Create Interactive Tour

Windows Analysis Report https://www.varomoney.com/apply-simple-card/?utm_source=google&utm_medium=cpc&gclid=Cj0KCQjw2tCGBhCLARIsABJGmZ7qAVR3iTtfCGyMPfjgJ6wMf4a_9wV-zdKLQQW6Rh3qkNrHfKFJ4UEaArggEALw_wcB

Overview

General Information

Sample URL:	https://www.varomoney.com/apply-simple-card/?utm_source=google&utm_medium=cpc&gclid=Cj0KCQjw2tCGBhCLARIsABJGmZ7qAVR3iTtfCGyMPfjgJ6wMf4a_9wV-zdKLQQW6Rh3qkNrHfKFJ4UEaArggEALw_wcB
Analysis ID:	440143
Infos:
Most interesting Screenshot:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

iexplore.exe (PID: 6692 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 6764 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6692 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 104.16.95.65:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.95.65:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.70:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.70:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.162:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.162:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.98.33:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.94.161:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.94.161:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.98.33:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.248.118.22:443 -> 192.168.2.4:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.248.118.22:443 -> 192.168.2.4:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.227:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.137.59.185:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.227:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.137.59.185:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.226.184:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.226.184:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.181:443 -> 192.168.2.4:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.181:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.200.122.11:443 -> 192.168.2.4:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.200.122.11:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.70:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.70:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.254.108.170:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.254.108.170:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.242.21:443 -> 192.168.2.4:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.242.21:443 -> 192.168.2.4:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.99.83:443 -> 192.168.2.4:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.99.83:443 -> 192.168.2.4:49815 version: TLS 1.2

Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon- elementor-repeater-item-1473c52" href="https://www.linkedin.com/company/varobank" target="_blank" rel="nofollow" aria-label="LinkedIn"> equals www.linkedin.com (Linkedin)
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon- elementor-repeater-item-58d3480" href="https://www.facebook.com/varomoney/" target="_blank" rel="nofollow" aria-label="Facebook"> equals www.facebook.com (Facebook)
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon- elementor-repeater-item-7c907f8" href="https://www.youtube.com/varomoney" target="_blank" rel="nofollow" aria-label="Youtube"> equals www.youtube.com (Youtube)
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon- elementor-repeater-item-e74521c" href="https://www.twitter.com/varobank" target="_blank" rel="nofollow" aria-label="Twitter"> equals www.twitter.com (Twitter)
Source: autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997[1].js.2.dr	String found in binary or memory: (function(a){window.ShareLink=function(b,c){var d,e={},f=function(a){var b=a.substr(0,e.classPrefixLength);return b===e.classPrefix?a.substr(e.classPrefixLength):null},g=function(a){d.on("click",function(){h(a)})},h=function(a){var b="";if(e.width&&e.height){var c=screen.width/2-e.width/2,d=screen.height/2-e.height/2;b="toolbar=0,status=0,width="+e.width+",height="+e.height+",top="+d+",left="+c}var f=ShareLink.getNetworkLink(a,e),g=/^https?:\/\//.test(f),h=g?"":"_self";open(f,h,b)},i=function(){a.each(b.classList,function(){var a=f(this);if(a)return g(a),!1})},j=function(){a.extend(e,ShareLink.defaultSettings,c),["title","text"].forEach(function(a){e[a]=e[a].replace("#","")}),e.classPrefixLength=e.classPrefix.length},k=function(){d=a(b)};(function(){j(),k(),i()})()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text}\x20{url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}\n{text}\n{url}",xing:"https://www.xing.com/app/user?op=share&url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}\n{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(a,b){var c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,c){return b[c]\|\|""});if("email"===a){if(-1<b.title.indexOf("&")\|\|-1<b.text.indexOf("&")){var d={text:b.text.replace(/&/g,"%26"),title:b.title.replace(/&/g,"%26"),url:b.url};c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,b){return d[b]})}return c.indexOf("?subject=&body")&&(c=c.replace("subject=&","")),c}return c},a.fn.shareLink=function(b){return this.each(function(){a(this).data("shareLink",new ShareLink(this,b))})}})(jQuery); equals www.facebook.com (Facebook)
Source: autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997[1].js.2.dr	String found in binary or memory: (function(a){window.ShareLink=function(b,c){var d,e={},f=function(a){var b=a.substr(0,e.classPrefixLength);return b===e.classPrefix?a.substr(e.classPrefixLength):null},g=function(a){d.on("click",function(){h(a)})},h=function(a){var b="";if(e.width&&e.height){var c=screen.width/2-e.width/2,d=screen.height/2-e.height/2;b="toolbar=0,status=0,width="+e.width+",height="+e.height+",top="+d+",left="+c}var f=ShareLink.getNetworkLink(a,e),g=/^https?:\/\//.test(f),h=g?"":"_self";open(f,h,b)},i=function(){a.each(b.classList,function(){var a=f(this);if(a)return g(a),!1})},j=function(){a.extend(e,ShareLink.defaultSettings,c),["title","text"].forEach(function(a){e[a]=e[a].replace("#","")}),e.classPrefixLength=e.classPrefix.length},k=function(){d=a(b)};(function(){j(),k(),i()})()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text}\x20{url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}\n{text}\n{url}",xing:"https://www.xing.com/app/user?op=share&url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}\n{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(a,b){var c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,c){return b[c]\|\|""});if("email"===a){if(-1<b.title.indexOf("&")\|\|-1<b.text.indexOf("&")){var d={text:b.text.replace(/&/g,"%26"),title:b.title.replace(/&/g,"%26"),url:b.url};c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,b){return d[b]})}return c.indexOf("?subject=&body")&&(c=c.replace("subject=&","")),c}return c},a.fn.shareLink=function(b){return this.each(function(){a(this).data("shareLink",new ShareLink(this,b))})}})(jQuery); equals www.linkedin.com (Linkedin)
Source: autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997[1].js.2.dr	String found in binary or memory: (function(a){window.ShareLink=function(b,c){var d,e={},f=function(a){var b=a.substr(0,e.classPrefixLength);return b===e.classPrefix?a.substr(e.classPrefixLength):null},g=function(a){d.on("click",function(){h(a)})},h=function(a){var b="";if(e.width&&e.height){var c=screen.width/2-e.width/2,d=screen.height/2-e.height/2;b="toolbar=0,status=0,width="+e.width+",height="+e.height+",top="+d+",left="+c}var f=ShareLink.getNetworkLink(a,e),g=/^https?:\/\//.test(f),h=g?"":"_self";open(f,h,b)},i=function(){a.each(b.classList,function(){var a=f(this);if(a)return g(a),!1})},j=function(){a.extend(e,ShareLink.defaultSettings,c),["title","text"].forEach(function(a){e[a]=e[a].replace("#","")}),e.classPrefixLength=e.classPrefix.length},k=function(){d=a(b)};(function(){j(),k(),i()})()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text}\x20{url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}\n{text}\n{url}",xing:"https://www.xing.com/app/user?op=share&url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}\n{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(a,b){var c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,c){return b[c]\|\|""});if("email"===a){if(-1<b.title.indexOf("&")\|\|-1<b.text.indexOf("&")){var d={text:b.text.replace(/&/g,"%26"),title:b.title.replace(/&/g,"%26"),url:b.url};c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,b){return d[b]})}return c.indexOf("?subject=&body")&&(c=c.replace("subject=&","")),c}return c},a.fn.shareLink=function(b){return this.each(function(){a(this).data("shareLink",new ShareLink(this,b))})}})(jQuery); equals www.twitter.com (Twitter)
Source: autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997[1].js.2.dr	String found in binary or memory: (function(a){window.ShareLink=function(b,c){var d,e={},f=function(a){var b=a.substr(0,e.classPrefixLength);return b===e.classPrefix?a.substr(e.classPrefixLength):null},g=function(a){d.on("click",function(){h(a)})},h=function(a){var b="";if(e.width&&e.height){var c=screen.width/2-e.width/2,d=screen.height/2-e.height/2;b="toolbar=0,status=0,width="+e.width+",height="+e.height+",top="+d+",left="+c}var f=ShareLink.getNetworkLink(a,e),g=/^https?:\/\//.test(f),h=g?"":"_self";open(f,h,b)},i=function(){a.each(b.classList,function(){var a=f(this);if(a)return g(a),!1})},j=function(){a.extend(e,ShareLink.defaultSettings,c),["title","text"].forEach(function(a){e[a]=e[a].replace("#","")}),e.classPrefixLength=e.classPrefix.length},k=function(){d=a(b)};(function(){j(),k(),i()})()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text}\x20{url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}\n{text}\n{url}",xing:"https://www.xing.com/app/user?op=share&url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}\n{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(a,b){var c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,c){return b[c]\|\|""});if("email"===a){if(-1<b.title.indexOf("&")\|\|-1<b.text.indexOf("&")){var d={text:b.text.replace(/&/g,"%26"),title:b.title.replace(/&/g,"%26"),url:b.url};c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,b){return d[b]})}return c.indexOf("?subject=&body")&&(c=c.replace("subject=&","")),c}return c},a.fn.shareLink=function(b){return this.each(function(){a(this).data("shareLink",new ShareLink(this,b))})}})(jQuery); equals www.vkontakte.ru (VKontakte)
Source: identity[1].js.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsGetTier");e.exports=function(b,c){c=a(c);c=c==null?"www.facebook.com":"www."+c+".facebook.com";return"https://"+c+"/signals/iwl.js?pixel_id="+b}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}};e.exports=new h(function(d,e){function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=function(){n.removeItem(m),a.close()};e.src=i(c,g.ENDPOINT);b.body&&b.body.appendChild(e)}var o=!1,p=function(a){return!!(e&&e.pixelsByID&&Object.prototype.hasOwnProperty.call(e.pixelsByID,a))};function q(){if(o)return;var b=n.getItem(m);if(!b)return;b=JSON.parse(b);var c=b.pixelID,d=b.graphToken,e=b.sessionStartTime;o=!0;h(c,function(){var b=p(c)?c:null;a.FacebookIWL.init(b,d,e)})}function r(b){if(o)return;h(b,func

Source: unknown

DNS traffic detected: queries for: www.varomoney.com

Source: autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://davidwalsh.name/vendor-prefix
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://dev.apollodata.com/core/fragments.html#unique-names
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://docs.python.org/library/uuid.html
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://es5.github.io/#x15.9.1.1
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://fb.me/prop-types-in-prod
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://github.com/garycourt/murmurhash-js
Source: autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997[1].js.2.dr	String found in binary or memory: http://jquery.org/license
Source: autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997[1].js.2.dr	String found in binary or memory: http://jqueryui.com
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://jsperf.com/array-join-vs-for
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://jsperf.com/element-style-object-access-vs-plain-object
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://pajhome.org.uk/crypt/md5
Source: tv2track[1].js.2.dr	String found in binary or memory: http://piwik.org
Source: tv2track[1].js.2.dr	String found in binary or memory: http://piwik.org/free-software/bsd/
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://reactcommunity.org/react-transition-group/transition#Transition-prop-appear)
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://sites.google.com/site/murmurhash/
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://stackoverflow.com/questions/105034/how-to-create-a-guid-uuid-in-javascript/2117523#2117523
Source: axp3kyh[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9ad13a
Source: axp3kyh[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9ad13e
Source: axp3kyh[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9ad13f
Source: axp3kyh[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000077359d4f
Source: axp3kyh[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000077359d51
Source: axp3kyh[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000077359d55
Source: axp3kyh[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000077359d58
Source: axp3kyh[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000077359d5a
Source: axp3kyh[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000077359d5c
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://wiki.whatwg.org/wiki/Crypto
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://www.movable-type.co.uk/scripts/sha1.html
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://www.unicode.org/reports/tr35/tr35-31/tr35-dates.html#Date_Format_Patterns
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: http://www.unicode.org/reports/tr35/tr35-31/tr35-dates.html#Date_Format_tokens
Source: ~DF3B41B50DAC1616BA.TMP.1.dr	String found in binary or memory: https://10191186.fls.doubleclick.net/activityi;src=10191186;type=pagel0;cat=remar0;ord=9266459530101
Source: iframe[1].htm.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/activity/src=10959376;type=invmedia;cat=varom00;dc_lat=;dc_rdid=;tag_
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://addons.mozilla.org/en-US/firefox/addon/apollo-developer-tools/
Source: gtm[2].js.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity
Source: gtm[2].js.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: analytics[1].js.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://api.w.org/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://apps.apple.com/us/app/id1517676784
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://babeljs.io/docs/en/babel-plugin-transform-template-literals#loose
Source: {9577A48C-D523-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://bank.varomoney
Source: autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997[1].js.2.dr	String found in binary or memory: https://bank.varomoney.com/
Source: imagestore.dat.2.dr	String found in binary or memory: https://bank.varomoney.com/favicon.png
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://bank.varomoney.com/login
Source: ~DF3B41B50DAC1616BA.TMP.1.dr, autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997[1].js.2.dr, apply-simple-card[1].htm.2.dr	String found in binary or memory: https://bank.varomoney.com/signup
Source: ~DF3B41B50DAC1616BA.TMP.1.dr	String found in binary or memory: https://bank.varomoney.com/signupmple-card/?utm_source=google&utm_medium=cpc&gclid=Cj0KCQjw2tCGBhCLA
Source: f[1].txt.2.dr	String found in binary or memory: https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://blog.date-fns.org/post/unicode-tokens-in-date-fns-v2-sreatyki91jg)
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://blueimp.net
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=820541
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3056
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3175#c4
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=4118
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=559561.
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://caniuse.com/#feat=referrer-policy
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://caniuse.com/#search=appearance
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://caniuse.com/#search=client%20hint
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://caniuse.com/#search=color-adjust
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://caniuse.com/#search=composedPath.
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://caniuse.com/#search=keyframes
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://caniuse.com/#search=mask
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://caniuse.com/#search=multicolumn
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://caniuse.com/#search=overscroll-behavior
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://caniuse.com/#search=scroll-snap
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://caniuse.com/#search=text-orientation
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://caniuse.com/#search=transform
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://caniuse.com/#search=transition
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://caniuse.com/#search=user-select
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://caniuse.com/#search=writing-mode
Source: gtm[2].js.2.dr, js[1].js.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://cdn.optimizely.com/datafiles/%s.json
Source: signup[1].htm.2.dr	String found in binary or memory: https://cdn.segment.com/analytics.js/v1/
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://chrome.google.com/webstore/detail/
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://codesandbox.io/s/button-keyup-preventdefault-dn7f0
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://commonmark.org/).
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://config.optimizely.com/datafiles/auth/%s.json
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://css-tricks.com/snippets/css/a-guide-to-flexbox/
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://css-tricks.com/snippets/css/force-vertical-scrollbar/
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://date-fns.org/docs/Locale
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://date-fns.org/docs/getISOWeekYear
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://date-fns.org/docs/getWeekYear
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://date-fns.org/docs/setISOWeekYear
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://date-fns.org/docs/setWeekYear
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://date-fns.org/docs/toDate
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://develop.sentry.dev/sdk/envelopes/
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/DOMError
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/DOMException
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/Headers/get
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/InputEvent/inputType
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/repeat
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/PromiseRejectionEvent
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/globalThis#browser_
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://developers.google.com/web/updates/2018/03/cssom
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://docs.angularjs.org/api/ngAnimate)
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://docs.google.com/spreadsheets/d/e/2PACX-1vQOPU3xUhplll6dyoMmVUXHKl_8CRDs6_ueLmex3SoqwhuolkuN3
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom-view/#dom-window-scroll
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://esbench.com/bench/5bfee68a4cd7e6009ef61d23
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://expressjs.com/en/advanced/best-practice-performance.html#set-node_env-to-production
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://facebook.github.io/react/docs/forms.html#controlled-components
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://faq.varomoney.com/hc/en-us
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://fb.me/react-polyfills
Source: signup[1].htm.2.dr	String found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: icon[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v92/flUhRq6tzZclQEJ-Vdg-IuiaDsNa.woff)
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://getbootstrap.com/docs/4.3/layout/grid/
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://git.io/fjule
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://git.io/fxCyr
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/Compass/compass/blob/master/core/stylesheets/compass/typography/_units.scss
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/DefinitelyTyped/DefinitelyTyped/issues/18051
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/DieterHolvoet/event-propagation-path/blob/master/propagationPath.js
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/FezVrasta/popper.js/issues/373).
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/FezVrasta/popper.js/pull/715
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/KyleAMathews/convert-css-length
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/LiosK/UUID.js
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/blob/master/LICENSE
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/blob/master/feature-detects/history.js
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/ReactTraining/history/pull/289
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/STORIS/react-scrollbar-size.
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/WICG/focus-visible/blob/v4.1.5/src/focus-visible.js
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/alitaheri/normalize-scroll-left
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/angular/angular.js/pull/13945/files
Source: api[1].js0.2.dr	String found in binary or memory: https://github.com/antoinevastel/picasso-like-canvas-fingerprinting
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/apollographql/invariant-packages)
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/benlesh/symbol-observable
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/blueimp/JavaScript-MD5
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/cssinjs/jss
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/cssinjs/jss/blob/4e6a05dd3f7b6572fdd3ab216861d9e446c20331/src/utils/createGenerat
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/cssinjs/jss/issues/1045
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/cssinjs/jss/issues/242
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/date-fns/date-fns/blob/master/docs/upgradeGuide.md#Common-Changes).
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/date-fns/date-fns/issues/37
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/date-fns/date-fns/issues/376
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/dmtrKovalenko/material-ui-pickers/pull/267
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/facebook/flow/issues/2696
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/facebook/flow/issues/3258
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/facebook/flow/issues/4441
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/facebook/react/blob/15a8f031838a553e41c0b66eb1bcf1da8448104d/packages/react/src/R
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/11401#issuecomment-340543801.
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/14099#issuecomment-440013892
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/14476#issuecomment-471199055
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/20074
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/7769
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/getsentry/raven-js/issues/1233
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/getsentry/raven-js/issues/838
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript/issues/1168
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript/issues/1949
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript/issues/2043
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript/issues/2380
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript/issues/2572.
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript/issues/2590.
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript/issues/3207.
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript/issues/3234
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript/issues/838
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/getsentry/sentry/blob/9f08305e09866c8bd6d0c24f5b0aabdd7dd6c59c/src/sentry/lang/ja
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/getsentry/sentry/blob/master/src/sentry/lang/javascript/processor.py#L67
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/graphql/graphql-js/issues/2203
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/graphql/graphql-js/issues/2317
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/graphql/graphql-js/issues/2618
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/graphql/graphql-spec/blob/master/spec/Section%207%20--%20Response.md#errors
Source: autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997[1].js.2.dr	String found in binary or memory: https://github.com/kobizz/dialogs-manager/blob/master/LICENSE.txt
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/kossnocorp
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/kristoferjoseph/flexboxgrid/blob/master/src/css/flexboxgrid.css
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/laverdet/node-fibers/blob/ddebed9b8ae3883e57f822e2108e6943e5c8d2a8/fibers.js#L97-
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/leshakoss
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/material-components/material-components-web/blob/ac46b8863c4dab9fc22c4c662dc6bd1b
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/material-components/material-components-web/blob/be8747f94574669cb5e7add1a7c54fa4
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/28884
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/mui-org/material-ui/pull/17315#issuecomment-528286677
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/occ/TraceKit
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/oliviertassinari/react-swipeable-views/blob/7666de1dba253b896911adf2790ce51467670
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/othree/jquery.rtl-scroll-type
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/pillarjs/path-to-regexp/blob/master/index.js#L202
Source: tv2track[1].js.2.dr	String found in binary or memory: https://github.com/piwik/piwik/blob/master/js/piwik.js
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/postcss/autoprefixer/issues/177
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/postcss/autoprefixer/issues/324.
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/postcss/autoprefixer/issues/491
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/reactjs/react-router/issues/586
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/reactjs/react-transition-group)
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/reactjs/react-transition-group/blob/5007303e729a74be66a21c3e2205e4916821524b/src/
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/roylee0704/react-flexbox-grid
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/thinkloop/multi-key-cache
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/1d6e3710dd447de1a200f29e8fa521f8a0908f70/scss/_functions.scss
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/3ffe3a5d82f6f561b82ff78d82b32a7d14aed558/js/src/modal.js#L512
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/8fccaa2439e97ec72a4b7dc42ccc1f649790adb0/scss/mixins/_grid.sc
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/uuidjs/uuid
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/uuidjs/uuid#getrandomvalues-not-supported
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/uuidjs/uuid/pull/434
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: ~DF3B41B50DAC1616BA.TMP.1.dr	String found in binary or memory: https://gwmtracking.com/p/v/1/60774678f870814fc686df02/format/iframe?
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/interaction.html#focus-fixup-rule.
Source: ~DF3B41B50DAC1616BA.TMP.1.dr	String found in binary or memory: https://insight.adsrvr.org/track/up?adv=3xtt5ac&ref=https%3A%2F%2Fwww.varomoney.com%2Fapply-simple-c
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://logx.optimizely.com/v1/events
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://material-ui.com/production-error/?code=
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://material.angularjs.org/latest/layout/introduction
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://material.google.com/motion/duration-easing.html#duration-easing-natural-easing-curves
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://material.io/design/layout/understanding-layout.html#usage
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://material.io/design/typography/the-type-system.html
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://material.io/design/typography/understanding-typography.html
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://material.io/guidelines/motion/duration-easing.html#duration-easing-common-durations
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://meyerweb.com/eric/thoughts/2006/02/08/unitless-line-heights/
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://opensource.org/licenses/MIT
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://p.typekit.net/p.css?s=1&k=axp3kyh&ht=tk&f=14032.14033.14034.14035.14036.14037.26909.26913.26
Source: gtm[2].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: gtm[2].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.varomoney.bank
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://popper.js.org/docs/v1/)
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://react-bootstrap.github.io/react-overlays/#modals).
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://reactcommunity.org/react-transition-group/css-transition)
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://reactcommunity.org/react-transition-group/transition)
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://reactjs.org/docs/forwarding-refs.html#forwarding-refs-in-higher-order-components
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://reactjs.org/docs/higher-order-components.html#static-methods-must-be-copied-over
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://reactjs.org/docs/hooks-faq.html#how-do-i-implement-getderivedstatefromprops
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://reactjs.org/docs/hooks-reference.html#usestate)
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://schema.org
Source: signup[1].htm.2.dr	String found in binary or memory: https://secure.varomoney.com/web/
Source: signup[1].htm.2.dr	String found in binary or memory: https://secure.varomoney.com/web/assets/images/varo-og-image.png
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://secure.varomoney.com/web/login
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://semver.org/#is-there-a-suggested-regular-expression-regex-to-check-a-semver-string
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://stackoverflow.com/a/24394376
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://stackoverflow.com/questions/41328728/force-casting-in-flow
Source: apply-simple-card[1].htm.2.dr, signup[1].htm.2.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js
Source: analytics[1].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://support.varomoney.com/hc/en-us
Source: analytics[1].js.2.dr, f[1].txt.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://tools.ietf.org/html/rfc3986#appendix-B
Source: ~DF3B41B50DAC1616BA.TMP.1.dr	String found in binary or memory: https://tr.snapchat.com/cm/i?pid=4e616fe5-0f3a-40e5-831b-8555b737971a
Source: autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997[1].js.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/3f03c1/00000000000000003b9ad13e/27/a?primer=7fa3915bdafdf03041871920a205b
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/3f03c1/00000000000000003b9ad13e/27/d?primer=7fa3915bdafdf03041871920a205b
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/3f03c1/00000000000000003b9ad13e/27/l?primer=7fa3915bdafdf03041871920a205b
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/63d81f/000000000000000077359d5a/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/63d81f/000000000000000077359d5a/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/63d81f/000000000000000077359d5a/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/669c64/00000000000000003b9ad13f/27/a?primer=7fa3915bdafdf03041871920a205b
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/669c64/00000000000000003b9ad13f/27/d?primer=7fa3915bdafdf03041871920a205b
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/669c64/00000000000000003b9ad13f/27/l?primer=7fa3915bdafdf03041871920a205b
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/8e3d9f/000000000000000077359d58/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/8e3d9f/000000000000000077359d58/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/8e3d9f/000000000000000077359d58/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/951aca/000000000000000077359d51/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/951aca/000000000000000077359d51/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/951aca/000000000000000077359d51/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/a798a9/000000000000000077359d55/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/a798a9/000000000000000077359d55/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/a798a9/000000000000000077359d55/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/ab3e12/000000000000000077359d4f/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/ab3e12/000000000000000077359d4f/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/ab3e12/000000000000000077359d4f/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/e10446/00000000000000003b9ad13a/27/a?primer=7fa3915bdafdf03041871920a205b
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/e10446/00000000000000003b9ad13a/27/d?primer=7fa3915bdafdf03041871920a205b
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/e10446/00000000000000003b9ad13a/27/l?primer=7fa3915bdafdf03041871920a205b
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/e4f1f2/000000000000000077359d5c/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/e4f1f2/000000000000000077359d5c/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: axp3kyh[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/e4f1f2/000000000000000077359d5c/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://use.typekit.net/axp3kyh.css
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://varomoney.responsibledisclosure.com/hc/en-us
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://webpack.js.org/guides/production/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.google-analytics.com/
Source: js[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: gtm[2].js.2.dr	String found in binary or memory: https://www.google.com
Source: f[2].txt.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/875159847/?random
Source: gtm[2].js.2.dr	String found in binary or memory: https://www.google.com/pagead/conversion_async.js
Source: f[2].txt.2.dr	String found in binary or memory: https://www.google.de/pagead/1p-user-list/875159847/?random
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: gtm[2].js.2.dr, js[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: gtm[2].js.2.dr, f[1].txt.2.dr, js[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-175071274-1
Source: apply-simple-card[1].htm.2.dr, signup[1].htm.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: signup[1].htm.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=DUMMY_KEY
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-PXLSRB3
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.instagram.com/varobank/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.linkedin.com/company/varobank
Source: autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997[1].js.2.dr	String found in binary or memory: https://www.pinterest.com/pin/create/button/?url=
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.twitter.com/varobank
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://www.unicode.org/reports/tr35/tr35-dates.html#Date_Field_Symbol_Table
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://www.unicode.org/reports/tr35/tr35-dates.html#Date_Field_Symbol_Table).
Source: {9577A48C-D523-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.varomoney.
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/#logo
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/#organization
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/#website
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/?p=50116
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/?s=
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/about-us/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/ach-transfer/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/apply-simple-card/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/apply-simple-card/#breadcrumb
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/apply-simple-card/#primaryimage
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/apply-simple-card/#webpage
Source: ~DF3B41B50DAC1616BA.TMP.1.dr, {9577A48C-D523-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.varomoney.com/apply-simple-card/?utm_source=google&utm_medium=cpc&gclid=Cj0KCQjw2tCGBhCL
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/bank-account/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/banks-near-me/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/become-a-partner/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/careers/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/cash-advance/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/comments/feed/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/cra/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/credit-builder/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/debit-card/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/direct-deposit/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/fdic-insurance/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/feed/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/online-checking-account/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/policies/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/press/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/saving-account-rates/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/savings-account/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/savings-calculator/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/second-chance-banking/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/sitemap/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/tax-refund/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.eot?5.10.0);sr
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.svg?5.10.0#eic
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.ttf?5.10.0)
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0)
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff?5.10.0)
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads//2020/09/varo-money-app-icon-1.svg
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads//2020/09/varo-money-app-icon.svg
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2019/11/varo-money-logo.jpg
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2020/06/cropped-favicon-lg-2-180x180.png
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2020/06/cropped-favicon-lg-2-192x192.png
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2020/06/cropped-favicon-lg-2-270x270.png
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2020/06/cropped-favicon-lg-2-32x32.png
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2020/06/cropped-favicon-lg-2-32x32.png7
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2020/09/Logo.svg
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2020/09/varo-money-app-icon-1.svg
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2020/09/varo-money-app-icon.svg
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2020/11/Group-5661.svg
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2020/11/varo-bank-logo-1.svg
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2020/11/varo-logo-black.svg
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/01/paid-landing-wallet.svg
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/02/banks-near-me-hero-2x.png
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/02/banks-near-me-hero.png
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/02/how-cashback-works.svg
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/02/mobile-banking-t8.jpg
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/02/mobile-banking-t9-150x150.jpg
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/02/mobile-banking-t9-300x300.jpg
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/02/mobile-banking-t9-96x96.jpg
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/02/mobile-banking-t9.jpg
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/02/paid-landing-notification-1-150x46.png
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/02/paid-landing-notification-1-300x93.png
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/02/paid-landing-notification-1.png
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/02/paid-landing-notification-2x-1.png
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/02/paid-landing-phone-screen-1-150x276.png
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/02/paid-landing-phone-screen-1-163x300.png
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/02/paid-landing-phone-screen-1.png
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/2021/02/paid-landing-phone-screen-2x-1.png
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/autoptimize/css/autoptimize_0bb4f5dec8c6ffe99333024314f
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-content/uploads/autoptimize/js/autoptimize_67a011d4e5fa11ddc5e59a7bc38a
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-includes/wlwmanifest.xml
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-json/
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.varomoney.com%2Fapply-simpl
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/wp-json/wp/v2/pages/50116
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.varomoney.com/xmlrpc.php?rsd
Source: main.dfb6537176bb9f70123d[1].js.2.dr	String found in binary or memory: https://www.wolframalpha.com/input/?i=(4
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/varomoney
Source: apply-simple-card[1].htm.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: unknown	HTTPS traffic detected: 104.16.95.65:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.95.65:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.70:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.70:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.162:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.162:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.98.33:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.94.161:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.94.161:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.98.33:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.248.118.22:443 -> 192.168.2.4:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.248.118.22:443 -> 192.168.2.4:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.227:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.137.59.185:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.227:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.137.59.185:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.226.184:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.226.184:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.181:443 -> 192.168.2.4:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.181:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.200.122.11:443 -> 192.168.2.4:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.200.122.11:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.70:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.70:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.254.108.170:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.254.108.170:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.242.21:443 -> 192.168.2.4:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.242.21:443 -> 192.168.2.4:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.99.83:443 -> 192.168.2.4:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.99.83:443 -> 192.168.2.4:49815 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@3/73@25/16

