Edit tour

Windows Analysis Report
setup (2).msi

Overview

General Information

Sample name:	setup (2).msi
Analysis ID:	1573624
MD5:	8b77331198791037f336022ef7e269d2
SHA1:	c48ddd7547eec8417b295bcd00cbac3c34bd175b
SHA256:	aa283d1f02c6d3c83dcc1665e9944ed54705e6c46132276c3db208d043e6ca34
Tags:	aikmouciiqgecoqi-xyzmsiuser-JAMESWT_MHT
Infos:

Detection

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Performs DNS queries to domains with low reputation

Tries to resolve many domain names, but no domain seems valid

Checks for available system drives (often done to infect USB drives)

Connects to many different domains

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Detected non-DNS traffic on DNS port

Detected potential crypto function

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Executes massive DNS lookups (> 100)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

IP address seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Suspicious MsiExec Embedding Parent

Uses a known web browser user agent for HTTP communication

Uses cacls to modify the permissions of files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

msiexec.exe (PID: 7148 cmdline: "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\setup (2).msi" MD5: E5DA170027542E25EDE42FC54C929077)

msiexec.exe (PID: 1412 cmdline: C:\Windows\system32\msiexec.exe /V MD5: E5DA170027542E25EDE42FC54C929077)

msiexec.exe (PID: 320 cmdline: C:\Windows\syswow64\MsiExec.exe -Embedding DF750E06877FC987E1961B6363098C75 MD5: 9D09DC1EDA745A5F87553048E57620CF)

icacls.exe (PID: 3448 cmdline: "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\." /SETINTEGRITYLEVEL (CI)(OI)HIGH MD5: 2E49585E4E08565F52090B144062F97E)

conhost.exe (PID: 4616 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

expand.exe (PID: 7104 cmdline: "C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files MD5: 544B0DBFF3F393BCE8BB9D815F532D51)

conhost.exe (PID: 1264 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 7064 cmdline: "C:\Windows\System32\cmd.exe" /c start msedge https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 7056 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

msedge.exe (PID: 2612 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 1972 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1972,i,15460452474060400035,15271760892993525039,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

setup.exe (PID: 1476 cmdline: "C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe" /VERYSILENT /VERYSILENT MD5: E5BAA8B4BBE30FE905CBE269739D7B31)

msedge.exe (PID: 1896 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 7192 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2420,i,16787966548657019127,18376101955376312634,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 6972 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6492 --field-trial-handle=2420,i,16787966548657019127,18376101955376312634,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 7632 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6664 --field-trial-handle=2420,i,16787966548657019127,18376101955376312634,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 7764 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6064 --field-trial-handle=2420,i,16787966548657019127,18376101955376312634,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

cleanup

Sigma Signatures

Sigma detected: Suspicious MsiExec Embedding Parent

Source: Process started

Author: frack113: Data: Command: "C:\Windows\System32\cmd.exe" /c start msedge https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf, CommandLine: "C:\Windows\System32\cmd.exe" /c start msedge https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\cmd.exe, NewProcessName: C:\Windows\SysWOW64\cmd.exe, OriginalFileName: C:\Windows\SysWOW64\cmd.exe, ParentCommandLine: C:\Windows\syswow64\MsiExec.exe -Embedding DF750E06877FC987E1961B6363098C75, ParentImage: C:\Windows\SysWOW64\msiexec.exe, ParentProcessId: 320, ParentProcessName: msiexec.exe, ProcessCommandLine: "C:\Windows\System32\cmd.exe" /c start msedge https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf, ProcessId: 7064, ProcessName: cmd.exe

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://aikmouciiqgecoqi.xyz:443/api/client_hello

Avira URL Cloud: Label: malware

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\f578ccbf803c49818274db23b47701b7$dpx$.tmp\02f00f7a480dcc4ebcae8d80bfc2e9bf.tmp	ReversingLabs: Detection: 36%
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe (copy)	ReversingLabs: Detection: 36%

Multi AV Scanner detection for submitted file

Source: setup (2).msi

ReversingLabs: Detection: 21%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.6% probability

Source:

Binary string: C:\ss2\Projects\MsiWrapper\MsiCustomActions\Release\MsiCustomActions.pdb source: setup (2).msi, MSIBE32.tmp.2.dr, 6cb8c3.msi.2.dr

Source: C:\Windows\System32\msiexec.exe	File opened: z:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: x:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: v:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: t:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: r:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: p:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: n:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: l:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: j:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: h:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: f:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: b:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: y:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: w:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: u:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: s:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: q:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: o:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: m:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: k:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: i:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: g:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: e:	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	File opened: c:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: a:	Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\	Jump to behavior

Networking

Performs DNS queries to domains with low reputation

Source:	DNS query: eyoyiqskiciwwoyw.xyz
Source:	DNS query: ueaokkmeuioagwuc.xyz
Source:	DNS query: wiaiwegmqcmwcouw.xyz
Source:	DNS query: muuagqkickggsewc.xyz
Source:	DNS query: uyicacsgusyikwmy.xyz
Source:	DNS query: qcwcksiayqqmwssm.xyz
Source:	DNS query: ekacwgokqcscqysi.xyz
Source:	DNS query: esuyiyesukcuoico.xyz
Source:	DNS query: oeegecksewamggaa.xyz
Source:	DNS query: yyacmosgygqayqys.xyz
Source:	DNS query: cgeewuguwiikcwug.xyz
Source:	DNS query: qckwwsmukogkeuge.xyz
Source:	DNS query: keoqiqigggqkcykq.xyz
Source:	DNS query: kqsamcsauqiagmma.xyz
Source:	DNS query: mocikyoeikocwkuc.xyz
Source:	DNS query: uymiagmwmqmimewm.xyz
Source:	DNS query: gcikuiqswcgsscog.xyz
Source:	DNS query: qwmaokcmiwuqqyes.xyz
Source:	DNS query: igaiseoqksuoukqg.xyz
Source:	DNS query: kqukwaogqoucsaas.xyz
Source:	DNS query: miacggmycyqikoyq.xyz
Source:	DNS query: woceumwmwioocusa.xyz
Source:	DNS query: acgcaiyykiigugms.xyz
Source:	DNS query: cogsyycsuwoysugi.xyz
Source:	DNS query: oekyamueeiiousia.xyz
Source:	DNS query: wukaqiusicksuguo.xyz
Source:	DNS query: yyusosuyycoeikgo.xyz
Source:	DNS query: kqoceoymymoicqky.xyz
Source:	DNS query: uykkwkqqemamguwa.xyz
Source:	DNS query: oyekqyccewougasu.xyz
Source:	DNS query: ymsaymyugccysmow.xyz
Source:	DNS query: omuquowgiusiesgk.xyz
Source:	DNS query: wiywykakusaygisc.xyz
Source:	DNS query: aqmqywkwsmmayyoi.xyz
Source:	DNS query: cuccygameukkeumw.xyz
Source:	DNS query: ukekykoqskumoikg.xyz
Source:	DNS query: uyqcacmsiquuwggq.xyz
Source:	DNS query: ysoqqwckkqssyigm.xyz
Source:	DNS query: yyemsyoimicqmais.xyz
Source:	DNS query: miigookwguakmkeu.xyz
Source:	DNS query: qiuswcgwaqgemwcg.xyz
Source:	DNS query: wuusiiukmwcmimyk.xyz
Source:	DNS query: uqyukkamycuaimsu.xyz
Source:	DNS query: woeamasicuiqyckq.xyz
Source:	DNS query: akaueuwoocwkkoya.xyz
Source:	DNS query: qciqgoeogwwmwkcw.xyz
Source:	DNS query: ucwesqiquqggymqe.xyz
Source:	DNS query: mgseamqmgkqcuewy.xyz
Source:	DNS query: gaoweoyqcuuykwgu.xyz
Source:	DNS query: oqegmuqkgyaywwmc.xyz
Source:	DNS query: qusmiuqmmgqsgeci.xyz
Source:	DNS query: yqcakkmwigkaumii.xyz
Source:	DNS query: qokykyyigsyqggqe.xyz
Source:	DNS query: cyyyokugycioysok.xyz
Source:	DNS query: iqcaysimoeeqamky.xyz
Source:	DNS query: yekiwquqaacesqqq.xyz
Source:	DNS query: gmooqswyuuqaiomi.xyz
Source:	DNS query: kuiomoiwauwckqeq.xyz
Source:	DNS query: ceucuuwiwwuiweaq.xyz
Source:	DNS query: cycscsqyqkeaykgc.xyz
Source:	DNS query: ssagiiaauyewiswa.xyz
Source:	DNS query: ggwsuoyyioagegkw.xyz
Source:	DNS query: ieikmuieoqqmugwu.xyz
Source:	DNS query: kcqkucqkogqiuukw.xyz
Source:	DNS query: oqouwceoowyiwgag.xyz
Source:	DNS query: gakowseyscmeqkya.xyz
Source:	DNS query: quisoakcuqsygyyc.xyz
Source:	DNS query: auuisqaykqgeesae.xyz
Source:	DNS query: iyawyckqggkwsyoq.xyz
Source:	DNS query: ecmyomcaicqysoqw.xyz
Source:	DNS query: iqcqqquiwomgsmma.xyz
Source:	DNS query: ssegwgieumyoasym.xyz
Source:	DNS query: ceeomiecgymecgau.xyz
Source:	DNS query: myisokqwsmqeusuy.xyz
Source:	DNS query: ywkamsiogkycyosy.xyz
Source:	DNS query: ggkyecqguqkkuoso.xyz
Source:	DNS query: kcyoeiykekuqkkmg.xyz
Source:	DNS query: ikwyuqgsegcgcccg.xyz
Source:	DNS query: wgswkwaesqqwkoaa.xyz
Source:	DNS query: eqkkkcuwkiqiecac.xyz
Source:	DNS query: kigcewceemkckeow.xyz
Source:	DNS query: ykaimcgigakggwec.xyz
Source:	DNS query: uceaygkekiassamu.xyz
Source:	DNS query: seioywksogeseqig.xyz
Source:	DNS query: ssoqscyewimqiqme.xyz
Source:	DNS query: kocgeaeoakgqewog.xyz
Source:	DNS query: kuiqsugkqeoscguo.xyz
Source:	DNS query: kcsqwmkusesaccwa.xyz
Source:	DNS query: ywyawywiuyecuiuu.xyz
Source:	DNS query: uowowiqiyeiuwmcc.xyz
Source:	DNS query: uokqeaieowiogsgc.xyz
Source:	DNS query: ikoqkscwsowwukmi.xyz
Source:	DNS query: iymukyseoieqccac.xyz
Source:	DNS query: qascmswkaisogoaq.xyz
Source:	DNS query: gacgceaygaecuguy.xyz
Source:	DNS query: eqyyguuwsyqaqgsq.xyz
Source:	DNS query: ewywcoeukaoaegci.xyz
Source:	DNS query: mmygsewuukqkiiok.xyz
Source:	DNS query: wgyimykogekgewoa.xyz
Source:	DNS query: uiguoqqagkiuagyc.xyz
Source:	DNS query: kcesagqugouwkqyg.xyz
Source:	DNS query: yqeugeoquqsokgqk.xyz
Source:	DNS query: eigkgwkyuqssgamw.xyz
Source:	DNS query: waqmyueimmyiuawq.xyz
Source:	DNS query: qgukewuuykmmkgeq.xyz
Source:	DNS query: gmwcscokucowyogs.xyz
Source:	DNS query: ywegqamoegumacgi.xyz
Source:	DNS query: yquocucuqoywwcsu.xyz
Source:	DNS query: eqmeimmouegoasay.xyz
Source:	DNS query: cykgmsqcgysgaioo.xyz
Source:	DNS query: oqoemaogyoikomiy.xyz
Source:	DNS query: qoiiomimuoaqgeku.xyz
Source:	DNS query: wgymkeismmiemsqq.xyz
Source:	DNS query: ykocagogmeiwmymy.xyz
Source:	DNS query: csoqiicgaaiyyoom.xyz
Source:	DNS query: koioiiwouukqousy.xyz
Source:	DNS query: okkyekwuommcicqi.xyz
Source:	DNS query: ecacmycegqoaquio.xyz
Source:	DNS query: skgcsksqyekiymii.xyz
Source:	DNS query: kckcekceqgcyqcsa.xyz
Source:	DNS query: uoaeyoycyycqkoci.xyz
Source:	DNS query: wsaekoiomeagsaes.xyz
Source:	DNS query: iqmeccigieosgmwq.xyz
Source:	DNS query: ggeqowwmmmeekigg.xyz
Source:	DNS query: sssawsmmkmuyqsaq.xyz
Source:	DNS query: ecmckkeyoskcigeu.xyz
Source:	DNS query: quoqoooiamqkkosc.xyz
Source:	DNS query: waokmuyyeooamowm.xyz
Source:	DNS query: ykomskascimimomo.xyz
Source:	DNS query: mmisquwegymayaee.xyz
Source:	DNS query: mmyukmsqamgicqai.xyz
Source:	DNS query: ikwyooieywakeqog.xyz
Source:	DNS query: mgwmkyyqckeewgce.xyz
Source:	DNS query: owoksuegymmgesys.xyz
Source:	DNS query: aamuskacaaiycguu.xyz
Source:	DNS query: yegskieoocgoamyi.xyz
Source:	DNS query: aaiouwywwcwuuasm.xyz
Source:	DNS query: kuoqgwooymgsqaum.xyz
Source:	DNS query: myoyccuwcyaygceg.xyz
Source:	DNS query: ggqgwuaseamkyywa.xyz
Source:	DNS query: uwimwwicgcscuoku.xyz
Source:	DNS query: cyyukyomsoiqyyqa.xyz
Source:	DNS query: gaisoawuoicqsumy.xyz
Source:	DNS query: qogsmcecyusiyaim.xyz
Source:	DNS query: ykqocceawkwoagmc.xyz
Source:	DNS query: aosywgkogcissggi.xyz
Source:	DNS query: ieywwkeuouoqgqms.xyz
Source:	DNS query: ecgkeyeueawgcuqo.xyz
Source:	DNS query: guimuaoiecmouigq.xyz
Source:	DNS query: ggkyuooyikmqoscw.xyz
Source:	DNS query: uoeeuiaewmogugeo.xyz
Source:	DNS query: okgeqaswygsgykme.xyz
Source:	DNS query: ywqiciegywcouoiy.xyz
Source:	DNS query: qgkgogieieoomkqq.xyz
Source:	DNS query: qgkmsekougssaawq.xyz
Source:	DNS query: ggmwwewskeiggosq.xyz
Source:	DNS query: eqgwaamacqweiwie.xyz
Source:	DNS query: wmqcgwcegsomeqas.xyz
Source:	DNS query: oqummowmqwcgsegm.xyz
Source:	DNS query: qoowyoueaaaccgqs.xyz
Source:	DNS query: csiykwakekqoqaym.xyz
Source:	DNS query: mmymmauyiiksiugu.xyz
Source:	DNS query: cseksqccmgaieyic.xyz
Source:	DNS query: cykgucwkesokooyw.xyz
Source:	DNS query: okoguckagygoqqgk.xyz
Source:	DNS query: cyswykkcmggyiqwo.xyz
Source:	DNS query: gmmacaiigwcscggs.xyz
Source:	DNS query: yequgaccqouegcmw.xyz
Source:	DNS query: sksiyqgummyycgmi.xyz
Source:	DNS query: skekiggeimmceqcg.xyz
Source:	DNS query: eiqqequeskcqiqmw.xyz
Source:	DNS query: ecsamoyaimquqwow.xyz
Source:	DNS query: aiyksmkyqgyaemiw.xyz
Source:	DNS query: owewoieiwasaueco.xyz
Source:	DNS query: aoymcmmeqqqgwwca.xyz
Source:	DNS query: iygsiugeeogoeiyi.xyz
Source:	DNS query: quuemeewaqaiiyqc.xyz
Source:	DNS query: wggikwiqowiwqcqg.xyz
Source:	DNS query: ucuiiwcwwgimkyyi.xyz
Source:	DNS query: koiugmaqgkawaiyw.xyz
Source:	DNS query: waeqkmeeasauygum.xyz
Source:	DNS query: ecimsaauyieykegi.xyz
Source:	DNS query: ocsqocikkcggeaaw.xyz
Source:	DNS query: iyaqqeamygmakcgo.xyz
Source:	DNS query: uowgcyqcgaqiumoi.xyz
Source:	DNS query: myymasomksgeawqw.xyz
Source:	DNS query: myaueqycgeikwagc.xyz
Source:	DNS query: seoomaqwwimwueiw.xyz
Source:	DNS query: mgeycqkiwggsymyc.xyz
Source:	DNS query: ikgkgaaqqsmomuim.xyz
Source:	DNS query: ieuaeqceycqyqygk.xyz
Source:	DNS query: waeqwwagawqkksya.xyz
Source:	DNS query: mmeuqmoaekswggoe.xyz
Source:	DNS query: ucyoqcksaiiwgqae.xyz
Source:	DNS query: aoosomigeaiewqom.xyz
Source:	DNS query: cyqaqqcqamemsiog.xyz
Source:	DNS query: wacqigcacsemkyos.xyz
Source:	DNS query: yqocoeikiyacyuck.xyz
Source:	DNS query: ywcuqkkmmqioiwqk.xyz
Source:	DNS query: waqcciyigkuoygqy.xyz
Source:	DNS query: ceoqyeiycqkumwao.xyz
Source:	DNS query: aauquiiqeugcwswc.xyz
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	DNS query: uoeiymqawsqiyuck.xyz
Source:	DNS query: yqceweqmaumwwywy.xyz
Source:	DNS query: eqmycgagykgkqwsu.xyz
Source:	DNS query: seuuicaewuoaumes.xyz
Source:	DNS query: aomaeyokqgsuomii.xyz
Source:	DNS query: waqucgoeeeeymeii.xyz
Source:	DNS query: oqacqgmiaaewmmey.xyz
Source:	DNS query: ykeaoyaycoiamqey.xyz
Source:	DNS query: csmgwcogqqcwseka.xyz
Source:	DNS query: auowmussgaesgwas.xyz
Source:	DNS query: aikmouciiqgecoqi.xyz
Source:	DNS query: koecgqggegimaeya.xyz
Source:	DNS query: aawqwccomcemcysm.xyz
Source:	DNS query: kcyakwisycecaqgw.xyz
Source:	DNS query: uogksceymossmmqc.xyz
Source:	DNS query: qgmyeeguweaukuke.xyz
Source:	DNS query: mywaqkeaawisisky.xyz
Source:	DNS query: yqqsggacauiiugka.xyz
Source:	DNS query: equmqmqwuuuioawa.xyz
Source:	DNS query: wmoamsauiwauoosg.xyz
Source:	DNS query: oqsakkimkesccikc.xyz
Source:	DNS query: mgiwaegaqyyaakwy.xyz
Source:	DNS query: ucmioacycscyeouk.xyz
Source:	DNS query: qumaseqmggyaiauq.xyz
Source:	DNS query: uccyyemqaiiksuwm.xyz
Source:	DNS query: sesyieaiesegeaow.xyz
Source:	DNS query: kccmicaswqmswwak.xyz
Source:	DNS query: mssaogwocegysoow.xyz
Source:	DNS query: wssaqmakumewmaes.xyz
Source:	DNS query: cmukociggiqcouio.xyz
Source:	DNS query: skyqsyyymyacyayc.xyz
Source:	DNS query: uoigsiqmemcscosu.xyz
Source:	DNS query: kuywuskkgqsigqqs.xyz
Source:	DNS query: auayomwkewcomwas.xyz
Source:	DNS query: iyaikmkkowcqemsi.xyz
Source:	DNS query: ggicikyqcaiyguee.xyz
Source:	DNS query: oqyaoykomyoygics.xyz
Source:	DNS query: eqakguiwiqacqiwg.xyz
Source:	DNS query: wgcaouuqqqwucogy.xyz
Source:	DNS query: ewacuagosgqmuocm.xyz
Source:	DNS query: wgqyouayikuyuqmk.xyz
Source:	DNS query: owaaygsacguucaye.xyz
Source:	DNS query: uwgicagyykoommga.xyz
Source:	DNS query: uiggameqqycugsqw.xyz
Source:	DNS query: goguooqkgysueime.xyz
Source:	DNS query: keosqeosukqcooco.xyz
Source:	DNS query: maoeeogmuauywsyu.xyz
Source:	DNS query: ismqaewykmoiguki.xyz
Source:	DNS query: wucwykasawokemaw.xyz
Source:	DNS query: ukmcqucewskcqygg.xyz
Source:	DNS query: qqqmeagkkosgcayo.xyz
Source:	DNS query: ysawassgkwqygmmq.xyz
Source:	DNS query: osaeyoiqoqawauga.xyz
Source:	DNS query: iagisciiyoemgwaa.xyz
Source:	DNS query: ymysimqoykwqeqiq.xyz
Source:	DNS query: ymmcwogyimsuqmcc.xyz
Source:	DNS query: osmoygyawqmmimkq.xyz
Source:	DNS query: immyecuqwkiyscys.xyz
Source:	DNS query: omsqkuiwcwoegooq.xyz
Source:	DNS query: ukaiiiyqoooycyqm.xyz
Source:	DNS query: isemauqkwwiumyky.xyz
Source:	DNS query: keguuyioweymiaws.xyz
Source:	DNS query: kwaywmaequkqccai.xyz
Source:	DNS query: yyimcoiwgckeakcm.xyz
Source:	DNS query: ekcwemuekgqsimae.xyz
Source:	DNS query: imigkomgmqgmakqk.xyz
Source:	DNS query: omasqkwqyskcagwi.xyz
Source:	DNS query: awyomscgweuqmgaw.xyz
Source:	DNS query: eyoyssauceguqwmk.xyz
Source:	DNS query: gwwcqeykmseicgaw.xyz
Source:	DNS query: qwywqgsmgaoiwsga.xyz
Source:	DNS query: ososwckwcqmmwqcy.xyz
Source:	DNS query: osaymwoggqqycmse.xyz
Source:	DNS query: oyewqwkusieeoqey.xyz
Source:	DNS query: ommwaqgaemsmcqwc.xyz
Source:	DNS query: cauewwukyywyqiei.xyz
Source:	DNS query: goeykqccmemkswom.xyz
Source:	DNS query: aksuakswwkiimamq.xyz
Source:	DNS query: isaeicumkcuwqmqq.xyz
Source:	DNS query: qiswokuokugiooky.xyz
Source:	DNS query: qiswcssocuqsaqkq.xyz
Source:	DNS query: qcyksokwumicscaa.xyz
Source:	DNS query: esiaisyasoaoqwki.xyz
Source:	DNS query: giqukkwwcwgqcisg.xyz
Source:	DNS query: ymqaaskiwomkucuy.xyz
Source:	DNS query: akueuaicusaoieiy.xyz
Source:	DNS query: sauygqecsusickcu.xyz
Source:	DNS query: kkwkgmcoawgaoiwg.xyz
Source:	DNS query: saumycuogqsqykes.xyz
Source:	DNS query: ukyokaigmmkumgoa.xyz
Source:	DNS query: eswweuycwwiiykwo.xyz
Source:	DNS query: uksgyqiqaaiaiesi.xyz
Source:	DNS query: smckcsaioceiyasu.xyz
Source:	DNS query: esimsqgcwwwmyoqc.xyz
Source:	DNS query: maiyuocqqiqiiskw.xyz
Source:	DNS query: smaaowemwiwggocu.xyz
Source:	DNS query: kwuuwgemogmuomwq.xyz
Source:	DNS query: ukicsmiwggcwksam.xyz
Source:	DNS query: gwamoggwyegsseao.xyz
Source:	DNS query: immcqsiceooqyaay.xyz
Source:	DNS query: kkcqgowgkcoyokcu.xyz
Source:	DNS query: kecgikusmakuksma.xyz
Source:	DNS query: ymuiggyusggsymoi.xyz
Source:	DNS query: uecouukwkuceyuwg.xyz
Source:	DNS query: eyoaceoookqskqmy.xyz
Source:	DNS query: awwomgcseeqwkkom.xyz
Source:	DNS query: keykoekseemyiewq.xyz
Source:	DNS query: ysiwwoeeaaskykaw.xyz
Source:	DNS query: kwmcuwccqmuecgea.xyz
Source:	DNS query: gwyooeiscmwguqms.xyz
Source:	DNS query: wuokiysmiucoucak.xyz
Source:	DNS query: wuuiumemmigyyauq.xyz
Source:	DNS query: acwomuuukiomgqkm.xyz
Source:	DNS query: muwqwgaaymomgwmi.xyz
Source:	DNS query: omgcoecwsqiuqyug.xyz
Source:	DNS query: kqmsgskwgemyueya.xyz
Source:	DNS query: eyiyueewuaqmmwcm.xyz
Source:	DNS query: gwoyamckoqoaauoq.xyz
Source:	DNS query: qwqsoyoqkymakowm.xyz
Source:	DNS query: gcmiymmqgwuquokm.xyz
Source:	DNS query: ymseciekayuweoww.xyz
Source:	DNS query: oyocwswugeiqqyoo.xyz
Source:	DNS query: omgooecquoweeomo.xyz
Source:	DNS query: imgeoyougkmmeuec.xyz
Source:	DNS query: smoswyoekkccyuga.xyz
Source:	DNS query: suwkomiqcykeyako.xyz
Source:	DNS query: smwsugycuuckemue.xyz
Source:	DNS query: qigcqiaomwieqwka.xyz
Source:	DNS query: oekcyqqggaegsesm.xyz
Source:	DNS query: qcoysaaooaiccqyu.xyz
Source:	DNS query: mismuqiygyeysaoo.xyz
Source:	DNS query: wockoyekyageakcg.xyz
Source:	DNS query: ososokqeakgguwsq.xyz
Source:	DNS query: wcgqccqcugomywua.xyz
Source:	DNS query: aqaqgemescmwsqks.xyz
Source:	DNS query: aqiwocaywcswuwsq.xyz
Source:	DNS query: aqgmgoqcoqqkguyk.xyz
Source:	DNS query: oywgqkusocouysua.xyz
Source:	DNS query: uyygagweoagcuqky.xyz
Source:	DNS query: muiccguyaeaqwweg.xyz
Source:	DNS query: qiqueqokwqqgwwci.xyz
Source:	DNS query: uygmgoymcwcgkios.xyz
Source:	DNS query: qiyggmguowygeooc.xyz
Source:	DNS query: acacoiqgoimayqwm.xyz
Source:	DNS query: smisyqewaummmwoc.xyz
Source:	DNS query: mumuqocoisaucwmq.xyz
Source:	DNS query: qqoawmqqwqcusmee.xyz
Source:	DNS query: qcygacuamqqugcck.xyz
Source:	DNS query: kkiigoymgkmoggoq.xyz
Source:	DNS query: qqmicqemgcgieoau.xyz
Source:	DNS query: sagymwuwgeucsmac.xyz
Source:	DNS query: igmqooiwioymwkcm.xyz
Source:	DNS query: osyqameakgkceeog.xyz
Source:	DNS query: sgigamoeiwksoecq.xyz
Source:	DNS query: sgigamoeiwksoecq.xyz
Source:	DNS query: keckssemmeoqieqe.xyz
Source:	DNS query: caysswwugsmkeksw.xyz
Source:	DNS query: cgiamwsqgcmqgqse.xyz
Source:	DNS query: uyeqwcuyimescesu.xyz
Source:	DNS query: ekiwqiyewuiqoemo.xyz
Source:	DNS query: oeakuqueisysswcg.xyz
Source:	DNS query: acemcwecgiqcukys.xyz
Source:	DNS query: qcwaiaiqiwcakawa.xyz
Source:	DNS query: esyiocqieemagwmo.xyz
Source:	DNS query: kqsakygykwusqams.xyz
Source:	DNS query: ymygkkggyigeqcqe.xyz
Source:	DNS query: qqqkagyoymmosuyo.xyz
Source:	DNS query: moiimkscmiswaesw.xyz
Source:	DNS query: igkiociagqsacmwa.xyz
Source:	DNS query: ymugwyokyyccykmw.xyz
Source:	DNS query: gieksqwccmmqkemm.xyz
Source:	DNS query: iaueigwgocakgsku.xyz
Source:	DNS query: sgsasqgwayeckgoy.xyz
Source:	DNS query: kwogawueykiiumao.xyz
Source:	DNS query: iagmkeayqmuowswy.xyz
Source:	DNS query: yyyagyakeciucagk.xyz
Source:	DNS query: isukyiwyscosaaqc.xyz
Source:	DNS query: goicqsmskkygkkka.xyz
Source:	DNS query: awacwkqgsoomimye.xyz
Source:	DNS query: iaawaweqwceogamg.xyz
Source:	DNS query: kqueagsoikuyocca.xyz
Source:	DNS query: momoqikcaksewaua.xyz
Source:	DNS query: suagiqkqmkgysmiw.xyz
Source:	DNS query: gcwequgwyimwymsa.xyz
Source:	DNS query: igywsgwooemqiuss.xyz
Source:	DNS query: wikiagqsmeeaeegy.xyz
Source:	DNS query: wikiagqsmeeaeegy.xyz
Source:	DNS query: eeoeukoqgiwsumsu.xyz
Source:	DNS query: ygooiessycewaocg.xyz
Source:	DNS query: qcqgssmagywqcgws.xyz
Source:	DNS query: goiikukwyyauemqc.xyz
Source:	DNS query: comuwmkimocayeeu.xyz
Source:	DNS query: isgasoomksiwqcmg.xyz
Source:	DNS query: qigismmgwsiseyuu.xyz
Source:	DNS query: wuqggcwmoscwykwg.xyz
Source:	DNS query: qceawaaswmsuekmu.xyz
Source:	DNS query: ygucsucmagwqsqcu.xyz
Source:	DNS query: giuccqyqokookyue.xyz
Source:	DNS query: gceesusqmuockkgw.xyz
Source:	DNS query: ygesoycecmkuwayg.xyz
Source:	DNS query: sasqgsyksiccuuws.xyz
Source:	DNS query: qwggykgwkqoceiuo.xyz
Source:	DNS query: wiguisuayimaukgu.xyz
Source:	DNS query: qcwcgegyyieaoqca.xyz
Source:	DNS query: gwcyyawigmwceaqi.xyz
Source:	DNS query: mueuwcqsioowsmce.xyz
Source:	DNS query: mueuwcqsioowsmce.xyz
Source:	DNS query: qiewcykmuuacuoyk.xyz
Source:	DNS query: coayaokeissieqcc.xyz
Source:	DNS query: oeooiqokqsqcsaig.xyz
Source:	DNS query: masegmsiqgamiugm.xyz
Source:	DNS query: smwywssyyaciqkae.xyz
Source:	DNS query: aweqoooqomueeiwi.xyz
Source:	DNS query: akasikewaomyiwqk.xyz
Source:	DNS query: oyyamqygcecqocmq.xyz
Source:	DNS query: oyyamqygcecqocmq.xyz
Source:	DNS query: qwikoqqgiayyuakq.xyz
Source:	DNS query: miqcugomwgmygyoq.xyz
Source:	DNS query: wiccyamsgmuqoeoy.xyz
Source:	DNS query: wiccyamsgmuqoeoy.xyz
Source:	DNS query: ymeiqyyqqyaaygie.xyz
Source:	DNS query: wiomcwmascsigags.xyz
Source:	DNS query: awgyuqqswicwkqcs.xyz
Source:	DNS query: iacisiamimiiqyeo.xyz
Source:	DNS query: wogawoqysgiockwa.xyz
Source:	DNS query: mayykkuyeuiggyws.xyz
Source:	DNS query: cosaygigqegeyewi.xyz
Source:	DNS query: ekqyosgcumkcecmo.xyz
Source:	DNS query: qimmkmaumumswocw.xyz
Source:	DNS query: acqaagqgmsmeouce.xyz
Source:	DNS query: awasockiaymagmci.xyz
Source:	DNS query: akuyqkmomwqyiyow.xyz
Source:	DNS query: caceukeeygaaqaec.xyz
Source:	DNS query: qwcaikouwwekssco.xyz
Source:	DNS query: qqioykeogcwkowgq.xyz
Source:	DNS query: igeqissugeuswaus.xyz
Source:	DNS query: osoawyeyassgycgy.xyz
Source:	DNS query: cuaumuqcoeegomsq.xyz
Source:	DNS query: oyogquqkmyqwwkuq.xyz
Source:	DNS query: gwyougsgeaaoiumg.xyz
Source:	DNS query: ukeoemaaimqyuais.xyz
Source:	DNS query: oewuwcsmaacckewa.xyz
Source:	DNS query: esykokiigsgwcwsa.xyz
Source:	DNS query: ekgqymkkqiwogqsy.xyz
Source:	DNS query: wueossewygqoakoq.xyz
Source:	DNS query: isceiesauogasmoo.xyz
Source:	DNS query: giscmywoiaqmqcmw.xyz
Source:	DNS query: uyqweoyukcewugsu.xyz
Source:	DNS query: imuscegymggagewg.xyz
Source:	DNS query: wgesgakysuqaewik.xyz
Source:	DNS query: uwoyyqgiwowysqou.xyz
Source:	DNS query: syaouwwyoaemeekm.xyz
Source:	DNS query: aoscugususamokuy.xyz
Source:	DNS query: qucyaygweeasqeoy.xyz
Source:	DNS query: uiwwamyuymycooey.xyz
Source:	DNS query: iygukwyuqwiuoqmi.xyz
Source:	DNS query: koaeaguekwcaousw.xyz
Source:	DNS query: skssioqkemoiieaa.xyz
Source:	DNS query: yewomygmueegmoqi.xyz
Source:	DNS query: kuyoukwwacqkcoyo.xyz
Source:	DNS query: gmcqgmkyguwkskyg.xyz
Source:	DNS query: mygiqcqokowwmgqq.xyz
Source:	DNS query: cymogqmasaiiwmww.xyz
Source:	DNS query: iykumkamcykgicyi.xyz
Source:	DNS query: cyemcqwkasuimkgs.xyz
Source:	DNS query: ieqeeiggkuqcomyo.xyz
Source:	DNS query: ssmkyomikukusksu.xyz
Source:	DNS query: kimakioiwmawksiw.xyz
Source:	DNS query: qumssmeysccykkyo.xyz
Source:	DNS query: ykuoaucocogcwoky.xyz
Source:	DNS query: semyssioekmosauo.xyz
Source:	DNS query: aiiqyyikowqaygwy.xyz
Source:	DNS query: kouumoyqiuckkcau.xyz
Source:	DNS query: qgwkkkyicoqmooqu.xyz
Source:	DNS query: uwwcocucusmeguaw.xyz
Source:	DNS query: cekggiciueyeyoku.xyz
Source:	DNS query: iqqeoamqwiuiyuua.xyz
Source:	DNS query: uokqmokseqqakiui.xyz
Source:	DNS query: cyqqgacqkowwkqqe.xyz
Source:	DNS query: cmqqeimyycgqwsgg.xyz
Source:	DNS query: wmgeoqqiwqcmimwu.xyz
Source:	DNS query: quyckaioggawuois.xyz
Source:	DNS query: eqciawooemoueyqu.xyz
Source:	DNS query: oqoaumkywacmuwwm.xyz
Source:	DNS query: ewueyekksqksycww.xyz
Source:	DNS query: csmasucykosuwouy.xyz
Source:	DNS query: seeogeqwsqmsoaqe.xyz
Source:	DNS query: gusmkkaiomeeqaiy.xyz
Source:	DNS query: msyecoiqeyqeiquy.xyz
Source:	DNS query: skawoueawceoywsy.xyz
Source:	DNS query: iyuaqococuqcsgii.xyz
Source:	DNS query: kuyaasckcgacyesi.xyz
Source:	DNS query: aaeqiiecqqumcgky.xyz
Source:	DNS query: aawiysageawcoyok.xyz
Source:	DNS query: yqysoaosqewciiww.xyz
Source:	DNS query: yessywkwcwmyewqe.xyz
Source:	DNS query: aueiqscgeicewaoo.xyz
Source:	DNS query: uccsgcekiwcyucou.xyz

