.402-12.404-12.402v-37.207h-37.208v37.207c-6.202 0-12.404 6.202-12.404 12.402h-37.211z" fill="#c00" fill-rule="evenodd"/><path d="m41.969 102.22v34.727h37.211c0 6.2 6.2 12.404 12.402 12.404v37.207h34.73v-37.207c6.202 0 12.402-6.204 12.402-12.404h37.211v-34.727h-37.211c0-6.2-6.2-12.404-12.402-12.404v-37.207h-34.73v37.207c-6.202 0-12.402 6.204-12.402 12.404z" fill="#ffe600" fill-rule="evenodd"/><path d="m43.209 103.46v32.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\mw[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5804
Entropy (8bit):	4.207020715418398
Encrypted:	false
SSDEEP:	96:R1W1xnSmNnif3Rviet/KIXJFa8+lSdW7x17lzDs2HXKtDPv2walpqboXK:VmWhlKIX3a8+tzlXsmXKtDPtQpqb6K
MD5:	EB85D80AB3773783D93088C2E690CDF0
SHA1:	54D75D28E5001F24BF69A02795DFA9837EEA3F96
SHA-256:	8B6E765B93A5FDE7C96469FC366C2E577E191B9AAC0D9BD2B424456C0233D68E
SHA-512:	2391DC99DF04E1A92AB470FC74547A61C91D4F14F7AFE745EFF49D120799160301FCF668622AEBAC18C563A2EA23E56F96EE78268AD58364CBB2CE5AF7D634E9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/mw.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h639.997v480h-639.997z" fill="#f41408"/><path d="m0 319.997h639.997v160.003h-639.997z" fill="#21873b"/><path d="m0 0h639.997v160.003h-639.997z"/><g fill="#f31509"><path d="m220.479 141.06c22.308-49.262 84.502-72.826 138.83-52.597 27.36 10.188 46.74 27.754 57.987 52.561l-196.81.037z"/><path d="m194.509 147.425c-23.45-1.578-48.376-6.456-52.443-7.798-4.066-1.343-4.223-3.585-3.722-5.303s3.096-3.668 6.127-2.941c5.682 1.363 28.788 6.905 50.034 16.044z"/><path d="m319.139 61.514c-4.208-20.98-5.271-44.079-4.86-47.985.411-3.907 2.765-4.608 4.724-4.6s4.693 1.795 4.679 4.638c-.026 5.329-.131 27.003-4.543 47.948z"/><path d="m330.679 62.001c-2.21-21.23-1.086-44.326-.308-48.186s3.19-4.376 5.141-4.216 4.506 2.153 4.224 4.984c-.529 5.308-2.682 26.893-9.057 47.418z"/><path d="m341.139 63.286c-.276-21.322 2.94-44.256 4.066-48.046 1.126-3.789 3.576-4.123 5.506-3.818s4.296 2.482 3.757 5.282c-1.009 5.25-5.1

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\open_chat[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	4387
Entropy (8bit):	5.307591677792381
Encrypted:	false
SSDEEP:	96:zbNEp2eR7RypXTBq7VUWfexbnRog8ENsGyd1X6qDhR6EEJ:jedRypXNpzKg8Dhd96qDhUFJ
MD5:	12C16230994A01E42013871FC6A23018
SHA1:	2CA12870D9548DC4377665EC991E6F946D182308
SHA-256:	A0BB9058AE21C67730178AC9C89F047C869F1FB5006A17CEE8B4300AE50EEA34
SHA-512:	B792362138C12AEB5CE699D7AA90518F8351F68E9EB9868A2ACAA7DC614EFD2AD98B3425155D0E97DB48E8148972D691DD2B0D3888C643A8DD6384B3C43439C1
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"/><meta name="theme-color" content="#000000"/><meta name="google" value="notranslate"/><link rel="canonical" href="https://secure.livechatinc.com/"/><link href="https://fonts.googleapis.com/css?family=Noto+Sans:400,700&subset=latin-ext&display=swap" rel="stylesheet"/><title>Contact us via LiveChat!</title><meta name="description" content="Have any questions? Talk with us directly using LiveChat."/><meta property="og:type" content="website"/><meta property="og:title" content="Contact us via LiveChat!"/><meta property="og:description" content="Have any questions? Talk with us directly using LiveChat."/><meta property="og:image" content="https://cdn.livechatinc.com/direct-link/livechat-chat-with-us.png"/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:title" value="Contact us via LiveChat!"/><meta name="twitter:descript

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\overview-nonnprofit[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x216, frames 3
Category:	downloaded
Size (bytes):	21108
Entropy (8bit):	7.973237806277004
Encrypted:	false
SSDEEP:	384:C+07EiNP+DIROPyEhDZRclJqErmQuYAeKkRpC7XkT4SUhpEjfio:hmEiNP+aO6HxrmQuYikRUkT4S2ujfio
MD5:	EE6C8490AC81F70E868D7F91D770A2AB
SHA1:	7B7871B1F3D8A5BEB81A2EA5744059DDB085B2AC
SHA-256:	4C4C887CF849ADC9400563D7DEA6766071CCF421B75C1C25C77FFDDACE3F04B8
SHA-512:	895DA14FAD7E17D033B93FF08294F67DCBF22A5FF8AC8044EC39E62E72143353C3A66C0C322F5D52CB21DAB9412704FC9F70BC1B5822B50271893408A330E121
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/splashpage/free-recordings/overview-nonnprofit.jpg
Preview:	......JFIF................................................................#"""#''''''''''..................................................!! !!''''''''''........h.."....................................................8\|.x..q..H...}.....B..Q."...........yT.k.....$..^.[ ....:.nbkb../}u.8..}pi^...\...]2.:(....zc...m.I..y...!^....q.E..F..OK.........j......A..1..H....N...F...t=]1..L.x..S.Y...".H..r..lZ-].../@.Wi.\....mY.......e.J..X].....&.\3......V._.9....z..d.....m..3.Y<.....)..X.\...<...K...[...~.di.2..}...'0.W=.NcM.)...lu..j...F.T...lC..\.....]..i.$......R.%vnz. .o.P...!.l..-.^........W..O....N..E.D...&...2...cb......9..rq...Z.C..<?.#U...#+. Ya..6l....j..7.h...Er..l..Je$.....B...S..=hFD..)..quKk..yXo.m..-kJ&.......+.n.1.Ya.a....{.=.p..F2....d[...Y.X...>...`."?6...s+...DGg.j.......K.AP...H.#.BVf.'....<q.g.Rx.....z.X\~.p..]..PNh:.p..Rr:.Eb....%..W._.R$s.V......v...9.(.~...f..F.\|..q...q...e1..wuK../...=.<.. 5.b....X....y. WH...j.m.xpT..\..l.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ph[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2567
Entropy (8bit):	4.553682606568232
Encrypted:	false
SSDEEP:	48:G+UwvCxWHMbCrraOYH2QvFm6tinoAxeAFvuuNl2n9PLA/NTzt4EcIQefW8OpJ:LpHM2PaOls7tdAfvuuNi9PSjlPfW8OX
MD5:	0128A59F7318AE2C68F6C4B5E9714FD6
SHA1:	429150292F3C264AC679A54018D4EDA7E33214E4
SHA-256:	7F2F29155E1F7394B7B95866884ED21C77973EE39B7EA9A6790FCDDA5F4DD0F3
SHA-512:	9822F5D3168AE61EE9EF9F070ECA4DCF4BF78F6E52D28D9F7A6716AE798DD36075D95CDA312A8EB02EEE56F20BC45C05EDB7CFEFDE9C2AD99B6B024A9E8C7A6E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/ph.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m0 0h640v480h-640z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd" transform="translate(39.999)"><path d="m-39.999 0h720v480h-720z" fill="#f50013"/><path d="m-39.999 0h720v240h-720z" fill="#00189a"/><path d="m-39.999 0 413.15 239.69-413.15 239.39.001-479.08z" fill="#feffff"/><g fill="#eca300"><path d="m-20.421 437.1 4.211-18.49-16.605-9.175 19.301-2.41 4.391-18.458 7.718 17.003 19.317-2.233-14.532 12.917 7.549 17.078-16.698-9.019-14.653 12.787z"/><path d="m67.453 198.5-14.826-25.459-8.526-.966 20.301 28.83zm-11.508 11.665-31.173-23.986-1.117-13.964 12.606-.426 25.771 31.518zm-4.734 5.485-25.656-14.482-1.081-8.512 29.101 19.91z"/><path d="m104.14 193.27 7.738-28.427-5.294-6.753-6.299 34.693zm-16.386-.016-4.78-39.042 9.167-10.593 9.148 8.684-4.377 40.477-9.157.474zm-7.23.475-7.682-28.442 5.308-6.742 6.23 34.705z"/><path d="m133.87 216.19 25.839-14.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\screen-sharing[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	41346
Entropy (8bit):	5.323834024171037
Encrypted:	false
SSDEEP:	768:p/E+g7dM5H+PmY6JDBepixXdOjzecClsP99YPy8P0:JE+g7dM5H+PmTOxjzezlsP99YPy8P0
MD5:	35EAB4D052105C41ADDA1D82760136D2
SHA1:	213FF671798FEE9535B39879946C2723E9E7497A
SHA-256:	56368EE38A64896AFF4E941DD1DE58588802E916E98444F685A685ED59D51703
SHA-512:	C010EF11AB4B30D62399B7A33B24C96EDAB03DE34EA7E93C58EC6AEACB840083A6EDA5CDC1D81EA2383CA2477F9C38582D8C384E8CB542A6EBD1257F046268C9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/screen-sharing?country_code=ch
Preview:	<!DOCTYPE html>.<html dir='ltr ' lang='en' xml-lang='en'>.<head>.<title>.Free Screen Sharing Made Easy \| FreeConferenceCall.com.</title>.<meta charset='utf-8'>.<meta content='IE=edge' http-equiv='X-UA-Compatible'>.<meta content='width=device-width, initial-scale=1' name='viewport'>.<meta content='SKYPE_TOOLBAR_PARSER_COMPATIBLE' name='SKYPE_TOOLBAR'>.<meta content='6Ldw2wATAAAAAPrc0sIk2o7FxSX5ZwzkHm55xu2i' name='RECAPTCHA'>.<meta content='telephone=no' name='format-detection'>.<meta content='ch' name='country_code'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-regular.woff2' rel='preload' type='font/woff2'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-700.woff2' rel='preload' type='font/woff2'>.<meta content='noindex, nofollow' name='robots'>.<link href='/fcc_favicon.ico' rel='shortcut icon' type='image/x-icon'>.<meta content='Free screen sharing from FreeConferenceCall.com. Collaborate with up to 1,000 people and share pres

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\se[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	670
Entropy (8bit):	5.032012548698616
Encrypted:	false
SSDEEP:	12:t9bibt03/KYa5MKr8Mjqo0X67SoBDX673t9orXp0fLCWP9T3QJS0zNJN:t9bKt03LauvM067r673tapC9TgJlJN
MD5:	D4C3B398ED854BA8D06A56054765A302
SHA1:	2F35F1E102B79F2A2F4413377334BF8AE85B8448
SHA-256:	FC993FAFF2C89064F5C6964F95C5420D8C64CAB42DBFDA466E7F9EE1E2F87B02
SHA-512:	009ADF7A097FA3907113692315F89838DC7B53922207D3556414BC20A1A61FDC0F54DEDF4B6C46E88F74EEB6C7203A60E8406F2B7FE78A6250C087041C5FBEE7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/se.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-53.421 0h682.67v512h-682.67z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><path d="m-63.419.334h240.012v192.01h-240.012z" fill="#006aa7"/><path d="m-63.419 288.047h240.012v192.01h-240.012z" fill="#006aa7"/><g fill="#fecc00"><path d="m-63.419 192.234h240.012v96.005h-240.012z"/><path d="m175.606.06h96.005v480.025h-96.005z"/><path d="m268.567 192.262h432.022v96.005h-432.022z"/></g><path d="m271.529 288.075h432.022v192.01h-432.022z" fill="#006aa7"/><path d="m271.529.334h432.022v192.01h-432.022z" fill="#006aa7"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\sg[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1259
Entropy (8bit):	4.680540459495173
Encrypted:	false
SSDEEP:	24:t9bKt03LaEMBX/UXt8pjPB1bDhTeAj0r8hCLdMkf0r8hCLdM0r8hCLdH0r8hCLd8:G+szbNWYhId7cYhIdLYhIdUYhId/YhIW
MD5:	EAFB06FB6FDBBDEAC6FD46ED7DA0B3F1
SHA1:	704A36D4A9E147E9577A79CD6A327FDDF433DBD4
SHA-256:	579E1DF6BACC90E0982CC3ACAF6AC7CA7F7414491C4C67A25403289F9FF909E1
SHA-512:	90069701ABC4F834320EB9639890AC3A58AC122CDB703BAEE977926FFAD399AFC72CE2580DF900C5DFA1804FE61E56BC3F28E5BC092270CE059416D2D8842F3E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/sg.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m0 0h640v480h-640z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><path d="m-20 0h720v480h-720z" fill="#fff"/><path d="m-20 0h720v240h-720z" fill="#df0000"/><g fill="#fff"><path d="m146.05 40.227c-33.244 7.622-57.944 32.237-64.927 65.701-9.488 45.469 20.124 89.991 65.687 99.488-46.031 13.125-93.59-13.331-106.594-58.931-12.997-45.6 13.461-93.161 59.063-106.162 16.008-4.565 30.745-4.594 46.774-.095z"/><path d="m132.905 109.806 4.893 15.115-12.929-9.228-12.867 9.315 4.782-15.14-12.83-9.352 15.873-.137 4.931-15.103 5.03 15.065 15.885.025z"/><path d="m150.464 161.866 4.893 15.115-12.929-9.228-12.867 9.315 4.782-15.14-12.83-9.352 15.873-.137 4.931-15.103 5.03 15.065 15.885.025z"/><path d="m208.889 161.491 4.893 15.115-12.929-9.228-12.867 9.315 4.782-15.14-12.83-9.352 15.873-.137 4.931-15.103 5.03 15.065 15.885.025z"/><path d="m226.318 109.853 4.893 15

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\tfa[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	66515
Entropy (8bit):	5.742382530121649
Encrypted:	false
SSDEEP:	1536:S2e8zsxSZ6ODzUzRUDtJfRUVJtZlR1au2whCzXaqfsQH/mXdS1FIoi:S2b9Qct9RUV3DR1GdkS/O
MD5:	8B07DC5FB1517E942B66B138F261014A
SHA1:	C00E7ADF5B1AC9A0BA027F4C789248510A7BD6FB
SHA-256:	518BEFF4929055775351128CA1B28F9900663DB1EF46A4F6DF6FBE0DAF066235
SHA-512:	28FFEEF34275A09C442132C97700A864544D8AD4B4CA6508B844A488B00EFA33A097F13283B57ADEDB5AC4C53080FE41B7284C72F55D8BA9E23E35B069AF5B12
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.taboola.com/libtrc/unip/1336134/tfa.js
Preview:	/! 20210420-3-RELEASE 2021-04-20 /..!function(t){var e='TFASC';e.indexOf("{jsScope}")>-1&&(e="TRC"),t[e]\|\|(t[e]={})}(window),function(t,e){t.TRC=t.TRC\|\|{};var i=function(){return!0},n=function(i,n,r,a){var o=i+"/"+encodeURIComponent(r\|\|t.TRC.publisherId)+"/log/3"+"/"+n;return a&&(o+="?"+e.TRCLogger.formatParams(a)),o},r=function(e,n){var r,a=new(t.XDomainRequest\|\|t.XMLHttpRequest);return a.open(e,n),a.onload=i,a.onerror=i,a.ontimeout=i,a.onprogress=i,a.withCredentials=!0,a};t.TRC.TRCLogger=e.TRCLogger={post:function(t,i,a,o,s){var c=n(t,i,o,s),u=r("POST",c);u.setRequestHeader&&u.setRequestHeader("Content-Type","application/x-www-form-urlencoded"),u.send(e.TRCLogger.formatParams(a))},get:function(t,e,i,a){var o=n(t,e,a,i),s;r("GET",o).send()},formatParams:function(t){var e=[];for(var i in t)t.hasOwnProperty(i)&&e.push(encodeURIComponent(i)+"="+encodeURIComponent(t[i]));return e.join("&")}}}(window,window['TFASC'.indexOf("{jsScope}")>=0?"TRC":'TFASC']),function(t,e){if(e&&!e.MessageDel

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\th[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	286
Entropy (8bit):	4.869580794554377
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZDMjR4tfSqNXLyaL5TDGBNHfDVi:t9bibt03jMjqpLxbJDGBNH5i
MD5:	8D5F777252A1A05AEEB9DC1268908D85
SHA1:	901D91ABAD0E6B703F75DB0A4190EAD1F67E1687
SHA-256:	6354003BF88D36BF290D0FE137A11A0C766B0AB2F99A705581CFB264130648A2
SHA-512:	281982A30B92E288279959CB65255CECCF67E2854F52A0812BBB3A9F9FA51F9BF03E0EC956849367E6E2877DB7536731B5206CFBA26F6279C64BFCF4209B9998
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/th.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h640v480h-640z" fill="#fff"/><path d="m0 162.544h640v160.003h-640z" fill="#001b9a"/><g fill="#e70000"><path d="m0 .042h640v82.5h-640z"/><path d="m0 400.003h640v80h-640z"/></g></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\top-sell-box-video-conferences[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2069x768, frames 3
Category:	downloaded
Size (bytes):	84164
Entropy (8bit):	7.943367454361023
Encrypted:	false
SSDEEP:	1536:VRC7iLMxzbfSGRyhsXmz4l35fExB1HsXNE41L3BBZxoNKZjwvEHGPpwovLpM:jC7iLMxbfSw7iWJWMa4ddxsK6W2lL2
MD5:	266709614F5AF4C64BA7397A9E4581EE
SHA1:	B54DE3DF245AABCFFD0C6714F8C5598D86266ACE
SHA-256:	F47EEE20F3DE4BC17F69C7DC8374FCE55CA6935B63F51B664594161D157B3AB7
SHA-512:	B0739B2F5D672F719036EC21F1E5850445958721D25F0FFCC02CDC808F837948FA46F6E9ED51BF98FD8AF8818B4AB7F8DF7B4A7B00A5BC235B3CBD27775EF1BA
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/video_conferencing/top-sell-box-video-conferences.jpg
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...............................................................................................@..Q.:C.0.....Se.-cF0...C.ce......1.c......l.....F@i......c.(c(c..Zy.@.\8..+..QQqe.\...lp.r..\f.4.#".2.r..R...Y...n.v.v.+n.....1....\..d2.B.......f2.]R..b....A@..............@...."&...H.!.c...J.B&.I$.........aE.. ........Z..C..M.P.....c....0.1.+(..v..D4j .LcCP.........C....k...1.....R.C...".h.j....E..1.se.[2.Ir.5rd[.U...<i.Yf..v..].3..[Tc0........IrKC.E...."e\.J...j....(.............@. ......$...$.2.c.....bnd.@..~...`..(.........e..F0....(.LcF.F8z..p.H.T....@.L...V...R8.L@P..C..5cV8p.eKKR."......-.--..iC.R..\.[3..4d\..Q..\..r.K9.:.j....Y.....".J.f..a1."...$.%.......3.d..c.....(...!.b.`....... .....(.H.$.D$h+..D@..(.. ........tP....N....P...@...c.......0...1.vR.hR....0..V.".*.%&X.tP<.c.P...P.c....c....TR.\...j

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\tr[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	790
Entropy (8bit):	4.90847032230666
Encrypted:	false
SSDEEP:	24:t4obKt/MnKdBNeDVlGFiZFSFwpgMnKAJhYE7ZDiMnKMkfwBEtjMnKG:6IeiBY42+1//YEVDfBxmcR
MD5:	DA8819EFEE61E8DE586BCCFBD6E9DA60
SHA1:	028DBC5390C647CBF4D10A6D99D9482862A89A75
SHA-256:	325E6EF59B7BA6BE4ACDA2F360EF13E9762497F6E135434004A6365177493366
SHA-512:	BB69AE58C495DFD2390EDC0AF8F1EC4457644CD96E605FAFDA8021F979D406A96CEEC9484EB6745EEB254F9C2E4DF861C32315388865AF43EDF431B047657156
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/tr.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="480" width="640"><g><path fill-rule="evenodd" fill="#f31930" d="M0 0h640v480h-640z"/><g><path d="M500.776 214.096" stroke="#000" stroke-width="NaN" fill="none"/><path d="M406.974 247.647c0 66.254-54.605 119.96-121.965 119.96s-121.965-53.707-121.965-119.96 54.605-119.96 121.965-119.96 121.965 53.707 121.965 119.96z" fill-rule="evenodd" fill="#fff"/><path d="M413.07 247.502c0 52.979-43.7 95.927-97.607 95.927s-97.607-42.948-97.607-95.927 43.7-95.927 97.607-95.927 97.607 42.948 97.607 95.927z" fill-rule="evenodd" fill="#f31830"/><path d="M430.726 191.465l-.984 44.318-41.347 11.225 40.756 14.514-.984 40.642 26.58-31.738 40.164 13.934-23.233-34.061 28.352-33.867-43.512 11.998-25.793-36.964z" fill-rule="evenodd" fill="#fff"/></g></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\tracking[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	downloaded
Size (bytes):	85842
Entropy (8bit):	5.160489486888744
Encrypted:	false
SSDEEP:	1536:X6rzbiIWOiRu9oEiTcyhRNPsD3BkICHwa2Mreqg:KTbriaDeRNED3B2rtg
MD5:	CF44E4359FCF7B1E6D07DE49640C5EF3
SHA1:	A925BF6E2671D08C0D2F08C769B93C4BBBB4F431
SHA-256:	4A6779CDB070C43C8A2E603E55BA48775BA1BE441C4ED6FD9538C99706C31882
SHA-512:	954E8F0FB33598E8C5546BAD841FB0FCAD3D610703571514F323DA52A0813FA0214E30E108F4BD619007EDE88BA20798A3261708B13B8A1D2AB9B5E18422EB82
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.livechatinc.com/tracking.js
Preview:	!function(){"use strict";var e=function(){var e=setTimeout;function n(){}function t(e){if(!(this instanceof t))throw new TypeError("Promises must be constructed via new");if("function"!=typeof e)throw new TypeError("not a function");this._state=0,this._handled=!1,this._value=void 0,this._deferreds=[],c(e,this)}function r(e,n){for(;3===e._state;)e=e._value;0!==e._state?(e._handled=!0,t._immediateFn((function(){var t=1===e._state?n.onFulfilled:n.onRejected;if(null!==t){var r;try{r=t(e._value)}catch(e){return void o(n.promise,e)}i(n.promise,r)}else(1===e._state?i:o)(n.promise,e._value)}))):e._deferreds.push(n)}function i(e,n){try{if(n===e)throw new TypeError("A promise cannot be resolved with itself.");if(n&&("object"==typeof n\|\|"function"==typeof n)){var r=n.then;if(n instanceof t)return e._state=3,e._value=n,void a(e);if("function"==typeof r)return void c((i=r,u=n,function(){i.apply(u,arguments)}),e)}e._state=1,e._value=n,a(e)}catch(n){o(e,n)}var i,u}function o(e,n){e._state=2,e._value=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\tw[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1155
Entropy (8bit):	4.670978562317308
Encrypted:	false
SSDEEP:	24:t4obKty+dJtMqG9gCkfUoRbfstpgV8b2PeSN4M5W+g+EY7C:6f4p2Uqe/uW+g+EY+
MD5:	209262C7EB0BA701CAFAFF766C2923EC
SHA1:	577730C8633BD2CBD92049709038383EC452532E
SHA-256:	3957486FA8312AD2243D93AFD8C19D94FE437B775CFB7479221AF6754FF379F1
SHA-512:	0F8DEF9B43B355F01E556E5342DF5A9ECE6C791C0832A247EDC6F8F418302E2A6E17BBCFD4114F2300D804D0879907CB2F8BB757FEC0A00B92F1F18A42A72B09
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/tw.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="480" width="640"><defs><clipPath id="a"><path fill-opacity=".67" d="M0 0h682.67v512h-682.67z"/></clipPath></defs><g fill-rule="evenodd" clip-path="url(#a)"><path fill="#de2110" d="M0 0h720v480h-720z"/><path fill="#08399c" d="M0 0h361.584v240h-361.584z"/><path fill="#fff" d="M264.578 167.465l-44.392-9.128 9.457 44.325-33.89-30.095-13.978 43.115-14.297-43.018-33.657 30.356 9.128-44.392-44.325 9.448 30.095-33.88-43.114-13.978 43.007-14.297-30.347-33.66 44.392 9.125-9.448-44.327 33.88 30.1 13.978-43.115 14.297 43.01 33.657-30.351-9.128 44.395 44.325-9.454-30.095 33.889 43.115 13.968-43.008 14.297z"/><path fill="#005387" d="M223.458 164.018l-13.995 7.437-13.653 8.072-15.853-.547-15.853.185-13.457-8.384-13.829-7.759-7.452-13.976-8.088-13.615.538-15.821-.176-15.831 8.401-13.427 7.775-13.799 13.995-7.439 13.653-8.071 15.853.544 15.863-.181 13.457 8.382 13.819 7.759 7.452 13.972 8.088 13.615-.538 15.821.176 15.831-8.401 13.43z"/><path d="M229.443

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\vendor_i18n-ff23c0e31a78753eb799d8272edca6006d4e55002cacd0358fccce151cac8f31[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	368968
Entropy (8bit):	5.294866268694089
Encrypted:	false
SSDEEP:	6144:18xYbjCOi/+lQ47GKN6bJ/Q310AqxyivmC:1/bjXK+bD2ApivR
MD5:	6445A2DA95BB38906AEB48EB65836C17
SHA1:	3466F74DA92F227F83B4D2375D3CA1F8F80ABB81
SHA-256:	FF23C0E31A78753EB799D8272EDCA6006D4E55002CACD0358FCCCE151CAC8F31
SHA-512:	0B3AD8AEF58DF5662946846F3170810054309139C8D04353B433D231E546FE03056BF447214366CD07DCC917DBB0A8CB10370B355D11735AD563BE3565C6F596
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/assets/vendor_i18n-ff23c0e31a78753eb799d8272edca6006d4e55002cacd0358fccce151cac8f31.js
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.function _toConsumableArray(arr){if(Array.isArray(arr)){for(var i=0,arr2=Array(arr.length);i<arr.length;i++)arr2[i]=arr[i];return arr2}return Array.from(arr)}./!. Bootstrap v3.3.5 (http://getbootstrap.com). * Copyright 2011-2015 Twitter, Inc.. * Licensed under the MIT license. */.if(function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}function d(e){var t=!!e&&"length

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\vn[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	457
Entropy (8bit):	5.131150596683044
Encrypted:	false
SSDEEP:	12:t9bibt03/KYa5A1Kr8MjqClU/rzDMC5M0zMUH4xbE:t9bKt03La+vMrGzzDbPzEA
MD5:	7621584B38C504E558D89286D6B4257F
SHA1:	370D58304A1753F3BA9CA7D7E5AD4CD9327CAF01
SHA-256:	DE82D7A470B8151467BC27420C11358A01A7C0BFC0BD18D2E121CAEEA4FBFA08
SHA-512:	0CACC6963A932AA32F352C074B847C87645E8A04803FAD5E5112A04973F4E2E0A1E742BAAF4BCD63901DBB99F50CE8F4AB17EA78C9AAC83C88F19014D83D612B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/vn.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-85.334 0h682.67v512h-682.67z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><path d="m-39.999 0h720v480h-720z" fill="#ec0015"/><path d="m407.742 357.234-83.977-62.712-83.566 63.328 31.08-102.909-83.412-63.548 103.2-.886 32.008-102.6 32.693 102.366 103.2.135-82.985 64.147 31.766 102.684z" fill="#ff0"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\woman-talking-on-the-phone[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x600, frames 3
Category:	downloaded
Size (bytes):	49934
Entropy (8bit):	7.939553124995967
Encrypted:	false
SSDEEP:	768:GVhnquygwX6vUmeRIymBgS2+t6mc4I+nALu+gcfcW+Pa8V6BCR0kJbt6vFJ72kM6:v1R6vkRI0Zmg4lcfyPtQ+HCTb
MD5:	DFF94719586FB8B7AE81A729680CE701
SHA1:	2F8990C119705EFE915A60726D8ADC84A79FB948
SHA-256:	A3E557F55112276A234E5656C847FAD23D1A32DD0A5EF964CF1003339FE8A897
SHA-512:	C7DAC9FD77E1B7662AB89458B9AEF5EBC445B39C0D22F2BEB3B38B22FB21D534B6633DDE5E97CC290E7A41F9997F3CE3ADD811A7D26969F78B83FC3670535FF7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/splashpage/how-people-use-free-conference-call-1/woman-talking-on-the-phone.jpg
Preview:	......JFIF.............C....................................#,%.!!..&4'./121.%6:60:,010...C...........0 . 00000000000000000000000000000000000000000000000000......X.......................................................................................A..)...`0.....hP1.`......`4.(.c..........(A.....0...0..kqE...TX....QEKE.E..5....R.2.-.5..HuQKP.P...e+(r.R..Z.2..eC)j.[.BB.............~.Vy.k.N.m/L.../...b;3.[....&.I....[G.'....gE....dRI4."DL!.RH.L.D.M#8......^e...o........."....0..@......!L..@...0........`....l.0.#.`......TQKQE.l....T.Z.2.)j,kEKEE.9l....H[qKP....Z.R..V\.....KQeJ.R.MfgY.I..I.......v..N\|..f6sjP.......S.Y...j.\|..=L.+%z.{.~.......Me.RH..J.D.L.DI$..%fI......95z3<......yD`0.h.b...,`......`......`4.(....0.....`...`.0.#.`......QQKQE.l....T.Z.2.TX..[.X...t...-...\.8.e.VT.PJ......c*Z"...#..bN.o....}\|._y.w..L.;..Y.m..~........9. ..vb........5d.......D.H.IY."d.EY...J.D..+.....00.P4`.0..X...4(.......)..h.P.F....0........d....S...X.5....Z.,ke.n(..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\wood-desk-and-laptop[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x763, frames 3
Category:	downloaded
Size (bytes):	111868
Entropy (8bit):	7.987014070366925
Encrypted:	false
SSDEEP:	3072:4Hsk6RybMUGizkaYDiO29YTRzUmXOJENdW1UJ:ex6R3pizkabYTxU4xq1u
MD5:	969AF227A4465FA983EC6D2F815D09E9
SHA1:	AB72A47A26BC600811FCB3224E05276AF9A2A264
SHA-256:	1A8657E39A371A28235A3C634E72BAA015F2A13E738907DBF8810330E455497B
SHA-512:	9CB49C076274883D87AE013559F5A7173E6BA947B4982F715A9DDA8F9DAF0539AF51D392C25ECD30BCAFA569755AB17C0FB642E128646D9596C2E1D9D610231F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/index/2018-design/wood-desk-and-laptop.jpg
Preview:	......JFIF..................................................#,%.!!..&4'./121.%6:60:,010...........0 . 00000000000000000000000000000000000000000000000000..........."................................................f.P.(QUm...V.m..h...P.eP.l.B.M.....0..X.w..x..w...\|O..O.....1...9..r.........r..........}....~W..o.._\|...\._..s../...}e%.R..UT....mR......e..l.mYWD.......[.yc.>._.......].y\|../&sg,L.Q.F.f.O_...........y?7.O.t.}...o...?........=8<?.....C.E...?...}.Y@...UR...E[T......B.".MAb\.K...>W.........k......z.........e.t.m.5.<o.E....S..SVy?%._................Y{......{.....Ux<......(.)B.T.UiUV..h..P(.....j..Hn3..N..8....>{...w..s....?.~.w.\|\|.s......w.;.......z...^.O.........{.C..............?.}.......{.T.....UR..R.Z.U..)@P.*)e..l...5.;.....<.....\|/...........?O.....\=....\|...............y...~#...}/..?7...../.......?.~.~.._....\.=.........J..R.UR..UUU.UR.(.P..,.J.t..%.......3..^.........>...~.._.........\..x.{.?.x.\|.y....s..<..5.>...}.}..~..>...%k......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\1124938230859430[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	520268
Entropy (8bit):	5.469217481548313
Encrypted:	false
SSDEEP:	6144:Rk1HgCSntDV/HaK3V/Ha8NEPjQHguH3HpQrwzzmqk1HgCSntDV/HaK3V/Ha8NEPy:dNESVNESP
MD5:	10CE1EDE00352A4686FBA51A69B5C7DF
SHA1:	10040B933C36E5E09F1150FEBCE2D99567127E50
SHA-256:	02034B09D6883D88727339E6A6191E801F33CDB63F9AE7819E0818A3674F1EDE
SHA-512:	AB066B1C81DD280AB5BACAB139B33D65D862C9A4366EA8D99536B8B787FC86406514EB071E65CF46D2E88167B264B1B5EBF2CAB806D3BA37AE63490AA552838B
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\1124938230859430[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	260134
Entropy (8bit):	5.469217481548313
Encrypted:	false
SSDEEP:	6144:Rk1HgCSntDV/HaK3V/Ha8NEPjQHguH3HpQrwzzmi:dNESP
MD5:	D4564BD905CCD8F87FEA0C13778ABF3F
SHA1:	218DAF3942B933DF3E0E1348389289151FDA7531
SHA-256:	9E203A1C5D80D9EE3C6D9DDA82A34435820BD95A8F0EEE7FFC76D22FCEDC263D
SHA-512:	E0D78ABDCC24CD6BF36A323F83B4C729924A4AAFDF28D489AB2DE9D369248F21280478101397DA8ED291D5F22E53845F452AD0593E1E200E8FA72DBDFE1CF854
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\af[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	99109
Entropy (8bit):	4.446901667588753
Encrypted:	false
SSDEEP:	1536:tb9ZKZS1IV38k2LivjFQt/Gwgp0auJLWMoiS:rZKZS1oj1J
MD5:	D64AC509EA196F7DDE5FCF5B0D6A06F6
SHA1:	49E5EDE766A0123E556D51BACD6DA97982518A5E
SHA-256:	CA0FEE0748314A26477B03088ACEB398DFDC584C4C1A65FE9DE162C9637148D0
SHA-512:	16E38B590ACDC25573C877B30446F988B3BFE7C3921B065A80CC3CDE1D4B28A72ED6F6D6DDE09FE250350FACC4268E0DBBCC23ACC2498FEF8977984E475DD4E5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/af.svg
Preview:	<svg height="480" viewBox="0 0 512 512" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m-85.333 0h682.65v512h-682.65z"/><path d="m369.762 0h227.554v512h-227.554z" fill="#090"/><path d="m142.221 0h227.554v512h-227.554z" fill="#bf0000"/></g><path d="m398.352 265.182c-.109.578 1.454 1.432 1.826.989 1.682-2.014 3.883-5.969 4.334-8.363.132-.697-2.108-1.485-2.587-.913-1.575 1.886-3.1 5.773-3.573 8.287z" fill="#fff" fill-rule="evenodd" stroke="#000" stroke-width=".973"/><path d="m188.016 387.838c-1.675 5.917-26.38-5.578-29.138-11.532 14.136 7.49 29.477 5.924 29.138 11.532z" fill="#fff" fill-rule="evenodd" stroke="#000" stroke-width=".973"/><path d="m109.911 266.973c1.235 1.47 3.317.485 1.42-1.504-1.553-1.607-1.042-2.114-1.988-4.073-.936-2.188-.887-3.395-2.016-4.959-.999-1.483-2.501.03-1.495 1.278 1.263 1.476.915 2.565 1.687 3.993 1.428 2.444 1.08 3.727 2.391 5.265z" fill="#fff" fill-rule="evenodd" stroke="#000" stroke-width=".973"/><path d="m143.134 307.086c3.9

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\al[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5576
Entropy (8bit):	3.87574129184975
Encrypted:	false
SSDEEP:	96:x7dzEodOuDxEr8mbtQQ5aaHJ4ASqNmnPsTF5iwKvvmJG2DmMM/apbs9URI:nN+r4Q4ifYsTF5fTDHK
MD5:	73DFA16AC682EF9755C580DF18B80CDB
SHA1:	6E7E5019A644519E9FA61BE5586E7CBCAFAF5652
SHA-256:	0E6AE8D3EBF6F91D11A49A339F8A9EAAECCA896CA2C1096E90047CE9A0A0375C
SHA-512:	46413577D699BE5780EBF14A9E7E4B6BB24222C2D9AD28FEAA9A0DECFDE480076EA5597ABAE3149C434A2DA5E8E04E7F6E5443B66384915D6AA388F122E6B244
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/al.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><path d="m0 0h640v480h-640z" fill="#de2110" fill-rule="evenodd"/><path d="m229.27 120.15c7.431-.725 8.94-.628 14.397.784-7.008 3.206-15.293 1.604-20.432-2.951-7.766-7.051-26.26-19.242-19.647-8.854 34.312 38.023 63.863 12.315 81.834 34.209 6.122 7.457 11.527 17.467 8.307 27.299-1.101 3.365-5.08 11.282-9.89 9.27-6.298-2.635 1.194-23.331-3.391-30.065-10.41-15.289-29.271-11.199-44.747-12.851-4.49 12.176-15.306 10.341-25.25 4.199-12.695-7.839-12.313-27.12-23.658-33.488-11.823-6.636-9.896 15.588-7.991 20.869 8.253 22.881 32.553 31.434 54.795 27.366-16.462 25.489-42.552-16.5-55.476-6.216-8.2 6.525 6.284 18.397 11.302 21.12 13.882 7.536 30.563 3.751 44.174-2.274-7.772 8.441-22.072 13.621-33.681 11.907-5.996-.885-18.007-8.419-23.469-3.398-8.432 7.752 12.154 16.947 17.154 18.034 16.853 3.666 28.789-5.226 42.101-13.914-8.359 8.355-17.283 19.794-29.471 22.295-7.601 1.56-24.377-6.198-29.289 1.855-5.873 9.63 9.7 15.722 16.659 15.12 16.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\application_i18n-781dcc97f2af8886917e4f39590f98f8ef5074a18b34bce0fe9e90f5638142ff[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	229984
Entropy (8bit):	5.344908131005098
Encrypted:	false
SSDEEP:	6144:mmPZcIvU5rEk1nuSmSU9AkLK7meoWksvfR1Gj7ejYvS:W1uSrUeOKSYF87I
MD5:	D8100D88E0ACA5F13106716E24222E68
SHA1:	4B4AD631BF727BBCEAE7B18BCD78B1F21EB58972
SHA-256:	781DCC97F2AF8886917E4F39590F98F8EF5074A18B34BCE0FE9E90F5638142FF
SHA-512:	BF57FD92389CEE81F4FDCC5E0686C2E813AF814CC2926B07643B5CFE39A62EC33A22FEB32A642ACF207D7BCA098CE29AC862298A9E4C3B0C5208072C3ED52F50
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/assets/application_i18n-781dcc97f2af8886917e4f39590f98f8ef5074a18b34bce0fe9e90f5638142ff.js
Preview:	!function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){return o(e[i][1][r]\|\|r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r}()({1:[function(require){require("./desktop/application_i18n/application.es6")},{"./desktop/application_i18n/application.es6":3}],2:[function(require,module,exports){"use strict";function _interopRequireDefault(obj){return obj&&obj.__esModule?obj:{"default":obj}}Object.defineProperty(exports,"__esModule",{value:!0});_interopRequireDefault(require("i18next")),_interopRequireDefault(require("./common/dialog.es6"));var _utils=require("./common/utils.es6");exports["default"]={init:function(){var top_offset=arguments.length>0&&arguments[0]!==undefined

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\base[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1651424
Entropy (8bit):	5.579493931544907
Encrypted:	false
SSDEEP:	12288:xsdyY0cZ3jt5o9rgAroF4nrzMrdYv2kbbguEksHTeeDenV:qkYvZzcEAroF4raYv2FuWyeDenV
MD5:	FBFB2755E605BAC20A5EC5155AB38C2D
SHA1:	69D0D985F17DCC9CF24883FE2A3424AADF0BD281
SHA-256:	A2B42C3B50C748203F83BF37DD95FE2C66AC5863F06463CF0B17ECB254F363F0
SHA-512:	C5C559EBE1C3C10FC1EC71C0BCEB61C3B121398182F00E64D627DFB572EEA7D67CA56B54529F832E5EAA5CACD464DB6477EE9F3C97E6E2D35F9B9AE2E798B03E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube.com/s/player/cb5bd7e6/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var ba,da,saa,ha,ia,ka,oa,pa,ra,ta,ua,va,wa,xa,taa,zaa,ya,za,Aaa,Aa,Ba,Da,Ea,Fa,Ja,Ka,Caa,Daa,Ua,Va,Wa,Eaa,Faa,Xa,Gaa,Ya,Za,Haa,Iaa,ab,ib,Jaa,pb,qb,Kaa,vb,sb,Laa,tb,Maa,Naa,Oaa,Db,Fb,Gb,Hb,Kb,Mb,Nb,Qb,Wb,Zb,bc,cc,fc,jc,kc,Raa,lc,mc,nc,vc,wc,yc,Dc,Kc,Lc,Rc,Pc,Vaa,Yaa,Zaa,$aa,Vc,Wc,Yc,Xc,$c,cd,aba,bba,bd,cba,jd,kd,hd,ld,nd,od,rd,sd,td,ud,fba,wd,xd,Bd,Cd,Dd,Ed,Fd,Gd,Hd,Id,Kd,Od,Pd,Rd,Sd,Td,hba,Ud,Vd,Wd,Xd,Yd,Zd,fe,he,ke,oe,pe,ue,ve,ye,we,Ae,De,Ce,Be,mba,me,Te,Re,Se,Ve,Ue,le,We,oba,$e,bf,.Ze,df,ef,ff,gf,hf,jf,kf,of,pf,qf,pba,vf,rf,xf,Af,Bf,qba,Df,If,Ff,Gf,Jf,Hf,Kf,Lf,rba,Mf,Nf,Of,Pf,Rf,Qf,Sf,Tf,uba,wba,xba,zba,Wf,Xf,Yf,$f,ag,cg,Aba,dg,eg,gg,ig,og,pg,sg,Bba,vg,ug,wg,Cba,Hg,Ig,Jg,Dba,Kg,Lg,Mg,Ng,Og,Pg,Qg,Eba,Rg,Sg,Tg,Fba,Gba,Ug,Wg,Vg,Yg,Zg,bh,$g,Iba,ah,ch,dh,fh,eh,Kba,Jba,gh,Mba,Lba,Nba,jh,Oba,lh,mh,nh,kh,oh,Pba,ph,Qba,Rba,rh,Vba,sh,th,uh,Wba,yh,Ah,D