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{9577A48A-D523-11EB-90EB-ECF4BBEA1588}.dat

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF9579AA6165B902A3.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6692 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6692 CREDAT:17410 /prefetch:2	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://www.varomoney.com/apply-simple-card/?utm_source=google&utm_medium=cpc&gclid=Cj0KCQjw2tCGBhCLARIsABJGmZ7qAVR3iTtfCGyMPfjgJ6wMf4a_9wV-zdKLQQW6Rh3qkNrHfKFJ4UEaArggEALw_wcB	0%	Avira URL Cloud	safe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://varomoney.responsibledisclosure.com/hc/en-us	0%	Avira URL Cloud	safe
https://facebook.github.io/react/docs/forms.html#controlled-components	0%	Avira URL Cloud	safe
https://webpack.js.org/guides/production/	0%	Avira URL Cloud	safe
http://www.movable-type.co.uk/scripts/sha1.html	0%	Avira URL Cloud	safe
https://git.io/fjule	0%	Avira URL Cloud	safe
https://popper.js.org/docs/v1/)	0%	Avira URL Cloud	safe
http://reactcommunity.org/react-transition-group/transition#Transition-prop-appear)	0%	Avira URL Cloud	safe
https://develop.sentry.dev/sdk/envelopes/	0%	Avira URL Cloud	safe

Domains and IPs Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.de	142.250.184.227	true	false	high
star-mini.c10r.facebook.com	157.240.17.35	true	false	high
dart.l.doubleclick.net	142.250.186.70	true	false	high
static.cloudflareinsights.com	104.16.95.65	true	false	unknown
sc-static.net	143.204.98.33	true	false	unknown
tr.snapchat.com	35.186.226.184	true	false	high
gwmtracking.com	216.200.122.11	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	143.204.94.161	true	false	high
bam.nr-data.net	162.247.242.21	true	false	unknown
spdc-global.pbp.gysm.yahoodns.net	212.82.100.181	true	false	unknown
insight-566961044.eu-west-1.elb.amazonaws.com	34.254.108.170	true	false	high
scontent.xx.fbcdn.net	157.240.17.15	true	false	high
d296je7bbdd650.cloudfront.net	143.204.99.83	true	false	high
googleads.g.doubleclick.net	142.250.185.162	true	false	high
edge.gycpi.b.yahoodns.net	87.248.118.22	true	false	unknown
collectorv.us.tvsquared.com	3.137.59.185	true	false	unknown
collector-9229.us.tvsquared.com	unknown	unknown	false	unknown
sp.analytics.yahoo.com	unknown	unknown	false	high
use.typekit.net	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
js.adsrvr.org	unknown	unknown	false	high
action.media6degrees.com	unknown	unknown	false	high
ad.doubleclick.net	unknown	unknown	false	high
js-agent.newrelic.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
10191186.fls.doubleclick.net	unknown	unknown	false	high
s.yimg.com	unknown	unknown	false	high
insight.adsrvr.org	unknown	unknown	false	high
cdn.segment.com	unknown	unknown	false	high
p.typekit.net	unknown	unknown	false	high
action.dstillery.com	unknown	unknown	false	high
www.varomoney.com	unknown	unknown	false	high
bank.varomoney.com	unknown	unknown	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://getbootstrap.com/docs/4.3/layout/grid/	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://www.varomoney.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff?5.10.0)	apply-simple-card[1].htm.2.dr	false		high
https://github.com/getsentry/sentry-javascript/issues/2043	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://www.varomoney.com/saving-account-rates/	apply-simple-card[1].htm.2.dr	false		high
https://www.twitter.com/varobank	apply-simple-card[1].htm.2.dr	false		high
https://www.varomoney.com/wp-content/uploads/2021/02/paid-landing-phone-screen-1-163x300.png	apply-simple-card[1].htm.2.dr	false		high
https://www.varomoney.com/credit-builder/	apply-simple-card[1].htm.2.dr	false		high
https://commonmark.org/).	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://github.com/graphql/graphql-js/issues/2317	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
http://www.unicode.org/reports/tr35/tr35-31/tr35-dates.html#Date_Format_tokens	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://use.typekit.net/af/e4f1f2/000000000000000077359d5c/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	axp3kyh[1].css.2.dr	false		high
https://varomoney.responsibledisclosure.com/hc/en-us	apply-simple-card[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://reactjs.org/docs/forwarding-refs.html#forwarding-refs-in-higher-order-components	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://www.varomoney.com/become-a-partner/	apply-simple-card[1].htm.2.dr	false		high
https://use.typekit.net/af/a798a9/000000000000000077359d55/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	axp3kyh[1].css.2.dr	false		high
https://facebook.github.io/react/docs/forms.html#controlled-components	main.dfb6537176bb9f70123d[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/getsentry/sentry/blob/9f08305e09866c8bd6d0c24f5b0aabdd7dd6c59c/src/sentry/lang/ja	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://www.varomoney.com/apply-simple-card/#webpage	apply-simple-card[1].htm.2.dr	false		high
https://github.com/KyleAMathews/convert-css-length	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://www.varomoney.com/wp-content/uploads/2021/02/paid-landing-phone-screen-2x-1.png	apply-simple-card[1].htm.2.dr	false		high
http://www.unicode.org/reports/tr35/tr35-31/tr35-dates.html#Date_Format_Patterns	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://github.com/material-components/material-components-web/blob/be8747f94574669cb5e7add1a7c54fa4	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://www.varomoney.com/feed/	apply-simple-card[1].htm.2.dr	false		high
https://github.com/alitaheri/normalize-scroll-left	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://date-fns.org/docs/setWeekYear	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://material.io/design/typography/understanding-typography.html	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://www.varomoney.com/apply-simple-card/	apply-simple-card[1].htm.2.dr	false		high
https://bank.varomoney.com/signup	~DF3B41B50DAC1616BA.TMP.1.dr, autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997[1].js.2.dr, apply-simple-card[1].htm.2.dr	false		high
https://github.com/postcss/autoprefixer/issues/491	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://cdn.optimizely.com/datafiles/%s.json	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://www.google.de/pagead/1p-user-list/875159847/?random	f[2].txt.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	analytics[1].js.2.dr	false		high
https://www.varomoney.com/policies/	apply-simple-card[1].htm.2.dr	false		high
http://jsperf.com/element-style-object-access-vs-plain-object	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://use.typekit.net/af/a798a9/000000000000000077359d55/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	axp3kyh[1].css.2.dr	false		high
https://bugs.chromium.org/p/v8/issues/detail?id=4118	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://www.varomoney.com/fdic-insurance/	apply-simple-card[1].htm.2.dr	false		high
https://webpack.js.org/guides/production/	main.dfb6537176bb9f70123d[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://www.linkedin.com/company/varobank	apply-simple-card[1].htm.2.dr	false		high
https://bank.varomoney.com/login	apply-simple-card[1].htm.2.dr	false		high
http://www.movable-type.co.uk/scripts/sha1.html	main.dfb6537176bb9f70123d[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://bank.varomoney.com/	autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997[1].js.2.dr	false		high
https://git.io/fjule	main.dfb6537176bb9f70123d[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://www.varomoney.com/wp-content/uploads/2020/11/varo-bank-logo-1.svg	apply-simple-card[1].htm.2.dr	false		high
https://www.varomoney.com/wp-content/uploads/2020/09/varo-money-app-icon.svg	apply-simple-card[1].htm.2.dr	false		high
https://github.com/reactjs/react-transition-group/blob/5007303e729a74be66a21c3e2205e4916821524b/src/	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://www.varomoney.com/wp-content/uploads/2021/02/paid-landing-phone-screen-1-150x276.png	apply-simple-card[1].htm.2.dr	false		high
https://github.com/cssinjs/jss	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
http://stackoverflow.com/questions/105034/how-to-create-a-guid-uuid-in-javascript/2117523#2117523	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://github.com/facebook/flow/issues/3258	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://secure.varomoney.com/web/assets/images/varo-og-image.png	signup[1].htm.2.dr	false		high
https://use.typekit.net/af/e4f1f2/000000000000000077359d5c/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	axp3kyh[1].css.2.dr	false		high
https://use.typekit.net/af/3f03c1/00000000000000003b9ad13e/27/l?primer=7fa3915bdafdf03041871920a205b	axp3kyh[1].css.2.dr	false		high
https://schema.org	apply-simple-card[1].htm.2.dr	false		high
https://github.com/ReactTraining/history/pull/289	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://github.com/occ/TraceKit	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://secure.varomoney.com/web/	signup[1].htm.2.dr	false		high
https://tools.ietf.org/html/rfc3986#appendix-B	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://github.com/graphql/graphql-js/issues/2203	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://github.com/piwik/piwik/blob/master/js/piwik.js	tv2track[1].js.2.dr	false		high
https://popper.js.org/docs/v1/)	main.dfb6537176bb9f70123d[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://caniuse.com/#search=color-adjust	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/API/PromiseRejectionEvent	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
http://reactcommunity.org/react-transition-group/transition#Transition-prop-appear)	main.dfb6537176bb9f70123d[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/API/DOMException	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://github.com/getsentry/raven-js/issues/838	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://github.com/getsentry/sentry-javascript/issues/3207.	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
http://dev.apollodata.com/core/fragments.html#unique-names	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://html.spec.whatwg.org/multipage/interaction.html#focus-fixup-rule.	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://use.typekit.net/af/951aca/000000000000000077359d51/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	axp3kyh[1].css.2.dr	false		high
https://secure.varomoney.com/web/login	apply-simple-card[1].htm.2.dr	false		high
https://use.typekit.net/af/63d81f/000000000000000077359d5a/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	axp3kyh[1].css.2.dr	false		high
https://www.varomoney.com/apply-simple-card/?utm_source=google&utm_medium=cpc&gclid=Cj0KCQjw2tCGBhCL	~DF3B41B50DAC1616BA.TMP.1.dr, {9577A48C-D523-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false		high
https://github.com/benlesh/symbol-observable	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://www.varomoney.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.svg?5.10.0#eic	apply-simple-card[1].htm.2.dr	false		high
https://github.com/DefinitelyTyped/DefinitelyTyped/issues/18051	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
http://github.com/garycourt/murmurhash-js	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://esbench.com/bench/5bfee68a4cd7e6009ef61d23	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://github.com/facebook/react/blob/15a8f031838a553e41c0b66eb1bcf1da8448104d/packages/react/src/R	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://drafts.csswg.org/cssom-view/#dom-window-scroll	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://github.com/Modernizr/Modernizr/blob/master/feature-detects/history.js	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://use.typekit.net/af/951aca/000000000000000077359d51/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	axp3kyh[1].css.2.dr	false		high
https://github.com/LiosK/UUID.js	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://www.varomoney.com/online-checking-account/	apply-simple-card[1].htm.2.dr	false		high
https://www.varomoney.com/wp-content/uploads//2020/09/varo-money-app-icon.svg	apply-simple-card[1].htm.2.dr	false		high
https://www.varomoney.com/	apply-simple-card[1].htm.2.dr	false		high
https://twitter.com/intent/tweet?text=	autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997[1].js.2.dr	false		high
https://yoast.com/wordpress/plugins/seo/	apply-simple-card[1].htm.2.dr	false		high
https://github.com/blueimp/JavaScript-MD5	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://opensource.org/licenses/MIT	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://use.typekit.net/af/8e3d9f/000000000000000077359d58/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	axp3kyh[1].css.2.dr	false		high
https://github.com/facebook/react/issues/20074	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://develop.sentry.dev/sdk/envelopes/	main.dfb6537176bb9f70123d[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/FezVrasta/popper.js/pull/715	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://use.typekit.net/af/a798a9/000000000000000077359d55/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	axp3kyh[1].css.2.dr	false		high
https://github.com/getsentry/sentry-javascript/issues/1949	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://www.varomoney.com/sitemap/	apply-simple-card[1].htm.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=820541	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://github.com/facebook/flow/issues/4441	main.dfb6537176bb9f70123d[1].js.2.dr	false		high
https://caniuse.com/#feat=referrer-policy	main.dfb6537176bb9f70123d[1].js.2.dr	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
216.200.122.11	gwmtracking.com	United States	6461	ZAYO-6461US	false
143.204.94.161	dg2iu7dxxehbo.cloudfront.net	United States	16509	AMAZON-02US	false
157.240.17.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
157.240.17.15	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
143.204.99.83	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
162.247.242.21	bam.nr-data.net	United States	23467	NEWRELIC-AS-1US	false
142.250.185.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.70	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.184.227	www.google.de	United States	15169	GOOGLEUS	false
143.204.98.33	sc-static.net	United States	16509	AMAZON-02US	false
104.16.95.65	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
87.248.118.22	edge.gycpi.b.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
3.137.59.185	collectorv.us.tvsquared.com	United States	16509	AMAZON-02US	false
34.254.108.170	insight-566961044.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
35.186.226.184	tr.snapchat.com	United States	15169	GOOGLEUS	false
212.82.100.181	spdc-global.pbp.gysm.yahoodns.net	United Kingdom	34010	YAHOO-IRDGB	false

General Information

Joe Sandbox Version:	32.0.0 Black Diamond
Analysis ID:	440143
Start date:	24.06.2021
Start time:	21:36:31
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 3m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.varomoney.com/apply-simple-card/?utm_source=google&utm_medium=cpc&gclid=Cj0KCQjw2tCGBhCLARIsABJGmZ7qAVR3iTtfCGyMPfjgJ6wMf4a_9wV-zdKLQQW6Rh3qkNrHfKFJ4UEaArggEALw_wcB
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@3/73@25/16
Cookbook Comments:	Adjust boot time Enable AMSI
Warnings:	Show All Exclude process from analysis (whitelisted): ielowutil.exe, backgroundTaskHost.exe, svchost.exe, wuapihost.exe Excluded IPs from analysis (whitelisted): 52.147.198.201, 13.88.21.125, 23.203.80.193, 104.18.14.122, 104.18.15.122, 142.250.186.168, 142.250.186.142, 173.222.108.232, 173.222.108.216, 172.217.23.110, 2.19.73.59, 204.79.197.200, 13.107.21.200, 142.250.181.226, 142.250.185.196, 142.250.184.226, 104.18.10.79, 104.18.11.79, 151.101.2.110, 151.101.66.110, 151.101.130.110, 151.101.194.110, 20.82.210.154, 142.250.185.234, 152.199.19.161, 20.54.104.15, 93.184.221.240 Excluded domains from analysis (whitelisted): e6653.dscf.akamaiedge.net, www.googleadservices.com, iris-de-prod-azsc-neu-b.northeurope.cloudapp.azure.com, adservice.google.com, action.media6degrees.com.cdn.cloudflare.net, arc.msn.com, wu.azureedge.net, consumerrp-displaycatalog-aks2eap-europe.md.mp.microsoft.com.akadns.net, e11290.dspg.akamaiedge.net, iecvlist.microsoft.com, go.microsoft.com, use-stls.adobe.com.edgesuite.net, www.googletagmanager.com, audownload.windowsupdate.nsatc.net, cs11.wpc.v0cdn.net, bat.bing.com, hlb.apr-52dd2-0.edgecastdns.net, www.google.com, arc.trafficmanager.net, displaycatalog.mp.microsoft.com, watson.telemetry.microsoft.com, wu.wpc.apr-52dd2.edgecastdns.net, au-bg-shim.trafficmanager.net, www.google-analytics.com, bank.varomoney.com.cdn.cloudflare.net, fonts.googleapis.com, p.typekit.net-v3.edgekey.net, www.varomoney.com.cdn.cloudflare.net, www-google-analytics.l.google.com, dual-a-0001.a-msedge.net, ie9comview.vo.msecnd.net, displaycatalog-rp-europe.md.mp.microsoft.com.akadns.net, www-googletagmanager.l.google.com, wu.ec.azureedge.net, f4.shared.global.fastly.net, ctldl.windowsupdate.com, consumerrp-displaycatalog-aks2aks-europe.md.mp.microsoft.com.akadns.net, skypedataprdcoleus16.cloudapp.net, bat-bing-com.a-0001.a-msedge.net, blobcollector.events.data.trafficmanager.net, go.microsoft.com.edgekey.net, skypedataprdcolwus15.cloudapp.net, a1988.dscg1.akamai.net, displaycatalog-rp.md.mp.microsoft.com.akadns.net, cs9.wpc.v0cdn.net, neu-consumerrp-displaycatalog-aks2aks-europe.md.mp.microsoft.com.akadns.net Not all processes where analyzed, report is missing behavior information Report size getting too big, too many NtDeviceIoControlFile calls found. VT rate limit hit for: https://www.varomoney.com/apply-simple-card/?utm_source=google&utm_medium=cpc&gclid=Cj0KCQjw2tCGBhCLARIsABJGmZ7qAVR3iTtfCGyMPfjgJ6wMf4a_9wV-zdKLQQW6Rh3qkNrHfKFJ4UEaArggEALw_wcB

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\E5F0NRSV\www.varomoney[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	642
Entropy (8bit):	4.9887033774819205
Encrypted:	false
SSDEEP:	12:JsrUKeDvF+pxuOUUZ+pxuOsrUKeDvF+pxuOUUZ+pxuOEyeWRRM6+pxuO3Ug+pxuf:WUvycOUkycO0UvycOUkycOFeAycO3Fy2
MD5:	A831906D1747F088DABDF464A30E8519
SHA1:	7756ACCD884C03968E61FF987ED7698AC7B0EB4E
SHA-256:	7AC63AF2F15793EFD3E07B9B2BD91497218979ECF1B206061E2B9334904173D8
SHA-512:	738258FC9F3BBE64207E9C1C0446ADA891BFAAC39496580487DFD5FF15E3ACAE9A01B8328FFD164827B7BFFABA5BC03F203DD2BEE4028B484B9CB0046756CAA3
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="_uetsid" value="98460ce0d52311eb96b91baa507b26d8" ltime="1510154336" htime="30894384" /><item name="_uetsid_exp" value="Fri, 25 Jun 2021 19:37:22 GMT" ltime="1510154336" htime="30894384" /></root><root><item name="_uetsid" value="98460ce0d52311eb96b91baa507b26d8" ltime="1510154336" htime="30894384" /><item name="_uetsid_exp" value="Fri, 25 Jun 2021 19:37:22 GMT" ltime="1510154336" htime="30894384" /><item name="_uetvid" value="9846bbb0d52311eb9baeadfcbf2cec94" ltime="1510154336" htime="30894384" /><item name="_uetvid_exp" value="Tue, 19 Jul 2022 19:37:22 GMT" ltime="1510154336" htime="30894384" /></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\URW0GA4Q\bank.varomoney[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	53341
Entropy (8bit):	5.03958034384792
Encrypted:	false
SSDEEP:	384:jEWEWJWxWtW1fEW1fuEW1fuEW1fuAyW1fuAjW1fuAyxWWbfekAyxWWbfekeKyxWl:gy8yVG
MD5:	6D75F00FA740E79E34E7F549C14F968C
SHA1:	4516A9A96BA7D83A00DFFD1686ECA5203A940650
SHA-256:	48B659450FD88FF854ACDF4BDBE9F3C6DF885BC997BA4C6942F4EFAA89F78B4B
SHA-512:	CB053FBAF0D4F4C948DC33319FBF71311F8828662D723956B8079F4CDFBBDE67BBF83191A02A7BD3DCBBD80A5E027D00BD35896ADF14A50763A4FF4AE54E8A45
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="b3e38268-a50e-49cf-99dc-983a8547bbd2" value="test_value" ltime="1732664336" htime="30894384" /></root><root><item name="debug" value="undefined" ltime="1732664336" htime="30894384" /></root><root><item name="debug" value="undefined" ltime="1733134336" htime="30894384" /></root><root><item name="debug" value="undefined" ltime="1733134336" htime="30894384" /></root><root><item name="debug" value="undefined" ltime="1733134336" htime="30894384" /></root><root><item name="debug" value="undefined" ltime="1733134336" htime="30894384" /><item name="__storejs__" value=""__storejs__"" ltime="1733134336" htime="30894384" /></root><root><item name="debug" value="undefined" ltime="1733134336" htime="30894384" /></root><root><item name="debug" value="undefined" ltime="1733134336" htime="30894384" /><item name="ajs_user_id" value="null" ltime="1733134336" htime="30894384" /></root><root><item name="debug" value="undefined" ltime="1733134336" htime="30894384" /

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{9577A48A-D523-11EB-90EB-ECF4BBEA1588}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	30296
Entropy (8bit):	1.8537771225993451
Encrypted:	false
SSDEEP:	192:rgZTZn2cWxtNifevhzMhiJB4jDosfrvcjX:rQ12LDSzh4yHU
MD5:	6130D49FCBD2779B8AE6848296A58AF1
SHA1:	A30BA24A589E9FC4D01649A30B8762329807D660
SHA-256:	A03C26D4F91666375F0B6772C290B6A7D0A3F3E1BB36DD802253E13FC0194169
SHA-512:	CA8A49374B9309FE689C649C820426B87D243CD71D933C1CE3DC734343CED8D1C2CFBDCF51698B74EB5D678D756EF5A6EA1DBBD426CE2C04D2E7C42C39AD530D
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{9577A48C-D523-11EB-90EB-ECF4BBEA1588}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	82058
Entropy (8bit):	2.9190676964385203
Encrypted:	false
SSDEEP:	768:Dm0FK8ipV+b+84+QsNMYkTpK8ip0+b+84+SCNSYkT5gQkTZMPM6:DmX
MD5:	82DE47114220D5EF1E3D9731D8D9D9CD
SHA1:	95B51FE9F18D7F7AED88AD22FE27594D1438622F
SHA-256:	3E5C7A936640E83CD0962DB8858CEBA3DA7C54274EA6FA225B4EDF384D046415
SHA-512:	6F9B8474F13CA04E6907BC4D2C8E64BF261ACFB940662549A0D2426017D1AFFD623EF871299EAFBEE8672E01EC533B5BB9370B8854025702156BAF823753C2A4
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{9BEBB5A8-D523-11EB-90EB-ECF4BBEA1588}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.5641805513830511
Encrypted:	false
SSDEEP:	48:IwBGcpr0GwpapG4pQpGrapbSlGQpKLG7HpRATGIpG:r3ZMQr6JBSPAKTUA
MD5:	AE963F1B29BF30BD8C9FC0BE29A725D3
SHA1:	D26912D6DAE04949FAECCA3D36D1709C50E66127
SHA-256:	2DE917059ADE2D9DD30443A91579A8EADBC5FBA0C01EC7483BB58589E3E70CEA
SHA-512:	542C22E883F74596CD6D73E78B3AF10762B47249DC1CFD72DFC40EE5CE72A21F4D077C20512C491D75A3E8DE966C2DF67C8D1C30B1F1C57B3EF3CC87AA2F7CC1
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	1597
Entropy (8bit):	7.3018820452576225
Encrypted:	false
SSDEEP:	24:K7y2Yiwxq0+LHRm2vr8HdyAYgDkVxoA7gxvYAzTDwWY1Fb0A6xbkGiij0O:IdPwD+ZaodfQAAnEWYQAkkhO
MD5:	5E8D6941497DC4920EFB32A871E02CD8
SHA1:	4D6B115DC5BE63D997858FADC31843602E4D482E
SHA-256:	5141A812A8D161D73D3B9BDAD9B5034ACC1DE19B7CE1A7C6686F1DECA2C65F02
SHA-512:	7778FEE4C32CFB8C13F703150FFB8FFC881575CF8D17084E729F0A237EF19452F215682AE2E5B1441A3ABA42F764393FFFA8A4C64912E17F1BBAFEE888793EA0
Malicious:	false
Reputation:	low
Preview:	S.h.t.t.p.s.:././.w.w.w...v.a.r.o.m.o.n.e.y...c.o.m./.w.p.-.c.o.n.t.e.n.t./.u.p.l.o.a.d.s./.2.0.2.0./.0.6./.c.r.o.p.p.e.d.-.f.a.v.i.c.o.n.-.l.g.-.2.-.3.2.x.3.2...p.n.g.7....PNG........IHDR... ... .....szz.....IDATx.W[KTQ.=V..=u1....A..FI......k=.diRO.dEe#..Y.t4mT...l......h4j.r......>{..t...e8...^........&.ZF7....k.k.+2.Hd.0. f.o3&.72..s..M..........5.xb...e..>o.....}......z.".y...U.}..\.jC.b.0{k%.}....i/N..(:..{......... RW.j..[S...!P..=..r.<..X...6E.v.....+.7.......c..Z...4gyM.......X..\|.<.....\|.G$x..P.."={...0.t.i....H.e74K.K]U..[.~J....t'.t..=.,.n.R.......1...."...8..L.a;....:.S...]...q.#wW..~..^p......W]........i?-....._..W......?....~yqj.M.].....`?-......T.9~.............K....#.&...2%N..!.~Z...N...9..K"[%.[Pw..R........2..s..?.......@.`-p..q...j..Y.R.F..1.I{.;.]....P1dm.@.*...=......?........1H..t......1Hc...J......I.+.j.. ._.(.,.K.zc0..C&....'.-)K]L,.!]1d.F...../.4x/+.=.@.c....ZGq%.C.WuN......a".c.....Bsq=.`l..znc....?k..n.P.4....IEND.B`. ...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\404949843442269[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	267077
Entropy (8bit):	5.4728417049685305
Encrypted:	false
SSDEEP:	6144:Rk1HgCSntDV/HaK8V/Ha8NEPjQHguH3HpQrwz8GWM:kNE7S
MD5:	626C2516638C927652202DFD95606ED4
SHA1:	B2FED500825C284A68FDE65A7F5A2E5F2BF3D647
SHA-256:	BD22653C3FB78EA2A59BACC0EF475569319762E331232979789D9D480513D9E9
SHA-512:	790EE802BAF271DF6D8005CF645C0CCD85E2D2935BD51517D958670D82D31B6C4B511273C3F85315C7960064F8DC0BB9BF18ED1641C98FF12C3D520084E64D9D
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/signals/config/404949843442269?v=2.9.42&r=stable
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\875159847[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\9a775b59c1[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AktivGroteskVFAWght[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 31652, version 0.0
Category:	downloaded
Size (bytes):	31652
Entropy (8bit):	7.98467367671952
Encrypted:	false
SSDEEP:	768:xewWz8RKit7Wpw9FsKssJDj7UwyRzI5AndNK2akJ2:JlTS+9Fs2rUowzPakJ2
MD5:	01D1A23EF9DF3987009AB75046DE38C8
SHA1:	A5E87F1071ECC6BFB31B1536A7782BE849E7FE9B
SHA-256:	715439B5BA35CD43681C937533D3D982A1FBF242C32CD5724CC7929AA6025E3B
SHA-512:	356CE70E3D8C3520D303DB1D36E13DD7CE7B60100F26D13FCF576C41D49BC2D14564FF63F70D2BE5486C93FDCE5053FF91EE34BC764CDB01B8525FFC3C41CCD2
Malicious:	false
Reputation:	low
IE Cache URL:	https://bank.varomoney.com/assets/fonts/AktivGroteskVFAWght.woff
Preview:	wOFF......{.................................DYNA............!b..GDEF.......9...F...GDYN...........A..I.GPOS.......w..8....GSUB.."\...t..1..r..OS/2......._...`.R..cmap..{...........Fcvt ...........&UU-Qfpgm...D........./.7gasp................glyf..0...?...b....-head.......6...6...hhea...\...!...$.I.whmtx..o........d.&@.loca..r....z...h.L.@maxp....... ... .n..name...D...'....R-0!post..v<.......?.Mj.prep...l.......})...x..K(Da.....FC..V...P.L..5.c.0.F.....,.......XXXL.B.N]."...E...=.....F.w....{..}.....&.l".7...d.r...[...'.._.F.A..;u.Q....^...8mhD.V..r..A.G..}...7..6.O.........c.n.s......'ISh7..#.ZO...1.JT.!...C......=w. ..I&.L&$....E......E#m~.^.P.B.B.z.#.#.\|xu......L<.l......S.\qR\|.7#Z...l[.:...9......O..j..x.ne....L.$"#.&s2!...&.......T6y...J..]....T......C'..8..e......@w"~.G...4.....A..*A...3..w...x.}T.n.F.]R..J1...!..,..`CR. n..\F....`.-.H.\|.)...\|..i.e.^......C..1gwvI.... ..ff..,....?....x2....~...w.o.;...{.o...[_.}....5?m...O.....w...K...k...i.:g