Tries to resolve many domain names, but no domain seems valid

Source: unknown	DNS traffic detected: query: akaueuwoocwkkoya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: myaueqycgeikwagc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecoqwiswmwqokmay.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwwcqeykmseicgaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuyaasckcgacyesi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awacwkqgsoomimye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukmcqucewskcqygg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqyaoykomyoygics.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: quisoakcuqsygyyc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecacmycegqoaquio.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esykokiigsgwcwsa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wuusiiukmwcmimyk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qokykyyigsyqggqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyeqwcuyimescesu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uoaeyoycyycqkoci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwamoggwyegsseao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uokqmokseqqakiui.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: miqcugomwgmygyoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skawoueawceoywsy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cgiamwsqgcmqgqse.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cosaygigqegeyewi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: auayomwkewcomwas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: seioywksogeseqig.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kckcekceqgcyqcsa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcqgssmagywqcgws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skekiggeimmceqcg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymysimqoykwqeqiq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uoeiymqawsqiyuck.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akasikewaomyiwqk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uoeeuiaewmogugeo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kcyakwisycecaqgw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyicacsgusyikwmy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gieksqwccmmqkemm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqsakygykwusqams.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yegskieoocgoamyi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyewqwkusieeoqey.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kcoiygiwuyqyaoku.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiswokuokugiooky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wssaqmakumewmaes.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmmacaiigwcscggs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkiigoymgkmoggoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isgasoomksiwqcmg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kouumoyqiuckkcau.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwggykgwkqoceiuo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: seuuicaewuoaumes.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sssawsmmkmuyqsaq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqceweqmaumwwywy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ismqaewykmoiguki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wggikwiqowiwqcqg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymugwyokyyccykmw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ggwsuoyyioagegkw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uqyukkamycuaimsu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssoqscyewimqiqme.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igkiociagqsacmwa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isemauqkwwiumyky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgmyeeguweaukuke.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ywqiciegywcouoiy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: caceukeeygaaqaec.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oeooiqokqsqcsaig.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoqayemwgmsyuimi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wuqggcwmoscwykwg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omsqkuiwcwoegooq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ggmwwewskeiggosq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iagmkeayqmuowswy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgukewuuykmmkgeq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: woeamasicuiqyckq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwmaokcmiwuqqyes.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: giscmywoiaqmqcmw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygucsucmagwqsqcu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyocwswugeiqqyoo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: woceumwmwioocusa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kcesagqugouwkqyg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aawqwccomcemcysm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eyoyssauceguqwmk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iqqeoamqwiuiyuua.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kocgeaeoakgqewog.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skgcsksqyekiymii.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmyukmsqamgicqai.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eyoyiqskiciwwoyw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ucyoqcksaiiwgqae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ososwckwcqmmwqcy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cgeewuguwiikcwug.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ywkamsiogkycyosy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmeuqmoaekswggoe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: koiugmaqgkawaiyw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqukwaogqoucsaas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kcqkucqkogqiuukw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mygiqcqokowwmgqq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqiwocaywcswuwsq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cuccygameukkeumw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuoqgwooymgsqaum.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sagymwuwgeucsmac.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ysoqqwckkqssyigm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iqmeccigieosgmwq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecsamoyaimquqwow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wmgeoqqiwqcmimwu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ceeomiecgymecgau.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goicqsmskkygkkka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymygkkggyigeqcqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mgeycqkiwggsymyc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiswcssocuqsaqkq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwcaikouwwekssco.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gakowseyscmeqkya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esiaisyasoaoqwki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyogquqkmyqwwkuq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: giuccqyqokookyue.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skyqsyyymyacyayc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qceawaaswmsuekmu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukeoemaaimqyuais.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eyoaceoookqskqmy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyekqyccewougasu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qusmiuqmmgqsgeci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukicsmiwggcwksam.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iyaqqeamygmakcgo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qucyaygweeasqeoy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: guimuaoiecmouigq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygooiessycewaocg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igaiseoqksuoukqg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: miigookwguakmkeu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mssaogwocegysoow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oywgqkusocouysua.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: quoqoooiamqkkosc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekcwemuekgqsimae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: msyecoiqeyqeiquy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygesoycecmkuwayg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omgcoecwsqiuqyug.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ggicikyqcaiyguee.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: owaaygsacguucaye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekiwqiyewuiqoemo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqoaumkywacmuwwm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mgseamqmgkqcuewy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iyaikmkkowcqemsi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgqyouayikuyuqmk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yessywkwcwmyewqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewueyekksqksycww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wikiagqsmeeaeegy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sgsasqgwayeckgoy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqioykeogcwkowgq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: giqukkwwcwgqcisg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ucwesqiquqggymqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ywyawywiuyecuiuu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: masegmsiqgamiugm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gaoweoyqcuuykwgu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iygukwyuqwiuoqmi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqoceoymymoicqky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isaeicumkcuwqmqq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smckcsaioceiyasu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yyemsyoimicqmais.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iaueigwgocakgsku.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqakguiwiqacqiwg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikwyooieywakeqog.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsaekoiomeagsaes.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cyqaqqcqamemsiog.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wockoyekyageakcg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isceiesauogasmoo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukaiiiyqoooycyqm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gcwequgwyimwymsa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssmkyomikukusksu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqgwaamacqweiwie.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akuyqkmomwqyiyow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iagisciiyoemgwaa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mgiwaegaqyyaakwy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iqcqqquiwomgsmma.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sauygqecsusickcu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqyyguuwsyqaqgsq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osyqameakgkceeog.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: owoksuegymmgesys.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: maiyuocqqiqiiskw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wucwykasawokemaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ceoqyeiycqkumwao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iyoqqeicqoquiqka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgkmsekougssaawq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: suagiqkqmkgysmiw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoosomigeaiewqom.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykqocceawkwoagmc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiaiwegmqcmwcouw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: coayaokeissieqcc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aweqoooqomueeiwi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qimmkmaumumswocw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smwywssyyaciqkae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: muwqwgaaymomgwmi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uokqeaieowiogsgc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cyswykkcmggyiqwo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imigkomgmqgmakqk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omasqkwqyskcagwi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: auuisqaykqgeesae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eyiyueewuaqmmwcm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cseksqccmgaieyic.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: myisokqwsmqeusuy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mocikyoeikocwkuc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wueossewygqoakoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqouwceoowyiwgag.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewacuagosgqmuocm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ywegqamoegumacgi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acqaagqgmsmeouce.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: koioiiwouukqousy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekgqymkkqiwogqsy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewywcoeukaoaegci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kcyoeiykekuqkkmg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oewuwcsmaacckewa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kigcewceemkckeow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymmcwogyimsuqmcc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwcyyawigmwceaqi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkwkgmcoawgaoiwg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sgigamoeiwksoecq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acemcwecgiqcukys.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wmqcgwcegsomeqas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awyomscgweuqmgaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cogsyycsuwoysugi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqocoeikiyacyuck.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cykgmsqcgysgaioo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcwcgegyyieaoqca.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekqyosgcumkcecmo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqmicqemgcgieoau.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgswkwaesqqwkoaa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqqsggacauiiugka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcyksokwumicscaa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isukyiwyscosaaqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eigkgwkyuqssgamw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uowowiqiyeiuwmcc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eswweuycwwiiykwo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyqcacmsiquuwggq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ggkyecqguqkkuoso.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uecouukwkuceyuwg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cekggiciueyeyoku.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: quuemeewaqaiiyqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: immcqsiceooqyaay.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ososokqeakgguwsq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: csiykwakekqoqaym.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qckwwsmukogkeuge.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goguooqkgysueime.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igmqooiwioymwkcm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wuuiumemmigyyauq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwaywmaequkqccai.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iyuaqococuqcsgii.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqysoaosqewciiww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmiowgeswucumqae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acgcaiyykiigugms.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iaawaweqwceogamg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiywykakusaygisc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwoyamckoqoaauoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqmsgskwgemyueya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gaisoawuoicqsumy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smisyqewaummmwoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yquocucuqoywwcsu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qumssmeysccykkyo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmcqgmkyguwkskyg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kcsqwmkusesaccwa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecmckkeyoskcigeu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uceaygkekiassamu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smaaowemwiwggocu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aueiqscgeicewaoo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yyusosuyycoeikgo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: quyckaioggawuois.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmisquwegymayaee.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ieuaeqceycqyqygk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cyyyokugycioysok.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmooqswyuuqaiomi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osaeyoiqoqawauga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmiugosumuqmuqoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymqaaskiwomkucuy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqmeimmouegoasay.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqacqgmiaaewmmey.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykeaoyaycoiamqey.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymseciekayuweoww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aiyksmkyqgyaemiw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwywqgsmgaoiwsga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okgeqaswygsgykme.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acwomuuukiomgqkm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gacgceaygaecuguy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiyggmguowygeooc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: suwkomiqcykeyako.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keckssemmeoqieqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wuokiysmiucoucak.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ggqgwuaseamkyywa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ommwaqgaemsmcqwc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyqweoyukcewugsu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iyawyckqggkwsyoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gusmkkaiomeeqaiy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykocagogmeiwmymy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iygsiugeeogoeiyi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awgyuqqswicwkqcs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esyiocqieemagwmo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwoyyqgiwowysqou.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okoguckagygoqqgk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqqkagyoymmosuyo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keosqeosukqcooco.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gcmiymmqgwuquokm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uygmgoymcwcgkios.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qciqgoeogwwmwkcw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: muiccguyaeaqwweg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: waeqkmeeasauygum.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: waqcciyigkuoygqy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keykoekseemyiewq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgcaouuqqqwucogy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiuswcgwaqgemwcg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: semyssioekmosauo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqsamcsauqiagmma.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqummowmqwcgsegm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymuiggyusggsymoi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqkkkcuwkiqiecac.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyygagweoagcuqky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imuscegymggagewg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: miacggmycyqikoyq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aiiqyyikowqaygwy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imgeoyougkmmeuec.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igywsgwooemqiuss.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cyqqgacqkowwkqqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: immyecuqwkiyscys.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eiqqequeskcqiqmw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: myymasomksgeawqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqueagsoikuyocca.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoscugususamokuy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qoowyoueaaaccgqs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mumuqocoisaucwmq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiccyamsgmuqoeoy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: waqmyueimmyiuawq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cycscsqyqkeaykgc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mayykkuyeuiggyws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcwcksiayqqmwssm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukyokaigmmkumgoa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: momoqikcaksewaua.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikoqkscwsowwukmi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiguisuayimaukgu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cykgucwkesokooyw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekacwgokqcscqysi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecmyomcaicqysoqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sasqgsyksiccuuws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uogksceymossmmqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aauquiiqeugcwswc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykomskascimimomo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aksuakswwkiimamq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwogawueykiiumao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qigcqiaomwieqwka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykaimcgigakggwec.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uccsgcekiwcyucou.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skssioqkemoiieaa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoymcmmeqqqgwwca.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwikoqqgiayyuakq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ceckmwoyqkwgeoqg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcoysaaooaiccqyu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikwyuqgsegcgcccg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmqqeimyycgqwsgg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: koaeaguekwcaousw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uykkwkqqemamguwa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akueuaicusaoieiy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: csmasucykosuwouy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqoemaogyoikomiy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: seoomaqwwimwueiw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqegmuqkgyaywwmc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esimsqgcwwwmyoqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: seeogeqwsqmsoaqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikgkgaaqqsmomuim.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkcqgowgkcoyokcu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ucmioacycscyeouk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwwcocucusmeguaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwyooeiscmwguqms.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ieqeeiggkuqcomyo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: comuwmkimocayeeu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqeugeoquqsokgqk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osaymwoggqqycmse.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awwomgcseeqwkkom.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: csoqiicgaaiyyoom.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmukociggiqcouio.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqgmgoqcoqqkguyk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cymogqmasaiiwmww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cyyukyomsoiqyyqa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwimwwicgcscuoku.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keguuyioweymiaws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omgooecquoweeomo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qigismmgwsiseyuu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuiqsugkqeoscguo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ggeqowwmmmeekigg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wukaqiusicksuguo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uowgcyqcgaqiumoi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ieikmuieoqqmugwu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcwaiaiqiwcakawa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aaiouwywwcwuuasm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gceesusqmuockkgw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: equmqmqwuuuioawa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgkgogieieoomkqq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuywuskkgqsigqqs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aosywgkogcissggi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kimakioiwmawksiw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukekykoqskumoikg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: myoyccuwcyaygceg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iacisiamimiiqyeo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gcikuiqswcgsscog.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymsaymyugccysmow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awasockiaymagmci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yyimcoiwgckeakcm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqsakkimkesccikc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqmycgagykgkqwsu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwgicagyykoommga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aomaeyokqgsuomii.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssagiiaauyewiswa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcygacuamqqugcck.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yewomygmueegmoqi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecgkeyeueawgcuqo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyyamqygcecqocmq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keoqiqigggqkcykq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oeakuqueisysswcg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wogawoqysgiockwa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mgwmkyyqckeewgce.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smoswyoekkccyuga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgyimykogekgewoa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: koecgqggegimaeya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qumaseqmggyaiauq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgwkkkyicoqmooqu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aaeqiiecqqumcgky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okkyekwuommcicqi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iymukyseoieqccac.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goeykqccmemkswom.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: moiimkscmiswaesw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecqisawmymscauow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qascmswkaisogoaq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiomcwmascsigags.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ucuiiwcwwgimkyyi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ysiwwoeeaaskykaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuiomoiwauwckqeq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymeiqyyqqyaaygie.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mismuqiygyeysaoo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uiguoqqagkiuagyc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yyyagyakeciucagk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osmoygyawqmmimkq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecimsaauyieykegi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmymmauyiiksiugu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wmoamsauiwauoosg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiewcykmuuacuoyk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omuquowgiusiesgk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: caysswwugsmkeksw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwuuwgemogmuomwq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esuyiyesukcuoico.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: waqucgoeeeeymeii.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uymiagmwmqmimewm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mywaqkeaawisisky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: saumycuogqsqykes.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuyoukwwacqkcoyo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qogsmcecyusiyaim.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oekcyqqggaegsesm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwqsoyoqkymakowm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smwsugycuuckemue.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: syaouwwyoaemeekm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgymkeismmiemsqq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aawiysageawcoyok.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: maoeeogmuauywsyu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mueuwcqsioowsmce.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgesgakysuqaewik.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqciawooemoueyqu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ceucuuwiwwuiweaq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqaqgemescmwsqks.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kccmicaswqmswwak.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqoawmqqwqcusmee.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssegwgieumyoasym.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ueaokkmeuioagwuc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uoigsiqmemcscosu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cauewwukyywyqiei.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiqueqokwqqgwwci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ieywwkeuouoqgqms.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sksiyqgummyycgmi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cyemcqwkasuimkgs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwmcuwccqmuecgea.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ysawassgkwqygmmq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ywcuqkkmmqioiwqk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yyacmosgygqayqys.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: owewoieiwasaueco.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uccyyemqaiiksuwm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oekyamueeiiousia.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yekiwquqaacesqqq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eeoeukoqgiwsumsu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aamuskacaaiycguu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goiikukwyyauemqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aiumyocycyyikiwc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: waokmuyyeooamowm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wacqigcacsemkyos.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmygsewuukqkiiok.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: muuagqkickggsewc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqmqywkwsmmayyoi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sesyieaiesegeaow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wcgqccqcugomywua.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ggkyuooyikmqoscw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmwcscokucowyogs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykuoaucocogcwoky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cuaumuqcoeegomsq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osoawyeyassgycgy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwyougsgeaaoiumg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yequgaccqouegcmw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqqmeagkkosgcayo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iykumkamcykgicyi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: waeqwwagawqkksya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kecgikusmakuksma.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qoiiomimuoaqgeku.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ocsqocikkcggeaaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uksgyqiqaaiaiesi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uiggameqqycugsqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acacoiqgoimayqwm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqcakkmwigkaumii.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igeqissugeuswaus.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iqcaysimoeeqamky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uiwwamyuymycooey.xyz replaycode: Name error (3)