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\br[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	13175
Entropy (8bit):	4.151987246692622
Encrypted:	false
SSDEEP:	192:VQ1nlhN/dWF/j0NI3eUvnQKiNh+hJfQpGISzlot/lC:VQp3mwNI39QLahJfoGIn/lC
MD5:	72B403FC7A47037E38F75D7EB926F195
SHA1:	317DC030A25E4209AA9C68ADBF478B7416738457
SHA-256:	EDFCA128417738402B1A7B355DC7F265024305B5CF34FD6F9C25293D82D5EAC2
SHA-512:	B1B03363F77B5D0C5E9C236857572BF8FF3CDD404EF7AA187041DEF53DB3011D06A284A02C346748D3F6C5F6557FE43B0449F19F50A6D5FC2637BF0D795CB904
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/br.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h640v480h-640z" fill="#229e45"/><path d="m321.406 435.935 301.482-195.671-303.307-196.2-302.473 196.671z" fill="#f8e509"/><path d="m452.731 239.952c0 70.313-57.099 127.314-127.534 127.314-70.436 0-127.534-57-127.534-127.314s57.099-127.314 127.534-127.314c70.436 0 127.534 57 127.534 127.314z" fill="#2b49a3"/><path d="m283.236 316.306-3.94-2.275-4.092 2.025.916-4.549-3.161-3.334 4.52-.53 2.123-4.08 1.893 4.221 4.459.81-3.344 3.132z" fill="#ffffef"/><path d="m368.708 337.95-3.94-2.275-4.092 2.025.916-4.549-3.161-3.334 4.52-.53 2.123-4.08 1.893 4.221 4.459.81-3.344 3.132z" fill="#ffffef"/><path d="m331.842 303.378-3.403-1.965-3.535 1.75.791-3.93-2.73-2.88 3.904-.458 1.833-3.525 1.636 3.646 3.851.7-2.889 2.705z" fill="#ffffef"/><path d="m418.152 290.885-3.341-1.929-3.471 1.717.777-3.857-2.681-2.827 3.833-.449 1.8-3.46 1.606 3.579 3.781.687-2.836 2.655z" fill="#ffffef"/><path d="m330.307 265.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\business-man-working-on-a-laptop[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, baseline, precision 8, 360x235, frames 3
Category:	downloaded
Size (bytes):	16001
Entropy (8bit):	7.461644759719298
Encrypted:	false
SSDEEP:	192:H36P5Kbe35lS9My07TXkQILEROItrlVmcn6HX+Eaqi0sBWAyS2O92M34n5M2/uu+:HaF3vS9L0nXknIFtn63PgmTjO00QzW
MD5:	AD5970DBD8B7FBD012C739DFFC56446B
SHA1:	A09E7884509B3605CBCB4CC604919CFC193D771F
SHA-256:	1BD92ABE1D549017088A261C3493135CEB0F57D96843E6FAD63A9CF0744434C8
SHA-512:	B1B4D0E548E85E9C32EC7E57B969BB64F8C9EBA2A783D0A1137FB31328584136C4B9E3BB70EA65EF595E140F07E4841AB77ECE2808BE0D4A6DEDB2F998A57E1D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/international/business-man-working-on-a-laptop.jpg
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\ca[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1067
Entropy (8bit):	4.703343860486134
Encrypted:	false
SSDEEP:	24:tDldbKt03LabN9wgvXOAZVvYKVqBu/6Q7vYlOdKve:fE+ONtPbp6EvYlOZ
MD5:	9DB6AD121ACCA4C74E385065EDD96F4A
SHA1:	F99B6F49FB726593838E3A61401E0902A6DADA60
SHA-256:	F6FAF1EE31F044757A6FF2252F5D1590CA47C72864D9E48B649E46A4F4FEDA7B
SHA-512:	94A880BE339C5E63B5C6AAD758D32D75E1ABB49918853FC9E31D3E310A2CE896AFA3F271A9211D1B667B0B7E1FD0336EAD2458A2AFC58B0A4083E2792B82DD3F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/ca.svg
Preview:	<svg fill="#28ff09" height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-79.06 0h682.67v512h-682.67z"/></clipPath><g clip-path="url(#a)"><path d="m150.183 0h339.456v480.256h-339.456z" fill="#fff"/><g fill="#bf0a30"><path d="m-19.544 0h169.728v480.256h-169.728z"/><path d="m489.64 0h169.728v480.256h-169.728z"/><path d="m200.971 231.947-13.188 4.508 61.365 53.856c4.642 13.841-1.611 17.921-5.595 25.18l66.619-8.455-1.735 67.043 13.798-.397-3.009-66.486 66.684 7.905c-4.127-8.715-7.8-13.343-3.982-27.279l61.325-51.023-10.732-3.885c-8.774-6.771 3.791-32.61 5.687-48.917 0 0-35.808 12.314-38.154 5.871l-9.118-17.517-32.576 35.786c-3.559.852-5.075-.564-5.91-3.571l15.05-74.781-23.83 13.403c-1.995.853-3.99.117-5.305-2.208l-22.922-45.994-23.634 47.766c-1.782 1.712-3.565 1.91-5.045.746l-22.691-12.729 13.621 74.197c-1.083 2.946-3.679 3.775-6.731 2.18l-31.14-35.378c-4.073 6.526-6.834 17.19-12.218 19.58-5.385 2.237-23.419-4.522-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\cl[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	572
Entropy (8bit):	5.143779163597363
Encrypted:	false
SSDEEP:	12:t9bibt03/KYa54KrYJ5RMjq1ucA5BPrDRqAF+6uZ9zM6IRdj5B+WR9:t9bKt03LaWXJDMmAbfd1qzfIRdjf7
MD5:	04C27553CAC17B5BA038D7C44A9959C2
SHA1:	4848D011F41633EF7C25C5155B5FF02304F0D405
SHA-256:	4C037FF25036FD1B51EFD612EC6BDD1F853A8EDA43DEFDD509D285A50E7B7FDF
SHA-512:	4EF824E86C480D241CA049CA5DB5536279B308D267BA1B2AA9A2B5151252BAED1B81045857A860CDE563DE6C1F3D7EDB4C259D219AA2D2EA3FDAAA8FF79B25F1
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/cl.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m0 0h682.67v512h-682.67z"/></clipPath><g clip-path="url(#a)" fill-opacity=".996" fill-rule="evenodd"><path d="m239.991 0h480.009v240h-480.009z" fill="#fdfdfd"/><path d="m0 0h240v240h-240z" fill="#5651a9"/><path d="m157.331 179.728-37.175-27.878-36.992 28.152 13.758-45.749-36.924-28.25 45.683-.394 14.169-45.61 14.472 45.504 45.683.06-36.735 28.516 14.062 45.648z" fill="#fdfdfd"/><path d="m0 240h720v240h-720z" fill="#ed2800"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\cn[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	870
Entropy (8bit):	5.179992215777293
Encrypted:	false
SSDEEP:	12:t9bFgyt03/KY0BI3hP8JT1qtIIl3vzZLsKLsk5LsOvWuLsRQ+UnQSLo:t9b5t03L0G3aJpq/lfziZBpRQ+UnQ5
MD5:	81AAA1168A2F2EA2E7EF0A553DC037FD
SHA1:	E44314800EBD8DCF6A6211733E01081ED63D1A80
SHA-256:	93CC33C410DAA031985A919E766254EE092E36966916DAE839FD0751798B6BFF
SHA-512:	F4D7A7EC3F6FC6F1B1AA5A7C51E25F4A63A24EB375A8B043945D648F48F6FD376C9BF87FA0D442F2982A260A7AF0A2BE3603D714DB7CF31755DEF3762FE47B60
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/cn.svg
Preview:	<svg height="480" viewBox="-5 -5 12.8 9.6" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><defs><path id="a" d="m-.588.81.588-1.81.588 1.81-1.54-1.12h1.904z" fill="#ffde00"/><clipPath id="b"><path d="m-5-15.4h26.667v20h-26.667z"/></clipPath></defs><g clip-path="url(#b)" transform="matrix(.48 0 0 .48 -2.6 2.392)"><path d="m-5-15.4h30v20h-30z" fill="#de2910"/><use height="20" transform="matrix(3 0 0 3 0 -10.4)" width="30" xlink:href="#a"/><use height="20" transform="matrix(-.514 -.857 .857 -.514 5 -13.4)" width="30" xlink:href="#a"/><use height="20" transform="matrix(-.141 -.99 .99 -.141 7 -11.4)" width="30" xlink:href="#a"/><use height="20" transform="matrix(.275 -.962 .962 .275 7 -8.4)" width="30" xlink:href="#a"/><use height="20" transform="matrix(.625 -.781 .781 .625 5 -6.4)" width="30" xlink:href="#a"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\cy[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	23472
Entropy (8bit):	3.7555213592526
Encrypted:	false
SSDEEP:	384:a2QZzZ5McjB3UT/OXURXMNn9PRwVKlgD2sBQWRTQSuiHRZer:a2ylB3UT38XPSjcvzr
MD5:	35CE8864BA418EDB57BB7C91841EEEBB
SHA1:	7065D33F83F06A790291A55F49641D0A7A290985
SHA-256:	2CC68122AAD941162601F530BB71E996B479A6BCC04EDB8EF40593D89FBBBCE6
SHA-512:	26B720A250AD58337BA629A5657A02E6126FECE9D7E43FFB6BF7D7737A207EF79CB23022B39051685A2F1CFC83E4D831148404B57B8920372783CAB5284685EC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/cy.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><path d="m0 0h640v480h-640z" fill="#fff"/><g fill-rule="evenodd"><path d="m299.104 219.732 1.697-2.236-.882-2.663 2.652.921 2.258-1.663-.056 2.803 2.275 1.64-2.68.809-.854 2.674-1.601-2.303z" fill="#808080"/><path d="m164.84 244.11h.308c-.823 0-.391-.063.926.942 1.076.438 2.023.628 3.702.628 1.472.107 2.745.314 4.319.314 1.447.622 2.272 1.189 3.393 1.57.495.763 1.574 2.471 2.159 3.14 1.086.814 2.397 1.31 3.393 2.198 1.241.344 2.031.882 3.393 1.883 1.025.495 1.995.902 3.393 1.57 1.343.472 2.81 1.104 4.01 1.57 1.057.253 2.47.686 3.393 1.256 1.311.29 2.411.662 4.011.942 1.633.198 2.457.637 4.01.942 1.394.718 2.48 1.254 4.011 1.884.621.929 1.155 1.765 2.468 2.197l2.468 1.884c.994.479 2.088.796 3.393 1.256 1.573.114 2.708.569 4.319.628h8.638c1.377.167 2.919.386 4.01.628 1.51 0 2.982.026 4.319-.314 1.726-.021 2.532-.512 4.011-.628 1.65.267 2.769.119 3.393 1.57 1.022 1.041 1.644 2.06 1.85 3.454.325.993.309 2.634.309 4.081 0 1.36

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\cz[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	378
Entropy (8bit):	5.145676906267887
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZKYnic4sa4AUkTQigKAjCirSwMjR4xNSKNXkB9SKSqOVFXyjfE:t9bibt03/KYa5UjKr8Mjq/NUBtLOryc
MD5:	BE1063658D42A87A17820DCA7BC36B8B
SHA1:	47DD4EB207422E0C9556F949C218E89DBAA75A1E
SHA-256:	BBF15067A9DFCA0E36A5EB3339E29A108A0449296EA2AD990610C7E67517C1AA
SHA-512:	B3C68DC2325E076B0BEF84C2A2E0B24C3E60373AD05045FF282F157B016204A0C447685D9B55061CFC9662F7802764F05B7DFC5677BC2E98E62C4CE22BCF0033
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/cz.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-74 0h682.67v512h-682.67z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><path d="m0 0h720v480h-720z" fill="#e80000"/><path d="m0 0h720v240h-720z" fill="#fff"/><path d="m0 0 358.809 239.691-358.809 239.381z" fill="#00006f"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\en-24bcb11deb5e7ffb71c9520c30a21c2f0dfe1a75a29d08c92db9c7eecf71dc5b[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	119429
Entropy (8bit):	4.866624529322039
Encrypted:	false
SSDEEP:	3072:ppfcNsrBsdjCDNJq4ugbj26r0yjwh63J88jJqy/11Lg:pO2BZuIyo0+1Lg
MD5:	11895F5D6CA5C45315A5B87C37F57980
SHA1:	DE52A9987DCC3343568DA36F57A0A46572C8383B
SHA-256:	24BCB11DEB5E7FFB71C9520C30A21C2F0DFE1A75A29D08C92DB9C7EECF71DC5B
SHA-512:	870A29A156E83D22908275A4980BC49F85E68F30A0BFF54741A8A212FB132F53AB2B1A563800FD077268BE0B8ED4A50315450C820BFEAB30F170C41F9C87922B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/assets/locales/en-24bcb11deb5e7ffb71c9520c30a21c2f0dfe1a75a29d08c92db9c7eecf71dc5b.js
Preview:	function toCamelCase(str){return str.toLowerCase().replace(/[-_]+/g," ").replace(/[^\w\s]/g,"").replace(/ (.)/g,function($1){return $1.toUpperCase()}).replace(/ /g,"")}window.Em.I18n.parsley={defaultMessage:"This value seems to be invalid",type:{email:"This value should be a valid email",url:"This value should be a valid url",number:"This value should be a valid number",integer:"This value should be a valid integer",digits:"This value should be digits",alphanum:"This value should be alphanumeric"},notblank:"This value should not be blank",required:"This value is required",pattern:"This value seems to be invalid",min:"This value should be greater than or equal to %s",max:"This value should be lower than or equal to %s",range:"This value should be between %s and %s",minlength:"This value is too short. It should have %s characters or more",maxlength:"This value is too long. It should have %s characters or fewer",length:"This value length is invalid. It should be between %s and %s characte

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\es[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	175372
Entropy (8bit):	4.341409086605836
Encrypted:	false
SSDEEP:	1536:pSnSHcaReUnMQ0kRArE0BWGiFR7GQVzvIVZUwWvIZhI4OuWuhqUXgOyLYMJYf:uSHcfU30kCOEXz
MD5:	0C79C0A7A28E3BA267AD46FA376F28D4
SHA1:	4495A56A7185693A6A639EE1D058391D19129C2C
SHA-256:	FC9111827D7BA10B3DA7E2E599E454A8AD049F90129D3205569453BBC8B9B2E2
SHA-512:	C266AC46094200A9099023F08F71F88D41730E76023C3ACB5ECBF51A393D7AD118F0DC2834B5AD07D7AAEE78B3C7A6648569E20DF88AA93A4B7EB8231791697F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/es.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m.05 0h639.9v480h-639.9z" fill="#c00"/><path d="m0 120h640v240.009h-640z" fill="#ff3"/></g><path d="m180.724 173.017s-.864 0-1.339-.271c-.475-.276-1.91-1.634-1.91-1.634l-1.149-.818-1.046-1.448s-1.244-1.982-.673-3.527c.571-1.539 1.528-2.086 2.393-2.536.862-.452 2.672-.997 2.672-.997s1.44-.632 1.915-.728c.475-.09 2.202-.542 2.202-.542s.477-.269.953-.45c.482-.181 1.149-.181 1.535-.276.38-.09 1.339-.397 1.91-.428.888-.036 2.297.157 2.779.157.475 0 2.101.095 2.767.095l3.73-.186c.666 0 1.149-.083 1.917 0 .762.09 2.099.54 2.486.728.382.181 2.679.997 3.536 1.268.862.264 2.969.631 3.928 1.082.951.457 1.535 1.22 2.011 1.856.482.632.571 1.322.762 1.779.184.452.191 1.425.007 1.876-.193.45-.869 1.382-.869 1.382l-1.055 1.718-1.338 1.082s-.959.913-1.719.818c-.769-.078-8.517-1.448-13.491-1.448-4.976 0-12.92 1.448-12.92 1.448" fill="#c00"/><path d="m180.724 173.017s-.864 0-1.339-.271c-.475-.276-1.91-1.634-1

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\f[1].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	36544
Entropy (8bit):	5.4954313108939346
Encrypted:	false
SSDEEP:	384:KX9S+7D2RCcqbzAGfn292c3Lxa6I5rDcJcRAeYUAkP/e5KNCsNSDAhcjCSJ1pOu1:MB7jciAat4JGYUAkXusAjebvm48XoU
MD5:	E0FAFF3EDC5F0071EC5B6E0C357AE100
SHA1:	93C37AD7549328717D0666E81C99FBB6B1D3A268
SHA-256:	B668778FC11D3F924E2B088285E7F86E62DFBFBCD14B41B8FFFCDB6E7BA5EF7E
SHA-512:	A4F8BAE1AF5D067F28A65CE9FA657003F2860F8E041290889DAE547200E72770F1CAB93236A96E39AC8137D3B7063DF52F1163D69E96D85DDCB89E8B01545B2A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googleadservices.com/pagead/conversion_async.js
Preview:	(function(){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),l={},fa={};function p(a,b){var c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]} .function v(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in l?f=l:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&"es6"===c?f[d]:null;b=b(c)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\fbevents[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	187552
Entropy (8bit):	5.392689098842815
Encrypted:	false
SSDEEP:	1536:sM+OWt6w6aic9MeipKKqQqcThe7Kdv0a9sIOC1jaMu5Qm2B+QNSMngUSZYSlIUih:sOQMj1SVBYDGKMOQMj1SVBYDGKH
MD5:	72EF75B689823608AEA5E5F273C4DB59
SHA1:	28EE250CEE53E515DF8C01D791D7D942EF123047
SHA-256:	C5DE2419E77E9416B604EDCFC72E948010D7922DC8A442249A024410AABC6A43
SHA-512:	26139AAAAA9BDF958A2115721DEE92FC2D1726EDC12C033AE07D243C194EE7783CA89A19C01A4A296D40F9FF8594499440D6326138B5E3264685E75EA4485C0E
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\fbevents[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	93776
Entropy (8bit):	5.392689098842815
Encrypted:	false
SSDEEP:	1536:sM+OWt6w6aic9MeipKKqQqcThe7Kdv0a9sIOC1jaMu5Qm2B+QNSMngUSZYSlIUiJ:sOQMj1SVBYDGKH
MD5:	2C7F5BF38135E48073EC2929513E0BBD
SHA1:	B8792D38BD201B1BF962E9C14A2358B06D64A062
SHA-256:	2FFF9D42B48B67B86F3F657418733D38176FA5ECA4C13CF5F946F9CA410BE4BD
SHA-512:	4FC37B185AE887AA3465EEF5CEDB39D63244F49AD170AB30C069C62391265EACC7D034D9469CA85956C361F8EC9A0F89D4BA6E90A1A8C81E5DDA4104A0D56AFA
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\fetch-polyfill[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Pascal source, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8543
Entropy (8bit):	5.238064281324506
Encrypted:	false
SSDEEP:	192:oQHdiEslZc0rsNYNU5mSJHqI03aej6tZoaMLQO/x5/P80+HcW:ocHslLsP5muHqI0Jj6tZcUO/x5+V
MD5:	04E3CC8A9641B3F9F9C9370F4E9B5BDD
SHA1:	9602A891F583094BB04FD407B253ABCAFFB8C8D0
SHA-256:	DE6C4FFA2BD9FD283610E28D0DB2EC48607AAB39D213A51AEF248673A0A7E980
SHA-512:	58942BCC0F39D620A475B65C1AEB4F18872F68F22C89DEC076906A0DB8BC2B7CCA9357710A7824A0FA7404FF73F41013AECA34609CAACD2187414F7BD0D490D6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube.com/s/player/cb5bd7e6/fetch-polyfill.vflset/fetch-polyfill.js
Preview:	/*.. Copyright (c) 2014-2016 GitHub, Inc... Permission is hereby granted, free of charge, to any person obtaining. a copy of this software and associated documentation files (the. "Software"), to deal in the Software without restriction, including. without limitation the rights to use, copy, modify, merge, publish,. distribute, sublicense, and/or sell copies of the Software, and to. permit persons to whom the Software is furnished to do so, subject to. the following conditions:.. The above copyright notice and this permission notice shall be. included in all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,. EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF. MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND. NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE. LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION. OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\fontawesome-webfont[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), FontAwesome family
Category:	downloaded
Size (bytes):	165742
Entropy (8bit):	6.705073372195656
Encrypted:	false
SSDEEP:	3072:qbhEnD+IzsU9z9QJ6/P3Xe2iEiEPGFCMW1JVJG6wVTDsk6BmG6S1yKshojskO+b2:qenD+IzsU9z9QJ6/PO2FiEP2C/DVJG6I
MD5:	674F50D287A8C48DC19BA404D20FE713
SHA1:	D980C2CE873DC43AF460D4D572D441304499F400
SHA-256:	7BFCAB6DB99D5CFBF1705CA0536DDC78585432CC5FA41BBD7AD0F009033B2979
SHA-512:	C160D3D77E67EFF986043461693B2A831E1175F579490D7F0B411005EA81BD4F5850FF534F6721B727C002973F3F9027EA960FAC4317D37DB1D4CB53EC9D343A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/fonts/fontawesome-webfont.eot?
Preview:	n.................................LP........................Yx.....................F.o.n.t.A.w.e.s.o.m.e.....R.e.g.u.l.a.r...$.V.e.r.s.i.o.n. .4...7...0. .2.0.1.6.....F.o.n.t.A.w.e.s.o.m.e................PFFTMk.G.........GDEF.......p... OS/2.2z@...X...`cmap..:.........gasp.......h....glyf...M......L.head...-.......6hhea...........$hmtxEy..........loca...\........maxp.,.....8... name....gh....post......k....u.........xY_.<..........3.2.....3.2.................................................................'...............@.........i.........3.......3...s................................pyrs.@. ........................... .....p.....U.............................................]...............................................y...n.......................................2.......................................@...................................................................................................................................................z..............................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\free-recordings[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	42333
Entropy (8bit):	5.3085270536928615
Encrypted:	false
SSDEEP:	768:iqE+g7dM5H+PDY6JDBepixXTF3eYTSRdC99YPy8P50:XE+g7dM5H+PDTOQF3eYeRE99YPy8P50
MD5:	7B7AAC9A6A2F7D9FF9D91B6FD2429831
SHA1:	80BC0B039ED2FBCDB1DCEB08C623F5400D2A5087
SHA-256:	ED9DABD128F7ABB1982F0F806495094E232CF612D56CFD33C98CEA1F755F4859
SHA-512:	02E09E5A50C53C8B25012B2F1D273B8612C4FDB686624EBB5F0247F053C16AB120C73935F751104165AF7831B1BAF627BE99A0EBB802D5FEC3C1CB82B92A81C7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/free-recordings?country_code=ch
Preview:	<!DOCTYPE html>.<html dir='ltr ' lang='en' xml-lang='en'>.<head>.<title>.Free Recording Software \| FreeConferenceCall.com .</title>.<meta charset='utf-8'>.<meta content='IE=edge' http-equiv='X-UA-Compatible'>.<meta content='width=device-width, initial-scale=1' name='viewport'>.<meta content='SKYPE_TOOLBAR_PARSER_COMPATIBLE' name='SKYPE_TOOLBAR'>.<meta content='6Ldw2wATAAAAAPrc0sIk2o7FxSX5ZwzkHm55xu2i' name='RECAPTCHA'>.<meta content='telephone=no' name='format-detection'>.<meta content='ch' name='country_code'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-regular.woff2' rel='preload' type='font/woff2'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-700.woff2' rel='preload' type='font/woff2'>.<meta content='noindex, nofollow' name='robots'>.<link href='/fcc_favicon.ico' rel='shortcut icon' type='image/x-icon'>.<meta content='Make audio recordings, screen recordings and video recordings with your FreeConferenceCall.com account.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\get_static_config.0.2036.6.6.1004.34.59.9.7.5.4.5.8[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	6078
Entropy (8bit):	5.069772746192851
Encrypted:	false
SSDEEP:	96:K8XQr7w2kWJmap/Htk73gaFrlEINh5B3bOdX2RLQhT7IP:KKQKap/CEGNf3bOdXALQpIP
MD5:	92054AFF7F3DDF1A32D72D19EA46070A
SHA1:	2DAF69B5678E7A82ECD742148C1BB0362D3AF19C
SHA-256:	CBB6F0F4BDF04E18E07C76ED13ECA8A2BF0F6C5504F06A200D875D0336B9E21E
SHA-512:	39017DB872C0429D8444BC7C16AA855B57600EDD1638BE4900C476A03850D3871AC2D68170CB742E1C5217E607E770EB1522D97900AFE03269A937FB1927628F
Malicious:	false
Reputation:	low
IE Cache URL:	https://secure.livechatinc.com/licence/7519271/v2/get_static_config.0.2036.6.6.1004.34.59.9.7.5.4.5.8.js?jsonp=__lc_static_config
Preview:	__lc_static_config({"invitation":{"align":"left","x":250,"y":50,"image":"livechat.s3.amazonaws.com/default/greeting/7dc7bf86950c323d2922b51369dc2b10.gif"},"lic":"7519271","lang":"en","analytics_enabled":false,"lc2":true,"beta":false,"chat_between_groups":true,"embedded_chat":{"enabled":true,"hide_when_offline":false,"eye_grabber":{"enabled":false,"x":50,"y":60,"path":"livechat.s3.amazonaws.com/default/eyeCatchers/new108.gif"}},"chat_window":{"use_lc2_theme":true,"theme":{"name":"modern","css":"#content, #title {background: #2773a7}\n\n#content #open-label, .icon-maximize:before,\n.icon-minimize:before, .icon-menu:before,\n.icon-close:before {color:#ffffff;}\n\ntr#survey-after-greeting p input {background: #ffffff !important; color: #4d4d4d !important;box-shadow: none !important;}\n\n#container_4 p input, #container_6 p input, #container_8 p input {background: #2773a7 !important; color: #ffffff !important;box-shadow: none !important;}\n\n#rate_me_feedback_form input {background: #2773a

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\hdaudio-wide[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, baseline, precision 8, 1800x669, frames 3
Category:	downloaded
Size (bytes):	70386
Entropy (8bit):	7.896080984780119
Encrypted:	false
SSDEEP:	1536:eZalzLLwgJnjcpniFjoEHOIXx5X/XyA9hRfSdp5fM7sSQX5TR1vlKsB:dlvMg1jchUjHhhppzRfSxMmf5B
MD5:	8F575DD648650890E71DA9B599A41C9F
SHA1:	F96DFF5E85BB9B07019C7B7ADA2FA13D43B08679
SHA-256:	DFDF0CF2B96C6A26A4F12528370A303FE17F29C56BE5B844FDAE86CB6668BB32
SHA-512:	8A6636847E60AEF552A700B26E62F033A4C9340D05DFFE385D65C60C0D003EC98B58CC4ED4DB710E787740890D349E79ED2A2EB36A74B3C2BAC3915AB49FA8BA
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/featurespage/hdaudio-wide.jpg
Preview:	..................................................$$''$$53335;;;;;;;;;;.............................%......% #...# ((%%((22022;;;;;;;;;;.....q....Adobe.d................"....................................................................................!1.A."Qa.2qB.....#Rbr..3..$...C..4S...%5.Tcs.......................!.1AQ.2aq..".B.R..3................?....z.B........................0...!...P...0....A.b......a..0..`1..P..h!.....h.....2.b...0..e................`...............@.....(....h.4..!.....h40.H.h.A.I...4H. ..d..Q......N(..$.J(.....}..#. ..:....*...e...ES./L.......h.a......i....zl=6i...}.bmYz..Y..}......:Y..^...6..,4.^..I../p.i..P....#.b..e......Hld.&..Cf.i.CC.d...K.....B....4........2z.%..Hw.r.a..w..[...(l...l.T......a.h.6...6)...I../F_A......[..^..`....$...&.2..F..R^.....B..f...`6h..Cf.D....GA..=........v.h..`. ."..b.4&.}...Bk.I.0#.i...#...Bh..............E.4.U...h.]h^.sBh.}2....&...d\>.......E..ih.....h..}.N(...6..D.H..........Q....4m..E.iqh...]..d\..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\headset-blue[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2136
Entropy (8bit):	4.205502712568419
Encrypted:	false
SSDEEP:	48:6f2BMWVjuKM7HJxVC5YYLSzgI7dP5PVC9xmzFFlPAfqqEqLrE6GyuH7L:6fKp05pxg5YYAgWdVC9szhfqEqLrENH/
MD5:	CBFD1D0F381E8F66E979D4F38BDE746C
SHA1:	E38031FBAE6AB36A56DF261253624233698C67C6
SHA-256:	25F09A167890E22F829A0C0B5E83F62B6503D4BB1306DAC727CC8CE19EADE30A
SHA-512:	0E3DC6B0D35C9DE2822646E825FC91507D51AB57311DF4A3DAE55678F90589743FF10E88E9FD73C2F02FCEE2FC28FD86122722283010DB8593EC8B4379E59846
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/fonts/extra/headset-blue.svg
Preview:	<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px". viewBox="0 0 100 100" xml:space="preserve">. <style type="text/css">. .st0{fill:#2773a7;}. </style>. <path class="st0" d="M50,100c-1.3,0-2.5-0.3-3.6-1c-1.1-0.6-2-1.5-2.6-2.6c-0.7-1.1-1-2.3-1-3.7c0-2,0.7-3.7,2.1-5.1. c1.4-1.4,3.1-2.1,5.1-2.1h3.6c1.2,0,2.3,0.3,3.4,0.8c1,0.6,1.9,1.3,2.6,2.3c3-0.3,5.7-0.8,8.3-1.5c2.5-0.7,4.7-1.4,6.4-2.1 c1.7-0.8,3.3-1.6,4.7-2.6c1.4-1,2.5-1.8,3.4-2.6c0.8-0.8,1.5-1.6,2.1-2.5c0.6-0.9,1-1.5,1.2-2c0.2-0.4,0.4-0.9,0.5-1.2V43.8 c0-3.1-0.5-6.1-1.4-9c-0.9-2.9-2.2-5.5-3.8-7.9c-1.6-2.4-3.6-4.5-5.8-6.5c-2.3-2-4.7-3.6-7.4-5c-2.7-1.3-5.5-2.4-8.6-3.1. c-3-0.7-6.1-1.1-9.3-1.1c-2.7,0-5.3,0.3-8,0.8c-2.6,0.5-5.1,1.3-7.5,2.4c-2.4,1-4.6,2.3-6.7,3.7c-2.1,1.4-4,3.1-5.7,5 c-1.7,1.9-3.2,3.9-4.4,6s-2.2,4.5-2.9,7c-0.7,2.5-1,5.1-1,7.8v21.8c0,0.5-0.2,0.9-0.5,1.3c-0.4,0.4-0.8,0.5-1.3,0.5H8.3. c-0.5,0-0.9-0.2-1.3-0.5c-0.4-0.3-0.5-0.8-0.5-1.3V43.8

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\hqdefault[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, frames 3
Category:	downloaded
Size (bytes):	25626
Entropy (8bit):	7.971245818118589
Encrypted:	false
SSDEEP:	768:secDZbgmZRogdweGtdBnPSo/bl+VGQ/5CW:s91U6RordBnd/bl+VGQ/5CW
MD5:	38F6378005499B4479053641A532F5AD
SHA1:	1AC8D3712B803C032C879281F8D8444C4BE7FAFA
SHA-256:	6BC2834E6EBE8DA0161A1E7DEBC32BB79B1002DEBF98FFEF9127168FFF860417
SHA-512:	8DDA841BD98574CB38A2467212A88C80938D164F842D2FD563FE86DDA62F37B4D920F8F689FEBD1E6422C807D6CF51C547309B06D4DAE9F5D3AE9788B59B0C61
Malicious:	false
Reputation:	low
IE Cache URL:	https://i.ytimg.com/vi/IO_a79PGhA4/hqdefault.jpg
Preview:	......JFIF......................................................................................................................................................h....".........................................[.........................!.1A.."Qa..2Rq......#BS......3r...$CTb..%45D....&Uct.....ds...6E.................................3........................!1A..Qa...R"2q.#......3..............?.....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....d.\>....>&M...?.+....3...$V....&.......2o..Y....Z.....Ei...2o..Y............Xy..$V............I.....G...a...XB..H.....K.....Y...O...dy..$U.?.........D......[....H..[..O...?...A.. ...j\|...9O...r.Q......-(....).w.Z<...9O....{Q......-........h.w~,.;O.z...wQ......-.........j\|...;G.r...uQ......-.........h.W~,<...).W?..G.S....~.j>......]....~H.!\..G.?IO...i.F.?IM...j<...;G

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\hr[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	26467
Entropy (8bit):	4.629550319427182
Encrypted:	false
SSDEEP:	384:Jiuc4mzLSEnKC94mzLSEnKCPL4mzLSEnKCqvilLyIWh11eNsZgzXO:7c4GSg4GS84GSjgyIWhCN4gy
MD5:	EDED07D6CCECBD4B3238703803222A87
SHA1:	6A0C172A74D0730720928F4C0CF04104E588A8A1
SHA-256:	0E0B888E70958EA1518FA20C4C8F749C11AA7446FCA9200394363C5989517068
SHA-512:	B6FFD919C5AC521726CFAF96D9A15F0A4E7673E0FDF76DE1E44A0FD565E3079FFF29723D8F4F2E1352719661795996F10982771B8D354379877C35CF8CEB8113
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/hr.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m0 0h640v480h-640z"/></clipPath><g clip-path="url(#a)"><g fill-rule="evenodd"><path d="m-148.86 135.66h936.34v170.15h-936.34z" fill="#fff"/><path d="m-148.01 289.76h938.16v190.24h-938.16z" fill="#003e9f"/><path d="m-150.15 0h939.68v159.51h-939.68z" fill="#d61517"/></g><g transform="matrix(1.245 0 0 1.245 -78.769 -50.054)"><path d="m242.64 155.17c24.536-8.728 51.74-13.437 78.329-13.504s53.705 4.105 80.499 13.706l19.944-40.235-14.018-24.419s-25.011 10.273-25.216 10.273-17.635-19.182-17.635-19.182l-22.39 13.523-21.01-16.073-19.78 15.825-23.08-13.34-16.83 20.008-25.24-10.792-13.51 24.195 19.932 40.015z" fill="#fff" fill-rule="evenodd" stroke="#e5141d" stroke-linecap="round" stroke-width="1.066"/><path d="m370.5 144.01 11.42-40.371 24.457-9.925 12.885 21.634-18.5 37.839c-10.634-4.249-16.331-6.069-30.263-9.177z" fill="#00a7bd" fill-rule="evenodd" stroke="#0084

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\international-conferencing[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	59761
Entropy (8bit):	5.221178020303581
Encrypted:	false
SSDEEP:	1536:8E+g7dM5H+PYTO/EPeYFZyjbmFM99YPy8P0:x++dM5eQTOcBij799YPy8P0
MD5:	7716DFD9E29D9EAB64AD393C2F008C78
SHA1:	555B2241E0B11A348F472A22450550B768768383
SHA-256:	D2A0F6B21EC63A5D32104754EE895FB6256ED38B70AE28EB80AD8DE2F2D1042D
SHA-512:	FBCDAB5499636974B1D19A01ADF83B58072A9504141396B225BC71A9A94B14E5984416D053E96F13CA1B8FF3F5C3BCBE91AE3160F1EC5B3398BC1D82AAA911AB
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/international-conferencing?country_code=ch
Preview:	<!DOCTYPE html>.<html dir='ltr ' lang='en' xml-lang='en'>.<head>.<title>.International Conferencing \| FreeConferenceCall.com.</title>.<meta charset='utf-8'>.<meta content='IE=edge' http-equiv='X-UA-Compatible'>.<meta content='width=device-width, initial-scale=1' name='viewport'>.<meta content='SKYPE_TOOLBAR_PARSER_COMPATIBLE' name='SKYPE_TOOLBAR'>.<meta content='6Ldw2wATAAAAAPrc0sIk2o7FxSX5ZwzkHm55xu2i' name='RECAPTCHA'>.<meta content='telephone=no' name='format-detection'>.<meta content='ch' name='country_code'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-regular.woff2' rel='preload' type='font/woff2'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-700.woff2' rel='preload' type='font/woff2'>.<meta content='noindex, nofollow' name='robots'>.<link href='/fcc_favicon.ico' rel='shortcut icon' type='image/x-icon'>.<meta content='text/html; charset=iso-8859-1' http-equiv='Content-Type'>.<meta content='FreeConferenceCall.com is one

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\it[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	264
Entropy (8bit):	5.002991361884191
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZDMjR4YSWSqs0SsSNWQDSHEBAmD0SsSNWQDX:t9bibt03jMjq/WLs0cNWG7BH0cNWGX
MD5:	42C110A4B5402A0722B477A743A5D58B
SHA1:	86DC5713C4984399573C5448CF1C315B95EB1E7B
SHA-256:	D84DBBDBB852CEF0DD859F050384CF7860192691BAABEC934DBB4416DBDA4320
SHA-512:	AC3837808525B58AA006AFFF5BA1E96DB58BD7D0C5D424255EA225BA1ED47E39102C027F39CA1818E77D5747929E6579741AE5B8E3E25750764D1A3CC1DDD9DF
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/it.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h640v479.997h-640z" fill="#fff"/><path d="m0 0h213.331v479.997h-213.331z" fill="#005700"/><path d="m426.663 0h213.331v479.997h-213.331z" fill="#fc0000"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\json[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	785
Entropy (8bit):	5.617552237322498
Encrypted:	false
SSDEEP:	12:nGSojXLbO3maldUfLiin2bQGwvjqYIAScnBPODxgXaj/H9h7m:nnorXO3mEgui2bQGwLC7cJi/77m
MD5:	9267FD38B0B6593C742E2FE14A42774B
SHA1:	2B321A518C5B10DEC8F6E6B224F97F72AD7E9A52
SHA-256:	BC6FC6FA5EF9AD6995A57D866D02F867651485DF0B5FD569271C17A05A94A88E
SHA-512:	405175796CBCAC9D1B92B41D9204A4D0BF2285A165F7825636D1BB43EFD1316E85CBF04AAF61F4E06DEB7CD651ED599682A11D5330417668FBFFE4FEDA3875F9
Malicious:	false
Reputation:	low
IE Cache URL:	https://trc.taboola.com/1336134/trc/3/json?tim=1619714614617&data=%7B%22id%22%3A41%2C%22ii%22%3A%22%2Fterms-of-service%22%2C%22it%22%3A%22video%22%2C%22sd%22%3A%22v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682195_CNawjgYQxsZRGMGvjfSRLyABKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ%22%2C%22ui%22%3A%22c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913%22%2C%22vi%22%3A1619714614598%2C%22cv%22%3A%2220210420-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Fterms-of-service%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dfreeconferencecall-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1619714614615%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Fterms-of-service%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
Preview:	TFASC.trkCallback({"trc":{"si":"a18e40b6bfa0714361643910a1fb8845","sd":"v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682214_CNawjgYQxsZRGMbKjvSRLyACKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ","ui":"c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913","plc":"DESK","wi":"4657437314792729923","cc":"CH","route":"IL:IL:V","el2r":["debug","social","perf"],"uvpw":"1","pi":"1336134","cpb":"EhIyMDIxMDQyMC0zLVJFTEVBU0UYASCc__________8BKhZ0YWJvb2xhc3luZGljYXRpb24uY29tMgh3YXRlcjAwOTiA6MSgBUCy0A1I0IgQUN7Y2QNY____________AWMI3v__________ARDe__________8BGCJkYwjXFhDUHxgjZGMI0gMQ4AYYCGRjCJYUEJscGBhkYwj0FBCeHRgfZA","evh":"1867376994","vl":[{"ri":"88afcb3a6d4081a338a59ccf8d9293b0","uip":"rbox-tracking","ppb":"CNYC","v":[]}]}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\ke[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2100
Entropy (8bit):	4.809621804639151
Encrypted:	false
SSDEEP:	48:G+wj8y3Pc4yr3PswfigquJEGQq2crmnfm7bEJflHff:La8Xr3quJS+M9H3
MD5:	164B0BE8D0B832FAD5302498FEEC996D
SHA1:	BF2460773E543A7F2E53605196268D714E0C0E44
SHA-256:	F443AE708CD657B9E8497B91ED61B3278945FACBD97DD0DF6D8EE425C4AE773A
SHA-512:	95CDF4A608AF48BD881D0CDAEE9984996DD3FD0E591DDEE32B913949081EEF6F6598CCC0F8E0C20D3CB7F455147A2C0C65C29EB49FEDAAF32DB47A6D032C243B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/ke.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-84.325-2.11h685.48v514.11h-685.48z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><path d="m-29.611 3.03h701.05v475.909h-701.05z" fill="#fff"/><path d="m-29.611 342.715h701.05v137.284h-701.05z" fill="#008900"/><path d="m-31.441 175.087h701.05v137.284h-701.05z" fill="#c23743"/><path d="m-29.611 0h701.05v149.459h-701.05z"/><g stroke="#000"><path d="m226.835 409.302c35.439-65.959 154.239-284.427 153.072-285.062-19.429-11.403 15.704-28.92 41.505-69.992-18.382 44.143-16.431 85.339-35.303 73.48-31.386 59.239-128.405 240.312-152.521 285.043-2.554-1.372-3.305-1.932-6.749-3.466z" fill="#fff" stroke-width="1.009654"/><path d="m404.583 411.889c-35.441-65.953-154.248-284.427-153.072-285.062 19.429-11.403-15.704-28.92-41.505-69.992 18.382 44.143 16.431 85.339 35.303 73.48 31.386 59.239 128.405 240.312 152.521 285.043 2.554-1.372 3.305-1.932 6.749-3.466z" f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\kz[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	17712
Entropy (8bit):	3.9749587839454374
Encrypted:	false
SSDEEP:	384:HBHZ9DLvr9PLvaJEQHbCyRCiC7SRGctgo4:HB59LD5LerMiCeRtgo4
MD5:	0F531BD6D5C49C0FE7397389BC4F1ACE
SHA1:	FB821DF49E674BB4C1292D195B7E72224B426DF6
SHA-256:	907942B5636B5AA4314A07D977730CCAB8A788A03B3978DEE78E6184D3285312
SHA-512:	6AF74C6568250D2289AEE97385FFA38A070E9E6EBC325667690AA169351FACE12C2C1E02F6DC1BF874A843F5C2D888CE06C0C1A3D497C9A1FB12EF001B66F2BB
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/kz.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h640v480h-640z" fill="#6fdcff"/><g fill="#ffe400"><g><path d="m60.235 466.995c3.252 3.184 2.182 8.539 11.225 7.85 13.805 0 14.203-8.445 14.203-14.343 0-5.888-20.571-14.124-21.518-22.788-.961-8.675 4.748-11.097 9.524-11.097 4.748 0 8.083 2.777 8.083 5.199s-2.374 3.121-5.709 3.121 1.427-1.733-1.427-3.121-4.762 2.077-4.762 4.165c0 2.077 7.136 2.766 11.898 1.211.961 4.677 1.427 5.032-5.242 12.997 4.776-3.121 5.228-3.81 10.484-2.077-5.242-4.51-1.317-13.696-1.139-16.034s-1.002-5.115-3.143-6.503c-3.815-3.466-12.145-3.622-17.14-1.388-7.273 3.247-7.63 12.819-5.722 15.951l20.159 20.669c1.427 2.432 1.921 9.186-6.642 9.531-9.043.689-12.145-11.639-13.75-15.742-2.155 4.478-4.556 16.838-13.599 16.149-8.577-.344-10.224-7.099-8.796-9.531l20.708-21.076c1.894-3.132 1.537-12.704-5.736-15.951-4.995-2.234-13.311-2.077-17.126 1.388-2.141 1.388-3.335 4.165-3.156 6.503s4.103 11.525-1.139 16.034c5.256-1.733 5.72