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\api[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	35662
Entropy (8bit):	5.289565799540458
Encrypted:	false
SSDEEP:	768:eIEo7x4VqTHUlEulsfi+P1u0C9tJXTPDbYYFfct/1VMp9JddY8PmE4k7DgGSB:e2yYYac1TssM
MD5:	6C6281C15CBC981BC05942BAC40BCD7E
SHA1:	6015D314D852ECC0C0158731D8E06724805E38E5
SHA-256:	0D3118E306C6A26F1D2EFCB698984E6922C5E7E155C94A84760E36E5592A3C11
SHA-512:	7DB423D081304661C5981C6FC6D37CE2F32DBE8B8C38A9D2791DBD6110DB36261FA249A1662F667B58AA5B1A88446AD65D90B6EFBBEE0DA1378BD39BB1FE0DB2
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.varomoney.com/cdn-cgi/bm/cv/669835187/api.js
Preview:	/*. @license. * Copyright (c) 2015 Andr. Cruz <amdfcruz@gmail.com>. * Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the 'Software'), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:. * The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.. * THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, A

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\apply-simple-card[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	91231
Entropy (8bit):	5.328409983865448
Encrypted:	false
SSDEEP:	768:yFMiDG10a53/Ks9qFCPfqM0VGU5xypim1Yw516ul4VH7VesL6PE8:wDG+adf9qGfqM0F5xyffX4Pn8
MD5:	85A488CBACBA2CF47B5D4C75C263AB5A
SHA1:	E8F6415F229B8B644B4A14A8BA15593C88ED23DD
SHA-256:	A6F1C7CB88A30666C9D4D2099DBB4C77CE133AAE58097C484B58532A449C7BAE
SHA-512:	CF9FF9DE9FC1B5C17CA3A23775F11A1A186880A3A1CE9460F58FFEA98F13B480300196185728F275682AC5C7D617463FCBDC566EFD90615FABE34BD454C9A9A2
Malicious:	false
Reputation:	low
Preview:	<!doctype html>.<html lang="en-US">.<head>..<meta charset="UTF-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"9a775b59c1",applicationID:"126380212"};window.NREUM\|\|(NREUM={}),__nr_require=function(t,e,n){function r(n){if(!e[n]){var i=e[n]={exports:{}};t[n][0].call(i.exports,function(e){var i=t[n][1][e];return r(i\|\|e)},i,i.exports)}return e[n].exports}if("function"==typeof __nr_require)return __nr_require;for(var i=0;i<n.length;i++)r(n[i]);return r}({1:[function(t,e,n){function r(){}function i(t,e,n){return function(){return o(t,[u.now()].concat(f(arguments)),e?null:this,n),e?void 0:this}}var o=t("handle"),a=t(8),f=t(9),c=t("ee").get("tracer"),u=t("loader"),s=NREUM;"undefined"==typeof window.newrelic&&(newrelic=s);var d=["setPageViewName","setCustomAttribute","setErrorHandler","finished","addToTrace","inlineHit","addRelease"],p="api-",l=p+"ixn-";a(d,function(t,e){s[e]=i(p+e,!0,"api")}),s.addPageAction=i(p+"addPageAction",!0),s.setCurrentRouteName=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\autoptimize_0bb4f5dec8c6ffe99333024314fcb5ce[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	396189
Entropy (8bit):	4.806043519915035
Encrypted:	false
SSDEEP:	1536:8MZeGpmdiffQL7ymufiOYRDddHgYMxsrS8R3bZSHcQYqU7wp5stKQwkJkmkukxkF:TZZmdi5ffiOY0srSi3g5stPovXO
MD5:	1B0869A1A77806F0FF538F96AC1C2B6D
SHA1:	6A059E1972D169232069051325E5C66BB9E0E636
SHA-256:	FDF54CD77E9B991D0A2685C3E918C70547E3EA6DFF1A1ACB31D201AAF1500ECA
SHA-512:	178DEE941E61AEE7736B83945D19B52D32614C4E822538AAAD32CB8AB7CFC19A823D6147C144371F855BDF28FBA33BBB274AE901C42CCC8097187015D50BB3E5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.varomoney.com/wp-content/uploads/autoptimize/css/autoptimize_0bb4f5dec8c6ffe99333024314fcb5ce.css
Preview:	html{line-height:1.15;-webkit-text-size-adjust:100%},:before,*:after{-webkit-box-sizing:border-box;box-sizing:border-box}body{margin:0;color:#000;background-color:#f4f4fb;font-family:"aktiv-grotesk",sans-serif;font-weight:400;font-style:normal;font-size:20px;line-height:24px;letter-spacing:0}h1,h2,h3,h4,h5,h6{margin-top:.5rem;margin-bottom:1rem;font-family:inherit}h1,h1.elementor-heading-title,.h1 h2,.h1 h2.elementor-heading-title{font-family:"aktiv-grotesk",sans-serif;font-weight:300;font-style:normal;line-height:1.1em;font-size:64px;margin-bottom:15px}@media (max-width:1023px){h1,h1.elementor-heading-title,.h1 h2{font-size:50px}}@media (max-width:767px){h1,h1.elementor-heading-title,.h1 h2{font-size:45px}}h2,h3,h2.elementor-heading-title,h3.elementor-heading-title{font-family:"aktiv-grotesk-extended",sans-serif;font-weight:700;font-style:normal;font-size:36px;letter-spacing:-.02em;margin-bottom:15px;line-height:1.3em}h4,h5,h6,h4.elementor-heading-title,h5.elementor-heading-title,h6

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\d[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 20824, version 0.0
Category:	downloaded
Size (bytes):	20824
Entropy (8bit):	7.976303679774462
Encrypted:	false
SSDEEP:	384:w9Yhw93VADSOjbRIddxDP8bs9AdDpyIMz72tp+jeF6gfbxkFTVUy+I5:HhsAVbuXxDpAdDpKzteIgDORrb
MD5:	B825DBBA8836BD8978B199F7DDC00F75
SHA1:	52782A15D00B980186666113AABC1507A69795E6
SHA-256:	2EED4618F40D99AD14082FBA39B4E8387E5FE7E313121D8BBB35FC7BB6810045
SHA-512:	CABA65BCA0560EE70ED3EA90294B23D49C8F736B97315B86E0C42FDFF5492078D06808F74784A1C9CC58135D5059A08C42CB41DCC44FA0D6D144BD9228B31751
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/3f03c1/00000000000000003b9ad13e/27/d?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n7&v=3
Preview:	wOFF......QX................................DYNA............o%..GDEF.......n.....#.6GDYN.............f.mGPOS.......b.. .[..OS/2...<...]...`..U(VDMX.......X....q@x.cmap..O.........q.t.cvt .......{...0.`..fpgm...\|........./.7gasp...8............glyf...@..-...F...[head...@...6...6...Ahhea....... ...$.8..hmtx..I....%....;. .loca..K...........4maxp....... ... .P..name...x..........post..M.......... .prep...X.......`.R.;x...ex.d.F..?...J. -!)- ! HHJHI....HH.HKIIHJHH..c....l........9.u......Q.....)".;..!=(.RL.s...\|.....$%e)J.....\|.2..e..e)'.9.S^V....".e%..T.U."......F5Y.......5.)kQ..MmY.:....u....\.P_6..l.....1.d.......rhFS.f........lZ.R...l.lKk.6.=m-.Oh';.^v........Ig:.s..Yvuv......;.,...t...C.......^...-....4.9..W~I?9.9....A....(.8.2H~.`9.!..p.....#...f.=e.s4#..c.%.2Z.s~..9..r.\|.D..I.... .0QNe...dKa:S,..L.3.&.e....9[>b.3.\f..-.9.3G.`.=d!.."...,...X.\."Kd...r....+X.d.\.rK`.s5+..V.X%.:...Y...c.k......X/7.X~a...F..Mr.s;....X.;.w.M..v......v.....%..[...y.y.....,.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\d[2] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 20700, version 0.0
Category:	downloaded
Size (bytes):	20700
Entropy (8bit):	7.975229708126004
Encrypted:	false
SSDEEP:	384:2cMVJBnP75LWETzXNbYZqQG0cvjg/XQ+Tae7nmEHVENfEfc2R3Xk6b:2cMVJ5vTFyqxNAbtdafSnk6b
MD5:	2334FEBB2E665D569F407DAA10C3EC1E
SHA1:	35D5969B86144B7C55E6DEE28E9E2657F3956419
SHA-256:	C3B45E8DA4D3017CB8ACA73AEBDAB450EEA0DD678EB0CDECBC3B29015D3EBBCD
SHA-512:	EAF445665ABE5EF93C28B92289B690503EDBF8A01D0A53AF4C0322332B0156A302C29CD1D44FA6B57F99386DC00400FE8EAD0F9D75A887775CF7EDFA291FA327
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/e10446/00000000000000003b9ad13a/27/d?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n4&v=3
Preview:	wOFF......P.................................DYNA............o%..GDEF...H...n.....#.6GDYN.............f.mGPOS.......... fY.y.OS/2.......^...`..S.VDMX.......K....p{x.cmap..OL........q.t.cvt ...........P....fpgm............./.7gasp...P............glyf...,..-&..GH...thead...X...6...6.m.Phhea...P... ...$....hmtx..IT... ....&.'.loca..Kt........8. maxp...p... ... ....name.............'..post..MD......... .prep...t...y....../x...ex.d........C..$$..K@..N....-.R..R...Vlcll.X......qx.s]........,.,du...l2.....Av....9.._.K.2s.[.!..K^.O.#?.d.......,d.........EdQ..7...,n...,I..I)J..f.J..q.)GYY.@9Y.....+SQV1.RI~KeY..%.kPM....E.....u.%...\|OmY.:.>ue..!.d#.g4..lb6..lF#.As...fK..V4w.6..B...lGk.^..6.#me'...f.:...@G.N........"{.U.4....Ew.....}...?.K..)....@.9..r.Lf0........d...(G0H.d...!r.C.cF3L.a.....+#.8F.D.3ZN0'2FNb.K`.9.qr..4&..2..(g0I.d......l..9L.s....X.3C.`.\.l.i.b.\.\..%.K./..@.g..a...O..Er5.....h.T.c.\.r.AF...r...f..-.V.H..Nng..a.d..`....l...?."...=d/..>.......s.<.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\d[3] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 21480, version 0.0
Category:	downloaded
Size (bytes):	21480
Entropy (8bit):	7.9779790237969666
Encrypted:	false
SSDEEP:	384:OgYDcCY3dP7/sJSrkhKcmC/4FeYNrWC9eAsDtPiPEg20OiiaNiJv6nduG:6DcNsbm6ieYNrWC0AsJqPEglEquG
MD5:	4E148FB7416D114E10AC5465D55A028D
SHA1:	531328D86E359F4EAE552DDC3EC6A6DC10B00F93
SHA-256:	55E123D9679728F2E1B86F8FE3EC0D36370C1B77327A595D84B1697DB7388CC0
SHA-512:	1779D979E1D16FE2DF25A4CFF58E3CD3FFCC15B6A64BBEBD0D4B0E77B523D962DFAE6B43A219F95438240F7A8FD3627550A8199BD25728F521182649EF07D850
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/669c64/00000000000000003b9ad13f/27/d?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=i7&v=3
Preview:	wOFF......S........ ........................DYNA............o%..GDEF.......n.....#.6GDYN.............f.mGPOS.......v.. .]..OS/2...P...^...`..U.VDMX.......X....q@x.cmap..RX........q.t.cvt .......{...0.`..fpgm...\|........./.7gasp...8............glyf...l../...I.C..head...@...6...6.f.hhea......."...$...Ghmtx..L<...?....=...loca..N\|.........Q..maxp....... ... .P..name...x...........Jpost..PL..........Sprep...l.......`.R.;x...ex.d.F..?...J. -!)- ! HHJHI....HH.HKIIHJHH..c....l........9.u......Q.....)".;..!=(.RL.s...\|.....$%e)J.....\|.2..e..e)'.9.S^V....".e%..T.U."......F5Y.......5.)kQ..MmY.:....u....\.P_6..l.....1.d.......rhFS.f........lZ.R...l.lKk.6.=m-.Oh';.^v........Ig:.s..Yvuv......;.,...t...C.......^...-....4.9..W~I?9.9....A....(.8.2H~.`9.!..p.....#...f.=e.s4#..c.%.2Z.s~..9..r.\|.D..I.... .0QNe...dKa:S,..L.3.&.e....9[>b.3.\f..-.9.3G.`.=d!.."...,...X.\."Kd...r....+X.d.\.rK`.s5+..V.X%.:...Y...c.k......X/7.X~a...F..Mr.s;....X.;.w.M..v......v.....%..[...y.y.....,.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\identity[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	11633
Entropy (8bit):	5.7883624283841515
Encrypted:	false
SSDEEP:	192:sCQHyB0Qt5BeeOvnJdTQn8dMf2IUiVIgqgxdbYpH380QtKgSbq8kjMc9Ix0vvOuG:sCJBTMMf2IUiGUU8QgSbqRFy0vvpi
MD5:	A4B4E2FB56CBAC0AA769F30236149A3B
SHA1:	2B80252D14157774F2F06A65EE9B55B66CF4D8DB
SHA-256:	3BEA34F20C813024F046166FB0AD98A8EB93D5AB93052CEB993EEE238ECE5B66
SHA-512:	46D1C72B70B054EAC2B6C511F7C09ECC176566037322AC0FAEA7FFC10071503CD71903EB514D6C482A21185BB53571400359EC2B2080BB1DCA9AD6146566E795
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/signals/plugins/identity.js?v=2.9.42
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\mitek.5c339421b5c7dd04943a[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators, with overstriking
Category:	downloaded
Size (bytes):	3713572
Entropy (8bit):	5.152270251027778
Encrypted:	false
SSDEEP:	49152:9WLc9dHAqqdA+16hydoNIMGHKq7tp7gjxbzGWFSfpkJ+VTz1k1UlBNyoxk7Brt+e:jqEIpE
MD5:	FD8DC64E3F2FCFB3F08E453932778EFE
SHA1:	278B88FC00C97A3BACF828AB410E7410E9A6436D
SHA-256:	04082A9093AB14F027A3A4B74A75E27E46CD9F684362C4346040A1C674EFB33E
SHA-512:	103561A38086813B15C846A01B86C19AADDE034AD8B115D0310EFD30393CE26A1B981102FA9C151043167A98FE8D4E332BA94BE4A7C1C0712D9C3A01B286EBB7
Malicious:	false
Reputation:	low
IE Cache URL:	https://bank.varomoney.com/mitek.5c339421b5c7dd04943a.js
Preview:	/****/ (() => { // webpackBootstrap./**/ .var __webpack_modules__ = ({..// 62634:./*/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {.."use strict";..// EXPORTS.__webpack_require__.d(__webpack_exports__, {. "Ri": () => (/ reexport / ApolloCache),. "Ct": () => (/ reexport / Cache_Cache),. "h4": () => (/ reexport / InMemoryCache),. "yD": () => (/ reexport / MissingFieldError),. "ab": () => (/ reexport / cacheSlot),. "uG": () => (/ reexport / defaultDataIdFromObject),. "QS": () => (/ reexport */ makeVar).});..// UNUSED EXPORTS: isReference, makeReference..;// CONCATENATED MODULE: ./node_modules/@wry/trie/lib/trie.esm.js.// A [trie](https://en.wikipedia.org/wiki/Trie) data structure that holds..// object keys weakly, yet can also hold non-object keys, unlike the..// native `WeakMap`...// If no makeData function is supplied, the looked-up data will be an empty,..// null-prototype Object...var defaultMakeData = function () { return Obj

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\nspix[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	modified
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\p[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	1.5219280948873621
Encrypted:	false
SSDEEP:	3:U8n:U8n
MD5:	83D24D4B43CC7EEF2B61E66C95F3D158
SHA1:	F0CAFC285EE23BB6C28C5166F305493C4331C84D
SHA-256:	1C0FF118A4290C99F39C90ABB38703A866E47251B23CCA20266C69C812CCAFEB
SHA-512:	E6E84563D3A55767F8E5F36C4E217A0768120D6E15CE4D01AA63D36AF7EC8D20B600CE96DCC56DE91EC7E55E83A8267BADDD68B61447069B82ABDB2E92C6ACB6
Malicious:	false
Reputation:	low
IE Cache URL:	https://p.typekit.net/p.css?s=1&k=axp3kyh&ht=tk&f=14032.14033.14034.14035.14036.14037.26909.26913.26914&a=43529392&app=typekit&e=css
Preview:	/**/.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\sp[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\wp-emoji-release.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	14229
Entropy (8bit):	4.959165424851354
Encrypted:	false
SSDEEP:	384:inJ5kNuPTbUUh31//bEP+XgA3FqC2effJmp3:iJ5aUUUh31//YWXgA7ffC3
MD5:	EAA8641BCDA2371F4024A71FBB67DE3B
SHA1:	0E46C39D3821683C856605A82254115F9A6A7792
SHA-256:	0C5F584D1EA2C3313DC8C55824C2A572D3CF2EAE87C5CA62A58E598AEC9DDB5C
SHA-512:	82B6B84D0A7A28D6A8B013EE41EEF27E1DF8C1FCA396DFB4ED6D01249E12479230CB2D3683A56EB80651D22046C74506D194FA34B05E2A8AD8A08AE297F79AEB
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.varomoney.com/wp-includes/js/wp-emoji-release.min.js
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/v/13.0.1/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return a(d);return a(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return("string"==typeof d?function(d,b){return o(d,function(d){var u,f,c=d,e=x(d),a=b.callback(e,b);if(e&&a){for(f in c="<img ".concat('class="',b.className,'" ','draggable="false" ','alt="',d,'"',' src="',a,'"'),u=b.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,n),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,a,b,t,n,r,o,i,s,l=function d(u,f){var c,e,a=u.childNodes,b=a.length;for(;b--;)c=a[b]

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\ytc[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	15154
Entropy (8bit):	5.3546220736412975
Encrypted:	false
SSDEEP:	384:s40C/gANXJ+M9Arrz96wBw84SITAYhNGyyg:VfJRCzUD8lYrhyg
MD5:	6DE43F1C725D89777EDAA2BC5D679ECB
SHA1:	4EE3C9D1680755073446AF5B5814DB444E609B91
SHA-256:	B9E6C38B3493790E6525BA6715AD839211CAB5DB3DDC80C7F70F20F92679FEE6
SHA-512:	C6E3FD0D3829DBEA7D35D65FE9DB19CF7D02052D650F1BA7E2227B8047B3A370D75D4043E57F63C23AB8FFDCEB0845196A12C8AAEC3E94A1AF5AC5AE6358C527
Malicious:	false
Reputation:	low
IE Cache URL:	https://s.yimg.com/wi/ytc.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=0)}([function(e,t,n){"use strict";function r(){if("undefined"==typeof TextEncoder){window.Tex

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\347693183003603[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	266266
Entropy (8bit):	5.4722011444266405
Encrypted:	false
SSDEEP:	6144:Rk1HgCSntDV/HaK8V/Ha8NEPjQHguH3HpQrwz8GWg:kNE7K
MD5:	89C26E43B23C0B0C23903041D4F8358F
SHA1:	1F8C823D6B06020F619E1C1679149F243B8F95B7
SHA-256:	0A2FF878552E21FC6B67C96C5CCBA78A73DCBD7E87439C8E8BC711168D5459FD
SHA-512:	5889F6AED281BC98CF3EF35353F8C1DB6495BBEE4EFDA2C1B8CC1B7F393D63E9CCD95AF25E8E95CB99589FC040BE6CA68374CF1FCF69A373C9D0A23AFEC6ABAD
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/signals/config/347693183003603?v=2.9.42&r=stable
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\axp3kyh[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	6786
Entropy (8bit):	5.2271497545666845
Encrypted:	false
SSDEEP:	96:pbzQ6viUuMLMdMcGMLMfMoManZ8MCMtLtu:p2MLMdMcGMLMfMoM9MCMtLw
MD5:	D14FCCF8E52BA2FEB5F493992551F417
SHA1:	84639C82DBDDC947457BE83DBFCD05F0CFE352AF
SHA-256:	D31565192B11811B7B3122C8833208A42DB339117E2DA644E6A12DD8D2BCB9F9
SHA-512:	18CDB467A6CB03A01515D87D9FA53C04D5624DB2B61F8838A1A1EDE1EA966420F69BE7F0E5F207D792DFF2E2D05526D49A81AF57D138CD49394673AFB97A4D71
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/axp3kyh.css
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . aktiv-grotesk:. * - http://typekit.com/eulas/000000000000000077359d4f. * - http://typekit.com/eulas/000000000000000077359d51. * - http://typekit.com/eulas/000000000000000077359d55. * - http://typekit.com/eulas/000000000000000077359d58. * - http://typekit.com/eulas/000000000000000077359d5a. * - http://typekit.com/eulas/000000000000000077359d5c. * aktiv-grotesk-extended:. * - http://typekit.com/eulas/00000000000000003b9ad13a. * - http://typekit.com/eulas/00000000000000003b9ad13e. * - http://typekit.com/eulas/00000000000000003b9ad13f. . . 2009-2021 Adobe Systems Incorporated. All Rights Reserved.. /./{"last_published":"2021-02-24 18:16:56 UTC"}*/..@import url("https://p.typekit.net/p.css?s=1&k=axp3kyh&ht=tk&f=14032.1

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\banks-near-me-hero[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 582 x 455, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	33989
Entropy (8bit):	7.963100029743141
Encrypted:	false
SSDEEP:	768:q1skFHhWPfRhTiRmNuaCT9ebJUNZA/YBQhNj6U0HtjcKzwAKyS:Sl5hWPTi8OTkbJUzZBQhAU0HtjcaID
MD5:	D3903136D20C28E27DD5B02C14883DF7
SHA1:	97B6127D7CECFF04615EB9C81CC12C1FE72A4F8D
SHA-256:	9C3226254621B5018CE711AA729A2EF35E5831612A4E005543AB5D65FA08AC4D
SHA-512:	F7684B25BB23D88B9C2E47CDDBD99C33A2BCBA1AD31F911021831F95C9DC7FD2E5026DC7F6E6B6090991BE40F60AEED894A9B917898872EC4829D1B4E22ED419
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.varomoney.com/wp-content/uploads/2021/02/banks-near-me-hero.png
Preview:	.PNG........IHDR...F.........m.g....wPLTE...........................bbb.........]]]...GEJ...xxxLGP(((_Qi$$$Q;hxxyMMN*!!!rU.S9uzy{.....................................................................................................................~...k....u..z..m.q..m.....j..k.n..m..b..[..X.rqt.[..].jjl.R.@v.ccewL..8.sE.\\]nC.`Pjv+.e<.SNVIFKg .?>AX..767555=+S333K..111///,--&&&### . .................[.....tRNS.......'4ACUgh{..................v....IDATx...o....m....9.x.....n...(Y.EK.8. D0W\. ....".z..m.?.[o.9J.l.NR..E....D..iiiiiiiiiiiiiiiiiiiii.............}s.....;......LI..a\|zzz.:>>.pi}_...#E...Ta.#.l..[ ...E..p....i.z~!z..y.Y....,.....Ea...p).:\|..........g3...A..+N...j.L.b"hq...B$0..p)...p.S.Uo....>...sp[.`0.....g3.7......-5-J.ekK.Zp...A.$}K....:.a................h=.Z.g.K..W..t...R....=.?...\|yNg.AH..-w.....ZQ...q...Z.-a[...[..bK..OO..5J.(..q.I.....Dm(..v.L&..\w8...Z.D.>..Z..\..k..&...[....=A......R.S..Nh&x....5.....q.../h..K.E.$.Go.....!]..,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\d[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 31652, version 0.0
Category:	downloaded
Size (bytes):	31652
Entropy (8bit):	7.98467367671952
Encrypted:	false
SSDEEP:	768:xewWz8RKit7Wpw9FsKssJDj7UwyRzI5AndNK2akJ2:JlTS+9Fs2rUowzPakJ2
MD5:	01D1A23EF9DF3987009AB75046DE38C8
SHA1:	A5E87F1071ECC6BFB31B1536A7782BE849E7FE9B
SHA-256:	715439B5BA35CD43681C937533D3D982A1FBF242C32CD5724CC7929AA6025E3B
SHA-512:	356CE70E3D8C3520D303DB1D36E13DD7CE7B60100F26D13FCF576C41D49BC2D14564FF63F70D2BE5486C93FDCE5053FF91EE34BC764CDB01B8525FFC3C41CCD2
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/ab3e12/000000000000000077359d4f/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
Preview:	wOFF......{.................................DYNA............!b..GDEF.......9...F...GDYN...........A..I.GPOS.......w..8....GSUB.."\...t..1..r..OS/2......._...`.R..cmap..{...........Fcvt ...........&UU-Qfpgm...D........./.7gasp................glyf..0...?...b....-head.......6...6...hhea...\...!...$.I.whmtx..o........d.&@.loca..r....z...h.L.@maxp....... ... .n..name...D...'....R-0!post..v<.......?.Mj.prep...l.......})...x..K(Da.....FC..V...P.L..5.c.0.F.....,.......XXXL.B.N]."...E...=.....F.w....{..}.....&.l".7...d.r...[...'.._.F.A..;u.Q....^...8mhD.V..r..A.G..}...7..6.O.........c.n.s......'ISh7..#.ZO...1.JT.!...C......=w. ..I&.L&$....E......E#m~.^.P.B.B.z.#.#.\|xu......L<.l......S.\qR\|.7#Z...l[.:...9......O..j..x.ne....L.$"#.&s2!...&.......T6y...J..]....T......C'..8..e......@w"~.G...4.....A..*A...3..w...x.}T.n.F.]R..J1...!..,..`CR. n..\F....`.-.H.\|.)...\|..i.e.^......C..1gwvI.... ..ff..,....?....x2....~...w.o.;...{.o...[_.}....5?m...O.....w...K...k...i.:g