Source: unknown

Network traffic detected: DNS query count 595

Source: global traffic	TCP traffic: 192.168.2.5:64499 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.5:51138 -> 1.1.1.1:53

Source: global traffic

DNS traffic detected: number of DNS queries: 595

Source: Joe Sandbox View	IP Address: 3.33.186.135 3.33.186.135
Source: Joe Sandbox View	IP Address: 166.1.160.237 166.1.160.237
Source: Joe Sandbox View	IP Address: 162.159.61.3 162.159.61.3

Source: global traffic	HTTP traffic detected: GET /sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf HTTP/1.1Host: www.docusign.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /crx/blobs/AW50ZFsLPhJJyx_4ShcDOgcEpJeOc7Vr0kMzfFRoaMfWx4pAgZ0UGF2i9_ei1A7FAHQ-EPFULeBn7F8_SEKhjbpEyKfiidX7GF_6BDOycMeg5w03wjwVQ61hkaEix8WFqmEAxlKa5cmz_tdFr9JtRwdqRu82wmLe2Ghe/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_84_1_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.docusign.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.237
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.237
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.237
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.237
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.237
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.237
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.237
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.237
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.237
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.237
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.237
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf HTTP/1.1Host: www.docusign.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /crx/blobs/AW50ZFsLPhJJyx_4ShcDOgcEpJeOc7Vr0kMzfFRoaMfWx4pAgZ0UGF2i9_ei1A7FAHQ-EPFULeBn7F8_SEKhjbpEyKfiidX7GF_6BDOycMeg5w03wjwVQ61hkaEix8WFqmEAxlKa5cmz_tdFr9JtRwdqRu82wmLe2Ghe/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_84_1_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.docusign.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /api/client_hello HTTP/1.1Accept: /Connection: closeHost: aikmouciiqgecoqi.xyz:443User-Agent: cpp-httplib/0.12.1

Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: "url": "https://www.youtube.com" equals www.youtube.com (Youtube)
Source: 000003.log0.15.dr	String found in binary or memory: "www.facebook.com": "{\"Tier1\": [1103, 6061], \"Tier2\": [5445, 1780, 8220]}", equals www.facebook.com (Facebook)
Source: 000003.log0.15.dr	String found in binary or memory: "www.linkedin.com": "{\"Tier1\": [1103, 214, 6061], \"Tier2\": [2771, 9515, 1780, 1303, 1099, 6081, 5581, 9396]}", equals www.linkedin.com (Linkedin)
Source: 000003.log0.15.dr	String found in binary or memory: "www.youtube.com": "{\"Tier1\": [983, 6061, 1103], \"Tier2\": [2413, 8118, 1720, 5007]}", equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.docusign.com
Source: global traffic	DNS traffic detected: DNS query: bzib.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: clients2.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic	DNS traffic detected: DNS query: eyoyiqskiciwwoyw.xyz
Source: global traffic	DNS traffic detected: DNS query: ueaokkmeuioagwuc.xyz
Source: global traffic	DNS traffic detected: DNS query: wiaiwegmqcmwcouw.xyz
Source: global traffic	DNS traffic detected: DNS query: muuagqkickggsewc.xyz
Source: global traffic	DNS traffic detected: DNS query: uyicacsgusyikwmy.xyz
Source: global traffic	DNS traffic detected: DNS query: qcwcksiayqqmwssm.xyz
Source: global traffic	DNS traffic detected: DNS query: ekacwgokqcscqysi.xyz
Source: global traffic	DNS traffic detected: DNS query: esuyiyesukcuoico.xyz
Source: global traffic	DNS traffic detected: DNS query: oeegecksewamggaa.xyz
Source: global traffic	DNS traffic detected: DNS query: yyacmosgygqayqys.xyz
Source: global traffic	DNS traffic detected: DNS query: cgeewuguwiikcwug.xyz
Source: global traffic	DNS traffic detected: DNS query: qckwwsmukogkeuge.xyz
Source: global traffic	DNS traffic detected: DNS query: keoqiqigggqkcykq.xyz
Source: global traffic	DNS traffic detected: DNS query: kqsamcsauqiagmma.xyz
Source: global traffic	DNS traffic detected: DNS query: mocikyoeikocwkuc.xyz
Source: global traffic	DNS traffic detected: DNS query: uymiagmwmqmimewm.xyz
Source: global traffic	DNS traffic detected: DNS query: gcikuiqswcgsscog.xyz
Source: global traffic	DNS traffic detected: DNS query: qwmaokcmiwuqqyes.xyz
Source: global traffic	DNS traffic detected: DNS query: igaiseoqksuoukqg.xyz
Source: global traffic	DNS traffic detected: DNS query: kqukwaogqoucsaas.xyz
Source: global traffic	DNS traffic detected: DNS query: miacggmycyqikoyq.xyz
Source: global traffic	DNS traffic detected: DNS query: woceumwmwioocusa.xyz
Source: global traffic	DNS traffic detected: DNS query: acgcaiyykiigugms.xyz
Source: global traffic	DNS traffic detected: DNS query: cogsyycsuwoysugi.xyz
Source: global traffic	DNS traffic detected: DNS query: oekyamueeiiousia.xyz
Source: global traffic	DNS traffic detected: DNS query: wukaqiusicksuguo.xyz
Source: global traffic	DNS traffic detected: DNS query: yyusosuyycoeikgo.xyz
Source: global traffic	DNS traffic detected: DNS query: kqoceoymymoicqky.xyz
Source: global traffic	DNS traffic detected: DNS query: uykkwkqqemamguwa.xyz
Source: global traffic	DNS traffic detected: DNS query: oyekqyccewougasu.xyz
Source: global traffic	DNS traffic detected: DNS query: ymsaymyugccysmow.xyz
Source: global traffic	DNS traffic detected: DNS query: omuquowgiusiesgk.xyz
Source: global traffic	DNS traffic detected: DNS query: wiywykakusaygisc.xyz
Source: global traffic	DNS traffic detected: DNS query: aqmqywkwsmmayyoi.xyz
Source: global traffic	DNS traffic detected: DNS query: cuccygameukkeumw.xyz
Source: global traffic	DNS traffic detected: DNS query: ukekykoqskumoikg.xyz
Source: global traffic	DNS traffic detected: DNS query: uyqcacmsiquuwggq.xyz
Source: global traffic	DNS traffic detected: DNS query: ysoqqwckkqssyigm.xyz
Source: global traffic	DNS traffic detected: DNS query: yyemsyoimicqmais.xyz
Source: global traffic	DNS traffic detected: DNS query: miigookwguakmkeu.xyz
Source: global traffic	DNS traffic detected: DNS query: qiuswcgwaqgemwcg.xyz
Source: global traffic	DNS traffic detected: DNS query: wuusiiukmwcmimyk.xyz
Source: global traffic	DNS traffic detected: DNS query: uqyukkamycuaimsu.xyz
Source: global traffic	DNS traffic detected: DNS query: woeamasicuiqyckq.xyz
Source: global traffic	DNS traffic detected: DNS query: akaueuwoocwkkoya.xyz
Source: global traffic	DNS traffic detected: DNS query: qciqgoeogwwmwkcw.xyz
Source: global traffic	DNS traffic detected: DNS query: ucwesqiquqggymqe.xyz
Source: global traffic	DNS traffic detected: DNS query: mgseamqmgkqcuewy.xyz
Source: global traffic	DNS traffic detected: DNS query: gaoweoyqcuuykwgu.xyz
Source: global traffic	DNS traffic detected: DNS query: oqegmuqkgyaywwmc.xyz
Source: global traffic	DNS traffic detected: DNS query: qusmiuqmmgqsgeci.xyz
Source: global traffic	DNS traffic detected: DNS query: yqcakkmwigkaumii.xyz
Source: global traffic	DNS traffic detected: DNS query: qokykyyigsyqggqe.xyz
Source: global traffic	DNS traffic detected: DNS query: cyyyokugycioysok.xyz
Source: global traffic	DNS traffic detected: DNS query: iqcaysimoeeqamky.xyz
Source: global traffic	DNS traffic detected: DNS query: yekiwquqaacesqqq.xyz
Source: global traffic	DNS traffic detected: DNS query: gmooqswyuuqaiomi.xyz
Source: global traffic	DNS traffic detected: DNS query: kuiomoiwauwckqeq.xyz
Source: global traffic	DNS traffic detected: DNS query: ceucuuwiwwuiweaq.xyz
Source: global traffic	DNS traffic detected: DNS query: cycscsqyqkeaykgc.xyz
Source: global traffic	DNS traffic detected: DNS query: ssagiiaauyewiswa.xyz
Source: global traffic	DNS traffic detected: DNS query: ggwsuoyyioagegkw.xyz
Source: global traffic	DNS traffic detected: DNS query: ieikmuieoqqmugwu.xyz
Source: global traffic	DNS traffic detected: DNS query: kcqkucqkogqiuukw.xyz
Source: global traffic	DNS traffic detected: DNS query: oqouwceoowyiwgag.xyz
Source: global traffic	DNS traffic detected: DNS query: gakowseyscmeqkya.xyz
Source: global traffic	DNS traffic detected: DNS query: quisoakcuqsygyyc.xyz
Source: global traffic	DNS traffic detected: DNS query: auuisqaykqgeesae.xyz
Source: global traffic	DNS traffic detected: DNS query: iyawyckqggkwsyoq.xyz
Source: global traffic	DNS traffic detected: DNS query: ecmyomcaicqysoqw.xyz
Source: global traffic	DNS traffic detected: DNS query: iqcqqquiwomgsmma.xyz
Source: global traffic	DNS traffic detected: DNS query: ssegwgieumyoasym.xyz
Source: global traffic	DNS traffic detected: DNS query: ceeomiecgymecgau.xyz
Source: global traffic	DNS traffic detected: DNS query: myisokqwsmqeusuy.xyz
Source: global traffic	DNS traffic detected: DNS query: ywkamsiogkycyosy.xyz
Source: global traffic	DNS traffic detected: DNS query: ggkyecqguqkkuoso.xyz
Source: global traffic	DNS traffic detected: DNS query: kcyoeiykekuqkkmg.xyz
Source: global traffic	DNS traffic detected: DNS query: ikwyuqgsegcgcccg.xyz
Source: global traffic	DNS traffic detected: DNS query: wgswkwaesqqwkoaa.xyz
Source: global traffic	DNS traffic detected: DNS query: eqkkkcuwkiqiecac.xyz
Source: global traffic	DNS traffic detected: DNS query: kigcewceemkckeow.xyz
Source: global traffic	DNS traffic detected: DNS query: ykaimcgigakggwec.xyz
Source: global traffic	DNS traffic detected: DNS query: uceaygkekiassamu.xyz
Source: global traffic	DNS traffic detected: DNS query: seioywksogeseqig.xyz
Source: global traffic	DNS traffic detected: DNS query: ssoqscyewimqiqme.xyz
Source: global traffic	DNS traffic detected: DNS query: kocgeaeoakgqewog.xyz
Source: global traffic	DNS traffic detected: DNS query: kuiqsugkqeoscguo.xyz
Source: global traffic	DNS traffic detected: DNS query: kcsqwmkusesaccwa.xyz
Source: global traffic	DNS traffic detected: DNS query: ywyawywiuyecuiuu.xyz
Source: global traffic	DNS traffic detected: DNS query: uowowiqiyeiuwmcc.xyz
Source: global traffic	DNS traffic detected: DNS query: uokqeaieowiogsgc.xyz
Source: global traffic	DNS traffic detected: DNS query: ikoqkscwsowwukmi.xyz
Source: global traffic	DNS traffic detected: DNS query: iymukyseoieqccac.xyz
Source: global traffic	DNS traffic detected: DNS query: qascmswkaisogoaq.xyz
Source: global traffic	DNS traffic detected: DNS query: gacgceaygaecuguy.xyz
Source: global traffic	DNS traffic detected: DNS query: eqyyguuwsyqaqgsq.xyz

Source: unknown

HTTP traffic detected: POST /dns-query HTTP/1.1Host: chrome.cloudflare-dns.comConnection: keep-aliveContent-Length: 128Accept: application/dns-messageAccept-Language: *User-Agent: ChromeAccept-Encoding: identityContent-Type: application/dns-message

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 0Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; fwd=missContent-Type: text/html; charset=utf-8Date: Thu, 12 Dec 2024 11:29:00 GMTEtag: 1730908359-sslServer: NetlifyStrict-Transport-Security: max-age=31536000X-Nf-Request-Id: 01JEXA26FET5TWPYVJQH5CX6NXConnection: closeTransfer-Encoding: chunked

Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://bard.google.com/
Source: Reporting and NEL.16.dr	String found in binary or memory: https://bzib.nelreports.net/api/report?cat=bingbusiness
Source: Web Data.15.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: Web Data.15.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: manifest.json.15.dr	String found in binary or memory: https://chrome.google.com/webstore/
Source: manifest.json.15.dr	String found in binary or memory: https://chromewebstore.google.com/
Source: a5534102-99c8-490d-97f1-0a2588e795cc.tmp.16.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json0.15.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: a5534102-99c8-490d-97f1-0a2588e795cc.tmp.16.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: manifest.json0.15.dr	String found in binary or memory: https://docs.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-autopush.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-daily-0.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-daily-1.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-daily-2.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-daily-3.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-daily-4.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-daily-5.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-daily-6.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-preprod.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-staging.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive.google.com/
Source: Web Data.15.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: Web Data.15.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: Web Data.15.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 000003.log0.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/addressbar_uu_files.en-gb/1.0.2/asset?sv=2017-07-29&sr
Source: 000003.log0.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?assetgroup=Arbit
Source: 000003.log0.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr
Source: 000003.log.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtrac
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_163_music.png/1.0.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_dark.png/1.7.32/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_hc.png/1.7.32/asset
Source: HubApps Icons.15.dr, 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_light.png/1.7.32/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_hc.png/1.2.1/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_maximal_dark.png/1.2.1/ass
Source: HubApps Icons.15.dr, 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_maximal_light.png/1.2.1/as
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_amazon_music_light.png/1.4.13/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_apple_music.png/1.4.12/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_bard_light.png/1.0.1/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_dark.png/1.1.17/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_dark.png/1.6.8/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_light.png/1.1.17/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_light.png/1.6.8/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_hc.png/1.1.17/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_hc.png/1.6.8/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_hc.png/1.0.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_maximal_dark.png/1.0.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_maximal_light.png/1.0.3/asse
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_deezer.png/1.4.12/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_demo_dark.png/1.0.6/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_demo_light.png/1.0.6/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_designer_color.png/1.0.14/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_designer_hc.png/1.0.14/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_hc.png/1.1.12/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_maximal_dark.png/1.1.12/asset
Source: HubApps Icons.15.dr, 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_maximal_light.png/1.1.12/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_hc.png/1.2.0/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_maximal_dark.png/1.2.0/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_maximal_light.png/1.2.0/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_excel.png/1.7.32/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_facebook_messenger.png/1.5.14/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_gaana.png/1.0.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc.png/1.7.1/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc_controller.png/1.7.1/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc_joystick.png/1.7.1/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark.png/1.7.1/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark_controller.png/1.7.1/
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark_joystick.png/1.7.1/as
Source: HubApps Icons.15.dr, 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light.png/1.7.1/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light_controller.png/1.7.1
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light_joystick.png/1.7.1/a
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_gmail.png/1.5.4/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_help.png/1.0.0/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_hc.png/0.1.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_maximal_dark.png/0.1.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_maximal_light.png/0.1.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_iHeart.png/1.0.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_hc.png/1.0.14/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_maximal_dark.png/1.0.14/as
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_maximal_light.png/1.0.14/a
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_instagram.png/1.4.13/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_ku_gou.png/1.0.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_last.png/1.0.3/asset
Source: 000003.log0.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_manifest_gz/4.7.107/asset?assetgroup=Sho
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_dark.png/1.1.0/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_hc.png/1.1.0/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_light.png/1.1.0/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_naver_vibe.png/1.0.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_dark.png/1.4.9/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_hc.png/1.4.9/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_light.png/1.4.9/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_dark.png/1.9.10/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_hc.png/1.9.10/asset
Source: HubApps Icons.15.dr, 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_light.png/1.9.10/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_hc.png/1.1.0/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_maximal_dark.png/1.1.0/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_maximal_light.png/1.1.0/asse
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_power_point.png/1.7.32/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_qq.png/1.0.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_dark.png/1.1.12/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_hc.png/1.1.12/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_light.png/1.1.12/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_hc.png/1.1.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_maximal_dark.png/1.1.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_maximal_light.png/1.1.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_hc.png/1.3.6/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_maximal_dark.png/1.3.6/asset
Source: HubApps Icons.15.dr, 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_maximal_light.png/1.3.6/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.1.12/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.4.0/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.5.13/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.1.12/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.4.0/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.5.13/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.1.12/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.4.0/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.5.13/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_hc.png/1.4.0/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_maximal_dark.png/1.4.0/asset
Source: HubApps Icons.15.dr, 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_maximal_light.png/1.4.0/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_dark.png/1.3.20/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_hc.png/1.3.20/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_light.png/1.3.20/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_sound_cloud.png/1.0.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_spotify.png/1.4.12/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_dark.png/1.2.19/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_hc.png/1.2.19/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_light.png/1.2.19/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_telegram.png/1.0.4/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_hc.png/1.0.5/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_maximal_dark.png/1.0.5/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_maximal_light.png/1.0.5/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_tidal.png/1.0.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_tik_tok_light.png/1.0.5/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_hc.png/1.5.13/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_maximal_dark.png/1.5.13/asset
Source: HubApps Icons.15.dr, 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_maximal_light.png/1.5.13/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_twitter_light.png/1.0.9/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_vk.png/1.0.3/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_whats_new.png/1.0.0/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_whatsapp_light.png/1.4.11/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_word.png/1.7.32/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_yandex_music.png/1.0.10/asset
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_youtube.png/1.4.14/asset
Source: 000003.log0.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/signal_triggers/1.13.3/asset?sv=2017-07-29&sr=c&sig=Nt
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://excel.new?from=EdgeM365Shoreline
Source: a5534102-99c8-490d-97f1-0a2588e795cc.tmp.16.dr	String found in binary or memory: https://fonts.googleapis.com
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://gaana.com/
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://i.y.qq.com/n2/m/index.html
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://latest.web.skype.com/?browsername=edge_canary_shoreline
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://m.kugou.com/
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://m.soundcloud.com/
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://m.vk.com/
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://mail.google.com/mail/mu/mp/266/#tl/Inbox
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://manifestdeliveryservice.edgebrowser.microsoft-staging-falcon.io/app/page-context-demo
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://music.amazon.com
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://music.apple.com
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://music.yandex.com
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://open.spotify.com
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://outlook.live.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://outlook.live.com/mail/0/
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://outlook.live.com/mail/compose?isExtension=true
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://outlook.live.com/mail/inbox?isExtension=true&sharedHeader=1&nlp=1&client_flight=outlookedge
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://outlook.office.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://outlook.office.com/mail/0/
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://outlook.office.com/mail/compose?isExtension=true
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://outlook.office.com/mail/inbox?isExtension=true&sharedHeader=1&client_flight=outlookedge
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://powerpoint.new?from=EdgeM365Shoreline
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://tidal.com/
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://twitter.com/
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://vibe.naver.com/today
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://web.skype.com/?browsername=edge_canary_shoreline
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://web.skype.com/?browsername=edge_stable_shoreline
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://web.telegram.org/
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://web.whatsapp.com
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://word.new?from=EdgeM365Shoreline
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.deezer.com/
Source: 000003.log3.15.dr	String found in binary or memory: https://www.docusign.com/
Source: Favicons.15.dr	String found in binary or memory: https://www.docusign.com/favicon.ico
Source: Session_13378476538672741.15.dr	String found in binary or memory: https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf
Source: cmd.exe, 00000009.00000002.2350693247.0000000003400000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000009.00000002.2351035016.0000000003600000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000009.00000002.2350693247.0000000003405000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdfC:
Source: cmd.exe, 00000009.00000002.2351785140.0000000003960000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdfindows
Source: cmd.exe, 00000009.00000002.2351035016.0000000003644000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdfnH;/
Source: content.js.15.dr, content_new.js.15.dr	String found in binary or memory: https://www.google.com/chrome
Source: Web Data.15.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: a5534102-99c8-490d-97f1-0a2588e795cc.tmp.16.dr	String found in binary or memory: https://www.googleapis.com
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.iheart.com/podcast/
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.instagram.com
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.last.fm/
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.messenger.com
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1&game
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1&item
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1&item=fl
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1&playInS
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.office.com
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.officeplus.cn/?sid=shoreline&endpoint=OPPC&source=OPCNshoreline
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true&auth=1
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true&auth=2
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=1
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=2
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.tiktok.com/
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://www.youtube.com
Source: 4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	String found in binary or memory: https://y.music.163.com/m/

Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51172
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 51172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 51151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\6cb8c3.msi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\SourceHash{0B0E6C8A-C139-47E7-99E1-CFD19140782C}	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\inprogressinstallinfo.ipi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSIBE32.tmp	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_00148470	14_2_00148470
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_001428D0	14_2_001428D0
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_001508F0	14_2_001508F0
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_0014CCE0	14_2_0014CCE0
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_00153900	14_2_00153900
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_0014C130	14_2_0014C130
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_0014FD20	14_2_0014FD20
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_00142160	14_2_00142160
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_00147D80	14_2_00147D80
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_001499D0	14_2_001499D0
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_001555E0	14_2_001555E0
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_00146610	14_2_00146610
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_00153610	14_2_00153610
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_00156200	14_2_00156200
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_0014D628	14_2_0014D628
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_0014E6B0	14_2_0014E6B0
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_001522A0	14_2_001522A0
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_00152FA0	14_2_00152FA0
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_00156BA0	14_2_00156BA0
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_0014A3D0	14_2_0014A3D0

Source: Joe Sandbox View

Dropped File: C:\Windows\Installer\MSIBE32.tmp FD622CF73EA951A6DE631063ABA856487D77745DD1500ADCA61902B8DDE56FE1

Source: classification engine

Classification label: mal76.troj.winMSI@62/247@614/7

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

File created: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\149ca973-31a4-469e-8b13-f15a2e1744b4.tmp

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7056:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4616:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1264:120:WilError_03

Source: C:\Windows\System32\msiexec.exe

File created: C:\Windows\TEMP\~DF3F6F1BF70D072A3C.TMP

Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe

File read: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\msiwrapper.ini

Jump to behavior

Source: C:\Windows\SysWOW64\icacls.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: setup (2).msi

ReversingLabs: Detection: 21%

Source: unknown	Process created: C:\Windows\System32\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\setup (2).msi"
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding DF750E06877FC987E1961B6363098C75
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\icacls.exe "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\." /SETINTEGRITYLEVEL (CI)(OI)HIGH
Source: C:\Windows\SysWOW64\icacls.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\expand.exe "C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files
Source: C:\Windows\SysWOW64\expand.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c start msedge https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1972,i,15460452474060400035,15271760892993525039,262144 /prefetch:3
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe "C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe" /VERYSILENT /VERYSILENT
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2420,i,16787966548657019127,18376101955376312634,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6492 --field-trial-handle=2420,i,16787966548657019127,18376101955376312634,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6664 --field-trial-handle=2420,i,16787966548657019127,18376101955376312634,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6064 --field-trial-handle=2420,i,16787966548657019127,18376101955376312634,262144 /prefetch:8
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding DF750E06877FC987E1961B6363098C75	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\icacls.exe "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\." /SETINTEGRITYLEVEL (CI)(OI)HIGH	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\expand.exe "C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c start msedge https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe "C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe" /VERYSILENT /VERYSILENT	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1972,i,15460452474060400035,15271760892993525039,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2420,i,16787966548657019127,18376101955376312634,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6492 --field-trial-handle=2420,i,16787966548657019127,18376101955376312634,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6664 --field-trial-handle=2420,i,16787966548657019127,18376101955376312634,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6064 --field-trial-handle=2420,i,16787966548657019127,18376101955376312634,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msihnd.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srclient.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: spp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\icacls.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: dpx.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: wdscore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: dbgcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: acgenral.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Section loaded: fwpuclnt.dll	Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe