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\localization.en.0.f18dd4d9fb0b965b3781bba9707f6877_ff07b7dc4d1ea4ae21b8ebc7bdbb0031[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10873
Entropy (8bit):	4.819631674007809
Encrypted:	false
SSDEEP:	192:jVP1eZCDCGhUcC481gXctjhMeEt7KN7OpfY3gW98eTcSrUITBjPKwll8uZpDeHsv:jVP1eZMChcC481w3KEpfigy8oQIToi8U
MD5:	2DA35890EEE33AB1FDE4F7A6A49255C2
SHA1:	6BE7047CE7D3DA9AC9657317E5CF90B74BE1A0F2
SHA-256:	659F2D81FC2E31DFFE6D2147334A24F38DF49C3AAFFA5F1D15ECD9F95A7D40D8
SHA-512:	E565D8D4033681E43ED0630E35788FD49A143405CA2A59626598F8C7A19801BB3D32A58F30E4B1B22A2C0F2D2961B64A8636F253A4E1F0F00A49CC1176A6E248
Malicious:	false
Reputation:	low
IE Cache URL:	https://secure.livechatinc.com/licence/7519271/v2/localization.en.0.f18dd4d9fb0b965b3781bba9707f6877_ff07b7dc4d1ea4ae21b8ebc7bdbb0031.js?jsonp=__lc_localization
Preview:	__lc_localization({"localization":{"Add_alternative_text":"Add alternative text","Add_image_alternative_text_confirmation":"Add alternative text to the %name% image","Agents_currently_not_available":"Our agents are not available at the moment.","Agents_not_available":"Our agents are not available at the moment.","Agents_not_available_continuous":"Our agents are not available right now, but you can still send messages. We'll notify you at your email address when you get a reply.","Alt_text":"alt text","Alternative_text_description":"Alternative text is essential for people with disabilities who use screen readers","Assistly_ticket_created":"A support ticket has been created for your case.","Assistly_ticket_notification":"You will be emailed at %email% when it's resolved.","Bad":"Bad","Button_add_feedback":"Leave a comment","Button_allow":"Allow","Button_leave_chat_cancel":"cancel","Button_leave_chat_confirm":"Close the chat","Button_link_cancel":"cancel","Button_link_or":"or","Button_li

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\lv[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	240
Entropy (8bit):	4.91680648566341
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZDMjR4ALgLDS4x8+6nii:t9bibt03jMjqwgDx8+6nii
MD5:	72F085D01F5F43E9D1F093C757F992EB
SHA1:	4012ADFAB06BB13AAC62FA3D322CADB8009A9E12
SHA-256:	98023E0AED40B1F585970D0A550FDF40147E97FDECF67E1F2FCB07EAE7FA5ABA
SHA-512:	D4F9ADBD1D770254974BF077D5976843F7AD6EA8A19541E5D30E95630E25152091602C548E6CF0D9A9231016C66AD5DF724092B3B4828CE3B51A497B552DFA3D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/lv.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h640v480.003h-640z" fill="#fff"/><g fill="#ab231d"><path d="m0 0h640v192.001h-640z"/><path d="m0 288.002h640v192.001h-640z"/></g></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\mn[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2110
Entropy (8bit):	4.400716294136001
Encrypted:	false
SSDEEP:	48:GXMLDxG1a6zap4t2U8WA4mn7d8dRu6N+XnPe9WPJ:8CrvpdU8aiqdRu6SPZR
MD5:	A67E505530FAF469F775E3E3EEB91C03
SHA1:	9A3419021C49CDC832F99A2F97667BF607F38B02
SHA-256:	8112111FC1ECFC74816C1CF8858BD724C80AA8EB6D774F26DDCF9BBCC87D8C88
SHA-512:	7C66AEB780DDE92BB5D1ACDCBAAA2F651A6416B5016ADA7BCF50C431B56FBAF8BC10435BC2B9B49D0F7CCD661C0D96A80D6776E58B7EF1A4470168BD1BAB52D6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/mn.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h640v480h-640z" fill="#d61517"/><path d="m213.33 0h213.33v480h-213.33z" fill="#018edf"/><g fill="#ffd700" fill-opacity=".867"><path d="m102.54 244.2c9.912.286 11.437-3.152 11.437-6.591v-11.748c0-1.433 3.812-2.865 3.812-5.445 0-2.579-1.906-5.444-2.668-7.164-1.144 4.298-3.05 8.597-6.482 10.029-1.525-3.439-1.906-4.585-1.143-6.304.762-1.719 0-4.298-1.525-6.877-1.144 5.444-4.575 6.877-4.956 8.596-.382 1.719-1.525 6.591-3.813 4.011-2.287-2.579-3.812-5.73-4.956-9.169-2.288 6.877-1.144 8.31-.381 9.456.762 1.146 1.525 4.585 1.525 6.017s-1.525 7.164-.763 8.883c.763 1.719 1.144 6.877 9.913 6.304z"/><path d="m221.01 236.08a39.212 39.212 0 1 1 -78.424 0 39.212 39.212 0 1 1 78.424 0z" transform="matrix(.638 0 0 .479 -10.775 155.89)"/><path d="m140 276.43c-13.198 18.438-38.615 23.562-57.462 11.202-4.968-3.257-8.601-6.904-12.058-11.575 3.117 13.254 12.565 22.638 25.64 25.988 19.245 4.929 38.903-6.546 4

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\nz[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1972
Entropy (8bit):	4.545645485995658
Encrypted:	false
SSDEEP:	48:G1tsvLtv/QGms6Ns2V6Js2D6oEs2J64s2M:59Z6s2qs2HEs2bs2M
MD5:	9D02828BD1C70D96A91CF7C950B37ED2
SHA1:	6084BC9F3A68EC5F7232E6245B588A61377D2332
SHA-256:	EF69C85C771EEA47C3AD9D3219485030A9D8F2D6E113B42BD9DD5B78A6981E9E
SHA-512:	2160EAE4E75F8C8F8C0A192DD30B0F825D9F49A809D476A680F0534B08FBE3D135C835F161D3773CD052BA17F0A27ED3536F1EA5DE933D10AAE81E452587DB5F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/nz.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m.004 0h640v480h-640z" fill="#00006a"/><path d="m.031-.1 319.244 304.161h65.484l-312.351-304.017-72.378-.144z" fill="#fff"/><path d="m360.501 304.201-312.381-304.539-24.311.372 313.689 304.172h23.002z" fill="#f00"/><path d="m384.391-.1-319.244 304.161h-65.484l312.351-304.017 72.378-.144z" fill="#fff"/><path d="m360.407.127-312.381 304.539-24.311.012 313.689-304.551h23.002z" fill="#f00"/><path d="m161.455.004h61.505v304.332h-61.505z" fill="#fff"/><path d="m.005 121.736h384.402v60.866h-384.402z" fill="#fff"/><path d="m174.915.004h34.597v304.332h-34.597z" fill="#f00"/><path d="m.005 136.959h384.402v30.433h-384.402z" fill="#f00"/><path d="m520.192 179.283-19.585-14.462-20.305 13.417 7.645-23.175-18.98-15.25 24.305.138 8.57-22.843 7.388 23.26 24.27 1.132-19.736 14.237z" fill="#fff"/><path d="m512.358 167.482-11.586-8.369-11.841 8.006 4.352-13.656-11.243-8.837 14.28-.07 4.895-13.467 4.471 13.613

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\o-0IIpQlx3QUlC5A4PNr6zRG[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 52088, version 1.1
Category:	downloaded
Size (bytes):	52088
Entropy (8bit):	7.991198551783736
Encrypted:	true
SSDEEP:	768:K/mldPWcuUm/2FYEfoaXz1uO4JpjjfVPBu+uO9sQPlHfPWnLQ+j77vVE+SbklSLf:fwyvFvfoaXQRDjRBtuSXPZfYZb99VY
MD5:	3B6DFDBA8743FBE21B65ECF29F43BBA9
SHA1:	5FEF58DD967FCFE2CDBFA22EA9391EBF08F5C838
SHA-256:	700E0D413C4AE3ABF24586E0EE19D6F8CB2BCD1BA3BA8E87643FF295615996CB
SHA-512:	8E78E140108A99CBCAE78F87E322E769AD626184803BEC618B64CCC5FB843267AC3D33A30235535B26544219C2DA23E4D46F47C7C0524CE480732B73719C9A4A
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/notosans/v12/o-0IIpQlx3QUlC5A4PNr6zRG.woff
Preview:	wOFF.......x......Wp........................GDEF.......r.....>.kGPOS............%].GSUB.......1...2.y).OS/2.......]...`\|\|..cmap...0...........cvt ................fpgm.......x....6...gasp...(...........#glyf...8...(.."P&.f.head...`...4...6.6.+hhea....... ...$.R.Vhmtx............^1.loca...H...O...\|.1g3maxp...... ... ...;name.............<.post.......... .i.fprep...........f...x......a....g....P.....D..B.....?..:..L..`.$b..O..b.=.`...j.;.a.S...B.V..5~.-.N'....._..?V(.h}.....QVY...5....x.t.3..Q.@..5Z+..d.'}..m..m.6.XU.5.........8..\|....lB..S..P..P.....&gir..R.s.i...W....I,B...Ng....s....b ..........A4B....?.....r..k..&Z.Z....[.5...zl=...s.C.vM....-..>;.X......\..^...[jq...k-......k.....T...x_O].p...C.5s#.c...sJ5...^.z......r.pNt.{o...BX...\|...B.....Bwz.^...}...F1...M...D..$.H...J..d.I...RD1%.RF9.TRE5.X.....5.e....vv....e?.9.Q.s...,.8...r..\...y.S........7~.xDD.Sl.......J..K..J.t...]zJo.+.d.L.p..H...2If.\|...I.4I...\.p.g...,I.0...s.Uh.e...m..m.fy...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\overview-education[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x216, frames 3
Category:	downloaded
Size (bytes):	17078
Entropy (8bit):	7.967847475627621
Encrypted:	false
SSDEEP:	384:7R7sAQU8eHLEsHDnZ51h1KcnzGmQAnisUImx9ofFViF+91El:ltQXGRDtHnz9QMisUnIFQQ1El
MD5:	45413FFBF38B1D03D5C93BFDFA3A0983
SHA1:	4235347E8CC9E83DB76D97784FCE35CE73F2999B
SHA-256:	2834D95A6069B1390D23F49A7673FD6D019D60D40FDDDE88D481442AEDF6AC82
SHA-512:	633E6B53C598D12948B382B05E77FEA0ED8FA684E73C563237BCA7DC63E5C0776A46FE8013BD4766CABF0290C18F7E4EB41FE03D2D8F65648509B559802B81E4
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/splashpage/free-recordings/overview-education.jpg
Preview:	......JFIF................................................................#"""#''''''''''..................................................!! !!''''''''''........h.."................................................O..,.f.x..dc.gI4.z... Da..30.r..Ci...-..Z.K..%.2.I...... ..KVY..M"..Wl...l..........N..Y.....<....S... r...(..=.o...jP0b$.I.m...k#..;....M.z.N.H}.h:...@.4.DA-&R.P(u..q..p.f[X.8...F..T....(...KH...E..^.'?v..e.F...{.....)JZ.lM#R..-Y.....x...q.m.-4m...{.DD.33.`.n:.M...5I..A.N...../.....bL.)...I(.H.K-e....^ght9...,:+o55;{.....tj..#.=...D.u,r.V.4t.<..v...-..=h./8v.9....2.b\..`./&K..l.c._..y.y.t.S...#p%..%).\|.......WP.s.u%....8L_...SrT)5...p....J...M.z......t...&?.S.).q...oe.d..T.9.I#.......SF...1W...X."I...../.P.<.@3.l..D.G..o.c...\|..]..[.v. D....Q.!.......W.G.....t..^T.Y...i..D.]j.Q_b=..`p.g.:....{g.y......~.S_....:.T.....K....#2.......v.M+{\|w;(..=.V>..~.....M..g..kB....n.v..]G_*;x..x.L.:e.M....$..7....d:.8Ljl7..-n..e.~nn.@.W[....:b81

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\record[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, baseline, precision 8, 466x262, frames 3
Category:	downloaded
Size (bytes):	16896
Entropy (8bit):	7.9690658762530795
Encrypted:	false
SSDEEP:	384:OZ+6WC2AeeS1yjdedd9mM2Z58py7yoozLY+uE94:R6WC6Z1eVZ5EvLY+uX
MD5:	F8C4496BDB031B99F28AB5A85FAEDD1C
SHA1:	263964C0838079F2C14A9B4DB46F3132B45481AC
SHA-256:	2E42E210D7628F5C56458B2A202B3AFAB0F24EB6D74574188D81013BA9D84529
SHA-512:	EDB63CEB3ACB1B48D7ECC94482AADC4774AFE4B8C5CDC7969444EC152AEFE10CF02788089A2E9FA192E685EE4EE2E23F1E5F54D636F5E753053B9052E9163EA9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/video_conferencing/record.jpg
Preview:	........................................................#"""#''''''''''..................................................!! !!''''''''''..........Adobe.d................"......................................................................................!1AQ.."2aq..B..#3Rr.....4b...$CS.....5cDTs.........................!1AQ..2aq"...R.3B...r.#CS............?...qR9B.5"{.....8..PHV.............r...U.6.\.<.T.....%.o ... cy..[.%J..#y%.o .-.@ ky..\..!P........IBT...Il.....N......R..$.P.Xr.l.!q..d..ox.0q.v@.Y.E.........$.=.{...p.1IK.V......,f.....(d...,..N=c..A.....X..=.O....X..-qe..so.E......X;.......07.V.\|.e.SK.ZFFs...'D.>.....\.......+.A.p.T..y,..;.tE...C(.`..s..E5.d.-..Fx......Q.,wov..I...[v.9]nG...(.~.k:..Bl.........W^7.:.M....]..{...Bh_D...&!R.....].(.v.. ..-.$..U. .J.%.@.......&.P......R..q..lr....E....-.]".....w......AeS.T..}.C.t>...1.=..x.....B..#...\..4.N.W.......o...c5..v.nS$..........W.M)k...~%UNHa.M.+F.zF..MWRX.p.......TVb32c.h#.,.H.H....)k...x..:*.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\rs[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	500141
Entropy (8bit):	3.6395985886058413
Encrypted:	false
SSDEEP:	1536:TIZBoY9MF1Ulp873c7UnoQbknaWHEl+u3bkn3MjJxpL0USXb6cX9DwI0l7Vh1Vc/:L1A8OCsBEKF3RZC+/
MD5:	575A07E50E70F8CCDA21CAE3D0D17BAD
SHA1:	309ACEE17F12E6ACFC9144BF9BCFB637D062C0E9
SHA-256:	E5937B026E7779CDDD0BB089B40692FE05D3C8FB6C464B7BDBDE61178307564A
SHA-512:	997E2A39C22C4294FB18556B93691B669CB5D453C817C21C3740CB3C9E575BA18D8059739FE87BBB7786440C79D079DEDA4FE3394140C0302178D8DF96BF921A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/rs.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m60 0h1200v900h-1200z"/></clipPath><g clip-path="url(#a)"><path d="m-32 0h720v480h-720z" fill="#fff"/><path d="m-32 0h720v320h-720z" fill="#0c4076"/><path d="m-32 0h720v160h-720z" fill="#c6363c"/><g transform="matrix(.533 0 0 .535 -32 -.175)"><path d="m473.38 259.35.006-.176 1.01.034-.006.176-.482.492zm1.01.034-.016.471-.467.021.482-.492zm-93.132 5.244-.988.212.462-.615 4.146-.263 4.066-.257 3.986-.25 3.906-.244 3.826-.238 3.746-.231 3.666-.226 3.587-.219 3.507-.212 3.426-.207 3.347-.2 3.267-.195 3.187-.188 3.11-.182 3.028-.176 2.948-.17 2.869-.164 2.79-.158 2.711-.152 2.631-.146 2.551-.14 2.472-.134 2.393-.129 2.313-.121 2.233-.117 2.156-.111 2.075-.103 1.996-.1 1.917-.092 1.838-.088 1.758-.082 1.679-.076.045 1.017-1.679.076-1.756.082-1.838.088-1.915.093-1.996.1-2.075.103-2.153.111-2.233.117-2.313.121-2.391.129-2.472.133-2.551.14-2.631.146-2.708.152-2.7

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\screen-record-sellbox[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1800x669, frames 3
Category:	downloaded
Size (bytes):	56068
Entropy (8bit):	7.964596703429357
Encrypted:	false
SSDEEP:	1536:PFavhRLdCsVH3/cCNqL+s1Qg/sHRXG29lZjZ:PM9XPoqsmg6R229l7
MD5:	2B06F11B441F65638A237D1F806BFE8B
SHA1:	B1A43E54489186F99EFECD9FFAAA0DF1D2EF537F
SHA-256:	A4C33A30E77C9987A565DA2445AC2C3B43FBDE474873AA597115BB030D866FF2
SHA-512:	6C687FF515D3C7B98224C5D715AEC32C60AC766A74633D1BA4F6D479524A5CE590516517F4F6CCBDF14B8B3FA95F28DFC795940553A9B241E20A8D06826E5DAA
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/splashpage/free-recordings/screen-record-sellbox.jpg
Preview:	......JFIF................................................................#"""#''''''''''..................................................!! !!''''''''''...........".................................................`...1....m.6.m...cm.llc.0....`..m............z.Z..u..z.....R1.`.0...2\|.;r...............6.`....m...t6..c.c...h`0..l...n........V.U..]]:t.9.u.)c`..`4........oc.V ...../..O.~.0c.......6.Cm..(m.662.............U.UU-n......J..Z...wNi....j@a....F.....~...U..........`..y\|.....1..l....m..Cm..(m..61....10.l...m..]UU=].iw.iz].j...S.............3<_<........ok.....;.1.....2..=.......S...`.S./..W...>...6.c..6.c.............c....C`66................iWT.kb...nj\|....{....J:9:..W..[..;../..{t...z>.G.^.........~S...`0`1.....6.lm...m.66..1.....1................K..........;...o..o....;n8{.........../'...\b.8.....k_{.{...)...........c.0lllm........lm.l..4:@...c.6..]..wWwZV...].U.S........iYk.=?=.'W_....,.).........`.vz\..~.:q}......0.'._3.o.....c.0llcl

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\sddefault[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, frames 3
Category:	downloaded
Size (bytes):	44143
Entropy (8bit):	7.9742712433522485
Encrypted:	false
SSDEEP:	768:AsLjOzOLE6mO2jiVfBZCQO1icUzBlvU+LIHevfPvPua4Xtc015QmHK9ELxSCZYzz:AcSQE+2jiV5AQOEzB9VIH2PHua453KGI
MD5:	146C17FA8D40B80014842B6BF2ECE2CD
SHA1:	A91CEB183E629554F71AC75CC94D107645D83436
SHA-256:	5D419D523F17F47663EF83337F7744F1610FFECE254B566F5F59589AF288A903
SHA-512:	1E43E75B387FF5FAED8B1AD92EFCC88ADDE94056343CEC1872508C4EF9529B75075383B20CA098F3138A364B47C802471463A8650232AE6222B76D461AE1E9F0
Malicious:	false
Reputation:	low
IE Cache URL:	https://i.ytimg.com/vi/_ty1kvFAO84/sddefault.jpg
Preview:	......JFIF...........................................................................................................................................................".........................................g.........................!..1.AQa.."2Rq...#Bc........Sbdrt.........$%345CDTe.........EUu........s...&................................3........................!.1AQ....R."2aq......#B.$............?.....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....!.@....#........b...r..m.WG.!\~b={.?....^.O.#c....m.WG.!\~b={.?....^.O.#c....m.WG.!\F....>1/.?.}.......w......SP._0.....J6.....r.n......+../.}..Q....h..lU.u].n...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\si[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2854
Entropy (8bit):	4.372265132505587
Encrypted:	false
SSDEEP:	48:6jKlf6qAx1yDO7hKu/z6eUMhQ8KPvKESXea6aJbXXU:gKlf6qBqQyz6d6P5nU
MD5:	92BDA7DBD3F6B43EBD54F83D726822E0
SHA1:	117DF89CEDCC0F3BE90C9234383B01E5175FE6C6
SHA-256:	78E8D04F385E0F14AD14FF1E766DFBD800ABA08DFDD1F65FB29985E7ADF39215
SHA-512:	89BA9918CF91C0A630306144E5DEAB1E62E5C2465BC30AEC13BBD203DBE9BC55B6B4F44833EF7F8B6FE46536988978BC057D3F173F89936E01424CB4315FE8CE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/si.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="480" width="640"><defs><clipPath id="a"><path fill-opacity=".67" d="M-15.067 0h682.67v512h-682.67z"/></clipPath></defs><g fill-rule="evenodd" clip-path="url(#a)"><path fill="#fff" d="M-44 0h960v480h-960z"/><path fill="#de2918" d="M-44 319.997h960v160.003h-960z"/><path fill="#08399c" d="M-44 160.003h960v160.003h-960z"/><path d="M228.222 87.165c-3.768 57.798-5.927 89.471-14.727 104.128-9.516 15.74-18.773 27.263-55.903 41.139-37.134-13.884-46.387-25.406-55.906-41.147-8.8-14.653-10.959-46.322-14.727-104.119l5.487-1.848c11.047-3.369 19.288-6.078 25.385-7.281 8.731-1.848 16.151-3.937 39.616-4.427 23.465.404 30.922 2.623 39.652 4.471 6.046 1.289 14.641 3.826 25.605 7.26l5.516 1.826z" fill="#de2918"/><path d="M222.813 85.27c-3.564 57.673-6.546 84.084-11.197 96.787-9.025 21.743-23.312 33.665-54.061 45.036-30.75-11.381-45.038-23.306-54.06-45.047-4.651-12.694-7.589-39.038-11.051-96.844 10.813-3.377 19.291-6.016 25.387-7.22 8.731-1.848 16.151-4.025 3

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\sized-woman-for-education-1[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 361x240, frames 3
Category:	downloaded
Size (bytes):	20807
Entropy (8bit):	7.969669958215869
Encrypted:	false
SSDEEP:	384:1cpumwQp8qdiLowJZcx89HNPMXeL0CC7C0x8D/IT4fbm7Xc/tC85tpTfYMn7rr1B:qp8qk5vZbMXeL0CCm0PTqbmI485f57rD
MD5:	1C2A9B161B05080737A11EBD9A0B5C18
SHA1:	40506B98A78CF55E7067CF41CBB2F3C4F0AC37DA
SHA-256:	EDA534484B74E71888BB77DD0CA754250F8A331DD9AF68321881D9CE23BF99AC
SHA-512:	7BBDF4816B8F3DDC0A9D3D0A109853F2086122A2B1499514390B6CF9026CA84DDB0308562478EB0E0F7F801815D1B155FC6A9098AD26EBE77BAA4FF3A337C510
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/screen_sharing/sized-woman-for-education-1.jpg
Preview:	......JFIF................................................................#"""#''''''''''..................................................!! !!''''''''''........i.."................................................K...v......ZX(T.g..$..D......m.....N.....\|...]..L{...K....?<..d.D....P..C..00.p..G..Y.t..3.vPE...4..U......._.j.$._.d.............=v..GH....k...E~.<T{.8.....+..i.0..=.h._...%.. .>.UC.i.]-..U8..n.^-.e.P......Z+.FGkr~..m...C.&Jj.10Wk.....O.^.sP...Vt.."@..t..1e.)..W]..S]....e......J..Zk...Z.lQ...(.1(&..Y ..I...R..AU...v..?>.I...,...1....L ~...[........C....u.vw...'3.....U..^Uq$.G.7\|......$....j........+....-}......i...q}...e2....l..rD#_.e68...$g+3p.......,...]%.D..R...>.<..n.r.?......fk....-..d..^..t.Z a.y....^.o.i..{..&..-..5B....iz.?..,...W...l..z&..$~3k......VTd.vkM...d6 1...f....Q..q..\..c.2+..#p.W.`/.f...q...J[....V\|z...h.....c...._.I.\..n...-L...z.a-...K7..q..~~B...lU.@...<ot....6...!...?TX.Zd....\..kq.B....3Ge...>.+.E?...:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\sk[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1513
Entropy (8bit):	4.696797408502588
Encrypted:	false
SSDEEP:	24:t9bKt03La5vMrG++QOC46gWAXd/LsEcA4R8FTgmRDvJYXVRk0Zjg/99oaYiqkq6E:G+ahCenVjmRYjBJYXVvZji99JbY4TiIw
MD5:	8A4CC3A6EA5052CCF0135DC07A6D8FC4
SHA1:	C0A4DC37F73452FB5BE0422E5D724C98A9C6D3B8
SHA-256:	C8D1E9828FF3D437F6A77852E5BC791682E783341A224ECAD699A9799B9A62DD
SHA-512:	17C156AFCDED9DBD2C1C024AE1232B375AEC20EE6829BA6A7023CC3BA9831DFE43114DB3F6EABA8C179735689C76F85A20D5F6D371BEBA17B2B19E347BB79D28
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/sk.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-26.334 0h682.67v512h-682.67z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><path d="m-39.999 0h720v480h-720z" fill="#fff"/><path d="m-39.999 160.003h720v319.997h-720z" fill="#01017e"/><path d="m-39.999 319.997h720v160.003h-720z" fill="#fe0101"/><path d="m85.378 108.937v134.597c9.219 52.548 33.65 106.022 116.156 133.209 82.049-27.196 108.319-78.362 118.003-134.138v-133.678h-234.159z" fill="#fff"/><path d="m94.596 119.541v117.544c8.297 42.868 24.43 101.409 106.941 128.606 82.049-27.196 100.95-85.736 108.319-128.606v-117.544h-215.259z" fill="#fe0101"/><path d="m214.447 190.528v18.899h37.798c5.068 0 9.833-2.459 14.751-3.688v35.493c-5.071-1.076-10.027-3.226-15.212-3.226h-36.876v43.329l-25.353-.922v-42.407h-35.953c-5.404 0-10.447 2.766-15.672 4.148v-37.797c4.917 1.536 9.599 4.609 14.751 4.609h36.876v-18.899h-27.196c-4.766 0-8.912 3.381-13.368 5.071

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\splash_pages_wide-cb2ff9bd413f6517bd145b911ebc204bfabc231fbc3743cc296dae4feb3cc2f3[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	156625
Entropy (8bit):	4.949318562919955
Encrypted:	false
SSDEEP:	1536:yqnX7M5lAmprHQtDF/2BWJXz+z1N+wjM71uBfyBGptR8bqZeKDuKr2YZ+56T/mhH:77M5lAmprHQDOBWJXz+z/kn
MD5:	AD77AF3C36E0EA03E4A9EB0AE6BEF13B
SHA1:	DB54977AE56B815024A5513CC24B21920F9BCD8D
SHA-256:	CB2FF9BD413F6517BD145B911EBC204BFABC231FBC3743CC296DAE4FEB3CC2F3
SHA-512:	8322CF46BD429A71A13DC28F08B90CB7464D44208CE6463930BB797DC6F016A96D5D950D55031B405452CAAC034B6907D03926BACDC5CE08CF65F4CE9F8B92FB
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/assets/splash_pages_wide-cb2ff9bd413f6517bd145b911ebc204bfabc231fbc3743cc296dae4feb3cc2f3.css
Preview:	.free_prayer_conferencing h2{margin-top:0}.free_prayer_conferencing #sellbox{background:#2773a7 url(/images/splashpage/prayer/sermon-background.jpg) no-repeat 50% center;background-size:cover}.free_prayer_conferencing #global-reach .fa{padding-top:50px;color:#2773a7}.free_prayer_conferencing #testimonials{background:#2773a7}.free_prayer_conferencing #prayer-form{background:linear-gradient(90deg, #153e59, #2773a7)}.free_prayer_conferencing #prayer-form .jvFloat .placeHolder.active{color:#fff}.free_prayer_conferencing #footerfix{height:0}.host_a_webinar h2{margin-top:0}.host_a_webinar #sellbox{background:#2773a7 url(/images/splashpage/host-a-webinar/host-a-webinar-sellbox.jpg) no-repeat 50% 50%;background-size:cover;color:#fff}.host_a_webinar #hosting-tips #video{margin:40px 0}.host_a_webinar #support-info{background:#2773a7 url(/images/splashpage/host-a-webinar/customer-support.jpg) no-repeat 50% 50%;background-size:cover;color:#fff}.host_a_webinar #footerfix{height:0}.refer_a_friend #s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\support[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	60105
Entropy (8bit):	5.150375008202376
Encrypted:	false
SSDEEP:	1536:wE+g7dM5H+PkTOKHuEADpQv0egz6xmeIAjVQpy99YPyWG:l++dM5eMTOKHmegz6bMy99YPyF
MD5:	57B52A27F333555051D5CBDE435E5F6D
SHA1:	819C81B885E22B39E470140CDE788C501BFD046B
SHA-256:	30CF40F41AE7F7052D8A9620EA06B7D978383B9CF79F227CA5BFE33FAA24EAEB
SHA-512:	1E2A4E28635CA52DC0A5D48D2FC1B38375CDBC162613299375F934DE7F77B1C42C3E7F7C3C0B2AE4A5CE09FF5A7DF3DD0F06BDE7095363181B732FBE427EAEC8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7
Preview:	<!DOCTYPE html>.<html dir='ltr ' lang='en' xml-lang='en'>.<head>.<title>.Support \| FreeConferenceCall.com.</title>.<meta charset='utf-8'>.<meta content='IE=edge' http-equiv='X-UA-Compatible'>.<meta content='width=device-width, initial-scale=1' name='viewport'>.<meta content='SKYPE_TOOLBAR_PARSER_COMPATIBLE' name='SKYPE_TOOLBAR'>.<meta content='6Ldw2wATAAAAAPrc0sIk2o7FxSX5ZwzkHm55xu2i' name='RECAPTCHA'>.<meta content='telephone=no' name='format-detection'>.<meta content='ch' name='country_code'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-regular.woff2' rel='preload' type='font/woff2'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-700.woff2' rel='preload' type='font/woff2'>.<link href='/fcc_favicon.ico' rel='shortcut icon' type='image/x-icon'>.<meta content='Questions about our award-winning free conferencing software? Here are answers to frequently asked questions about conference calls and online meeting with screen sharing

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\unnamed[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, frames 3
Category:	downloaded
Size (bytes):	3369
Entropy (8bit):	7.856013929767859
Encrypted:	false
SSDEEP:	96:HFWguJM0uWeAS18TFVfI0zEHwAR5dv7xpH0:HJN0uWe6TFVfI0z9q5p7xpH0
MD5:	4C77EAC69F52CF46FE52777D4F52CE0C
SHA1:	523463A622184242F727C19EE16870862CBBE849
SHA-256:	6C13E912CD8091EB8D9DE25C370EA8897733774BB25EE38CA63F29CC8CAC61F0
SHA-512:	B54B5479A357B92B026220210C483A40E25893994798009A74A8736097D795BE1E20ED8BCE45D367CF752C54E4A5A1EC8DBD95A46049E2231F5818F0FD3C31C5
Malicious:	false
Reputation:	low
IE Cache URL:	https://yt3.ggpht.com/ytc/AAUvwnj7WpfzelPokAzZT2v_ekjCYX5iSviier_HnzCM=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF.............Exif..II.......1...............Google..............................................................................................................................................D.D...........................................<........................!....1AQ.."2Raq.3Br.#$b....5CS...................................4.......................!..1Aaq..Q...."...#BR..r...............?..>...[...k<.;.tt4..'.C.5,.}.A=...%..$....R....XhO.V.<....5..'.wp.Ij0lynG!...j........@...oA..............<%.v...bb.&..Qq.;....o..$...."TS.9.K{...{.6+.. 'T..+.4c.0.p...Z"..Vp!p.l..c5.........Tx.....r....D...ss&7...qKD=.E.W.v.~.#}.UW...1.EOL%.,Q...`..\|.D.e....D.x.O..S&..Z..?....=Z.m..G..nW\|..(...!A.../...W............"..{z..........Y4Q.Hi.O.......d?....Q.Xv...S.S..".......]5..Q.K}J..B.. .;..7s..n8....D5.lx....iMf"7.?Dk.2J...q{..8o............}..W)...%J.h..\.T..;..X.i...]..$l..7pxpM+...P..]...g..#=D......t.....cK...$...\v..f\|....I(l*.v....b.{..:.>.Q...Y..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\video-conferencing[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	43553
Entropy (8bit):	5.325120218015409
Encrypted:	false
SSDEEP:	768:WP3E+g7dM5H+P3Y6JDBepixX3Zj9zmcdecIcpzK7J99YPy8P0:iE+g7dM5H+P3TOKZj9zmcdejV99YPy8c
MD5:	017C8932DDD4847F6392E7BF0C467CB0
SHA1:	0CF692B44CB0C21A2F38D5C2FEFAAF3523DF69E5
SHA-256:	09F015BB071F37608B7CA755E1AACF7DCB56BE51A3B8CF560E1A300C1FE32334
SHA-512:	7253B67C2650742A8CC5E757216288EAA33AC4BF02768E33AA5778240650EE6CC7A72CC8AEFAF3FDB4F16C0B446B345E2DE9D52C27739CA24E3D2647B902529E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/video-conferencing?country_code=ch
Preview:	<!DOCTYPE html>.<html dir='ltr ' lang='en' xml-lang='en'>.<head>.<title>.Video Conferencing \| FreeConferenceCall.com.</title>.<meta charset='utf-8'>.<meta content='IE=edge' http-equiv='X-UA-Compatible'>.<meta content='width=device-width, initial-scale=1' name='viewport'>.<meta content='SKYPE_TOOLBAR_PARSER_COMPATIBLE' name='SKYPE_TOOLBAR'>.<meta content='6Ldw2wATAAAAAPrc0sIk2o7FxSX5ZwzkHm55xu2i' name='RECAPTCHA'>.<meta content='telephone=no' name='format-detection'>.<meta content='ch' name='country_code'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-regular.woff2' rel='preload' type='font/woff2'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-700.woff2' rel='preload' type='font/woff2'>.<meta content='noindex, nofollow' name='robots'>.<link href='/fcc_favicon.ico' rel='shortcut icon' type='image/x-icon'>.<meta content='Video Conferencing from FreeConferenceCall.com is a high-quality collaboration tool that makes Online Meetings

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\xk[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3139
Entropy (8bit):	3.877871207278033
Encrypted:	false
SSDEEP:	48:2aVuPbJ5nSM6eggXDRcMcjBnxxveevTDse//7ErtND5Q1ZuO03lmAF0a+gO3ONtK:pVYfSM9Nz6b7xtLDsuUtrhOMlvV+3eCz
MD5:	AB653CE0BADF6D9B4D641CC504CEB4A8
SHA1:	504F66AB03B03EC5C0BB50EDCA139011892E68BF
SHA-256:	9795381F822BF988F8F98191E102DBCEDB718F61D48469AB86DDB02E0987255C
SHA-512:	538C7BD5985278274C8D0EC0CE32A44C9B8E023CDDA5C4519405A8CF9223DF7C745E28EB72111B378CADCDED4142598CCC3A2C56B1297AB2391A1A8E16615EDE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/xk.svg
Preview:	<svg enable-background="new 0 0 300 200" viewBox="0 0 300 200" xmlns="http://www.w3.org/2000/svg"><path d="m0 0h300v200h-300z" fill="#034896"/><path d="m147.8 78.5h1.3c.8.8 1.5 1.6 2.3 2.3 0 .6.2 1 .8 1.2l-1.6.3c-.2.3-.5.5-.8.7.1.9.9 1.4 1.5 2 .6.1 1.2 0 1.7.5h1.3v1.7c.5-.1 1.2 0 1.3-.6h2.8c.2.5.8.5 1.3.8.1.3.2.9.2 1.2.5-.6.9-1.4 1.8-1.4l.8 1.1c.5 0 1 .1 1.2.6h.9c0 1-.1 2.1.1 3.1l.5.3v2.5c.5.4 1.4.8 1.8.1h.7c.3.5.7.9 1.2 1.2v2.4c1.1.4.4 1.8.6 2.7.5.4 1 .9 1.2 1.5.1-.3.3-.5.5-.8h1.9c.3.3.6.7.8 1 .1.1.4.4.5.6.4.1.9.2 1.2.5.4 0 .7 0 1.1.1.3.7 1 .6 1.6.7-.2.2-.6.5-.8.6 0 1.3.1 2.7-.1 4.1l-.5.3c0 .7-.1 1.4-.6 1.9h1.1c0 .2 0 .5.1.6h.5c0-.2 0-.5.1-.6h1v.6c.6.1 1.4-.2 1.8.5h4.6c0 .2 0 .6.1.8l.7.8h1.5v.9c.5.4 1 .8 1.6.8v-1.1h1c0-.2.1-.5.1-.6.7 0 1.7-.2 1.8.8.1-.2.4-.7.6-.9.5.1.9.5 1.3.8v.8c.8.2.5 1.1.6 1.7l-1.1.8v2.6h-1v2.9l-1.7 1.5v1.8l-1.2 1v.8c-.4.4-.9.7-1.5.7-.3.3-.5.6-.8 1-.2 0-.5.1-.7.2l.9.5v3.5c-.7.6-1.6.6-2.5.6l-.9 1.1c-.7 0-1.1.4-1.5.9v1.7c1 .5 1.4 2 2.6 1.9 0 .9.2 2-.7 2.6h-1.2c-.6.9-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\za[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	933
Entropy (8bit):	4.924743895508224
Encrypted:	false
SSDEEP:	24:t9bKt03LaKOwMIRpKWCwGV4pbMPURfM2+MKQir55W+i:G+9jRpNq4pbIUoMn2aT
MD5:	AED0AAF223C4DBF42832CC2A0C6CFABE
SHA1:	BF0FE5AD7B55204B6B2DD32B9455F036B80A3E4B
SHA-256:	D0589FB991CEF02479D3AB5FADB0299E5AD97F90F801B907BF03BED16BD1F34E
SHA-512:	6E2628731505679D94840668943ED1F29014534D1748929E6AF6E14F2A6565CA6C7E5D74260F8DD0C7E66F4372E3A08FFE0D0F25AF251D2A09A355A12A46C1EF
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/za.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-71.873-.012h682.68v512.01h-682.68z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><path d="m.004 382.025v-284.39l211.738 142.122-211.738 142.278z"/><path d="m144.482 479.772 237.715-159.948h337.882v159.948z" fill="#00c"/><path d="m129.199-.19 590.861.012v159.974h-337.882s-249.811-161.568-252.979-159.986z" fill="#f00"/><path d="m.004 59.81v37.801l211.738 142.122-211.738 142.278v37.799l266.688-180.077-266.688-179.923z" fill="#fc0"/><path d="m.004 59.81v-60h88.969l282.509 191.1h348.576v97.726h-348.576l-282.509 191.073h-88.969v-59.898l266.688-180.077-266.688-179.923z" fill="#093"/><g fill="#fff"><path d="m88.973-.19h55.5l237.715 159.974h337.882v31.125h-348.576l-282.509-191.1z"/><path d="m88.973 479.772h55.5l237.715-159.948h337.882v-31.125h-348.576l-282.509 191.073z"/></g></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\1124938230859430[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	780402
Entropy (8bit):	5.469217481548313
Encrypted:	false
SSDEEP:	6144:Rk1HgCSntDV/HaK3V/Ha8NEPjQHguH3HpQrwzzmqk1HgCSntDV/HaK3V/Ha8NEP4:dNESVNESVNESP
MD5:	BFC5CA847E8AEAEB56461126A0CB947A
SHA1:	0E79B9C3711C9153CCFD3DE188DD830BEEC6C0A9
SHA-256:	7BB1144502E7D954FE8591DA6A51FE6CD80255C718C18A7F11737C3D852E16F5
SHA-512:	3F1134DC85E727A7BE54ACF355C734E49349C63B5643A8104D4EDE0278B0806F963433010DFDB94236B45E2CC8627B3AA98AC60A07ACAEF3D1CEF5BB41AAD07E
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\1124938230859430[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	260134
Entropy (8bit):	5.469217481548313
Encrypted:	false
SSDEEP:	6144:Rk1HgCSntDV/HaK3V/Ha8NEPjQHguH3HpQrwzzmi:dNESP
MD5:	D4564BD905CCD8F87FEA0C13778ABF3F
SHA1:	218DAF3942B933DF3E0E1348389289151FDA7531
SHA-256:	9E203A1C5D80D9EE3C6D9DDA82A34435820BD95A8F0EEE7FFC76D22FCEDC263D
SHA-512:	E0D78ABDCC24CD6BF36A323F83B4C729924A4AAFDF28D489AB2DE9D369248F21280478101397DA8ED291D5F22E53845F452AD0593E1E200E8FA72DBDFE1CF854
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/signals/config/1124938230859430?v=2.9.39&r=stable
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\J4MUFDO8.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	49807
Entropy (8bit):	5.2860569814205585
Encrypted:	false
SSDEEP:	768:jTsE+g7dM5H+PbA8PpPcvQPHDFecR58yaCCeuyr99YPyt2:/sE+g7dM5H+PbDCsFecR5naBe99YPyt2
MD5:	AD954FA6309F3250E598C45E804C3114
SHA1:	2A6156F7A735F337739BE0C20A880A280BBDEEA9
SHA-256:	F04E58831DB843581B5888522DC75032B1753039DB5736C20E0F675FD2698D59
SHA-512:	20569773B809658C2A2D5F59C5BA196733DFBC618A7B192613CDD55539CE8217D1787CF7D1D9F51ABF48305CD03C33884297A7AA9B0DC10CEB2D3D655611E509
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/
Preview:	<!DOCTYPE html>.<html dir='ltr ' lang='en' xml-lang='en'>.<head>.<title>.Free Audio Conferencing \| FreeConferenceCall.com.</title>.<meta charset='utf-8'>.<meta content='IE=edge' http-equiv='X-UA-Compatible'>.<meta content='width=device-width, initial-scale=1' name='viewport'>.<meta content='SKYPE_TOOLBAR_PARSER_COMPATIBLE' name='SKYPE_TOOLBAR'>.<meta content='6Ldw2wATAAAAAPrc0sIk2o7FxSX5ZwzkHm55xu2i' name='RECAPTCHA'>.<meta content='telephone=no' name='format-detection'>.<meta content='ch' name='country_code'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-regular.woff2' rel='preload' type='font/woff2'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-700.woff2' rel='preload' type='font/woff2'>.<link href='/fcc_favicon.ico' rel='shortcut icon' type='image/x-icon'>.<meta content='FreeConferenceCall.com provides HD audio conferencing, screen sharing and video conferencing with up to 1,000 participants. Sign up for a free account.' n