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\d[2] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 30276, version 0.0
Category:	downloaded
Size (bytes):	30276
Entropy (8bit):	7.984908062205882
Encrypted:	false
SSDEEP:	768:h2l0MWrsXZEHSQXWSVK/Na5dd/CkBjlCaKfYRLoO:lzsXZEHSQXWeK/Q5EahLb
MD5:	DA818F256F0DC61796789B7795920812
SHA1:	68FBFCE51BDE000D4D9C7B14986EF12E58C41FAB
SHA-256:	ACBDC0023770AEC36E307D9F9804579343B985A458785E6396FDAAB85EB157E4
SHA-512:	D8457F88A05CFF0C6DC4FACD4F2211E3A8339B742853C99707186E050ADDDB247BB67A288FADD777F0171586EBB00FA6C5184DA9DEEF5CBC3ACDDD449D01E262
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/951aca/000000000000000077359d51/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i4&v=3
Preview:	wOFF......vD...............................DYNA...`...........<GDEF.......5...B....GDYN...D...........tGPOS..........A.t..\GSUB..#..........OS/2......._...`..qKcmap..u...........Fcvt ............,%..fpgm............./.7gasp...D............glyf..)...Bd..d.....head...P...6...6..&.hhea.......#...$...Ahmtx..l@...7...d..P.loca..ox...E...h.N.3maxp...@... ... ...yname.......+....W...post..r........M..Gprep..............+.x.c:...t.A.i3.0.+.....w@..D..........@K.............q..\|8.v.b.<..382.a..c.`.b0.1..R.b.....`.?.``...@S.@...........JfN.(`h../a.".........d....y-..C..d#.....4.4.C..3E...1.....$x..d......... ........./bZ....P...}......7+...x.}T.n.F.]R..J1...!..,..`CR. n..\F....`.-.H.\|.)...\|..i.e.^......C..1gwvI.... ..ff..,....?....x2....~...w.o.;...{.o...[_.}....5?m...O.....w...K...k...i.:gAD...J.u:........E(X....0...b..R..F..H.-.j.)g......'=...>.)...cm.T.....`...O..(...D...zI..1o\l.IR,.YB...ybl...0..^b..:.r....'.o;N.1..Z..`M.gJ3yE....}j.aT.3b....\.I2.....`.....2.<.:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\d[3] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 34480, version 0.0
Category:	downloaded
Size (bytes):	34480
Entropy (8bit):	7.9852824440412915
Encrypted:	false
SSDEEP:	768:tH6VVpRwHEtN0MQ7Wpw9FsKssz1yrELvdwwYfF9l9gwjMvqImikq3:8VVUH6NRQS+9FsA1yrEDAvvjoD
MD5:	E33F09E74B5FFC3A2792A88402E014FD
SHA1:	E88D1C6257EBA2F5EAC44443ABA98D86A416D4D1
SHA-256:	4F70AAC3C708683ABD04D09599F16461FFEF22A834185213FDA2977F24FAD9A8
SHA-512:	7BDA7781D74AA3FE6B332EAC76251FFCF72B801ECE54236FD561852B54F775516CA22ED7AB24841502D133594ED43782AE080F5082147F99DF995B22DEEE5B2A
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/a798a9/000000000000000077359d55/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
Preview:	wOFF..............#d........................DYNA...L........!b..GDEF...<...9...F...GDYN...x.......A..I.GPOS.......T..Z .o..GSUB..-....t..1..r..OS/2.......]...`.y..cmap..............Fcvt .......\|... Mh+.fpgm...$........./.7gasp................glyf..<X..>...b"..Z.head.......6...6.Q..hhea.......!...$....hmtx..{........d..6.loca..}....n...h.J..maxp...,... ... .!..name...$...!....:...post...H.......?.Mj.prep...H...^....Eo..x..K.A...3...B.......`....Z...B0B4)R(..b!B...AA. >.H...H.?@"X[....P..Rx.$.....6.w\|w{..-....g..,.9....;....~y...d..K...#.#-.Z~..&.Y...M.....X~e..oE...\."F{..B.....[~.G..>$!H.....9.?."E1l..E.4_.3...\p.%rp.I>...!Lj.k.F..tk.NHS...E^i63fA..-j..&J}_.2.o.Z... .y.@.<bL.?.G.V+..........n...\|^..;.j...w....+U.yS.G.s8V...........?P^..+.N...F.9..<.!.@...j8..qK.x0..X.q~x.}T.n.F.]R..J1...!..,..`CR. n..\F....`.-.H.\|.)...\|..i.e.^......C..1gwvI.... ..ff..,....?....x2....~...w.o.;...{.o...[_.}....5?m...O.....w...K...k...i.:gAD...J.u:........E(X....0...b..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\d[4] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 30396, version 0.0
Category:	downloaded
Size (bytes):	30396
Entropy (8bit):	7.9861212694287165
Encrypted:	false
SSDEEP:	768:V5Rn0vfzJGRs3QZSQ/w513JkfyHSVaRUleb7NqS329:VjnXRCQZSQ/O3umRUleb7D8
MD5:	F5046035E264B9B46C5AC723E7CFEA35
SHA1:	5CEFC546D84578118944E92EA1A336DD5AAA6889
SHA-256:	22AE7D6F0D8051B3D165D61F9A7FDBC1F14106835AFA02BB6AABB5CAA03BE7BA
SHA-512:	7DAD677F83EA9F741637D74D5608698A0F50A88147FB7F8A70574F3F72A685CDBA029D7C7E036BBC3F6752D3D267EAA0314115BE1AD18A84BC06E1182B2595E3
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/8e3d9f/000000000000000077359d58/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i7&v=3
Preview:	wOFF......v.................................DYNA...\|...........<GDEF...(...5...B....GDYN...`...........tGPOS...0...V..>&SC..GSUB.."..........OS/2......._...`..t.cmap..v...........Fcvt ...........z/...fpgm...t........./.7gasp...0............glyf..)P..Cm..fw$.c.head...<...6...6.r&ahhea...8...#...$....hmtx..l........d..Mrloca..o....`...h.N..maxp...\... ... ...yname...t...8......&.post..s8.......M..Gprep.......+......5.x.c:...t.A.i3.s1.00.....@...._..1..oa.-.c.a..0.a...........8.!.....~ ...UP....aL..&.0....q2...A..{.A.X..c.. ........3,d.......".........d....y-..C......i.{........".......`.....?0..o..l....G2.3...d.6..x.}T.n.F.]R..J1...!..,..`CR. n..\F....`.-.H.\|.)...\|..i.e.^......C..1gwvI.... ..ff..,....?....x2....~...w.o.;...{.o...[_.}....5?m...O.....w...K...k...i.:gAD...J.u:........E(X....0...b..R..F..H.-.j.)g......'=...>.)...cm.T.....`...O..(...D...zI..1o\l.IR,.YB...ybl...0..^b..:.r....'.o;N.1..Z..`M.gJ3yE....}j.aT.3b....\.I2.....`.....2.<.:.9.......0`.b1.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\gtm[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	127903
Entropy (8bit):	5.541054442916031
Encrypted:	false
SSDEEP:	3072:7GxJp9R075Vev0CqvJzi2dFyAI8nqHT7AKZo1wcE:7GxJp9RaWSliLXZ3n
MD5:	AAD29675C9D617413BA90B9DFD523B99
SHA1:	5952C9315617E639C6B3A87E9B2158691A4240B5
SHA-256:	5E4E3B9BD3A294CF3142CCB9789233189C714C099795CEBFC3EF3FADFEDF86FD
SHA-512:	243BD33D04F02ACD0A7BCD71FD5A405E809C33DD6B4E2A439248610DB0709E42A0AFEF852CF015FB628E58356160DF6B765EDC0235264D7F5301AD303974BE05
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtm.js?id=GTM-PXLSRB3
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"29",. . "macros":[{. "function":"__e". },{. "function":"__gas",. "vtp_cookieDomain":"auto",. "vtp_doubleClick":false,. "vtp_setTrackerName":false,. "vtp_useDebugVersion":false,. "vtp_useHashAutoLink":false,. "vtp_decorateFormsAutoLink":false,. "vtp_enableLinkId":false,. "vtp_enableEcommerce":false,. "vtp_trackingId":"UA-175071274-1",. "vtp_enableRecaptchaOption":false,. "vtp_enableUaRlsa":false,. "vtp_enableUseInternalVersion":false,. "vtp_enableGA4Schema":false. },{. "function":"__v",. "vtp_dataLayerVersion":2,. "vtp_setDefaultValue":false,. "vtp_name":"status". },{. "function":"__u",. "vtp_enableMultiQueryKeys":false,. "vtp_enableIgnoreEmptyQueryParam":false. },{. "function":"__v",. "vtp_name":"gtm.elementClasses",. "vtp_dataLayerVersion":1.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\gtm[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	127903
Entropy (8bit):	5.540911257051154
Encrypted:	false
SSDEEP:	3072:7GxJp9R075Vev0C6vJzi2dFyAI8nqHT7AKZo1wcE:7GxJp9RaWiliLXZ3n
MD5:	A9062F7CD0A2ACACF9F8C0FF4D7C674F
SHA1:	A60701776BA7432FFF71901E6BB38F0C90743CB3
SHA-256:	212C3BCE2B65A84AF965AEF174E1266EC5355967F48D1C9B4457804628E7EA02
SHA-512:	94A0CE6BAA4AD0E4B9E2F7B9362324650359225FD2CC863D69DC9CCD57FC8894153449795A23CE69EF56A7539F3C13E30480A638F7E3620B121981CA1A8EE353
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtm.js?id=GTM-PXLSRB3&l=dataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"29",. . "macros":[{. "function":"__e". },{. "function":"__gas",. "vtp_cookieDomain":"auto",. "vtp_doubleClick":false,. "vtp_setTrackerName":false,. "vtp_useDebugVersion":false,. "vtp_useHashAutoLink":false,. "vtp_decorateFormsAutoLink":false,. "vtp_enableLinkId":false,. "vtp_enableEcommerce":false,. "vtp_trackingId":"UA-175071274-1",. "vtp_enableRecaptchaOption":false,. "vtp_enableUaRlsa":false,. "vtp_enableUseInternalVersion":false,. "vtp_enableGA4Schema":false. },{. "function":"__v",. "vtp_dataLayerVersion":2,. "vtp_setDefaultValue":false,. "vtp_name":"status". },{. "function":"__u",. "vtp_enableMultiQueryKeys":false,. "vtp_enableIgnoreEmptyQueryParam":false. },{. "function":"__v",. "vtp_name":"gtm.elementClasses",. "vtp_dataLayerVersion":1.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\linkid[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1569
Entropy (8bit):	5.369127779967127
Encrypted:	false
SSDEEP:	48:Xpm6RFvCzWzAiWqSeTqn1PByqka1cUj54/vD978:5pfpy1Pkqka1cS52b978
MD5:	0CC3A63FE10060AF4A349E5DF666EEFE
SHA1:	3E8D3925B550345123F2CAB26568221FD4154F9C
SHA-256:	92FCA55833F48B4289AC8F1CEDD48752B580FCE4EC4B5D81670B8193D6E51B54
SHA-512:	5801C9DB98C4998480772CA5AD71F0E400C4756AE713AAB0358CA6593B3A3426499D6DEC81A768C861CBBCD8394DD8C6D647628A13F124FF3A1119F9B7793E8C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google-analytics.com/plugins/ua/linkid.js
Preview:	(function(){var e=window,h=document,k="replace";var m=function(a,c,d,b,g){c=encodeURIComponent(c)[k](/$/g,"%28")[k](/$/g,"%29");a=a+"="+c+"; path="+(d\|\|"/")+"; ";g&&(a+="expires="+(new Date((new Date).getTime()+g)).toGMTString()+"; ");b&&"none"!=b&&(a+="domain="+b+";");b=h.cookie;h.cookie=a;return b!=h.cookie},p=function(a){var c=h.body;try{c.addEventListener?c.addEventListener("click",a,!1):c.attachEvent&&c.attachEvent("onclick",a)}catch(d){}};var q=function(a,c,d,b){this.get=function(){for(var b=void 0,c=[],d=h.cookie.split(";"),l=new RegExp("^\\s"+a+"=\\s(.?)\\s$"),f=0;f<d.length;f++){var n=d[f].match(l);n&&c.push(decodeURIComponent(n[1][k](/%28/g,"(")[k](/%29/g,")")))}for(d=0;d<c.length;d++)c[d]&&(b=c[d]);return b};this.set=function(g){return m(a,g,b,c,1E3*d)};this.remove=function(){return m(a,"",b,c,-100)}};var t=function(a,c){var d=void 0;if("function"==typeof a.get&&"function"==typeof a.set){var b=c\|\|{},g=b.hasOwnProperty("cookieName")?b.cookieName:"_gali",r=b.hasOwnProper

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\nr-1209.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	31267
Entropy (8bit):	5.3079927467006
Encrypted:	false
SSDEEP:	384:zwct4qqmyLp1rEtWKfDFYlYurzrHcw/fyqJUMZG4ZN+uG+Gym/NwRY+dZc6Ek122:zwqWNzrHnUiV2ko4p
MD5:	CEFFB14D16467E17C5360BF7880099FA
SHA1:	ABF5EF6F2E832F744D8274BC0315F05C9F5257A4
SHA-256:	1676A8158867CA736FF0A960B9300B8E0E8C016FAA2B3211D54D1317213BE669
SHA-512:	6C9A2FE4CFB3B84A15B6250166FF284D8997E91E780F58316590E5CBCCBF225E20FA90546051FBF03FBEB75A7752EBDA23E62EAFA75F4DA715414B8EACF9E76B
Malicious:	false
Reputation:	low
IE Cache URL:	https://js-agent.newrelic.com/nr-1209.min.js
Preview:	!function(t,n,e){function r(e,i){if(!n[e]){if(!t[e]){var a="function"==typeof __nr_require&&__nr_require;if(!i&&a)return a(e,!0);if(o)return o(e,!0);throw new Error("Cannot find module '"+e+"'")}var s=n[e]={exports:{}};t[e][0].call(s.exports,function(n){var o=t[e][1][n];return r(o\|\|n)},s,s.exports)}return n[e].exports}for(var o="function"==typeof __nr_require&&__nr_require,i=0;i<e.length;i++)r(e[i]);return r}({1:[function(t,n,e){n.exports=function(t,n){return"addEventListener"in window?window.addEventListener(t,n,!1):"attachEvent"in window?window.attachEvent("on"+t,n):void 0}},{}],2:[function(t,n,e){function r(t,n,e,r,i){var a=c(t,n,e,i);return a.metrics=o(r,a.metrics),a}function o(t,n){return n\|\|(n={count:0}),n.count+=1,m(t,function(t,e){n[t]=i(e,n[t])}),n}function i(t,n){return n?(n.c\|\|(n=u(n.t)),n.c+=1,n.t+=t,n.sos+=t*t,t>n.max&&(n.max=t),t<n.min&&(n.min=t),n):{t:t}}function a(t,n,e,r,o){var a=c(t,n,r,o);if(!a.metrics)return void(a.metrics=e);var u=a.metrics;u.count+=e.count,m(e,fun

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\remoteEntry.201353[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	46249
Entropy (8bit):	5.393376512942747
Encrypted:	false
SSDEEP:	768:MWqM+q6ZoZ68jedkCVWLdIRyqp0uH0dhumyNNmG80s:MjMAoZ68jexPzpRHchumyNNmG80s
MD5:	DF2F72E713F4988B08F613EFEC8036D2
SHA1:	C02208C2C5C3E0A8C3B763D79798858F4247537B
SHA-256:	097B8CCD51CF75431C0082BC37B8CC60A74EC72C10F58C81F0C63BC3CC96B620
SHA-512:	BFD35E2E242273C848BEC7DCC84337E6C0D3B38E41F185527878102D93FB559D2E84D9CC53D4443CC914A2B7794DEBBCF6158D2B08D3989390A64E6599F3903F
Malicious:	false
Reputation:	low
IE Cache URL:	https://bank.varomoney.com/my-varo-remote/remoteEntry.201353.js
Preview:	var myVaro;./****/ (() => { // webpackBootstrap./**/ ."use strict";./**/ .var __webpack_modules__ = ({..// 29813:./**/ ((__unused_webpack_module, exports, __webpack_require__) => {..var moduleMap = {.."./Routes": () => {...return Promise.all([__webpack_require__.e(496), __webpack_require__.e(840), __webpack_require__.e(6157), __webpack_require__.e(1083), __webpack_require__.e(1154), __webpack_require__.e(5649), __webpack_require__.e(138), __webpack_require__.e(5302), __webpack_require__.e(645), __webpack_require__.e(5399), __webpack_require__.e(8633)]).then(() => (() => ((__webpack_require__(58633)))));..},.."./MyVaroPageNav": () => {...return Promise.all([__webpack_require__.e(5615), __webpack_require__.e(2003), __webpack_require__.e(1852), __webpack_require__.e(5840), __webpack_require__.e(3068), __webpack_require__.e(7859), __webpack_require__.e(6454), __webpack_require__.e(496), __webpack_require__.e(840), __webpack_require__.e(1083), __webpack_require__.e(3464), __we

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\remoteEntry.201390[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	50219
Entropy (8bit):	5.402973733089481
Encrypted:	false
SSDEEP:	768:lqM+RfEJjedhCVWqgAdRyqp0uHxhumINNmG80a:wMLjemnzpRHxhumINNmG80a
MD5:	FB9AAA1FF59EFA88DF6F88E7F081CFF7
SHA1:	E39EA3276C8001C01934CD340FC77B7A04A86F5E
SHA-256:	37E73E4883B95546A6212C2F215F969ADA36176692885DAF2627D6EC8CD5B8E7
SHA-512:	78273FDE1FE1F4ACBACE0841DD2E7EB741573A50CABFB1FFD17FB71C8A9739AFAA5A6C4DC4DA6FECF561EE2F907FD591459C53DE0A3AE4D1E6B47E20F83F5F45
Malicious:	false
Reputation:	low
IE Cache URL:	https://bank.varomoney.com/move-money-remote/remoteEntry.201390.js
Preview:	var moveMoney;./****/ (() => { // webpackBootstrap./**/ ."use strict";./**/ .var __webpack_modules__ = ({..// 52088:./**/ ((__unused_webpack_module, exports, __webpack_require__) => {..var moduleMap = {.."./MoveMoneyContent": () => {...return Promise.all([__webpack_require__.e(496), __webpack_require__.e(9213), __webpack_require__.e(6614), __webpack_require__.e(5762), __webpack_require__.e(983), __webpack_require__.e(8058), __webpack_require__.e(1154), __webpack_require__.e(3464), __webpack_require__.e(8849), __webpack_require__.e(5649), __webpack_require__.e(138), __webpack_require__.e(3098), __webpack_require__.e(3778)]).then(() => (() => ((__webpack_require__(93901)))));..},.."./MoveMoneyPageNav": () => {...return Promise.all([__webpack_require__.e(7092), __webpack_require__.e(795), __webpack_require__.e(496), __webpack_require__.e(9213), __webpack_require__.e(6614), __webpack_require__.e(5762), __webpack_require__.e(983), __webpack_require__.e(6982), __webpack_require

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\signup[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	6805
Entropy (8bit):	5.140957023943368
Encrypted:	false
SSDEEP:	96:zmyW2zWYFLosM6LjychPU0BEREoER9Ks6gVsNv3PLK8wCjuz5BshyXI+wbbTKeDZ:i32lj7ITxJu0yXI+wme3Nn/f3
MD5:	F26144B728BB7D0062CA30773BDFCEC7
SHA1:	617375AD16B2482CF018B7DDC1F05EF1E86DA0FD
SHA-256:	3A564327615CAB68A0A630851BB02163A3EAAB598F1AEF5C04013F0312B5131B
SHA-512:	2B92F7C4038E0FECB342A9CBEB5931F8E7FE568B80FACC841B7160D6D3C5D872823DFE59454BF3C018AF221EBD58ED70027948BD1CB3F78CC31EA2F74391A4C8
Malicious:	false
Reputation:	low
IE Cache URL:	https://bank.varomoney.com/signup
Preview:	<!doctype html><html lang="en"><head><title>Varo Bank</title><meta data-last-modified="Mon Jun 14 2021 16:08:41 GMT+0000 (Coordinated Universal Time)"/><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="description" content="Full-service banking with no fees"/><meta property="og:locale" content="en_US"/><meta property="og:type" content="website"/><meta property="og:site_name" content="Varo Money"/><meta property="og:title" content="Varo Money"/><meta http-equiv="origin-trial" content="AmONY3DxhBQsspNX0MqP/GePvGOrkXVjLB4xCdLtCDNf3xUc3MByWk7d1N/kTY5I6stC39QC07mMQ/qTyuj/+wEAAABleyJvcmlnaW4iOiJodHRwczovL3Zhcm9tb25leS5jb206NDQzIiwiZmVhdHVyZSI6IlNtc1JlY2VpdmVyIiwiZXhwaXJ5IjoxNTgzODg0Nzk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="/><meta property="og:description" content="Full-service banking with no fees"/><meta property="og:url" content="https://secure.varomoney.com/web/"/><meta property="og:image" content="https://secure.varomoney.com/web/assets/images

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\tv2track[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
IE Cache URL:	https://collector-9229.us.tvsquared.com/tv2track.php?action_name=Sign%20Up%20for%20Varo%20Today%20%7C%20Open%20a%20New%20Bank%20Account&idsite=TV-09727209-1&rec=1&r=253394&h=21&m=37&s=22&url=https%3A%2F%2Fwww.varomoney.com%2Fapply-simple-card%2F%3Futm_source%3Dgoogle%26utm_medium%3Dcpc%26gclid%3DCj0KCQjw2tCGBhCLARIsABJGmZ7qAVR3iTtfCGyMPfjgJ6wMf4a_9wV-zdKLQQW6Rh3qkNrHfKFJ4UEaArggEALw_wcB&_id=1940d016862b23b9&_idts=1624563443&_idvc=0&_idn=1&_viewts=&pdf=0&qt=0&realp=0&wma=0&dir=0&fla=1&java=1&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=25
Preview:	GIF89a.............!.......,...........(.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\875159847[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\9a775b59c1[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.254849015882737
Encrypted:	false
SSDEEP:	3:U3KTDWTwTWMWVrfVh:HAFMWVrn
MD5:	5C9DA71976FB9D00F82E61C7E496BA06
SHA1:	58884FB0E24A399213205AD35DB27E6011BD149C
SHA-256:	F69A13217482DC43F25E74CFCB9391D0F06D22501F10F5CB5E413D2D98A5CD23
SHA-512:	DBC11417F6342430D30220B7A4F141F05801520C429CC1C80FEC974BA840AF1D4C316395CF9B12AAFBC36F04795A0558BEAEC690D43C31FBB86175C2B41557EF
Malicious:	false
Reputation:	low
Preview:	NREUM.setToken({'stn':0,'err':0,'ins':0,'cap':0,'spa':0})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\analytics[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	49377
Entropy (8bit):	5.521008419138659
Encrypted:	false
SSDEEP:	768:/yR3fYFBCwsNDsP5XqY0TyPnHpl1TY3SoavyVv6PU+CgYUD0lgEw0stZK:/y9g1r5h0UHp/Y3SowCw0sy
MD5:	042B7183D8645F5CF9D0D6ACD5FF8358
SHA1:	447A98467EA31E253ECB63EE8564C8B5E1E77D58
SHA-256:	73D6A5EA11FB7BF6E6A6CCD44B1635D52C79B0A00623D0387C9DDDD4B7C68E89
SHA-512:	72AA2F221BB5EFEC3A9C0CBC2D01DEBD827361369F7E84AA613D4CA70838FF68EA2C3300167FB263A4F416A857BABF0354A1FF8B3EC669BF88452633981CA18F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};var q={},r=function(){q.TAGGING=q.TAGGING\|\|[];q.TAGGING[1]=!0};var t=function(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])},v=function(a){for(var b in a)if(a.hasOwnProperty(b))return!0;return!1};var x=/^(?:(?:https?\|mailto\|ftp):\|[^:/?#]*(?:[/?#]\|$))/i;var y=window,z=document,A=function(a,b){z.addEventListener?z.addEventListener(a,b,!1):z.attachEvent&&z.attachEvent("on"+a,b)};var B=/:[0-9]+$/,C=function(a,b,c){a=a.split("&");for(var d=0;d<a.length;d++){var e=a[d].split("=");if(decodeURIComponent(e[0]).replace(/\+/g," ")===b)return b=e.slice(1).join("="),c?b:decodeURIComponent(b).replace(/\+/g," ")}},F=function(a,b){b&&(b=String(b).toLowerCase());if("p

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\api[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	35662
Entropy (8bit):	5.289565799540458
Encrypted:	false
SSDEEP:	768:eIEo7x4VqTHUlEulsfi+P1u0C9tJXTPDbYYFfct/1VMp9JddY8PmE4k7DgGSB:e2yYYac1TssM
MD5:	6C6281C15CBC981BC05942BAC40BCD7E
SHA1:	6015D314D852ECC0C0158731D8E06724805E38E5
SHA-256:	0D3118E306C6A26F1D2EFCB698984E6922C5E7E155C94A84760E36E5592A3C11
SHA-512:	7DB423D081304661C5981C6FC6D37CE2F32DBE8B8C38A9D2791DBD6110DB36261FA249A1662F667B58AA5B1A88446AD65D90B6EFBBEE0DA1378BD39BB1FE0DB2
Malicious:	false
Reputation:	low
IE Cache URL:	https://bank.varomoney.com/cdn-cgi/bm/cv/669835187/api.js
Preview:	/*. @license. * Copyright (c) 2015 Andr. Cruz <amdfcruz@gmail.com>. * Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the 'Software'), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:. * The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.. * THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, A