File written: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\msiwrapper.ini

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: setup (2).msi

Static file information: File size 2002944 > 1048576

Source:

Binary string: C:\ss2\Projects\MsiWrapper\MsiCustomActions\Release\MsiCustomActions.pdb source: setup (2).msi, MSIBE32.tmp.2.dr, 6cb8c3.msi.2.dr

Source: 02f00f7a480dcc4ebcae8d80bfc2e9bf.tmp.6.dr	Static PE information: section name: .00cfg
Source: 02f00f7a480dcc4ebcae8d80bfc2e9bf.tmp.6.dr	Static PE information: section name: .voltbl

Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_00158870 push eax; mov dword ptr [esp], ecx		14_2_00158873
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_0014B990 push eax; mov dword ptr [esp], ecx		14_2_0014B995

Source: 02f00f7a480dcc4ebcae8d80bfc2e9bf.tmp.6.dr

Static PE information: section name: .text entropy: 7.002350655497244

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSIBE32.tmp	Jump to dropped file
Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe (copy)	Jump to dropped file
Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\f578ccbf803c49818274db23b47701b7$dpx$.tmp\02f00f7a480dcc4ebcae8d80bfc2e9bf.tmp	Jump to dropped file

Source: C:\Windows\System32\msiexec.exe

File created: C:\Windows\Installer\MSIBE32.tmp

Jump to dropped file

Source: C:\Windows\SysWOW64\msiexec.exe

Process created: C:\Windows\SysWOW64\icacls.exe "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\." /SETINTEGRITYLEVEL (CI)(OI)HIGH

Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe

Thread delayed: delay time: 600000

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Window / User API: threadDelayed 364	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Window / User API: threadDelayed 747	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Window / User API: threadDelayed 6819	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Window / User API: threadDelayed 1407	Jump to behavior

Source: C:\Windows\System32\msiexec.exe

Dropped PE file which has not been started: C:\Windows\Installer\MSIBE32.tmp

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe

API coverage: 8.4 %

Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe TID: 2684	Thread sleep count: 364 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe TID: 2684	Thread sleep time: -218400000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe TID: 2684	Thread sleep count: 747 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe TID: 2684	Thread sleep count: 181 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe TID: 2684	Thread sleep count: 6819 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe TID: 2684	Thread sleep count: 1407 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe TID: 2684	Thread sleep count: 49 > 30	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Last function: Thread delayed

Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe

Thread delayed: delay time: 600000

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\	Jump to behavior

Source: Web Data.15.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: Web Data.15.dr	Binary or memory string: discord.comVMware20,11696428655f
Source: Web Data.15.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: Web Data.15.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: global block list test formVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: Web Data.15.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: Web Data.15.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: Web Data.15.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: Web Data.15.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: Web Data.15.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: Web Data.15.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: Web Data.15.dr	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: Web Data.15.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: setup.exe, 0000000E.00000002.3336246539.00000000012B9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: Web Data.15.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: Web Data.15.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: Web Data.15.dr	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: AMC password management pageVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: Web Data.15.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: Web Data.15.dr	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: Web Data.15.dr	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: Web Data.15.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: Web Data.15.dr	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: Web Data.15.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: Web Data.15.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Windows\System32\msiexec.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe

Code function: 14_2_002A238A IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

14_2_002A238A

Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_002AE166 mov eax, dword ptr fs:[00000030h]	14_2_002AE166
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_002AE135 mov eax, dword ptr fs:[00000030h]	14_2_002AE135
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_0029FB78 mov eax, dword ptr fs:[00000030h]	14_2_0029FB78

Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_0029A36B SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		14_2_0029A36B
Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe	Code function: 14_2_002A238A IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		14_2_002A238A

Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\icacls.exe "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\." /SETINTEGRITYLEVEL (CI)(OI)HIGH	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\expand.exe "C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c start msedge https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe "C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe" /VERYSILENT /VERYSILENT	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe

Code function: 14_2_0029B26A GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

14_2_0029B26A

Source: C:\Windows\SysWOW64\expand.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Replication Through Removable Media	Windows Management Instrumentation	1 Services File Permissions Weakness	11 Process Injection	21 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Services File Permissions Weakness	21 Virtualization/Sandbox Evasion	LSASS Memory	111 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	3 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	11 Process Injection	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Obfuscated Files or Information	NTDS	21 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	15 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Services File Permissions Weakness	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Software Packing	Cached Domain Credentials	11 Peripheral Device Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	3 File and Directory Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	14 System Information Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
setup (2).msi	21%	ReversingLabs	Win32.Trojan.Generic

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\f578ccbf803c49818274db23b47701b7$dpx$.tmp\02f00f7a480dcc4ebcae8d80bfc2e9bf.tmp	37%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe (copy)	37%	ReversingLabs	Win32.Trojan.Generic
C:\Windows\Installer\MSIBE32.tmp	0%	ReversingLabs

Source	Detection	Scanner	Label
https://word.new?from=EdgeM365Shoreline	0%	Avira URL Cloud	safe
https://aikmouciiqgecoqi.xyz:443/api/client_hello	100%	Avira URL Cloud	malware
https://vibe.naver.com/today	0%	Avira URL Cloud	safe
https://excel.new?from=EdgeM365Shoreline	0%	Avira URL Cloud	safe
https://manifestdeliveryservice.edgebrowser.microsoft-staging-falcon.io/app/page-context-demo	0%	Avira URL Cloud	safe
https://latest.web.skype.com/?browsername=edge_canary_shoreline	0%	Avira URL Cloud	safe
https://powerpoint.new?from=EdgeM365Shoreline	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
chrome.cloudflare-dns.com	162.159.61.3	true	false	high
docusign-dxe.netlifyglobalcdn.com	3.33.186.135	true	false	high
ssl.bingadsedgeextension-prod-europe.azurewebsites.net	94.245.104.56	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
aikmouciiqgecoqi.xyz	166.1.160.237	true	false	high
googlehosted.l.googleusercontent.com	172.217.19.193	true	false	high
ggeymcaisciikucq.xyz	unknown	unknown	false	high
maoeeogmuauywsyu.xyz	unknown	unknown	false	high
miqcugomwgmygyoq.xyz	unknown	unknown	false	high
yqyqgowkwqiggewq.xyz	unknown	unknown	true	unknown
omasqkwqyskcagwi.xyz	unknown	unknown	false	high
oqaiyaoqwyeswaiy.xyz	unknown	unknown	false	high
gmciuwiycsqycggy.xyz	unknown	unknown	false	high
ikoqkscwsowwukmi.xyz	unknown	unknown	false	high
coayaokeissieqcc.xyz	unknown	unknown	false	high
qiyggmguowygeooc.xyz	unknown	unknown	false	high
caysswwugsmkeksw.xyz	unknown	unknown	false	high
yyimcoiwgckeakcm.xyz	unknown	unknown	false	high
cuccygameukkeumw.xyz	unknown	unknown	true	unknown
oyogquqkmyqwwkuq.xyz	unknown	unknown	false	high
ywmgykycywqqewqw.xyz	unknown	unknown	false	high
uyeqwcuyimescesu.xyz	unknown	unknown	false	high
cykgmsqcgysgaioo.xyz	unknown	unknown	true	unknown
sauygqecsusickcu.xyz	unknown	unknown	false	high
mmeuqmoaekswggoe.xyz	unknown	unknown	true	unknown
uosaescwmkiyscay.xyz	unknown	unknown	false	high
wssaqmakumewmaes.xyz	unknown	unknown	false	high
kimakioiwmawksiw.xyz	unknown	unknown	false	high
quoqoooiamqkkosc.xyz	unknown	unknown	true	unknown
ssegwgieumyoasym.xyz	unknown	unknown	true	unknown
eqyyguuwsyqaqgsq.xyz	unknown	unknown	true	unknown
ekqyosgcumkcecmo.xyz	unknown	unknown	false	high
goicqsmskkygkkka.xyz	unknown	unknown	false	high
kigcewceemkckeow.xyz	unknown	unknown	true	unknown
ucmwywoqciswaguc.xyz	unknown	unknown	true	unknown
kcwiywyygywkkysk.xyz	unknown	unknown	false	high
wiaiwegmqcmwcouw.xyz	unknown	unknown	true	unknown
seoomaqwwimwueiw.xyz	unknown	unknown	true	unknown
eigywisgeoiskekg.xyz	unknown	unknown	false	high
keykoekseemyiewq.xyz	unknown	unknown	false	high
mywaqkeaawisisky.xyz	unknown	unknown	false	high
aoyeoimcuuqakckw.xyz	unknown	unknown	false	high
smckcsaioceiyasu.xyz	unknown	unknown	false	high
ieikmuieoqqmugwu.xyz	unknown	unknown	true	unknown
ymysimqoykwqeqiq.xyz	unknown	unknown	false	high
qimmkmaumumswocw.xyz	unknown	unknown	false	high
skyiqyaeoykwcgiw.xyz	unknown	unknown	false	high
skgcsksqyekiymii.xyz	unknown	unknown	true	unknown
mssaogwocegysoow.xyz	unknown	unknown	false	high
gmqeqkcqackwkgao.xyz	unknown	unknown	false	high
skiwkmaaeeiqqgee.xyz	unknown	unknown	false	high
cyqqgacqkowwkqqe.xyz	unknown	unknown	false	high
miigookwguakmkeu.xyz	unknown	unknown	true	unknown
qigcqiaomwieqwka.xyz	unknown	unknown	false	high
oywgqkusocouysua.xyz	unknown	unknown	false	high
ukmcqucewskcqygg.xyz	unknown	unknown	false	high
omuquowgiusiesgk.xyz	unknown	unknown	true	unknown
skekiggeimmceqcg.xyz	unknown	unknown	true	unknown
wgcaouuqqqwucogy.xyz	unknown	unknown	false	high
cykgucwkesokooyw.xyz	unknown	unknown	true	unknown
moiimkscmiswaesw.xyz	unknown	unknown	false	high
ieqeeiggkuqcomyo.xyz	unknown	unknown	false	high
wgssaogcsscmkswu.xyz	unknown	unknown	true	unknown
ecacmycegqoaquio.xyz	unknown	unknown	true	unknown
ygucsucmagwqsqcu.xyz	unknown	unknown	false	high
aiiqyyikowqaygwy.xyz	unknown	unknown	false	high
skawoueawceoywsy.xyz	unknown	unknown	false	high
eyoyiqskiciwwoyw.xyz	unknown	unknown	true	unknown
ikwyooieywakeqog.xyz	unknown	unknown	true	unknown
ukekykoqskumoikg.xyz	unknown	unknown	true	unknown
uwimwwicgcscuoku.xyz	unknown	unknown	false	high
gmmacaiigwcscggs.xyz	unknown	unknown	true	unknown
miacggmycyqikoyq.xyz	unknown	unknown	true	unknown
ywyawywiuyecuiuu.xyz	unknown	unknown	true	unknown
mueuwcqsioowsmce.xyz	unknown	unknown	false	high
ssmkyomikukusksu.xyz	unknown	unknown	false	high
mmisquwegymayaee.xyz	unknown	unknown	true	unknown
aoeewogkicikusoc.xyz	unknown	unknown	true	unknown
qcwaiaiqiwcakawa.xyz	unknown	unknown	false	high
aoosomigeaiewqom.xyz	unknown	unknown	true	unknown
ywcwqgmikmycwoeu.xyz	unknown	unknown	true	unknown
ssiooaeoaocuyaow.xyz	unknown	unknown	false	high
gwoyamckoqoaauoq.xyz	unknown	unknown	false	high
keosqeosukqcooco.xyz	unknown	unknown	false	high
oyewqwkusieeoqey.xyz	unknown	unknown	false	high
qiqueqokwqqgwwci.xyz	unknown	unknown	false	high
mmiugosumuqmuqoc.xyz	unknown	unknown	false	high
quuemeewaqaiiyqc.xyz	unknown	unknown	false	high
keguuyioweymiaws.xyz	unknown	unknown	false	high
guowewgekuoqacyy.xyz	unknown	unknown	false	high
mocikyoeikocwkuc.xyz	unknown	unknown	true	unknown
qgkgogieieoomkqq.xyz	unknown	unknown	true	unknown
qiswokuokugiooky.xyz	unknown	unknown	false	high
caceukeeygaaqaec.xyz	unknown	unknown	false	high
myisokqwsmqeusuy.xyz	unknown	unknown	true	unknown
keckssemmeoqieqe.xyz	unknown	unknown	false	high
ysoqqwckkqssyigm.xyz	unknown	unknown	true	unknown
kcoiygiwuyqyaoku.xyz	unknown	unknown	false	high
mayykkuyeuiggyws.xyz	unknown	unknown	false	high
uwskygguegqkasme.xyz	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf	false		high
https://clients2.googleusercontent.com/crx/blobs/AW50ZFsLPhJJyx_4ShcDOgcEpJeOc7Vr0kMzfFRoaMfWx4pAgZ0UGF2i9_ei1A7FAHQ-EPFULeBn7F8_SEKhjbpEyKfiidX7GF_6BDOycMeg5w03wjwVQ61hkaEix8WFqmEAxlKa5cmz_tdFr9JtRwdqRu82wmLe2Ghe/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_84_1_0.crx	false		high
https://aikmouciiqgecoqi.xyz:443/api/client_hello	false	Avira URL Cloud: malware	unknown
https://chrome.cloudflare-dns.com/dns-query	false		high
https://www.docusign.com/favicon.ico	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	Web Data.15.dr	false		high
https://web.whatsapp.com	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://duckduckgo.com/ac/?q=	Web Data.15.dr	false		high
https://www.docusign.com/	000003.log3.15.dr	false		high
https://www.officeplus.cn/?sid=shoreline&endpoint=OPPC&source=OPCNshoreline	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://m.kugou.com/	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://www.office.com	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://outlook.live.com/mail/0/	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://www.last.fm/	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://powerpoint.new?from=EdgeM365Shoreline	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	Web Data.15.dr	false		high
https://tidal.com/	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://docs.google.com/	manifest.json0.15.dr	false		high
https://www.youtube.com	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://www.instagram.com	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://web.skype.com/?browsername=edge_canary_shoreline	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://gaana.com/	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://drive-staging.corp.google.com/	manifest.json0.15.dr	false		high
https://drive.google.com/	manifest.json0.15.dr	false		high
https://outlook.live.com/mail/compose?isExtension=true	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=1	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	Web Data.15.dr	false		high
https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=2	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://www.messenger.com	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://outlook.live.com/mail/inbox?isExtension=true&sharedHeader=1&nlp=1&client_flight=outlookedge	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://outlook.office.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://outlook.office.com/mail/compose?isExtension=true	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdfindows	cmd.exe, 00000009.00000002.2351785140.0000000003960000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdfnH;/	cmd.exe, 00000009.00000002.2351035016.0000000003644000.00000004.00000020.00020000.00000000.sdmp	false		high
https://i.y.qq.com/n2/m/index.html	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://www.deezer.com/	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://latest.web.skype.com/?browsername=edge_canary_shoreline	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false	Avira URL Cloud: safe	unknown
https://word.new?from=EdgeM365Shoreline	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false	Avira URL Cloud: safe	unknown
https://web.telegram.org/	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://outlook.live.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://outlook.office.com/mail/0/	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://manifestdeliveryservice.edgebrowser.microsoft-staging-falcon.io/app/page-context-demo	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	Web Data.15.dr	false		high
https://m.soundcloud.com/	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://mail.google.com/mail/mu/mp/266/#tl/Inbox	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://drive-daily-2.corp.google.com/	manifest.json0.15.dr	false		high
https://drive-autopush.corp.google.com/	manifest.json0.15.dr	false		high
https://music.amazon.com	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://drive-daily-4.corp.google.com/	manifest.json0.15.dr	false		high
https://vibe.naver.com/today	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	Web Data.15.dr	false		high
https://outlook.office.com/mail/inbox?isExtension=true&sharedHeader=1&client_flight=outlookedge	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://open.spotify.com	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://twitter.com/	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://drive-daily-1.corp.google.com/	manifest.json0.15.dr	false		high
https://excel.new?from=EdgeM365Shoreline	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false	Avira URL Cloud: safe	unknown
https://web.skype.com/?browsername=edge_stable_shoreline	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://www.onenote.com/stickynotesstaging?isEdgeHub=true	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://drive-daily-5.corp.google.com/	manifest.json0.15.dr	false		high
https://m.vk.com/	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://bzib.nelreports.net/api/report?cat=bingbusiness	Reporting and NEL.16.dr	false		high
https://www.google.com/chrome	content.js.15.dr, content_new.js.15.dr	false		high
https://www.tiktok.com/	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://drive-daily-6.corp.google.com/	manifest.json0.15.dr	false		high
https://drive-daily-0.corp.google.com/	manifest.json0.15.dr	false		high
https://www.onenote.com/stickynotes?isEdgeHub=true	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://www.iheart.com/podcast/	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://music.yandex.com	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://chromewebstore.google.com/	manifest.json.15.dr	false		high
https://drive-preprod.corp.google.com/	manifest.json0.15.dr	false		high
https://clients2.googleusercontent.com	a5534102-99c8-490d-97f1-0a2588e795cc.tmp.16.dr	false		high
https://www.onenote.com/stickynotes?isEdgeHub=true&auth=2	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdfC:	cmd.exe, 00000009.00000002.2350693247.0000000003400000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000009.00000002.2351035016.0000000003600000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000009.00000002.2350693247.0000000003405000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.onenote.com/stickynotes?isEdgeHub=true&auth=1	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://chrome.google.com/webstore/	manifest.json.15.dr	false		high
https://y.music.163.com/m/	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://bard.google.com/	4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp.15.dr	false		high
https://drive-daily-3.corp.google.com/	manifest.json0.15.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.33.186.135	docusign-dxe.netlifyglobalcdn.com	United States	8987	AMAZONEXPANSIONGB	false
166.1.160.237	aikmouciiqgecoqi.xyz	United States	11798	ACEDATACENTERS-AS-1US	false
162.159.61.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.19.193	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
204.79.197.237	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1573624
Start date and time:	2024-12-12 12:27:33 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	25
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	setup (2).msi
Detection:	MAL
Classification:	mal76.troj.winMSI@62/247@614/7
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .msi Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.32.238.144, 192.229.221.95, 199.232.210.172, 13.107.42.16, 204.79.197.239, 13.107.21.239, 172.217.17.78, 13.107.6.158, 172.165.69.228, 23.32.238.138, 2.19.198.56, 172.217.19.10, 2.16.158.35, 2.16.158.26, 2.16.158.179, 2.16.158.34, 2.16.158.186, 2.16.158.187, 2.16.158.27, 2.16.158.192, 2.16.158.32, 142.250.181.35, 172.165.61.93, 199.232.214.172, 23.219.161.148, 2.16.158.56, 2.16.158.75, 2.16.158.72, 2.16.158.74, 2.16.158.80, 2.16.158.40, 2.16.158.43, 2.16.158.51, 2.16.158.50, 142.251.40.99, 142.251.40.195, 142.251.32.99, 13.107.246.63, 20.12.23.50, 94.245.104.56, 20.190.177.83, 23.218.208.109, 23.200.0.6, 4.152.199.46, 13.107.246.40
Excluded domains from analysis (whitelisted): prod-agic-us-3.uksouth.cloudapp.azure.com, nav-edge.smartscreen.microsoft.com, config.edge.skype.com.trafficmanager.net, slscr.update.microsoft.com, a416.dscd.akamai.net, data-edge.smartscreen.microsoft.com, edgeassetservice.afd.azureedge.net, prod-agic-us-2.uksouth.cloudapp.azure.com, clients2.google.com, e86303.dscx.akamaiedge.net, ocsp.digicert.com, www.bing.com.edgekey.net, login.live.com, config-edge-skype.l-0007.l-msedge.net, msedge.b.tlu.dl.delivery.mp.microsoft.com, www.gstatic.com, l-0007.l-msedge.net, config.edge.skype.com, ds-www.docusign.com.akadns.net, www.bing.com, edge-microsoft-com.dual-a-0036.a-msedge.net, fonts.googleapis.com, fs.microsoft.com, bingadsedgeextension-prod.trafficmanager.net, bzib.nelreports.net.akamaized.net, otelrules.azureedge.net, api.edgeoffer.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, b-0005.b-msedge.net, prod-atm-wds-edge.trafficmanager.net, www-www.bing.com.trafficmanager.net, edge.microsoft.com, business-bin
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: setup (2).msi

Simulations

Behavior and APIs

Time	Type	Description
06:29:03	API Interceptor	635456x Sleep call for process: setup.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
162.159.61.3	setup.msi	Get hash	malicious	Unknown	Browse
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse
	Nieuwebestellingen10122024.exe	Get hash	malicious	FormBook	Browse
	751ietQPnX.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	l92fYljXWF.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	qxjDerXRGR.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	Richiesta di Indagine sulla Violazione del Copyright lnk.lnk	Get hash	malicious	Unknown	Browse
	1733845413a1d8742853c308d6ac4d050f80c4b91bf14f4919c2728222ecef14ce82d51adb973.dat-decoded.exe	Get hash	malicious	Remcos	Browse
	https://wetransfer.com/downloads/a83584fea59b11ef1e94d36869e8790020241209234540/89744b9472f9ce1b5e3b4ada79f2184c20241209234540/7041ff?t_exp=1734047140&t_lsid=42d44d78-6d8f-48db-8db5-5efa0c86786d&t_network=email&t_rid=ZW1haWx8Njc0ZjQ5YTNiNjM1NTFjNmY2NTg0N2Zj&t_s=download_link&t_ts=1733787940&utm_campaign=TRN_TDL_01&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_01	Get hash	malicious	Unknown	Browse
3.33.186.135	setup.msi	Get hash	malicious	Unknown	Browse
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse
	https://us.services.docusign.net/webforms-ux/v1.0/forms/de9dbdc77cc2367bb50c45c4d2a0b8c4	Get hash	malicious	Unknown	Browse
	aba5298f.msi	Get hash	malicious	Unknown	Browse
	https://soloist.ai/trigwiki23	Get hash	malicious	Unknown	Browse
	UwBqqeMnswLwstaa.ps1	Get hash	malicious	Unknown	Browse
	CHDLSHtWbSRCfzJMtDO.ps1	Get hash	malicious	Unknown	Browse
	https://url.za.m.mimecastprotect.com/s/0BCLC2RJJxsopvqJcnfRC5V8Fi?domain=form.asana.com	Get hash	malicious	Unknown	Browse
	https://form.asana.com/?k=4CXtmX3TL4hciUOIomfxgQ&d=1207815429321009	Get hash	malicious	Unknown	Browse
166.1.160.237	293944637.dll	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	systemtask (2).exe	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	systemtask.exe	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	HvASs4SYK9.exe	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	setup.msi	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
chrome.cloudflare-dns.com	setup.msi	Get hash	malicious	Unknown	Browse	162.159.61.3
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse	172.64.41.3
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse	172.64.41.3
	Nieuwebestellingen10122024.exe	Get hash	malicious	FormBook	Browse	172.64.41.3
	751ietQPnX.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.159.61.3
	l92fYljXWF.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.159.61.3
	qxjDerXRGR.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.159.61.3
	taCCGTk8n1.lnk	Get hash	malicious	RHADAMANTHYS	Browse	172.64.41.3
	Richiesta di Indagine sulla Violazione del Copyright lnk.lnk	Get hash	malicious	Unknown	Browse	172.64.41.3
	1733845413a1d8742853c308d6ac4d050f80c4b91bf14f4919c2728222ecef14ce82d51adb973.dat-decoded.exe	Get hash	malicious	Remcos	Browse	172.64.41.3
ssl.bingadsedgeextension-prod-europe.azurewebsites.net	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse	94.245.104.56
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse	94.245.104.56
	l92fYljXWF.lnk	Get hash	malicious	RHADAMANTHYS	Browse	94.245.104.56
	qxjDerXRGR.lnk	Get hash	malicious	RHADAMANTHYS	Browse	94.245.104.56
	taCCGTk8n1.lnk	Get hash	malicious	RHADAMANTHYS	Browse	94.245.104.56
	1733845413a1d8742853c308d6ac4d050f80c4b91bf14f4919c2728222ecef14ce82d51adb973.dat-decoded.exe	Get hash	malicious	Remcos	Browse	94.245.104.56
	Setup.exe	Get hash	malicious	Vidar	Browse	94.245.104.56
	17333253674c71ac3d5875ca830e11f4630bf65d3b8b7e2686361e216df980d330c80afb30623.dat-decoded.exe	Get hash	malicious	Remcos	Browse	94.245.104.56
	oLY6JbNl9i.bat	Get hash	malicious	Unknown	Browse	94.245.104.56
	9aTcxCmLgM.bat	Get hash	malicious	Unknown	Browse	94.245.104.56
s-part-0035.t-0009.t-msedge.net	DocScan_20242175.js	Get hash	malicious	Unknown	Browse	13.107.246.63
	setup.msi	Get hash	malicious	Unknown	Browse	13.107.246.63
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse	13.107.246.63
	Rockwool-Msg-S9039587897.pdf	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	13.107.246.63
	http://get-derila.com	Get hash	malicious	Unknown	Browse	13.107.246.63
	Event Schedule.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.63
	DHL AWB Document_pdf.vbs	Get hash	malicious	Unknown	Browse	13.107.246.63
	malware.ps1	Get hash	malicious	Unknown	Browse	13.107.246.63
	MHDeXPq2uB.exe	Get hash	malicious	RedLine	Browse	13.107.246.63
	n70CrSGL8G.exe	Get hash	malicious	RedLine	Browse	13.107.246.63
docusign-dxe.netlifyglobalcdn.com	setup.msi	Get hash	malicious	Unknown	Browse	3.33.186.135
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse	3.33.186.135
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse	3.33.186.135
	https://us.services.docusign.net/webforms-ux/v1.0/forms/de9dbdc77cc2367bb50c45c4d2a0b8c4	Get hash	malicious	Unknown	Browse	3.33.186.135
	aba5298f.msi	Get hash	malicious	Unknown	Browse	3.33.186.135