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\_ty1kvFAO84[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	50046
Entropy (8bit):	5.816239852414042
Encrypted:	false
SSDEEP:	768:6hK02KFNhId2OHADJaTKJ+yRUSoZaRHVDKLgAHujHKOp+kYAIMJBU+L1T:CIua/yqSlVDKLgAHDOp+pAIMx
MD5:	B6D6384183C13F17E916EE50DE451BCE
SHA1:	6DF8E543C6454EB50A4589C6779FE39E8BC98D8E
SHA-256:	F90D2230C0EF84226DD1D91340C3655BCFB14F2B38E4F4AC4CF0223A39277DB4
SHA-512:	5C640D8FC83FF7A617884ABAAD0D4E32EBD63BD4CCA6746A1F77F11C59710A8528D1E99B51B53F06FAF10B5D90C433BB12F9A51B2D3E66685DE299B404D87674
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><style name="www-roboto" nonce="s/+HVL+s7OCoqEHikTXrEw">@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff)format('woff');}</style><script name="www-roboto" nonce="s/+HVL+s7OCoqEHikTXrEw">if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "E"); document.fonts.load("500 10pt Roboto", "E");}</script><link rel="stylesheet" href="/s/player/cb5bd7e6/www-player.css" name="www-player" nonce="s/+HVL+s7OCoqEHikTXrEw"><style nonce="s/+HVL+s7OCoqEHikTXrEw">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100%;}h1 {text-align: center; color: #fff;}h3 {margin-top: 6px; margi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\active-speaker[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, baseline, precision 8, 466x263, frames 3
Category:	downloaded
Size (bytes):	20318
Entropy (8bit):	7.973875217994825
Encrypted:	false
SSDEEP:	384:NjtOpp/jNQ1ZUHSX8AaE3tXEZB8OlRiORo5LXE1sUCgLax/yud0/g5215:NjtOmbUk8Ab3JIBNRiORo5LXnw/zg415
MD5:	82A8E6CAC53376505362AA765BDC80EC
SHA1:	62AE9D3F897B49C51A0E3D3764A53930D5CFB977
SHA-256:	A1CE6B3D16B3A5F243788191752DADEE82035FD0854DD0AEC7E60B5E16507580
SHA-512:	53B5C6CC78C213D27D95734A9EF20B7657FC7EE6D683A1106265B5C8FAC5EFD080212ADB86946FB5C9D726E53A00F3AB42B6D8AA477517EBAE22C025C6F91C9D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/video_conferencing/active-speaker.jpg
Preview:	........................................................#"""#''''''''''..................................................!! !!''''''''''..........Adobe.d................".....................................................................................!1.A."2Qaq......3BRS...#r..$Cbs.....%4c..DT...&56........................!.1Q.A."2Raq.B.....3r...#Sc...............?..`..l..S....P.l...L.......T.((.....T.. .~...........fN.\X...<.z...G.dz.-..]..QI......k..=>U-p.kK.....c....?........QS...U...i..5..\|.:+..?t..>J..%.4wV.....\.K.Z....`.}.......~.o:.~.\|..x~.*..J......~.;...?..^...7...W...G..%.k\|.Oh;.......~.n..~.\|.=^..o..$.K..\|..h;......q....!.....A........\.Q.b=....){E...V....G.....o..$t.!.\|..h...).@...[a.?t..>K..?t..>H.C..b=.{....D...[n...o..$..~.\|..\.S..{@....N.?....?t...)".l...\|W9..%...X....W...D...]..<...)..k..8]m..ro.j.....a`.....Ks..GE{.....a....\...?...k.(...^b.O... r..=m/m.GE{..........){@......P^.E4A.7s@...,...}...GE{...b."{../h...+m..}...K.........:..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ae[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	252
Entropy (8bit):	4.8222947357896935
Encrypted:	false
SSDEEP:	3:toKcvT/d3dyvDmJS4RKb5KVErcH/TlT1l4qGbq34+HGRXfF5E+HVLlNkLqI7oqGa:tc8mc4slmbJ1lt9BKlVDESqEoW2
MD5:	022A578EAB9740D7C8B7FAAD26157915
SHA1:	9A5702683F27260304D7202078C2357F9DA8DC59
SHA-256:	CC9B4070847F55C2A6632229B2FB5EFE4DF0A791D163AF8DAE60EC64F9FAAC34
SHA-512:	7224F3859D915B317784D3B63B2109D39BFF8B262A34125C43C881020FD075150CAD0F3387B516A6A7645EDCCBB9ED122B583E0DAA9400C7FCBAFBE3BF1E87B1
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/ae.svg
Preview:	<svg viewBox="0 0 640 480" xmlns="http://www.w3.org/2000/svg"><path d="m0 0h160v480h-160z" fill="#f00"/><path d="m160 318.81h480v161.19h-480z"/><path d="m160 161.91h480v159.09h-480z" fill="#fff"/><path d="m160 0h480v161.91h-480z" fill="#009a00"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\apple_app_store[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9733
Entropy (8bit):	4.11763140773579
Encrypted:	false
SSDEEP:	192:NU9O2mycoVM20dJ0VdbwDxQvfmxQ6dz151HerhcR27fNWyGh5DLN7g:xkRVM203WUxeOxTdh50HNTGzDLN7g
MD5:	8B1A072C3692DD08E87342A1A3300EA6
SHA1:	B108167188588E061963633E978E6884A1C73AB5
SHA-256:	6BA8727ADFDE8485BB16032913FE08263CADE97407B15008F2980BA5885071B0
SHA-512:	7C3F0829B564F30B32C21B7BFE138367BAA3F2F13194B2F859979ACEDD06BF8BD07005010423EC810C0D7DD01337BF45D0C5C3F23AE5B40468919029C7708BD7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/index/apple_app_store.svg
Preview:	<svg height="40" viewBox="0 0 119.66407 40" width="119.66407" xmlns="http://www.w3.org/2000/svg" aria-labelledby="appstoretitle appstoredesc" role="img"><title id="appstoretitle">Apple Store Button</title><desc id="appstoredesc">Apple Store Button</desc><path d="m110.13477 0h-100.60009c-.3667 0-.729 0-1.09473.002-.30615.002-.60986.00781-.91895.0127a13.21476 13.21476 0 0 0 -2.0039.17671 6.66509 6.66509 0 0 0 -1.90088.627 6.43779 6.43779 0 0 0 -1.61865 1.17866 6.25844 6.25844 0 0 0 -1.17822 1.62109 6.60119 6.60119 0 0 0 -.625 1.90332 12.993 12.993 0 0 0 -.1792 2.002c-.00928.3066-.01026.61422-.01515.92086v23.11426c.00489.3105.00587.6113.01515.9219a12.99232 12.99232 0 0 0 .1792 2.0019 6.58756 6.58756 0 0 0 .625 1.9043 6.20778 6.20778 0 0 0 1.17822 1.6143 6.27445 6.27445 0 0 0 1.61865 1.1787 6.70082 6.70082 0 0 0 1.90088.6308 13.45514 13.45514 0 0 0 2.0039.1768c.30909.0068.6128.0107.91895.0107.36572.002.72805.002 1.09473.002h100.60009c.3594 0 .7246 0 1.084-.002.3047 0 .6172-.0039.9219-.0107

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\audio-conferencing-sellbox[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x913, frames 3
Category:	downloaded
Size (bytes):	82889
Entropy (8bit):	7.959380176631396
Encrypted:	false
SSDEEP:	1536:oSdzpxLCdEJggphPbCACddYwJXHrr8pMme3OEp6z7V:rj0EHPb+LYwJ7ApOW7V
MD5:	0DBD16B5A9E7581C2A6FF3A6FA7D683C
SHA1:	8D8D42A3D5D034CC1F24EE180A4D5FE409577FA1
SHA-256:	180B71F023E2263C83953108A2530F8FC16508282DB45D2DBCC2301EC96663FF
SHA-512:	9DD60354865361AAFF499F4F330639A9723E23F05A170226F7F2B92FCE7DF512FC3DC51A9AFFB08EF7CF997FADACB753D616D7616F6B4E3DE9B4028BFD1CD756
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/splashpage/audio-conferencing/audio-conferencing-sellbox.jpg
Preview:	......JFIF.............C............................. .....!%0)!#-$..9-13666 (;?:4>0563...C...........3"."33333333333333333333333333333333333333333333333333................................................................................................D...Q`..(..(..)..QB.....P...-!m.B.P...P..).P...@P.P.Q...2.1Xe.E,S8-(.X..2[.(..K(....(E....."...bB..dS#)sKX..FR.`..d##(...u.....sT.6.....K...s.\|.]Mc.&..k..........Q..o...4g.....&.k.O...:.....}l.#fP..>X..f'....(.....(.@(.@.Z.....B.EX.%.......@.E.@....H(.Z.Z...QB.(...T..QA......Yr...c2.Z %..g.E..$fIFqJ..R.S%.L...\...)%..%..QMq....K.\.y...p.......\|...5..k\1...'m.....5.!.g..LvF.....G...=...my.s.....}.g..-:m..ys.s..~}....,..P..V....%......(P.QV.......-.(P..Q@..KE%R..AAh...@.....TR.2.....L..(.iL..).$..F$.aLe..Qc%.3...\...%..$....QD..AB2..u.....3...l.........y.iu.Z...n$..}...,..i.Z..Uo..l.=..NO.._.}<^...8.p....{%.:...tI.\|...t.....,..PP,.....%..hP..(P.QV..@.....P..Q@P.-.U . ......P.. d..,R.E,R...ZQ.s2..e$.FF+.l2,.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\bat[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	30235
Entropy (8bit):	5.300707636186169
Encrypted:	false
SSDEEP:	384:otKVCwh9wC22xo5MB4K6WhbwM05Jkr9qNHfs9nB/wDSliNqCET8zT7QAEqnyJYys:ZCwhBRWDOZwDhzT7QSnSYyeh
MD5:	E293A9BF71C8D0C0FF17648523FDABBC
SHA1:	B6DCFA29739D64B2F365D219E6AF6DFEB6EF0573
SHA-256:	3183481F09352EADE87E53D32AC3C1F6AB5B853E2B5BDE4035834680B53D9299
SHA-512:	29365E47A948F13D7A86F492E1C5526CF886ED1219ECDA56BF3E80B6BBB0BEC3D5184863FD03B29DA1D2ECA357FF7601D1F95E1F927C5A7A3D32FF5F069D5887
Malicious:	false
Reputation:	low
IE Cache URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date format"},"enum":{type:"enum",error:"{p} value must be one of the allowed values"},array:{type:"array",error:"{p} must be an array with 1+ elements"}};this.knownParams={event_action:{beacon:"ea"},event_category:{be

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\co[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	237
Entropy (8bit):	4.811393338486706
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZDMjR4tfLXKB+Gz7aMXdK4JqH8m:t9bibt03jMjqp2B+GfrXdK4Cf
MD5:	DC1D52463960F8E159A8B5BF9F386F95
SHA1:	49E43A5BDF0986902F6F63DEA96D1E547B21089D
SHA-256:	415AEE787305139B76D6BCF3287B665BE9FB751911E83BAE9AE901328E2A7471
SHA-512:	81CA8985E7297F51E81FC3499EAECAAFBBF10332B934670BE5BCEE67BCFB78B3281D9455A42F02245F63F72A98D0F343066C4B52A61B525605E24CB8A6EAFCEF
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/co.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h640v480h-640z" fill="#ffe800"/><path d="m0 240h640v240h-640z" fill="#00148e"/><path d="m0 360h640v120h-640z" fill="#da0010"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\cr[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	249
Entropy (8bit):	4.9785193752701264
Encrypted:	false
SSDEEP:	6:tI9mc4slhobibtAtMjR9qq9uuHfYMc9xOvVBn:t4nobibtAtMjf33fvc9m
MD5:	20D0DEC29A64281A1388320A10B8AE80
SHA1:	BE049361723E0E113FA351D84992DCE4CCB3175E
SHA-256:	BC35DA9C0D00F81FB7E49D789A96320EA1F7DE810577CE4C727317AFA646B88B
SHA-512:	6A885AB7B41B59E8AA21CF688251A00A94B4FDC8EB1F13F01B7E8A1E14C73927992A66C8F0A921825BF0B6CE84E5C378D7DFD373ABA151F34FECBAFC964DA805
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/cr.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="480" width="640"><g fill-rule="evenodd"><path fill="#0000b4" d="M0 0h640v480h-640z"/><path fill="#fff" d="M0 75.428h640v322.284h-640z"/><path fill="#d90000" d="M0 157.716h640v157.716h-640z"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\dk[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	5.135069744728631
Encrypted:	false
SSDEEP:	6:tI9mc4slhobibt8xXVNkTQigKAcAAUDRM6QSl7X8HWWwTxr2uuHzSNpmr2uuH7bG:t4nobibtyzK8JtM6JKgw3+Nd37sh
MD5:	93C2F222222E2213AA1241CDFD4BE69B
SHA1:	D5A9DAEFE5F912BAE22354967DB68CDC81C0F8DA
SHA-256:	BA5550B7354238EDC08BABF3A3B758A1BAA0FAD13750E6375A3950A7B0A30CE4
SHA-512:	A96ADA903DEDB9A9692A4BBEF911067A2A305F8CFB8709836AB6F43022E56405F64F031933C7E565876D52FE8D4A4BF0934EAB305C0C08DF4A1503E8425861D1
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/dk.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="480" width="640"><defs><clipPath id="a"><path fill-opacity=".67" d="M-64 0h682.67v512h-682.67z"/></clipPath></defs><g fill-rule="evenodd" clip-path="url(#a)"><path fill="#fb1b22" d="M0 0h634.284v480h-634.284z"/><path fill="#fff" d="M0 205.716h634.284v68.572h-634.284z"/><path fill="#fff" d="M205.716 0h68.572v480h-68.572z"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ee[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	222
Entropy (8bit):	4.9597253874680165
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZDMjR4fTa5kfSqx9fhE:t9bibt03jMjqfT7LxZhE
MD5:	124EFE3BCCD4B2ABBCAA1329ABA9B517
SHA1:	8F9D831080C92CADAE4F8A99A5D947E88EDA67AA
SHA-256:	4268A3998B38725BCD953E8BA45F8C97F2AEEF8A72EBF1D6B50308DC8AD2EAC8
SHA-512:	A9A4CDA933ED490B54541DC4331EF38F4B7515D52D66B653C0992A48A87431F7519EE2F9688E23AF13DC4947B05DEC88809FA8CB84DA73F7F0A74ED113091C91
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/ee.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h640v477.9h-640z"/><path d="m0 320.7h640v159.3h-640z" fill="#fff"/><path d="m0 0h640v159.3h-640z" fill="#00f"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\embed[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	24992
Entropy (8bit):	5.50163529603302
Encrypted:	false
SSDEEP:	384:8YRgyq+e8VneG+yFQfwNCWfz7C90TBERGEb5Wr0WeyQc8BkyJ/60YRTCBvffWOt8:o+1BeCiA7fCM3UWgPzJtlfA
MD5:	49FEB44A5E161B554F2966BB72C512EF
SHA1:	9FFEBBAC291A1651874D393BA7709EF566D0AA6F
SHA-256:	14673D9A9DEB2C6CAAB6AA0E6E046FB24998D545F179AEE06E4A6349C31FFC4C
SHA-512:	1254C5797F97A27A6AD0032533B877EACF2A973B45493A4957C16DE535C2CA610C5239C0C2B3087E820352C51589710099CC040BA81637F735D5FDCA91C61256
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube.com/s/player/cb5bd7e6/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;'use strict';var eJa=function(a,b){var c=(b-a.i)/(a.l-a.i);if(0>=c)return 0;if(1<=c)return 1;for(var d=0,e=1,f=0,h=0;8>h;h++){f=g.Cn(a,c);var l=(g.Cn(a,c+1E-6)-f)/1E-6;if(1E-6>Math.abs(f-b))return c;if(1E-6>Math.abs(l))break;else f<b?d=c:e=c,c-=(f-b)/l}for(h=0;1E-6<Math.abs(f-b)&&8>h;h++)f<b?(d=c,c=(c+e)/2):(e=c,c=(c+d)/2),f=g.Cn(a,c);return c},o3=function(){return{D:"svg",.U:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},S:[{D:"path",Kb:!0,K:"ytp-svg-fill",U:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .09,0 c .3,.5 .71,.88 1.21,1.18 .5,.3 1.08,.40 1.68,.40 1.1,0 1.99,-0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\fbevents[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	375104
Entropy (8bit):	5.392689098842815
Encrypted:	false
SSDEEP:	6144:sOvJS8DGbOvJS8DGbOvJS8DGbOvJS8DGG:nXXXX
MD5:	B110F520D98F1AFB6BB3EEFAF5565B55
SHA1:	C4EC583D44D30C7F8FB6AC1ECD48EDD0C9E3D066
SHA-256:	8C50E58E533520B11E864472C5547A2DE0E2BF279EDC887165AD7566E08360C1
SHA-512:	4B00C353D219666D2802F0920AD4631634C0A570F482315F6B60DEA88CE3F8E0DF4D1E68919DCFE7A3E56E9AAA411BF95B3647ABDC20F60C9EA826B00E8A8E5D
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\fbevents[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	93776
Entropy (8bit):	5.392689098842815
Encrypted:	false
SSDEEP:	1536:sM+OWt6w6aic9MeipKKqQqcThe7Kdv0a9sIOC1jaMu5Qm2B+QNSMngUSZYSlIUiJ:sOQMj1SVBYDGKH
MD5:	2C7F5BF38135E48073EC2929513E0BBD
SHA1:	B8792D38BD201B1BF962E9C14A2358B06D64A062
SHA-256:	2FFF9D42B48B67B86F3F657418733D38176FA5ECA4C13CF5F946F9CA410BE4BD
SHA-512:	4FC37B185AE887AA3465EEF5CEDB39D63244F49AD170AB30C069C62391265EACC7D034D9469CA85956C361F8EC9A0F89D4BA6E90A1A8C81E5DDA4104A0D56AFA
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\features[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	55930
Entropy (8bit):	5.296159075587823
Encrypted:	false
SSDEEP:	1536:HE+g7dM5H+PwTOPTb/emPMMia99YPy8PwhK:k++dM5eoTO/RVia99YPy8PwhK
MD5:	0BF0A50CA8D6E915DD97212594B1EBDE
SHA1:	C1EB9D40DF383E669C33612DB3A3901500A79554
SHA-256:	07F9CD4EC9009ADCC5946E5CF1982C263F0647994CD7CD3ED7ADCB5FB6B1B370
SHA-512:	2D78E1A26CAC625B0CFE64D0E6C3025883BBEF53E6E1BA7787FC52C38DBC7F8201D975FE22B9D2B799EF10CC8124809F675170024413892C47500E5622AFEA80
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/features
Preview:	<!DOCTYPE html>.<html dir='ltr ' lang='en' xml-lang='en'>.<head>.<title>.Features \| FreeConferenceCall.com.</title>.<meta charset='utf-8'>.<meta content='IE=edge' http-equiv='X-UA-Compatible'>.<meta content='width=device-width, initial-scale=1' name='viewport'>.<meta content='SKYPE_TOOLBAR_PARSER_COMPATIBLE' name='SKYPE_TOOLBAR'>.<meta content='6Ldw2wATAAAAAPrc0sIk2o7FxSX5ZwzkHm55xu2i' name='RECAPTCHA'>.<meta content='telephone=no' name='format-detection'>.<meta content='ch' name='country_code'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-regular.woff2' rel='preload' type='font/woff2'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-700.woff2' rel='preload' type='font/woff2'>.<link href='/fcc_favicon.ico' rel='shortcut icon' type='image/x-icon'>.<meta content='All the available features included in your FreeConferenceCall.com account. Learn more about HD audio conferencing, online meetings with screen sharing and video confere

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\fi[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	901
Entropy (8bit):	5.036177820390251
Encrypted:	false
SSDEEP:	24:t9bKt03LaPvM70zVABU7VAbFv/VACv+tC:G+8/V23wA
MD5:	E855DFD80A58E87E30B09AEF6BF43248
SHA1:	36350B70FB6B227BD942A6C2FC0E471D66D64627
SHA-256:	329D9D5D4E8A7A9F62E0F42FC893CD5EAF11AB4EFD78B5F89FC9E0CF9E95A42F
SHA-512:	0BF26F95059D21B418A960245692221DD41D746679D050CD05E9C72A4EFCD6D5EF659A73138E9EF91BB577E49C493705CF33880D00F6F0F81171B976054FBAC0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/fi.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-19.451 0h682.67v512h-682.67z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><path d="m-80.784 305.306h233.766v174.694h-233.766z" fill="#fff"/><path d="m152.832 0h140.569v480h-140.569z" fill="#0062da"/><path d="m-80.784 174.544h841.566v130.912h-841.566z" fill="#0062da"/><g fill="#fff"><path d="m-80.784.003h233.766v174.694h-233.766z"/><path d="m293.251 305.306h467.531v174.694h-467.531z"/><path d="m293.251.002h467.531v174.694h-467.531z"/><path d="m-80.784 305.306h233.766v174.694h-233.766z"/></g><path d="m152.832 0h140.569v480h-140.569z" fill="#0062da"/><path d="m-80.784.003h233.766v174.694h-233.766z" fill="#fff"/><path d="m293.251 305.306h467.531v174.694h-467.531z" fill="#fff"/><path d="m293.251.002h467.531v174.694h-467.531z" fill="#fff"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\fr[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	252
Entropy (8bit):	4.944424875664119
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZDMjR4tfSqsqrIXPLWWsZIAiZuqARBMPLWWFFtYA:t9bibt03jMjqpLsqrOLWWsZIAiZfkaLd
MD5:	9AAC29A979B5E6A96D128347034CF7B5
SHA1:	1972EE098E8B51D373EFC3C165B746D6FA154D69
SHA-256:	6497AFD41AB6CFF77141002AD37B94E0736BADEC24BE3E15557893D714A3085E
SHA-512:	30A6E1D4343D8A3F34BBC2636A5277FA1270323B55646E918DC9FCE994FC04B879D00C70DA032DC09ACF4BE5936E40A505E62D3750956CACAC551ACFAF991633
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/fr.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h640v480h-640z" fill="#fff"/><path d="m0 0h213.337v480h-213.337z" fill="#00267f"/><path d="m426.662 0h213.338v480h-213.338z" fill="#f31830"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\gb[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	732
Entropy (8bit):	4.988783235208785
Encrypted:	false
SSDEEP:	12:t9bibt03/KYa5AMKrcB9xlaDhkJm55DLwXBpRL78VFKDttgj29hIh7VOBrX/XEWq:t9bKt03LazBxNJ8wXtHTtgghIhI5XEWq
MD5:	A4A685668E8A53E46496946130D6A8C9
SHA1:	DF6A52EF3606CFCA69DBE21E51BB5DC1E6CBC1DB
SHA-256:	E1404370D17EF998A9FC44511EC211FF69A41EFFBE80BD7123AEA83D8FEA7019
SHA-512:	7AB963CB2540B09B74FD73C34971E848D5C531172D4E973A686ED5B1C9C0EF443C7733F2B0D239B36378E238CF5C5D7121016E981BD45E89A40E327BD3939364
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/gb.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-85.333 0h682.67v512h-682.67z"/></clipPath><g clip-path="url(#a)"><path d="m-160 0h960v480h-960z" fill="#006"/><path d="m-160 0v53.666l852.672 426.336h107.328v-53.664l-852.672-426.336h-107.328zm960 0v53.664l-852.672 426.336h-107.328v-53.664l852.672-426.336z" fill="#fff"/><path d="m240 0v480h160v-480zm-400 160v160h960v-160z" fill="#fff"/><g fill="#c00"><path d="m-160 192v96h960v-96zm432-192v480h96v-480z"/><path d="m-160 480 320-160h71.552l-320 160zm0-480 320 160h-71.552l-248.448-124.222v-35.778zm568.448 160 320-160h71.552l-320 160zm391.552 320-320-160h71.552l248.448 124.224z"/></g></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ge[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1038
Entropy (8bit):	5.12817366663191
Encrypted:	false
SSDEEP:	24:t9b2Ot03Lf3S6UHA8aljg0jDR7IfgI13Vf4vc4T84g4vw:KO+q6iFMjz613VwTPHo
MD5:	27BA972F6E2BA460E23B01290FA495D4
SHA1:	BEB9034AE7C8896411A7B624D5A04CB6A25445A2
SHA-256:	00DC645E937403FE7857FE794D348D23E65D02F3C7A0473BCA9C3EE925DFE3EB
SHA-512:	E5E4945DC30133AD2BE8E9D0FD405ACCB166C61BEB223C1FB2DE76DEA4B19A50B2ACEAD341FF20B2E3D5DBFAC3175497A80C0D7F2E73AED33794D7A6B01A3DA7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/ge.svg
Preview:	<svg height="480" viewBox="0 0 213.33333 160" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><defs><g id="a"><path id="b" clip-path="url(#c)" d="m-55 74a55 55 0 0 1 110 0v-148a55 55 0 0 1 -110 0z"/><use height="200" transform="rotate(90)" width="300" xlink:href="#b"/></g><clipPath id="c"><path d="m-109 104a104 104 0 0 0 0-208h218a104 104 0 0 0 0 208z"/></clipPath></defs><path d="m0 0h213.33v160h-213.33z" fill="#fff"/><path d="m6.385 13.192h200.56v133.71h-200.56z" fill="#fff"/><g fill="#f00"><path d="m93.296 13.192v53.484h-86.911v26.742h86.911v53.484h26.742v-53.484h86.911v-26.742h-86.911v-53.484z"/><use height="200" transform="matrix(.669 0 0 .669 49.472 39.566)" width="300" xlink:href="#a"/><use height="200" transform="matrix(.669 0 0 .669 163.86 120.53)" width="300" xlink:href="#a"/><use height="200" transform="matrix(.669 0 0 .669 163.86 39.566)" width="300" xlink:href="#a"/><use height="200" transform="matrix(.669 0 0 .669 49.472 120.53)" w

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\google_play_app[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5737
Entropy (8bit):	4.85270776390516
Encrypted:	false
SSDEEP:	96:+z7Hogn9pVlottXtJWFYY00HrbccU2ht2ByPTUF:b4VQCFYCbcst2By7UF
MD5:	3052D03200AC056865E0CDA06ABCCF26
SHA1:	097234ECFAFEE0B2C824192B61DEEED60C711F2F
SHA-256:	9E3437578EAD929322E8188C458E80BCBFA012948E7B05D77C97769198ADDBF9
SHA-512:	E0811B5C857DD3B52297A0B71FF40CC9FF991DED15DA94A8F36F97BB0979DE148B8065085BC5674CD21016B12C68B15E2D8ACD8925E2FB39FB514DFF33580BA4
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/index/google_play_app.svg
Preview:	<svg viewBox="0 0 135 40" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" aria-labelledby="googleplaystoretitle googleplaystoredesc" role="img"><title id="googleplaystoretitle">Android on Google Play Button</title><desc id="googleplaystoredesc">Android on Google Play Button</desc><linearGradient id="a" gradientTransform="matrix(1 0 0 -1 0 182)" gradientUnits="userSpaceOnUse" x1="21.8" x2="5.02" y1="173.29" y2="156.51"><stop offset="0" stop-color="#00a0ff"/><stop offset=".01" stop-color="#00a1ff"/><stop offset=".26" stop-color="#00beff"/><stop offset=".51" stop-color="#00d2ff"/><stop offset=".76" stop-color="#00dfff"/><stop offset="1" stop-color="#00e3ff"/></linearGradient><linearGradient id="b" gradientTransform="matrix(1 0 0 -1 0 182)" gradientUnits="userSpaceOnUse" x1="33.83" x2="9.64" y1="162" y2="162"><stop offset="0" stop-color="#ffe000"/><stop offset=".41" stop-color="#ffbd00"/><stop offset=".78" stop-color="#ffa500"/><stop offset="1" stop-color="#ff

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\gt[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	33567
Entropy (8bit):	4.122147115360176
Encrypted:	false
SSDEEP:	768:wkoW+x89imgY8WbTso0rl8T0FOdEByW9EkM:wkoTuimgYpTiW5VmEV
MD5:	CBF4D37D8B36DEE7FED5959957CD47DF
SHA1:	D9C71FE37F9FD513A7B6EE2CE548D47F9E5E08C0
SHA-256:	41A9EE6C3329CED1A046BB4118B46FEBC84368AAABF1E7039C034470B40FCAEF
SHA-512:	F2E6DA1F3CCD9208018C611BD205699E1628994F98BBAB5C8AF39AE5720A8D867B0C1C6CD4EAF3F555C84A2284F5D87701EE919ED50C2BE10F202185F957F6EB
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/gt.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h640v479.987h-640z" fill="#06f"/><path d="m213.336 0h213.336v479.997h-213.336z" fill="#fff"/></g><path d="m312.498 360.856c3.608-3.754 22.812-9.614 36.465-10.791 11.798-.931 19.407-8.688 26.398-9.455 20.205-20.316 46.619-28.079 63.892-67.629 3.284-11.869 5.619-26.324 5.97-40.149-6.519-46.186-10.738-44.94-20.469-75.477" fill="none" stroke="#000" stroke-width="1.025"/><path d="m348.661 354.536c.353 3.407 10.762 15.976 28.741 13.766-1.607-3.469-5.512-5.957-11.115-11.179-2.565-2.642-17.755-4.198-17.626-2.587z" fill="#0c5c1d" fill-rule="evenodd"/><path d="m370.061 350.965c-2.091.182-3.95 1.427-.377 4.565 6.027 5.066 27.646 9.725 30.904 3.294-9.569-1.291-15.949-3.319-16.933-3.282-4.444-1.455-10.174-4.899-13.594-4.578z" fill="#0c5c1d" fill-rule="evenodd"/><path d="m359.279 349.417c4.36-2.999 7.739-2.751 10.56-3.344 7.224-.5 12.165.492 15.188 1.742 4.475 1.927 10.994 6.751 11.82 10.254-6.644-.1

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\js[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	86226
Entropy (8bit):	5.508420832782097
Encrypted:	false
SSDEEP:	1536:Jb03wZdVQ0i+H7uuo6Ni7Q3iE12LsDFKddENQuSt81z9jKPfcRQWzjQ8+:Jb0gZs0G439FKnEZStC+
MD5:	685D748FFD98D5A7C52B0E79D62E6632
SHA1:	37402A62FA42C943D74F25EF84457527061B0D39
SHA-256:	BA79D3A4195B5773E456D5FEBEE1CDEE434FC75CA93C5B28A0989D39E847F2C9
SHA-512:	C36447361FAC3B3B3A1FB36310AA2BA103E79CB1FA58BFF66011AFD6B97ACF9DFFCDADE45E46EA2D3064A0E786C7CD48FF197136217A8051420A4943878D0DB0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtag/js?id=AW-1019974146
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"1",. . "macros":[{. "function":"__e". },{. "function":"__cid". }],. "tags":[{. "function":"__rep",. "once_per_event":true,. "vtp_containerId":["macro",1],. "tag_id":1. }],. "predicates":[{. "function":"_eq",. "arg0":["macro",0],. "arg1":"gtm.js". }],. "rules":[. [["if",0],["add",0]]].},."runtime":[].....};../.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:ba(a)}},da="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ea;.if("function"==typeof Object.setPrototypeOf)ea=Object.setPrototypeOf;else{var ia;a:{var ja={a:!0},ma={};

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\json[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	784
Entropy (8bit):	5.6354198210108075
Encrypted:	false
SSDEEP:	12:nGSojXLbOt2lPVY8UfLiinnQdwvjqYIASQBZQglH9hTw:nnorXOtQPVYBuinwwLC7YZ7Tw
MD5:	6A95CA5C2BD7719DA2F585F6AD7E3915
SHA1:	A50D11EDFB75327ACA316AB632E2E35F839A9DFD
SHA-256:	7373BBCA17914AEB1D4E57CFB3411495457FBD3115663B675480D7A0581C4355
SHA-512:	0E33DE1F764A2BEED40F280AEAD9FD16BD4380F275C2EB7C35C053D97F57FDB70739407AA8AEAF5DCAA05220AF84CDC91004E3546BFE44A81DC23BC4001C2376
Malicious:	false
Reputation:	low
IE Cache URL:	https://trc.taboola.com/1336134/trc/3/json?tim=1619714640729&data=%7B%22id%22%3A575%2C%22ii%22%3A%22%2Fvideo-conferencing%22%2C%22it%22%3A%22video%22%2C%22sd%22%3A%22v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682238_CNawjgYQxsZRGL__j_SRLyAGKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ%22%2C%22ui%22%3A%22c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913%22%2C%22vi%22%3A1619714640660%2C%22cv%22%3A%2220210420-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Fvideo-conferencing%3Fcountry_code%3Dch%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fcountry_code%3Dch%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dfreeconferencecall-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1619714640729%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Fvideo-conferencing%3Fcountry_code%3Dch%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
Preview:	TFASC.trkCallback({"trc":{"si":"a18e40b6bfa0714361643910a1fb8845","sd":"v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682240_CNawjgYQxsZRGJSWkPSRLyAHKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ","ui":"c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913","plc":"DESK","wi":"-295589343653389214","cc":"CH","route":"IL:IL:V","el2r":["debug","social","perf"],"uvpw":"1","pi":"1336134","cpb":"EhIyMDIxMDQyMC0zLVJFTEVBU0UYASCc__________8BKhZ0YWJvb2xhc3luZGljYXRpb24uY29tMgh3YXRlcjA4NziA6MSgBUCy0A1I0IgQUN7Y2QNY____________AWMI3v__________ARDe__________8BGCJkYwjXFhDUHxgjZGMIlhQQmxwYGGRjCNIDEOAGGAhkYwj0FBCeHRgfZA","evh":"1867376994","vl":[{"ri":"0f47202b147450b68cf92686bb46ac9d","uip":"rbox-tracking","ppb":"CGw","v":[]}]}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\json[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	785
Entropy (8bit):	5.644810568298704
Encrypted:	false
SSDEEP:	12:nGSojXLbOHlChUfLiinzSVwgwvjqYIASDnBZQgDPz/H9hkm:nnorXOFvuizmwgwLC7Hnb/7r
MD5:	AD3BC06F61B82EE1C0894A711A2EB17B
SHA1:	B1BBC12C6C786E186CF4070706A3EEBD65065046
SHA-256:	12B49BAB2AB0EE984EABACE5A8388B42712738ACA0FA975E952C74FA8CA88420
SHA-512:	2589532FB866D5C0A97B8256407EB93F9A10FE0DBA21F9DEC7A62FB3CB8E07397D4E2BD953487B5DBF1FAFCC08F35ECFD77CD3BB2488BF3813548C75B8B5019C
Malicious:	false
Reputation:	low
IE Cache URL:	https://trc.taboola.com/1336134/trc/3/json?tim=1619714652145&data=%7B%22id%22%3A687%2C%22ii%22%3A%22%2Ffree-recordings%22%2C%22it%22%3A%22video%22%2C%22sd%22%3A%22v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682244_CNawjgYQxsZRGMGykPSRLyAIKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ%22%2C%22ui%22%3A%22c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913%22%2C%22vi%22%3A1619714652132%2C%22cv%22%3A%2220210420-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Ffree-recordings%3Fcountry_code%3Dch%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fcountry_code%3Dch%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dfreeconferencecall-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1619714652145%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Ffree-recordings%3Fcountry_code%3Dch%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
Preview:	TFASC.trkCallback({"trc":{"si":"a18e40b6bfa0714361643910a1fb8845","sd":"v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682252_CNawjgYQxsZRGOTvkPSRLyAJKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ","ui":"c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913","plc":"DESK","wi":"1529589596497000937","cc":"CH","route":"IL:IL:V","el2r":["debug","social","perf"],"uvpw":"1","pi":"1336134","cpb":"EhIyMDIxMDQyMC0zLVJFTEVBU0UYASCc__________8BKhZ0YWJvb2xhc3luZGljYXRpb24uY29tMgh3YXRlcjA5NjiA6MSgBUCy0A1I0IgQUN7Y2QNY____________AWMI3v__________ARDe__________8BGCJkYwjXFhDUHxgjZGMIlhQQmxwYGGRjCNIDEOAGGAhkYwj0FBCeHRgfZA","evh":"1867376994","vl":[{"ri":"8a6fad09c5fa1b241ec6cda5ce5adbee","uip":"rbox-tracking","ppb":"COoG","v":[]}]}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\json[3].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	785
Entropy (8bit):	5.61540780659518
Encrypted:	false
SSDEEP:	12:nGSojXLbOtlOhUfLiinNrjZwvjqYIASHnBPODxgbzH9hBG:nnorXObO0uiVZwLC7B70
MD5:	1B5ED017A0FA6F310CAC39FFDAEC6A69
SHA1:	6C3E08B1CD04273FD8116BC5A7AC54C3CF7D01CB
SHA-256:	72E7E0A3C197E9CDA92B63ECDE1CB593409A0FDF89B0455413C00B60935DA23F
SHA-512:	8601668A205F85BE23EFD943AFB93939A02E2FACDFEC15A7110D8140B7BFDAD72206F472527B20CB23276EDA034672CD6B6310A68061FE6002378CFFB202B3AC
Malicious:	false
Reputation:	low
IE Cache URL:	https://trc.taboola.com/1336134/trc/3/json?tim=1619714665117&data=%7B%22id%22%3A162%2C%22ii%22%3A%22%2Ffeatures%22%2C%22it%22%3A%22video%22%2C%22sd%22%3A%22v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682260_CNawjgYQxsZRGN-wkfSRLyAKKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ%22%2C%22ui%22%3A%22c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913%22%2C%22vi%22%3A1619714665098%2C%22cv%22%3A%2220210420-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Ffeatures%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dfreeconferencecall-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1619714665117%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Ffeatures%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
Preview:	TFASC.trkCallback({"trc":{"si":"a18e40b6bfa0714361643910a1fb8845","sd":"v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682265_CNawjgYQxsZRGIrVkfSRLyALKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ","ui":"c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913","plc":"DESK","wi":"8681349856464855919","cc":"CH","route":"IL:IL:V","el2r":["debug","social","perf"],"uvpw":"1","pi":"1336134","cpb":"EhIyMDIxMDQyMC0zLVJFTEVBU0UYASCc__________8BKhZ0YWJvb2xhc3luZGljYXRpb24uY29tMgh3YXRlcjA1NjiA6MSgBUCy0A1I0IgQUN7Y2QNY____________AWMI3v__________ARDe__________8BGCJkYwjXFhDUHxgjZGMI0gMQ4AYYCGRjCJYUEJscGBhkYwj0FBCeHRgfZA","evh":"1867376994","vl":[{"ri":"3ab9f3efbfe308ed1b2858837602cb02","uip":"rbox-tracking","ppb":"CKgF","v":[]}]}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\me[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	113303
Entropy (8bit):	3.998280526891343
Encrypted:	false
SSDEEP:	1536:8QJGdh+FWE3ye9hCLFIl6MZBf1bsqah2XEcnx3ff7mSgL6MR9LV:DDnZO
MD5:	2DCE6D885F756C15376EE30AE34F766B
SHA1:	A3B9E38F4A4F8C0112B04C853B1386C07E3EFB2C
SHA-256:	78FADD06A7ABD702C74F32E70FB6FAEE4EA42314FF20643F115C2642EFCF3D48
SHA-512:	40A73C63D3023E3E21A0D9607A8FD2BAE2CF969FF659CC51343A7C6CB0011E03FC50E24A1C609F25051278B6B814462ECBFFD93B1510942E168259DBA149CF55
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/me.svg
Preview:	<svg enable-background="new 0 0 640 320" height="480" viewBox="0 0 640 320" width="640" xmlns="http://www.w3.org/2000/svg"><path d="m0-80h640.02v480h-640.02z" fill="#d3ae3b"/><path d="m32.001-49.612h577.522v419.224h-577.522z" fill="#c40308"/><g transform="translate(21.394 -21.173)"><path d="m430.57 175.12c3.514-.992 15.731-4.562 24.339-11.546 8.608-6.986 10.288-12.583 10.984-15.606.69-3.022.988-5.4-1.238-3.666-2.226 1.731-8.904 6.984-13.455 9.512-4.554 2.526-8.76 3.716-11.233 4.412-2.473.69-4.453 1.136-2.076.195 2.372-.939 10.142-3.667 16.129-9.66 5.985-5.994 10.714-14.978 10.815-20.494.099-5.514-.294-5.122-2.068-3.743-1.774 1.378-8.078 9.161-11.621 12.114-3.546 2.957-9.259 6.896-12.114 8.569-2.857 1.676-6.894 3.547-1.281-.294 5.614-3.838 16.249-12.902 20.586-24.622 4.333-11.721 3.544-18.613 3.446-19.796-.098-1.181-1.084-3.546-2.068-1.376-.984 2.164-8.079 16.348-13.789 22.453-5.715 6.107-4.335 4.926-5.616 5.91-1.279.984-3.448 2.758-.686-.692 2.758-3.444 8.469-11.424 11.426-19.301 2.951