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\beacon.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	13614
Entropy (8bit):	5.29568197542617
Encrypted:	false
SSDEEP:	192:xHieOTjf/Xo2DvMaxvqCTiphHcAfH0wlM7IRMIhN7IkWVXpOeWMXAAQ3mZVNdEd2:Hcjf/rYRCGHBHPlGIRxTIkW5VeeE2
MD5:	B7474BAE5335BE4B44AB17736E5A93BE
SHA1:	B6469FAF091D21CF2AF9D3BE7B30CD57A7ED0DC4
SHA-256:	0E567066985125E7974F68B42914DCB134E3C38373A4A3D668BDB38A3E55F299
SHA-512:	39A3F394191F72E90514CA59B65F61D05CEEC9B7937AA3028EB3522F48DEA8BD95EAB9430C3E63D90816218F4CD5E0D785AC4428B7A502A9160609502494A745
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.cloudflareinsights.com/beacon.min.js
Preview:	!function(e){function t(i){if(n[i])return n[i].exports;var r=n[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,t),r.l=!0,r.exports}var n={};t.m=e,t.c=n,t.d=function(e,n,i){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:i})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="",t(t.s=0)}([function(e,t,n){"use strict";function i(e){var t="";if(t=window.location.origin?window.location.origin:window.location.protocol+"://"+window.location.host,e&&"string"==typeof e)if(0===e.indexOf("/"))t+=e;else try{var n=new URL(e);return n.protocol+"://"+n.host+n.pathname}catch(e){}else{var i=window.location.pathname;i&&i.length>0&&(t+=i)}return t}function r(e){return Object.keys(e).forEach(function(t){"number"==typeof e[t]&&(e[t]=String(e[t]))}),e}function o(e){if("function"==typeof performance.getEntriesByType){var t=performance.get

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\d[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 35016, version 0.0
Category:	downloaded
Size (bytes):	35016
Entropy (8bit):	7.984518343295238
Encrypted:	false
SSDEEP:	768:kIDoSw/H7Wpw9FsKssPeG3qKerTIIlQtiI4/uiL:BUSw/S+9Fssw0wI4/uiL
MD5:	C782673BF5F7AEC45E43D48919D74FB6
SHA1:	E603BB7E08DBB0D7BCAB72E3823A5FA5FF9A0FA1
SHA-256:	76631BBFF4F828E76E38696A18C6864904F086533DC92F1C7AC9FAA5409177FB
SHA-512:	086BD83D5FDF50BAED221B9BDB21841267F9B7E72372A8C388E567197AFFC977642AD9B70872A5D02E9FA5892024BFF9811E50950E41887F291F0C1978FFBA61
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/63d81f/000000000000000077359d5a/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n3&v=3
Preview:	wOFF..............%.........................DYNA............!b..GDEF.......9...F...GDYN...........A..I.GPOS..........Y.1...GSUB..-....t..1..r..OS/2......._...`....cmap...$..........Fcvt ...........h.>.fpgm............./.7gasp...H............glyf..<,..@...e(..03head...T...6...6...!hhea...t...!...$...Shmtx..}........d.oF.loca.......x...h.N.Xmaxp....... ... ....name.......5......Dfpost...`.......?.Mj.prep.......P...Y.k.x..;hTA...._.[H.#....d5.........,.F...`c.... ....j+.D...h'a.@@K...`....n..=..,K..m.~......33...c....m.....\+.y..v...4.Hb.v.[.p5..U&].&[#5..E-)....<....A....:.9...6..Mc;]q.T.1.....F.p._.Y..fU....s%&..c..F.].K8.<.........#.Q...8.6...x.'.......,.$..$....X.+.jy.._)...k.lA/..._l.Zd..>K......G..5.\|.6..w.n..l........`.......gQRo..Y.RF.......q.a............o..#..+..........qMi.-~J./2...\5.y.o=p..[8m....%.v...d.h.#"""./........?.yEk<k..e$..Z<.../r.].].RRg..ObB.G...x.}T.n.F.]R..J1...!..,..`CR. n..\F....`.-.H.\|.)...\|..i.e.^......C..1gwvI.... ..ff..,..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\d[2] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 30464, version 0.0
Category:	downloaded
Size (bytes):	30464
Entropy (8bit):	7.984835911904576
Encrypted:	false
SSDEEP:	768:eYU8kZYbPSOq8mBrSQquAOfT0e2OtUBVcuDXMPkrEnfgXLpziIDFn7Yksx:eCPVm9SQjT0WscuDcMrEfgNl7Jsx
MD5:	170A6A4964CD39AECB8F57BB20EEBB4A
SHA1:	489BCDB4D262A21759A8BD4B496B1757E40770CE
SHA-256:	9F5327EAFA2C0D9EF9B4587AA6BA42F84349D7B053C59B5DD20A9D806567B73F
SHA-512:	CF55EE14F90357A412619EFC46F212035669CFF51D0F6281A97324CE3C0E5E4EF4C5D4444C0E507BE80ED9F566AAE51714FB607D0F9566F95C6300DE860818CD
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/e4f1f2/000000000000000077359d5c/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i3&v=3
Preview:	wOFF......w.................................DYNA...............<GDEF.......5...B....GDYN...............tGPOS..........A,.su.GSUB..#@.........OS/2...\..._...`.p;cmap..v\..........Fcvt ............2.."fpgm............./.7gasp...`............glyf..*...B...f..W5.head...l...6...6..'%hhea.......#...$....hmtx..m....&...d..QDloca..p0...L...h.PI.maxp....... ... .Q.tname.......D...2....post..s\|.......M..Gprep.......t....{.{`x...KBa...=oy.D../..>-...h..,..1h.....$".........."....v.CB..-..}.~.....q..Cl..,.l.:2.q.N.Z...T.U.q...V.o....E#He....?..].8ny...k.Bz....$^..Sow..Mm.EM:..e......3+s...3n....x...G.{.9..\.h.<...6Q .....6.....X......j...]VP.7...3o?..-P..\|.D`...x.}T.n.F.]R..J1...!..,..`CR. n..\F....`.-.H.\|.)...\|..i.e.^......C..1gwvI.... ..ff..,....?....x2....~...w.o.;...{.o...[_.}....5?m...O.....w...K...k...i.:gAD...J.u:........E(X....0...b..R..F..H.-.j.)g......'=...>.)...cm.T.....`...O..(...D...zI..1o\l.IR,.YB...ybl...0..^b..:.r....'.o;N.1..Z..`M.gJ3yE....}j.aT.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\favicon[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	456
Entropy (8bit):	7.422617370275542
Encrypted:	false
SSDEEP:	12:6v/7YzWYxzDGQcK0A2zxxdZ9hkvui21RB3bno40:NWY1Fb0A6xbkGiij0
MD5:	A47011D4F59CDF2D97FE125217C209C7
SHA1:	0BD90752DF53FFB4F38735A8834C361795B6701E
SHA-256:	E991B6D73108BF3462843FA26E6EF3A27BE0809D379B076229F79E4F51224E44
SHA-512:	E807730CE2B6246B1C6243EF0D65B7DFE051211D02A70159E317EFEF515109108B861658213682CD72FB615CF45DCF2BE5118107622C24A895930E09A7B4BD3D
Malicious:	false
Reputation:	low
IE Cache URL:	https://bank.varomoney.com/favicon.png
Preview:	.PNG........IHDR................a....pHYs...........~....zIDAT8..S.KBQ....!E.A."!..0hl. \........[....1.ji...S.r...2..#-...9>.w....r.=...;....RDd...s..C..LM.....l.4....@k.S.^)...'.t...D...u...elv.6.5. ........t..\...O....O.zX.=.....0..j...k.#.k.U...p...H..^.C^.:.....g..H..........M.g@=.."b..o\|ZmldgE...#.....F.Ck#...N..+k.E.s........p/B.EN!.....$N.Z\|....4.a..._hYm.A.;.2../.&..\MZ....!U..i3y..J.e.7.wWK.....Q.....?g"..fP7^.D......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\iframe[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	301
Entropy (8bit):	5.2871752196394635
Encrypted:	false
SSDEEP:	6:qF14bNy/0LY4FsVKPAKRUCN4MPtK6dlzih9SnNn9baBvJR/bAUqQb:lbRE4aVK4KRzBPtHdKSnN9+BT7qQb
MD5:	D561157586C1EAB6103CF6012D3F513C
SHA1:	E800389FB47EF8A43369BB8FAE15FAA26C7EE5A6
SHA-256:	D585F49FE6CA04EF2A0D8D941AF7BDAB3C481145EAEA2F0166BF09B50E9699AC
SHA-512:	9E9F66E4337882FF7C0BB972D78A2988E8AAD12D1A3D68B0D832D6E943A534296A7BD71D8815B3A9A2AF8642A86159C82F5418ABF4FB87043BBA128BE1614FF7
Malicious:	false
Reputation:	low
IE Cache URL:	https://gwmtracking.com/p/v/1/60774678f870814fc686df02/format/iframe?
Preview:	<html>..<head>..</head>..<body>......<img src="https://ad.doubleclick.net/ddm/activity/src=10959376;type=invmedia;cat=varom00;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1?" width="1" height="1" alt=""/>..</noscript>..</body>.</html>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\js[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	91524
Entropy (8bit):	5.500642301140915
Encrypted:	false
SSDEEP:	1536:JK+XJVeWOcp0ZfITFwvJLWiyo7yWlGxNd1jjW4pVuvO3Cn2KJqv1895/PoTvQVTD:Jp5Ve40CwvJzt2dFRzCnXqHTyBD
MD5:	603E3CE7EFACCDD3281F320403BC6992
SHA1:	73A79C07588328A686AB854B1B81AFA000C59B33
SHA-256:	B0DA87D16EE59D7ED28DD0748C74B6CF86217B149045585511A0ABEFEB142949
SHA-512:	AC4D956D77A50EAF7C87288C4A0195D55909250FD99D4A7DC3B7845AAD310333C0AC186F94AE7B461EC0D38CDEDA4233B8248C441786FC17A55715C5CB58DDB4
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtag/js?id=UA-175071274-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"1",. . "macros":[{. "function":"__e". },{. "function":"__cid". }],. "tags":[{. "function":"__rep",. "once_per_event":true,. "vtp_containerId":["macro",1],. "tag_id":1. }],. "predicates":[{. "function":"_eq",. "arg0":["macro",0],. "arg1":"gtm.js". }],. "rules":[. [["if",0],["add",0]]].},."runtime":[].....};../.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:ba(a)}},da="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ea;.if("function"==typeof Object.setPrototypeOf)ea=Object.setPrototypeOf;else{var fa;a:{var ia={a:!0},ja={};

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\remoteEntry.201350[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	37793
Entropy (8bit):	5.32087611529989
Encrypted:	false
SSDEEP:	768:VqM+Jp2jedPCVWI6IRyqp0uH/humXNNmG80s:gMCp2jeIhzpRH/humXNNmG80s
MD5:	8503C8C04D3DDA3CE93ACEA343F03676
SHA1:	CB121EB83E4E99AC2C501CBE97BAE6409F561E8B
SHA-256:	764BE29808D6BAD95E64EFD13BFCE8F5561AB2085FF5A21D6050248304B91391
SHA-512:	F9C1C0B1A50D61E85FB5BDB83BB74A254AA3730694151B6F9389F5D8040A6C71ABA91530269E6A39ABC1ADC9770FC6120A61C32C0275B76E073AF4FFAAA5AAB3
Malicious:	false
Reputation:	low
IE Cache URL:	https://bank.varomoney.com/partner-offers-remote/remoteEntry.201350.js
Preview:	var partnerOffers;./****/ (() => { // webpackBootstrap./**/ ."use strict";./**/ .var __webpack_modules__ = ({..// 8553:./**/ ((__unused_webpack_module, exports, __webpack_require__) => {..var moduleMap = {.."./Routes": () => {...return Promise.all([__webpack_require__.e(496), __webpack_require__.e(8149), __webpack_require__.e(5623), __webpack_require__.e(1083), __webpack_require__.e(1154), __webpack_require__.e(7625), __webpack_require__.e(9571), __webpack_require__.e(5649), __webpack_require__.e(138), __webpack_require__.e(7359), __webpack_require__.e(982)]).then(() => (() => ((__webpack_require__(8786)))));..}.};.var get = (module, getScope) => {..__webpack_require__.R = getScope;..getScope = (...__webpack_require__.o(moduleMap, module)....? moduleMap[module]()....: Promise.resolve().then(() => {.....throw new Error('Module "' + module + '" does not exist in container.');....})..);..__webpack_require__.R = undefined;..return getScope;.};.var init = (shareScope, initScop

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\remoteEntry.201352[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	45377
Entropy (8bit):	5.388977929047696
Encrypted:	false
SSDEEP:	768:1qM+q3StjIjedQCVWU5KRyqp0uH3humzNNmG80n:AMzSmjelszpRH3humzNNmG80n
MD5:	37D0FD50CB2220F0E533ADC6D64FC886
SHA1:	C9C5140F0B5041ABD227420DCD46BC5CBA32E59C
SHA-256:	DE4E8069B09E2238FFB02C56D02A2E4473C3A98BAE9914CC7B7CBF3382EF7F0D
SHA-512:	4E1B4B551D13916B22B7A464E36496129E923A522C96C365685DA2D8A855E63D337CA4A06C9D32D7631A5DABA5138A8E21E9F05458898013DDB9D4DC62574318
Malicious:	false
Reputation:	low
IE Cache URL:	https://bank.varomoney.com/lending-remote/remoteEntry.201352.js
Preview:	var lending;./****/ (() => { // webpackBootstrap./**/ ."use strict";./**/ .var __webpack_modules__ = ({..// 25689:./**/ ((__unused_webpack_module, exports, __webpack_require__) => {..var moduleMap = {.."./ChargeCardRoutes": () => {...return Promise.all([__webpack_require__.e(5222), __webpack_require__.e(496), __webpack_require__.e(5259), __webpack_require__.e(8603), __webpack_require__.e(6391), __webpack_require__.e(1154), __webpack_require__.e(9571), __webpack_require__.e(5649), __webpack_require__.e(138), __webpack_require__.e(8363), __webpack_require__.e(9590), __webpack_require__.e(1858)]).then(() => (() => ((__webpack_require__(1858)))));..},.."./LendingRoutes": () => {...return Promise.all([__webpack_require__.e(5222), __webpack_require__.e(496), __webpack_require__.e(5259), __webpack_require__.e(8603), __webpack_require__.e(6391), __webpack_require__.e(1154), __webpack_require__.e(9571), __webpack_require__.e(138), __webpack_require__.e(8363), __webpack_require__.e

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\scevent.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	14364
Entropy (8bit):	5.370218032749693
Encrypted:	false
SSDEEP:	384:Y7t3n0U12FYYwRnv9n5STAriv0Xcy6K3V:6fIFYXx2AGcLl
MD5:	EDCB3C784E03D8830C14BDCBC5DAE3F6
SHA1:	764E694C88D4D8187981387C534C3BAC0632A514
SHA-256:	023E64B862C4D75DD3390EDA64F830CE73E3D8C689D30FFF89DEC507CCABB780
SHA-512:	ABC84303AF78C5D33587F1CC93D3A1C0CF02020B6D01EE56F64680B302EBD1002FB5A6E7A4EFBCBF92E799CED8FC3FD7F79EEABC1169E6A17F68127FD7A91536
Malicious:	false
Reputation:	low
IE Cache URL:	https://sc-static.net/scevent.min.js
Preview:	try{!function(o,d){"use strict";var e=function(){function n(e){return e&&e.performance?e.performance:null}var t=!1,i=null;try{(i=n(o.top))\|\|(i=n(o),t=!0)}catch(e){i=n(o),t=!0}return[i,t]}(),u=e[0],s=e[1],c=!!(u&&u.mark&&u.getEntriesByName&&u.timing&&u.now),l="snaptr";e=l,c&&u.mark(e);var f=o.snaptr;function _(){function e(e){e=e.toString();for(var n=0;n<e.length;n++){var t=.02519603282416938(i+=e.charCodeAt(n));t-=i=t>>>0,i=(t=i)>>>0,i+=4294967296(t-=i)}return 2.3283064365386963e-10(i>>>0)}var i=4022871197;return e.version="Mash 0.9",e}f.pixelIdList=[],window.triedToSendCookieToNative=!1,function(){var e=window.sessionStorage&&window.sessionStorage.getItem("srid");if(e)f.s_r_id=e;else{window.WebJSBridge={},window.WebJSBridge.setSRID=function(e){f.s_r_id=e,window.sessionStorage&&window.sessionStorage.setItem("srid",e),W()};try{window.JSBridge?window.JSBridge.getSRID():window.webkit&&window.webkit.messageHandlers.getSRID.postMessage({placeholder:"placeholder"})}catch(e){}}}();var a,p

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\tv2track[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
IE Cache URL:	https://collector-9229.us.tvsquared.com/tv2track.php?action_name=Varo%20Bank&idsite=TV-09727209-1&rec=1&r=587874&h=21&m=37&s=44&url=https%3A%2F%2Fbank.varomoney.com%2Fsignup&urlref=https%3A%2F%2Fwww.varomoney.com%2Fapply-simple-card%2F%3Futm_source%3Dgoogle%26utm_medium%3Dcpc%26gclid%3DCj0KCQjw2tCGBhCLARIsABJGmZ7qAVR3iTtfCGyMPfjgJ6wMf4a_9wV-zdKLQQW6Rh3qkNrHfKFJ4UEaArggEALw_wcB&_id=e03aa88ec175c9bc&_idts=1624563464&_idvc=0&_idn=1&_viewts=&pdf=0&qt=0&realp=0&wma=0&dir=0&fla=1&java=1&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=2
Preview:	GIF89a.............!.......,...........(.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\tv2track[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	20818
Entropy (8bit):	5.592463908396929
Encrypted:	false
SSDEEP:	384:XIgJV0fiJF+sLQld20p28JXHABsOEsoc1/1hUP88J1c7lVMF/fQpDUriKo36n:tJV6iJfwgvoc1/1hUP07jMxIpPKoqn
MD5:	A1F3145E1DC107AAD3B57974B8817B57
SHA1:	507EA38AA8AD7BBE3AB3FA7E4C85016E3DCA2960
SHA-256:	A463AA6666CE0ABCABF8033013CFE881FDBFB570389AFF471D400A45B3A496D4
SHA-512:	8ADDDA4A0F27DB8DCE9706E87C1C5716949EA8111E05A7CEE46E027252D0EEECAB2DCADD02CA505021DB7DFF7ADF88272027A4FE156DAA95A1D75F7CC73C2822
Malicious:	false
Reputation:	low
IE Cache URL:	https://collector-9229.us.tvsquared.com/tv2track.js
Preview:	/!. Piwik - Web Analytics. . JavaScript tracking client. . @link http://piwik.org. * @source https://github.com/piwik/piwik/blob/master/js/piwik.js. * @license http://piwik.org/free-software/bsd/ Simplified BSD (also in js/LICENSE.txt). */.if(typeof JSON2!=="object"){JSON2={}}(function(){function d(f){return f<10?"0"+f:f}function l(n,m){var f=Object.prototype.toString.apply(n);if(f==="[object Date]"){return isFinite(n.valueOf())?n.getUTCFullYear()+"-"+d(n.getUTCMonth()+1)+"-"+d(n.getUTCDate())+"T"+d(n.getUTCHours())+":"+d(n.getUTCMinutes())+":"+d(n.getUTCSeconds())+"Z":null}if(f==="[object String]"\|\|f==="[object Number]"\|\|f==="[object Boolean]"){return n.valueOf()}if(f!=="[object Array]"&&typeof n.toJSON==="function"){return n.toJSON(m)}return n}var c=new RegExp("[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]","g"),e='\\\\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\uf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\up_loader.1.1.0[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4593
Entropy (8bit):	5.241800621451044
Encrypted:	false
SSDEEP:	96:eNfkJ6pvMuLZxG/e8EfcH5+FP/3a2KjovC:qt5Bl8EfxDKEvC
MD5:	98D98B3499058B76D58073CF8EDE2F10
SHA1:	2EC5BC839A187C2A4D93499567E8FFF091A6BCC4
SHA-256:	EE3A7301FE1E0C0F6BF6ACFF0D7A8D107F5CB3F62A2566740C0416D8E61F00B9
SHA-512:	DC185D5287645B2D8578FAD706446FC337DB7A34DDFF4CE2A473FC09EC4B85CB13ADE474EDCDC8C973E4E407853A6FCFBBDCB4E58E5376E37F173150BCD1D066
Malicious:	false
Reputation:	low
IE Cache URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	var ttd_dom_ready=function(){var t,n,o={"[object Boolean]":"boolean","[object Number]":"number","[object String]":"string","[object Function]":"function","[object Array]":"array","[object Date]":"date","[object RegExp]":"regexp","[object Object]":"object"},l={isReady:!1,readyWait:1,holdReady:function(e){e?l.readyWait++:l.ready(!0)},ready:function(e){if(!0===e&&!--l.readyWait\|\|!0!==e&&!l.isReady){if(!document.body)return setTimeout(l.ready,1);if((l.isReady=!0)!==e&&0<--l.readyWait)return;t.resolveWith(document,[l])}},bindReady:function(){if(!t){if(t=l._Deferred(),"complete"===document.readyState)return setTimeout(l.ready,1);if(document.addEventListener)document.addEventListener("DOMContentLoaded",n,!1),window.addEventListener("load",l.ready,!1);else if(document.attachEvent){document.attachEvent("onreadystatechange",n),window.attachEvent("onload",l.ready);var e=!1;try{e=null==window.frameElement}catch(e){}document.documentElement.doScroll&&e&&r()}}},_Deferred:function(){var a,n,d,c=[],u=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\10145903[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\10145903[2].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
IE Cache URL:	https://s.yimg.com/wi/config/10145903.json
Preview:	{}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\I75891LL.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	633
Entropy (8bit):	5.704434704001134
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEH7EMAUt9C3+VwjgnDVQsNS3BSNwXEeBu//zQs+xvBSNw0j:hMiRO9ySUt9DVrZQ+S3swXEe27QZtswm
MD5:	9540F4FAE13F867C64DA2EC3992F61F7
SHA1:	12470BFA2DB772578646C02987F4E4492CD436EB
SHA-256:	BED34352053DFBDF994F5EB7F9EE339F710989F84F4BC1069125939CA4204EF8
SHA-512:	B1ED0C484F7A812ED9D5B3584E13D550E89E17813ED200C6BE915379D210F5A21D1BECE85CC28860996141F74ED755D46DCDEFA263EB8E0BA0DCC8BCE7155907
Malicious:	false
Reputation:	low
IE Cache URL:	https://10191186.fls.doubleclick.net/activityi;src=10191186;type=pagel0;cat=remar0;ord=9266459530101;gtm=2wg6g0;gclaw=Cj0KCQjw2tCGBhCLARIsABJGmZ7qAVR3iTtfCGyMPfjgJ6wMf4a_9wV-zdKLQQW6Rh3qkNrHfKFJ4UEaArggEALw_wcB;auiddc=1918126624.1624563441;u1=https%3A%2F%2Fwww.varomoney.com%2Fapply-simple-card%2F%3Futm_source%3Dgoogle%26utm_medium%3Dcpc%26gclid%3DCj0KCQjw2tCGBhCLARIsABJGmZ7qAVR3iTtfCGyMPfjgJ6wMf4a_9wV-zdKLQQW6Rh3qkNrHfKFJ4UEaArggEALw_wcB;~oref=https%3A%2F%2Fwww.varomoney.com%2Fapply-simple-card%2F%3Futm_source%3Dgoogle%26utm_medium%3Dcpc%26gclid%3DCj0KCQjw2tCGBhCLARIsABJGmZ7qAVR3iTtfCGyMPfjgJ6wMf4a_9wV-zdKLQQW6Rh3qkNrHfKFJ4UEaArggEALw_wcB?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/src=10191186;type=pagel0;cat=remar0;ord=9266459530101;gtm=2wg6g0;gclaw=;auiddc=;u1=https%3A%2F%2Fwww.varomoney.com%2Fapply-simple-card%2F%3Futm_source%3Dgoogle%26utm_medium%3Dcpc%26gclid%3DCj0KCQjw2tCGBhCLARIsABJGmZ7qAVR3iTtfCGyMPfjgJ6wMf4a_9wV-zdKLQQW6Rh3qkNrHfKFJ4UEaArggEALw_wcB;~oref=https://www.varomoney.com/apply-simple-card/%3Futm_source%3Dgoogle%26utm_medium%3Dcpc%26gclid%3D*"/></body></html>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\analytics.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	417742
Entropy (8bit):	5.37924682189368
Encrypted:	false
SSDEEP:	3072:SHxGQPhv5YFLJoD04ExGtp5JdM9r+Vn8Ff1JvxyCCE8sCv+UXgk:SRGahvpEyp5JdM9iniLdU
MD5:	2D83C6EA4C269D8FD701E76F314B3B85
SHA1:	ED1EB555A6F9163230E2ABFFE4264F10A0129CA9
SHA-256:	1D292048895BD9AB928501594FE18B50547A030EBA8D69D9072A2125507B2E02
SHA-512:	CC281C074E4026E5301E153C118FEE5F719EB2BCA73FF0AAC6012E5E52AADFD492557C712D93087929DE276B05B969D4D70B1C85293B3836E5D55990000E9EAA
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.segment.com/analytics.js/v1/QwAKWU8odQvjbvijQwUQ1GPZ5T9tux9V/analytics.min.js
Preview:	!function(define){"function"==typeof define&&define.amd&&(define=undefined);!function(){function e(t,n,o){function i(r,s){if(!n[r]){if(!t[r]){var u="function"==typeof require&&require;if(!s&&u)return u(r,!0);if(a)return a(r,!0);var l=new Error("Cannot find module '"+r+"'");throw l.code="MODULE_NOT_FOUND",l}var d=n[r]={exports:{}};t[r][0].call(d.exports,function(e){return i(t[r][1][e]\|\|e)},d,d.exports,e,t,n,o)}return n[r].exports}for(var a="function"==typeof require&&require,r=0;r<o.length;r++)i(o[r]);return i}return e}()({1:[function(e,t,n){"use strict";var o=e("@segment/analytics.js-core"),i=e("@ndhoule/each");t.exports=function(e){i(function(e){o.use(e)},e);return o}},{"@ndhoule/each":33,"@segment/analytics.js-core":76}],2:[function(e,t,n){(function(n){"use strict";var o=e("@segment/send-json");t.exports=function(){for(var e=!1,t=!1,i=/.\/analytics\.js\/v1\/([^/])(\/platform)?\/analytics.*/,a=n.document.getElementsByTagName("script"),r=0;r<a.length;r++){var s=a[r].src,u=i.exec(s);i