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse	13.107.42.14
	https://feji.us/m266he	Get hash	malicious	Unknown	Browse	51.140.146.131
	jew.sh4.elf	Get hash	malicious	Unknown	Browse	20.226.166.194
	mipsel.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	22.240.176.150
	https://r.clk71.com/s.ashx?ms=AZ71:223314_102051&e=susanne_hentschel%40qvc.com&eId=74256157&c=h&url=https%3a%2f%2fwww.carltonusa.com%2f	Get hash	malicious	Unknown	Browse	20.121.109.104
	PixelFlasher.exe	Get hash	malicious	Unknown	Browse	20.233.83.145
	REMITTANCE_10023Tdcj.html	Get hash	malicious	Unknown	Browse	20.38.136.70
	phish_alert_iocp_v1.4.48 - 2024-12-11T151927.331.eml	Get hash	malicious	Unknown	Browse	52.109.76.240
	jew.ppc.elf	Get hash	malicious	Unknown	Browse	13.76.87.56
	jew.mips.elf	Get hash	malicious	Unknown	Browse	13.80.198.53
CLOUDFLARENETUS	setup.msi	Get hash	malicious	Unknown	Browse	172.64.41.3
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse	104.18.86.42
	https://feji.us/m266he	Get hash	malicious	Unknown	Browse	104.20.3.69
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse	172.64.41.3
	Rockwool-Msg-S9039587897.pdf	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	104.21.96.1
	http://get-derila.com	Get hash	malicious	Unknown	Browse	104.18.19.54
	financial_policy_December 10, 2024.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	104.17.245.203
	https://icsportal-update.duckdns.org/sq0.php?session=675a91d9e40e3	Get hash	malicious	Unknown	Browse	104.17.25.14
	RFQ_P.O.1212024.scr	Get hash	malicious	FormBook	Browse	172.67.145.234
	https://url41.mailanyone.net/scanner?m=1tLLkn-000000000Cu-3MPx&d=4%7Cmail%2F90%2F1733919600%2F1tLLkn-000000000Cu-3MPx%7Cin41e%7C57e1b682%7C16739527%7C12325088%7C67598451340A7E7E34A434AD05811D2E&o=%2Fphts%3A%2Futs.s-wr-2petncotsio.etooop%2F.cmhser%3Fd%26.dv%3D2HHu%3D60cMaRtwLyzWIN9dDWQ0j0ZBOMkiZTWDNZlNTGFmj1MdNMhhZDGDZOROGjYu2uZVcIshL13m9bRZWmNz%3D0bwLhYN%26iQVjj%3DWgZ2MNNTwzmZZWIZJlWwW%3DFkM0%26tM2l121NaQSdK5YKQ3FWZeheTURUTubJOt2oOSTWgZtZT2BvQlNBQl%3DUSThT0%26lR04%3D4d05f88a4f83c102fc8d7af5079V%266bP%3DANdsFUUEk0NThTVVNScUSYWBBbgJ7rzlyn1ERkBSzh9qmzIX6xvrbsyM8qb6f4HC59eiDbrDsPv9W1mhDcOFm%23uMyW5bUaWm5iAtZ5cVujem228YFYt9&s=dQ2VS6ieQ8nkhuwt32k9X8A6qOU	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
AMAZONEXPANSIONGB	setup.msi	Get hash	malicious	Unknown	Browse	3.33.186.135
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse	3.33.186.135
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse	3.33.186.135
	RQ--029.msi	Get hash	malicious	AteraAgent	Browse	52.223.39.232
	SHIPPING DOCUMENTS_PDF.exe	Get hash	malicious	FormBook	Browse	3.33.130.190
	vFile__0054seconds__Arkansas.html	Get hash	malicious	Unknown	Browse	3.33.220.150
	Atualizador_Fiscal_NFe_37882912.msi	Get hash	malicious	AteraAgent	Browse	52.223.39.232
	https://drive.google.com/uc?export=download&id=1exrW4eArCFn4rWRiZm-_Z8vKtyu_rwNw	Get hash	malicious	HTMLPhisher	Browse	3.33.220.150
	Nieuwebestellingen10122024.exe	Get hash	malicious	FormBook	Browse	3.33.130.190
	https://hongkongliving.com	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	3.33.155.121
ACEDATACENTERS-AS-1US	293944637.dll	Get hash	malicious	Unknown	Browse	166.1.160.237
	systemtask (2).exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	systemtask.exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	HvASs4SYK9.exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	setup.msi	Get hash	malicious	Unknown	Browse	166.1.160.237
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse	166.1.160.162
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse	166.1.160.237
	Josho.m68k.elf	Get hash	malicious	Unknown	Browse	108.165.154.42
	jew.m68k.elf	Get hash	malicious	Unknown	Browse	166.0.238.6
	sh4.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	166.15.108.57

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Windows\Installer\MSIBE32.tmp	57ff67.msi	Get hash	malicious	Unknown	Browse
	293944637.dll	Get hash	malicious	Unknown	Browse
	setup.msi	Get hash	malicious	Unknown	Browse
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse
	2Wr5r2e9vo.msi	Get hash	malicious	Unknown	Browse
	2Wr5r2e9vo.msi	Get hash	malicious	Unknown	Browse
	wE1inOhJA5.msi	Get hash	malicious	Remcos, RHADAMANTHYS	Browse
	wE1inOhJA5.msi	Get hash	malicious	Unknown	Browse
	EVp6NE5N9g.msi	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\1256298f-c2eb-4b3f-99f5-54ae6a5ee8e9.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45799
Entropy (8bit):	6.089523411480202
Encrypted:	false
SSDEEP:	768:2MkbJrT8IeQc5d9qzSGhDO6vP6Oivw7SzVFDlExXRYNxoZ20+WCAoPGoup1Xl3jT:2Mk1rT8H19qA6CvwlYNGU0XRoPhu3VlZ
MD5:	ED357EA5042FCB8F005FFDF8CDA9681A
SHA1:	4046220131242BD930D48AE1C0939CFCABD9D940
SHA-256:	CECD8FA203C6C5ED3AAF5A893EFC4AC8FD52779560C5CC0858249AEFB2E6C371
SHA-512:	B75AECDD3CD89A9322F66BAF7C0457177AA972BD5D22E28F790680D78BE4F93DB99C89D96A9607CF466D7C210FAA069D2943A122391DB0CF944562590BF13EC7
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\149ca973-31a4-469e-8b13-f15a2e1744b4.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090769329530999
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMYwuF9hDO6vP6O+7tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEe6mtbz8hu3VlXr4CRo1
MD5:	9E94B2418413D035FC34D7E9EBFC17BC
SHA1:	504E612CBE16DD8492FC6C7FA639294210792F98
SHA-256:	8903E93FC23F34EF44284915ACB8AC7C08AEAAB50DD51A71FF91ED04E944781E
SHA-512:	DCEF89AD2B3FD8E16DD4BD2E314DC3081E766F3FA8513F9D00DB2E50490A3A38E0D1E486FE72CC61388CD7655D79127D75B874E8FAB29C9D1B4DD67E1F42FA72
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\5036a7eb-293e-4f4c-bde1-4160c6de2dfe.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44588
Entropy (8bit):	6.096554408766973
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBcwuthDO6vP6OivwH8zo0YCFQEscGoup1Xl3jVzXq:z/Ps+wsI7ynEt6CvwLchu3VlXr4CRo1
MD5:	0661A4AF7F3ACFC463C01B16571155BC
SHA1:	1E2D5BC32888338DCC86D76830002813B5F541D8
SHA-256:	647DFD066B021FBEA002A4184713EFF4F4DED409D8A7C54127DE5AAD5B0B7706
SHA-512:	5CB8DAC22F90D1982B25CDAA655D3A17EF13EFF235162C163093CA7BB26E6F536DDFBF5E7F15F9328ACBEFD4CE828405208FC1137A5331F05E54F51D5E2CADC5
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\506a7ffd-90a9-48fc-9c5f-2d52c8b964a8.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	44588
Entropy (8bit):	6.096554408766973
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBcwuthDO6vP6OivwH8zo0YCFQEscGoup1Xl3jVzXq:z/Ps+wsI7ynEt6CvwLchu3VlXr4CRo1
MD5:	0661A4AF7F3ACFC463C01B16571155BC
SHA1:	1E2D5BC32888338DCC86D76830002813B5F541D8
SHA-256:	647DFD066B021FBEA002A4184713EFF4F4DED409D8A7C54127DE5AAD5B0B7706
SHA-512:	5CB8DAC22F90D1982B25CDAA655D3A17EF13EFF235162C163093CA7BB26E6F536DDFBF5E7F15F9328ACBEFD4CE828405208FC1137A5331F05E54F51D5E2CADC5
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	107893
Entropy (8bit):	4.6401415786958475
Encrypted:	false
SSDEEP:	1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7L:fwUQC5VwBIiElEd2K57P7L
MD5:	8574D972959B295FEA388493B825FDF1
SHA1:	388510DBD841625F1DFFC1347A4C41B8AF07B23C
SHA-256:	8520149C20006B78EBBDCD489C459D56B922C235102433F8D4C5A440ABA6E776
SHA-512:	E50D2B5D7ED6A634865875A570CA441CD6C3AA68ED181C4329E2BDE3AA06929DA02E4D1900691C88B3D7A501AB5223140969CCDE4C2B670F0937A2A75DFA763D
Malicious:	false
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\f43dbdb3-c2b6-4a76-9e25-a21e0ae7bb33.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	107893
Entropy (8bit):	4.6401415786958475
Encrypted:	false
SSDEEP:	1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7L:fwUQC5VwBIiElEd2K57P7L
MD5:	8574D972959B295FEA388493B825FDF1
SHA1:	388510DBD841625F1DFFC1347A4C41B8AF07B23C
SHA-256:	8520149C20006B78EBBDCD489C459D56B922C235102433F8D4C5A440ABA6E776
SHA-512:	E50D2B5D7ED6A634865875A570CA441CD6C3AA68ED181C4329E2BDE3AA06929DA02E4D1900691C88B3D7A501AB5223140969CCDE4C2B670F0937A2A75DFA763D
Malicious:	false
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-675AC8F7-768.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.42160692024364466
Encrypted:	false
SSDEEP:	3072:y1Q6Y+va6EYWjK0F/OFnwg1HFRqwM7c8V8jYq+HSTFqb5pWg1HFqJ:36YLLjtF2FnwaHxMo0BqBFqb5pWaHm
MD5:	DDD9AA1ABCD26DB1BE50EE0DE6BD82F1
SHA1:	B23FD13E52E1594121EEA46B85CDD82704648580
SHA-256:	4CB85E0CE7BFDBBBF1DF123313B3C4A587BF3054307036A098A9E001FDE4126A
SHA-512:	8A7D32D46384C859449DF9148AB5966AF0401FF6DC6B2925E10645342C036905B490A5C3275D6A2EADDD32B41BAEBE4CAFE2E94C2AF791FD31B1CAC462E35861
Malicious:	false
Preview:	...@..@...@.....C.].....@...............p...................`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30..............117.0.2045.47-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".ncrdci20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@..............(......................w..U?:K..>.........."....."...24.."."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA=".:............B)..1.3.177.11.. .*.RegKeyNotFound2.windowsR...Z...u...V.S@..$...SF@.......Y@.......4@.......Y@........?........?.........................Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......4@.......Y@................Y@.......Y@.......Y@........?........?2................. ...2.........5...

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	4.132041621771752
Encrypted:	false
SSDEEP:	3:FiWWltlApdeXKeQwFMYLAfJrAazlYBVP/Sh/JzvPWVcRVEVg3WWD5x1:o1ApdeaEqYsMazlYBVsJDu2ziy5
MD5:	845CFA59D6B52BD2E8C24AC83A335C66
SHA1:	6882BB1CE71EB14CEF73413EFC591ACF84C63C75
SHA-256:	29645C274865D963D30413284B36CC13D7472E3CD2250152DEE468EC9DA3586F
SHA-512:	8E0E7E8CCDC8340F68DB31F519E1006FA7B99593A0C1A2425571DAF71807FBBD4527A211030162C9CE9E0584C8C418B5346C2888BEDC43950BF651FD1D40575E
Malicious:	false
Preview:	sdPC......................X..<EE..r/y..."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA="..................................................................................47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=....................fdb35e9f-12f5-40d5-8d50-87a9333d43a4............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\07adbf39-6430-48fa-82b4-fa4ca5953fc4.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\0839f117-4d9c-4ff7-b0ae-a7775c85df83.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13102
Entropy (8bit):	5.273187061454679
Encrypted:	false
SSDEEP:	384:st/PGKSuDslAGMfhQdPbGGQx6WTQlaTYs:slOxuJGMf6bGVxXiaTYs
MD5:	2964C057C42B728E57D9909DC751E4D8
SHA1:	44330892B19DD79E856852E2803CF128CD376670
SHA-256:	1FE5FB4474B547D3F9EFB11F6A3C4BB3C48B7F289C71CC09DA354E515A349A5E
SHA-512:	E555D4521F4D7670A8D95729CCA204F3BA7A07680A2EDDD56EEE1A0D372CD6D4F72C4CDB4E7E31853E3C7FDBBFF79AA172F7245271D31936D531D7308A89EDFF
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378476536853524","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\6ae045ac-d311-4045-ae0f-4a09997abb05.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9570
Entropy (8bit):	5.107146530037506
Encrypted:	false
SSDEEP:	192:st/kd0sl4TGMsZihUkj3x88bV+FpUQA66W6aFIMYrP7YJ:st/7slAGMfhZbGGQx6W6aTYs
MD5:	1506179D0A6A979594788E379B0D1263
SHA1:	33A8FC6441A87ADDD86F621D9660BDAD8E2B9B78
SHA-256:	B82FF86705B2996F60E655BB7CC872D62B0B98BFEE8E43D6FF4C61594A068F32
SHA-512:	86FAA651559137AB84713A495DD6596DA1D4C0771E7DF447FD8A78273684E46B114D11E2E66992C68FD6538BF5FA55CB070D6A0462A245A9DDB96130297FBE90
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378476536853524","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":914,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":70,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"li

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\71a9bbd9-f53f-463a-9f2e-bfa033e25f03.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13102
Entropy (8bit):	5.273042047035414
Encrypted:	false
SSDEEP:	384:st/PGKSuDslAGMfhQdPbGGQx6WQQlaTYs:slOxuJGMf6bGVxMiaTYs
MD5:	144096682F95055C1432843A44274A3A
SHA1:	EA79E31B1333B32B1D615212DA4ADF34DAAD6A81
SHA-256:	D5A1A7298E33A82D4C9F299E30D7E0CD9015B151B1ED00D4D13E89A3E82066D9
SHA-512:	DB141A18C3B1D7C245AAFB03C3F6F96D4248CC108DAB8DA4008DF62659C977BACB5515972637E38A74DE872124945CB9FF8C5E539ED70216CFDBA23DBF922F62
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378476536853524","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\83a230ef-8915-45ae-b83d-c00b0a47e678.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40504
Entropy (8bit):	5.561519426028055
Encrypted:	false
SSDEEP:	768:G4N1tg7pLGLPE6WPKof7x8F1+UoAYDCx9Tuqh0VfUC9xbog/OVB+hquoGrw5DBfD:G4N1tscPE6WPKof7xu1jas+h3oD5NfeQ
MD5:	6E2600D86A47EC87B5F3939F7B341DC0
SHA1:	920365A9EC9C357284429F09A1A0CD1BEF98BA8B
SHA-256:	39107B620C02B443CAB75D27F2C17DEBFC98EFB2960FF880533779DDE7819AC8
SHA-512:	8953A28A805EE35C1942D5A638B56C2DCDA4CDA447EE2733213B0D993779994B30663A2CFD986FCA1FE663DBAAA733B73665701636CFE4F0C53017567A456825
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378476536169716","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378476536169716","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	3.5394429593752084
Encrypted:	false
SSDEEP:	3:iWstvhYNrkUn:iptAd
MD5:	F27314DD366903BBC6141EAE524B0FDE
SHA1:	4714D4A11C53CF4258C3A0246B98E5F5A01FBC12
SHA-256:	68C7AD234755B9EDB06832A084D092660970C89A7305E0C47D327B6AC50DD898
SHA-512:	07A0D529D9458DE5E46385F2A9D77E0987567BA908B53DDB1F83D40D99A72E6B2E3586B9F79C2264A83422C4E7FC6559CAC029A6F969F793F7407212BB3ECD51
Malicious:	false
Preview:	...m.................DB_VERSION.1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	309
Entropy (8bit):	5.242968434029331
Encrypted:	false
SSDEEP:	6:79BkB1923oH+Tcwtp3hBtB2KLlper3cM+q2P923oH+Tcwtp3hBWsIFUv:7zNYebp3dFLTejcM+v4Yebp3eFUv
MD5:	8365FC0827B449B6AB0C6718C904BA88
SHA1:	7D371A5170B0DC95F91150679D177D24DBCAEC5E
SHA-256:	A4F07360801A979B69C0D470EC05CF2C1CE9DC38F48638258CDC16A56DD67DC5
SHA-512:	9BE608B1D712C8C72CEAA7E6AB5F48CEBA2094C97579974D4831BB2C0471C06C659D6059897B126E47CBBA39BB6691B05D6137C1F936228F8B29FBFBD0BCF1B5
Malicious:	false
Preview:	2024/12/12-06:29:02.944 1f8c Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform/auto_show_data.db since it was missing..2024/12/12-06:29:03.055 1f8c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform/auto_show_data.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	modified
Size (bytes):	2163821
Entropy (8bit):	5.222880983219512
Encrypted:	false
SSDEEP:	24576:v+/PN8FPfI/MXhZSihQgCmnVAEpENU2iOYcafbE2n:v+/PN8tfx2mjF
MD5:	3CC3FB3A7EAD256E0F573185DCCF633C
SHA1:	01E3630C474AE932B6B31CC757DE35889A9887DF
SHA-256:	0163B8CE48DEE6892DF469BF2DDB528D9EE4B7E2D8033A24D6CBF6B1C8A4B3F4
SHA-512:	1C1BB8D81BA4F0D275E8C285A4A7B0AC2C33B6BB099931F4810C7B702042D4A7E542C5AF6114D05A00DCF3CD16C60DF8FDD574DF62D8892086325B84C91AF3FA
Malicious:	false
Preview:	...m.................DB_VERSION.1.l.i.................QUERY_TIMESTAMP:arbitration_priority_list4...13340900604462938.$QUERY:arbitration_priority_list4....[{"name":"arbitration_priority_list","url":"https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr=c&sig=NtPyTqjbjPElpw2mWa%2FwOk1no4JFJEK8%2BwO4xQdDJO4%3D&st=2021-01-01T00%3A00%3A00Z&se=2023-12-30T00%3A00%3A00Z&sp=r&assetgroup=ArbitrationService","version":{"major":4,"minor":0,"patch":5},"hash":"N0MkrPHaUyfTgQSPaiVpHemLMcVgqoPh/xUYLZyXayg=","size":11749}]...................'ASSET_VERSION:arbitration_priority_list.4.0.5..ASSET:arbitration_priority_list.[{. "configVersion": 32,. "PrivilegedExperiences": [. "ShorelinePrivilegedExperienceID",. "SHOPPING_AUTO_SHOW_COUPONS_CHECKOUT",. "SHOPPING_AUTO_SHOW_LOWER_PRICE_FOUND",. "SHOPPING_AUTO_SHOW_BING_SEARCH",. "SHOPPING_AUTO_SHOW_REBATES",. "SHOPPING_AUTO_SHOW_REBATES_CONFIRMATION",. "SHOPPING_AUTO_SHOW_REBATES_DEACTI

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.065307773038737
Encrypted:	false
SSDEEP:	6:79rq2P923oH+Tcwt9Eh1tIFUt8O9bXZmw+Oe9hkwO923oH+Tcwt9Eh15LJ:7Nv4Yeb9Eh16FUt8ONX/+Oe9h5LYeb9O
MD5:	E23C394F889B16953D835CFC04D4520E
SHA1:	25EA30FACF768056A42521545F20D4736A510983
SHA-256:	098E6158976CC69529C40C0AD5934B46A138AC71E4B42277543426FF13D3FBE2
SHA-512:	F25300DC7DC292F1496117650B8A8983B3BFC558DEBF211BA9F93EAA06F934D5BC9226CA1E4042B58A2E517EB218811AB9F0D801709E0D8152DAAC7757BE6CC0
Malicious:	false
Preview:	2024/12/12-06:29:02.452 2004 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2024/12/12-06:29:02.459 2004 Recovering log #3.2024/12/12-06:29:03.019 2004 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.065307773038737
Encrypted:	false
SSDEEP:	6:79rq2P923oH+Tcwt9Eh1tIFUt8O9bXZmw+Oe9hkwO923oH+Tcwt9Eh15LJ:7Nv4Yeb9Eh16FUt8ONX/+Oe9h5LYeb9O
MD5:	E23C394F889B16953D835CFC04D4520E
SHA1:	25EA30FACF768056A42521545F20D4736A510983
SHA-256:	098E6158976CC69529C40C0AD5934B46A138AC71E4B42277543426FF13D3FBE2
SHA-512:	F25300DC7DC292F1496117650B8A8983B3BFC558DEBF211BA9F93EAA06F934D5BC9226CA1E4042B58A2E517EB218811AB9F0D801709E0D8152DAAC7757BE6CC0
Malicious:	false
Preview:	2024/12/12-06:29:02.452 2004 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2024/12/12-06:29:02.459 2004 Recovering log #3.2024/12/12-06:29:03.019 2004 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DIPS

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.46490194174001737
Encrypted:	false
SSDEEP:	24:TLi5YFQq3qh7z3WMYziciNW9WkZ96UwOfBr:TouQq3qh7z3bY2LNW9WMcUvBr
MD5:	ED21C082B72CBD8E7EF61C3CF883B398
SHA1:	6E0BAA08FE9BA7762D86DA93F0628F28EB751093
SHA-256:	F247942AD9C3E5DE2F728BEDB1DB928A093CB5C9A6EAF51F9B9CDFD3FE8B6A21
SHA-512:	E34FA723D6653346E38645C7038E7A76E4138347C5E7AF50FBF23BB8674C9833D95E05471480DB41E2BD692AE991436CEDF1636A6FE7480E332C40BCC042049D
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....8...n................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DashTrackerDatabase