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\meeting-wall-bottom-8[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x661, frames 3
Category:	downloaded
Size (bytes):	35402
Entropy (8bit):	7.941009593573868
Encrypted:	false
SSDEEP:	768:UrOQRa4YPjsjck0XfZyeYuYO1mcQCey6yWqD2VjiT35TOt:XQdYk0vZBZYO4cQCO3qD2C36
MD5:	0A4373D74B47DD8D960FBC8BDF811C4D
SHA1:	C2148424CFFADF24C9F5B6FCBD1661B7D7F5F75D
SHA-256:	5B3955877DDBA64C94F4AA85C7A2C45D69F5ECD261AEDEBF5A11450563380BDD
SHA-512:	AEF75F76FFA27ABC92CB54E2F06D2D276435006FFE00B2F69D5C47CE912CE741E00D39F504A183830BFE11104217D19772D59455A859D4D46F220D35F144250E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/screen_sharing/meeting-wall-bottom-8.jpg
Preview:	......JFIF................................................................#"""#''''''''''..................................................!! !!''''''''''..........."................................................kJ..Z.m[m....U....J...n...o{.Mo{....}:.7..{...kZ.u...L.<.&dk..Mh...?.>..N...T.T.....m.m[T.)@.%.[.m..WZ.o}5.o{....:...k{....kWZ...ff9.g9...}".@.?....n...8(......j.V.J(.J....[uu..o}7..[...{..n..kz..kWZ....L.3......P....?&+...9...UV..j.j.E(...eEYn..........o..t..o.m.{...Z.........9c0....P?.~.c.,s.1?<(...U.......JRP ....WW[....{...}7.}7..w.[...[.......8.<.g2?c.(........x./O.R.*.U.j.m.m[V.......[.[...kz.o{...7.{..}7..Z....u..3...s.s..?c...~C...<.s.<:.?.J(..V......mZ.R....B..n....o[.M..}7.M.mt...oWz...<..s....&32...........\..z.K..9J(..V..m...mZU)@,..........z.N....{.:k.mt...oWz....q.g8.<.8...>.......yr.z.~.....E(.....m..[j.U)@,.........k{.N..M.}:o.M.m.z..WwZ..y.y.<..&s......?.~w..<..........E(.....m[m[j.U(..@([.kZ....o..o{..}7.}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ng[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	272
Entropy (8bit):	4.966234385785065
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZDMjR4CUWQIAgBpPblAU4uIaloIa5i:t9bibt03jMjqXsAgBpPblx4uIaloIa5i
MD5:	5DB8CEB901F6720125B9CB7F87A08957
SHA1:	D3705EBE917581D8D9CECAF94B1D13124B5117E4
SHA-256:	A81B77B2528B07AC8581CED352EEAAE3C8D8E4DE36EA12967B6AE2FBDAC3C348
SHA-512:	10046DA304D2D9A536FC3882346E8BA6B9F405F8DF6969AAFB1BEC8D13561AB5817F8F9CDCA3845C44735105C4C9519ACB69A9A9111F87731A8BE088A3FE3E13
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/ng.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 .081h639.917v480.186h-639.917z" fill="#fff"/><g fill="#36a100"><path d="m426.612.081h213.306v480.186h-213.306z"/><path d="m0 .081h213.306v480.186h-213.306z"/></g></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\nl[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	273
Entropy (8bit):	5.123856068009153
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZDMfLrdy71I0JASqVb3MgPyJAXRAlIsgPyJAM:t9bibt03jMfLu1IJLZNjKlItjM
MD5:	3E98A1AD154259E8AA2E34CC5CA2A959
SHA1:	DF72DDBD16DBC2FA8E8D5AFF28081D991AA79978
SHA-256:	4FF9801241802E22CDD8FEE3C6748EA9684745532C9EA19BD9EC2EB62FF0CDC8
SHA-512:	2EA3134C821275D2552AD125ECB1C8B9748298D5B8D7BF5AA33D50DB2B48E6786696F2CD134FC9B6FC6E53935ED9AB68F10F1D746742B8E61917077096C31FCD
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/nl.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd" transform="scale(1.25 .938)"><path d="m0 0h512v509.76h-512z" fill="#fff"/><path d="m0 342.08h512v169.92h-512z" fill="#21468b"/><path d="m0 0h512v169.92h-512z" fill="#ae1c28"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\no[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	708
Entropy (8bit):	5.097170735036128
Encrypted:	false
SSDEEP:	12:t9bibt03/KYa51rc8ijgMjq5qlbLs8McRVRNMGnCNMs7oXESkNM4RQjNMinWw/sE:t9bKt03LaujgM9Vg+PgxmQjWFjxtb
MD5:	9D69B45CD791E94DAA05D70FDB430E6C
SHA1:	E3D92424C18B78395C8C4CC839921330702A3CFF
SHA-256:	63951F2B3E9AAA359802EC460543DF33FD97986F1C5CB0164DC3A5D075EF4435
SHA-512:	C5402DD35D5856BD7A1B2FCCD3B208ADCA9E4035535F1FE338521F381660FF3EE7B84D279E1AF5229E4CA3E9014D31C844B387E2A78DD54EBE1B65D74B1DCB1B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/no.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-32 6h640v480h-640z"/></clipPath><g clip-path="url(#a)"><path d="m32-26h512v512h-512z" fill="#fff"/><g fill-rule="evenodd"><path d="m-38-25.842h699.74v511.84h-699.74z" fill="#fff"/><path d="m-67.213-49.039h222.94v221.47h-222.94z" fill="#d72828"/><path d="m279.42-49.039h431.36v221.47h-431.36z" fill="#d72828"/><path d="m-67.213 295.67h220v225.76h-220z" fill="#d72828"/><path d="m282 297.79h419.68v223.65h-419.68z" fill="#d72828"/><path d="m186.65-49.039h64.425v545.67h-64.425z" fill="#003897"/><path d="m-67.213 198.84h763.01v63.444h-763.01z" fill="#003897"/></g></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\o-0NIpQlx3QUlC5A4PNjXhFVatyH[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 52284, version 1.1
Category:	downloaded
Size (bytes):	52284
Entropy (8bit):	7.99196198951695
Encrypted:	true
SSDEEP:	768:ToqsFPh6ul0n226caBvq/87VuGpK0QRsCIod0FVGXICQFUHKdmmeg/dXnxgurVuc:UDdJMaByk7VzDvCvqFVGBepdh7ugSV98
MD5:	5DD2FA543BC8C10752CAE55EF73D908F
SHA1:	8DA2EBEF17E79DFE681E6DCC514D781C8C4AED07
SHA-256:	E8CDB56FEFF49A15EE7E940F938C162F71789560B48B990817D35BA14E525DA6
SHA-512:	781C09B305ADFF7F95690FEE10887BB7A44BF6CF1BE5FE2D6515202C927275A222C0184D00D1BD892FAEC6AE4CB1E20A7D112C3745C21ED5712B555F3566AF88
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/notosans/v12/o-0NIpQlx3QUlC5A4PNjXhFVatyH.woff
Preview:	wOFF.......<......\\........................GDEF.......q.....J.wGPOS............%w.GSUB.......1...2.y).OS/2.......]...`}..ecmap...4.........@cvt ... ........'.'.fpgm.......x....6...gasp...L...........#glyf...\...B..&^.K.Mhead.......4...6....hhea....... ...$....hmtx............c...loca...x...Z....wm./maxp....... ... ..."name............#}?.post........... .i.fprep.......G......#Tx.....Q.E.}.G..>.^.Cf"D..B..@ ...s,..&.@0...Q.....,.!...8#..\.!.<4G....5.U.W. mu.'=.Ko....b........?..........x.t.3..Q.@..5Z+..d.'}..m..m.6.XU.5.........8..\|....lB..S..P..P.....&gir..R.s.i........I,B...Ng....s....b ..........A4B....?.....r..k..&Z.Z....[.5...zl=...s.C.vM....-..>;.X......\..^...[jq...k-......k.....T...x_O].p...C.5s#.c...sJ5...^.z......r.pNt.{o...BX...\|...B.....Bwz.^...}...F1...M...D..$.H...J..d.I...RD1%.RF9.TRE5.X.....5.e....vv....e?.9.Q.s...,.8...r..\...y.S........7~.xDD.Sl.......J..K..J.t...]zJo.+.d.L.p..H...2If.\|..4I...,.\|.py>....z.+....^.m.+6....m..,.m..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\open-sans-v15-latin-700[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18476, version 1.1
Category:	downloaded
Size (bytes):	18476
Entropy (8bit):	7.9655025762613
Encrypted:	false
SSDEEP:	384:ygOGx/AJZ8tPU29LJO19zDDqYHFhOngcVj7L7m1uU8DepB:IG7u3JHF8Vj7vm1uUVz
MD5:	623E3205570002AF47FC2B88F9335D19
SHA1:	B5F79D1934DA79C8A4BA381092DAD82FFB0582CB
SHA-256:	5E03E0C7668266486CAB9529702019D75C219FCEC2B1E82A7C11797BA9B78506
SHA-512:	51C332D1E9A6F222BC931131BC1E7C8914EC38FB0E6AA52F6BF4C1B08EB165323D025D7C5460821FAD2BAE232453B0815E419BFCF5EB82158692FB2D96983448
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/fonts/googlefonts/open-sans-v15-latin-700.woff
Preview:	wOFF......H,......n ........................GDEF................GPOS................GSUB.......Y...t...OS/2.......[...`.d#-cmap...`...........cvt .......].....-..fpgm...X........s.ugasp................glyf......8...X.....head..@....6...6.%I.hhea..@........$.)..hmtx..@........l.M.loca..B.............maxp..D.... ... .h..name..D.........#.>.post..E........(..j.prep..GD...........k........................................x.....@.....N..H.......;.$&.6..g....8.y.q.}...M ..{P.&..Ex5........UonvVI5Iz.I'..........x.c`f.g......:....Q.B3_dHc................................JBl..D.Z8z.".....X.X..)..f.;).).x..1..q......Y0H...bd68#{.3..EY.:e/a.P.^....GRf......H.g....$h..g..s......;KFrR._JR...$.Sf...d..{..;-Y..v......!iK.Z7zF....k.3..X....e.../@G7...x.c.a.g``..$KY...e@.,q@.j...o@<..O.H.t.................c .p@..........3lbd.....-.}.M...!...!....x.TGw.F........)..)7.W..`.j.-...='_..sI...2...O>....[tt....TK]..\|...G..............^.m..=..x.q...+./].p...'..k...T......V.v...\|nhp..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\open-sans-v15-latin-regular[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 17704, version 1.1
Category:	downloaded
Size (bytes):	17704
Entropy (8bit):	7.961726271084992
Encrypted:	false
SSDEEP:	384:lBzTQHZZQ76tOKGu5kCqDITqvQRXZ4ObyCb7wD/ppXiy:lOQ7Iv70vvQxWOfBy
MD5:	BF2D0783515B7D75C35BDE69E01B3135
SHA1:	0E92462E402C15295366D912A7B8BE303D0257D8
SHA-256:	054349DDA27B80BB105FBC59B5973EF9889ED976ACA1FBE39F77688DCFF8C552
SHA-512:	5029C9D19E1CB91481CD8F23A90FDD3BDC0058DC36E9A29E1D5C808482806F359365B588B1EC0B9D22AE975EFF9475EE662E93A0E3421961BD0620CB307D44D9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/fonts/googlefonts/open-sans-v15-latin-regular.woff
Preview:	wOFF......E(......gx........................GDEF................GPOS................GSUB.......Y...t...OS/2.......[...`~- .cmap...`...........cvt .......Y.....M..fpgm...T........~a..gasp...............#glyf......5...Qx...>head..=....6...6..cphhea..=........$....hmtx..=........l..Y.loca..?..........{..maxp..A.... ... .v..name..A.........&:A.post..B........(..j.prep..D8........C...........................................x.....@.....N..H.......;.$&.6..g....8.y.q.}...M ..{P.&..Ex5........UonvVI5Iz.I'..........x.c`f..8.....u..1...<.f...................A.....................0.p.2E(00...x.n.R....gs...x..1..q......Y0H...bd68#{.3..EY.:e/a.P.^....GRf......H.g....$h..g..s......;KFrR._JR...$.Sf...d..{..;-Y..v......!iK.Z7zF....k.3..X....e.../@G7...x.c.a.g.c..$KY...e@.,.."..........?....%.g....Z.....(".o..Y..Bu342.e......0..........M=.....x.uTGw.F........)..)7.W.$`*.....G.Kz.)e....t.\|.1.7...s.g...3.7mgf..~{1...s.3.S...co..o.~.Zy.u...kW.\.t...N.KG............K{..L:548..gqV..#

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\open-sans-v18-latin-600[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18696, version 1.1
Category:	downloaded
Size (bytes):	18696
Entropy (8bit):	7.96597476007567
Encrypted:	false
SSDEEP:	384:yeQHZsdOZKOIVrf0uvAxZEw5w7Yc3XGi/L6:dBbVwuvAYYw7THc
MD5:	449D681CD6006390E1BEE3C3A660430B
SHA1:	2A9777AFC07BF0BB4BB48F233ED7C4BCBDB60760
SHA-256:	57C79375B1419EE1D984F443CDA77C04B9B38C0BE5330B2D41D65103115FFD72
SHA-512:	8B8436670BB4D742AFA60ABA29D7A78F3788CBEF9353C2896AA492618CF1B22E9A0679972AB930E2F2D4732F3B979C023D25AA0FA86C813AC674524FD4ECA2BE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/fonts/googlefonts/open-sans-v18-latin-600.woff
Preview:	wOFF......I.......m.........................GDEF................GPOS................GSUB.......X...t...OS/2.......^...`.-..cmap...`.........X..cvt .......[.......4fpgm...p........~a..gasp................glyf......8...W.J.4.head..A....6...6...Mhhea..A<.......$...#hmtx..A\... .....lT.loca..C\|........6..umaxp..E@... ... .t..name..E`........#.@Ppost..FP.......x.U..prep..H.........x..n........................................x...5.A......m."gW..`.L..&N".?.......IF....a.^...b1..................Uh."4...>..=x.c`fy.......:....Q.B3_dHc.........................@`........./..?....^...... 9. .m@J..........x.\.!..q......#aff...#1Q@.'U..@5.".llt.Aa#.f\|c.W.....'..X..!..C...ITPE.;..V.j......0. .L0E...Yd.mN....:.....F....GG.g.s,x.>0....v..I;o..<.$G9.\f2...e(}.IS2..uc]p.........M.x.c.a.g.c..$KY...e@.,A.".m....x.......3......?.[.o...2...:...a..b.)@.Y.....v1.b4d...36 ..x.uTGw.F........)..)7.W.$`*.....G.Kz.)e....t.\|.1.7...s.g...3.7mgf..~{1...s.3.S...co..o.~.Zy.u...kW.\.t...N.KG.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\pa[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	779
Entropy (8bit):	5.0351933268209
Encrypted:	false
SSDEEP:	24:t9bKt03LaKgMGMGABS/Deg/InTO7lwtgB16AU:G+kWqCg/eTXOB2
MD5:	045B276E10C698DF366FF2C9A2E2212F
SHA1:	5FA79711E9F2051689C7A1C9BBC45366EB973A66
SHA-256:	95D1416309B07273D27DF3B90C7B62AB48FFA7398505985684B55C50ABA419BC
SHA-512:	EB700FA886CC29B1E371C350A049819813086FC9590919063968F0650F552307E056CD80DEFD2F3B3C95D2EFCE522A86E49A9329D3B8C0CF67BDB87109827A37
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/pa.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m0 0h640v480h-640z"/></clipPath><g clip-path="url(#a)"><path d="m0 0h640v480h-640z" fill="#fff"/><g fill-rule="evenodd"><path d="m92.462 0h477.19v480h-477.19z" fill="#fff"/><path d="m323.07 3.655h358v221.68h-358z" fill="#db0000"/><path d="m3.227 225.33h319.87v254.66h-319.87z" fill="#0000ab"/><path d="m214.8 177.65-41.959-29.326-41.754 29.614 15.529-48.124-41.677-29.716 51.562-.414 15.993-47.978 16.335 47.867 51.562.063-41.463 29.996 15.872 48.017z" fill="#0000ab"/><path d="m516.85 413.89-42.354-27.744-42.146 28.017 15.675-45.529-42.069-28.114 52.047-.392 16.143-45.391 16.489 45.286 52.047.06-41.853 28.379z" fill="#d80000"/></g></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\pe[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	268
Entropy (8bit):	5.018368494402882
Encrypted:	false
SSDEEP:	6:t6AlH9bibt03mc4slZDMjR4P8oDgPLcQBRgElsiqFf3R2D9Wi:t6AlH9bibt03jMjqvwLhBRg4sZf3RcWi
MD5:	D06F22AC00141B3F336CF82AAA1E3FAF
SHA1:	E423726236E98ECDD99851FB167A87DD4AB00807
SHA-256:	83241157BB19B023425DE361B3889264233EB7E6CF4DF9B6DFD9692ADEE0459E
SHA-512:	B42445FEF4EBA6666212723D9393FC1879016A4F2B4E080CCD3EBC4A9E0BFF6A13649F29155F17B1D030E7B2E3BCA518D51B7C8E0E50F67C316422B94341FA23
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/pe.svg
Preview:	<svg fill="#28ff09" height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m212.875 0h213.95v480h-213.95z" fill="#fff"/><g fill="#f00"><path d="m0 0h212.875v480h-212.875z"/><path d="m425.163 0h214.838v480h-214.838z"/></g></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\pk[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	780
Entropy (8bit):	4.925396614662803
Encrypted:	false
SSDEEP:	12:t9bibt03/KYa54Kr8MjqClUtXwlCl0rEqYs1LJFqkLpYPCWaNhE8F3aNomQC1r+u:t9bKt03La+vMrG1Z/mL+9aAkYomLBc5s
MD5:	B2634D9C74B5B9E5DCFF9AA13309F131
SHA1:	0D1D5C85C622968CC0C484E2F472260B4484B2F5
SHA-256:	9D1F6888046075087DD6465ADE34A3DCECEF3A56325B972021A78B96F577319B
SHA-512:	28AA96F445F01E615F004428734D0686EC8FBE4B8CB5E692F40865A458D5FE8E7D962BA07BEA9A2D8B4B2F47232FDE899868CF5F3F4092AF43C22D31DC3BEC36
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/pk.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-52.334 0h682.67v512h-682.67z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><path d="m-39.999 0h720v480h-720z" fill="#0c590b"/><g fill="#fff"><path d="m-39.999 0h180.488v480h-180.488z"/><g><path d="m427.511 211.302-29.215-6.146-15.364 25.598-3.183-29.685-29.094-6.702 27.248-12.2-2.617-29.74 20.024 22.145 27.476-11.679-14.873 25.886z"/><path d="m438.529 286.941c-25.935 57.147-94.004 82.109-151.313 55.562-57.316-26.554-82.286-94.616-55.732-151.933 13.543-29.233 35.706-49.322 66.992-60.287-3.598 3.043-7.159 6.2-11.061 10.226-40.414 41.708-39.364 108.361 2.343 148.771 41.708 40.414 108.361 39.365 148.771-2.343z"/></g></g></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\screensharing-header[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x602, frames 3
Category:	downloaded
Size (bytes):	49922
Entropy (8bit):	7.969842896449487
Encrypted:	false
SSDEEP:	768:ml5hRK+UJ9cxFkcKBkW4MUV0w3HTIOg39ZUr6+INiS5G0nneuwbpIILC:05mEFkJkW4MUV0mELNZ2INiS5GGO95u
MD5:	60653E3A3BF5949B15D6630D769F8A9D
SHA1:	C0077DB36B16869929B688B11B04239240EE1D2F
SHA-256:	8ACA57D53F872FE8C8052D7F9678DE42CE9EC8F7E94F4F65DF2EFF87B6521BB4
SHA-512:	62ED8E00685AA5F4B0DB4ACD34D041F0BCD125B5D4003ACC6762B74E514B4FCAD147F48177C5118387F60D8F53582BBD2D105C92B45DF7C21765904B06C157A2
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/screen_sharing/screensharing-header.jpg
Preview:	......JFIF................................................................#"""#''''''''''..................................................!! !!''''''''''......Z...."..................................................0..`....!...ccc...c..`..91....NR..')NR..).S.V.S..)9.......rd8.j..~.6 hh.....i...G.z..+...c..m....m...61.`.0`6..l.$....')Jr..).s..)Jr..).NR...A...;%.vo.q)r.........@....=?.t}......0c....$6...lc...c.....m...)I.r..9NVJs..s...Sr....H7').n...#..B#........:......Y...C....?...c.1.........61.`1..0`.d.rrrs...9JR..9Js..':......ma.$.).d...F\..k...w..M2..}.Bv.e.k....=....]..!........lm...6...`...c.c....I.JR..9.;'7.N..9.V..M..k.v.+,..>sg;.F.o....}..9\|.Q...;.O7+.zN....V3....0c....clm...1.....1.cc...r..9Nr..;'dT.zn....66H0.m..,.~?O7.b.ov_.......uQM4.Uu..y6v\|.C...%......1..lm..6.....1.!..`......)JR..9.s..(.z..'NZ.B.Scck.f.........%...g.1....QUUSUPU..4.5.7{...??.....1.....6...c..0....1.97)9JR...9.s..uN..N.g.t.s`1.3.S..;>s....CGA..F..f....-.6l.rf......vz..?...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\section-video-stats[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, baseline, precision 8, 1800x669, frames 3
Category:	downloaded
Size (bytes):	89490
Entropy (8bit):	7.8727419213745495
Encrypted:	false
SSDEEP:	1536:Hx+im06iRb3yFq80UyBPpVZGiURfUiRG31osIiuFQBO4sx0u:H7vn+mBPpzGizeG31osIiuFQBdS
MD5:	068F489F185DB0B3158304EAC4520C71
SHA1:	90CCC5714BE68CC7692698A1FD5711B95474A94D
SHA-256:	8E760A7A2D10918EC1BF9DDDB466567DCB2E043A0EC91B7B29A8D5DBF3BF73E8
SHA-512:	36C19150D8E7A2908682AC5FC21929ED7A71BFC4421B169044A10F0D48DEBF5A03210BFFD79054616A47A57093B800384870C8D02A0DA4AA46576F0F23AFF9BF
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/video_conferencing/section-video-stats.jpg
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\section-video-support[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, baseline, precision 8, 1800x669, frames 3
Category:	downloaded
Size (bytes):	96038
Entropy (8bit):	7.885101097164392
Encrypted:	false
SSDEEP:	1536:HHeo9MnC91NtGRvChZ+Won9j88+tt+12EjcfwDKj1jn0zu8ui9WDwjHqeE85bEeG:HzyOGtQbkl8qUwQ1AuSBth5bEWM7t
MD5:	109B270CE44FC0BF00F1B3BB604F85E8
SHA1:	10E8A66491934AA5EB46ED0A970B48D57B507FB8
SHA-256:	5D9380CCD871685103C55AEAB89A7100CD290E6D453DE6C91A523271202280B1
SHA-512:	CEAE2AD55AB6F8EE0BD0EEC5527FE9046C95803D8EDDEB73DA6E2608D09E85BA595C7D726796D1AA0C41255C2D0240BF3EE8F032A8EDD5CD4CA0251C748BCBD7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/video_conferencing/section-video-support.jpg
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\terms-of-service[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	56982
Entropy (8bit):	5.178079174171773
Encrypted:	false
SSDEEP:	1536:IE+g7dM5H+Pt1TOSLzS2mhEEQ7+BBtsqeW99YPZ:d++dM5el1TOSilhEEQ7+BBqqj99YPZ
MD5:	DDB8A5A056BE5FE068CA203985B2FB64
SHA1:	46A13E9B0BBCF3BEFB7F26B2CE8AD18870206AA9
SHA-256:	F9E646241B41048686205228DF4DF5D4B37F7A12864E39A08EEC75166631E2CC
SHA-512:	C7E8E30437AAFDF95D82C327341B1AFB0DF041F44B447E8485F795BBC47FAC7900CA9686C41DE9DB9294CCD83A95082BDAB8A596F21AE821B7DEAE30947C2993
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/terms-of-service
Preview:	<!DOCTYPE html>.<html dir='ltr ' lang='en' xml-lang='en'>.<head>.<title>.Terms Of Service \| FreeConferenceCall.com.</title>.<meta charset='utf-8'>.<meta content='IE=edge' http-equiv='X-UA-Compatible'>.<meta content='width=device-width, initial-scale=1' name='viewport'>.<meta content='SKYPE_TOOLBAR_PARSER_COMPATIBLE' name='SKYPE_TOOLBAR'>.<meta content='6Ldw2wATAAAAAPrc0sIk2o7FxSX5ZwzkHm55xu2i' name='RECAPTCHA'>.<meta content='telephone=no' name='format-detection'>.<meta content='ch' name='country_code'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-regular.woff2' rel='preload' type='font/woff2'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-700.woff2' rel='preload' type='font/woff2'>.<link href='/fcc_favicon.ico' rel='shortcut icon' type='image/x-icon'>.<meta content='Terms of Service for freeconferencecall.com. For additional information, visit freeconferencecall.com or call (844) 844-1322.' name='description'>.<meta content=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ua[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	188
Entropy (8bit):	4.864122596169051
Encrypted:	false
SSDEEP:	3:twMnbiRdt0LvDmJS4RKb5KC5MoXQJ9rKURNcH0ImqGpAVHKbr4+HyMRVqqGVmHqA:twobibt03mc4slZDMjR4tfbK3Bfz7XH/
MD5:	36FC00E2C99145C9622F90BE7FB0902D
SHA1:	E8F9C813174AAA88E95E1534AB4C1A1A16EC159D
SHA-256:	41BB43B564E897F12BF19EE0102FC09D3E9B1F6A85F06B854368A6BF8BB86C42
SHA-512:	06D6FE593BA4018A7F2EED56D1CCA400468755AC25C1625C875203DBD649EE453A756C6A99623770C4A80779B57B9B9C25CF81165BB049E03A833FF54E394F24
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/ua.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h640v480h-640z" fill="#ffd500"/><path d="m0 0h640v240h-640z" fill="#005bbb"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ug[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5218
Entropy (8bit):	4.84041284721159
Encrypted:	false
SSDEEP:	96:lc8yQlHXAAC0bqQqzc0WsUQx7F1AgaVXurZIT7za:O8yQlXwicz/hzABXurKa
MD5:	BF9A8DDD97948334574B72838D8EB279
SHA1:	6464CA353E0F172AFDBCA0C451B5870A9F145232
SHA-256:	1A1B6AC8923C0E6E81BE88D2D8D11578F35BDF92127116A65F85075DA62A4A8A
SHA-512:	E2A689AF543D3CF15BD9CB0D5581BA45728E6D70D245DE49137A5E45620A74F7FED2C5B0633BE690A0491D15F6B6EC9EB2557C6564061C21ECE8DE9348F11FA7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/ug.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="480" width="640"><defs><clipPath id="a"><path fill-opacity=".67" d="M-85.333 0h682.67v512h-682.67z"/></clipPath></defs><g clip-path="url(#a)"><path fill-rule="evenodd" fill="#ffe700" d="M-40 320.025h720v79.988h-720z"/><path fill-rule="evenodd" d="M-40 240h720v79.988h-720z"/><path fill-rule="evenodd" fill="#de3908" d="M-40 160.012h720v79.988h-720z"/><path fill-rule="evenodd" fill="#ffe700" d="M-40 80.023h720v79.988h-720z"/><path fill-rule="evenodd" d="M-40 0h720v79.988h-720z"/><g><path d="M394.825 240.041c0 41.283-33.467 74.75-74.75 74.75s-74.75-33.467-74.75-74.75 33.467-74.75 74.75-74.75 74.75 33.467 74.75 74.75z" fill-rule="evenodd" stroke="#000" stroke-width="NaN" fill="#fffdff"/><path d="M306.887 182.738l-4.853-8.939c1.873-1.873 5.023-3.32 10.046-3.32 0 .341-.511 9.79-.511 9.79l-4.682 2.469z" fill-rule="evenodd" stroke="#000" stroke-width="NaN" fill="#de3108"/><path d="M311.567 180.359l.681-9.875s10.046-.595 15.494 5.959c.085-.085-5.36

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\us[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7328
Entropy (8bit):	4.237492648616493
Encrypted:	false
SSDEEP:	24:t9bKt03LaWvMJ5sk9kaEkbkuk+2kEkpRGKlkEkUkcIokH0ok6kOI/rN8BDB77kr4:G+VkZgK2+o5Do4sTmELtI
MD5:	841F9F75FC714BABF285B9086346B75D
SHA1:	740070E6695F3C933994B06BF0F1550E70EB96BE
SHA-256:	D2FB6B0CEDBCC910A8461FEB97169502D1AA24F7F3B1065FE7D27288EB17BE95
SHA-512:	432BFABEF0ABEA31579F2F7FBE08AB27EF8C4759663C9E730E1BCD56D603FB5AEB93D7910F20C8CAE7C89E7532BCFF377BC3C3CE99C3302FEFAC884CDB76BB22
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/us.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m0 0h682.67v512h-682.67z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><g fill="#bd3d44"><path d="m0 0h911.924v36.92h-911.924z"/><path d="m0 73.84h911.924v36.92h-911.924z"/><path d="m0 147.68h911.924v36.92h-911.924z"/><path d="m0 221.52h911.924v36.92h-911.924z"/><path d="m0 295.36h911.924v36.92h-911.924z"/><path d="m0 369.2h911.924v36.92h-911.924z"/><path d="m0 443.04h911.924v36.92h-911.924z"/></g><g fill="#fff"><path d="m0 36.92h911.924v36.92h-911.924z"/><path d="m0 110.76h911.924v36.92h-911.924z"/><path d="m0 184.6h911.924v36.92h-911.924z"/><path d="m0 258.44h911.924v36.92h-911.924z"/><path d="m0 332.28h911.924v36.92h-911.924z"/><path d="m0 406.12h911.924v36.92h-911.924z"/></g><path d="m0 0h364.8v258.459h-364.8z" fill="#192f5d"/><g fill="#fff"><path d="m30.397 11.061 3.319 10.215h10.74l-8.689 6.313 3.319 10.215-8.689-6.313-8.689 6.313 3.319-1

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\www-embed-player[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	190462
Entropy (8bit):	5.603428126168198
Encrypted:	false
SSDEEP:	3072:pikR3hMhPwXHG5lpO8M/Sh2eKWtYIGd2fMwlBj4Sv:CEHylpO8M6AeKewgMwlz
MD5:	5A9DCC01C8F902C813AE6FA730F01D24
SHA1:	B46CDD5A01120865214FA29871FE8F852DA7EAEF
SHA-256:	FA74989B957B8DA5CFB208B42A779CF299477F0D19B510CA4F479FC5076E8B48
SHA-512:	AF93455916DF13749298A8F41FC230B20E56044C9021D762DFD53262FC2C6E5F73729EF25953C8E870BF57E1E76E798D0E396D953A7E72B3BDA0DEE62893EEEC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube.com/s/player/cb5bd7e6/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function t(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.t("Symbol",function(a){function b(e){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c("jscomp_symbol_"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\www-player[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	366774
Entropy (8bit):	5.243839097361023
Encrypted:	false
SSDEEP:	1536:BDQI0irpHrpj/fn8Mq5G0jDrzltPljuvEMFfyfOP5FRrDJciM/ByDn4E6D6S7eTH:T4DrzxCXgsyRvoLF
MD5:	4A5D85699B2F0146B2E3E2FE2011C7B9
SHA1:	D1A0633C64580F1D75097BB0D7A96B4F1D9F054B
SHA-256:	04F9CA8648A6038FCEBD6BAB226662DC2799A746F5FD62C46A1E6D158156C8BA
SHA-512:	4A9952478E6BD88C07AA2A41F5FCCB55CCF0C3DE8E2495716427E0CB69E3D17528603F3D4914CD23E795C17F3951FAFA48147C4CC30D001A4947A21B0F786D8B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube.com/s/player/cb5bd7e6/www-player.css
Preview:	.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation;-ms-high-contrast-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode,.html5-video-player.ytp-fullscreen{background-color:#000}.ytp-big-mode{font-size:17px}.ytp-autohide{cursor:none}.html5-video-player a{color:inherit;text-decoration:none;-moz-transition:color .1s cubic-bezier(0.0,0.0,0.2,1);-webkit-transition:color .1s cubic-bezier(0.0,0.0,0.2,1);transition:color .1s cubic-bezier(0.0,0.0,0.2,1);outline:0}.html5-video-player a:hover{color:#fff;-moz-transition:color .1s cubic-bezier(0.4,0.0,1,1);-webkit-transition:color .1s cubic-bezier(0.4,0.0,1,1);transition:co

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\1124938230859430[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	520268
Entropy (8bit):	5.469217481548313
Encrypted:	false
SSDEEP:	6144:Rk1HgCSntDV/HaK3V/Ha8NEPjQHguH3HpQrwzzmqk1HgCSntDV/HaK3V/Ha8NEPy:dNESVNESP
MD5:	10CE1EDE00352A4686FBA51A69B5C7DF
SHA1:	10040B933C36E5E09F1150FEBCE2D99567127E50
SHA-256:	02034B09D6883D88727339E6A6191E801F33CDB63F9AE7819E0818A3674F1EDE
SHA-512:	AB066B1C81DD280AB5BACAB139B33D65D862C9A4366EA8D99536B8B787FC86406514EB071E65CF46D2E88167B264B1B5EBF2CAB806D3BA37AE63490AA552838B
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\1124938230859430[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	260134
Entropy (8bit):	5.469217481548313
Encrypted:	false
SSDEEP:	6144:Rk1HgCSntDV/HaK3V/Ha8NEPjQHguH3HpQrwzzmi:dNESP
MD5:	D4564BD905CCD8F87FEA0C13778ABF3F
SHA1:	218DAF3942B933DF3E0E1348389289151FDA7531
SHA-256:	9E203A1C5D80D9EE3C6D9DDA82A34435820BD95A8F0EEE7FFC76D22FCEDC263D
SHA-512:	E0D78ABDCC24CD6BF36A323F83B4C729924A4AAFDF28D489AB2DE9D369248F21280478101397DA8ED291D5F22E53845F452AD0593E1E200E8FA72DBDFE1CF854
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\KFOmCnqEu92Fr1Mu4mxM[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 19824, version 1.1
Category:	downloaded
Size (bytes):	19824
Entropy (8bit):	7.970306766642997
Encrypted:	false
SSDEEP:	384:ozNCb8EbW9Wg166uwroOp/taiap3K6MC4fsPPuzt+7NCXzS65XZELt:K4zbWcDVwt230hfs+x+Bb65X2
MD5:	BAFB105BAEB22D965C70FE52BA6B49D9
SHA1:	934014CC9BBE5883542BE756B3146C05844B254F
SHA-256:	1570F866BF6EAE82041E407280894A86AD2B8B275E01908AE156914DC693A4ED
SHA-512:	85A91773B0283E3B2400C773527542228478CC1B9E8AD8EA62435D705E98702A40BEDF26CB5B0900DD8FECC79F802B8C1839184E787D9416886DBC73DFF22A64
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff
Preview:	wOFF......Mp.......P........................GDEF.......G...d....GPOS...............hGSUB............7b..OS/2.......R...`tq#.cmap...........L....cvt .......T...T+...fpgm.......5....w.`.gasp...@............glyf...L..:+..j.....hdmx..Fx...g........head..F....6...6.j.zhhea..G........$....hmtx..G8...]......Vlloca..I.........?.#.maxp..Kt... ... ....name..K........t.U9.post..Ld....... .m.dprep..Lx.......I.f..x...1..P......PB..U.=l.@..B)..w.......Y.e.u.m.C.s...x.h.~R....R.....2.x.....[....#N..m.m.m.mfm....SP..NuM..9]..=.U..!...[........w...\|......^p....H......;...)..........;..EoDo....E.E.D...`.0.GG.aA.H.V.Mx\xA....../..d3.Eb_.J...R.^v........\^ob.}.z..k.x).v$f$..O)+.2..*....y}6`C6b.6cs...l...........!.........<..\|.\|..\|..\|..\|.\|....o....I%.4.L.SI.&C.6..!`...{...c..\.J.(.2.C....V.A..?.M<nG......v..m.;..R.C..aj.H...=..{.>.:.....}i_Y......:....o.&k..KY.2..6k....i]..{,.p}../.....VO3.o].fJ....R-TZ..;...RN..&V...C...3.?.......&..z.s&.D....r,.I...t.R..a$k..Mm..Y.U...+b.%kQ..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\_ty1kvFAO84[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	49981
Entropy (8bit):	5.820607983036512
Encrypted:	false
SSDEEP:	768:wJK1YPHfTNmUHz7/WaAiJz6lecd1hNPkdRvPwpDM1/h0Nq:WNOaSecdCdR3wpDM1Z0Nq
MD5:	E23FD3A96078A64C431DFEF1FCDA882C
SHA1:	D1F6A550F3EA5C17E61CBC11B66A93C400B2730E
SHA-256:	4FED4311FA05A51D28D8A1789518A78408F1B0E4E3E415631B242687177F3E4B
SHA-512:	7E5A00F74475D143B3AACF01D6C6D4AA7ED1F541C54B59DCC132898882883D534815BB297A59518B0E13F63BC8A001FCD3286124DB76423C892B9F80D732F44A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><style name="www-roboto" nonce="9H5BMfabtFp3RMsyiZ3wkw">@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff)format('woff');}</style><script name="www-roboto" nonce="9H5BMfabtFp3RMsyiZ3wkw">if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "E"); document.fonts.load("500 10pt Roboto", "E");}</script><link rel="stylesheet" href="/s/player/cb5bd7e6/www-player.css" name="www-player" nonce="9H5BMfabtFp3RMsyiZ3wkw"><style nonce="9H5BMfabtFp3RMsyiZ3wkw">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100%;}h1 {text-align: center; color: #fff;}h3 {margin-top: 6px; margi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\analytics[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	49153
Entropy (8bit):	5.520906949461031
Encrypted:	false
SSDEEP:	768:/yR3fYFBLbfs5sP5XqY3TyPnHpl1WY3SoavFVv6PU+CgYUD0lgEw0stZM:/y9gZfl5h3UHpaY3SoRCw0sk
MD5:	6DF1787C4BE82D1BB24F8BFFA10C7738
SHA1:	3634E839429E462E49C5F42B75FBFB4BA318AF6D
SHA-256:	2CB09C7B3E19BFC41743CA3624EF81C3258D56525647FEAC76AA757E0292627A
SHA-512:	CB3CE2BCEB61F390298C21E470423CCEB6DD93E648A7DD0467195B11FEF30BF7A086DFF47C4494E2533498D1448C1A22AAB1414C14FD73278F1C92E0F7BC3F94
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};var q={},r=function(){q.TAGGING=q.TAGGING\|\|[];q.TAGGING[1]=!0};var t=function(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])},v=function(a){for(var b in a)if(a.hasOwnProperty(b))return!0;return!1};var x=/^(?:(?:https?\|mailto\|ftp):\|[^:/?#]*(?:[/?#]\|$))/i;var y=window,z=document,A=function(a,b){z.addEventListener?z.addEventListener(a,b,!1):z.attachEvent&&z.attachEvent("on"+a,b)};var B=/:[0-9]+$/,C=function(a,b,c){a=a.split("&");for(var d=0;d<a.length;d++){var e=a[d].split("=");if(decodeURIComponent(e[0]).replace(/\+/g," ")===b)return b=e.slice(1).join("="),c?b:decodeURIComponent(b).replace(/\+/g," ")}},F=function(a,b){b&&(b=String(b).toLowerCase());if("p

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\application_wide-ff82ca4a97ee001a5c1d2e7e2bdc96dbf6807fe2300e759c7c1787bc920a6ab0[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	161352
Entropy (8bit):	5.013711097742319
Encrypted:	false
SSDEEP:	1536:s8amJxGGqPf6k6QOaNy9hUMoZKYRvIyPm0ZtjUv3Fu4mAbVTwtrgXvacOOmeDr:nYRX1YmeDr
MD5:	FF9D4D63A31F41054CEFDE23D052E6B1
SHA1:	FA0292F37C31846F57B657F704524C18E768D58B
SHA-256:	FF82CA4A97EE001A5C1D2E7E2BDC96DBF6807FE2300E759C7C1787BC920A6AB0
SHA-512:	52301EDFC43E09EF4497C35E691702FBB22C9FB85DA22EC195979109C265CAA9E1EB528881A54D4F6A13F7F766E14873A11BF15FAD3CB054873973901366B2E0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/assets/application_wide-ff82ca4a97ee001a5c1d2e7e2bdc96dbf6807fe2300e759c7c1787bc920a6ab0.css
Preview:	.navbar .invisible{visibility:hidden}.navbar .dropdown-menu .divider{margin:0}#logged-in.navbar .break-xs,#logged-in.navbar .break-sm,#logged-in-outside.navbar .break-xs,#logged-in-outside.navbar .break-sm{display:none}#logged-in.navbar .break-md,#logged-in-outside.navbar .break-md{display:none}@media only screen and (max-width: 767px){#logged-in.navbar .break-xs,#logged-in-outside.navbar .break-xs{display:block}}@media only screen and (max-width: 1799px){#logged-in.navbar .break-lg,#logged-in-outside.navbar .break-lg{display:none}#logged-in.navbar .break-md,#logged-in-outside.navbar .break-md{display:block}}@media only screen and (min-width: 1630px){#logged-in.navbar .break-sm-md,#logged-in-outside.navbar .break-sm-md{display:none}}@media only screen and (max-width: 1059px){#logged-in.navbar .break-sm-right,#logged-in-outside.navbar .break-sm-right{display:none}}@media only screen and (min-width: 1365px) and (max-width: 1629px){#logged-in.navbar .break-sm-md,#logged-in-outside.navbar