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with LF, NEL line terminators
Category:	downloaded
Size (bytes):	779345
Entropy (8bit):	5.310198750566807
Encrypted:	false
SSDEEP:	6144:Ai8eGRuufsr5zQ47GKMPyD0thGy+qqAljSrp0+T7CEBQgS/nnS/Lckoo6ddFshaC:AiURum058P/tmq/SuDKFHbN2s
MD5:	4CD8245E08AFA1CE5A792A575733CB6B
SHA1:	E6B30ADC7072046B38BEE5C139C39ECD2106B780
SHA-256:	56E4462C72D9E6A2DD9FEFB1DA36FCD3258DD2AF7FE52A490570664825620ABE
SHA-512:	D9438B61085E863148FAF9D90E020F7FF554B2B28843E9A922F4923E75D0BA7B7545DD3A13A51A2AFA7E8E7829F9D02FCFCE0B5D7A4E6453E1E2A29999F61E87
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.varomoney.com/wp-content/uploads/autoptimize/js/autoptimize_67a011d4e5fa11ddc5e59a7bc38ac997.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\bat[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	30494
Entropy (8bit):	5.30355290011164
Encrypted:	false
SSDEEP:	384:otKVCwh9wC22fo5EB4b7AWhbwM05Jkr9qNHfs9nB/wDSliNqCET8zT7QAEqnyJYk:ZCwhBR/DOZwDhzT7QSnSYyebQ
MD5:	5562385CBAFDDC33276BA10BA59890F7
SHA1:	A030EE46C99511E12EBB6257138FBE3E75232540
SHA-256:	73E2E5173ED0D5A77B02914FA0EF1F67BB53143DA75F0348F558F95565220CA1
SHA-512:	3D12741A718FE0CC3756C8018E29C07B84D28702E8783F42677431213CC4F79A6852C3A26A8D29C6FC515A069D4543C6114A0C56FC19AC48F680EE9439D2ECE7
Malicious:	false
Reputation:	low
IE Cache URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date format"},"enum":{type:"enum",error:"{p} value must be one of the allowed values"},array:{type:"array",error:"{p} must be an array with 1+ elements"}};this.knownParams={event_action:{beacon:"ea"},event_category:{be

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\cropped-favicon-lg-2-32x32[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	823
Entropy (8bit):	7.678543130994855
Encrypted:	false
SSDEEP:	12:6v/7imCmq0ZrV6LkOXh6T2IJXf0a8hty3Pwz8HdyAwvgDkVaxiDsA7g2qN3XqSDC:0xq0+LHRm2vr8HdyAYgDkVxoA7gxv+
MD5:	2135B752C73C6A627D0687A83F2D56D8
SHA1:	30DC4620B2F8D046DF8C6C918F77514EE20A3BFD
SHA-256:	748B46909D55A0D8F45BE362C387EABDCF0AD577F887963BF32674C7ACF807B2
SHA-512:	7EC0FACE4898992BF962BE568375542E0869E55753B33146A7E11A6744C664FCAF3A0D2106B8E152CC015A3CE3EE581A92F5906E460A9504607C5243C4F674D2
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.varomoney.com/wp-content/uploads/2020/06/cropped-favicon-lg-2-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....IDATx.W[KTQ.=V..=u1....A..FI......k=.diRO.dEe#..Y.t4mT...l......h4j.r......>{..t...e8...^........&.ZF7....k.k.+2.Hd.0. f.o3&.72..s..M..........5.xb...e..>o.....}......z.".y...U.}..\.jC.b.0{k%.}....i/N..(:..{......... RW.j..[S...!P..=..r.<..X...6E.v.....+.7.......c..Z...4gyM.......X..\|.<.....\|.G$x..P.."={...0.t.i....H.e74K.K]U..[.~J....t'.t..=.,.n.R.......1...."...8..L.a;....:.S...]...q.#wW..~..^p......W]........i?-....._..W......?....~yqj.M.].....`?-......T.9~.............K....#.&...2%N..!.~Z...N...9..K"[%.[Pw..R........2..s..?.......@.`-p..q...j..Y.R.F..1.I{.;.]....P1dm.@.*...=......?........1H..t......1Hc...J......I.+.j.. ._.(.,.K.zc0..C&....'.-)K]L,.!]1d.F...../.4x/+.=.@.c....ZGq%.C.WuN......a".c.....Bsq=.`l..znc....?k..n.P.4....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\f[1].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	36727
Entropy (8bit):	5.495515861405609
Encrypted:	false
SSDEEP:	384:KEnScJ72pCWmKaEjdfo2U273LEajY5nA15A89ibkrXAbN6Cw/DAtojtFcJ15rmrQ:x7ZWnAaf59ibkjq2jk248ecYZ
MD5:	2A10B230F763419EB55D5AA0304A5C8A
SHA1:	7794064A9DE4B9A6B75CD078F7E9ACA259EB345C
SHA-256:	835A3F9F16D6B865BC47F8955AA45DA0ADB979B89D4880FE69C90497DCAC46C2
SHA-512:	2072F38D9B20FB1C913E96BA407BF265F03B6A0C1D3413B25301D9DEB01019C2CC0DB09402527D47955E6D4F46A24E8F25809C7EB3505BF357F03B9CCDD570BA
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googleadservices.com/pagead/conversion_async.js
Preview:	(function(){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),l={},fa={};function t(a,b){var c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]} .function v(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in l?f=l:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&"es6"===c?f[d]:null;b=b(c)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\f[2].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	2528
Entropy (8bit):	5.836924332916737
Encrypted:	false
SSDEEP:	48:0VUUIqzPrqTnJcgVhkGUKUI5DObi8NS8+EeVCbqKUI5DObi8NS8+EeVC06:+UURWTCgVhkLKl8NS8+XVCeKl8NS8+XU
MD5:	A77D34556E1F342DD309E0F3BE15DB70
SHA1:	B6D6E9945553B58167BEEC1DE0E8E9887FA148F1
SHA-256:	85FD7D65D93CECA931B9391461C97BCE69B6728F013EC9ABB12B0B1B16D48E26
SHA-512:	C37AFF1C2270D345616BE8AFEF51E09B9B8E3FD74EA932C188D9545BFBE6D2C641AC0DC357E8D04FD373B0E917DBDACC273315AC8DC74053BC073A5C5DC76EF5
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var c={},f=this\|\|self;var l=/#\|$/;function n(d){var g=d.search(l),a;a:{for(a=0;0<=(a=d.indexOf("fmt",a))&&a<g;){var b=d.charCodeAt(a-1);if(38==b\|\|63==b)if(b=d.charCodeAt(a+3),!b\|\|61==b\|\|38==b\|\|35==b)break a;a+=4}a=-1}if(0>a)return null;b=d.indexOf("&",a);if(0>b\|\|b>g)b=g;a+=4;return decodeURIComponent(d.substr(a,b-a).replace(/\+/g," "))};function r(d,g,a){function b(){--p;if(0>=p){var e;(e=d.GooglebQhCsO)\|\|(e={});var q=e[g];q&&(delete e[g],(e=q[0])&&e.call&&e())}}for(var p=a.length+1,m=0;m<a.length;m++){var h=n(a[m]),k=null;1!=h&&2!=h\|\|!(h=d.document.getElementById("goog_conv_iframe"))\|\|h.src\|\|(k=h);k\|\|(k=new Image);k.onload=b;k.src=a[m]}b()}var t=["ss_"],u=s\|\|f;t[0]in u\|\|"undefined"==typeof u.execScript\|\|u.execScript("var "+t[0]); for(var v;t.length&&(v=t.shift());)t.length\|\|void 0===r?u[v]&&u[v]!==Object.prototype[v]?u=u[v]:u=u[v]={}:u[v]=r;}).call(this);;s.ss_(window,'

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\fbevents[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	96704
Entropy (8bit):	5.393909271734794
Encrypted:	false
SSDEEP:	1536:GM+OWtI6ay9Xes12KqQqfUThe7Kdv0a9sIOs1jaV7vu5Dm20C+QNSMngySZYSlIa:GzOW5jSVnYDGeI
MD5:	4CA982E62FA76F4A9E5073AEB74D0C4E
SHA1:	C0E6B1D822924FCC498EF384317853A67B2E014B
SHA-256:	79FCEF7A0549EF72C11FC65E27B2E6BB1194EAB7D9717980091BC577CFB9B73F
SHA-512:	D437F6957C38499C62A9648070155E1EF243D9537169F9DD067A21FCF524158511CC6FF0066A332E72411A3AB486FE71F32CBD3AA461AE63503F7B3F2F9E47A3
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\icon[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	504
Entropy (8bit):	4.8684100686223895
Encrypted:	false
SSDEEP:	12:jFP/sO6ZRoT6pHAcqJlg//s6ZmOHc9n+5cMK00k14enEsTeq:58OYsKmJlrYmOOk4TfenEsTL
MD5:	8F484550C1B288952476FB22C50800F3
SHA1:	75D86326D06A95328567853071277C3A5DE9F869
SHA-256:	7F4E3664C3FC771D633781FE7C8821709B7C33ACE8D55BBDD4C1181338FC9F6C
SHA-512:	C1D303C6B4EE13477630E649C81FDAD35675351D707A67C1E87648B61384F971604AF3CA4F9EAB6F998112F87DD193B84D2CF1756039EB5F3EEF9E7AACC186D2
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.googleapis.com/icon?family=Material+Icons
Preview:	@font-face {. font-family: 'Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialicons/v92/flUhRq6tzZclQEJ-Vdg-IuiaDsNa.woff) format('woff');.}...material-icons {. font-family: 'Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. font-feature-settings: 'liga';.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\main.dfb6537176bb9f70123d[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators, with overstriking
Category:	downloaded
Size (bytes):	3584731
Entropy (8bit):	5.1284374260737
Encrypted:	false
SSDEEP:	49152:9WLc9dHAqqdAD16hydoNI8GHKq7tp7gjxbzGWFSfpkJ+VTz1k1UlBNyoxk7Brt+M:jvEIBC
MD5:	D4B4E2988E813ECF2FFBBB548B7F8048
SHA1:	958D7B619955578D3C883CBB85056F11299366DB
SHA-256:	93D37D32EE45A6360E76DBBC5045058A57E1BC72243DD608B29186B87F513100
SHA-512:	A0B2B2844B09634C748F45D03C7FE75C180A9847AA931C3F8D727FFC26D5348E13447E7E7C39CA03F1C40A4AFAC6D4672DAD1924B056589369497A858029430A
Malicious:	false
Reputation:	low
IE Cache URL:	https://bank.varomoney.com/main.dfb6537176bb9f70123d.js
Preview:	/****/ (() => { // webpackBootstrap./**/ .var __webpack_modules__ = ({..// 62634:./*/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {.."use strict";..// EXPORTS.__webpack_require__.d(__webpack_exports__, {. "Ri": () => (/ reexport / ApolloCache),. "Ct": () => (/ reexport / Cache_Cache),. "h4": () => (/ reexport / InMemoryCache),. "yD": () => (/ reexport / MissingFieldError),. "ab": () => (/ reexport / cacheSlot),. "uG": () => (/ reexport / defaultDataIdFromObject),. "QS": () => (/ reexport */ makeVar).});..// UNUSED EXPORTS: isReference, makeReference..;// CONCATENATED MODULE: ./node_modules/@wry/trie/lib/trie.esm.js.// A [trie](https://en.wikipedia.org/wiki/Trie) data structure that holds..// object keys weakly, yet can also hold non-object keys, unlike the..// native `WeakMap`...// If no makeData function is supplied, the looked-up data will be an empty,..// null-prototype Object...var defaultMakeData = function () { return Obj

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\src=10959376;type=invmedia;cat=varom00;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\tr[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	2.8317663774021287
Encrypted:	false
SSDEEP:	3:CU9yltxlHhn:mn
MD5:	B798F4CE7359FD815DF4BDF76503B295
SHA1:	F8CC6ADDF1707AD236AD9970B0A48F9733D07DA5
SHA-256:	10D8D42D73A02DDB877101E72FBFA15A0EC820224D97CEDEE4CF92D571BE5CAA
SHA-512:	921944DC10FBFB6224D69F0B3AC050F4790310FD1BCAC3B87C96512AD5ED9A268824F3F5180563D372642071B4704C979D209BAF40BC0B1C9A714769ABA7DFC7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.facebook.com/tr/?id=347693183003603&ev=PageView&dl=https%3A%2F%2Fwww.varomoney.com%2Fapply-simple-card%2F%3Futm_source%3Dgoogle%26utm_medium%3Dcpc%26gclid%3DCj0KCQjw2tCGBhCLARIsABJGmZ7qAVR3iTtfCGyMPfjgJ6wMf4a_9wV-zdKLQQW6Rh3qkNrHfKFJ4UEaArggEALw_wcB&rl=&if=false&ts=1624563442665&sw=1280&sh=1024&v=2.9.42&r=stable&ec=0&o=14&fbp=fb.1.1624563442664.1333816177&it=1624563442412&coo=false&tm=1&rqm=GET
Preview:	GIF89a.............!.......,...........D..;.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\tr[2].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	2.8317663774021287
Encrypted:	false
SSDEEP:	3:CU9yltxlHhn:mn
MD5:	B798F4CE7359FD815DF4BDF76503B295
SHA1:	F8CC6ADDF1707AD236AD9970B0A48F9733D07DA5
SHA-256:	10D8D42D73A02DDB877101E72FBFA15A0EC820224D97CEDEE4CF92D571BE5CAA
SHA-512:	921944DC10FBFB6224D69F0B3AC050F4790310FD1BCAC3B87C96512AD5ED9A268824F3F5180563D372642071B4704C979D209BAF40BC0B1C9A714769ABA7DFC7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.facebook.com/tr/?id=347693183003603&ev=SubscribedButtonClick&dl=https%3A%2F%2Fwww.varomoney.com%2Fapply-simple-card%2F%3Futm_source%3Dgoogle%26utm_medium%3Dcpc%26gclid%3DCj0KCQjw2tCGBhCLARIsABJGmZ7qAVR3iTtfCGyMPfjgJ6wMf4a_9wV-zdKLQQW6Rh3qkNrHfKFJ4UEaArggEALw_wcB&rl=&if=false&ts=1624563461335&cd[buttonFeatures]=%7B%22classList%22%3A%22elementor-button-text%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Open%20Account%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22span%22%7D&cd[buttonText]=Open%20Account&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Sign%20Up%20for%20Varo%20Today%20%7C%20Open%20a%20New%20Bank%20Account%22%7D&cd[parameters]=%5B%5D&sw=1280&sh=1024&v=2.9.42&r=stable&ec=2&o=14&fbp=fb.1.1624563442664.1333816177&it=1624563442412&coo=false&es=automatic&tm=3&rqm=GET
Preview:	GIF89a.............!.......,...........D..;.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\varo-logo-black[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1763
Entropy (8bit):	4.239452533356386
Encrypted:	false
SSDEEP:	24:t4zn7cbor0tfWGcAt48N8QLGnenOtNsbxHeTzcRgETt2QQyS39DBigm6R7LexYmh:scBlDN91OzvYiUXQySt1i3sCh
MD5:	FB65473270FFBB41ECBD739D4DE1CAF5
SHA1:	95072F36118B5D4DCEF99FA90905E4C4B941443F
SHA-256:	271BEC8EEAA36FEC68D35D8A9D391CFA528A05021E3C1B24F0BD0F898733EBF3
SHA-512:	31161A7AF71BC92DF07E2A2FD0AD46BFED22892F1EB695BC0FA81A24A4A3B54FE677BDE66D15F7DF5531D319476F12C7DF6F6E8D8440CBCDD057C514F809CE27
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.varomoney.com/wp-content/uploads/2020/11/varo-logo-black.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="141" height="53" viewBox="0 0 141 53" fill="none"><path d="M0 0H13.0915L21.06 26.7894C22.1984 30.648 23.4083 35.7912 23.4083 35.7912H23.55C23.55 35.7912 24.8307 30.5761 25.8982 26.7894L33.7959 0H46.5311L29.8113 51.0793H16.7913L0 0Z" fill="#212121"></path><path d="M40.5443 40.8638C40.5443 32.7909 46.9473 30.3625 54.4893 29.3618C61.3195 28.5047 63.7386 27.7906 63.7386 25.2898C63.7386 22.9326 62.2433 21.3607 58.758 21.3607C55.0582 21.3607 53.2086 23.0038 52.853 26.0757H42.18C42.4647 19.2868 47.6585 13.5026 58.6872 13.5026C64.1657 13.5026 67.8656 14.5026 70.4979 16.5053C73.6282 18.7901 75.1222 22.3634 75.1222 26.9361L75.1625 51.0824H64.0013L63.9518 47.011H63.8101C61.6751 50.083 58.4733 52.0119 52.9954 52.0119C45.7381 52.008 40.5443 48.0783 40.5443 40.8638ZM64.0234 38.0059V33.648C62.5281 34.4313 60.395 35.0051 58.0468 35.5769C53.561 36.577 50.8623 37.6045 51.0034 40.8644C51.1445 44.1244 53.5532 44.7883 56.6952 44.5781C61.3169 44.2693 64.0234 41

C:\Users\user\AppData\Local\Temp\~DF3B41B50DAC1616BA.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	69423
Entropy (8bit):	2.1490936168585115
Encrypted:	false
SSDEEP:	768:AoK8ipV+b+84+QsNMYkT6K8ip0+b+84+SCNSYkTXZlMJM:
MD5:	23944B9409C65C7DFA4547DA8F78CC2F
SHA1:	D35D161544D387E7191674DF204F6320AA40796E
SHA-256:	DCC8F4151E37D2F00496558E3990702FFDECB53765D2BC1194E1A21EEC68274D
SHA-512:	D9E0F1CBF1D26E949E4AAB4B4C3C34E96B45204DCE774A26143E8F6884447A7B50353253DFF601F6B886F74656373CEF0FB46885F8692AF9E6E3DF66F82669B7
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF9579AA6165B902A3.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	13029
Entropy (8bit):	0.47897905869314994
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9lo49loI9lWbU/Y6zY:kBqoIzlbU/Y6zY
MD5:	A3BD58F28D2478A6BF8C8CE8B472FBD6
SHA1:	D8EC948D9A9F6108BE3DFFDBDF43DA1AE8002AA8
SHA-256:	3E14B7947D9201E57899412B2FF0243BE3B019FC30568419B8885C7908AAA5ED
SHA-512:	65E92C701FABFA2A7C356C92660F8DB7659F16436F983E236B9556ACC524CEF01C661639F5D0188D5084FA851992D751B455D3BEA796A7D9595954513D373267
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFD0462257355AC220.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	0.9836311908461415
Encrypted:	false
SSDEEP:	96:kBqoxDhHWSVSE+mxtiDCzQ5CK7V2xUNo2f3Mrds:kBqoxDhHjgE+q8CzQ5CKmEok3u6
MD5:	6E2E7C1FE596DE8A6CA477E56027A0E6
SHA1:	583EAFA33641D422D02DF025D54EE0C917A0E1A0
SHA-256:	34014DC14D09464C80D185AA3EFD1889A07C6A9072FC13D3DB1DF0947B4219C7
SHA-512:	8C4398B475BA85C9051F504737B481EC06DCA6514A61D408B49C7F667DCAEBCD53A3ADC4CDFFB43046634FD20FCFC8123A7353765D654DD83F1813451517A753
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

