DateAdded,FirstSeen,Indicator,IndicatorType,TLP 2021-03-10,2021-03-05T10:07:29.0421232Z,8e90ed33c7ee82c0b64078ea36ec95f7420ba435c693b3b3dd728b494abf7dfc,sha256,White 2021-03-10,2021-03-03T10:51:16.7363037Z,2f0bc81c2ea269643cae307239124d1b6479847867b1adfe9ae712a1d5ef135e,sha256,White 2021-03-10,2021-03-05T09:51:58.5865879Z,a291305f181e24fe7194154b4cd355ccb039d5765709c80999e392efec69c90a,sha256,White 2021-03-09,2021-03-04T08:05:00.5878895Z,511df0e2df9bfa5521b588cc4bb5f8c5a321801b803394ebc493db1ef3c78fa1,sha256,White 2021-03-09,2021-01-06T18:38:17.8341434Z,b75f163ca9b9240bf4b37ad92bc7556b40a17e27c2b8ed5c8991385fe07d17d0,sha256,White 2021-03-09,2021-02-09T00:33:52.5232083Z,4edc7770464a14f54d17f36dc9d0fe854f68b346b27b35a6f5839adf1f13f8ea,sha256,White 2021-03-09,2021-02-23T09:14:05.8243534Z,811157f9c7003ba8d17b45eb3cf09bef2cecd2701cedb675274949296a6a183d,sha256,White 2021-03-09,2021-01-24T12:59:40.6969216Z,65149e036fff06026d80ac9ad4d156332822dc93142cf1a122b1841ec8de34b5,sha256,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\8Lw7tAhF9i1pJnRo.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\OutlookZH.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\authhead.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\bob.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\current\one1.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\errorPage.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\errorPages.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\fatal-erro.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\log.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\logg.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\logout.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\one.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\one1.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\shel.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\shel2.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\shel90.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\a.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\default.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\shell.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\Server.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\aspnet_client.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\aspnet_iisstart.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\aspnet_pages.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\aspnet_www.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\default1.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\errorcheck.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\iispage.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\s.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\session.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\shell.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\system_web\log.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\xclkmcfldfi948398430fdjkfdkj.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\xx.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\Server.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\discover.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\HttpProxy.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\OutlookEN.aspx,filepath,White 2021-03-09,,C:\inetpub\wwwroot\aspnet_client\supp0rt.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\OAB\log.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\log.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\logg.aspx,filepath,White 2021-03-09,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\logout.aspx,filepath,White 2021-03-11,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\Current\google.log,filepath,White 2021-03-11,,C:\inetpub\wwwroot\aspnet_client\google.log,filepath,White 2021-03-11,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\google.log,filepath,White 2021-03-11,,C:\users\public\opera\opera_browser.exe,filepath,White 2021-03-11,2021-03-08T20:16:39.0784849Z,e044d9f2d0f1260c3f4a543a1e67f33fcac265be114a1b135fd575b860d2b8c6,sha256,White 2021-03-11,2021-03-09T09:23:17.7189583Z,2b9838da7edb0decd32b086e47a31e8f5733b5981ad8247a2f9508e232589bff,sha256,White 2021-03-11,2021-03-09T13:14:14.3522438Z,feb3e6d30ba573ba23f3bd1291ca173b7879706d1fe039c34d53a4fdcdf33ede,sha256,White 2021-03-15,2021-03-09T08:20:35.6649557Z,dd29e8d47dde124c7d14e614e03ccaab3ecaa50e0a0bef985ed59e98928bc13d,sha256,White 2021-03-15,2021-03-10T15:25:16.6382191Z,201e4e9910dcdc8c4ffad84b60b328978db8848d265c0b9ba8473cf65dcd0c41,sha256,White 2021-03-16,2021-03-05T01:38:38.1121792Z,5a5f4a1c7dbac3e1ac900f43415f378e88a7b591aff730d9715b62d6d782bdde,sha256,White 2021-03-16,,C:\inetpub\wwwroot\aspnet_client\services.aspx,filepath,White 2021-03-19,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\Current\themes\resources\logon.aspx,filepath,White 2021-03-19,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\ecp\auth\TimeoutLogout.aspx,filepath,White 2021-03-19,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\ews\333.aspx,filepath,White 2021-03-19,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\OutlookUS.aspx,filepath,White 2021-03-22,2021-03-19T08:28:31.8997563Z,733b4d5174669caab2bbcc9bfe51606a13346b70af59fccea4f479d1fde7b5d7,sha256,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackOutLookEN.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackCookiePL.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackIdAR.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackOutLookAR.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackReplaceIO.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackPassDA.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackLangPL.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackPassPL.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackCookieAS.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackPassAS.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackReplacePL.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackIdAS.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackLogsAS.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackReplaceAS.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackOutLookAS.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackLogsSE.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackOutLookSE.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackLangDA.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackCookieDA.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackCookieAR.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackAuthAS.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackCookieSE.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackOutLookPL.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackAuthAR.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackIdIO.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackLogsIO.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackLangAS.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackIdEN.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackIdDA.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackIdSE.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackAuthDA.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackReplaceSE.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackPassSE.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackLangEN.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackPassAR.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackLangES.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackPassES.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackCookieEN.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackLangAR.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackIdES.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackPassEN.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackLogsAR.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackIdPL.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackOutLookES.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackReplaceES.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackCookieES.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackReplaceEN.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackAuthSE.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackLangSE.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackLangIO.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackCookieIO.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackLogsDA.aspx,filepath,White 2021-03-24,,C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\ChackPassIO.aspx,filepath,White 2021-03-25,2021-01-10T07:24:38.2922874Z,f517526fc57eb33edb832920b1678d52ad1c5cf9c707859551fe065727587501,sha256,White 2021-03-25,2021-03-18T05:44:37.0233457Z,910fbfa8ef4ad7183c1b5bdd3c9fd1380e617ca0042b428873c48f71ddc857db,sha256,White 2021-03-25,2021-03-12T18:53:30.7007205Z,fdec933ca1dd1387d970eeea32ce5d1f87940dfb6a403ab5fc149813726cbd65,sha256,White 2021-03-25,2021-03-10T06:13:50.0322251Z,fbeefca700f84373509fd729579ad7ea0dabdfe25848f44b2fbf61bf7f909df0,sha256,White 2021-03-25,2021-03-18T18:20:05.2089604Z,3df23c003d62c35bd6da90df12826c1d3fdd94029bf52449ba3d89920110d5ec,sha256,White 2021-03-25,2021-03-18T18:16:13.6199867Z,737752588f32e4c1d8d20231d7ec553a1bd4a0a090b06b2a1835efa08f9707c4,sha256,White 2021-03-25,2021-03-18T14:36:39.3688513Z,7e07b6addf2f0d26eb17f4a1be1cba11ca8779b0677cedc30dbebef77ccba382,sha256,White 2021-03-25,2021-03-15T19:08:27.7089875Z,bf53b637683f9cbf92b0dd6c97742787adfbc12497811d458177fdeeae9ec748,sha256,White 2021-03-25,2021-01-12T13:02:23.2605598Z,a70931ebb1ce4f4e7d331141ad9eba8f16f98da1b079021eeba875aff4aeaa85,sha256,White 2021-03-25,2021-03-18T05:46:25.8420094Z,c25a5c14269c990c94a4a20443c4eb266318200e4d7927c163e0eaec4ede780a,sha256,White 2021-03-25,2021-01-11T21:02:52.9566417Z,db093418921aae00187ae5dc6ed141c83614e6a4ec33b7bd5262b7be0e9df2cd,sha256,White 2021-03-25,2021-03-08T07:00:41.727981Z,904fbea2cd68383f32c5bc630d2227601dc52f94790fe7a6a7b6d44bfd904ff3,sha256,White 2021-03-25,2021-03-18T05:33:32.9073748Z,b9dbdf11da3630f464b8daace88e11c374a642e5082850e9f10a1b09d69ff04f,sha256,White 2021-03-25,2021-03-18T05:39:32.2338471Z,c4aa94c73a50b2deca0401f97e4202337e522be3df629b3ef91e706488b64908,sha256,White 2021-03-25,2021-03-12T18:22:31.7590743Z,10bce0ff6597f347c3cca8363b7c81a8bff52d2ff81245cd1e66a6e11aeb25da,sha256,White 2021-03-25,2021-01-06T18:13:58.0114165Z,d8b5eaae03098bead91ff620656b9cfc569e5ac1befd0f55aee4cdb39e832b09,sha256,White 2021-03-25,2021-03-18T09:34:05.9766902Z,f8d388f502403f63a95c9879c806e6799efff609001701eed409a8d33e55da2f,sha256,White 2021-03-25,2021-03-10T09:36:13.555634Z,69ce57932c3be3374e8843602df1c93e1af622fc53f3f1d9b0a75b66230a1e2e,sha256,White 2021-03-25,2021-01-26T23:22:42.2499237Z,0993cc228a74381773a3bb0aa36a736f5c41075fa3201bdef4215a8704e582fc,sha256,White 2021-03-25,2021-03-10T09:33:17.2157496Z,893ddf0de722f345b675fd1ade93ee1de6f1cad034004f9165a696a4a4758c3e,sha256,White 2021-03-25,,56101ab0881a6a34513a949afb5a204cad06fd1034f37d6791f3ab31486ba56c,sha256,White 2021-03-25,2021-02-18T08:39:08.135141Z,9cf63310788e97f6e08598309cbbf19960162123e344df017b066ca8fcbed719,sha256,White 2021-03-25,2021-03-18T04:17:15.8136882Z,dc612f5c0b115b5a13bdb9e86f89c5bfe232e5eb76a07c3c0a6d949f80af89fd,sha256,White 2021-03-25,,9f2fe33b1c7230ec583d7f6ad3135abcc41b5330fa5b468b1c998380d20916cd,sha256,White 2021-03-25,2021-03-18T05:45:15.631563Z,a387c3c5776ee1b61018eeb3408fa7fa7490915146078d65b95621315e8b4287,sha256,White 2021-03-25,2021-03-16T15:11:47.2426324Z,027119161d11ba87acc908a1d284b93a6bcafccc012e52ce390ecb9cd745bf27,sha256,White 2021-03-25,2021-03-18T05:30:45.798861Z,866b1f5c5edd9f01c5ba84d02e94ae7c1f9b2196af380eed1917e8fc21acbbdc,sha256,White 2021-03-25,2021-03-03T13:57:32.415247Z,d74e5c2b3d8a24b6519db89033013554fb9c326c8be2afeb0f1d9ef6e57c7b5a,sha256,White 2021-03-25,2021-03-13T04:27:22.7600087Z,4f0b9c0482595eee6d9ece0705867b2aae9e4ff68210f32b7425caca763723b9,sha256,White 2021-04-01,2021-03-27T07:28:19.7224363Z,5f7d898ade3162bfb0c8d3006c42e934ff81fab3b4ad3b51c13441fd63e438cb,sha256,White 2021-04-01,,brian.krebsonsecurity.top,domainname,White 2021-04-01,,krebsonsecurity.top,domainname,White 2021-04-01,,jennifer.krebsonsecurity.top,domainname,White