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\at[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	260
Entropy (8bit):	4.867037408591768
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZDMjR4O8T8b9goO8T8fVWxHBVW9i:t9bibt03jMjqO8T8b9goO8T80xK9i
MD5:	68FE10C5A3A6F242F91FB3D09BECFB46
SHA1:	FC8E23AC3A89B8866FCFC88A470BEF1D404D1969
SHA-256:	69DF4D9140FF80C75A23BC7B9076428B3E32F124E56F9525B42CEB0758AF8FBE
SHA-512:	AEEF9B8A18D740A076C7984E5CCDE53D49C5F139B2B6E76B29879804F45E76DE716511E119A6226AEE00E861575E8A2C91C5EF1DEFF5C20E9DF95E0FE3BE76F2
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/at.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m640 480.256h-640v-480.256h640z" fill="#fff"/><g fill="#df0000"><path d="m640 480.256h-640v-160.088h640z"/><path d="m640 160.21h-640v-160.088h640z"/></g></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\au[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1849
Entropy (8bit):	4.424785829128222
Encrypted:	false
SSDEEP:	48:Gq0vaR1Gvdn+7xu2IyzUCqZaCG+zUCWULnPl:4a1GvduXwnoEwvSnt
MD5:	55BB493CC8D0C25CE63C7830C581A417
SHA1:	C9C6DEF745F51FEE419A218F993C6064575B0655
SHA-256:	21C627B5A70320402E8FAA344D19916CD01FCAF714E6E1728B19EBD112BBD528
SHA-512:	B75F83E18057396905B0ADB91DB21724313A5E50DDF6A00F9715ED41CC2EB7E08A0AC63167166B8ADCBBC6C05B4268994BF1878F6CF56D8D69BA34BF127BA547
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/au.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><path d="m0 0h640v480h-640z" fill="#006"/><path d="m0 0v27.951l307.037 222.049h38.647v-27.95l-307.037-222.049h-38.647zm345.684 0v27.95l-307.037 222.049h-38.647v-27.95l307.037-222.049z" fill="#fff"/><path d="m144.035 0v249.999h57.614v-249.999zm-144.035 83.333v83.333h345.684v-83.333z" fill="#fff"/><path d="m0 100v50h345.684v-50zm155.558-100v249.999h34.568v-249.999z" fill="#c00"/><path d="m0 249.999 115.228-83.333h25.765l-115.228 83.333zm0-249.999 115.228 83.333h-25.765l-89.463-64.699zm204.691 83.333 115.228-83.333h25.765l-115.228 83.333zm140.993 166.666-115.228-83.333h25.765l89.463 64.7z" fill="#c00"/><g fill="#fff" fill-rule="evenodd"><path d="m299.752 392.511-43.651 3.795 6.014 43.404-30.186-31.763-30.186 31.763 6.014-43.404-43.651-3.795 37.676-22.363-24.241-36.493 40.969 15.514 13.419-41.711 13.419 41.711 40.969-15.514-24.241 36.493z"/><path d="m486.492 432.508-10.536-15.853 17.806 6.742 5.825-18.124 5.825 18.124 17.806-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\audio-conferencing[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	39949
Entropy (8bit):	5.329368779049364
Encrypted:	false
SSDEEP:	768:tME+g7dM5H+PAY6JDBepixXvVhzeY88i99YPy8P0:GE+g7dM5H+PATOMVhzeY8V99YPy8P0
MD5:	9BF8A1F138126CBF33E8F4BB9821D609
SHA1:	B118BC9BF0A46366F66E6C71AE823E32EACB96E3
SHA-256:	9A50C7939FE59351BE83F22F904897F2497A56EC9431547A1CAF4810274AB9FE
SHA-512:	D675AC4AD19B8912F66F4416380C33CD7B1C0284E5DA627EAF97A8AA4A624E45FAC3561116794D7A56BA84CC5CBDCB5545E74D21608CB4B2EC7CA440A540AB54
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/audio-conferencing?country_code=ch
Preview:	<!DOCTYPE html>.<html dir='ltr ' lang='en' xml-lang='en'>.<head>.<title>.Audio Conferencing \| FreeConferenceCall.com.</title>.<meta charset='utf-8'>.<meta content='IE=edge' http-equiv='X-UA-Compatible'>.<meta content='width=device-width, initial-scale=1' name='viewport'>.<meta content='SKYPE_TOOLBAR_PARSER_COMPATIBLE' name='SKYPE_TOOLBAR'>.<meta content='6Ldw2wATAAAAAPrc0sIk2o7FxSX5ZwzkHm55xu2i' name='RECAPTCHA'>.<meta content='telephone=no' name='format-detection'>.<meta content='ch' name='country_code'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-regular.woff2' rel='preload' type='font/woff2'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-700.woff2' rel='preload' type='font/woff2'>.<meta content='noindex, nofollow' name='robots'>.<link href='/fcc_favicon.ico' rel='shortcut icon' type='image/x-icon'>.<meta content='Take advantage of FreeConferenceCall.com's suite of features for audio conferencing, like high-definition

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\bh[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	557
Entropy (8bit):	4.920627848910625
Encrypted:	false
SSDEEP:	12:t9bibt03/KYa5dr8MjqCZ1TMLHKb+qKb+9K9Kb+VC:t9bKt03LaEM3XTeHaxaOKa8C
MD5:	75B805D37C8C2791F9F5A3EBC33E33CA
SHA1:	8ACF24E24BFBBC0C12E6D31BDA589C26592737CF
SHA-256:	CE0D53B86ACAE1FEA786A07F149302D76A10540AECFFF48D194180F403161D74
SHA-512:	9A1F42BBAC021B5E5F737D5976BB8BBE17C8033DA43210D38EF507AA63179FD88E4FDBBDDFFEFE69882ABE6844469583D607C55038EDF3D138EFC86E7A73187B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/bh.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m0 0h640v480h-640z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><path d="m-32.5 0h720v480h-720z" fill="#e10011"/><path d="m114.25 479.77-146.75.229v-480l146.06.076 94.242 30.306-93.554 29.541 93.554 30.458-93.554 29.542 93.554 30.458-93.554 29.541 93.554 30.458-93.554 29.542 93.554 30.459-93.554 29.541 93.554 30.459-93.554 29.541 93.554 30.458-93.554 29.542 93.554 30.458-93.554 29.542" fill="#fff"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\css[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	416
Entropy (8bit):	5.115130684884376
Encrypted:	false
SSDEEP:	12:jFmpO6ZRoMqt6pWRsRLqFmpO6ZN0qt6pWRs7Y:5KOY7a3sRaKOYN0a3sM
MD5:	EB2FFA456091FE90A93C2A226657483D
SHA1:	DCA2109ED2D9E02973FC58127DA3ACE4CF41C013
SHA-256:	43320B56F9F61445594AAB2914027A9DCBC3E962C0AD46BAF2DE3D56373E13D5
SHA-512:	E84C6E93285CEF0842BA81C43B947B92EEA6DE7FB8DD9F58FCC72B693001BC0CE130A1A6F46E6164EE2347BAF1162B7FBF684FAC8D6252AC8863AED594D19885
Malicious:	false
Reputation:	low
Preview:	@font-face {. font-family: 'Noto Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notosans/v12/o-0IIpQlx3QUlC5A4PNr6zRG.woff) format('woff');.}.@font-face {. font-family: 'Noto Sans';. font-style: normal;. font-weight: 700;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notosans/v12/o-0NIpQlx3QUlC5A4PNjXhFVatyH.woff) format('woff');.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\custom-greeting-icon-blue[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1663
Entropy (8bit):	5.065187125842378
Encrypted:	false
SSDEEP:	24:2dpLATLf3OhPDcmqyThbV8vd7MIrddz9lwf9hlKoO2a4ar1bKju3NpWMMzm:chAvf3qI85+bzz9lwf9blKr1OjQNpLn
MD5:	9A7A0F376626C8BFB9F94567FBC1943A
SHA1:	ED18FBB292C39D6A20F99CDF1870A7A74D4DCE1C
SHA-256:	762C2E191F0805D492E0CF61B2BDD5E5BAAE8F6EB969B52FCC8726E1BC83B02C
SHA-512:	7D3BFB5578C76FE2AB5DE1AD0844EC528B8312E1B969C9E22953BB1EFA4FF61083913153A0B94092E1C4F0DB90BEA3D53727A9715D90319D565CB000BF7DDE4D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/fonts/extra/custom-greeting-icon-blue.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 20.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 179.3 153.7" style="enable-background:new 0 0 179.3 153.7;" xml:space="preserve">.<style type="text/css">...st0{fill:#2773A7;}...st1{font-family:'Helvetica-Bold';}...st2{font-size:72px;}.</style>.<g id="XMLID_1_">..<path id="XMLID_2_" class="st0" d="M167.3,31.9c8,9.8,12,20.6,12,32.2s-4,22.3-12,32.2c-8,9.8-18.9,17.6-32.6,23.3...c-13.7,5.7-28.7,8.6-45,8.6c-4.7,0-9.5-0.3-14.5-0.8c-13.2,11.7-28.5,19.7-46,24.2c-3.3,0.9-7.1,1.7-11.4,2.2h-0.5...c-1,0-1.9-0.3-2.7-1s-1.3-1.6-1.6-2.8v-0.1c-0.2-0.3-0.2-0.7,0-1.2s0.2-0.9,0.2-1s0.1-0.5,0.5-1c0.3-0.5,0.5-0.8,0.6-0.9...c0.1-0.1,0.3-0.4,0.7-0.9s0.7-0.8,0.8-0.9c0.5-0.5,1.5-1.7,3.1-3.5s2.8-3,3.5-3.8s1.7-2.1,3.1-4s2.5-3.6,3.3-5.1...c0.8-1.5,1.7-3.5,2.7-5.9c1-2.4,1.9-4.9,2.6-7.6c-10.5-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\de[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	239
Entropy (8bit):	4.750103916000548
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZDMjR4TJUWLZVkBx2ZNVLcjWe:t9bibt03jMjqT6WVKBx2ZHIjWe
MD5:	58D9A3190E82F6DB5E674298F4CFCC6F
SHA1:	11859089875A344312DEE725649434C4C08D5667
SHA-256:	10FC627129D719007C79AB20C18620693E529167B73DA520A3055E4DDBCC4471
SHA-512:	7834CA9890AA6577EC3B99B9FCCE076623D167399301F142219E8B86657E6B8ACCB9508CDFE36B25ACDDB16B988B733311FE6023DD31D704C122B4CD5BC5E8DB
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/de.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 320.001h640v160.001h-640z" fill="#ffe600"/><path d="m0 0h640v160.001h-640z"/><path d="m0 160.001h640v160.001h-640z" fill="#f00"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\dz[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	726
Entropy (8bit):	4.662294547906591
Encrypted:	false
SSDEEP:	12:t9bibt03jMjqolkSjLgDnC73f+Iryl68cBCRj4lqaAGjTdxcQjLIZuuSj6pJHWEy:t9bKt03jMhdjQC7Nml6HCmAXPqcEjE8D
MD5:	5654816D08AD6B9C5FB4A040FADBCF96
SHA1:	365CFE68F0F48E570F6FB5E4F6F1A6E1F154C6E5
SHA-256:	0BD471010E081500CB593B4BEDB2FE0F298A8E60C1F19916D4E4541FCD35D547
SHA-512:	3908E54B111C965EA569DB0F26CEAFE1B38259AF00E01B697C14D91B70D01A42CB60314F267C21DE45538E964411E8E3B5936410FF30F5152E2C7487D5D7044F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/dz.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h640.011v479.997h-640.011z" fill="#fff"/><path d="m0 0h320.006v479.997h-320.006z" fill="#00bf13"/><g fill="#f21930"><path d="m445.896 308.66c-40.313 72.507-129.227 98.271-199.877 59.356s-96.406-127.836-57.491-198.487c38.914-70.648 127.828-96.406 198.479-57.491 26.118 14.386 44.714 33.298 59.339 60.237-5.338-7.341-11.297-13.4-19.119-19.55-48.189-37.887-118.045-29.525-155.931 18.664-37.885 48.188-29.525 118.045 18.664 155.931s118.045 29.525 155.931-18.664z"/><path d="m411.468 321.667-35.191-49.88-58.033 18.926 36.558-48.883-35.931-49.341 57.792 19.666 35.826-49.422-.852 61.04 58.073 18.798-58.306 18.05z"/></g></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\fbevents[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	93776
Entropy (8bit):	5.392689098842815
Encrypted:	false
SSDEEP:	1536:sM+OWt6w6aic9MeipKKqQqcThe7Kdv0a9sIOC1jaMu5Qm2B+QNSMngUSZYSlIUiJ:sOQMj1SVBYDGKH
MD5:	2C7F5BF38135E48073EC2929513E0BBD
SHA1:	B8792D38BD201B1BF962E9C14A2358B06D64A062
SHA-256:	2FFF9D42B48B67B86F3F657418733D38176FA5ECA4C13CF5F946F9CA410BE4BD
SHA-512:	4FC37B185AE887AA3465EEF5CEDB39D63244F49AD170AB30C069C62391265EACC7D034D9469CA85956C361F8EC9A0F89D4BA6E90A1A8C81E5DDA4104A0D56AFA
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\fbevents[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	93776
Entropy (8bit):	5.392689098842815
Encrypted:	false
SSDEEP:	1536:sM+OWt6w6aic9MeipKKqQqcThe7Kdv0a9sIOC1jaMu5Qm2B+QNSMngUSZYSlIUiJ:sOQMj1SVBYDGKH
MD5:	2C7F5BF38135E48073EC2929513E0BBD
SHA1:	B8792D38BD201B1BF962E9C14A2358B06D64A062
SHA-256:	2FFF9D42B48B67B86F3F657418733D38176FA5ECA4C13CF5F946F9CA410BE4BD
SHA-512:	4FC37B185AE887AA3465EEF5CEDB39D63244F49AD170AB30C069C62391265EACC7D034D9469CA85956C361F8EC9A0F89D4BA6E90A1A8C81E5DDA4104A0D56AFA
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\fcc_favicon[1].ico Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel
Category:	downloaded
Size (bytes):	894
Entropy (8bit):	6.467256341490229
Encrypted:	false
SSDEEP:	12:t4nKKhauvaG+vVXDS+2AoTUppcIzBxnzmUb1Rp3vD+bh8q81P:tqPCrTeAgUgiB1zmUb1Rpsz8
MD5:	9EE51FFAD9EAA30E3B67CCF54CE20145
SHA1:	B6F3FBCA0A5E86D84D6F30224F503016F91BB2C1
SHA-256:	E2C0F6D4E91C708F9380805E83A5ACD1F60535AF092981C3D4F484AB49743DC4
SHA-512:	C3EA0DA30BCC386E33D6805429BDA10FAE8A508999C35CAD7E6D85E77C4EC452A988D2C1DF59776081461189DD5D7AF1F4C24D156023D55A25BDAC385855F0DC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/fcc_favicon.ico
Preview:	..............h.......(....... ...............H...H...................................................................................................................................................................................................................g.S..S...g......qWg='.\|r....................z=.T..w:.....i.._...X@V........................i$.T...g...Q..I.....{^1.....................\|A.Y..q1.............qTe6.......................i.r*..c.......{uA...n..................W..h......y7.[..N.}G..vU.iU]4"..............p1.g...................bO..{...................d.v2..j..g..K.xE.nD.bC...................................x..............................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\gr[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1868
Entropy (8bit):	5.13002423887117
Encrypted:	false
SSDEEP:	24:tjuLx4H2hoyht9bW+6C21nOpLQWuTkIapLFa1ypHjvykejTcjgE3Vso7my3AjgvA:kx4QhN58wakIGtsgN9vA
MD5:	D16945FBA3DC2CF1A176DD1D9D05CFE9
SHA1:	E6C1BE7A7E3CA65771B075FB7D815023F1C1B9B8
SHA-256:	A149B717903F3131F408B0E72EE659D3A1FFEBE4A6D1961277B2F25D5D5DA7A0
SHA-512:	612A15B3F04C2F76856E844692A030D3FADAD61D4D975547B30D667D5ACD1840A53F160D5A98EAE568E048CA888675C3A622CC8185D132009563654172653231
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/gr.svg
Preview:	<svg id="svg611" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 640 480"><defs><style>.cls-1{fill:none;}.cls-2{clip-path:url(#clip-path);}.cls-3{fill:#0061f3;}.cls-4{fill:#fff;}</style><clipPath id="clip-path"><rect class="cls-1" width="640" height="480"/></clipPath></defs><title>Artboard 1</title><metadata><?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c143 79.161356, 2017/09/07-01:11:22 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/">. <dc:title>. <rdf:Alt>. <rdf:li xml:lang="x-default">Artboard 1</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta> .<?xpacket end="w"?></metadata>.<g class="cls-2"><g id="flag"><g id="g626"><rect id="rect614" class="cls-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\group-chat[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, baseline, precision 8, 465x263, frames 3
Category:	downloaded
Size (bytes):	18582
Entropy (8bit):	7.9655514779887335
Encrypted:	false
SSDEEP:	384:Fe+SwBMFk5uP2QORFHHB7C3vTviP4ytcZfoi9W4HYAQSX:bXBMO5uPgHZCTFytcf9r4K
MD5:	ED98B06E73B28AD5F3C27849B4941305
SHA1:	B46202038490FEF744C87C2BF885009622F1E4B3
SHA-256:	34818BAF732CFC458CAF040732FAF79115CD9B9705DAC5260C7007A9FB1C8EA2
SHA-512:	F629CF2BB8F309E37E89180A5EA0452572F047CA44232AC82BFB5F4820563D312B4B86D402708C3D4F8D1AF7453BFE317669151C5DC5D86C6B9841006C9041AD
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/video_conferencing/group-chat.jpg
Preview:	........................................................#"""#''''''''''..................................................!! !!''''''''''..........Adobe.d................"......................................................................................!1."AQ.2aq...3BT...#Rbrs......$45C..%c....6DSt.........................!1..AQa.2q"R.....#Br..b............?......K.VC...w.7.:...ik...p.$QK\o........(.A.-p.R.....<Es.Q.T....h.1I.UB:...aF.BN.C.:7.:.E-s.\|..(..k....+........F.P,....(...w.7..N..w.7..gTW;.....Q\..o..uEs.Q.PY....F.AgT...K.T.:..4P.4QE....(HQE. (.....J..h.%....QB,...r..4..<...K..II.V...\|k.).GNb.4........D..>j...Jr.tO1.=9\|.}9\|...[..IG.[..INL...^F...tzr......h....}.Jre..b.5.....\|...R....S./....}8y....\|..D.\|...NL...^F.....z....._....q.#.N..yWM..Z..Aa..?*re.sc..[..4zp.W..........q..3J.;b.o.npKwpG...>.re..l\|.^..tzx...V.l<....G2>.F...........<.92.9..x.x....@.\.K....xs....../l.r]3......NL..l\|..<y....N.j......hzre.sW........t...hz>j.......c.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\group-presentation[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 361x240, frames 3
Category:	downloaded
Size (bytes):	20190
Entropy (8bit):	7.976556881585688
Encrypted:	false
SSDEEP:	384:KbNp9npislA1MvwIsYPL8lgtL/Z8WZzzIcZuICAU3wwG4O/18yss:KbNbn40A1crsWL82byWZzzIcZuICAirs
MD5:	1EFE9351A777F25BEA120ABFE246B6C9
SHA1:	8A7EC2CB60FDB43821526FBF9C4F86C542E34966
SHA-256:	B02814B1DC26884FFC06350E4C2AAB0EAF279D0CFFAF9DD87AFFE3737F0945DA
SHA-512:	16FFA61D0FC42508DBEA110B221D6ACA24DCC0AB7C508BE7931AD6B772232E5D453B19DE868DD4C1142A2FA7B534676F8A5E9A99F66650995D3021608A3FED87
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/screen_sharing/group-presentation.jpg
Preview:	......JFIF................................................................#"""#''''''''''..................................................!! !!''''''''''........i.."......................................................Os..y.g....l.4ksO...&...R.c;\|.]......oK.E.."1........K.u..".fS......._..3-.D..@. ......v.7._<<........._W....g.}.8.F.C.z....:.gtm..M..f...;.....Z.}...s.KI....".P....g....#....b{f.T.G...R.....".oA.J8.'.y_.8.=.n..O.5..'.n......].e./.Z1...< ..q.....U.).z.M...m.YOr.Zh.............._.f..}~....:t..3lkW....q...vV.Ay..=d.H..7.wy...&../U..kF..R...eg[..Xg.u..s..Q9.t....K5.M.s..\|q...>j.R.k....#..O.$X...?h.!... TC..".K5F.qD.......r..I.E.. YR..tk....#....Ln.d..oF..=d.t.\E..%.!#...Lrg<...-....z..I...h...w..&...z.h.;..'.t..?...8O.......q\|.`-[....z.....%h.{X.Q..a..q..^<.[.k.i...=^..=..B....L7A..?..:.ssj..q..Mg.X. .28.Lh.Uo@..5z...&.......;.......t.}F.hv.RV~e...^.TSw.E...\w6..).....s..c.%^.\|.*.z.N..+..t.@}.P..h.{+w...5..g...'z. ..s...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\hk[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4424
Entropy (8bit):	4.774632443715602
Encrypted:	false
SSDEEP:	96:qcum+sy3MH++C+MeQrCrFEil7iGattWiDqKo00:Pufsy3Me+C+bgk97i1vWLK10
MD5:	2409748CE35E66B8EDCEED2A3B3FBEEF
SHA1:	F8909395B4A7EA2A19616B90F40658365A88D3FD
SHA-256:	5D8130D2B1747594A37C71689BD03EBF5D8DC3CD19470DB9832FDFC8FE0EFFD0
SHA-512:	CA14DC5076FBFDF32C75825C0DA119FEE326AD8B013976C671302D0A289B72DE5A615831C254E8AEB6DEC3DCD1CA16B0CE99B13E2B1AA0EFED2EFC8C77B3E196
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/hk.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="480" width="640" version="1"><defs><clipPath id="a"><path fill-opacity=".67" d="M-89.048 0h682.67v512h-682.67z"/></clipPath></defs><g clip-path="url(#a)"><path fill-rule="evenodd" fill="#ba0000" d="M663.167 480.256h-686.081v-480.256h686.081z"/><g><g><path d="M310.2 232.289s-48.388-20.834-41.444-74.82c6.722-25.987 18.594-43.684 40.1-53.316 10.081-3.137 20.387-4.481 30.915-5.377-2.763 2.614-5.077 5.227-6.272 8.513-2.316 5.899-.598 11.575 2.463 17.249 3.883 6.571 6.197 13.366 6.944 22.178 1.418 12.396-3.883 24.344-13.665 31.588-6.198 4.779-13.515 6.422-19.49 11.873-4.629 4.556-7.467 9.111-8.512 17.025-.15 15.084 3.958 17.176 8.962 25.09z" fill-rule="evenodd" fill="#fff"/><path d="M301.015 154.179v-.224" fill-rule="evenodd" stroke="#000" stroke-width="NaN" fill="#ba0000"/><path d="M304.073 226.684c-18.821-16.654-17.176-58.54-2.838-72.504" stroke="#ba0000" stroke-width="NaN" fill="none"/><path fill-rule="evenodd" fill="#ba0000" d="M312.92 144.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\hu[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	305
Entropy (8bit):	4.937970365237673
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZDMjR4F+2SqFLmhCBRkB5RmhCzL8m:t9bibt03jMjqF5LFPBRkBnzL8m
MD5:	4B88DF40CF21BC7FB16A05B74D6F14DB
SHA1:	EA6C6C2AA5460E51DE2479B33905E855E6481BEE
SHA-256:	31BE1FF82CF05A633D33A442D913B5AF3F5A9434FAC79599CA6F1888BD9560BC
SHA-512:	6841509021F1995A5E69A68CF3ABCFDCB478E8F261CD07055CDD91557A5447C19D58C892D4BF191C740626FCEE6A004CC0D232247C13043CF94E9E331EF054F8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/hu.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m639.926 479.938h-639.926v-479.938h639.926z" fill="#fff"/><path d="m639.926 479.938h-639.926v-159.979h639.926z" fill="#388d00"/><path d="m639.926 160.108h-639.926v-159.979h639.926z" fill="#d43516"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\id[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	215
Entropy (8bit):	4.991151589542862
Encrypted:	false
SSDEEP:	3:twMnbiRdt0LvDmJS4RKb5KC5MoXQJ9rKURNcHaL4/4qG3dK9e+HldSBi8r/4qGr/:twobibt03mc4slZDMjR4A0tff/8TtC
MD5:	339CFA3CE4F7E9DE89B9373B3680BAA7
SHA1:	A49433D9F95C4C26933F2828629F39016AE578DD
SHA-256:	B6FE50E1E679A091580579C7283094785D50D118AA429D8A9D3EB121A2A5579A
SHA-512:	108A19E81C5147419497F615F907464E630CB45490A07162FDE3BE6ECFE90CDB892EC70B09EC510674A9BACEB43BDB1786EF3F6A89DF7A6450A2656B129168DE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/id.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h639.988v249.049h-639.988z" fill="#e70011"/><path d="m0 239.987h639.988v239.979h-639.988z" fill="#fff"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\ie[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	272
Entropy (8bit):	4.959999927318247
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZDMjR4AMRsKSqslXWHMJAvqAnlXWHMJA0:t9bibt03jMjqJRRLsNWHMKvqeNWHMK0
MD5:	F0D2307692C5CC7FC8B8D956A0B0C797
SHA1:	ED0EB4AC6EE9DE2C3339A4382DA197B5CDFC3AB2
SHA-256:	B7ACCE5FD620FFF5F5F8BE81B4E7F550773C669A8B1E3FA8FDCFEE09A23B7617
SHA-512:	5FC3A5FE148C48172C72761D2759A2A10F8B51D7A431CF3B084F5CCC6C732C2C2EEDD8CB5B840FDF909CF5D05356F3861225BF3CB0E3D909AE0387C178CD2AB8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/ie.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h639.995v480.004h-639.995z" fill="#fff"/><path d="m0 0h213.334v480.004h-213.334z" fill="#009a49"/><path d="m426.668 0h213.334v480.004h-213.334z" fill="#ff7900"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\in[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9988
Entropy (8bit):	4.021290416503642
Encrypted:	false
SSDEEP:	192:Z7mOtDnu/BKpfjZQOLlQ+RtkFs3da3t1uANStGzTdZIW:ZyOdOYbaOLlBRGFs3da3tAANSt8TdSW
MD5:	3EE98A82B6A4CD13F44014FDA05D129C
SHA1:	47B97EE67B25BECA5A3EC6A4F57E68E1E9414FFA
SHA-256:	3D63AEC237D457DCDD685B85CF678C3A795ECA354979C9BB4B15709DA092002B
SHA-512:	F199BB8265EA9A4CCE1C91D2A9A38C5F8195D7F836CA247D34FFE3E66E27BA01D21C24692958FCC2711434111E94C666C19C27B4C3EE14D565085F1097D4639E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/in.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m0 0h640v480h-640z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><path d="m-39.999 0h720v480h-720z" fill="#fff"/><path d="m-39.999 320h720v160h-720z" fill="#329203"/><path d="m-39.999 0h720v160h-720z" fill="#e77300"/><ellipse cx="362.9" cy="367.47" fill="#08399c" rx="305" ry="305" transform="matrix(.403 0 0 .403 173.67 91.822)"/><g fill="#fff"><path d="m426.58 212.4c.673 2.456.815 3.768 1.304 6.118-4.822 1.492-7.332 4.705-6.75 7.922.481 2.897 2.624 7.019 8.66 6.141.155 2.395.226 3.772.233 6.319-18.228.044-37.441-1.007-55.368-2.597-13.226-1.145-16.373 2.527-23.25 3.11-7.979.653-14.263.178-30.744.827 16.155-3.33 22.503-5.347 29.982-6.556 7.199-1.117 9.972 1.489 23.369-3.721 16.921-6.726 34.985-12.745 52.565-17.563z"/><path d="m293.62 134.15c2.461-.657 3.773-.79 6.126-1.264 1.461 4.832 4.658 7.362 7.878 6.801 2.9-.462 7.035-2.579 6.197-8.62 2.396-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\is[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	507
Entropy (8bit):	5.031787769763894
Encrypted:	false
SSDEEP:	12:t9bibt03/KYa5dr8MjqyA/sDTe+osPUzTaAL+WfWBrzzhlWNW7Nf:t9bKt03LaEMe02FzTj6W+BrHWE79
MD5:	542BE6441BBAE6699D7494CC8E8979BF
SHA1:	3AEAE80F44FD14EE25E406EEC284957CB38C7C19
SHA-256:	7BACABA2D9934779E669B44A6A3E59646DF0CB958461D12ABB542C4567D111D3
SHA-512:	CA7954B20D8D089E8908C221E3D483AC15DF432E70F567AC5ABF5C5CF5CEF84632F6E3743A8B10196A4A442DC210D7A7399FB82F9630A2722F72079F3F670E99
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/is.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m0 0h640v480h-640z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><path d="m0 0h666.67v480h-666.67z" fill="#003897"/><path d="m0 186.67h186.67v-186.67h106.67v186.67h373.33v106.67h-373.33v186.67h-106.67v-186.67h-186.67v-106.67z" fill="#fff"/><path d="m0 213.33h213.33v-213.33h53.333v213.33h400v53.333h-400v213.33h-53.333v-213.33h-213.33z" fill="#d72828"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\jp[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	427
Entropy (8bit):	5.210804983224924
Encrypted:	false
SSDEEP:	12:t9bibt03/KYa5ZvOr8MfLUFwA87eGzuz3NfyLE:t9bKt03LafM4FvfGC90E
MD5:	2632211AC8946977D509B5D291718F52
SHA1:	4A77068B9C6E30EB8AF6C5437C8E62DDD4E3BA38
SHA-256:	71A8BEBCC42B173585EF175DD62DD13DB9BE2C23FF9DF7ED1A12C5B00304BA7F
SHA-512:	B42B4D93C8393AA12BB098A98955EFF0EE3BEDE92A00DEAC169B8C6768F075D90FE410728AB3833B9A28938D0C43E60B79ACA3EC07ECC356B54FEB4EACEFF564
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/jp.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-88.001 32h640v480h-640z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd" transform="translate(88.001 -32)"><path d="m-128 32h720v480h-720z" fill="#fff"/><ellipse cx="523.08" cy="344.05" fill="#d30000" rx="194.93" ry="194.93" transform="matrix(.766 0 0 .766 -168.44 8.618)"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\json[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	5.619396844734394
Encrypted:	false
SSDEEP:	12:nGSojXLbOYlPb5wUfLiin8wvjqYIASyZnBPODxgUQBpZ/H9hP:nnorXOSPb5Vui8wLC7VQBpZ/7P
MD5:	7F5F8A4970CB3B0DBBDB543D6F052AC2
SHA1:	5765CD4F02262B7C90904787D40753D9FFFD7C84
SHA-256:	04E4121DA1880D7DFE437A9EDDEE1C139F305B98986467ACA5FA0780FA3AD9F1
SHA-512:	1B42EC4A16D1F1B06324489C44E37F13C08CD2F7AB274D707646F8D9BC19592BDA0EA2752340ADDC7B557F035D415705ABA67C91A350858F0130BF192F742618
Malicious:	false
Reputation:	low
IE Cache URL:	https://trc.taboola.com/1336134/trc/3/json?tim=1619714630821&data=%7B%22id%22%3A874%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3A%22v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682217_CNawjgYQxsZRGLjejvSRLyADKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ%22%2C%22ui%22%3A%22c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913%22%2C%22vi%22%3A1619714630809%2C%22cv%22%3A%2220210420-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dfreeconferencecall-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1619714630820%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2F%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
Preview:	TFASC.trkCallback({"trc":{"si":"a18e40b6bfa0714361643910a1fb8845","sd":"v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682231_CNawjgYQxsZRGJnJj_SRLyAEKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ","ui":"c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913","plc":"DESK","wi":"-4579114433060089388","cc":"CH","route":"IL:IL:V","el2r":["debug","social","perf"],"uvpw":"1","pi":"1336134","cpb":"EhIyMDIxMDQyMC0zLVJFTEVBU0UYASCc__________8BKhZ0YWJvb2xhc3luZGljYXRpb24uY29tMgh3YXRlcjA0NjiA6MSgBUCy0A1I0IgQUN7Y2QNY____________AWMI3v__________ARDe__________8BGCJkYwjXFhDUHxgjZGMI0gMQ4AYYCGRjCJYUEJscGBhkYwj0FBCeHRgfZA","evh":"1867376994","vl":[{"ri":"8e3256e1aefbc8bdec7c4ad7d795ecae","uip":"rbox-tracking","ppb":"CNUD","v":[]}]}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\json[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	5.625181716416889
Encrypted:	false
SSDEEP:	12:nGSojXLbOtalN3uf8UfLiinbdWBgwvjqYIASZBZQgruQxzH9hB:nnorXOtEJupuiHwLC79PJ7B
MD5:	B3644CA788659C563B9AFF6B87FE4479
SHA1:	23CA64D03786733E0F7BC1CAEE65240CEE533118
SHA-256:	2F81592A23B7448BAE60FA378AB9B9C654578EBB653F83B775B710FDBD982217
SHA-512:	A1ABB99843A8C808A9F711519F6AC52AA86CAA93EC8706AB2BC47501719F5DC551007EA326B7A8F3490D26D1981561BCC22C6F0F2CC437EF51B07E01B7920853
Malicious:	false
Reputation:	low
IE Cache URL:	https://trc.taboola.com/1336134/trc/3/json?tim=1619714635032&data=%7B%22id%22%3A148%2C%22ii%22%3A%22%2Flogin%22%2C%22it%22%3A%22video%22%2C%22sd%22%3A%22v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682231_CNawjgYQxsZRGJnJj_SRLyAEKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ%22%2C%22ui%22%3A%22c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913%22%2C%22vi%22%3A1619714635015%2C%22cv%22%3A%2220210420-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Flogin%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dfreeconferencecall-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1619714635031%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Flogin%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
Preview:	TFASC.trkCallback({"trc":{"si":"a18e40b6bfa0714361643910a1fb8845","sd":"v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682235_CNawjgYQxsZRGIfqj_SRLyAFKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ","ui":"c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913","plc":"DESK","wi":"-6191540782426377260","cc":"CH","route":"IL:IL:V","el2r":["debug","social","perf"],"uvpw":"1","pi":"1336134","cpb":"EhIyMDIxMDQyMC0zLVJFTEVBU0UYASCc__________8BKhZ0YWJvb2xhc3luZGljYXRpb24uY29tMgh3YXRlcjAxMDiA6MSgBUCy0A1I0IgQUN7Y2QNY____________AWMI3v__________ARDe__________8BGCJkYwjXFhDUHxgjZGMIlhQQmxwYGGRjCNIDEOAGGAhkYwj0FBCeHRgfZA","evh":"1867376994","vl":[{"ri":"a2da12e496d02997a9943509549fc76c","uip":"rbox-tracking","ppb":"CKYG","v":[]}]}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\json[3].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	785
Entropy (8bit):	5.605881172697817
Encrypted:	false
SSDEEP:	12:nGSojXLbO26lD5itUfLiinqwvjqYIASDZBPODxgvs+bcrHyH9hMG:nnorXOtD5iwuiqwLC7DHneS7MG
MD5:	142C4DB23D7DF32CAB6ACF6E28A36D5F
SHA1:	8CD4392AC9F806042080C2A0A938DBC59DCB8A8A
SHA-256:	CE05AFC93DB34E3EE484BED6E5F8504500DD9490183F538BA8BB49AC326600C0
SHA-512:	8E934EC7398AD4081B347730EF72CC575EDD6540921292362A6DBE4AA38F297A8459B43D0F839602F36FAD71CFF57E6D4A176FAC211B50A73BBD7317D862BF7C
Malicious:	false
Reputation:	low
IE Cache URL:	https://trc.taboola.com/1336134/trc/3/json?tim=1619714637772&data=%7B%22id%22%3A171%2C%22ii%22%3A%22%2Faudio-conferencing%22%2C%22it%22%3A%22video%22%2C%22sd%22%3A%22v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682235_CNawjgYQxsZRGIfqj_SRLyAFKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ%22%2C%22ui%22%3A%22c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913%22%2C%22vi%22%3A1619714637759%2C%22cv%22%3A%2220210420-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Faudio-conferencing%3Fcountry_code%3Dch%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fcountry_code%3Dch%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dfreeconferencecall-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1619714637770%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Faudio-conferencing%3Fcountry_code%3Dch%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
Preview:	TFASC.trkCallback({"trc":{"si":"a18e40b6bfa0714361643910a1fb8845","sd":"v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682238_CNawjgYQxsZRGL__j_SRLyAGKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ","ui":"c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913","plc":"DESK","wi":"5364983430933151937","cc":"CH","route":"IL:IL:V","el2r":["debug","social","perf"],"uvpw":"1","pi":"1336134","cpb":"EhIyMDIxMDQyMC0zLVJFTEVBU0UYASCc__________8BKhZ0YWJvb2xhc3luZGljYXRpb24uY29tMgh3YXRlcjA4MDiA6MSgBUCy0A1I0IgQUN7Y2QNY____________AWMI3v__________ARDe__________8BGCJkYwjXFhDUHxgjZGMI0gMQ4AYYCGRjCJYUEJscGBhkYwj0FBCeHRgfZA","evh":"1867376994","vl":[{"ri":"e0ca1a823048ed9677985252fef7abd3","uip":"rbox-tracking","ppb":"CI0F","v":[]}]}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\json[4].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	785
Entropy (8bit):	5.609116017297904
Encrypted:	false
SSDEEP:	12:nGSojXLbOilL+UfLiinKNwvjqYIASBkBPODxgqec/p5tH9hhw:nnorXOcDuiKNwLC79N7q
MD5:	D491C5E835D3D38D2FF7C627AB031E91
SHA1:	67686F149EFD8F7796BECD823329D07DE0EA0A05
SHA-256:	FDE3C428676AE28CBAC7B9AA1E3C125196FAD60FAA1099946372E04FD7CC4AD0
SHA-512:	9E22432C23E7023CAFAA3D94FAAD7909F6B9B4611A4277B76C872346FD89F3A8F6C5B94D0486075E20E83E9F99B9376852FF73A68A288275229E9286B03773D6
Malicious:	false
Reputation:	low
IE Cache URL:	https://trc.taboola.com/1336134/trc/3/json?tim=1619714660458&data=%7B%22id%22%3A503%2C%22ii%22%3A%22%2Finternational-conferencing%22%2C%22it%22%3A%22video%22%2C%22sd%22%3A%22v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682252_CNawjgYQxsZRGOTvkPSRLyAJKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ%22%2C%22ui%22%3A%22c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913%22%2C%22vi%22%3A1619714660447%2C%22cv%22%3A%2220210420-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Finternational-conferencing%3Fcountry_code%3Dch%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fcountry_code%3Dch%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dfreeconferencecall-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1619714660457%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.freeconferencecall.com%2Finternational-conferencing%3Fcountry_code%3Dch%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
Preview:	TFASC.trkCallback({"trc":{"si":"a18e40b6bfa0714361643910a1fb8845","sd":"v2_a18e40b6bfa0714361643910a1fb8845_c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913_1619682195_1619682260_CNawjgYQxsZRGN-wkfSRLyAKKAEwKziy0A1A0IgQSN7Y2QNQ____________AVgAYABoopyqvanCqcmOAQ","ui":"c5c09a26-075f-43c6-b5b9-9703e6fc26c6-tuct783e913","plc":"DESK","wi":"1155214351428951166","cc":"CH","route":"IL:IL:V","el2r":["debug","social","perf"],"uvpw":"1","pi":"1336134","cpb":"EhIyMDIxMDQyMC0zLVJFTEVBU0UYASCc__________8BKhZ0YWJvb2xhc3luZGljYXRpb24uY29tMgh3YXRlcjA3MziA6MSgBUCy0A1I0IgQUN7Y2QNY____________AWMI3v__________ARDe__________8BGCJkYwjXFhDUHxgjZGMI0gMQ4AYYCGRjCJYUEJscGBhkYwj0FBCeHRgfZA","evh":"1867376994","vl":[{"ri":"996f6604f969bf9ea0802ca5945e6ccc","uip":"rbox-tracking","ppb":"CPwC","v":[]}]}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\kh[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9689
Entropy (8bit):	4.441045971460032
Encrypted:	false
SSDEEP:	192:obaF5Kec6zpdlG26pdleH40GpsySfbusZzb7Y7y2uSLV2qk:obaF5KevvFCtSD9zb7Y7z3LVnk
MD5:	37650CD1B9832D09056B91E24B48830E
SHA1:	214E1261BBDC49A0CB6B39B233D7730E9293697C
SHA-256:	AEAEB2B9CD5A23DC69378279FB56058B7D8A9D10476205159F5237FAAA874EE0
SHA-512:	22C0CE2D98488D0B69EC64C11D759ACBC83ADFB2DC7891FD2852FDA53C5591135759B4A7ECA0228372FE5DC90E21D9FA636495BAF40EBB0751BEBC4E195D38EB
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/kh.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><clipPath id="a"><path d="m-85.333 0h682.67v512h-682.67z"/></clipPath><g clip-path="url(#a)" fill-rule="evenodd"><path d="m-40 0h720v480h-720z" fill="#1b0073"/><path d="m-40 120h720v240h-720z" fill="#e60006"/><g fill="#fff" stroke="#e60000"><path d="m167.51 232.658h305.259v49.36h-305.259z"/><path d="m167.273 281.942-4.93 11.61h315.52l-4.93-11.61z"/><path d="m408.355 281.943-5.98 11.61h71.76l-5.98-11.61z"/><path d="m425.859 281.943-3.015 11.61h36.18l-3.015-11.61z"/><path d="m430.986 281.943-1.945 11.61h23.34l-1.945-11.61z"/><path d="m288.79 281.942-6.29 11.61h75.48l-6.29-11.61z"/><path d="m165.797 231.913h308.695v11.614h-308.695z"/><path d="m407.981 232.765h60.5v49.167h-60.5z"/><path d="m451.26 255.805h6.05v26.122h-6.05z"/><path d="m424.64 255.805h6.05v26.122h-6.05z"/><path d="m304.21 281.942-3.16 11.61h37.92l-3.16-11.61z"/><path d="m310.181 281.942-1.98 11.61h23.76l-1.98-11.61z"/

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\login-3[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	31126
Entropy (8bit):	5.471766687212953
Encrypted:	false
SSDEEP:	768:WIE+g7dM5H+PyPYZPeSbei94299YPD13V+C:zE+g7dM5H+PFPeSbeQD99YPD13V+C
MD5:	ECA143BEE1161A9E902C9AEB6EA8199C
SHA1:	2E4A9A680E92C97B5D08B35D1B465CB0B0C2A103
SHA-256:	41DD18C9D9FBD24271954FB8EAF219B12CA0EE0DD76303E906975DE52C549781
SHA-512:	602897C22C44146DF4A2F43640C4441E381A4E3556798E6764F45C3D5373B576B9CEF46507169E669C4E88CF800ABB88BD3EDC3376C19DD6CAD44A90EF5AD443
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/login-3?country_code=ch
Preview:	<!DOCTYPE html>.<html dir='ltr ' lang='en' xml-lang='en'>.<head>.<title>.Log in page \| FreeConferenceCall.com.</title>.<meta charset='utf-8'>.<meta content='IE=edge' http-equiv='X-UA-Compatible'>.<meta content='width=device-width, initial-scale=1' name='viewport'>.<meta content='SKYPE_TOOLBAR_PARSER_COMPATIBLE' name='SKYPE_TOOLBAR'>.<meta content='6Ldw2wATAAAAAPrc0sIk2o7FxSX5ZwzkHm55xu2i' name='RECAPTCHA'>.<meta content='telephone=no' name='format-detection'>.<meta content='ch' name='country_code'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-regular.woff2' rel='preload' type='font/woff2'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-700.woff2' rel='preload' type='font/woff2'>.<meta content='noindex, nofollow' name='robots'>.<link href='/fcc_favicon.ico' rel='shortcut icon' type='image/x-icon'>.<meta content='text/html; charset=iso-8859-1' http-equiv='Content-Type'>.<meta content='noindex, nofollow' name='robots'>.<meta cont