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 5, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	10240
Entropy (8bit):	0.8708334089814068
Encrypted:	false
SSDEEP:	12:LBtW4mqsmvEFUU30dZV3lY7+YNbr1dj3BzA2ycFUxOUDaazMvbKGxiTUwZ79GV:LLaqEt30J2NbDjfy6UOYMvbKGxjgm
MD5:	92F9F7F28AB4823C874D79EDF2F582DE
SHA1:	2D4F1B04C314C79D76B7FF3F50056ECA517C338B
SHA-256:	6318FCD9A092D1F5B30EBD9FB6AEC30B1AEBD241DC15FE1EEED3B501571DA3C7
SHA-512:	86FEF0E05F871A166C3FAB123B0A4B95870DCCECBE20B767AF4BDFD99653184BBBFE4CE1EDF17208B7700C969B65B8166EE264287B613641E7FDD55A6C09E6D4
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...v... .. .....M....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	345
Entropy (8bit):	5.194487354905455
Encrypted:	false
SSDEEP:	6:78HW3+q2P923oH+TcwtnG2tMsIFUt8O84WZmw+O84SVkwO923oH+TcwtnG2tMsLJ:77+v4Yebn9GFUt8OBW/+OBSV5LYebn9b
MD5:	F8065EB1ACC28339E8C3AE91EC0EADD8
SHA1:	B8570495F599C93B2B3109EFA3279DCE24064461
SHA-256:	C463151EFAED052F1457DE600055D59CCA1E8A29DE563ADA6168855120700244
SHA-512:	D7C1C9EA9F86131DAAF0C6F493FCEC2C512C921309E2743B7EF0CF8FF0084A231E06871E879E2D9E3129930988FF5D98207CB78D8793E9F801F7E76FFEAE671A
Malicious:	false
Preview:	2024/12/12-06:28:56.383 a2c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2024/12/12-06:28:56.384 a2c Recovering log #3.2024/12/12-06:28:56.384 a2c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	345
Entropy (8bit):	5.194487354905455
Encrypted:	false
SSDEEP:	6:78HW3+q2P923oH+TcwtnG2tMsIFUt8O84WZmw+O84SVkwO923oH+TcwtnG2tMsLJ:77+v4Yebn9GFUt8OBW/+OBSV5LYebn9b
MD5:	F8065EB1ACC28339E8C3AE91EC0EADD8
SHA1:	B8570495F599C93B2B3109EFA3279DCE24064461
SHA-256:	C463151EFAED052F1457DE600055D59CCA1E8A29DE563ADA6168855120700244
SHA-512:	D7C1C9EA9F86131DAAF0C6F493FCEC2C512C921309E2743B7EF0CF8FF0084A231E06871E879E2D9E3129930988FF5D98207CB78D8793E9F801F7E76FFEAE671A
Malicious:	false
Preview:	2024/12/12-06:28:56.383 a2c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2024/12/12-06:28:56.384 a2c Recovering log #3.2024/12/12-06:28:56.384 a2c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6135896378822707
Encrypted:	false
SSDEEP:	24:TLapR+DDNzWjJ0npnyXKUO8+jzolyrptolyVmL:TO8D4jJ/6Up+3ol0olz
MD5:	9E4B7D0A90E201E9FA4E7E76037480DA
SHA1:	3F058A1D8555A3FB6CA180CF828750E825DF9B78
SHA-256:	B5551DECEA8986F1A7A263F521705CCA0F9BCEC240F0F3D25CD657F1CB287CF9
SHA-512:	4C8929AC76EEB04C402697FEAF6AC06086CD89F20920A813DBD77D9C6F88A827C33C01E366A0B2B289AE9FAFCAE39606CE26B7B4A378887F3C16E5D90F1BA3D3
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...%.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	375520
Entropy (8bit):	5.3541692875545674
Encrypted:	false
SSDEEP:	6144:nA/imBpx6WdPSxKWcHu5MURacq49QxxPnyEndBuHltBfdK5WNbsVEziP/CfXtLPz:nFdMyq49tEndBuHltBfdK5WNbsVEziPU
MD5:	FA2F998244CCC429AEE930E11B984A28
SHA1:	F52961D9995F9EFAAFEA8144E60DE3495E8C7BCE
SHA-256:	8F24A4DA5D794CD38749CBC9C73CB9177AA73F9E0262B2A6C49FE8C4FDE037E7
SHA-512:	D17CDE191D0CAA6BACF22F91D2DD47AD076B6180B5D1353CA3CFADE128EC8AE2BC5E31FE58401D0C91DB772A0CD3FD7AB9662F8909618D6E941A084234CA37C9
Malicious:	false
Preview:	...m.................DB_VERSION.1....q...............&QUERY_TIMESTAMP:domains_config_gz2...13378476544409895..QUERY:domains_config_gz2....[{"name":"domains_config_gz","url":"https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtractionDomainsConfig","version":{"major":2,"minor":8,"patch":76},"hash":"78Xsq/1H+MXv88uuTT1Rx79Nu2ryKVXh2J6ZzLZd38w=","size":374872}]..*.`~...............ASSET_VERSION:domains_config_gz.2.8.76..ASSET:domains_config_gz...{"config": {"token_limit": 1600, "page_cutoff": 4320, "default_locale_map": {"bg": "bg-bg", "bs": "bs-ba", "el": "el-gr", "en": "en-us", "es": "es-mx", "et": "et-ee", "cs": "cs-cz", "da": "da-dk", "de": "de-de", "fa": "fa-ir", "fi": "fi-fi", "fr": "fr-fr", "he": "he-il", "hr": "hr-hr", "hu": "hu-hu", "id": "id-id", "is": "is-is", "it": "it-it", "ja": "ja-jp", "ko": "ko-kr", "lv": "lv-lv", "lt": "lt-lt", "mk": "mk-mk", "nl": "nl-nl", "nb": "nb-no", "no": "no-no", "pl": "pl-pl", "pt": "pt-pt", "ro": "

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	311
Entropy (8bit):	5.148817994730727
Encrypted:	false
SSDEEP:	6:79iWs1923oH+Tcwtk2WwnvB2KLlp9MX+q2P923oH+Tcwtk2WwnvIFUv:7UsYebkxwnvFLTaX+v4YebkxwnQFUv
MD5:	E6C49034CF771ADC1E4D49F40A6F5D87
SHA1:	098797F7F41AD1D25B4DFA48913D0770891CC4BE
SHA-256:	7497C14D1EE85820F4D81858BA1809CD5B2B3CED342AAD37E4F5A37DAA5B81E3
SHA-512:	60C92E7BE95CC228C58942EC86E2EFDC27562CD7189F50D262354431A0899CA39766DCA8445B56DB9845F57AB6ECC05C5D7C037B154449DDC124AB6C17AE4C87
Malicious:	false
Preview:	2024/12/12-06:29:02.483 210c Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db since it was missing..2024/12/12-06:29:02.555 210c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\domains_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	358859
Entropy (8bit):	5.324604013711076
Encrypted:	false
SSDEEP:	6144:CgimBVvUrsc6rRA81b/18jyJNjfvrfM6RW:C1gAg1zfvu
MD5:	C4947B24FBCCDE1E8E8EAB33918E103A
SHA1:	964048F07D7C671C547323AC0B1D6FA74B12EE46
SHA-256:	4A335015AD73B24649983F7037CBDA9A4FE3DB21AFAF4A580F9012060225593B
SHA-512:	74140ABEA398A567169BE5615D3EE3748CC06D4F59812FF9F8E23ED32C041A301AADEE6625CE02BCAF7F345D5DB46FF5E3D427D43A94C2C058003D26DDB24BC4
Malicious:	false
Preview:	{"aee_config":{"ar":{"price_regex":{"ae":"(((ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)))","dz":"(((dzd\|da\|\\x{062F}\\x{062C})\\s\\d{1,3})\|(\\d{1,3}\\s(dzd\|da\|\\x{062F}\\x{062C})))","eg":"(((e\\x{00a3}\|egp)\\s\\d{1,3})\|(\\d{1,3}\\s(e\\x{00a3}\|egp)))","ma":"(((mad\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(mad\|dhs\|dh)))","sa":"((\\d{1,3}\\s(sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633}))\|((sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633})\\s\\d{1,3}))"},"product_terms":"((\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{0639}\\x{0631}\\x{0628}\\x{0629})\|(\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{062D}\\x{0642}\\x{064A}\\x{0628}\\x{0629})\|(\\x{0627}\\x{0634}\\x{062A}\\x{0631}\\x{064A}\\s*\\x{0627}\\x{0644}\\x{0622}\\x{0646})\|(\\x{062E}\\x{064A}\\x{0627}\\x{0631}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.1720647754412346
Encrypted:	false
SSDEEP:	6:7x+q2P923oH+Tcwt8aPrqIFUt8O8DAWZmw+O8D3VkwO923oH+Tcwt8amLJ:7x+v4YebL3FUt8OyX/+Oy3V5LYebQJ
MD5:	CCBF05C4641E9237689F46A06A6666CE
SHA1:	C4AE06E5D3E4B31A10EEA72B063E4E25E4D874C2
SHA-256:	52485F22BBD2952F6FA7137F1178F14CF1E916F1350B45935DEC4CFC3D4CA945
SHA-512:	5325F8E1F5D34CB50EDC7249A4C14A55B361ADD89AA2663F3C0BF55FE7CA87229E7656C613B666A1A0FB0FE7508FD16933DBF886B014296B8E393C8922D53A80
Malicious:	false
Preview:	2024/12/12-06:28:56.233 50c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2024/12/12-06:28:56.388 50c Recovering log #3.2024/12/12-06:28:56.388 50c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.1720647754412346
Encrypted:	false
SSDEEP:	6:7x+q2P923oH+Tcwt8aPrqIFUt8O8DAWZmw+O8D3VkwO923oH+Tcwt8amLJ:7x+v4YebL3FUt8OyX/+Oy3V5LYebQJ
MD5:	CCBF05C4641E9237689F46A06A6666CE
SHA1:	C4AE06E5D3E4B31A10EEA72B063E4E25E4D874C2
SHA-256:	52485F22BBD2952F6FA7137F1178F14CF1E916F1350B45935DEC4CFC3D4CA945
SHA-512:	5325F8E1F5D34CB50EDC7249A4C14A55B361ADD89AA2663F3C0BF55FE7CA87229E7656C613B666A1A0FB0FE7508FD16933DBF886B014296B8E393C8922D53A80
Malicious:	false
Preview:	2024/12/12-06:28:56.233 50c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2024/12/12-06:28:56.388 50c Recovering log #3.2024/12/12-06:28:56.388 50c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	325
Entropy (8bit):	5.191385929531136
Encrypted:	false
SSDEEP:	6:7pz+q2P923oH+Tcwt865IFUt8Oy6WZmw+OdVkwO923oH+Tcwt86+ULJ:7N+v4Yeb/WFUt8OyF/+OdV5LYeb/+SJ
MD5:	AA86FF67D9592B0B43563EBF3874FC39
SHA1:	97A77D586C370D850665A19868EBBC94E0E53EAC
SHA-256:	A15C35EF172222E4B6EA94836700636F9B1839493CEE4E53C1D18ED481351F28
SHA-512:	5DD2FC981489E1A8D6311410B5F58F74C9359E421E43151C36217DF9DA625B049A7853F839A8D3D4F3E89615C98D757714539BF18E6EA029138457867958BBC9
Malicious:	false
Preview:	2024/12/12-06:28:56.394 50c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2024/12/12-06:28:56.395 50c Recovering log #3.2024/12/12-06:28:56.400 50c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	325
Entropy (8bit):	5.191385929531136
Encrypted:	false
SSDEEP:	6:7pz+q2P923oH+Tcwt865IFUt8Oy6WZmw+OdVkwO923oH+Tcwt86+ULJ:7N+v4Yeb/WFUt8OyF/+OdV5LYeb/+SJ
MD5:	AA86FF67D9592B0B43563EBF3874FC39
SHA1:	97A77D586C370D850665A19868EBBC94E0E53EAC
SHA-256:	A15C35EF172222E4B6EA94836700636F9B1839493CEE4E53C1D18ED481351F28
SHA-512:	5DD2FC981489E1A8D6311410B5F58F74C9359E421E43151C36217DF9DA625B049A7853F839A8D3D4F3E89615C98D757714539BF18E6EA029138457867958BBC9
Malicious:	false
Preview:	2024/12/12-06:28:56.394 50c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2024/12/12-06:28:56.395 50c Recovering log #3.2024/12/12-06:28:56.400 50c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1254
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	12:qWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWA:
MD5:	826B4C0003ABB7604485322423C5212A
SHA1:	6B8EF07391CD0301C58BB06E8DEDCA502D59BCB4
SHA-256:	C56783C3A6F28D9F7043D2FB31B8A956369F25E6CE6441EB7C03480334341A63
SHA-512:	0474165157921EA84062102743EE5A6AFE500F1F87DE2E87DBFE36C32CFE2636A0AE43D8946342740A843D5C2502EA4932623C609B930FE8511FE7356D4BAA9C
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.16891433589829
Encrypted:	false
SSDEEP:	6:769Iq2P923oH+Tcwt8NIFUt8O6KJZmw+O6KDkwO923oH+Tcwt8+eLJ:76Wv4YebpFUt8O60/+O605LYebqJ
MD5:	17DD03D93C60867C12E6AC2C52BEE0BE
SHA1:	B5DDD5F323256195879C583688D400E7D7C537D0
SHA-256:	BD7A23792B673450601AF33D337B18C9F726B23E39AF949B8F88B20BE82CFBC3
SHA-512:	946E8E35C3994719D65920181044333F11D4AE7A31A80EB73AEB402EE04DDE84A4FA5DD9EB36370E146982F688DD888FC11C7134441C95AD1B04EB7D4900E9A5
Malicious:	false
Preview:	2024/12/12-06:28:57.131 6c0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/12/12-06:28:57.132 6c0 Recovering log #3.2024/12/12-06:28:57.132 6c0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.16891433589829
Encrypted:	false
SSDEEP:	6:769Iq2P923oH+Tcwt8NIFUt8O6KJZmw+O6KDkwO923oH+Tcwt8+eLJ:76Wv4YebpFUt8O60/+O605LYebqJ
MD5:	17DD03D93C60867C12E6AC2C52BEE0BE
SHA1:	B5DDD5F323256195879C583688D400E7D7C537D0
SHA-256:	BD7A23792B673450601AF33D337B18C9F726B23E39AF949B8F88B20BE82CFBC3
SHA-512:	946E8E35C3994719D65920181044333F11D4AE7A31A80EB73AEB402EE04DDE84A4FA5DD9EB36370E146982F688DD888FC11C7134441C95AD1B04EB7D4900E9A5
Malicious:	false
Preview:	2024/12/12-06:28:57.131 6c0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/12/12-06:28:57.132 6c0 Recovering log #3.2024/12/12-06:28:57.132 6c0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	429
Entropy (8bit):	5.809210454117189
Encrypted:	false
SSDEEP:	6:Y8U0vEjrAWT0VAUD9lpMXO4SrqiweVHUSENjrAWT0HQQ9/LZyVMQ3xqiweVHlrSQ:Y8U5j0pqCjJA7tNj0pHx/LZ4hcdQ
MD5:	5D1D9020CCEFD76CA661902E0C229087
SHA1:	DCF2AA4A1C626EC7FFD9ABD284D29B269D78FCB6
SHA-256:	B829B0DF7E3F2391BFBA70090EB4CE2BA6A978CCD665EEBF1073849BDD4B8FB9
SHA-512:	5F6E72720E64A7AC19F191F0179992745D5136D41DCDC13C5C3C2E35A71EB227570BD47C7B376658EF670B75929ABEEBD8EF470D1E24B595A11D320EC1479E3C
Malicious:	false
Preview:	{"file_hashes":[{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","6RbL+qKART8FehO4s7U0u67iEI8/jaN+8Kg3kII+uy4=","CuN6+RcZAysZCfrzCZ8KdWDkQqyaIstSrcmsZ/c2MVs="],"block_size":4096,"path":"content.js"},{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","UL53sQ5hOhAmII/Yx6muXikzahxM+k5gEmVOh7xJ3Rw=","u6MdmVNzBUfDzMwv2LEJ6pXR8k0nnvpYRwOL8aApwP8="],"block_size":4096,"path":"content_new.js"}],"version":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Favicons

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 10, cookie 0x8, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.6598286510974014
Encrypted:	false
SSDEEP:	48:0Bmw6fU1zB2jhIfI4I63OZMeFEPS+P5B9wu7iFJjhs:0BCy2lIfIX6M5+RB9wUiFJls
MD5:	01C36A4AD37BB79B6B9D345C323C46EE
SHA1:	EC2EADCCF160EE2193CAD646EA87536732D7B2C3
SHA-256:	C0D2EA55B394EA442F89F4165D16444A71822FC3D228671CE0740F346EC81CD9
SHA-512:	51779F104BEEF9A66BCB6340830E839409BC28F36DA5FB171E7E38DEE29D392725C782EFB19F7859472F7B28531071F784EB840824A35AED4B4335796D1486AA
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g....._.c...~.2.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................s...;+...indexfavicon_bitmaps_icon_idfavico

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	0.21822857380901528
Encrypted:	false
SSDEEP:	3:MQblntFlljq7A/mhWJFuQ3yy7IOWUBCl/dweytllrE9SFcTp4AGbNCV9RUIC:MQbG75fOnm/d0Xi99pEYc
MD5:	BF3762CF3247D32C6EE6EDD4DB87F460
SHA1:	A323EEE5691F0A311C8643A3D5A8852A2BAA34D7
SHA-256:	9F034AA9F01D6DEE2572A09DDC650BD720857A2DA149B2F3F02FF84087FB75F5
SHA-512:	B2D449C038C19D6EB61230F1C24CBB5B69358F41FF28E9DF8A552678528E358DC2A53D3885DBDC684F41D5D2145123CFEE60B8E47E42F68019855938E0FA064E
Malicious:	false
Preview:	..............o....&....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps Icons

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 12, cookie 0x3, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	3.6477925491352594
Encrypted:	false
SSDEEP:	384:aj9P04cAjl+QkQerV773pL5P/KbtPCgam6IpRKToaADhf:adGKl+e2V7zP/WF5RKc39
MD5:	BF007275CCD9ED66179BE3FBA0D0A297
SHA1:	B3F7BF26305020D4BB3583EEA38B3CB72BEBC34E
SHA-256:	69EA5D380800FC55AB84C14630826AC96B7223C2A2D9439127B53F604D85D246
SHA-512:	680083219F918A3D8FD5CCAB5B33C8602F7F0DB6553DAB46D95042CE95C2A3D7E66FB28DF2982AEF1B60D41400CBD9FF6CFCCC48CAB362AA376539A8863EDD6B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...:.8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	405
Entropy (8bit):	5.237828128684547
Encrypted:	false
SSDEEP:	12:7/bv4Yeb8rcHEZrELFUt8O/x/+O/r5LYeb8rcHEZrEZSJ:7j4Yeb8nZrExg8Od1LYeb8nZrEZe
MD5:	DA6F270B48CE0866CE4A3EEF49E6226C
SHA1:	72E924AE1943C120A722855A0DAEEAE9E333BD56
SHA-256:	99D256645FBBFAF124603ECBB2830B3AFA1C819A9D8B57491B5FD23EFE54B562
SHA-512:	911D943C0539DB2E0FF2E9C45CC6016D2D67066A091B45470FA7EF292C4DDA6010D3D4D8C1BD2C00B872B14849FDDD816369B77F17E506B38395A32DECB3D58F
Malicious:	false
Preview:	2024/12/12-06:29:00.563 6c0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/12/12-06:29:00.564 6c0 Recovering log #3.2024/12/12-06:29:00.564 6c0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	405
Entropy (8bit):	5.237828128684547
Encrypted:	false
SSDEEP:	12:7/bv4Yeb8rcHEZrELFUt8O/x/+O/r5LYeb8rcHEZrEZSJ:7j4Yeb8nZrExg8Od1LYeb8nZrEZe
MD5:	DA6F270B48CE0866CE4A3EEF49E6226C
SHA1:	72E924AE1943C120A722855A0DAEEAE9E333BD56
SHA-256:	99D256645FBBFAF124603ECBB2830B3AFA1C819A9D8B57491B5FD23EFE54B562
SHA-512:	911D943C0539DB2E0FF2E9C45CC6016D2D67066A091B45470FA7EF292C4DDA6010D3D4D8C1BD2C00B872B14849FDDD816369B77F17E506B38395A32DECB3D58F
Malicious:	false
Preview:	2024/12/12-06:29:00.563 6c0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/12/12-06:29:00.564 6c0 Recovering log #3.2024/12/12-06:29:00.564 6c0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.147058189843985
Encrypted:	false
SSDEEP:	6:7TcM+q2P923oH+Tcwt8a2jMGIFUt8OeNJZmw+OHcMVkwO923oH+Tcwt8a2jMmLJ:7wM+v4Yeb8EFUt8OeX/+O8MV5LYeb8bJ
MD5:	C40582EA1F3B88A82F8280BB6EF8D189
SHA1:	75280F6C40A4E0E17DD5C3E1C31B200DFF9EBF2F
SHA-256:	F2DF0EF60BD2905EAE8DEB7A9F6740A7CFDD903AE3A5B1EF63CD4DAAA435E924
SHA-512:	319D7C463517A1F0B47C734F34D4D2E006B28A7C84D6275B25AFD87B57D454CFD2C65D1B6B80C59AF6146ADD294FE67B28C23B3AEAC6ACEA23F97994FD2ED2D5
Malicious:	false
Preview:	2024/12/12-06:28:56.652 1c6c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/12/12-06:28:56.653 1c6c Recovering log #3.2024/12/12-06:28:56.656 1c6c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.147058189843985
Encrypted:	false
SSDEEP:	6:7TcM+q2P923oH+Tcwt8a2jMGIFUt8OeNJZmw+OHcMVkwO923oH+Tcwt8a2jMmLJ:7wM+v4Yeb8EFUt8OeX/+O8MV5LYeb8bJ
MD5:	C40582EA1F3B88A82F8280BB6EF8D189
SHA1:	75280F6C40A4E0E17DD5C3E1C31B200DFF9EBF2F
SHA-256:	F2DF0EF60BD2905EAE8DEB7A9F6740A7CFDD903AE3A5B1EF63CD4DAAA435E924
SHA-512:	319D7C463517A1F0B47C734F34D4D2E006B28A7C84D6275B25AFD87B57D454CFD2C65D1B6B80C59AF6146ADD294FE67B28C23B3AEAC6ACEA23F97994FD2ED2D5
Malicious:	false
Preview:	2024/12/12-06:28:56.652 1c6c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/12/12-06:28:56.653 1c6c Recovering log #3.2024/12/12-06:28:56.656 1c6c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\36f63887-5ed7-4ec7-83b2-cf24935e0565.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1646
Entropy (8bit):	5.343327919012151
Encrypted:	false
SSDEEP:	48:YcgCzsntsFKuRshfcKsrleeBkBKYhbxo+:F8v/wkeBkBvhVo+
MD5:	12370D70ED4017D962F72DF5190973BC
SHA1:	52E9C96DD97535D9164049EF86C1275D473C659A
SHA-256:	756CB5313282398B805502C2D211CE8396A308E829589EE934684B45EF64BE1A
SHA-512:	6C16A85749B96DDF9A7FF627C9AB00DB0795131BA2A1BF173B2213DD1A07FB2CF438BCE790653321305E279899D79FD807797E674FA2621423BD35C21D02B490
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381068540602156","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381068543164485","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABQAAABodHRwczovL2RvY3VzaWduLmNvbQ==",false],"server":"https://fonts.googleapis.com"},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381068543489482","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"133785

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.7606461539601717
Encrypted:	false
SSDEEP:	48:TaIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBk9Y:uIEumQv8m1ccnvS6R1
MD5:	655801C5DD3C112682A18E4F1BE7A4B5
SHA1:	96638BAA6D6879491DFDBDACF9D1368BE4B42C85
SHA-256:	24D8F80F79493E980F6B491B9445E6426DD333D7A1EE8C3580FC62EC1919D8E7
SHA-512:	5EE16505DD0D59F17CD52B9DAAC1A3772AACF33E8BB395816BF1E75010F06F97D7CAC3BBFE2A9806CF15C952E22FD02B9C3DE4A16E95E9B88AD91BDA2EAAEC29
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...D.........7............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF3b4da.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF3c286.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\a4510f0b-929f-475e-8e0e-678b572b259e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\a5534102-99c8-490d-97f1-0a2588e795cc.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1646
Entropy (8bit):	5.343327919012151
Encrypted:	false
SSDEEP:	48:YcgCzsntsFKuRshfcKsrleeBkBKYhbxo+:F8v/wkeBkBvhVo+
MD5:	12370D70ED4017D962F72DF5190973BC
SHA1:	52E9C96DD97535D9164049EF86C1275D473C659A
SHA-256:	756CB5313282398B805502C2D211CE8396A308E829589EE934684B45EF64BE1A
SHA-512:	6C16A85749B96DDF9A7FF627C9AB00DB0795131BA2A1BF173B2213DD1A07FB2CF438BCE790653321305E279899D79FD807797E674FA2621423BD35C21D02B490
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381068540602156","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381068543164485","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABQAAABodHRwczovL2RvY3VzaWduLmNvbQ==",false],"server":"https://fonts.googleapis.com"},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381068543489482","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"133785

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\c58c7a5d-cf7b-4df7-97c9-414343f61f87.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\d5212d4e-5411-4f26-8e6b-9056a03ed6de.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Nurturing\campaign_history

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8307038620100359
Encrypted:	false
SSDEEP:	24:TLSOUOq0afDdWec9sJlAz7Nm2z8ZI7J5fc:T+OUzDbg3eAzA2ztc
MD5:	B18967139991D9CA13DF7E493540A358
SHA1:	97411C14A8503C11248BE7404C9A79BA5146D40C
SHA-256:	CCC36F21951B4CB357C57DA0CCA1FFF3B4C7027230C10FD8BCB72C0AFF66141F
SHA-512:	473AE1B215B181785EA65F87E34155D5976C7AD1FA487B025E1C8711BFD127E99066990105CDA8D6F4804459118361217455AB1644803D22E6ECB164EEEFD630
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9570
Entropy (8bit):	5.107146530037506
Encrypted:	false
SSDEEP:	192:st/kd0sl4TGMsZihUkj3x88bV+FpUQA66W6aFIMYrP7YJ:st/7slAGMfhZbGGQx6W6aTYs
MD5:	1506179D0A6A979594788E379B0D1263
SHA1:	33A8FC6441A87ADDD86F621D9660BDAD8E2B9B78
SHA-256:	B82FF86705B2996F60E655BB7CC872D62B0B98BFEE8E43D6FF4C61594A068F32
SHA-512:	86FAA651559137AB84713A495DD6596DA1D4C0771E7DF447FD8A78273684E46B114D11E2E66992C68FD6538BF5FA55CB070D6A0462A245A9DDB96130297FBE90
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378476536853524","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":914,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":70,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"li

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF3fa6e.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9570
Entropy (8bit):	5.107146530037506
Encrypted:	false
SSDEEP:	192:st/kd0sl4TGMsZihUkj3x88bV+FpUQA66W6aFIMYrP7YJ:st/7slAGMfhZbGGQx6W6aTYs
MD5:	1506179D0A6A979594788E379B0D1263
SHA1:	33A8FC6441A87ADDD86F621D9660BDAD8E2B9B78
SHA-256:	B82FF86705B2996F60E655BB7CC872D62B0B98BFEE8E43D6FF4C61594A068F32
SHA-512:	86FAA651559137AB84713A495DD6596DA1D4C0771E7DF447FD8A78273684E46B114D11E2E66992C68FD6538BF5FA55CB070D6A0462A245A9DDB96130297FBE90
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378476536853524","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":914,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":70,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"li