No static file info

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 713
• 443 (HTTPS)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 24, 2021 21:37:20.670594931 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.671955109 CEST	49749	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.708865881 CEST	443	49748	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.708983898 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.709991932 CEST	443	49749	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.710108995 CEST	49749	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.717343092 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.717412949 CEST	49749	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.755213976 CEST	443	49749	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.755445004 CEST	443	49748	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.757594109 CEST	443	49748	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.757637024 CEST	443	49748	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.757751942 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.757793903 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.757867098 CEST	443	49749	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.757911921 CEST	443	49749	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.757966042 CEST	49749	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.757980108 CEST	49749	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.797075033 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.797463894 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.798357010 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.822520018 CEST	49749	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.822973013 CEST	49749	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.836965084 CEST	443	49748	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.836978912 CEST	443	49748	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.837989092 CEST	443	49748	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.839756012 CEST	443	49748	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.839847088 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.840795994 CEST	443	49748	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.840862036 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.841233969 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.862220049 CEST	443	49749	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.862246037 CEST	443	49749	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.862690926 CEST	443	49749	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.862730026 CEST	443	49749	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.862792015 CEST	49749	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.862813950 CEST	49749	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.863364935 CEST	49749	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.865716934 CEST	443	49748	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.865756035 CEST	443	49748	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.865813971 CEST	443	49748	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.865863085 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.865874052 CEST	443	49748	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.865907907 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.865914106 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.865923882 CEST	443	49748	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.865927935 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.865957975 CEST	443	49748	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.866007090 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.866044998 CEST	49748	443	192.168.2.4	104.16.95.65
Jun 24, 2021 21:37:20.881275892 CEST	443	49748	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:20.901374102 CEST	443	49749	104.16.95.65	192.168.2.4
Jun 24, 2021 21:37:21.500477076 CEST	49760	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.503407001 CEST	49762	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.547226906 CEST	443	49760	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.547303915 CEST	49760	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.549895048 CEST	443	49762	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.550014019 CEST	49762	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.556782961 CEST	49760	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.557246923 CEST	49762	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.602478981 CEST	443	49760	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.603692055 CEST	443	49762	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.609443903 CEST	443	49760	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.609461069 CEST	443	49760	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.609477043 CEST	443	49760	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.609489918 CEST	443	49760	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.609565973 CEST	49760	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.610865116 CEST	443	49762	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.610883951 CEST	443	49762	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.610902071 CEST	443	49762	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.610913992 CEST	443	49762	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.610975027 CEST	49762	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.611007929 CEST	49762	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.675335884 CEST	49760	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.675822020 CEST	49760	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.676227093 CEST	49760	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.682806015 CEST	49762	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.684439898 CEST	49762	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.721326113 CEST	443	49760	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.721344948 CEST	443	49760	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.721457005 CEST	49760	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.721476078 CEST	49760	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.721800089 CEST	443	49760	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.721847057 CEST	49760	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.723206997 CEST	49760	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.728198051 CEST	443	49760	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.729655981 CEST	443	49762	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.729675055 CEST	443	49762	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.729733944 CEST	49762	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.729770899 CEST	49762	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.730885029 CEST	443	49762	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.730952978 CEST	49762	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.735724926 CEST	49762	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.736154079 CEST	443	49760	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.736171961 CEST	443	49760	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.736203909 CEST	49760	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.736222982 CEST	49760	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.736649990 CEST	443	49760	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.736665964 CEST	443	49760	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.736699104 CEST	49760	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.736718893 CEST	49760	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.755901098 CEST	49760	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:21.774239063 CEST	443	49760	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.787261009 CEST	443	49762	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:21.802210093 CEST	443	49760	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:22.439686060 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.440663099 CEST	49767	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.485768080 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.485881090 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.487185001 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.487621069 CEST	443	49767	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.487735987 CEST	49767	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.490752935 CEST	49767	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.533112049 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.536845922 CEST	49768	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:22.537758112 CEST	443	49767	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.538142920 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:22.540590048 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.540618896 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.540637016 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.540651083 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.540694952 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.540730000 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.544922113 CEST	443	49767	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.544945955 CEST	443	49767	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.544961929 CEST	443	49767	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.544976950 CEST	443	49767	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.545054913 CEST	49767	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.545084953 CEST	49767	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.552643061 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.556257963 CEST	49767	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.558070898 CEST	49770	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.559207916 CEST	49771	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.560208082 CEST	49772	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.560339928 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.560554028 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.560611963 CEST	49767	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.561707020 CEST	49773	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.597018957 CEST	443	49770	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.597152948 CEST	49770	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.598084927 CEST	443	49771	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.598233938 CEST	49771	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.598809958 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.598881006 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.598881006 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.598927975 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.599083900 CEST	443	49772	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.599150896 CEST	49772	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.600521088 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.600661039 CEST	49773	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.601941109 CEST	49770	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.602315903 CEST	49771	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.602569103 CEST	49772	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.603061914 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.603534937 CEST	443	49767	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.603549004 CEST	443	49767	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.603636980 CEST	49767	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.603894949 CEST	49773	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.606406927 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.606472969 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.607383013 CEST	49767	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.607599020 CEST	443	49767	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.607676029 CEST	49767	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.611529112 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.621107101 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.621148109 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.621197939 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.621236086 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.621290922 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.621337891 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.621423960 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.629251957 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.629298925 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:22.630898952 CEST	49775	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.640805006 CEST	443	49770	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.641057014 CEST	443	49771	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.641099930 CEST	443	49770	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.641117096 CEST	443	49770	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.641243935 CEST	49770	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.641283035 CEST	49770	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.641349077 CEST	443	49771	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.641366959 CEST	443	49771	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.641479015 CEST	49771	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.641601086 CEST	443	49772	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.642385006 CEST	443	49772	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.642407894 CEST	443	49772	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.642472029 CEST	49772	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.642489910 CEST	49772	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.642616034 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.643043995 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.643064976 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.643167973 CEST	49773	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.643189907 CEST	49773	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.643397093 CEST	443	49771	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.643491983 CEST	49771	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.644624949 CEST	443	49770	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.644643068 CEST	443	49770	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.644710064 CEST	49770	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.644731045 CEST	49770	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.645203114 CEST	443	49772	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.645221949 CEST	443	49772	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.645270109 CEST	49772	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.645288944 CEST	49772	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.652961969 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.653192043 CEST	49773	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.653507948 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.659091949 CEST	443	49767	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.661891937 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.662055969 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.663440943 CEST	443	49775	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.663588047 CEST	49775	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.665127993 CEST	49776	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:22.669255018 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.669398069 CEST	49773	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.670371056 CEST	49773	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.670766115 CEST	49773	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.671360016 CEST	49777	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:22.672388077 CEST	49771	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.672768116 CEST	49775	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.672800064 CEST	49771	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.674801111 CEST	49770	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.675405979 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:22.680772066 CEST	49772	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.682634115 CEST	49770	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.687972069 CEST	49780	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.688599110 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.701786041 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.702426910 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.702446938 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.702466965 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.702517986 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.702554941 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.705224037 CEST	443	49775	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.705902100 CEST	443	49775	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.705921888 CEST	443	49775	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.705941916 CEST	443	49775	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.705996990 CEST	49775	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.706036091 CEST	49775	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.708179951 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.708436966 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.708566904 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.708646059 CEST	49773	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.708684921 CEST	49773	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.709100008 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.709131002 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.709191084 CEST	49773	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.709484100 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.711195946 CEST	443	49771	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.711529016 CEST	443	49771	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.711592913 CEST	49771	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.711610079 CEST	443	49771	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.711671114 CEST	49771	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.712630033 CEST	443	49771	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.712740898 CEST	443	49771	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.712795019 CEST	49771	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.713644981 CEST	443	49770	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.714556932 CEST	49773	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.715900898 CEST	49771	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.718061924 CEST	443	49770	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.718154907 CEST	49770	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.719641924 CEST	443	49772	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.719891071 CEST	443	49772	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.719957113 CEST	49772	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.721462965 CEST	443	49770	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.721807957 CEST	443	49768	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:22.721927881 CEST	49768	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:22.723822117 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:22.723906994 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:22.725832939 CEST	443	49780	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.725923061 CEST	49780	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.726412058 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.726492882 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.726589918 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.727581978 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.727602959 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.727613926 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.727627039 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.727678061 CEST	49773	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.727708101 CEST	49773	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.728629112 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.728698015 CEST	49773	443	192.168.2.4	143.204.98.33
Jun 24, 2021 21:37:22.728769064 CEST	49768	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:22.729195118 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.729944944 CEST	49775	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.730190992 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.730937004 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:22.731178999 CEST	49780	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.731426001 CEST	49775	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.735093117 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.735476971 CEST	443	49770	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.735574961 CEST	49770	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.735730886 CEST	443	49770	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:22.735797882 CEST	49770	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:22.753952026 CEST	443	49773	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.756278038 CEST	443	49771	143.204.98.33	192.168.2.4
Jun 24, 2021 21:37:22.760138988 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.760375023 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.760441065 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.760458946 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.760504961 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.761203051 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.762871027 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.762893915 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.763084888 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.764013052 CEST	443	49775	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.764164925 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.764276028 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.764286041 CEST	443	49775	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.764405012 CEST	443	49775	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.764408112 CEST	49775	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.764477968 CEST	49775	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.764492035 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.764538050 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.764549971 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.764561892 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.764578104 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.764621973 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.765058041 CEST	443	49775	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.765081882 CEST	443	49775	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.765269995 CEST	49775	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.766784906 CEST	49775	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.766820908 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.766841888 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.766897917 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.766925097 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.769104004 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.769117117 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.769248009 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.770355940 CEST	443	49780	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.770566940 CEST	443	49780	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.770590067 CEST	443	49780	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.770610094 CEST	443	49780	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.770642042 CEST	49780	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.770677090 CEST	443	49780	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.770729065 CEST	49780	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.770765066 CEST	49780	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.770803928 CEST	443	49780	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.771030903 CEST	49780	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.771393061 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.771533966 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.772906065 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.773219109 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.773240089 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.773255110 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.773272038 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.773296118 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.773332119 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.773370981 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.773444891 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.773488045 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.783920050 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.784312010 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.784821987 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.794724941 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.794749975 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.794817924 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.794862986 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.795831919 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.795855045 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.795924902 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.795938969 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.798126936 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.798149109 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.798223019 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.798250914 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.800431013 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.800457954 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.800491095 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.800503016 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.802710056 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.802732944 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.802784920 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.802824974 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.804471970 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.804493904 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.804546118 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.804565907 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.807070971 CEST	49780	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.807496071 CEST	49780	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.811808109 CEST	49782	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.811974049 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.821991920 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.822012901 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.822153091 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.822199106 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.822237968 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.822813988 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.823925018 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.823947906 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.823965073 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.823982954 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.824002028 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.824026108 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.824146032 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.839869022 CEST	443	49776	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:22.840069056 CEST	49776	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:22.840607882 CEST	443	49775	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.845181942 CEST	443	49780	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.845196962 CEST	443	49780	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.845277071 CEST	443	49780	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.845366955 CEST	49780	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.845470905 CEST	49780	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.845977068 CEST	49780	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.846009970 CEST	443	49777	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:22.846153021 CEST	49777	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:22.858419895 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.858532906 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.859111071 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.860858917 CEST	443	49782	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.860953093 CEST	49782	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.862087011 CEST	49782	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.862741947 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.895385981 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:22.895469904 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:22.897002935 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.902332067 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.905563116 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.911204100 CEST	443	49782	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.912483931 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.912511110 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.912530899 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.912544012 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.912591934 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.912645102 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.913388014 CEST	443	49768	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:22.913536072 CEST	443	49768	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:22.913556099 CEST	443	49768	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:22.913570881 CEST	443	49768	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:22.913582087 CEST	443	49768	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:22.913609982 CEST	49768	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:22.913680077 CEST	49768	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:22.914941072 CEST	443	49768	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:22.915050983 CEST	49768	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:22.917041063 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:22.917161942 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:22.917182922 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:22.917200089 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:22.917211056 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:22.917263985 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:22.917318106 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:22.918211937 CEST	443	49782	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.918235064 CEST	443	49782	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.918251991 CEST	443	49782	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.918263912 CEST	443	49782	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.918311119 CEST	49782	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.918379068 CEST	49782	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.918855906 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:22.918932915 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:22.924932957 CEST	443	49780	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.927484989 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.927879095 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.928157091 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.932122946 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:22.932432890 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:22.935503960 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.937716961 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:22.937804937 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:22.939718008 CEST	49768	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:22.942635059 CEST	49782	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.943068981 CEST	49782	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.975554943 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.975678921 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.975708961 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.975758076 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.975800991 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.976252079 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.976330042 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.976418018 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.991322994 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.991343021 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.991349936 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.991398096 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.991420031 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.991460085 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.991466045 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.991774082 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.993298054 CEST	443	49782	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.993371964 CEST	49782	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.993957043 CEST	443	49782	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.993993044 CEST	443	49782	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:22.994031906 CEST	49782	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.994055986 CEST	49782	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:22.994282007 CEST	49782	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:23.015047073 CEST	443	49776	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.015141964 CEST	49776	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.021049023 CEST	443	49777	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.021117926 CEST	49777	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.025432110 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.025454044 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.025521040 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.025554895 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.026161909 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.026226997 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.026912928 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.026937008 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.026989937 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.027015924 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.028440952 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.028458118 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.028548002 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.028649092 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:23.029936075 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.030030012 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.030277967 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.030356884 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.031064987 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.031166077 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.031791925 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.031812906 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.031857967 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.031884909 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.033265114 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.033343077 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.035240889 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.035315990 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.035604000 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.035681963 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.036413908 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.036499023 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.037086964 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.037111998 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.037148952 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.037178040 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.038568974 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.038646936 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.039304972 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.039376020 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.039726973 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.039794922 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.040332079 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:23.040395021 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.040452957 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.041177034 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.041202068 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.041251898 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.041280985 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.042645931 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.042718887 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.044085026 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.044167995 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.044404030 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.044470072 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.045177937 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.045263052 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.045897007 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.045916080 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.045963049 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.045983076 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.047368050 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.047430992 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.048695087 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.048751116 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.049046040 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.049096107 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.049258947 CEST	443	49782	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:23.049877882 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.049942970 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.051743984 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.051770926 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.051832914 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.052124977 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.052177906 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.053909063 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.053972006 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.058752060 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.058809996 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.060034990 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.060089111 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.060107946 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.060151100 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.060767889 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.060795069 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.060844898 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.060883999 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.062237978 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.062287092 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.062310934 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.062328100 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.063729048 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.063754082 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.063800097 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.063831091 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.065252066 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.065324068 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.065936089 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.066001892 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.068593979 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.068620920 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.068655968 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.068671942 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.068676949 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.068686008 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.068757057 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.068802118 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.069534063 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.069624901 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.070308924 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.070384026 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.071233034 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.071259975 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.071330070 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.071360111 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.072777033 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.072799921 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.072854996 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.072874069 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.073903084 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.073993921 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.074256897 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.074331045 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.075227022 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.075251102 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.075289011 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.075310946 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.075896978 CEST	49784	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.075984001 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.077157021 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.077183008 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.077193975 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:23.077249050 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.079138994 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:23.079158068 CEST	49786	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.079809904 CEST	49787	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.116089106 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.116185904 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.116293907 CEST	443	49784	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.116441965 CEST	49784	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.117062092 CEST	49784	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.117151976 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.117651939 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:23.118036032 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:23.118108988 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:23.119651079 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:23.119676113 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:23.119714975 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:23.119726896 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:23.119731903 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:23.119743109 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:23.119760036 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:23.119771004 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:23.119775057 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:23.119790077 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:23.119790077 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:23.119812012 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:23.119837046 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:23.125184059 CEST	443	49768	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:23.125324965 CEST	49768	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:23.134501934 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:23.143539906 CEST	443	49787	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.143563986 CEST	443	49786	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.143663883 CEST	49787	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.143740892 CEST	49786	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.144475937 CEST	49787	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.144594908 CEST	49786	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.155786991 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.156147003 CEST	443	49784	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.157193899 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.157219887 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.157233000 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.157275915 CEST	443	49784	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.157284975 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.157294035 CEST	443	49784	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.157310963 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.157387972 CEST	49784	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.157391071 CEST	443	49784	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.157443047 CEST	49784	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.167162895 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.167531013 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.167709112 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.168061972 CEST	49784	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.168411970 CEST	49784	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.183551073 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.185022116 CEST	49788	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.192096949 CEST	443	49776	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.193034887 CEST	443	49776	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.193063021 CEST	443	49776	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.193078995 CEST	443	49776	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.193207026 CEST	49776	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.193239927 CEST	49776	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.198019028 CEST	443	49777	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.198951960 CEST	443	49777	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.198978901 CEST	443	49777	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.198995113 CEST	443	49777	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.199043989 CEST	49777	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.199088097 CEST	49777	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.204389095 CEST	443	49787	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.204502106 CEST	443	49787	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.204520941 CEST	443	49787	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.204565048 CEST	443	49787	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.204577923 CEST	443	49787	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.204591036 CEST	49787	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.205759048 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.205780983 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.205826998 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.205976009 CEST	49787	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.206006050 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.206079006 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.206248045 CEST	443	49786	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.206268072 CEST	443	49787	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.206288099 CEST	443	49787	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.206362963 CEST	49787	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.206475973 CEST	443	49786	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.206494093 CEST	443	49786	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.206510067 CEST	443	49786	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.206521988 CEST	443	49786	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.206551075 CEST	49786	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.206607103 CEST	49786	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.206757069 CEST	443	49784	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.206782103 CEST	443	49784	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.206840038 CEST	49784	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.206866980 CEST	443	49784	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.206882000 CEST	49784	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.206921101 CEST	49784	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.207830906 CEST	49784	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.208404064 CEST	443	49786	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.208429098 CEST	443	49786	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.208497047 CEST	49786	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.209108114 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.212048054 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.216123104 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.216274023 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.217223883 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.217932940 CEST	443	49788	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.218060970 CEST	49788	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.218770027 CEST	49788	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.219523907 CEST	49787	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.219866991 CEST	49787	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.220359087 CEST	49786	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.220798969 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.220860958 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.221038103 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:23.249800920 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.250461102 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.250489950 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.250504017 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.250555038 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.250978947 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.251339912 CEST	443	49784	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.251692057 CEST	443	49788	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.252223015 CEST	443	49788	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.252247095 CEST	443	49788	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.252259970 CEST	443	49788	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.252285004 CEST	49788	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.252312899 CEST	49788	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.253182888 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.256290913 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.256869078 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.257190943 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.258075953 CEST	49788	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.258728027 CEST	49788	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.259557009 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:23.279800892 CEST	443	49787	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.279946089 CEST	443	49787	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.280000925 CEST	49787	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.282754898 CEST	443	49787	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.282782078 CEST	443	49786	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.282793999 CEST	443	49787	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:23.282816887 CEST	49787	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.282857895 CEST	49786	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.283042908 CEST	49787	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:23.290102959 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.290237904 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.290302038 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.290333986 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.290379047 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.290568113 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.290581942 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.290637016 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.291270971 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.291455030 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.291867971 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.291923046 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.291982889 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.292022943 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.292135000 CEST	443	49788	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.292378902 CEST	443	49788	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.292432070 CEST	49788	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.292454004 CEST	443	49788	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.292499065 CEST	49788	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.292571068 CEST	443	49788	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.292607069 CEST	443	49788	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.292649031 CEST	49788	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.293204069 CEST	49788	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.319159985 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:23.319259882 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:23.326636076 CEST	443	49788	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.365355015 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.368057966 CEST	443	49776	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.368082047 CEST	443	49776	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.368165970 CEST	49776	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.368212938 CEST	49776	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.373938084 CEST	443	49777	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.373964071 CEST	443	49777	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.374027967 CEST	49777	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.374048948 CEST	49777	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.379260063 CEST	49777	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.379290104 CEST	49776	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.379627943 CEST	49777	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.554109097 CEST	443	49777	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.554128885 CEST	443	49776	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.554390907 CEST	443	49777	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.555001974 CEST	443	49777	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.555068970 CEST	443	49777	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.555085897 CEST	443	49776	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.555126905 CEST	443	49776	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.555126905 CEST	49777	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.555160999 CEST	49777	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.555201054 CEST	49776	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.555253983 CEST	49776	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.559175014 CEST	443	49777	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.559194088 CEST	443	49777	216.200.122.11	192.168.2.4
Jun 24, 2021 21:37:23.559314966 CEST	49777	443	192.168.2.4	216.200.122.11
Jun 24, 2021 21:37:23.636786938 CEST	49791	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.637561083 CEST	49792	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.654345036 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.654521942 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.654582024 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.682836056 CEST	443	49791	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.682976007 CEST	49791	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.683763981 CEST	443	49792	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.683847904 CEST	49792	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.683926105 CEST	49791	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.684925079 CEST	49792	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.686928034 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.686944008 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.687036037 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.687134027 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.687149048 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.687383890 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.687400103 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.687454939 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:23.687547922 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:23.729827881 CEST	443	49791	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.731060982 CEST	443	49792	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.736785889 CEST	443	49791	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.736810923 CEST	443	49791	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.736834049 CEST	443	49791	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.736850023 CEST	443	49791	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.736884117 CEST	49791	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.736963987 CEST	49791	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.738070011 CEST	443	49792	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.738087893 CEST	443	49792	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.738106966 CEST	443	49792	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.738121033 CEST	443	49792	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.738177061 CEST	49792	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.738260031 CEST	49792	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.745874882 CEST	49791	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.746550083 CEST	49791	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.746927977 CEST	49791	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.748709917 CEST	49792	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.749371052 CEST	49792	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.792037964 CEST	443	49791	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.792066097 CEST	443	49791	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.792243958 CEST	49791	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.792629004 CEST	443	49791	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.792714119 CEST	49791	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.793459892 CEST	49791	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.795273066 CEST	443	49792	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.795334101 CEST	443	49792	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.795397043 CEST	49792	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.795435905 CEST	49792	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.795495987 CEST	443	49792	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.795589924 CEST	49792	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.796498060 CEST	49792	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.797671080 CEST	443	49791	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.835910082 CEST	443	49791	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.836107016 CEST	49791	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.836580992 CEST	443	49791	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.836680889 CEST	443	49791	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.836688995 CEST	49791	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.836755991 CEST	49791	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.837212086 CEST	49791	443	192.168.2.4	142.250.186.70
Jun 24, 2021 21:37:23.839550972 CEST	443	49791	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.848084927 CEST	443	49792	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:23.885050058 CEST	443	49791	142.250.186.70	192.168.2.4
Jun 24, 2021 21:37:24.319438934 CEST	49795	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.320162058 CEST	49796	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.381309986 CEST	443	49795	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.381498098 CEST	49795	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.382123947 CEST	443	49796	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.382337093 CEST	49796	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.382496119 CEST	49795	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.383181095 CEST	49796	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.445600986 CEST	443	49796	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.445646048 CEST	443	49795	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.446353912 CEST	443	49796	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.446372032 CEST	443	49796	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.446444988 CEST	443	49796	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.446451902 CEST	49796	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.446458101 CEST	443	49796	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.446474075 CEST	443	49795	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.446490049 CEST	443	49795	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.446499109 CEST	49796	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.446505070 CEST	443	49795	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.446520090 CEST	443	49795	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.446551085 CEST	49796	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.446614027 CEST	49795	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.446666956 CEST	49795	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.451523066 CEST	49795	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.451848030 CEST	49796	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.451997995 CEST	49795	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.452230930 CEST	49795	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.452434063 CEST	49796	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.498500109 CEST	49798	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.498531103 CEST	49797	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.515060902 CEST	443	49795	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.515079021 CEST	443	49795	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.515088081 CEST	443	49796	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.515099049 CEST	443	49796	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.515106916 CEST	443	49795	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.515120983 CEST	443	49796	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.515132904 CEST	443	49795	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.515153885 CEST	49795	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.515196085 CEST	49796	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.515919924 CEST	49795	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.515921116 CEST	49796	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.515963078 CEST	49795	443	192.168.2.4	34.254.108.170
Jun 24, 2021 21:37:24.622373104 CEST	443	49795	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.622394085 CEST	443	49796	34.254.108.170	192.168.2.4
Jun 24, 2021 21:37:24.645416021 CEST	443	49798	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:24.645509005 CEST	49798	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.646790028 CEST	49798	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.646986008 CEST	443	49797	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:24.647075891 CEST	49797	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.648118019 CEST	49797	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.789479017 CEST	443	49798	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:24.790097952 CEST	443	49798	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:24.790168047 CEST	443	49798	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:24.790184975 CEST	49798	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.790199995 CEST	443	49798	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:24.790241003 CEST	49798	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.790277004 CEST	49798	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.794019938 CEST	443	49797	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:24.794816971 CEST	443	49797	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:24.794883013 CEST	443	49797	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:24.794886112 CEST	49797	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.794926882 CEST	443	49797	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:24.794931889 CEST	49797	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.794971943 CEST	49797	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.803307056 CEST	49797	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.803459883 CEST	49798	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.804275036 CEST	49797	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.946137905 CEST	443	49798	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:24.946875095 CEST	443	49798	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:24.946969986 CEST	49798	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.949379921 CEST	443	49797	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:24.949934006 CEST	443	49797	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:24.950014114 CEST	49797	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:24.950069904 CEST	443	49797	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:24.950964928 CEST	443	49797	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:24.951020002 CEST	49797	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:34.447865963 CEST	49797	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:34.447981119 CEST	49797	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:34.594227076 CEST	443	49797	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:34.594568968 CEST	443	49797	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:34.594666958 CEST	49797	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:36.330079079 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:36.330210924 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:36.330308914 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:36.370264053 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:36.371227980 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:36.371241093 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:36.391206980 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:36.391283035 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:36.407697916 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:36.452286959 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:41.790256977 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:41.824569941 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:41.824968100 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:41.825130939 CEST	443	49789	157.240.17.35	192.168.2.4
Jun 24, 2021 21:37:41.825198889 CEST	49789	443	192.168.2.4	157.240.17.35
Jun 24, 2021 21:37:42.823683977 CEST	49798	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:42.823707104 CEST	49798	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:42.824112892 CEST	49797	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:42.966275930 CEST	443	49798	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:42.966296911 CEST	443	49798	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:42.966348886 CEST	49798	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:42.966367006 CEST	49798	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:42.969958067 CEST	443	49797	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:42.970367908 CEST	443	49797	162.247.242.21	192.168.2.4
Jun 24, 2021 21:37:42.970447063 CEST	49797	443	192.168.2.4	162.247.242.21
Jun 24, 2021 21:37:43.782660961 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.782712936 CEST	49815	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.821683884 CEST	443	49815	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.821733952 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.821871996 CEST	49815	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.822447062 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.822570086 CEST	49815	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.823225975 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.861567974 CEST	443	49815	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.862123013 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.862320900 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.862363100 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.862396955 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.862426043 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.864227057 CEST	443	49815	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.864269018 CEST	443	49815	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.864303112 CEST	49815	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.864327908 CEST	49815	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.865761042 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.865835905 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.868561983 CEST	443	49815	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.868624926 CEST	49815	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.873485088 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.873702049 CEST	49815	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.873924017 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.874126911 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.874191999 CEST	49815	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.912364960 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.912441015 CEST	443	49815	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.912776947 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.912816048 CEST	443	49815	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.912847996 CEST	443	49815	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.912873030 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.912883043 CEST	49815	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.912899017 CEST	443	49815	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.912903070 CEST	49815	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.913067102 CEST	443	49815	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.913122892 CEST	49815	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.913780928 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.913851976 CEST	49815	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.913857937 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.913944006 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.914000034 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.914623976 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:43.952898979 CEST	443	49815	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:43.953481913 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.512370110 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.512407064 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.512432098 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.512454987 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.512478113 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.512476921 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.512500048 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.512500048 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.512521982 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.512540102 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.513432026 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.513463974 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.513494015 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.513520002 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.514571905 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.514627934 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.514642000 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.514686108 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.515706062 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.515749931 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.515831947 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.516832113 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.516881943 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.516916037 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.516940117 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.517899990 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.517944098 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.518018007 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.519004107 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.519048929 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.519110918 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.520143032 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.520195007 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.520211935 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.520241976 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.521214008 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.521264076 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.521269083 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.521305084 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.522408962 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.522459030 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.522546053 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.523454905 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.523497105 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.523586988 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.523610115 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.524557114 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.524599075 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.524633884 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.524657011 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.525713921 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.525755882 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.525821924 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.552947044 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.552994967 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.553097963 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.553344011 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.553385973 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.553450108 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.554505110 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.554553032 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.554632902 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.555665016 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.555721998 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.555820942 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.556727886 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.556771994 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.556853056 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.557826042 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.557868958 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.557959080 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.557988882 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.558927059 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.558984995 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.559004068 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.559026003 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.560060024 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.560101986 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.560184956 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.560208082 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.561156034 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.561199903 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.561223984 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.561245918 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.562273026 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.562320948 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.562377930 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.562397957 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.563364983 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.563421011 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.563524961 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.564456940 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.564500093 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.564546108 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.564570904 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.565563917 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.565615892 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.565684080 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.565706968 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.627737999 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.627774954 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.627923012 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.627964020 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.628211021 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.628236055 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.628297091 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.628324032 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.629332066 CEST	443	49814	143.204.99.83	192.168.2.4
Jun 24, 2021 21:37:44.629436016 CEST	49814	443	192.168.2.4	143.204.99.83
Jun 24, 2021 21:37:44.847590923 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:44.849721909 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:44.880660057 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:44.880707979 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:44.880759001 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:44.880872011 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:44.880929947 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:44.881048918 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:44.881333113 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:44.881406069 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:44.881454945 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:44.881481886 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:44.881509066 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:44.881545067 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:44.882484913 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:44.882560015 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:44.921490908 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:44.924946070 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:44.932799101 CEST	49768	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:44.933377028 CEST	49768	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:44.933845043 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:44.946681023 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:44.967242002 CEST	443	49781	87.248.118.22	192.168.2.4
Jun 24, 2021 21:37:44.967618942 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:44.967760086 CEST	49781	443	192.168.2.4	87.248.118.22
Jun 24, 2021 21:37:44.972985983 CEST	49786	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:44.973081112 CEST	49786	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:44.973572969 CEST	49787	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:44.982477903 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:44.982511997 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:44.982646942 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:44.983948946 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:44.984049082 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:44.984220028 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:44.985352993 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:44.985445023 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:44.985590935 CEST	49766	443	192.168.2.4	142.250.185.162
Jun 24, 2021 21:37:44.991184950 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:44.999963999 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:45.000061989 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:45.000408888 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:45.024947882 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.024974108 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.025052071 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.025240898 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.025263071 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.025279999 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.025305986 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.025338888 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.026087046 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.026109934 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.026127100 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.026185989 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.026204109 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.026945114 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.026964903 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.026979923 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.027048111 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.027091980 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.027827024 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.027848959 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.027863979 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.027918100 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.027946949 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.028693914 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.028717041 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.028733015 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.028784990 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.029536009 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.029557943 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.029572964 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.029648066 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.030405045 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.030430079 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.030448914 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.030451059 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.030472994 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.030519962 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.031312943 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.031339884 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.031357050 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.031467915 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.031486988 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.032155037 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.032172918 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.032190084 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.032234907 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.032279015 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.033003092 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.033027887 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.033044100 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.033087015 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.033133984 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.033883095 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.033910036 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.033922911 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.034010887 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.034043074 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.034723043 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.034740925 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.034756899 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.034796000 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.034847021 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.035593033 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.035612106 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.035628080 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.035747051 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.035764933 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.036335945 CEST	443	49787	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:45.036350965 CEST	443	49787	212.82.100.181	192.168.2.4
Jun 24, 2021 21:37:45.036438942 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.036456108 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.036468029 CEST	49787	443	192.168.2.4	212.82.100.181
Jun 24, 2021 21:37:45.036484957 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.036495924 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.036509037 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.036519051 CEST	443	49766	142.250.185.162	192.168.2.4
Jun 24, 2021 21:37:45.036567926 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.037321091 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.037343025 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.037360907 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.037391901 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.037412882 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.037440062 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.037641048 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:45.038181067 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.038204908 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.038220882 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.038311958 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.038332939 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.038340092 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.039028883 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.039047956 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.039067984 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.039083958 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.039103985 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.039119959 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.039921999 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.039942026 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.039958000 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.040005922 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.040035963 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.040043116 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.040781021 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.040795088 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.040851116 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.041084051 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.041100025 CEST	443	49774	157.240.17.15	192.168.2.4
Jun 24, 2021 21:37:45.041198969 CEST	49774	443	192.168.2.4	157.240.17.15
Jun 24, 2021 21:37:45.044153929 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:45.051600933 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:45.051615000 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:45.051672935 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:45.051709890 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:45.051784039 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:45.051810026 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:45.051836014 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:45.051855087 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:45.052371025 CEST	49783	443	192.168.2.4	142.250.184.227
Jun 24, 2021 21:37:45.105752945 CEST	443	49783	142.250.184.227	192.168.2.4
Jun 24, 2021 21:37:45.116252899 CEST	443	49768	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:45.116307020 CEST	443	49768	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:45.116348982 CEST	49768	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:45.116405010 CEST	49768	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:45.119162083 CEST	443	49769	3.137.59.185	192.168.2.4
Jun 24, 2021 21:37:45.119270086 CEST	49769	443	192.168.2.4	3.137.59.185
Jun 24, 2021 21:37:52.639719009 CEST	443	49772	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:52.639756918 CEST	443	49772	143.204.94.161	192.168.2.4
Jun 24, 2021 21:37:52.639872074 CEST	49772	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:52.643723965 CEST	49772	443	192.168.2.4	143.204.94.161
Jun 24, 2021 21:37:58.138541937 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:58.138607979 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:58.138667107 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:58.180409908 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:58.180453062 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:58.180480003 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:58.195833921 CEST	443	49785	35.186.226.184	192.168.2.4
Jun 24, 2021 21:37:58.195945024 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:58.197947025 CEST	49785	443	192.168.2.4	35.186.226.184
Jun 24, 2021 21:37:58.242463112 CEST	443	49785	35.186.226.184	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 24, 2021 21:37:11.876019955 CEST	62389	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:11.931793928 CEST	53	62389	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:12.815236092 CEST	49910	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:12.874165058 CEST	53	49910	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:13.628974915 CEST	55854	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:13.684129953 CEST	53	55854	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:14.733654976 CEST	64549	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:14.790381908 CEST	53	64549	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:15.727972984 CEST	63153	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:15.788919926 CEST	53	63153	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:17.463007927 CEST	52991	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:17.510840893 CEST	53	52991	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:18.233236074 CEST	53700	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:18.290401936 CEST	53	53700	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:18.887850046 CEST	51726	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:18.942229986 CEST	53	51726	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:19.251924038 CEST	56794	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:19.310574055 CEST	53	56794	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:20.168596029 CEST	56534	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:20.232983112 CEST	53	56534	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:20.555629969 CEST	56621	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:20.555695057 CEST	56627	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:20.564337969 CEST	63116	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:20.574122906 CEST	64078	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:20.610444069 CEST	53	56621	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:20.610477924 CEST	64801	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:20.610502005 CEST	53	56627	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:20.619282961 CEST	53	63116	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:20.630934954 CEST	53	64078	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:20.668709040 CEST	53	64801	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:21.200198889 CEST	61721	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:21.206051111 CEST	51255	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:21.206262112 CEST	61522	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:21.206655025 CEST	52337	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:21.217958927 CEST	55046	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:21.238006115 CEST	49612	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:21.255687952 CEST	53	52337	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:21.261250019 CEST	49285	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:21.262075901 CEST	53	61721	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:21.264122963 CEST	53	55046	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:21.265733957 CEST	53	51255	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:21.267098904 CEST	53	61522	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:21.298669100 CEST	50601	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:21.309674025 CEST	53	49612	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:21.325249910 CEST	53	49285	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:21.361200094 CEST	53	50601	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:22.156337976 CEST	60875	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:22.224565029 CEST	53	60875	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:22.477273941 CEST	56448	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:22.490041971 CEST	59172	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:22.497251034 CEST	62420	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:22.534459114 CEST	53	56448	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:22.555145025 CEST	53	59172	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:22.555712938 CEST	53	62420	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:22.566277027 CEST	60579	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:22.599253893 CEST	50183	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:22.617588043 CEST	61531	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:22.621279001 CEST	53	60579	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:22.635801077 CEST	49228	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:22.654006958 CEST	53	50183	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:22.678688049 CEST	53	61531	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:22.685127974 CEST	53	49228	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:22.733671904 CEST	59794	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:22.808969021 CEST	53	59794	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:23.016505957 CEST	55916	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:23.025866985 CEST	52752	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:23.068635941 CEST	53	55916	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:23.075340033 CEST	53	52752	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:23.124566078 CEST	60542	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:23.180336952 CEST	53	60542	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:23.474280119 CEST	60689	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:23.536674023 CEST	53	60689	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:23.580281973 CEST	64206	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:23.635047913 CEST	53	64206	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:23.952372074 CEST	50904	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:23.998347998 CEST	53	50904	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:24.255230904 CEST	57525	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:24.315083027 CEST	53	57525	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:24.444447994 CEST	53814	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:24.496440887 CEST	53	53814	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:24.564480066 CEST	53418	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:24.621846914 CEST	53	53418	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:26.446753025 CEST	62833	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:26.504628897 CEST	53	62833	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:27.529495955 CEST	59260	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:27.581975937 CEST	53	59260	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:28.412846088 CEST	49944	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:28.460607052 CEST	53	49944	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:29.629705906 CEST	63300	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:29.684969902 CEST	53	63300	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:30.448040009 CEST	61449	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:30.497510910 CEST	53	61449	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:31.524386883 CEST	51275	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:31.583719969 CEST	53	51275	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:33.156874895 CEST	63492	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:33.213382006 CEST	53	63492	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:38.135083914 CEST	58945	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:38.192178965 CEST	53	58945	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:41.461416960 CEST	60779	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:41.524425030 CEST	53	60779	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:41.836072922 CEST	64014	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:41.897502899 CEST	53	64014	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:42.822253942 CEST	57091	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:42.897902966 CEST	53	57091	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:43.721365929 CEST	55904	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:43.780299902 CEST	53	55904	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:48.930869102 CEST	52109	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:48.989598036 CEST	53	52109	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:49.650402069 CEST	54450	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:49.696727037 CEST	53	54450	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:49.957462072 CEST	52109	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:50.016884089 CEST	53	52109	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:50.693417072 CEST	54450	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:50.739890099 CEST	53	54450	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:51.009485960 CEST	52109	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:51.058808088 CEST	53	52109	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:53.316369057 CEST	54450	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:53.363184929 CEST	53	54450	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:53.521116018 CEST	52109	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:53.570574045 CEST	53	52109	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:53.696142912 CEST	49374	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:53.762639046 CEST	53	49374	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:55.341880083 CEST	54450	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:55.388277054 CEST	53	54450	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:57.672529936 CEST	52109	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:57.722436905 CEST	53	52109	8.8.8.8	192.168.2.4
Jun 24, 2021 21:37:59.404112101 CEST	54450	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:37:59.450495005 CEST	53	54450	8.8.8.8	192.168.2.4
Jun 24, 2021 21:38:02.341316938 CEST	50436	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:38:02.514406919 CEST	53	50436	8.8.8.8	192.168.2.4
Jun 24, 2021 21:38:07.409851074 CEST	62605	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:38:07.467394114 CEST	53	62605	8.8.8.8	192.168.2.4
Jun 24, 2021 21:38:07.557246923 CEST	54256	53	192.168.2.4	8.8.8.8
Jun 24, 2021 21:38:07.612993002 CEST	53	54256	8.8.8.8	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jun 24, 2021 21:37:20.168596029 CEST	192.168.2.4	8.8.8.8	0xd2ed	Standard query (0)	www.varomoney.com	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:20.574122906 CEST	192.168.2.4	8.8.8.8	0xd2e9	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:20.610477924 CEST	192.168.2.4	8.8.8.8	0x73c5	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:21.200198889 CEST	192.168.2.4	8.8.8.8	0x6ce	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:21.261250019 CEST	192.168.2.4	8.8.8.8	0x7df2	Standard query (0)	action.dstillery.com	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:21.298669100 CEST	192.168.2.4	8.8.8.8	0x722b	Standard query (0)	10191186.fls.doubleclick.net	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.156337976 CEST	192.168.2.4	8.8.8.8	0xe4c6	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.477273941 CEST	192.168.2.4	8.8.8.8	0x6ab7	Standard query (0)	collector-9229.us.tvsquared.com	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.490041971 CEST	192.168.2.4	8.8.8.8	0x96d5	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.497251034 CEST	192.168.2.4	8.8.8.8	0x972f	Standard query (0)	sc-static.net	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.566277027 CEST	192.168.2.4	8.8.8.8	0x8c7e	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.599253893 CEST	192.168.2.4	8.8.8.8	0x33d0	Standard query (0)	gwmtracking.com	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.617588043 CEST	192.168.2.4	8.8.8.8	0x4f28	Standard query (0)	action.media6degrees.com	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.635801077 CEST	192.168.2.4	8.8.8.8	0x2a59	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.733671904 CEST	192.168.2.4	8.8.8.8	0xcd98	Standard query (0)	www.google.de	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:23.016505957 CEST	192.168.2.4	8.8.8.8	0xb3ea	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:23.025866985 CEST	192.168.2.4	8.8.8.8	0xf1d9	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:23.124566078 CEST	192.168.2.4	8.8.8.8	0xb9eb	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:23.580281973 CEST	192.168.2.4	8.8.8.8	0x88cb	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:23.952372074 CEST	192.168.2.4	8.8.8.8	0x318f	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:24.255230904 CEST	192.168.2.4	8.8.8.8	0xb25a	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:24.444447994 CEST	192.168.2.4	8.8.8.8	0x7974	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:41.836072922 CEST	192.168.2.4	8.8.8.8	0x2ff5	Standard query (0)	bank.varomoney.com	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:43.721365929 CEST	192.168.2.4	8.8.8.8	0x6760	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:53.696142912 CEST	192.168.2.4	8.8.8.8	0x82aa	Standard query (0)	www.varomoney.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jun 24, 2021 21:37:20.232983112 CEST	8.8.8.8	192.168.2.4	0xd2ed	No error (0)	www.varomoney.com	www.varomoney.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:20.630934954 CEST	8.8.8.8	192.168.2.4	0xd2e9	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:20.668709040 CEST	8.8.8.8	192.168.2.4	0x73c5	No error (0)	static.cloudflareinsights.com		104.16.95.65	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:20.668709040 CEST	8.8.8.8	192.168.2.4	0x73c5	No error (0)	static.cloudflareinsights.com		104.16.94.65	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:21.262075901 CEST	8.8.8.8	192.168.2.4	0x6ce	No error (0)	p.typekit.net	p.typekit.net-v3.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:21.325249910 CEST	8.8.8.8	192.168.2.4	0x7df2	No error (0)	action.dstillery.com	action.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:21.361200094 CEST	8.8.8.8	192.168.2.4	0x722b	No error (0)	10191186.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:21.361200094 CEST	8.8.8.8	192.168.2.4	0x722b	No error (0)	dart.l.doubleclick.net		142.250.186.70	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.224565029 CEST	8.8.8.8	192.168.2.4	0xe4c6	No error (0)	googleads.g.doubleclick.net		142.250.185.162	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.534459114 CEST	8.8.8.8	192.168.2.4	0x6ab7	No error (0)	collector-9229.us.tvsquared.com	collectorv.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:22.534459114 CEST	8.8.8.8	192.168.2.4	0x6ab7	No error (0)	collectorv.us.tvsquared.com		3.137.59.185	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.534459114 CEST	8.8.8.8	192.168.2.4	0x6ab7	No error (0)	collectorv.us.tvsquared.com		18.190.173.7	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.555145025 CEST	8.8.8.8	192.168.2.4	0x96d5	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:22.555145025 CEST	8.8.8.8	192.168.2.4	0x96d5	No error (0)	dg2iu7dxxehbo.cloudfront.net		143.204.94.161	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.555712938 CEST	8.8.8.8	192.168.2.4	0x972f	No error (0)	sc-static.net		143.204.98.33	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.555712938 CEST	8.8.8.8	192.168.2.4	0x972f	No error (0)	sc-static.net		143.204.98.115	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.555712938 CEST	8.8.8.8	192.168.2.4	0x972f	No error (0)	sc-static.net		143.204.98.37	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.555712938 CEST	8.8.8.8	192.168.2.4	0x972f	No error (0)	sc-static.net		143.204.98.106	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.621279001 CEST	8.8.8.8	192.168.2.4	0x8c7e	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:22.621279001 CEST	8.8.8.8	192.168.2.4	0x8c7e	No error (0)	scontent.xx.fbcdn.net		157.240.17.15	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.654006958 CEST	8.8.8.8	192.168.2.4	0x33d0	No error (0)	gwmtracking.com		216.200.122.11	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.678688049 CEST	8.8.8.8	192.168.2.4	0x4f28	No error (0)	action.media6degrees.com	action.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:22.685127974 CEST	8.8.8.8	192.168.2.4	0x2a59	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:22.685127974 CEST	8.8.8.8	192.168.2.4	0x2a59	No error (0)	edge.gycpi.b.yahoodns.net		87.248.118.22	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.685127974 CEST	8.8.8.8	192.168.2.4	0x2a59	No error (0)	edge.gycpi.b.yahoodns.net		87.248.118.23	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:22.808969021 CEST	8.8.8.8	192.168.2.4	0xcd98	No error (0)	www.google.de		142.250.184.227	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:23.068635941 CEST	8.8.8.8	192.168.2.4	0xb3ea	No error (0)	tr.snapchat.com		35.186.226.184	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:23.075340033 CEST	8.8.8.8	192.168.2.4	0xf1d9	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:23.075340033 CEST	8.8.8.8	192.168.2.4	0xf1d9	No error (0)	spdc-global.pbp.gysm.yahoodns.net		212.82.100.181	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:23.180336952 CEST	8.8.8.8	192.168.2.4	0xb9eb	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:23.180336952 CEST	8.8.8.8	192.168.2.4	0xb9eb	No error (0)	star-mini.c10r.facebook.com		157.240.17.35	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:23.635047913 CEST	8.8.8.8	192.168.2.4	0x88cb	No error (0)	ad.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:23.635047913 CEST	8.8.8.8	192.168.2.4	0x88cb	No error (0)	dart.l.doubleclick.net		142.250.186.70	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:23.998347998 CEST	8.8.8.8	192.168.2.4	0x318f	No error (0)	js-agent.newrelic.com	f4.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:24.315083027 CEST	8.8.8.8	192.168.2.4	0xb25a	No error (0)	insight.adsrvr.org	insight-566961044.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:24.315083027 CEST	8.8.8.8	192.168.2.4	0xb25a	No error (0)	insight-566961044.eu-west-1.elb.amazonaws.com		34.254.108.170	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:24.315083027 CEST	8.8.8.8	192.168.2.4	0xb25a	No error (0)	insight-566961044.eu-west-1.elb.amazonaws.com		52.50.64.214	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:24.315083027 CEST	8.8.8.8	192.168.2.4	0xb25a	No error (0)	insight-566961044.eu-west-1.elb.amazonaws.com		34.254.127.126	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:24.315083027 CEST	8.8.8.8	192.168.2.4	0xb25a	No error (0)	insight-566961044.eu-west-1.elb.amazonaws.com		52.31.175.99	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:24.315083027 CEST	8.8.8.8	192.168.2.4	0xb25a	No error (0)	insight-566961044.eu-west-1.elb.amazonaws.com		54.77.48.133	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:24.315083027 CEST	8.8.8.8	192.168.2.4	0xb25a	No error (0)	insight-566961044.eu-west-1.elb.amazonaws.com		99.80.189.193	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:24.315083027 CEST	8.8.8.8	192.168.2.4	0xb25a	No error (0)	insight-566961044.eu-west-1.elb.amazonaws.com		52.30.148.233	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:24.315083027 CEST	8.8.8.8	192.168.2.4	0xb25a	No error (0)	insight-566961044.eu-west-1.elb.amazonaws.com		52.213.189.245	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:24.496440887 CEST	8.8.8.8	192.168.2.4	0x7974	No error (0)	bam.nr-data.net		162.247.242.21	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:24.496440887 CEST	8.8.8.8	192.168.2.4	0x7974	No error (0)	bam.nr-data.net		162.247.242.19	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:24.496440887 CEST	8.8.8.8	192.168.2.4	0x7974	No error (0)	bam.nr-data.net		162.247.242.18	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:24.496440887 CEST	8.8.8.8	192.168.2.4	0x7974	No error (0)	bam.nr-data.net		162.247.242.20	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:41.897502899 CEST	8.8.8.8	192.168.2.4	0x2ff5	No error (0)	bank.varomoney.com	bank.varomoney.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:43.780299902 CEST	8.8.8.8	192.168.2.4	0x6760	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Jun 24, 2021 21:37:43.780299902 CEST	8.8.8.8	192.168.2.4	0x6760	No error (0)	d296je7bbdd650.cloudfront.net		143.204.99.83	A (IP address)	IN (0x0001)
Jun 24, 2021 21:37:53.762639046 CEST	8.8.8.8	192.168.2.4	0x82aa	No error (0)	www.varomoney.com	www.varomoney.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Jun 24, 2021 21:37:20.757637024 CEST	104.16.95.65	443	192.168.2.4	49748	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=California, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Fri Jun 11 02:00:00 CEST 2021 Mon Jan 27 13:48:08 CET 2020	Sat Jun 11 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:20.757637024 CEST	104.16.95.65	443	192.168.2.4	49748	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:20.757911921 CEST	104.16.95.65	443	192.168.2.4	49749	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=California, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Fri Jun 11 02:00:00 CEST 2021 Mon Jan 27 13:48:08 CET 2020	Sat Jun 11 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:20.757911921 CEST	104.16.95.65	443	192.168.2.4	49749	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:21.609489918 CEST	142.250.186.70	443	192.168.2.4	49760	CN=*.doubleclick.net CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Mon May 24 03:32:07 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Mon Aug 16 03:32:06 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jun 24, 2021 21:37:21.610913992 CEST	142.250.186.70	443	192.168.2.4	49762	CN=*.doubleclick.net CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Mon May 24 03:32:07 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Mon Aug 16 03:32:06 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jun 24, 2021 21:37:22.540651083 CEST	142.250.185.162	443	192.168.2.4	49766	CN=*.g.doubleclick.net CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Mon May 24 03:34:17 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Mon Aug 16 03:34:16 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jun 24, 2021 21:37:22.544976950 CEST	142.250.185.162	443	192.168.2.4	49767	CN=*.g.doubleclick.net CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Mon May 24 03:34:17 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Mon Aug 16 03:34:16 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jun 24, 2021 21:37:22.643397093 CEST	143.204.98.33	443	192.168.2.4	49771	CN=sc-static.net, O=Snap Inc., L=Santa Monica, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Feb 11 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Wed Feb 16 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:22.643397093 CEST	143.204.98.33	443	192.168.2.4	49771	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:22.644624949 CEST	143.204.94.161	443	192.168.2.4	49770	CN=*.adsrvr.org CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3 CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Thu Mar 18 23:45:32 CET 2021 Tue Jul 28 02:00:00 CEST 2020 Wed Mar 18 11:00:00 CET 2009	Wed Apr 20 00:45:32 CEST 2022 Sun Mar 18 01:00:00 CET 2029 Sun Mar 18 11:00:00 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Jul 28 02:00:00 CEST 2020	Sun Mar 18 01:00:00 CET 2029
					CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed Mar 18 11:00:00 CET 2009	Sun Mar 18 11:00:00 CET 2029
Jun 24, 2021 21:37:22.645203114 CEST	143.204.94.161	443	192.168.2.4	49772	CN=*.adsrvr.org CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3 CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Thu Mar 18 23:45:32 CET 2021 Tue Jul 28 02:00:00 CEST 2020 Wed Mar 18 11:00:00 CET 2009	Wed Apr 20 00:45:32 CEST 2022 Sun Mar 18 01:00:00 CET 2029 Sun Mar 18 11:00:00 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Jul 28 02:00:00 CEST 2020	Sun Mar 18 01:00:00 CET 2029
					CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed Mar 18 11:00:00 CET 2009	Sun Mar 18 11:00:00 CET 2029
Jun 24, 2021 21:37:22.652961969 CEST	143.204.98.33	443	192.168.2.4	49773	CN=sc-static.net, O=Snap Inc., L=Santa Monica, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Feb 11 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Wed Feb 16 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:22.652961969 CEST	143.204.98.33	443	192.168.2.4	49773	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:22.702466965 CEST	157.240.17.15	443	192.168.2.4	49774	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed May 26 02:00:00 CEST 2021 Tue Oct 22 14:00:00 CEST 2013	Wed Aug 25 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:22.702466965 CEST	157.240.17.15	443	192.168.2.4	49774	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:22.705941916 CEST	157.240.17.15	443	192.168.2.4	49775	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed May 26 02:00:00 CEST 2021 Tue Oct 22 14:00:00 CEST 2013	Wed Aug 25 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:22.705941916 CEST	157.240.17.15	443	192.168.2.4	49775	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:22.770803928 CEST	87.248.118.22	443	192.168.2.4	49780	CN=*.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jun 03 02:00:00 CEST 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Jul 22 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:22.770803928 CEST	87.248.118.22	443	192.168.2.4	49780	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:22.773444891 CEST	87.248.118.22	443	192.168.2.4	49781	CN=*.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jun 03 02:00:00 CEST 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Jul 22 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:22.773444891 CEST	87.248.118.22	443	192.168.2.4	49781	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:22.912544012 CEST	142.250.184.227	443	192.168.2.4	49783	CN=www.google.de CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Mon May 31 05:15:24 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Mon Aug 23 05:15:23 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jun 24, 2021 21:37:22.914941072 CEST	3.137.59.185	443	192.168.2.4	49768	CN=*.us.tvsquared.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Aug 26 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Sat Sep 25 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Jun 24, 2021 21:37:22.918263912 CEST	142.250.184.227	443	192.168.2.4	49782	CN=www.google.de CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Mon May 31 05:15:24 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Mon Aug 23 05:15:23 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jun 24, 2021 21:37:22.918855906 CEST	3.137.59.185	443	192.168.2.4	49769	CN=*.us.tvsquared.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Aug 26 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Sat Sep 25 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Jun 24, 2021 21:37:23.157233000 CEST	35.186.226.184	443	192.168.2.4	49785	CN=tr.snapchat.com, O=Snap Inc., L=Santa Monica, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Jan 19 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Mon Jan 24 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:23.157233000 CEST	35.186.226.184	443	192.168.2.4	49785	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:23.157391071 CEST	35.186.226.184	443	192.168.2.4	49784	CN=tr.snapchat.com, O=Snap Inc., L=Santa Monica, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Jan 19 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Mon Jan 24 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:23.157391071 CEST	35.186.226.184	443	192.168.2.4	49784	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:23.206288099 CEST	212.82.100.181	443	192.168.2.4	49787	CN=.analytics.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=.analytics.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon May 24 02:00:00 CEST 2021 Tue Oct 22 14:00:00 CEST 2013 Mon May 24 02:00:00 CEST 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Nov 18 00:59:59 CET 2021 Sun Oct 22 14:00:00 CEST 2028 Thu Nov 18 00:59:59 CET 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028
					CN=*.analytics.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon May 24 02:00:00 CEST 2021	Thu Nov 18 00:59:59 CET 2021
					CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028
Jun 24, 2021 21:37:23.208429098 CEST	212.82.100.181	443	192.168.2.4	49786	CN=.analytics.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=.analytics.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon May 24 02:00:00 CEST 2021 Tue Oct 22 14:00:00 CEST 2013 Mon May 24 02:00:00 CEST 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Nov 18 00:59:59 CET 2021 Sun Oct 22 14:00:00 CEST 2028 Thu Nov 18 00:59:59 CET 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028
					CN=*.analytics.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon May 24 02:00:00 CEST 2021	Thu Nov 18 00:59:59 CET 2021
					CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028
Jun 24, 2021 21:37:23.250504017 CEST	157.240.17.35	443	192.168.2.4	49789	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed May 26 02:00:00 CEST 2021 Tue Oct 22 14:00:00 CEST 2013	Wed Aug 25 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:23.250504017 CEST	157.240.17.35	443	192.168.2.4	49789	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:23.252259970 CEST	157.240.17.35	443	192.168.2.4	49788	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed May 26 02:00:00 CEST 2021 Tue Oct 22 14:00:00 CEST 2013	Wed Aug 25 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:23.252259970 CEST	157.240.17.35	443	192.168.2.4	49788	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:23.368082047 CEST	216.200.122.11	443	192.168.2.4	49776	CN=*.gwmtracking.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Sat Aug 01 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Tue Aug 10 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Jun 24, 2021 21:37:23.373964071 CEST	216.200.122.11	443	192.168.2.4	49777	CN=*.gwmtracking.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Sat Aug 01 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Tue Aug 10 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Jun 24, 2021 21:37:23.736850023 CEST	142.250.186.70	443	192.168.2.4	49791	CN=*.doubleclick.net CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Mon May 24 03:32:07 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Mon Aug 16 03:32:06 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jun 24, 2021 21:37:23.738121033 CEST	142.250.186.70	443	192.168.2.4	49792	CN=*.doubleclick.net CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GTS CA 1C3, O=Google Trust Services LLC, C=US CN=GTS Root R1, O=Google Trust Services LLC, C=US CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Mon May 24 03:32:07 CEST 2021 Thu Aug 13 02:00:42 CEST 2020 Fri Jun 19 02:00:42 CEST 2020	Mon Aug 16 03:32:06 CEST 2021 Thu Sep 30 02:00:42 CEST 2027 Fri Jan 28 01:00:42 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GTS CA 1C3, O=Google Trust Services LLC, C=US	CN=GTS Root R1, O=Google Trust Services LLC, C=US	Thu Aug 13 02:00:42 CEST 2020	Thu Sep 30 02:00:42 CEST 2027
					CN=GTS Root R1, O=Google Trust Services LLC, C=US	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Fri Jun 19 02:00:42 CEST 2020	Fri Jan 28 01:00:42 CET 2028
Jun 24, 2021 21:37:24.446444988 CEST	34.254.108.170	443	192.168.2.4	49796	CN=*.adsrvr.org CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3 CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Thu Mar 18 23:45:32 CET 2021 Tue Jul 28 02:00:00 CEST 2020 Wed Mar 18 11:00:00 CET 2009	Wed Apr 20 00:45:32 CEST 2022 Sun Mar 18 01:00:00 CET 2029 Sun Mar 18 11:00:00 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Jul 28 02:00:00 CEST 2020	Sun Mar 18 01:00:00 CET 2029
					CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed Mar 18 11:00:00 CET 2009	Sun Mar 18 11:00:00 CET 2029
Jun 24, 2021 21:37:24.446505070 CEST	34.254.108.170	443	192.168.2.4	49795	CN=*.adsrvr.org CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3 CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Thu Mar 18 23:45:32 CET 2021 Tue Jul 28 02:00:00 CEST 2020 Wed Mar 18 11:00:00 CET 2009	Wed Apr 20 00:45:32 CEST 2022 Sun Mar 18 01:00:00 CET 2029 Sun Mar 18 11:00:00 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Jul 28 02:00:00 CEST 2020	Sun Mar 18 01:00:00 CET 2029
					CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed Mar 18 11:00:00 CET 2009	Sun Mar 18 11:00:00 CET 2029
Jun 24, 2021 21:37:24.790199995 CEST	162.247.242.21	443	192.168.2.4	49798	CN=*.nr-data.net, O="New Relic, Inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 05 01:00:00 CET 2020 Fri Mar 08 13:00:00 CET 2013	Tue Feb 08 13:00:00 CET 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:24.790199995 CEST	162.247.242.21	443	192.168.2.4	49798	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:24.794926882 CEST	162.247.242.21	443	192.168.2.4	49797	CN=*.nr-data.net, O="New Relic, Inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 05 01:00:00 CET 2020 Fri Mar 08 13:00:00 CET 2013	Tue Feb 08 13:00:00 CET 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:24.794926882 CEST	162.247.242.21	443	192.168.2.4	49797	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:43.865761042 CEST	143.204.99.83	443	192.168.2.4	49814	CN=*.segment.com, O="Segment.io, Inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 12 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Jul 27 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:43.865761042 CEST	143.204.99.83	443	192.168.2.4	49814	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:43.868561983 CEST	143.204.99.83	443	192.168.2.4	49815	CN=*.segment.com, O="Segment.io, Inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 12 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Tue Jul 27 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jun 24, 2021 21:37:43.868561983 CEST	143.204.99.83	443	192.168.2.4	49815	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c