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\login[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	44441
Entropy (8bit):	5.4079377329999705
Encrypted:	false
SSDEEP:	768:W+hE+g7dM5H+P6Y6JDBepixXCPeKbeA9A299YPyfW:zE+g7dM5H+P6TOJPeKbeKp99YPyfW
MD5:	ED66F3D45ECD93822382322E5A922D41
SHA1:	05ACF4ABD194897591ACC3E042B346764C567354
SHA-256:	9AD482DA2D8B7D70F6AFC0CC7E23C9437935DB055A0EFD5E30212B6A20E9A9E1
SHA-512:	F5F26E84CED0061E6BFEB79F5B463F73E15E650CDFD6607B588E75141D4E3905187C650DBC60878CA7BC4DEC2C4F04D52AC2064D8EE19B173B8161E7E43F0D14
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/login
Preview:	<!DOCTYPE html>.<html dir='ltr ' lang='en' xml-lang='en'>.<head>.<title>.Log in page \| FreeConferenceCall.com.</title>.<meta charset='utf-8'>.<meta content='IE=edge' http-equiv='X-UA-Compatible'>.<meta content='width=device-width, initial-scale=1' name='viewport'>.<meta content='SKYPE_TOOLBAR_PARSER_COMPATIBLE' name='SKYPE_TOOLBAR'>.<meta content='6Ldw2wATAAAAAPrc0sIk2o7FxSX5ZwzkHm55xu2i' name='RECAPTCHA'>.<meta content='telephone=no' name='format-detection'>.<meta content='ch' name='country_code'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-regular.woff2' rel='preload' type='font/woff2'>.<link as='font' crossorigin='' href='/fonts/googlefonts/open-sans-v15-latin-700.woff2' rel='preload' type='font/woff2'>.<link href='/fcc_favicon.ico' rel='shortcut icon' type='image/x-icon'>.<meta content='Click here to login to your FreeConferenceCall.com account.' name='description'>.<meta content='free conference call, toll free conference call, operator assisted tol

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\meeting-dashboard[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, baseline, precision 8, 462x258, frames 3
Category:	downloaded
Size (bytes):	15719
Entropy (8bit):	7.971555456613988
Encrypted:	false
SSDEEP:	384:DUpGJFVtq7DDc88+C8Sod3dsLUnPjcx3seuxpZ0:DsG5tQDc88+OuSLUnPjcx3seuxf0
MD5:	9C36760BF1E897A8CB5B69B9956F938E
SHA1:	8C66CAB92FCEB12FF1235AEFD4717A11C0DDADDE
SHA-256:	66444DF6B082024E920DF032783940033C96FE563F1C5DA2FB2E19CD909CD5F7
SHA-512:	AA0098D4E702CD63B739D639DAE5E4C7021D0C51B7E1423320E65C41E29B157169F7D41F315812C843868E33F41C87550CE8BF78346ADBB2A9CA192181CCB9DC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/video_conferencing/meeting-dashboard.jpg
Preview:	........................................................#"""#''''''''''..................................................!! !!''''''''''..........Adobe.d................"....................................................................................!1.AQ"2aq...R...#3B...br.$4S....%C...5.......................!1AQa..q"2..B..3.#R.$b...............?.y:(.T.P<.MH..G..h..Ag.u.k@....EQ"B..u.D....,:....:.-.....81...L...r..J..&V..C..%.B(..oD...BT.....Y(hJ.. .-.]. ...8$N.`r......K7..w.(_#.........}'...9M..i0<........7.2&.+.!lMk.,........JF..._...............\..Y..sn..G..]....))....EA_I. j..S\i.UU..i..-a#...6._....vm.=9..MYK.n..! .5.$.}.Bg<.]<.X..9d...':^$-....Hi....{;?.v^.4k..?d.&.f.R.U.....X.....Wk...T.PKNO......Z..T.\.L.%H...r......v..].rT.]p..r.....T........Z._5}p.x....<G.FN..$.u..:!c:"......{..D9.!.`j.!.._.....6..n../9.R...Kv...L.L8...N4..y{.LM.#=.B.<R...6..z;..9.....9ch+'...w.......1.ut+F.z..]-[..7........l.b..nZE.......c.)%xg$.....}....4.}..T.@..#....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\mx[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	61384
Entropy (8bit):	4.815731930618749
Encrypted:	false
SSDEEP:	768:YkK93WMkuYdmQBB5sZD4VuSTtfTXNblQRPXYZKXe9D0cm1lxK:YO3RTVuSTtz/KZX5ct
MD5:	48F0356D0C1F7DA6473F82D56887ECCE
SHA1:	5839E6DF702275778829E636733E76132F1E021A
SHA-256:	8732FD83CC7E0D891D1E7A4F403B6523BAA62C46309DD2FA4C65D2D45AC20365
SHA-512:	030F36D6A6411FA2475677D91D926D40A4E5EFA172DBCEE081F7C4A84414A70CEF7AEF00FCEB33F8FA884D2B0D27863A6DF6432357F55D1E3F87371C5E50D0D1
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/mx.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="480" width="640"><g><g fill-rule="evenodd"><path fill="#fff" d="M0 0h639.984v480h-639.984z"/><path fill="#0b7226" d="M0 0h214.301v480h-214.301z"/><path fill="#bc0000" d="M426.909 0h213.075v480h-213.075z"/></g><g><path d="M213.125 258.71c.077-.1 3.468-6.037 3.066-5.08 1.562 1.197 4.415.063 2.345-2.63l1.643-3.008c1.138-2.131-1.299-3.05-2.264-1.576l-1.748 2.929c-3.071-1.458-3.273 1.971-1.803 2.57l-2.414 3.367 1.174 3.429z" fill-rule="evenodd" fill="#9c4314"/><path d="M212.722 257.388c-.101-.075-6.086-3.382-5.124-2.993 1.175-1.579 0-4.415-2.662-2.307l-3.032-1.601c-2.147-1.107-3.031 1.343-1.544 2.285l2.954 1.707c-1.414 3.091 2.017 3.244 2.594 1.767l5.476 3.371 1.337-2.228z" fill-rule="evenodd" fill="#9c4314"/><path d="M234.369 293.669c.02-.124.174-6.96.276-5.928 1.944.308 3.912-2.048.809-3.429l.012-3.428c-.015-2.416-2.595-2.063-2.741-.308l-.142 3.409c-3.394.181-1.939 3.291-.362 3.118l-.519 4.11 2.666 2.456z" fill-rule="evenodd" fill="#9c4314"/

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\overview-health[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x216, frames 3
Category:	downloaded
Size (bytes):	12590
Entropy (8bit):	7.95137195057892
Encrypted:	false
SSDEEP:	192:p1zFaV24MZi2Jpvg99rtmXYZEKZquC9s8OJ5aZVNE5vlhRhRUNcKfqP9b68:ncngTHg9Hmojquus75aP0TRUNcMM9bX
MD5:	75E9BC18B1EF2E9484472AA2B878C34C
SHA1:	6BBD7FF8B284F5F69D82915BF76EACD0C5F592A0
SHA-256:	3697765ED903D355BFF7ECC73713D02553094BE89ABDCD37616FF87DA19D9E49
SHA-512:	1D18E73E540F09114E6030F894BEFD83404E783C6D969596FC0AE2F8D4F838BE1B36CB5E5891F349DAABCEB55FC2A2761066372F6177E8052E66D1C7C261D55F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/splashpage/free-recordings/overview-health.jpg
Preview:	......JFIF................................................................#"""#''''''''''..................................................!! !!''''''''''........h.."................................................4C.....O].....h0.u...G....f..@.e.......E....oc..!]D...eU..@.^..B.a...>..!..HI..5.h0.t......<.Eg.......s..by....r3...4..@.r..I=.i...P....0..qs....9.......q. Q^.2.K.7b>,.E` V...x^~...zr..cS.E.SA.......=u.q..D..V.d..W..7+..\|2i....S~......X..]J.,2.U.....d...+.....UWz.. ..&..=m..u..p...e.F./Pq.U.Y....N_....D....P..e..1.+..H%.Ye.\|..%..v+... ......@..\|.o,.).VkAK.BJ.%..U;hn....... 1..N...f.].ES.+n..z.}F...w..H...u.y\|.n....WX;......M.h.{9.@....(]&:.h....EI.r0,...S.uZ.b...y..00.uQ......y.T9I.I..F......7..9l.O.......@.u...<...j.ff.z.....K$.+..=.-..^.o..A.gA.uP..Mu.s.X.xK.........Jm.,I..3..GPA]T.H.....)...,..6..*...#.z.K^......u... .+g.)i..+.n..3..N..........w...K..c_E....AZ!5....Fz&.d......WvK..N\|1,..Z..\H.o'.c..+..pf-....mv..X..@g.@.....8j.+X...G

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\overview-hr[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x216, frames 3
Category:	downloaded
Size (bytes):	11423
Entropy (8bit):	7.952065982566858
Encrypted:	false
SSDEEP:	192:+wGx6ckLwHBba6gut5FxylGT1rw79DPat6KPtxU0m/:s6NUh8ut5FxylGThw7GPS/
MD5:	A7D4400959D9B4E14ED22A172DF540F2
SHA1:	9925AE43E3BD1777ADE4681EFD2245C72EC126F6
SHA-256:	EE674CD7AB8C400A688B16BBD1A943A829358CECA2F96C9C28445991049A9941
SHA-512:	6318ABEB67B84EFAB340AF239E59C993A06CD749C1F66384ADC45B99F949B3998EB63EAE766C0DD34B978F01C2CA6C70366D60B4B8B58B7479659636CCB8DEA5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/splashpage/free-recordings/overview-hr.jpg
Preview:	......JFIF................................................................#"""#''''''''''..................................................!! !!''''''''''........h..".................................................l..Y7V...T......CW..S....vk ..M...!J..s.j.U.z...............7.:.....J..W....."5X....n.......l....o.........@..Yv.._=E2q..h..\.J.y ...... .........e..E..#.......?.....J.\.7ZDe.v.oB..H`....sw....I@...k....c....}..`.....8.N.u0....,...z3..z..Fe.....}>h..).h.<V.\|...].J..Ig.....q..I_....e.K....y.O.....Q?....<1...<....F?D.0m..^.5V......ed^....j!...+....{>.Ha..9.....m)4.g.......@..........T.k;z{5..\|h.x..De.rz..oQj.=<^..I.."..ys.wx..o.\.....s;%....oh.Q.m9....a.<..D.u_t\..2.D....U......../.4..P.{..q./..u../k.\.W.H.CN...~..u....d.QQ.`....U...nn.u../..X....R.e.u5...S......N..T..}b....%-......+..cyc...@1.\.G.q...\<.Yl\..:...K.<.........`.5.&:u...w....^-o..eR..KJR..oiek..\|.[.+V..i..{....7s9Or.T.z&.Z.VwV..1_..R..{.Q...a.W<......r..........t..:w. .]..E.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\overview-religious[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x216, frames 3
Category:	downloaded
Size (bytes):	12339
Entropy (8bit):	7.950438152590874
Encrypted:	false
SSDEEP:	192:tVNdl5n2wkk5q6Gw9BG4UExgP10Mv0QY+/jymKhQKf8Q8U9lliufWNGtoJq:Ndl0wRz/bBxC1Ff5jyFQK0QFliugJq
MD5:	73A669ECA7CBF42568BA2A53A6D7BF59
SHA1:	CE6443B8866078FB5C088E27A18371BA9EE161D2
SHA-256:	BB5794C919574050D2EEE5E332DAD59AD750A7B3653204830124D7CCB1AB74F5
SHA-512:	EE63BD71B4F25DD5B96A75664240E8169D29F8CF61BFF990782C2C406FDBAB02454A594A0A914679EFCD336A28762BD9DB241EB6C2B73BA0B5BAE43D147C6F9A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/splashpage/free-recordings/overview-religious.jpg
Preview:	......JFIF................................................................#"""#''''''''''..................................................!! !!''''''''''........h.."................................................Sa.y..X..Z.p..\|Ov...&..J.=.S{........&....H.o.....b..p..$9LZ.....\...h...W.4.e2Z.].^....\|....U:Z5s.{..y=.......q.O.HWeN..q^...}.swt.j]...J.......yi...u..>.,6.C....v..s....l[...h..X/.:A....]...F.H\..>y.r......E...$q.\......I...{..7k\|.!').s.?f>IF.$M.K.Y>=.pBM.].....}v...)K.].D.#.K..9?...^.=..;./,.W...m.......j.9..l..U.....M......LYM.YL...@.D.p.).17.Ao5^...b5.se...Q...f9-U.FI{J6..0..{.....d.=....\..e>V.x..2{\|..aX.U.{6...n.....{..IK).\....`;.,...@..................L..@..OYv..3+..qJ../....p..s.B.-Yt...5........~.\...L...0./r.\|....X-o.$..n.....^G.7.].\|.I.U\|..]..[B...X..h\|a0.}.Y..c7 ..._...p.!.v....~..>)GA.....q=...Q..C.....>.yG..I.{..#....yj7,.F......L_0.U.E.._g.C..1. ..r1..Re@.........UMo.2Q..x.....`...H}.#..2.+;i.....#Yz...O.....7.....%)..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\overview-sales[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x216, frames 3
Category:	downloaded
Size (bytes):	14453
Entropy (8bit):	7.957467083279071
Encrypted:	false
SSDEEP:	384:x0+C/vnAAbIqoK86Lxse5PUBvlPlfzZ5LbWpktaxOv:x0lXHZoK3LxTPildbLLCx0
MD5:	3F45BF4942C6A3078ED58520A304411F
SHA1:	0CF423EB5A2878A342FAAD852539C303BAAB9AF7
SHA-256:	EFA8FB529EE266F22585394BA9EA12359B5687B00AE9447F2E0C63BAA35B8E8D
SHA-512:	FCB5EF2C280B5E7048F7DBF8A562F351994B80A46E0AAF327D69AD0FA2225B7024118EA47F743A09C89719CF809BEAE9A12B361BA22D38658C3DF6A5C3A296D5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/splashpage/free-recordings/overview-sales.jpg
Preview:	......JFIF................................................................#"""#''''''''''..................................................!! !!''''''''''........h.."....................................................MM2k.....hvK.um.....f..L...,.....h..2.T.wwwwB..v.k.Wa!...;...Q+"..c.2G!p..'.........eYd...A...#!(..%..R...-.j.h2."=..G.g-=...'..v.y.Z.&..+..Q....H.T...w..1......[.._.....k...=B\^9....VQ..]f.~.F..._.T..#.4...\|....1z.9..UU....OI.aT...."U+Lls....r....g.Uf.gP.RL...hj.q........ha%..w....".D.....T...i9.U..)...Fff......)...=...l.5Y.TI.#...ELT..t...v^....e.....Vs\a38.2a.Ik:.S...N.E.\T3..a.CB...l.:Vyl<.....h..2...b.m....Uo.uF^....1...7..QP..[.g+.\.K.....H..L....:._\.(w[.s..ILB.P..?.\|.WjA..~,..R..DY.v..:...NNZ..d.....v.;...~QZ.S....I.<.:....PE.-.9.4S(....V..}.R...H;L..".N.%.).3G.9$.M..Rp..=..F.emj......]...5Z.${.C.\|...$.Q.(.oK8.s.......=..c..}b..77..QQ....8._B(..h.c.d6..a.....Z*@s-...gbbK.. .}1.%.ei.........z.....H$.uXN~C.T..e.'$..yiv...z~.Z.C

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\pl[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	211
Entropy (8bit):	4.968493373494678
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZDMjR4O8T8b9SqO8T88SDyWGqA:t9bibt03jMjqO8T8b9LO8T8L8qA
MD5:	930D0F69E331204E2A75A4B80071402B
SHA1:	0B41B726E2B19C443E890615BF876F789CA87BE7
SHA-256:	2BBB288002FC2C593F2280258941E80B475F18690157A82CF5A2C4D73303F3A5
SHA-512:	95E34208B9BEB4079C651A42411C9BDF478BFE2B3AA5D62A38DCBDDF9BDD91671751885F7FBCEA2BB7854779443FA7D6EE364C6CE418AEEBCFED9B267931AE38
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/pl.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m640 480.256h-640v-480.256h640z" fill="#fff"/><path d="m640 480.256h-640v-240.128h640z" fill="#dc143c"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\postmessage[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	553
Entropy (8bit):	4.85944423420938
Encrypted:	false
SSDEEP:	12:hYzk6wYfhAdD3ukoqGElK9JQNAPP94YzRXFqNrAShb1MF4NbAyGL:hYwMpAZ3ukVBAVH0NrAoG4Nkyu
MD5:	B55EEC2A58F017CF97523A6943C8814B
SHA1:	06F41167B22D690E6AD57C16440DEC37558AF6A5
SHA-256:	7CB6C118EC3898EA3CF8DB6F9D26F49CBE1ED8475E269B78D8162307B648B1AE
SHA-512:	6123E0B282D20616821735959A98A4416ABA8FFDE6F5448F65CE083AA7AB90D2229824752B0D31DDB2F6AC397444A9FCA1B2D5E9D87C91EAF5D02A34D30B7920
Malicious:	false
Reputation:	low
IE Cache URL:	https://accounts.livechatinc.com/static/postmessage.html
Preview:	<!DOCTYPE html>.<html>..<head>. <meta http-equiv="Content-type" content="text/html; charset=utf-8" />. <title>LiveChat customer auth</title>. <script>. var response = (location.hash \|\| location.search).replace(/^(\?\|#)/, '').split('&').map(function (pair) {. return pair.split('=').map(decodeURIComponent). }).reduce(function (obj, pair) {. obj[pair[0]] = pair[1]. return obj. }, {}). parent.postMessage(response, response.redirect_uri). </script>.</head>..<body></body>..</html>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\pt[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	27904
Entropy (8bit):	4.913284827584349
Encrypted:	false
SSDEEP:	192:0Zp1CWMq4pbuKsEvP0Sf2fyOU2U6XRlsyOU2U6XRl4yOU2U6XRloyOU2U6XRlvyI:TWlRKsEvP0Sf2O
MD5:	9D69DD0F8822BD100EAC257B6FC07DE8
SHA1:	4D66BCBF9717C1A6953117B85C50C50C495EA2C6
SHA-256:	FD0736D76F69F8FA8E37609AF7F7405C2DA604631ACFB4333AD0888611DBE66E
SHA-512:	CCDF11869416147EF81100C5419CFF879F6024FBB941E30FB810C375885374E0D040AEC6BBF3BFC9CB51227650D4D8622BF0CAFCC262FA021A063EA09E56EF1E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/pt.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="480" width="640" version="1"><defs><linearGradient id="b" y2="-5035.4" gradientUnits="userSpaceOnUse" y1="-5035.4" gradientTransform="matrix(.085 0 0 .142 -225.71 715.44)" x2="4203.4" x1="359.59"><stop offset="0"/><stop stop-color="#fff" offset="1"/></linearGradient><clipPath id="a"><path fill-opacity=".67" d="M-72.352 0h682.67v512h-682.67z"/></clipPath></defs><g clip-path="url(#a)"><path stroke="url(#b)" stroke-width="NaN" fill="#090" d="M-39.926.061h288.216v479.878h-288.216z"/><path fill-rule="evenodd" fill="#f00" d="M247.661 0h432.328v480h-432.328z"/><g fill-rule="evenodd"><g><path d="M232.82 182.763l-.858 18.012 121.441-11.297.858-18.012z"/><path fill="#efef00" d="M233.91 184.752l-.657 13.794 119.058-11.075.657-13.794z"/><g><path d="M232.186 179.025l-.282 5.912 122.666-11.411.282-5.912z"/><path fill="#efef00" d="M233.174 181.045l-.08 1.675 120.486-11.208.08-1.675z"/></g><g><path d="M231.248 198.731l-.282 5.912 122.666-11.411.282-5.912

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\radio-icon[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	693
Entropy (8bit):	4.319612843661123
Encrypted:	false
SSDEEP:	12:tykq3I2ir7OP7qbMsCMkIEWitRWitteNXErrSfs07/plLqM7CF29ci:tnq35gO7owMBEtJt1HSE0rvo22i
MD5:	8EBEA35533AA97D5D7BF9B8882792E74
SHA1:	B282B341775BE06F3BF37112FF7F1C217FF4983B
SHA-256:	96F9A8DC58B68AF5FCF4D9864777C356A1693A0368180CDE70EDD4671E9B21EF
SHA-512:	899B344340D6EE870D0F612BD7972B606C9E89B92483FA71A440F9438387A64BCF1108EACF3714E6B9AE99981F53EDC388F81D4C01F775F6F6D9B3241B9B4F52
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/features/radio-icon.svg
Preview:	<svg enable-background="new 0 0 40 40" viewBox="0 0 40 40" xmlns="http://www.w3.org/2000/svg"><path d="m36.7 40h-33.4c-1.8 0-3.3-1.5-3.3-3.3v-23.4c0-1.8 1.5-3.3 3.3-3.3h33.3c1.8 0 3.3 1.5 3.3 3.3v23.3c.1 1.9-1.4 3.4-3.2 3.4zm-8.7-2c3.9 0 7-3.1 7-7s-3.1-7-7-7-7 3.1-7 7 3.1 7 7 7zm-20 0c1.7 0 3-1.3 3-3s-1.3-3-3-3-3 1.3-3 3 1.3 3 3 3zm0-8c1.7 0 3-1.3 3-3s-1.3-3-3-3-3 1.3-3 3 1.3 3 3 3zm27-13.3c0-.9-.7-1.7-1.7-1.7h-16.3v5h-2v-5h-8.3c-1 0-1.7.8-1.7 1.7v3.3c.1 1 1 1.9 2 2h26c1-.1 1.9-1 2-2zm-27 16.3c1.1 0 2 .9 2 2s-.9 2-2 2-2-.9-2-2 .9-2 2-2zm9.9-30c-.7.6-1.8.5-2.4-.2s-.4-1.8.3-2.4 1.8-.5 2.4.2c.2.2.3.5.4.8l18.2 6.9h-4.8zm5.1 25h10v1h-10zm-1 2h12v1h-12zm1 2h10v1h-10z" fill="#2773a7"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\remote-desktop-icon[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	475
Entropy (8bit):	4.674001638336861
Encrypted:	false
SSDEEP:	12:tyq/CInXwrTiGA4qqWKXpL0HHlJyGGvIYA9ci:tj/CmXw/iGuqWc2FkGGQYA2i
MD5:	CB4897EF4530C44B9037856547487288
SHA1:	9518C494D1C18CC9854BA7BCD510B0ECCC5402A0
SHA-256:	BBB441EA84E6297012067CDBBBFCD6383753F20AB9317DC402C5453960CD5D55
SHA-512:	89A5DAA580AD68EB2B3D02DFFF31A1D52326122F25163AD7BCD759CD67C94D570D614193CD9A2450486C31B281687530BC49CB0085B1BDA5AFD15FE244BCF175
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/features/remote-desktop-icon.svg
Preview:	<svg enable-background="new 0 0 80 66" viewBox="0 0 80 66" xmlns="http://www.w3.org/2000/svg"><path d="m76 55h-43.3c-2.8 0-3.7-1.2-3.7-4v-7h-14.5l3.5-4v-4h11v-3h-25c-2.8 0-4-.8-4-3.7v-25.6c0-2.8 1.2-3.7 4-3.7h43.3c2.8 0 3.6.8 3.6 3.7v18.3h25.1c2.8 0 4 1.2 4 4v25c0 2.8-1.2 4-4 4zm-28-30v-22h-45v27h29v22h45v-27zm2.5 16.6-10.2-10.4 4.1-4.2 10.3 10.4 6.3-6.4v17h-17zm-13.3-13.5-10.3-10.4-6.9 6.3v-17h17l-6 6.5 10.2 10.4zm9.8 29.9h15v4l3.5 4h-21.9l3.4-4z" fill="#2773a7"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\remote[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	99273
Entropy (8bit):	5.4590592464133
Encrypted:	false
SSDEEP:	3072:VYYAad7dKGKaSDgpFNtExWvTQk11yrA1p3M709+y:SYAad7dKGvSDgHNtExWvTQk11yrA1p37
MD5:	7A6D88220220331EC792F4213EE2C95E
SHA1:	9C7231C687FD1A35F0A3EF1294962EDA9639E273
SHA-256:	2FCF7EF421D84BEB5CBF0D0BEF97CD80042CA542BDB0B4357E588C7D8068ACE4
SHA-512:	4240808EE654007F9EDC40F0700A5E181450847346C0A79850F9A2E68D7504AFEF56C60FB379DB156B1D2D2E844C46A510851AB3CDD9850EB66F55EBCD726DC0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.youtube.com/s/player/cb5bd7e6/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var fKa=function(a,b){return g.Lb(a,b)},F4=function(a,b,c){a.l.set(b,c)},G4=function(a){F4(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.Sa()).toString(36));.return a},H4=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.an(a.l,b,c)},gKa=function(a,b){var c=[];.g.aj(b,function(d){try{var e=g.Qn.prototype.l.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e?c.push(d):g.Pn(e)&&c.push(d)},a);.return c},hKa=function(a,b){b=gKa(a,b);.g.zb(b,function(c){g.Qn.prototype.remove.call(this,c)},a)},iKa=function(a){if(a.V){if(a.V.locationOverrideToken)return{locationOverrideToken:a.V.locationOverrideToken};.if(null!=a.V.latitudeE7&&null!=a.V.longitudeE7)return{latitudeE7:a.V.latitudeE7,longitudeE7:a.V.longitudeE7}}return null},jKa=function(a,b){g.fb(a,b)\|\|a.push(b)},I4=function(a){var b=0,c;.for(c in a)b++;return b},kKa=function(a,b){b=b instanceof

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\ro[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	261
Entropy (8bit):	4.92885431187618
Encrypted:	false
SSDEEP:	6:tI9mc4slhobibtAtMjR9+v/zGRaXPLWPk2LMXmMGRaXPLWPk23UMbqIGRaXPLWP/:t4nobibtAtMjf2GRa/LWP5QXmMGRa/Lr
MD5:	B8996E5A13CFF0E8D2068B81D057F4BA
SHA1:	683F125C51A54B5396FD1A0E5DA44601CAF5D192
SHA-256:	EF3D5E7BCB8EDE6B5E015967D005EF8F4C51CCC07E32CE2296D8A1E0E5BFF04C
SHA-512:	02D6E7CE9021AE3E5B70E236B8E30751A082A53680F51B289D99B580B5FA6584E7B92351719C40605CA1B2E267A39313ACAB1A60496936572D941916451322E5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/ro.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="480" width="640"><g fill-rule="evenodd"><path fill="#00319c" d="M0 0h213.32v480h-213.32z"/><path fill="#ffde00" d="M213.32 0h213.32v480h-213.32z"/><path fill="#de2110" d="M426.64 0h213.32v480h-213.32z"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\ru[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	250
Entropy (8bit):	4.91405191494628
Encrypted:	false
SSDEEP:	6:twobibt03mc4slZDMjR4tfSqNVLe5WOolaTzDaLAHA:t9bibt03jMjqpLH5Llp5
MD5:	1804440DB82EADAA3ECB276C54F20546
SHA1:	4BF961CE2CE43EDDE182AA9AA30C426DE2642242
SHA-256:	22625969602FA285783234C3CDD526420F11EA7F6B9D50A96E836A1BCB5380E6
SHA-512:	BAC9CDCD72B50B4502968120AD76539B8E70A845A38430A1354B78668FACA24DE6819763D281B5271BE6134FD9866158F887A86FD3CE57B1F3906C5A92D3DE4B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/general/flags/svg/4x3/ru.svg
Preview:	<svg height="480" width="640" xmlns="http://www.w3.org/2000/svg"><g fill-rule="evenodd"><path d="m0 0h640v480h-640z" fill="#fff"/><path d="m0 160.003h640v319.997h-640z" fill="#01017e"/><path d="m0 319.997h640v160.003h-640z" fill="#fe0101"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\screen-share-3[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 361x240, frames 3
Category:	downloaded
Size (bytes):	12538
Entropy (8bit):	7.945595117323787
Encrypted:	false
SSDEEP:	192:0LKUn087kt+lBD3+EkfPy6X5HkuYw93wMKURSF4nxURyFMsuV05LyGoLZ1+JT:0uUnZktWxmyWZYogdF4xzFMsr52PLX+F
MD5:	6152359E024FF14B012C9CD98AD94DC3
SHA1:	B2C9CF07A7753BA29110398CDFF6FA60EC8EDB3A
SHA-256:	316CE6AB65C891733389E8B6A7D37C4E8ED1F89C6058C69DBAF9976FB9CCFA1F
SHA-512:	63ACB41EA28D6E939CE1D4A8E1D0E98F3A31A37E5E4071E62318D73F9EBD729788A264F6A7AFDFA8D9363A7FC39B34C9D10621D488C795634ECC5C60AF678EA5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/screen_sharing/screen-share-3.jpg
Preview:	......JFIF................................................................#"""#''''''''''..................................................!! !!''''''''''........i..".................................................{D-...1k..!.=nQr.#F'.....\.$.YL..a....<...F=LP./.0.K)$....1.,.\.9.....X.I-j3.h.Y...`.1..&.U.f....o..9..$.L....,..]..1b.Y.c..!,K.,Y...X...1gb.I..KF.].9,].Qk.....bI0..fk.3.%..K...K..BL&..fw....&.....j..#..b...wfff,]...v..k.BZ.Y.....wr.X.<?)......$.I...`$K.I$........n.e..I$.,......I$.3...&.#.t}O;.....U..%Z..k.yj..].2..%.....\|.?+.}N..5...Ut9.\|."O[...j..Ce^........K>......\|.v.K#,..$2I!..!.I$.D.x.W....I.z...;....!;........;\|I......._k.\|.7..........L..^..z..e.~....d......}{.x..}..\|..?.....Q'....x:.h.....U.l_.0.....y~7...U..~..\|o.7.{.gv{....^.wb`H..i..K}...g0..Ym.4...._u....x+..1b.s9....~%...[~.:t..E..}....L...d.r.c.}...~6Fv..:t..F.....7.Jx.9..<.9..v.`.P...V.Z...}._u._.U.f..h.s.....j...a6.v.:...F...n..;.>z..*....f~.M....2..~.:...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\studio-icon[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	574
Entropy (8bit):	4.420469849889001
Encrypted:	false
SSDEEP:	12:tykq3Iwb4dC0EwyorLxfNMvJRBXTVg5X0mxGstHRmZ+VTd3NpnnYfXXxulK9ci:tnq3f48tSIdXTSJC+NpnnKHxulK2i
MD5:	559BD281DA522F12191BDD087337BC80
SHA1:	B4A2AD087B9AFB2DD6C48EA34F8E363B43C7C307
SHA-256:	34C3FD14235A3EA9FA46F84D53E12D0BFD07272653651F5DD5DE49DFD690704F
SHA-512:	C1A72681D5F32CD047EC88A5E98B5F03BB91FBF86E8AE748A9C4D96E7A5DAE161D3DCF274CE73C83A88B8A325EB2BB79771AF427522BBF4C52ED84C216F9591D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/global/features/studio-icon.svg
Preview:	<svg enable-background="new 0 0 40 40" viewBox="0 0 40 40" xmlns="http://www.w3.org/2000/svg"><path d="m31.2 0h-22.4c-5.6 0-8.8 4.2-8.8 9.8v21.5c0 5.5 3.3 8.7 8.8 8.7h22.3c5.6 0 8.9-3.2 8.9-8.8v-21.4c0-5.6-3.2-9.8-8.8-9.8zm2.8 23c0 4.6-3.4 9-8 9h-12c-4.6 0-8-4.4-8-9v-11c-.1-4.3 3.2-7.9 7.5-8h.5 12c4.3-.1 7.9 3.2 8 7.5v.5zm-8.8-11.2c0 2.6-2.1 4.7-4.7 4.7s-4.7-2.1-4.7-4.7 2.1-4.8 4.7-4.8c2.6 0 4.7 2.1 4.7 4.8zm2.8 14.2c.1 1.6-1.2 2.9-2.8 3-.1 0-.1 0-.2 0h-9c-1.6.1-2.9-1.2-3-2.8 0-.1 0-.1 0-.2v-5c-.1-1.6 1.2-2.9 2.8-3h.2 9c1.6-.1 2.9 1.2 3 2.8v.2z" fill="#2773a7"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\support-header[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2001x300, frames 3
Category:	downloaded
Size (bytes):	22650
Entropy (8bit):	7.9410348933171395
Encrypted:	false
SSDEEP:	384:igw2R/BUTtTvCkxzmKXNSVOqehZ8Adtfrr8NxQEGFvp8kqvtJd/PYC5iMnCq:f/mT9Ck9mKXNSwqeZQtGFh8kqvDd/Pl5
MD5:	C0DCF01ABE0E7FB40025B0852E48A459
SHA1:	A5D00D602541731DDEC30A56A45200FF068AB3CC
SHA-256:	58A0B02007F796475D9067EB81DCA9B631A2893482BE7559E8C0B0413EF401CA
SHA-512:	264DE8A238AA3714DFD228D7B7F97370F1F54AABF328A4D23081663919503C16854BC11BDE31F63C262888F22EA9E61C56A97D161399730C9619E17B4EEEEBD5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/support/support-header.jpg
Preview:	......JFIF............................................................ ..,+++,1111111111............................................!!..!!))())1111111111......,....".................................................B........T.J.P.R.(,.h.U.....m.V..WZ.wZ....Z..o[.u.kWWU.jt..R....P\.@.T.,....QJ.R.UUUU.UU.U........j.V.m..n.u...kZ.w..[..oZ...kZ...[S....PP.Z...G..W..._{..j....b.(QJ.UUU-UUUUU)JR........j.m....n..]kWZ.u.kz...kz...Z...V..w.J..1.....z.}g.t>k.....J..?......J.........(...(.)UJ-....m]Z..kZ....u..kz....Z..kz..w.m.O...&p.....y...>...N..}.T.......e*.T.T..UUUJQT.(..jR..[m.m....m...un...]n.z...k{oz.&..q..-QH"33....K...]...u..z..s.Q...B.PU(.R.R.U-R..U)J...TZ.m....m...WZ....j.Z....[...oZ.........k1.2.M.9....;.......^_.... G.....J)T.T.J....R.J.B..Qh......m...kWWZ...kZ...kz.....j.j.[o.O..g.....B#.n.S....r.x..[....}...}}. G.....J)UKT.J....R.J)AD..JU...m.[m...].]kZ....kz...q.tx...?..w.n........o.q..'G..^.G..:}./........?..........e..G..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	280385
Entropy (8bit):	5.188518197849046
Encrypted:	false
SSDEEP:	6144:e6pKvkZRwu1KAxkuDL3qyY5VrYe70KTRS22t++:e6wsZRwu1KAxkuDL3qyY5VrYe70KTRSz
MD5:	50ABCCC80969027C7A35D68D1F4641E0
SHA1:	A87059153A5ED995C99689684F7E7889DBDCD199
SHA-256:	C04F813B521C5B7CCAB6E5AEA4B479824FB7FD0F6FD60138B7A43DE2E492A8E9
SHA-512:	28347B3400A8EF2ED3F1F1EBC899E3BF8E2FBD2DD8B13C291A4DE563CF389F0789F2FA866CAE63B289415DA701B2306FB24B8E2E49AA935F13004F98249F077B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/assets/vendor_inside-c04f813b521c5b7ccab6e5aea4b479824fb7fd0f6fd60138b7a43de2e492a8e9.css
Preview:	/!. Bootstrap v3.3.5 (http://getbootstrap.com). * Copyright 2011-2015 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}h

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\zoom-logo[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 460 x 109, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4461
Entropy (8bit):	7.925431750061706
Encrypted:	false
SSDEEP:	96:E2kEmFgoYhE59uHSBhOSpgxr2axMfdNP8JiWtXi1+Z7okH1Duc8qW:E2FirGCmgUbM1NEQqy1+ZXDurqW
MD5:	6EA9D52C15852917FC0B4AA31EAF0913
SHA1:	3955D64FCDE70E8F3F20E646790CD1E0A3D53B33
SHA-256:	DA8C412F28F85C126DC6E61495DD9BDE2750A91AFDF8549C9B0BE2CE7CD9C673
SHA-512:	CA07AE577641D5D7F0C990E0224DA0A2427CF0386FC5C5D0ACDC622650DBB4F34DB870F106D1EE81CD56A41E52AC72A0A161D877CA1AC04F04236D771A867814
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.freeconferencecall.com/images/application_wide/video_conferencing/zoom-logo.png
Preview:	.PNG........IHDR.......m......2.K....PLTE...-..,..$..'..,..,.....,....,..%..+..,..,..,..,..,..,..,..,..(..,..,..,.......+..(..,..,..'..)..(.. ..+....,..+..)..,..+....+..+..+..+......,..+..-.........3tRNS...........T.f.........:.m!...%..F.v2.KA~..\P6.a..."...MIDATx..i..0...Q.....E.......vgvg...E.j.j..;..~.N..~...~..I.\....[...B'ts....z...yTmeS..#.Wit<\.O..U..j...S../g\.Y....... .....\.H.X-........e.o..H.....2..........R....T.z..j........zv}......{9....F.\o7.+..d.coxo..?...#5I.f..{.d.......q.......u..`....4.;...4...}5...L.}].....$u..]...z.Rz7...5..2...4.\.;.Y.+.b~ ..........>7..8.,.hkQG. Y4C!&.@f9Y.bC.Q.._.....T....q.....C..u..$....U..]3..Q .?.NC.3.......h.aXnu1.!F..E..Y.}4..}....7.f.7...3.......BW....V.-..-.D.O.Hy..R...m...+..l...UAy....n..".-.3..8S...x...e..\......IG._w0.SL..v[k]...Ag....~..~.K...Pp..fH.."..n.]...j.........1<...3.u."z-..fH....V.....9Y..*.[Lr..s..._..p.!YC)6..<.dvd9-...".f..e....it.x.I....Q~.rj.....6rym....8.o=.].a..