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF43891.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9570
Entropy (8bit):	5.107146530037506
Encrypted:	false
SSDEEP:	192:st/kd0sl4TGMsZihUkj3x88bV+FpUQA66W6aFIMYrP7YJ:st/7slAGMfhZbGGQx6W6aTYs
MD5:	1506179D0A6A979594788E379B0D1263
SHA1:	33A8FC6441A87ADDD86F621D9660BDAD8E2B9B78
SHA-256:	B82FF86705B2996F60E655BB7CC872D62B0B98BFEE8E43D6FF4C61594A068F32
SHA-512:	86FAA651559137AB84713A495DD6596DA1D4C0771E7DF447FD8A78273684E46B114D11E2E66992C68FD6538BF5FA55CB070D6A0462A245A9DDB96130297FBE90
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378476536853524","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":914,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":70,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"li

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF4adc1.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9570
Entropy (8bit):	5.107146530037506
Encrypted:	false
SSDEEP:	192:st/kd0sl4TGMsZihUkj3x88bV+FpUQA66W6aFIMYrP7YJ:st/7slAGMfhZbGGQx6W6aTYs
MD5:	1506179D0A6A979594788E379B0D1263
SHA1:	33A8FC6441A87ADDD86F621D9660BDAD8E2B9B78
SHA-256:	B82FF86705B2996F60E655BB7CC872D62B0B98BFEE8E43D6FF4C61594A068F32
SHA-512:	86FAA651559137AB84713A495DD6596DA1D4C0771E7DF447FD8A78273684E46B114D11E2E66992C68FD6538BF5FA55CB070D6A0462A245A9DDB96130297FBE90
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378476536853524","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":914,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":70,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"li

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	28366
Entropy (8bit):	5.5577338538104835
Encrypted:	false
SSDEEP:	768:GN31jg7pLGLPT6WPKofix8F1+UoAYDCx9Tuqh0VfUC9xbog/OVHqurGrwXLepNtk:GN31jscPT6WPKofixu1jae3rD7Qtk
MD5:	100378632E6C5096FDFFB81F16869E6F
SHA1:	0F4B6D457AD17A2BFBADE851FA139D7B973A82B9
SHA-256:	0ED4DBD6E0DA8727182D7E0443AC5FE4D0C03AA182E11A4F680C3E4F6CBA47C0
SHA-512:	B6F731F7AB3734FB3AE09989EBD6F1202BAD3E498AD2CD35705E32E2D74058A95095D0B7EA483A4DD0B457254926FAD0483FE1EC7B067D8070811B84504BECC9
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378476536169716","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378476536169716","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF3efef.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	28366
Entropy (8bit):	5.5577338538104835
Encrypted:	false
SSDEEP:	768:GN31jg7pLGLPT6WPKofix8F1+UoAYDCx9Tuqh0VfUC9xbog/OVHqurGrwXLepNtk:GN31jscPT6WPKofixu1jae3rD7Qtk
MD5:	100378632E6C5096FDFFB81F16869E6F
SHA1:	0F4B6D457AD17A2BFBADE851FA139D7B973A82B9
SHA-256:	0ED4DBD6E0DA8727182D7E0443AC5FE4D0C03AA182E11A4F680C3E4F6CBA47C0
SHA-512:	B6F731F7AB3734FB3AE09989EBD6F1202BAD3E498AD2CD35705E32E2D74058A95095D0B7EA483A4DD0B457254926FAD0483FE1EC7B067D8070811B84504BECC9
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378476536169716","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378476536169716","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	323
Entropy (8bit):	4.175823954157457
Encrypted:	false
SSDEEP:	6:S85aEFljljljljlfplaDajF0DEiBLFUA5EEE:S+a8ljljljljlfpN5GPt
MD5:	F6F28F232ADAF9806D9DD43396CB0357
SHA1:	962ED4AE3B68B9815F76B60D0D2C74B08C06FDA1
SHA-256:	8A5C01F54FF76180D908BCAAB810C305AF36A6ACCC441A359473B9E05DB052A3
SHA-512:	E82DFDD2B68F698D854D40FD395C065F4EFAB6C7A284266BEE93D2BCBA58B0B77973EA43B05B0028CA02FFED0E8AE63373CCFB2C27AA195EF34747E34127B04E
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f.................&f.................&f.................&f...............'...g................next-map-id.1.Hnamespace-83c7b31e_55ae_4ac2_849c_eba319883940-https://www.docusign.com/.0V.e................V.e................V.e................V.e................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.176609426731666
Encrypted:	false
SSDEEP:	6:7+GocM+q2P923oH+TcwtrQMxIFUt8O71JZmw+OwbocMVkwO923oH+TcwtrQMFLJ:7zM+v4YebCFUt8O7v/+O0MV5LYebtJ
MD5:	E85F9B57151818010FA20AE9B3E228E6
SHA1:	908C58A7ED14D3FE36EF48EC6A8E4104CCD91DE9
SHA-256:	33A7037A300AF5DA302AE5266B121D0DD03BD3F418C31B6CE24D9937A94F2C0B
SHA-512:	61E365C65DD98FF90B4470742282B84A2CE612995832C4691333AFD74B8E70AA739B88C0DE9691F65283C1C811B9F836C683EF28F2BD43E72CD0D0194606A159
Malicious:	false
Preview:	2024/12/12-06:28:57.184 1c6c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/12/12-06:28:57.189 1c6c Recovering log #3.2024/12/12-06:28:57.194 1c6c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.176609426731666
Encrypted:	false
SSDEEP:	6:7+GocM+q2P923oH+TcwtrQMxIFUt8O71JZmw+OwbocMVkwO923oH+TcwtrQMFLJ:7zM+v4YebCFUt8O7v/+O0MV5LYebtJ
MD5:	E85F9B57151818010FA20AE9B3E228E6
SHA1:	908C58A7ED14D3FE36EF48EC6A8E4104CCD91DE9
SHA-256:	33A7037A300AF5DA302AE5266B121D0DD03BD3F418C31B6CE24D9937A94F2C0B
SHA-512:	61E365C65DD98FF90B4470742282B84A2CE612995832C4691333AFD74B8E70AA739B88C0DE9691F65283C1C811B9F836C683EF28F2BD43E72CD0D0194606A159
Malicious:	false
Preview:	2024/12/12-06:28:57.184 1c6c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/12/12-06:28:57.189 1c6c Recovering log #3.2024/12/12-06:28:57.194 1c6c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13378476538672741

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1415
Entropy (8bit):	3.8700191609799184
Encrypted:	false
SSDEEP:	24:3CulDetYxXye1/UTjQOhOA7fTc5A07xz2lnfhjQOh:3CucY5hU/jhnL0Z2ln9jh
MD5:	3EC16D04DAA6014190101FB7672B02FC
SHA1:	45B3B578DABC3BC1C2F81D13165D3AEE30026336
SHA-256:	D3E16F02FDB9BD1AB6E47A6062A03EE4ADD2E4CB93DC43D2535A8C79B5921426
SHA-512:	5906A22F74A1E387A77AFD09D107028785DD8D895D990C499FF0B7A0AED93AD9E96079C56C48393908486FC38E909A4B937834D2405696D7ACD31F55002247C1
Malicious:	false
Preview:	SNSS.........Y..............Y......."..Y..............Y..........Y..........Y..........Y.....!....Y..................................Y...Y.1..,.....Y.$...83c7b31e_55ae_4ac2_849c_eba319883940.....Y..........Y......$%..........Y......Y..........................Y.....................5..0.....Y.&...{98952893-68FF-4A5D-A164-705C709ED3DB}.......Y..........Y.............................Y..............Y.....U...https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf...............!...............................................................@...............H...............@.........L..)....L..)......................................................................................U...h.t.t.p.s.:././.w.w.w...d.o.c.u.s.i.g.n...c.o.m./.s.i.t.e.s./.d.e.f.a.u.l.t./.f.i.l.e.s./.S.i.g.n.a.t.u.r.e._.A.p.p.l.i.a.n.c.e._.C.l.i.e.n.t._.G.u.i.d.e._.8...0...p.d.f.......................................8.......0.......8............................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Shortcuts

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.44194574462308833
Encrypted:	false
SSDEEP:	12:TLiNCcUMskMVcIWGhWxBzEXx7AAQlvsdFxOUwa5qgufTJpbZ75fOS:TLisVMnYPhIY5Qlvsd6UwccNp15fB
MD5:	B35F740AA7FFEA282E525838EABFE0A6
SHA1:	A67822C17670CCE0BA72D3E9C8DA0CE755A3421A
SHA-256:	5D599596D116802BAD422497CF68BE59EEB7A9135E3ED1C6BEACC48F73827161
SHA-512:	05C0D33516B2C1AB6928FB34957AD3E03CB0A8B7EEC0FD627DD263589655A16DEA79100B6CC29095C3660C95FD2AFB2E4DD023F0597BD586DD664769CABB67F8
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g....."....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	352
Entropy (8bit):	5.102460797372963
Encrypted:	false
SSDEEP:	6:7cq2P923oH+Tcwt7Uh2ghZIFUt8OSUuXZmw+OckwO923oH+Tcwt7Uh2gnLJ:7cv4YebIhHh2FUt8OnuX/+Oc5LYebIh9
MD5:	A15660612AEAD2580A5D33FEA346E07D
SHA1:	86CFCCB95D410DA41AA6F424BEA45D7E84069E58
SHA-256:	737F5002BAD25CF7D505E5C34C54D1E088833655D843BC044C99BCF46C3737DB
SHA-512:	12FA0005C8233334DA1E0999641CBFD33A2D0088A9B818BFF4964CF8627FDEE97556C6662ABEE816A9D8FEACA2A60DC1A79E6AA04672F5BC8DAA27EFF3A2BD66
Malicious:	false
Preview:	2024/12/12-06:28:56.228 10e0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/12/12-06:28:56.229 10e0 Recovering log #3.2024/12/12-06:28:56.230 10e0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	352
Entropy (8bit):	5.102460797372963
Encrypted:	false
SSDEEP:	6:7cq2P923oH+Tcwt7Uh2ghZIFUt8OSUuXZmw+OckwO923oH+Tcwt7Uh2gnLJ:7cv4YebIhHh2FUt8OnuX/+Oc5LYebIh9
MD5:	A15660612AEAD2580A5D33FEA346E07D
SHA1:	86CFCCB95D410DA41AA6F424BEA45D7E84069E58
SHA-256:	737F5002BAD25CF7D505E5C34C54D1E088833655D843BC044C99BCF46C3737DB
SHA-512:	12FA0005C8233334DA1E0999641CBFD33A2D0088A9B818BFF4964CF8627FDEE97556C6662ABEE816A9D8FEACA2A60DC1A79E6AA04672F5BC8DAA27EFF3A2BD66
Malicious:	false
Preview:	2024/12/12-06:28:56.228 10e0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/12/12-06:28:56.229 10e0 Recovering log #3.2024/12/12-06:28:56.230 10e0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	434
Entropy (8bit):	5.256455802960244
Encrypted:	false
SSDEEP:	12:7YjL+v4YebvqBQFUt8OCm/+OhLV5LYebvqBvJ:714YebvZg8O1JLYebvk
MD5:	BBC956043AA884552D6C670D0A0D29DA
SHA1:	1474626F62F4A9B6C499D4294CDA7E023A86210C
SHA-256:	AEB57CF3B02AC66A15D1D8259FE4EE2BF98875ED3A961E7CCB6B28B66D917BB7
SHA-512:	DDF13652AE85057F1034149C0EBEEBE702209906EF6DE8DCC39CDC6A94AD0A65F6F36E7EEA1A32804BBB61BDF5F913B342D85C49381C7B3D4DCF1F1627382F2A
Malicious:	false
Preview:	2024/12/12-06:28:57.192 1c7c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/12/12-06:28:57.195 1c7c Recovering log #3.2024/12/12-06:28:57.199 1c7c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	434
Entropy (8bit):	5.256455802960244
Encrypted:	false
SSDEEP:	12:7YjL+v4YebvqBQFUt8OCm/+OhLV5LYebvqBvJ:714YebvZg8O1JLYebvk
MD5:	BBC956043AA884552D6C670D0A0D29DA
SHA1:	1474626F62F4A9B6C499D4294CDA7E023A86210C
SHA-256:	AEB57CF3B02AC66A15D1D8259FE4EE2BF98875ED3A961E7CCB6B28B66D917BB7
SHA-512:	DDF13652AE85057F1034149C0EBEEBE702209906EF6DE8DCC39CDC6A94AD0A65F6F36E7EEA1A32804BBB61BDF5F913B342D85C49381C7B3D4DCF1F1627382F2A
Malicious:	false
Preview:	2024/12/12-06:28:57.192 1c7c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/12/12-06:28:57.195 1c7c Recovering log #3.2024/12/12-06:28:57.199 1c7c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\88814a35-85a5-4f49-8251-c0cc36426450.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF3c286.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Trust Tokens

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 9, cookie 0x7, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.3886039372934488
Encrypted:	false
SSDEEP:	24:TLqEeWOT/kIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:T2EeWOT/nDtX5nDOvyKDhU1cSB
MD5:	DEA619BA33775B1BAEEC7B32110CB3BD
SHA1:	949B8246021D004B2E772742D34B2FC8863E1AAA
SHA-256:	3669D76771207A121594B439280A67E3A6B1CBAE8CE67A42C8312D33BA18854B
SHA-512:	7B9741E0339B30D73FACD4670A9898147BE62B8F063A59736AFDDC83D3F03B61349828F2AE88F682D42C177AE37E18349FD41654AEBA50DDF10CD6DC70FA5879
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...}.....$.X..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\cfbb1d95-252c-4816-9c9f-412a2475af8a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\de22aa58-25b1-433c-a5b7-fab0c2fe4b4b.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	3.4921535629071894
Encrypted:	false
SSDEEP:	3:S8ltHlS+QUl1ASEGhTFljl:S85aEFljl
MD5:	69449520FD9C139C534E2970342C6BD8
SHA1:	230FE369A09DEF748F8CC23AD70FD19ED8D1B885
SHA-256:	3F2E9648DFDB2DDB8E9D607E8802FEF05AFA447E17733DD3FD6D933E7CA49277
SHA-512:	EA34C39AEA13B281A6067DE20AD0CDA84135E70C97DB3CDD59E25E6536B19F7781E5FC0CA4A11C3618D43FC3BD3FBC120DD5C1C47821A248B8AD351F9F4E6367
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	422
Entropy (8bit):	5.225461050485989
Encrypted:	false
SSDEEP:	12:7FtlM+v4YebvqBZFUt8OFr/+OFTMV5LYebvqBaJ:7Ft4Yebvyg8OF/FCLYebvL
MD5:	449DEECC8B17C3583F263783C3934431
SHA1:	176B6F138ECC2783E8AA91563B1D4AACBCB3EA91
SHA-256:	11C1F6CBAB75CF9E57171B61E1A274D121243DFB6A8826F5FD9285F4EAA8B02C
SHA-512:	296389F2DD1B782707926A63607D03D66DC3AEF32C8A67557D5D019591AD3AB4E5E234723369CAEF16B3E5F43D70CC78B85164B961CD4B77EBE37DCDD1067F53
Malicious:	false
Preview:	2024/12/12-06:29:15.330 1c6c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/12/12-06:29:15.331 1c6c Recovering log #3.2024/12/12-06:29:15.334 1c6c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	422
Entropy (8bit):	5.225461050485989
Encrypted:	false
SSDEEP:	12:7FtlM+v4YebvqBZFUt8OFr/+OFTMV5LYebvqBaJ:7Ft4Yebvyg8OF/FCLYebvL
MD5:	449DEECC8B17C3583F263783C3934431
SHA1:	176B6F138ECC2783E8AA91563B1D4AACBCB3EA91
SHA-256:	11C1F6CBAB75CF9E57171B61E1A274D121243DFB6A8826F5FD9285F4EAA8B02C
SHA-512:	296389F2DD1B782707926A63607D03D66DC3AEF32C8A67557D5D019591AD3AB4E5E234723369CAEF16B3E5F43D70CC78B85164B961CD4B77EBE37DCDD1067F53
Malicious:	false
Preview:	2024/12/12-06:29:15.330 1c6c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/12/12-06:29:15.331 1c6c Recovering log #3.2024/12/12-06:29:15.334 1c6c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.248412591852661
Encrypted:	false
SSDEEP:	6:7mQ+q2P923oH+TcwtpIFUt8O8d/gZmw+O8d/QVkwO923oH+Tcwta/WLJ:7mVv4YebmFUt8O2/g/+O2/I5LYebaUJ
MD5:	7842B3BA1724530A9BA1F3D12154FF2A
SHA1:	0B2AF3B8D25C9390F9FDDECBE0228823D62D6CE4
SHA-256:	2B89335EB7AA4D2554B9AA776791321A9C6650FDB6DB7A7A30CBC53EC31BFA32
SHA-512:	1AD6269634CE096A95D5D83888C400F9D81F7A5AE3E6792628124D08B9DAD1AF75DB5229ECB5A40D91FFAB7AED0EF716F30C763393370558AC9BD55365650FE2
Malicious:	false
Preview:	2024/12/12-06:28:56.228 1b98 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/12/12-06:28:56.381 1b98 Recovering log #3.2024/12/12-06:28:56.381 1b98 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.248412591852661
Encrypted:	false
SSDEEP:	6:7mQ+q2P923oH+TcwtpIFUt8O8d/gZmw+O8d/QVkwO923oH+Tcwta/WLJ:7mVv4YebmFUt8O2/g/+O2/I5LYebaUJ
MD5:	7842B3BA1724530A9BA1F3D12154FF2A
SHA1:	0B2AF3B8D25C9390F9FDDECBE0228823D62D6CE4
SHA-256:	2B89335EB7AA4D2554B9AA776791321A9C6650FDB6DB7A7A30CBC53EC31BFA32
SHA-512:	1AD6269634CE096A95D5D83888C400F9D81F7A5AE3E6792628124D08B9DAD1AF75DB5229ECB5A40D91FFAB7AED0EF716F30C763393370558AC9BD55365650FE2
Malicious:	false
Preview:	2024/12/12-06:28:56.228 1b98 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/12/12-06:28:56.381 1b98 Recovering log #3.2024/12/12-06:28:56.381 1b98 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 10, database pages 91, cookie 0x36, schema 4, UTF-8, version-valid-for 10
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.265065974993384
Encrypted:	false
SSDEEP:	384:8/2qOB1nxCkMOSAELyKOMq+8yC8F/YfU5m+OlTLVum7K:Bq+n0JO9ELyKOMq+8y9/Owh
MD5:	471F132FFB924BD046E52AD50233C997
SHA1:	4B991AD252D27C11F357002101ACD497545DAC4E
SHA-256:	07D53577C5081C9AE6CB5151E5BDC3EB16B71A045BF3C56B9FF736CB1EB67C11
SHA-512:	52CE2FA3FD678FA3F1725AF13FAFDE86119D7FE60EDAA928D56E698B1E699B035C7E1CB481384E919C326CC5AD9C768620F884199733128539F9AAEBA2A54209
Malicious:	false
Preview:	SQLite format 3......@ .......[...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 10, cookie 0x7, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.41235120905181716
Encrypted:	false
SSDEEP:	48:Tnj7dojKsKmjKZKAsjZNOjAhts3N8g1j3UcB:v7doKsKuKZKlZNmu46yjx
MD5:	981F351994975A68A0DD3ECE5E889FD0
SHA1:	080D3386290A14A68FCE07709A572AF98097C52D
SHA-256:	3F0C0B2460E0AA2A94E0BF79C8944F2F4835D2701249B34A13FD200F7E5316D7
SHA-512:	C5930797C46EEC25D356BAEB6CFE37E9F462DEE2AE8866343B2C382DBAD45C1544EF720D520C4407F56874596B31EFD6822B58A9D3DAE6F85E47FF802DBAA20B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......w..g...........M...w..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3951), with CRLF line terminators
Category:	dropped
Size (bytes):	11755
Entropy (8bit):	5.190465908239046
Encrypted:	false
SSDEEP:	192:hH4vrmqRBB4W4PoiUDNaxvR5FCHFcoaSbqGEDI:hH4vrmUB6W4jR3GaSbqGEDI
MD5:	07301A857C41B5854E6F84CA00B81EA0
SHA1:	7441FC1018508FF4F3DBAA139A21634C08ED979C
SHA-256:	2343C541E095E1D5F202E8D2A0807113E69E1969AF8E15E3644C51DB0BF33FBF
SHA-512:	00ADE38E9D2F07C64648202F1D5F18A2DFB2781C0517EAEBCD567D8A77DBB7CB40A58B7C7D4EC03336A63A20D2E11DD64448F020C6FF72F06CA870AA2B4765E0
Malicious:	false
Preview:	{.. "DefaultCohort": {.. "21f3388b-c2a5-4791-8f6e-a4cad6d17f4f.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.BingHomePage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Covid.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Finance.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Jobs.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.KnowledgeCard.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Local.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NTP3PCLICK.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NotifySearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Recipe.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.SearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Sports.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Travel.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Weather.Bubble": 1,.. "2cb2db96-3bd0-403e-abe2-9269b3761041.Bubble": 1,.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\be701fc3-8bdb-4d89-86dc-79d3d4d64aee.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	28366
Entropy (8bit):	5.5577338538104835
Encrypted:	false
SSDEEP:	768:GN31jg7pLGLPT6WPKofix8F1+UoAYDCx9Tuqh0VfUC9xbog/OVHqurGrwXLepNtk:GN31jscPT6WPKofixu1jae3rD7Qtk
MD5:	100378632E6C5096FDFFB81F16869E6F
SHA1:	0F4B6D457AD17A2BFBADE851FA139D7B973A82B9
SHA-256:	0ED4DBD6E0DA8727182D7E0443AC5FE4D0C03AA182E11A4F680C3E4F6CBA47C0
SHA-512:	B6F731F7AB3734FB3AE09989EBD6F1202BAD3E498AD2CD35705E32E2D74058A95095D0B7EA483A4DD0B457254926FAD0483FE1EC7B067D8070811B84504BECC9
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378476536169716","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378476536169716","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\databases\Databases.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x4, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.3410017321959524
Encrypted:	false
SSDEEP:	12:TLiqi/nGb0EiDFIlTSFbyrKZb9YwFOqAyl+FxOUwa5qgufTJpbZ75fOSG:TLiMNiD+lZk/Fj+6UwccNp15fBG
MD5:	98643AF1CA5C0FE03CE8C687189CE56B
SHA1:	ECADBA79A364D72354C658FD6EA3D5CF938F686B
SHA-256:	4DC3BF7A36AB5DA80C0995FAF61ED0F96C4DE572F2D6FF9F120F9BC44B69E444
SHA-512:	68B69FCE8EF5AB1DDA2994BA4DB111136BD441BC3EFC0251F57DC20A3095B8420669E646E2347EAB7BAF30CACA4BCF74BD88E049378D8DE57DE72E4B8A5FF74B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....P....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\dddd04fa-f90b-4bf4-ba29-39020ef69c60.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\faa774a3-abde-4666-aef3-71e50596f652.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	12937
Entropy (8bit):	5.275489551311458
Encrypted:	false
SSDEEP:	192:st/J99QTryDigabatSuy0sl4TGMsZihQOwX+zkj3x88bV+FpUQA66W6aFIMYrP78:st/PGKSuDslAGMfhQdPbGGQx6W6aTYs
MD5:	35E379FB3B3EEBC4DEF0F503453BE0AA
SHA1:	42E5204DABB83C809FC412A78A54BEC42B1B431D
SHA-256:	538CFCB952EB9C826A610BA4EA4848C241215E58E5EDDEE61C93AC154725749A
SHA-512:	58A2525191C9FDCEF8B67F8702F3592F951402E1F0F7DB7D993C65B86DE1575450404ECDAE34C7F066E2B940CDB3AA3FE6B57464B05488F4113FE3E126C81151
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378476536853524","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.05741183479156123
Encrypted:	false
SSDEEP:	6:G30sa5n9S0sa5nlIR9XCChslotGLNl0ml/Vl/Vl/XoQXmlXn:RN5nRN5nCLpEjVl/PnvoQW1
MD5:	CB1EC03E155B3271E5A43DA3E4755584
SHA1:	5F92D9921F88F83C34DD5277C5653B7F82191766
SHA-256:	391EDE9CB81A49AD7A7472E8E8DF0B66A621506AF5B838E2B8A1573B48B85C21
SHA-512:	19C57F7638FE6B02F16D3D8745D5C70993570CF99EC9E82572E7A7ED1894BAA7F13FCCB97044A3F153F88CF25B9DFFD480CB03717A6DFB01B768E916BDAA7227
Malicious:	false
Preview:	..-......................P..V....4..}.... J......-......................P..V....4..}.... J............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	103032
Entropy (8bit):	0.8068339695862907
Encrypted:	false
SSDEEP:	48:ywXzx8I/02TlO+scbX+on9VAKAFXX+hV2VAKAFXX+n8xOqVAKAFXX+vqnUYVAKAk:jjx7/02b2dNshTNsOO5NsvlNsEA5g6T
MD5:	0350F7A34B7EFA6D6FDAF396D94E2494
SHA1:	D637FD2902DAEF043E1F3FB83F3D389A56851A09
SHA-256:	C7CB2A90CEFD15CD14EA1525C753FD8B680BE390564C714209D2C4A3F1B55837
SHA-512:	76B721BEE1038D96262AD8B93DDFAAB3068AEA51A0C57A5A153EF5469CD16317241479E948D5979B944A798AC19D5AAF702CA8034A4FE4666EE57DB6CDB92C50
Malicious:	false
Preview:	7....-...........4..}...8.?L.0.........4..}........C.SQLite format 3......@ ..........................................................................j.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	628
Entropy (8bit):	3.2410822492357916
Encrypted:	false
SSDEEP:	12:Wlc8NOuuuuuuuuuuuuuuuuuuuuuuuOp8M:iDA
MD5:	637E4C29496D9E27135EDF4FD46534DE
SHA1:	0DAB931773C3F3921F2359C6E90337AC00695B20
SHA-256:	7D162E18D6535CEBEC2E0592EA98BA99E8A0C28363FD5ACA4EB7DAF41F19F9B9
SHA-512:	9EE943205508B5C66561C93160BD5CA5256AF740CD94325504ACB22535EFA61C3EBC296262ED9C8B8B8ABE56978571607D432783CEF89B662460CF97BF0A9909
Malicious:	false
Preview:	A..r.................20_1_1...1.,U.................20_1_1...1..}0................39_config..........6.....n ....1u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............@.k~0................39_config..........6.....n ...1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.283092164552775
Encrypted:	false
SSDEEP:	6:75BSQ+q2P923oH+TcwtfrK+IFUt8OJgZmw+OJQVkwO923oH+TcwtfrUeLJ:7KVv4Yeb23FUt8OJg/+OJI5LYeb3J
MD5:	B00B38E678BFF7C49B722385EDAFAB63
SHA1:	512E77BCD37E97C65B36C17E92B465966E0E9099
SHA-256:	FF5CA48945B56311EF4AA3C310B16F517ACF2491BC346093857EAE3DBBA2DCA0
SHA-512:	41A63FA2C1C3A4782495F71813FA10F08E996633B3A99B35AA8DDB186D8F5CDE46C39AB154242AF810E73F5EE059988676D86274564B78952E360A8EFD79409E
Malicious:	false
Preview:	2024/12/12-06:28:56.875 1b98 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2024/12/12-06:28:56.876 1b98 Recovering log #3.2024/12/12-06:28:56.876 1b98 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.283092164552775
Encrypted:	false
SSDEEP:	6:75BSQ+q2P923oH+TcwtfrK+IFUt8OJgZmw+OJQVkwO923oH+TcwtfrUeLJ:7KVv4Yeb23FUt8OJg/+OJI5LYeb3J
MD5:	B00B38E678BFF7C49B722385EDAFAB63
SHA1:	512E77BCD37E97C65B36C17E92B465966E0E9099
SHA-256:	FF5CA48945B56311EF4AA3C310B16F517ACF2491BC346093857EAE3DBBA2DCA0
SHA-512:	41A63FA2C1C3A4782495F71813FA10F08E996633B3A99B35AA8DDB186D8F5CDE46C39AB154242AF810E73F5EE059988676D86274564B78952E360A8EFD79409E
Malicious:	false
Preview:	2024/12/12-06:28:56.875 1b98 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2024/12/12-06:28:56.876 1b98 Recovering log #3.2024/12/12-06:28:56.876 1b98 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	787
Entropy (8bit):	4.059252238767438
Encrypted:	false
SSDEEP:	12:G0nYUtTNop//z3p/Uz0RuWlJhC+lvBavRtin01zvZDEtlkyBrgxvB1ys:G0nYUtypD3RUovhC+lvBOL+t3IvB8s
MD5:	D8D8899761F621B63AD5ED6DF46D22FE
SHA1:	23E6A39058AB3C1DEADC0AF2E0FFD0D84BB7F1BE
SHA-256:	A5E0A78EE981FB767509F26021E1FA3C506F4E86860946CAC1DC4107EB3B3813
SHA-512:	4F89F556138C0CF24D3D890717EB82067C5269063C84229E93F203A22028782902FA48FB0154F53E06339F2FDBE35A985CE728235EA429D8D157090D25F15A4E
Malicious:	false
Preview:	.h.6.................__global... .t...................__global... .9..b.................33_..........................33_........v.................21_.....vuNX.................21_.....<...................20_.....,.1..................19_.....QL.s.................18_.....<.J\|.................37_...... .A.................38_..........................39_........].................20_.....Owa..................20_.....`..N.................19_.....D8.X.................18_......`...................37_..........................38_......\e..................39_.....dz.\|.................9_.....'\c..................9_.......f-.................__global... .\|.&R.................__global... ./....................__global... ..T...................__global... ...G..................__global... .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	342
Entropy (8bit):	5.268154239203468
Encrypted:	false
SSDEEP:	6:7t/Q+q2P923oH+TcwtfrzAdIFUt8OfkgZmw+OfkQVkwO923oH+TcwtfrzILJ:7t/Vv4Yeb9FUt8Ofkg/+OfkI5LYeb2J
MD5:	D375FBCEF3F395242EF932EC14DA3F21
SHA1:	91CF06BDD42E94BDB16A896DA18541FE7798526B
SHA-256:	15D49CE106594F59DA369FE446B4DF79F92E7A1F3CC94AFDDCCFD3D55DA0F1E1
SHA-512:	0FC697B436DA44C05D6BF27D3C93F89900F29FFC3FF3E42D20B1734851BE8739922BFDB057C20EB024FED55D99C8E4DB15771DFDD540E6CA7401ADE7A68D8D41
Malicious:	false
Preview:	2024/12/12-06:28:56.872 1b98 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2024/12/12-06:28:56.873 1b98 Recovering log #3.2024/12/12-06:28:56.873 1b98 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	342
Entropy (8bit):	5.268154239203468
Encrypted:	false
SSDEEP:	6:7t/Q+q2P923oH+TcwtfrzAdIFUt8OfkgZmw+OfkQVkwO923oH+TcwtfrzILJ:7t/Vv4Yeb9FUt8Ofkg/+OfkI5LYeb2J
MD5:	D375FBCEF3F395242EF932EC14DA3F21
SHA1:	91CF06BDD42E94BDB16A896DA18541FE7798526B
SHA-256:	15D49CE106594F59DA369FE446B4DF79F92E7A1F3CC94AFDDCCFD3D55DA0F1E1
SHA-512:	0FC697B436DA44C05D6BF27D3C93F89900F29FFC3FF3E42D20B1734851BE8739922BFDB057C20EB024FED55D99C8E4DB15771DFDD540E6CA7401ADE7A68D8D41
Malicious:	false
Preview:	2024/12/12-06:28:56.872 1b98 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2024/12/12-06:28:56.873 1b98 Recovering log #3.2024/12/12-06:28:56.873 1b98 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	120
Entropy (8bit):	3.32524464792714
Encrypted:	false
SSDEEP:	3:tbloIlrJFlXnpQoWcNylRjlgbYnPdJiG6R7lZAUAl:tbdlrYoWcV0n1IGi7kBl
MD5:	A397E5983D4A1619E36143B4D804B870
SHA1:	AA135A8CC2469CFD1EF2D7955F027D95BE5DFBD4
SHA-256:	9C70F766D3B84FC2BB298EFA37CC9191F28BEC336329CC11468CFADBC3B137F4
SHA-512:	4159EA654152D2810C95648694DD71957C84EA825FCCA87B36F7E3282A72B30EF741805C610C5FA847CA186E34BDE9C289AAA7B6931C5B257F1D11255CD2A816
Malicious:	false
Preview:	C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t.\.E.d.g.e.\.A.p.p.l.i.c.a.t.i.o.n.\.m.s.e.d.g.e...e.x.e.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.7192945256669794
Encrypted:	false
SSDEEP:	3:NYLFRQI:ap2I
MD5:	BF16C04B916ACE92DB941EBB1AF3CB18
SHA1:	FA8DAEAE881F91F61EE0EE21BE5156255429AA8A
SHA-256:	7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
SHA-512:	F0B7DF5517596B38D57C57B5777E008D6229AB5B1841BBE74602C77EEA2252BF644B8650C7642BD466213F62E15CC7AB5A95B28E26D3907260ED1B96A74B65FB
Malicious:	false
Preview:	117.0.2045.47