Code Manipulations

Statistics

CPU Usage

• iexplore.exe
• iexplore.exe

Click to jump to process

Memory Usage

• iexplore.exe
• iexplore.exe

Click to jump to process

Behavior

• iexplore.exe
• iexplore.exe

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 6692 Parent PID: 800

Function Logs

General

Start time:	21:37:18
Start date:	24/06/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff6f4190000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

File Activities

Show Windows behavior

Section Activities

Process Activities

Process Information Set

Show Windows behavior

Thread Activities

Thread Information Set

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

System Activities

Language or Locale ID Queried

Show Windows behavior

Timing Activities

Show Windows behavior

Windows UI Activities

Window UI Enumerated

Show Windows behavior

Network Activities

Show Windows behavior

Object Security Activities

Show Windows behavior

LPC Port Activities

Chronological Activities

Analysis Process: iexplore.exe PID: 6764 Parent PID: 6692

Function Logs

General

Start time:	21:37:18
Start date:	24/06/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6692 CREDAT:17410 /prefetch:2
Imagebase:	0xf80000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

File Activities

Show Windows behavior

Section Activities

Sections loaded by Windows

Show Windows behavior

Registry Activities

Show Windows behavior

Mutex Activities

Show Windows behavior

Process Activities

Process Information Set

Show Windows behavior

Thread Activities

Thread Information Set

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

System Activities

Language or Locale ID Queried

Show Windows behavior

Timing Activities

Show Windows behavior

Windows UI Activities

Show Windows behavior

Network Activities

Show Windows behavior

Object Security Activities

Show Windows behavior

LPC Port Activities

Chronological Activities

Disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Windows Analysis Report https://www.varomoney.com/apply-simple-card/?utm_source=google&utm_medium=cpc&gclid=Cj0KCQjw2tCGBhCLARIsABJGmZ7qAVR3iTtfCGyMPfjgJ6wMf4a_9wV-zdKLQQW6Rh3qkNrHfKFJ4UEaArggEALw_wcB

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

Compliance:

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 6692 Parent PID: 800

General

File Activities

File Opened

File Created

File Written

File Read

File Attributes Queried

Directory Queried

Volume Information Queried

Device IO

Section Activities

Sections loaded by Windows

Registry Activities

Key Opened

Key Value Created

Key Value Modified

Key Value Deleted

Key Monitored