C:\Users\user\AppData\Local\Temp\~DF58153B5BE7C28D1E.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	0.27918767598683664
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9lRx/9lRJ9lTb9lTb9lSSU9lSSU9laAa/9laA:kBqoxxJhHWSVSEab
MD5:	AB889A32AB9ACD33E816C2422337C69A
SHA1:	1190C6B34DED2D295827C2A88310D10A8B90B59B
SHA-256:	4D6EC54B8D244E63B0F04FBE2B97402A3DF722560AD12F218665BA440F4CEFDA
SHA-512:	BD250855747BB4CEC61814D0E44F810156D390E3E9F120A12935EFDF80ACA33C4777AD66257CCA4E4003FEF0741692894980B9298F01C4CDD2D8A9C7BB522FB6
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFB5ECA03928DF698F.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	177311
Entropy (8bit):	1.808891557233971
Encrypted:	false
SSDEEP:	768:CeroWV6e+yWUBtOCb6GyCb67ROCb6jVZYAev9AevbAevnAevCCHggyNX85Uq5m6f:dHX85Uq5m65Uq5K1tqr
MD5:	AEC42A221D86DD128934BA70C095E31D
SHA1:	2575BA254128796FD6EC7B17CC57C0FF47FC942C
SHA-256:	78F4A99B1842C00EDB236881577EE8BAE307A9342163FDCF0BEC26323FD0ED48
SHA-512:	E98E8522F0EEFCB257A38B5A08C894FE227296649B4523CF172008ACFA2C33F0C374FD072A4A5EECC3AECCC5C64108DCAB71BB1D56AEEC0CE15AA5F948AB7AEF
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFD8DB5931168E419A.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	13029
Entropy (8bit):	0.4792351828594074
Encrypted:	false
SSDEEP:	12:c9lCg5/9lCgeK9l26an9l26an9l8fRm9l8fRW9lTqncVdFlLMmME:c9lLh9lLh9lIn9lIn9lom9loW9lWeTZB
MD5:	402235CA8E05F5E03FC7477DEEB46915
SHA1:	5AF8058BE5B7782280599AF5624F8BA96A3073FC
SHA-256:	BDB4C9E83C375D27F481577DB791B51422E8CCD12277F253761250155EF91769
SHA-512:	18BBC7E5A9D2BB09B8009A7D2066CFB0AEB0606C3538C8477B1DA7DDC426F847A9BF4B1A464489ADCC42BA8E1AD8A18AD1F53411DA00F8DE249C4C659C068BE8
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\B7FQIG7WRIN2O0MNR8NB.temp Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	5149
Entropy (8bit):	3.1843998642285936
Encrypted:	false
SSDEEP:	48:lSdiHPlIdC9GrIoRAsASFc9diHPlIdh683GrIoRAczc6diHPlIdx9GrIoRAV1H:llPl/9SxAJbYPl03SxA3dPl49SxAf
MD5:	236C0098D4EC09F1CC9B3C91BCCB373E
SHA1:	767DE9AD8D23B1745099297E23E4D84DEF37E377
SHA-256:	1ECD889B1A32841CCEEBEE3F8B511140A514A31639AFD8A53D15C6356A0DDAF3
SHA-512:	B51CB1AF558447B94FDE57E6133EA4C94442C31AEB614334D9AC4FA2C69F05C91356DF6A3FEC3D50CBA5752C0B2F293077FEA215FD1600AF766E30CB8ABB9518
Malicious:	false
Reputation:	low
Preview:	...................................FL..................F.@.. .....@.>........=....?.c................................P.O. .:i.....+00.../C:\.....................1.....>Q\u..PROGRA~1..t......L.>Q.u....E...............J......~..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....l.1......L.J..INTERN~1..T......L..Rf...............................i.n.t.e.r.n.e.t. .e.x.p.l.o.r.e.r.....f.2......L.9 .iexplore.exe..J......L.J.Rf......R..........x.............i.e.x.p.l.o.r.e...e.x.e.......^...............-.......]...........p..v.....C:\Program Files\internet explorer\iexplore.exe....-.p.r.i.v.a.t.e...C.:.\.W.i.n.d.o.w.s.\.S.Y.S.T.E.M.3.2.\.I.E.F.R.A.M.E...d.l.l.........%SystemRoot%\SYSTEM32\IEFRAME.dll...................................................................................................................................................................................................................................%.S.y.s.t.e.m.R.o.o.t.%.\.S.Y.S.T.E.M.3.2.\.I

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 29, 2021 09:43:11.704108000 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:11.704284906 CEST	49708	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:11.892698050 CEST	443	49708	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:11.892735004 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:11.892853022 CEST	49708	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:11.892937899 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:11.901110888 CEST	49708	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:11.901185989 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.088671923 CEST	443	49708	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.088711977 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.090920925 CEST	443	49708	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.090960026 CEST	443	49708	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.090993881 CEST	443	49708	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.091026068 CEST	49708	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.091048002 CEST	443	49708	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.091064930 CEST	49708	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.091082096 CEST	49708	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.091082096 CEST	443	49708	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.091170073 CEST	49708	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.092153072 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.092197895 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.092211008 CEST	49708	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.092236042 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.092273951 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.092293024 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.092307091 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.092334986 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.092363119 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.092500925 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.126552105 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.126871109 CEST	49708	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.132282019 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.132282972 CEST	49708	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.132431030 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.314745903 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.314790010 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.314829111 CEST	443	49708	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.314857006 CEST	443	49708	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.314950943 CEST	49708	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.315000057 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.315776110 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.316082001 CEST	49708	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.317418098 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.319787979 CEST	443	49708	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.319828987 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.319902897 CEST	49708	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.319907904 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:12.357239962 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.505183935 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:12.541027069 CEST	443	49708	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.093594074 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.093636990 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.093676090 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.093693018 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.093703985 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.093743086 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.093787909 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.093802929 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.093813896 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.093858004 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.093914032 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.093928099 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.093936920 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.093982935 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.094033957 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.094046116 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.094053030 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.094090939 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.094136000 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.094142914 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.284591913 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.284612894 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.284621954 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.284751892 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.284760952 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.350018978 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.350207090 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.398582935 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.398782969 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.399036884 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.399045944 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.540575981 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.540597916 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549469948 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549523115 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549546957 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549570084 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549582958 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.549588919 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.549608946 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549621105 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.549623966 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.549647093 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549669027 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549684048 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.549689054 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.549706936 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549731970 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549743891 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.549747944 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.549768925 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549792051 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549806118 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.549809933 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.549829960 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549853086 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549868107 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.549871922 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.549887896 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549911022 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549925089 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.549928904 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.549946070 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549969912 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.549985886 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.549989939 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.550005913 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.550025940 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.550045967 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.550050020 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.550801992 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.551064968 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.551090002 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.551135063 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.551150084 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.551187992 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.551192045 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.613157034 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.738694906 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.738717079 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.738734007 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.738749981 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.738765955 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.738781929 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.738806009 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.738823891 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.738840103 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.738850117 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.738854885 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.738876104 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.738892078 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.738903046 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.738915920 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.738933086 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.738943100 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.738955975 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.738974094 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.738984108 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.738986969 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739000082 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739017010 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739032984 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739046097 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739048958 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739061117 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739078999 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739088058 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739109993 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739115953 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739130974 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739147902 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739156961 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739161968 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739176035 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739192963 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739202023 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739206076 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739223957 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739231110 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739248037 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739274025 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739283085 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739286900 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739306927 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739325047 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739337921 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739348888 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739367962 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739373922 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739377022 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739392042 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739408016 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739412069 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739418983 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739432096 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739443064 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739458084 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739476919 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739483118 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739486933 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739506006 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739521980 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739538908 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739542961 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739550114 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739567995 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739576101 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739594936 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739614964 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739624977 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739628077 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739645004 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739660025 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739664078 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739675999 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.739717007 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.739721060 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.927644968 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.927680969 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.927710056 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.927736044 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.927762985 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.927783966 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.927793980 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.927819967 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.927850008 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.927864075 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.927871943 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.927902937 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.927937031 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.927951097 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.927958012 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.927984953 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928011894 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928030014 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928035975 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928059101 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928085089 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928103924 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928109884 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928128958 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928154945 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928173065 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928179026 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928205967 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928235054 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928251028 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928258896 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928286076 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928320885 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928334951 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928340912 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928369045 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928395033 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928414106 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928419113 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928438902 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928463936 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928482056 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928487062 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928507090 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928533077 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928553104 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928558111 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928580999 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928610086 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928626060 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928633928 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928662062 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928695917 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928709030 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928714991 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928744078 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928770065 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928788900 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928795099 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928821087 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928847075 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928868055 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928873062 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928890944 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928919077 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928932905 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928937912 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.928967953 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.928997993 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929013014 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929018974 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929043055 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929069042 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929088116 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929094076 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929111958 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929138899 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929162025 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929167986 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929188967 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929217100 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929238081 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929246902 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929269075 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929302931 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929316998 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929322958 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929351091 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929378033 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929408073 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929413080 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929416895 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929456949 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929483891 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929510117 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929538965 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929547071 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929560900 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929594994 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929610014 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929615974 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929641962 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929668903 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929687023 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929692030 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929713964 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929738998 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929758072 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929763079 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929780960 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929806948 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929826975 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929832935 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929857969 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929886103 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929903030 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929910898 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929939032 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929974079 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.929991007 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.929999113 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930027008 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930058002 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930075884 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930080891 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930104017 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930130959 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930150032 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930155993 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930176020 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930202961 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930218935 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930224895 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930248022 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930274010 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930293083 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930298090 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930319071 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930345058 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930366039 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930372000 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930389881 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930417061 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930435896 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930442095 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930466890 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930496931 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930516958 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930525064 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930548906 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930583000 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930604935 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930610895 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930644035 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930672884 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930691957 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930699110 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930720091 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930746078 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930772066 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930779934 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930805922 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930841923 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930856943 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930864096 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930898905 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930932045 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.930947065 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930955887 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.930998087 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.931037903 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:13.931056023 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.931063890 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:13.932565928 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.118653059 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.118693113 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.118730068 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.118817091 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.118835926 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.118840933 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.118864059 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.118897915 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.118911982 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.118943930 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.118963957 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.118995905 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119012117 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119040966 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119055986 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119086027 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119102001 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119143009 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119172096 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119208097 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119231939 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119265079 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119280100 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119307041 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119329929 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119363070 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119376898 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119409084 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119436979 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119468927 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119486094 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119512081 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119540930 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119574070 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119587898 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119616032 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119637966 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119671106 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119688988 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119719982 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119743109 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119761944 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119787931 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119831085 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119868040 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119903088 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.119916916 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119946003 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.119966030 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.120018959 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.120042086 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.120078087 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.120093107 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.120126009 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.120137930 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.120167971 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.120182991 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.120209932 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.120234966 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.120268106 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.120282888 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.120313883 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.120333910 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.120367050 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.120397091 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.120417118 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.120426893 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.120457888 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.120470047 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.120505095 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.669544935 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.670842886 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.671812057 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.705306053 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.724582911 CEST	49714	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.724658966 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.768155098 CEST	443	49714	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.768174887 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.768248081 CEST	49714	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.768322945 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.769049883 CEST	49714	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.769077063 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.812314034 CEST	443	49714	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.812338114 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.813123941 CEST	443	49714	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.813149929 CEST	443	49714	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.813170910 CEST	443	49714	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.813193083 CEST	49714	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.813239098 CEST	49714	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.814026117 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.814050913 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.814095020 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.814121962 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.814158916 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.821870089 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.822283030 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.822520018 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.822597980 CEST	49714	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.823035002 CEST	49714	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.828316927 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.857593060 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.857625008 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.857647896 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.857681990 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.857708931 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.857721090 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.857750893 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.857760906 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.857784986 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.857808113 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.857816935 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.857845068 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.857856989 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.857880116 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.857889891 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.857914925 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.857924938 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.857953072 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.857964039 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.857988119 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.857999086 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.858021021 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.858031034 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.858069897 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.858580112 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.858607054 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.858634949 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.858643055 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.858660936 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.858675957 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.858690023 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.858715057 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.858730078 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.858748913 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.858758926 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.858782053 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.858793974 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.858814955 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.858824968 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.858848095 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.858858109 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.858880043 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.858896017 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.858927011 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.858935118 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.858961105 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.858972073 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.858997107 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.859009027 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.859035015 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.859047890 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.859066010 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.859082937 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.859107018 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.859632015 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.859658003 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.859683037 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.859694958 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.859719992 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.859731913 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.859740019 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.859762907 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.859778881 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.859800100 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.859811068 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.859833956 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.859857082 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.859875917 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.859883070 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.859913111 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.859929085 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.859947920 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.859958887 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.859981060 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.860002995 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.860014915 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.860038996 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.860065937 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.860073090 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.860107899 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.860131025 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.860142946 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.865869999 CEST	443	49714	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.865950108 CEST	49714	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.866133928 CEST	443	49714	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.866192102 CEST	49714	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.868396044 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.868618011 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.868658066 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.868725061 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.868767023 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.870481968 CEST	49714	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.871036053 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.872364998 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.872390032 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.872412920 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.872436047 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.872447968 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.872457981 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.872481108 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.872492075 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.872503996 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.872510910 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.872530937 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.872546911 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.872559071 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.872579098 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.873613119 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.873636961 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.873661041 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.873683929 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.873692036 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.873716116 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.873753071 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.874721050 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.874744892 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.874825954 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.874845028 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.875837088 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.875861883 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.875916004 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.875940084 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.876971960 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.876991034 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.877087116 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:14.909193039 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909229040 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909250021 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909276009 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909290075 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909317017 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909332037 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909357071 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909374952 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909411907 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909424067 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909451962 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909463882 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909487963 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909497976 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909522057 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909533024 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909558058 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909565926 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909593105 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909605980 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909627914 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909635067 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909658909 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909667969 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909694910 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909703016 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909727097 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909738064 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909759998 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909770012 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909790039 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909801960 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909821033 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909831047 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909851074 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909862041 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909881115 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909889936 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909923077 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.909954071 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909980059 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.909992933 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910017014 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910027027 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910054922 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910067081 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910095930 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910103083 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910126925 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910137892 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910161972 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910172939 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910197020 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910206079 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910228968 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910238981 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910262108 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910273075 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910299063 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910306931 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910330057 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910340071 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910361052 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910370111 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910389900 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910401106 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910429955 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910437107 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910459995 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910489082 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910497904 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910501957 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910526991 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910537004 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910568953 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910588026 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910609007 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910625935 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910640001 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910650015 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910671949 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910681963 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910708904 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910732985 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910748005 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910754919 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910778999 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910804987 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:14.910852909 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910857916 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.910908937 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:14.955507040 CEST	443	49714	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:14.960171938 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.045675993 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.045727015 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.045778990 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.045809031 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.045855045 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.045893908 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.045913935 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.045947075 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.045985937 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.046041012 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.046056032 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.046089888 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.046123028 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.046165943 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.046185970 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.046217918 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.046255112 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.046304941 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.046319008 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.046353102 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.046386957 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.046436071 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.046448946 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.046482086 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.046516895 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.046570063 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.046583891 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.046617985 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.046653032 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.046704054 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.046716928 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.046751976 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.046785116 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.046834946 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.046849012 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.046880007 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.046916008 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.046966076 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.046979904 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.047014952 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.047049046 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.047101021 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.047116041 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.047147989 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.047182083 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.047231913 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.047245979 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.047276020 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.047314882 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.047358036 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.047378063 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.047410011 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.047449112 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.047498941 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.047513008 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.047544003 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.047593117 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.047641039 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.047653913 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.047684908 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.047713041 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.047750950 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.047781944 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.047800064 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.047851086 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.047898054 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.047915936 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.047946930 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.047977924 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.048026085 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.048041105 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.048074961 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.048122883 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.048172951 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.048186064 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.048217058 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.048243046 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.048288107 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.048300028 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.048331022 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.048355103 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.048393011 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.048409939 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.048444033 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.048465014 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.048511982 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.048526049 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.048559904 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.048588991 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.048640013 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.048666000 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.048721075 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.048743010 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.048796892 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.048811913 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.048846006 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.048887014 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.048950911 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.049026966 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.049082994 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.049097061 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.049129963 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.049165010 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.049220085 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.049232960 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.049267054 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.049302101 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.049355984 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.049369097 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.049451113 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.049504995 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.049545050 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.049562931 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.049595118 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.049638987 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.049688101 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.049700022 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.049735069 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.049756050 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.049801111 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.049819946 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.049855947 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.049873114 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.049901962 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.049928904 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.049977064 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.049993038 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.050024033 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.050074100 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.050134897 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.050158978 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.050196886 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.050214052 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.050245047 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.050281048 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.050321102 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.050339937 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.050370932 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.050405025 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.050442934 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.050460100 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.050491095 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.050520897 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.050561905 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.050580025 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.050611973 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.050646067 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.050692081 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.050703049 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.050738096 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.050757885 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.050793886 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.050808907 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.050838947 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.050860882 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.050910950 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.069210052 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.069259882 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.069300890 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.069319010 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.069333076 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.069366932 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.069405079 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.069459915 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.069472075 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.069509029 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.069533110 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.069570065 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.069585085 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.069617033 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.069648027 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.069700003 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.069711924 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.069756031 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.069773912 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.069823027 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.084440947 CEST	49716	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.084990978 CEST	49717	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.098408937 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.098453999 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.098500013 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.098511934 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.098526001 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.098546028 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.098597050 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.098638058 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.098650932 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.098680973 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.098707914 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.098747015 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.098763943 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.098797083 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:15.098808050 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.098845005 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:15.127738953 CEST	443	49716	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.127865076 CEST	49716	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.128241062 CEST	443	49717	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.128380060 CEST	49717	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.128973007 CEST	49716	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.129549026 CEST	49717	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.164607048 CEST	49720	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.164638042 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.172331095 CEST	443	49716	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.172776937 CEST	443	49717	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.173492908 CEST	443	49716	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.173537016 CEST	443	49716	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.173571110 CEST	443	49716	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.173574924 CEST	49716	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.173616886 CEST	49716	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.173620939 CEST	49716	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.174195051 CEST	443	49717	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.174237967 CEST	443	49717	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.174271107 CEST	443	49717	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.174283981 CEST	49717	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.174324036 CEST	49717	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.174962997 CEST	49717	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.178647041 CEST	49717	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.179317951 CEST	49717	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.179497004 CEST	49717	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.180540085 CEST	49716	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.182926893 CEST	49716	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.218777895 CEST	443	49721	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.218832016 CEST	443	49720	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.218941927 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.218983889 CEST	49720	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.220731974 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.220989943 CEST	49720	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.224469900 CEST	443	49717	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.224582911 CEST	443	49717	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.224641085 CEST	443	49717	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.224697113 CEST	49717	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.224728107 CEST	49717	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.225565910 CEST	49717	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.225589991 CEST	443	49716	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.225689888 CEST	49716	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.228100061 CEST	443	49716	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.228193045 CEST	49716	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.240178108 CEST	49716	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.274192095 CEST	443	49721	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.274230003 CEST	443	49720	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.274270058 CEST	443	49721	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.274317980 CEST	443	49721	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.274324894 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.274352074 CEST	443	49721	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.274364948 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.274389982 CEST	443	49720	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.274399996 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.274430037 CEST	443	49720	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.274458885 CEST	443	49720	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.274501085 CEST	49720	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.274519920 CEST	49720	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.274524927 CEST	49720	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.283423901 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.283792019 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.284216881 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.284627914 CEST	49720	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.285073996 CEST	49720	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.304286003 CEST	443	49717	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.304475069 CEST	49717	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:15.326396942 CEST	443	49716	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:15.336116076 CEST	443	49721	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.336152077 CEST	443	49721	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.336211920 CEST	443	49721	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.336211920 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.336232901 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.336257935 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.337034941 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.337291956 CEST	443	49721	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.337323904 CEST	443	49721	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.337357998 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.337363005 CEST	443	49721	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.337404966 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.337409973 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.337443113 CEST	443	49720	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.337481022 CEST	443	49720	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.337515116 CEST	49720	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.337553024 CEST	49720	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.337603092 CEST	443	49720	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.337654114 CEST	49720	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.337927103 CEST	49721	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.338351011 CEST	49720	443	192.168.2.5	66.102.1.157
Apr 29, 2021 09:43:15.392527103 CEST	443	49721	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.396667957 CEST	443	49720	66.102.1.157	192.168.2.5
Apr 29, 2021 09:43:15.634840965 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.635627985 CEST	49729	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.687103033 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.687279940 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.687916994 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.688299894 CEST	443	49729	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.688440084 CEST	49729	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.689026117 CEST	49729	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.740019083 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.741198063 CEST	443	49729	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.761733055 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.761759043 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.761775970 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.761976957 CEST	443	49729	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.762002945 CEST	443	49729	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.762005091 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.762018919 CEST	443	49729	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.762139082 CEST	49729	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.762204885 CEST	49729	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.766470909 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.766843081 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.767067909 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.770428896 CEST	49729	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.770808935 CEST	49729	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.818830013 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.818979979 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.818995953 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.819068909 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.819118977 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.821830988 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.821955919 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.822573900 CEST	443	49729	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.822590113 CEST	443	49729	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.822655916 CEST	49729	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.822715998 CEST	49729	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.823014975 CEST	443	49729	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.823084116 CEST	49729	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.825310946 CEST	49729	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.825521946 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.849540949 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.849579096 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.849634886 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.849678993 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.849786997 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.849813938 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.849847078 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.849868059 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.854438066 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:15.882103920 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.883090019 CEST	443	49729	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:15.908627033 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:16.118956089 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:16.186857939 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.186909914 CEST	49736	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.231534958 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.231560946 CEST	443	49736	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.231650114 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.231692076 CEST	49736	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.232311964 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.232466936 CEST	49736	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.275072098 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.275109053 CEST	443	49736	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.275629997 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.275670052 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.275701046 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.275738001 CEST	443	49736	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.275774956 CEST	443	49736	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.275804996 CEST	443	49736	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.276228905 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.277506113 CEST	49736	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.285717964 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.285928965 CEST	49736	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.286113977 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.286263943 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.286408901 CEST	49736	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.311717033 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:16.311834097 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:16.329458952 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.329485893 CEST	443	49736	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.329499960 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.329515934 CEST	443	49736	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.329531908 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.329541922 CEST	443	49736	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.329552889 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.329564095 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.329749107 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.329793930 CEST	49736	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.330001116 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.330122948 CEST	443	49736	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.330143929 CEST	443	49736	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.330235958 CEST	49736	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.330452919 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.330559969 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.330564976 CEST	49736	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.330648899 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.330688953 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.330718994 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.330734015 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.330748081 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.330796003 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.330806017 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.330828905 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.331130981 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.331872940 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.331913948 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.331953049 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.331973076 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.332484961 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.332526922 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.332580090 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.332633972 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.333678007 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.333713055 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.333838940 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.333858013 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.335079908 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.335118055 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.335145950 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.335186005 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.335212946 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.335216999 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.335222006 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.335278988 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.336503983 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.336546898 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.336589098 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.336610079 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.337450981 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.337495089 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.337548018 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.337565899 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.338258982 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.338285923 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.338335037 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.338349104 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.360697985 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.404989004 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.405330896 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.405365944 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.405410051 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.405432940 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.405440092 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.405452967 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.405471087 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.405478001 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.405482054 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.405519009 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.407097101 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.407125950 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.407149076 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.407170057 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.407207012 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.407227993 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.407248974 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.409168959 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.409192085 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.409209013 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.409228086 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.409281969 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.409305096 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.410120010 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.410141945 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.410218954 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.411544085 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.411567926 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.411628008 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.411674023 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.412738085 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.412774086 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.412811995 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.412925005 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.412950993 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.412967920 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.412996054 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.413196087 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.414362907 CEST	443	49736	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.414398909 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.414428949 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.414489031 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.414525032 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.414690971 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.414720058 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.414746046 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.414748907 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.414772987 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.414776087 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.414791107 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.414799929 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.414819002 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.414825916 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.414846897 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.414865017 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.418735981 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.418778896 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.418829918 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.418865919 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.419308901 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.419351101 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.419375896 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.419403076 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.419790983 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.419859886 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.420003891 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.420059919 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.420687914 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.420717955 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.420814037 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.421777964 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.421808004 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.421823978 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.421833992 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.421847105 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.421860933 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.421871901 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.421912909 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.423494101 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.423561096 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.424160004 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.424195051 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.424227953 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.424227953 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.424266100 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.424283981 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.424386024 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.424431086 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.424794912 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.424853086 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.424873114 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.424885035 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.424905062 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.424927950 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.426553965 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.426628113 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.426685095 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.426764011 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.448865891 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.448898077 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.448959112 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.448982954 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.449038982 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.449064970 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.449095964 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.449122906 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.449434996 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.449455976 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.449517965 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.449528933 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.449870110 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.449888945 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:16.449930906 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.449942112 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:16.578342915 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.578448057 CEST	49738	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.632193089 CEST	443	49738	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.632210016 CEST	443	49737	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.632302046 CEST	49738	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.632345915 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.633166075 CEST	49738	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.633460045 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.685633898 CEST	443	49738	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.685648918 CEST	443	49737	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.685662985 CEST	443	49738	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.685734987 CEST	49738	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.685822010 CEST	443	49738	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.685836077 CEST	443	49738	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.685884953 CEST	49738	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.685909986 CEST	49738	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.687684059 CEST	443	49737	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.687715054 CEST	443	49737	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.687722921 CEST	443	49737	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.687783957 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.687815905 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.697057962 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.697125912 CEST	49738	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.697669983 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.697865963 CEST	49738	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.697889090 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.749571085 CEST	443	49737	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.749597073 CEST	443	49737	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.749634027 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.749654055 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.749687910 CEST	443	49738	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.750631094 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.750941038 CEST	443	49737	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.750967979 CEST	443	49738	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.750993967 CEST	443	49738	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.751029968 CEST	443	49737	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.751033068 CEST	49738	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.751051903 CEST	49738	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.751064062 CEST	443	49737	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.751077890 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.751115084 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.752995968 CEST	49738	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:16.846486092 CEST	443	49737	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:16.846518040 CEST	443	49738	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:19.514780998 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:19.564719915 CEST	443	49737	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:19.568650961 CEST	443	49737	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:19.568722010 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:25.723494053 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:25.774923086 CEST	443	49737	141.226.228.48	192.168.2.5
Apr 29, 2021 09:43:25.775033951 CEST	49737	443	192.168.2.5	141.226.228.48
Apr 29, 2021 09:43:28.144252062 CEST	49747	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:28.331640005 CEST	443	49747	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:28.331772089 CEST	49747	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:28.334340096 CEST	49747	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:28.521841049 CEST	443	49747	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:28.525146008 CEST	443	49747	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:28.525173903 CEST	443	49747	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:28.525190115 CEST	443	49747	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:28.525202990 CEST	443	49747	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:28.525204897 CEST	49747	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:28.525211096 CEST	443	49747	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:28.525335073 CEST	49747	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:28.531816006 CEST	49747	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:28.719991922 CEST	443	49747	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:28.720292091 CEST	49747	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:28.737927914 CEST	49747	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:28.925832033 CEST	443	49747	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:28.925908089 CEST	49747	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:33.120641947 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:33.345539093 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:34.080868959 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:34.080943108 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:34.080950975 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:34.080998898 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:34.081013918 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:34.081037998 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:34.081047058 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:34.081079006 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:34.081087112 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:34.081119061 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:34.081127882 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:34.081156969 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:34.081170082 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:34.081197023 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:34.081208944 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:34.081237078 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:34.081252098 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:34.081281900 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:34.081285000 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:34.081334114 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:34.269048929 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:34.269119024 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:34.269159079 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:34.269186974 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:34.269195080 CEST	443	49707	12.7.192.60	192.168.2.5
Apr 29, 2021 09:43:34.269224882 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:34.269234896 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:34.269253016 CEST	49707	443	192.168.2.5	12.7.192.60
Apr 29, 2021 09:43:34.660204887 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:34.703823090 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:34.704813957 CEST	443	49715	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:34.704988956 CEST	49715	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:34.787430048 CEST	49717	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:34.846335888 CEST	49753	443	192.168.2.5	141.226.224.32
Apr 29, 2021 09:43:34.847220898 CEST	49754	443	192.168.2.5	141.226.224.32
Apr 29, 2021 09:43:34.873270988 CEST	443	49717	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:34.898060083 CEST	443	49717	151.101.1.44	192.168.2.5
Apr 29, 2021 09:43:34.898170948 CEST	49717	443	192.168.2.5	151.101.1.44
Apr 29, 2021 09:43:34.968638897 CEST	443	49753	141.226.224.32	192.168.2.5
Apr 29, 2021 09:43:34.968739033 CEST	49753	443	192.168.2.5	141.226.224.32
Apr 29, 2021 09:43:34.969204903 CEST	443	49754	141.226.224.32	192.168.2.5
Apr 29, 2021 09:43:34.969305038 CEST	49754	443	192.168.2.5	141.226.224.32
Apr 29, 2021 09:43:34.969490051 CEST	49753	443	192.168.2.5	141.226.224.32
Apr 29, 2021 09:43:34.970078945 CEST	49754	443	192.168.2.5	141.226.224.32
Apr 29, 2021 09:43:34.996540070 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:35.048377991 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:35.076478004 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:35.076515913 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:35.076597929 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:35.076627970 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:35.077889919 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:35.077963114 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:35.078069925 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:35.078114033 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:35.079590082 CEST	49728	443	192.168.2.5	172.217.19.98
Apr 29, 2021 09:43:35.091618061 CEST	443	49753	141.226.224.32	192.168.2.5
Apr 29, 2021 09:43:35.091914892 CEST	443	49754	141.226.224.32	192.168.2.5
Apr 29, 2021 09:43:35.092171907 CEST	443	49753	141.226.224.32	192.168.2.5
Apr 29, 2021 09:43:35.092195034 CEST	443	49753	141.226.224.32	192.168.2.5
Apr 29, 2021 09:43:35.092209101 CEST	443	49753	141.226.224.32	192.168.2.5
Apr 29, 2021 09:43:35.092231989 CEST	443	49754	141.226.224.32	192.168.2.5
Apr 29, 2021 09:43:35.092252970 CEST	443	49754	141.226.224.32	192.168.2.5
Apr 29, 2021 09:43:35.092272043 CEST	443	49754	141.226.224.32	192.168.2.5
Apr 29, 2021 09:43:35.092295885 CEST	49753	443	192.168.2.5	141.226.224.32
Apr 29, 2021 09:43:35.092397928 CEST	49754	443	192.168.2.5	141.226.224.32
Apr 29, 2021 09:43:35.092720032 CEST	49753	443	192.168.2.5	141.226.224.32
Apr 29, 2021 09:43:35.108653069 CEST	49753	443	192.168.2.5	141.226.224.32
Apr 29, 2021 09:43:35.108675003 CEST	49754	443	192.168.2.5	141.226.224.32
Apr 29, 2021 09:43:35.109447002 CEST	49754	443	192.168.2.5	141.226.224.32
Apr 29, 2021 09:43:35.128895998 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.135701895 CEST	443	49728	172.217.19.98	192.168.2.5
Apr 29, 2021 09:43:35.169795990 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.169938087 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.170126915 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.170188904 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.170218945 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.170263052 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.170423031 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.170458078 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.170490980 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.170490980 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.170525074 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.170542002 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.171375036 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.171411037 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.171442032 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.171452045 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.171508074 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.172225952 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.172269106 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.172280073 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.172306061 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.172327042 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.172354937 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.173108101 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.173150063 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.173161983 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.173191071 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.173192978 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.173248053 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.174042940 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.174088955 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.174101114 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.174124956 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.174128056 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.174165964 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.174917936 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.174978971 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.175194979 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.175235033 CEST	443	49735	31.13.92.14	192.168.2.5
Apr 29, 2021 09:43:35.175241947 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.175276995 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.201467037 CEST	49735	443	192.168.2.5	31.13.92.14
Apr 29, 2021 09:43:35.231236935 CEST	443	49753	141.226.224.32	192.168.2.5
Apr 29, 2021 09:43:35.231323957 CEST	443	49754	141.226.224.32	192.168.2.5
Apr 29, 2021 09:43:35.231372118 CEST	49753	443	192.168.2.5	141.226.224.32

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 29, 2021 09:43:02.762459993 CEST	65307	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:02.811048031 CEST	53	65307	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:03.285156012 CEST	64344	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:03.333874941 CEST	53	64344	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:03.526051044 CEST	62060	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:03.574819088 CEST	53	62060	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:04.483844042 CEST	61805	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:04.536127090 CEST	53	61805	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:04.939249992 CEST	54795	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:04.996251106 CEST	53	54795	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:05.289874077 CEST	49557	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:05.338782072 CEST	53	49557	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:06.400679111 CEST	61733	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:06.452229023 CEST	53	61733	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:07.785657883 CEST	65447	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:07.837142944 CEST	53	65447	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:08.858639002 CEST	52441	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:08.911139011 CEST	53	52441	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:10.200807095 CEST	62176	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:10.252268076 CEST	53	62176	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:10.479907990 CEST	59596	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:10.537817001 CEST	53	59596	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:11.323337078 CEST	65296	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:11.386881113 CEST	53	65296	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:11.620212078 CEST	63183	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:11.683643103 CEST	53	63183	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:12.746299982 CEST	60151	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:12.795053959 CEST	53	60151	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:13.368544102 CEST	56969	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:13.402867079 CEST	55161	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:13.428440094 CEST	53	56969	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:13.474826097 CEST	53	55161	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:14.670161963 CEST	54757	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:14.721961975 CEST	53	54757	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:15.033555984 CEST	49992	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:15.069756985 CEST	60075	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:15.082057953 CEST	53	49992	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:15.113327980 CEST	55016	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:15.132525921 CEST	53	60075	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:15.161983967 CEST	53	55016	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:15.202914000 CEST	64345	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:15.268596888 CEST	53	64345	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:15.531426907 CEST	57128	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:15.535794020 CEST	54791	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:15.566251993 CEST	50463	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:15.580169916 CEST	53	57128	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:15.615735054 CEST	53	54791	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:15.633296967 CEST	53	50463	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:15.647841930 CEST	58530	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:15.647906065 CEST	50394	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:15.696376085 CEST	53	58530	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:15.711911917 CEST	53	50394	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:16.125969887 CEST	53813	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:16.131139040 CEST	63732	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:16.177155972 CEST	53	53813	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:16.184866905 CEST	53	63732	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:16.501866102 CEST	57344	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:16.576479912 CEST	53	57344	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:16.623698950 CEST	54450	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:16.685328007 CEST	53	54450	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:16.811604023 CEST	59261	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:16.866235018 CEST	53	59261	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:17.195293903 CEST	57151	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:17.257358074 CEST	53	57151	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:17.658740044 CEST	59413	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:17.688061953 CEST	60516	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:17.717325926 CEST	53	59413	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:17.752563000 CEST	53	60516	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:28.061470032 CEST	51649	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:28.110508919 CEST	53	51649	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:32.679728985 CEST	65086	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:32.739789963 CEST	53	65086	8.8.8.8	192.168.2.5
Apr 29, 2021 09:43:34.795944929 CEST	56432	53	192.168.2.5	8.8.8.8
Apr 29, 2021 09:43:34.844750881 CEST	53	56432	8.8.8.8	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Apr 29, 2021 09:43:11.620212078 CEST	192.168.2.5	8.8.8.8	0x483	Standard query (0)	www.freeconferencecall.com	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:14.670161963 CEST	192.168.2.5	8.8.8.8	0x513d	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.033555984 CEST	192.168.2.5	8.8.8.8	0x2c8b	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.069756985 CEST	192.168.2.5	8.8.8.8	0x5ce6	Standard query (0)	cdn.livechatinc.com	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.113327980 CEST	192.168.2.5	8.8.8.8	0x1c9	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.535794020 CEST	192.168.2.5	8.8.8.8	0x7f46	Standard query (0)	www.google.de	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.566251993 CEST	192.168.2.5	8.8.8.8	0x5d96	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.647906065 CEST	192.168.2.5	8.8.8.8	0xc895	Standard query (0)	secure.livechatinc.com	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:16.131139040 CEST	192.168.2.5	8.8.8.8	0xe825	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:16.501866102 CEST	192.168.2.5	8.8.8.8	0xb697	Standard query (0)	trc-events.taboola.com	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:17.658740044 CEST	192.168.2.5	8.8.8.8	0xb6cd	Standard query (0)	api.livechatinc.com	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:17.688061953 CEST	192.168.2.5	8.8.8.8	0x1a21	Standard query (0)	accounts.livechatinc.com	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:28.061470032 CEST	192.168.2.5	8.8.8.8	0x6720	Standard query (0)	www.freeconferencecall.com	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:34.795944929 CEST	192.168.2.5	8.8.8.8	0x70f1	Standard query (0)	cds.taboola.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Apr 29, 2021 09:43:11.683643103 CEST	8.8.8.8	192.168.2.5	0x483	No error (0)	www.freeconferencecall.com	freeconferencecall.com		CNAME (Canonical name)	IN (0x0001)
Apr 29, 2021 09:43:11.683643103 CEST	8.8.8.8	192.168.2.5	0x483	No error (0)	freeconferencecall.com		12.7.192.60	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:14.721961975 CEST	8.8.8.8	192.168.2.5	0x513d	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Apr 29, 2021 09:43:14.721961975 CEST	8.8.8.8	192.168.2.5	0x513d	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:14.721961975 CEST	8.8.8.8	192.168.2.5	0x513d	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:14.721961975 CEST	8.8.8.8	192.168.2.5	0x513d	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:14.721961975 CEST	8.8.8.8	192.168.2.5	0x513d	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.082057953 CEST	8.8.8.8	192.168.2.5	0x2c8b	No error (0)	trc.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Apr 29, 2021 09:43:15.082057953 CEST	8.8.8.8	192.168.2.5	0x2c8b	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.082057953 CEST	8.8.8.8	192.168.2.5	0x2c8b	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.082057953 CEST	8.8.8.8	192.168.2.5	0x2c8b	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.082057953 CEST	8.8.8.8	192.168.2.5	0x2c8b	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.132525921 CEST	8.8.8.8	192.168.2.5	0x5ce6	No error (0)	cdn.livechatinc.com	cdn.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Apr 29, 2021 09:43:15.161983967 CEST	8.8.8.8	192.168.2.5	0x1c9	No error (0)	stats.g.doubleclick.net	stats.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Apr 29, 2021 09:43:15.161983967 CEST	8.8.8.8	192.168.2.5	0x1c9	No error (0)	stats.l.doubleclick.net		66.102.1.157	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.161983967 CEST	8.8.8.8	192.168.2.5	0x1c9	No error (0)	stats.l.doubleclick.net		66.102.1.155	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.161983967 CEST	8.8.8.8	192.168.2.5	0x1c9	No error (0)	stats.l.doubleclick.net		66.102.1.156	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.161983967 CEST	8.8.8.8	192.168.2.5	0x1c9	No error (0)	stats.l.doubleclick.net		66.102.1.154	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.615735054 CEST	8.8.8.8	192.168.2.5	0x7f46	No error (0)	www.google.de		172.217.20.3	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.633296967 CEST	8.8.8.8	192.168.2.5	0x5d96	No error (0)	googleads.g.doubleclick.net		172.217.19.98	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:15.711911917 CEST	8.8.8.8	192.168.2.5	0xc895	No error (0)	secure.livechatinc.com	secure.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Apr 29, 2021 09:43:16.184866905 CEST	8.8.8.8	192.168.2.5	0xe825	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Apr 29, 2021 09:43:16.184866905 CEST	8.8.8.8	192.168.2.5	0xe825	No error (0)	scontent.xx.fbcdn.net		31.13.92.14	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:16.576479912 CEST	8.8.8.8	192.168.2.5	0xb697	No error (0)	trc-events.taboola.com	am-trc-events.taboola.com		CNAME (Canonical name)	IN (0x0001)
Apr 29, 2021 09:43:16.576479912 CEST	8.8.8.8	192.168.2.5	0xb697	No error (0)	am-trc-events.taboola.com	am-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)
Apr 29, 2021 09:43:16.576479912 CEST	8.8.8.8	192.168.2.5	0xb697	No error (0)	am-vip001.taboola.com		141.226.228.48	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:17.717325926 CEST	8.8.8.8	192.168.2.5	0xb6cd	No error (0)	api.livechatinc.com	api.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Apr 29, 2021 09:43:17.752563000 CEST	8.8.8.8	192.168.2.5	0x1a21	No error (0)	accounts.livechatinc.com	accounts.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Apr 29, 2021 09:43:28.110508919 CEST	8.8.8.8	192.168.2.5	0x6720	No error (0)	www.freeconferencecall.com	freeconferencecall.com		CNAME (Canonical name)	IN (0x0001)
Apr 29, 2021 09:43:28.110508919 CEST	8.8.8.8	192.168.2.5	0x6720	No error (0)	freeconferencecall.com		12.7.192.60	A (IP address)	IN (0x0001)
Apr 29, 2021 09:43:34.844750881 CEST	8.8.8.8	192.168.2.5	0x70f1	No error (0)	cds.taboola.com		141.226.224.32	A (IP address)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Apr 29, 2021 09:43:12.091048002 CEST	12.7.192.60	443	192.168.2.5	49708	CN=www.freeconferencecall.com, O=Free Conferencing Corporation, L=Long Beach, ST=California, C=US, SERIALNUMBER=C2877349, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=US CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Thu Oct 01 02:34:55 CEST 2020 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Tue Nov 02 01:34:55 CET 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Apr 29, 2021 09:43:12.092273951 CEST	12.7.192.60	443	192.168.2.5	49707	CN=www.freeconferencecall.com, O=Free Conferencing Corporation, L=Long Beach, ST=California, C=US, SERIALNUMBER=C2877349, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=US CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Thu Oct 01 02:34:55 CEST 2020 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Tue Nov 02 01:34:55 CET 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Apr 29, 2021 09:43:14.813170910 CEST	151.101.1.44	443	192.168.2.5	49714	CN=*.taboola.com, O="Taboola, Inc", L=New York, ST=New York, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Nov 25 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020	Mon Dec 27 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:14.813170910 CEST	151.101.1.44	443	192.168.2.5	49714	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:14.814095020 CEST	151.101.1.44	443	192.168.2.5	49715	CN=*.taboola.com, O="Taboola, Inc", L=New York, ST=New York, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Nov 25 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020	Mon Dec 27 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:14.814095020 CEST	151.101.1.44	443	192.168.2.5	49715	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:15.173571110 CEST	151.101.1.44	443	192.168.2.5	49716	CN=*.taboola.com, O="Taboola, Inc", L=New York, ST=New York, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Nov 25 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020	Mon Dec 27 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:15.173571110 CEST	151.101.1.44	443	192.168.2.5	49716	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:15.174271107 CEST	151.101.1.44	443	192.168.2.5	49717	CN=*.taboola.com, O="Taboola, Inc", L=New York, ST=New York, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Nov 25 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020	Mon Dec 27 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:15.174271107 CEST	151.101.1.44	443	192.168.2.5	49717	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:15.274317980 CEST	66.102.1.157	443	192.168.2.5	49721	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 23 09:18:56 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 15 10:18:55 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:15.274317980 CEST	66.102.1.157	443	192.168.2.5	49721	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:15.274430037 CEST	66.102.1.157	443	192.168.2.5	49720	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 23 09:18:56 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 15 10:18:55 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:15.274430037 CEST	66.102.1.157	443	192.168.2.5	49720	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:15.761759043 CEST	172.217.19.98	443	192.168.2.5	49728	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 23 09:18:56 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 15 10:18:55 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:15.761759043 CEST	172.217.19.98	443	192.168.2.5	49728	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:15.762002945 CEST	172.217.19.98	443	192.168.2.5	49729	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 23 09:18:56 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 15 10:18:55 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:15.762002945 CEST	172.217.19.98	443	192.168.2.5	49729	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:16.275701046 CEST	31.13.92.14	443	192.168.2.5	49735	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Apr 06 02:00:00 CEST 2021 Tue Oct 22 14:00:00 CEST 2013	Sun Jul 04 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:16.275701046 CEST	31.13.92.14	443	192.168.2.5	49735	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:16.275804996 CEST	31.13.92.14	443	192.168.2.5	49736	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Apr 06 02:00:00 CEST 2021 Tue Oct 22 14:00:00 CEST 2013	Sun Jul 04 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:16.275804996 CEST	31.13.92.14	443	192.168.2.5	49736	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:16.685822010 CEST	141.226.228.48	443	192.168.2.5	49738	CN=*.taboola.com, O="Taboola, Inc", L=New York, ST=New York, C=US CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Nov 25 01:00:00 CET 2020 Wed Sep 23 02:00:00 CEST 2020	Mon Dec 27 00:59:59 CET 2021 Mon Sep 23 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:16.685822010 CEST	141.226.228.48	443	192.168.2.5	49738	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 23 02:00:00 CEST 2020	Mon Sep 23 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:16.687715054 CEST	141.226.228.48	443	192.168.2.5	49737	CN=*.taboola.com, O="Taboola, Inc", L=New York, ST=New York, C=US CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Nov 25 01:00:00 CET 2020 Wed Sep 23 02:00:00 CEST 2020	Mon Dec 27 00:59:59 CET 2021 Mon Sep 23 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:16.687715054 CEST	141.226.228.48	443	192.168.2.5	49737	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 23 02:00:00 CEST 2020	Mon Sep 23 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:28.525202990 CEST	12.7.192.60	443	192.168.2.5	49747	CN=www.freeconferencecall.com, O=Free Conferencing Corporation, L=Long Beach, ST=California, C=US, SERIALNUMBER=C2877349, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=US CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Thu Oct 01 02:34:55 CEST 2020 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Tue Nov 02 01:34:55 CET 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0	37f463bf4616ecd445d4a1937da06e19
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Apr 29, 2021 09:43:35.092195034 CEST	141.226.224.32	443	192.168.2.5	49753	CN=*.taboola.com, O="Taboola, Inc", L=New York, ST=New York, C=US CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Nov 25 01:00:00 CET 2020 Wed Sep 23 02:00:00 CEST 2020	Mon Dec 27 00:59:59 CET 2021 Mon Sep 23 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:35.092195034 CEST	141.226.224.32	443	192.168.2.5	49753	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 23 02:00:00 CEST 2020	Mon Sep 23 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:35.092252970 CEST	141.226.224.32	443	192.168.2.5	49754	CN=*.taboola.com, O="Taboola, Inc", L=New York, ST=New York, C=US CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Nov 25 01:00:00 CET 2020 Wed Sep 23 02:00:00 CEST 2020	Mon Dec 27 00:59:59 CET 2021 Mon Sep 23 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 29, 2021 09:43:35.092252970 CEST	141.226.224.32	443	192.168.2.5	49754	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 23 02:00:00 CEST 2020	Mon Sep 23 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 4124 Parent PID: 792

General

Start time:	09:43:09
Start date:	29/04/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff77a930000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: iexplore.exe PID: 3060 Parent PID: 4124

General

Start time:	09:43:10
Start date:	29/04/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4124 CREDAT:17410 /prefetch:2
Imagebase:	0xc80000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Disassembly

Reset < >

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Network device logs, Network intrusion detection system, Packet capture, Process use of network, SSL/TLS inspection, Web proxy
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report https://www.freeconferencecall.com/support?utm_source=calldr&utm_medium=email&utm_campaign=smart7

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

Phishing:

Compliance:

Networking:

System Summary:

HIPS / PFW / Operating System Protection Evasion:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 4124 Parent PID: 792

General

Chronological Activities

Analysis Process: iexplore.exe PID: 3060 Parent PID: 4124

General

Chronological Activities

Disassembly