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090769329530999
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMYwuF9hDO6vP6O+7tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEe6mtbz8hu3VlXr4CRo1
MD5:	9E94B2418413D035FC34D7E9EBFC17BC
SHA1:	504E612CBE16DD8492FC6C7FA639294210792F98
SHA-256:	8903E93FC23F34EF44284915ACB8AC7C08AEAAB50DD51A71FF91ED04E944781E
SHA-512:	DCEF89AD2B3FD8E16DD4BD2E314DC3081E766F3FA8513F9D00DB2E50490A3A38E0D1E486FE72CC61388CD7655D79127D75B874E8FAB29C9D1B4DD67E1F42FA72
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF398f5.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090769329530999
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMYwuF9hDO6vP6O+7tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEe6mtbz8hu3VlXr4CRo1
MD5:	9E94B2418413D035FC34D7E9EBFC17BC
SHA1:	504E612CBE16DD8492FC6C7FA639294210792F98
SHA-256:	8903E93FC23F34EF44284915ACB8AC7C08AEAAB50DD51A71FF91ED04E944781E
SHA-512:	DCEF89AD2B3FD8E16DD4BD2E314DC3081E766F3FA8513F9D00DB2E50490A3A38E0D1E486FE72CC61388CD7655D79127D75B874E8FAB29C9D1B4DD67E1F42FA72
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF39cbe.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090769329530999
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMYwuF9hDO6vP6O+7tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEe6mtbz8hu3VlXr4CRo1
MD5:	9E94B2418413D035FC34D7E9EBFC17BC
SHA1:	504E612CBE16DD8492FC6C7FA639294210792F98
SHA-256:	8903E93FC23F34EF44284915ACB8AC7C08AEAAB50DD51A71FF91ED04E944781E
SHA-512:	DCEF89AD2B3FD8E16DD4BD2E314DC3081E766F3FA8513F9D00DB2E50490A3A38E0D1E486FE72CC61388CD7655D79127D75B874E8FAB29C9D1B4DD67E1F42FA72
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3c39f.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090769329530999
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMYwuF9hDO6vP6O+7tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEe6mtbz8hu3VlXr4CRo1
MD5:	9E94B2418413D035FC34D7E9EBFC17BC
SHA1:	504E612CBE16DD8492FC6C7FA639294210792F98
SHA-256:	8903E93FC23F34EF44284915ACB8AC7C08AEAAB50DD51A71FF91ED04E944781E
SHA-512:	DCEF89AD2B3FD8E16DD4BD2E314DC3081E766F3FA8513F9D00DB2E50490A3A38E0D1E486FE72CC61388CD7655D79127D75B874E8FAB29C9D1B4DD67E1F42FA72
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3f06c.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090769329530999
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMYwuF9hDO6vP6O+7tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEe6mtbz8hu3VlXr4CRo1
MD5:	9E94B2418413D035FC34D7E9EBFC17BC
SHA1:	504E612CBE16DD8492FC6C7FA639294210792F98
SHA-256:	8903E93FC23F34EF44284915ACB8AC7C08AEAAB50DD51A71FF91ED04E944781E
SHA-512:	DCEF89AD2B3FD8E16DD4BD2E314DC3081E766F3FA8513F9D00DB2E50490A3A38E0D1E486FE72CC61388CD7655D79127D75B874E8FAB29C9D1B4DD67E1F42FA72
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF4ada1.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090769329530999
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMYwuF9hDO6vP6O+7tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEe6mtbz8hu3VlXr4CRo1
MD5:	9E94B2418413D035FC34D7E9EBFC17BC
SHA1:	504E612CBE16DD8492FC6C7FA639294210792F98
SHA-256:	8903E93FC23F34EF44284915ACB8AC7C08AEAAB50DD51A71FF91ED04E944781E
SHA-512:	DCEF89AD2B3FD8E16DD4BD2E314DC3081E766F3FA8513F9D00DB2E50490A3A38E0D1E486FE72CC61388CD7655D79127D75B874E8FAB29C9D1B4DD67E1F42FA72
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF4e878.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090769329530999
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMYwuF9hDO6vP6O+7tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEe6mtbz8hu3VlXr4CRo1
MD5:	9E94B2418413D035FC34D7E9EBFC17BC
SHA1:	504E612CBE16DD8492FC6C7FA639294210792F98
SHA-256:	8903E93FC23F34EF44284915ACB8AC7C08AEAAB50DD51A71FF91ED04E944781E
SHA-512:	DCEF89AD2B3FD8E16DD4BD2E314DC3081E766F3FA8513F9D00DB2E50490A3A38E0D1E486FE72CC61388CD7655D79127D75B874E8FAB29C9D1B4DD67E1F42FA72
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.3818353308528755
Encrypted:	false
SSDEEP:	3:2jRo6jhM6ceYcUtS2djIn:5I2uxUt5Mn
MD5:	48324111147DECC23AC222A361873FC5
SHA1:	0DF8B2267ABBDBD11C422D23338262E3131A4223
SHA-256:	D8D672F953E823063955BD9981532FC3453800C2E74C0CC3653D091088ABD3B3
SHA-512:	E3B5DB7BA5E4E3DE3741F53D91B6B61D6EB9ECC8F4C07B6AE1C2293517F331B716114BAB41D7935888A266F7EBDA6FABA90023EFFEC850A929986053853F1E02
Malicious:	false
Preview:	customSettings_F95BA787499AB4FA9EFFF472CE383A14

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings_F95BA787499AB4FA9EFFF472CE383A14

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.014438730983427
Encrypted:	false
SSDEEP:	3:YDMGA2ADH/AYKEqsYq:YQXT/bKE1F
MD5:	BB57A76019EADEDC27F04EB2FB1F1841
SHA1:	8B41A1B995D45B7A74A365B6B1F1F21F72F86760
SHA-256:	2BAE8302F9BD2D87AE26ACF692663DF1639B8E2068157451DA4773BD8BD30A2B
SHA-512:	A455D7F8E0BE9A27CFB7BE8FE0B0E722B35B4C8F206CAD99064473F15700023D5995CC2C4FAFDB8FBB50F0BAB3EC8B241E9A512C0766AAAE1A86C3472C589FFD
Malicious:	false
Preview:	{"forceServiceDetermination":false}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.346439344671015
Encrypted:	false
SSDEEP:	3:kfKbUPVXXMVQX:kygV5
MD5:	6A3A60A3F78299444AACAA89710A64B6
SHA1:	2A052BF5CF54F980475085EEF459D94C3CE5EF55
SHA-256:	61597278D681774EFD8EB92F5836EB6362975A74CEF807CE548E50A7EC38E11F
SHA-512:	C5D0419869A43D712B29A5A11DC590690B5876D1D95C1F1380C2F773CA0CB07B173474EE16FE66A6AF633B04CC84E58924A62F00DCC171B2656D554864BF57A4
Malicious:	false
Preview:	synchronousLookupUris_638343870221005468

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris_638343870221005468

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.556488479039065
Encrypted:	false
SSDEEP:	3:GSCIPPlzYxi21goD:bCWBYx99D
MD5:	3A05EAEA94307F8C57BAC69C3DF64E59
SHA1:	9B852B902B72B9D5F7B9158E306E1A2C5F6112C8
SHA-256:	A8EF112DF7DAD4B09AAA48C3E53272A2EEC139E86590FD80E2B7CBD23D14C09E
SHA-512:	6080AEF2339031FAFDCFB00D3179285E09B707A846FD2EA03921467DF5930B3F9C629D37400D625A8571B900BC46021047770BAC238F6BAC544B48FB3D522FB0
Malicious:	false
Preview:	9.......murmur3.............,M.h...Z...8.\..<&Li.H..[.?m

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.030394788231021
Encrypted:	false
SSDEEP:	3:0xXeZUSXkcVn:0Re5kcV
MD5:	52E2839549E67CE774547C9F07740500
SHA1:	B172E16D7756483DF0CA0A8D4F7640DD5D557201
SHA-256:	F81B7B9CE24F5A2B94182E817037B5F1089DC764BC7E55A9B0A6227A7E121F32
SHA-512:	D80E7351E4D83463255C002D3FDCE7E5274177C24C4C728D7B7932D0BE3EBCFEB68E1E65697ED5E162E1B423BB8CDFA0864981C4B466D6AD8B5E724D84B4203B
Malicious:	false
Preview:	topTraffic_638004170464094982

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_170540185939602997400506234197983529371

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	575056
Entropy (8bit):	7.999649474060713
Encrypted:	true
SSDEEP:	12288:fXdhUG0PlM/EXEBQlbk19RrH76Im4u8C1jJodha:Ji80e9Rb7Tm4u8CnR
MD5:	BE5D1A12C1644421F877787F8E76642D
SHA1:	06C46A95B4BD5E145E015FA7E358A2D1AC52C809
SHA-256:	C1CE928FBEF4EF5A4207ABAFD9AB6382CC29D11DDECC215314B0522749EF6A5A
SHA-512:	FD5B100E2F192164B77F4140ADF6DE0322F34D7B6F0CF14AED91BACAB18BB8F195F161F7CF8FB10651122A598CE474AC4DC39EDF47B6A85C90C854C2A3170960
Malicious:	false
Preview:	...._+jE.`..}....S..1....G}s..E....y".Wh.^.W.H...-...#.A...KR...9b........>k......bU.IVo...D......Y..[l.yx.......'c=..I0.....E.d...-...1 ....m../C...OQ.........qW..<:N.....38.u..X-..s....<..U.,Mi..._.......`.Y/.........^..,.E..........j@..G8..N.... ..Ea...4.+.79k.!T.-5W..!..@+..!.P..LDG.....V."....L.... .(#..$..&......C.....%A.T}....K_.S..'Q.".d....s....(j.D!......Ov..)d0)."(..%..-..G..L.}....i.....m9;.....t.w..0....f?..-..M.c.3.....N7K.T..D>.3.x...z..u$5!..4..T.....U.O^L{.5..=E..'..;.}(\|.6.:..f!.>...?M.8......P.D.J.I4.<....y.E....>....i%.6..Y.@..n.....M..r..C.f.;..<..0.H...F....h.......HB1]1....u..:...H..k....B.Q..J...@}j~.#...'Y.J~....I...ub.&..L[z..1.W/.Ck....M.......[.......N.F..z.{nZ~d.V.4.u.K.V.......X.<p..cz..>....X...W..da3(..g..Z$.L4.j=~.p.l.\.[e.&&.Y ...U)..._.^r0.,.{_......`S..[....(.\..p.bt.g..%.$+....f.....d....Im..f...W ......G..i_8a..ae..7....pS.....z-H..A.s.4.3..O.r.....u.S......a.}..v.-/..... ...a.x#./:...sS&U.().xL...pg

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_638004170464094982

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	raw G3 (Group 3) FAX, byte-padded
Category:	dropped
Size (bytes):	460992
Entropy (8bit):	7.999625908035124
Encrypted:	true
SSDEEP:	12288:KaRwcD8XXTZGZJHXBjOVX3xFttENr4+3eGPnKvJWXrydqb:KaR5oZ2MBFt8r4+3eG/URdqb
MD5:	E9C502DB957CDB977E7F5745B34C32E6
SHA1:	DBD72B0D3F46FA35A9FE2527C25271AEC08E3933
SHA-256:	5A6B49358772DB0B5C682575F02E8630083568542B984D6D00727740506569D4
SHA-512:	B846E682427CF144A440619258F5AA5C94CAEE7612127A60E4BD3C712F8FF614DA232D9A488E27FC2B0D53FD6ACF05409958AEA3B21EA2C1127821BD8E87A5CA
Malicious:	false
Preview:	...2lI.5.<C.;.{....._+jE.`..}....-...#.A...KR...l.M0,s...).9..........x.......F.b......jU....y.h'....L<.....Z..%...._...g.4yu...........'c=..I0..........qW..<:N....<..U.,Mi..._......'(..U.9.!........u....7...4. ..Ea...4.+.79k.!T.-5W..!..@+..$..t\|1.E..7F...+..xf....z&_Q...-.B...)8R.c....0.......B.M.Z...0....&v..<..H...3.....N7K.T..D>.8......P.D.J.I4.B.H.VHy...@.Wc.Cl..6aD..j.....E..4..mI..X]2.GH.G.L...E.F.=.J...@}j~.#...'Y.L[z..1.W/.Ck....L..X........J.NYd........>...N.F..z.{nZ~d.N..../..6.\L...Q...+.w..p...>.S.iG...0]..8....S..)`B#.v..^..T.?...Z.rz.D'.!.T.w....S..8....V.4.u.K.V.......W.6s...Y.).[.c.X.S..........5.X7F...tQ....z.L.X..(3#j...8...i.[..j$.Q....0...]"W.c.H..n..2Te.ak...c..-F(..W2.b....3.]......c.d\|.../....._...f.....d....Im..g.b..R.q.<xx...i2..r.I()Iat..b.j.r@K.+5..C.....nJ.>P,.V@.....s.4.3..O.r.....smd7...L.....].u&1../t.*.......uXb...=@.....wv......]....#.{$.w......i.....\|.....?....E7...}$+..t).E.U..Q..~.`.)..Y@.6.h.......%(

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	3.169925001442312
Encrypted:	false
SSDEEP:	3:CMzOn:CM6
MD5:	B6F7A6B03164D4BF8E3531A5CF721D30
SHA1:	A2134120D4712C7C629CDCEEF9DE6D6E48CA13FA
SHA-256:	3D6F3F8F1456D7CE78DD9DFA8187318B38E731A658E513F561EE178766E74D39
SHA-512:	4B473F45A5D45D420483EA1D9E93047794884F26781BBFE5370A554D260E80AD462E7EEB74D16025774935C3A80CBB2FD1293941EE3D7B64045B791B365F2B63
Malicious:	false
Preview:	uriCache_

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache_

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	180
Entropy (8bit):	4.956029737656468
Encrypted:	false
SSDEEP:	3:YTyLSmafBoTfMndgXw1JHWAXTozROWtm5EQnqdbRWE/QNAo2AvHfjg9PIAclRW2t:YWLSGTQ8w1JWyTo9w5/nmbRL/ov/EMln
MD5:	E8AA73E14C1E8E02436B1E8B710FF846
SHA1:	9856547F23F38230E196F4EB1819E3A4ABF2B554
SHA-256:	B998457313A45DD7D4570B2E726B14716C59A9E9E6D96ECC1114B0885A5568CF
SHA-512:	0803E0BEF351EF537330261E7DEFA748DF4044524592760467C62C3D7239BA978EF1F0C14D2E9053FE1ED4DB32DC5B322724597E0EEF6D62ECFB1F6C79B6ED38
Malicious:	false
Preview:	{"version":1,"cache_data":[{"file_hash":"48153bb8be244e0b","server_context":"1;c5faad59-a2e3-31f2-b86e-aaf958e12824;phsh:005;7e-05","result":0,"expiration_time":1734103741309454}]}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.3751917412896075
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ2rjozQw:YQ3Kq9X0dMgAEwj2
MD5:	16B7586B9EBA5296EA04B791FC3D675E
SHA1:	8890767DD7EB4D1BEAB829324BA8B9599051F0B0
SHA-256:	474D668707F1CB929FEF1E3798B71B632E50675BD1A9DCEAAB90C9587F72F680
SHA-512:	58668D0C28B63548A1F13D2C2DFA19BCC14C0B7406833AD8E72DFC07F46D8DF6DED46265D74A042D07FBC88F78A59CB32389EF384EC78A55976DFC2737868771
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":false,"variations_crash_streak":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ad88878e-6ace-40d3-86fc-6c60e9525b9e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44644
Entropy (8bit):	6.096809561389599
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4xkBqwuthDO6vP6Oivw7SzVFDlExXRcGoup1Xl3jVzXq:z/Ps+wsI7yOEr6Cvwlchu3VlXr4CRo1
MD5:	0D4374F1C59A486D9C8A2A753BF0E414
SHA1:	CB4C2A71CED0F6FCB4CBCDAE2DB6901010369653
SHA-256:	93D60B1C5CEB8ED6DD6F6E57FEA3D5115935E8D65ACA6644DD7AEA127B2C9F20
SHA-512:	4140C80174ED788B941DAB322C4240DEF6D61E7899BBB9D3E6D74D4742B7C2C447BC707B35A843E1D7CFB7712B06745B7DFCF5F8359B3B6696C16449F916A7A5
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\bd1da2d7-bb1c-41e5-a343-b095803cacf9.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45876
Entropy (8bit):	6.089474269726196
Encrypted:	false
SSDEEP:	768:mMkbJrT8IeQc5i9qzSGhDO6vP6OivwTSzVFDlExXRYNxoZ20+WCAoPGoup1Xl3jT:mMk1rT8Hq9qA6CvwdYNGU0XRoPhu3VlZ
MD5:	2DDC44BA8DDC84365076D517DD2AA7C6
SHA1:	7039EC117D72C982038161DDEF67D5A7D906DDF2
SHA-256:	ED4B7115DFDF6FD7EB4CA1469932E3377D398AB912D47A4B77C74957F6DDDC39
SHA-512:	9531C7F1BB78FAA5A4D53C4BF7A0D9B9B87953829BE192C1C6F276D4BF94E62EF9896C90AB7DB458A356D4E00D6EE1BBAA4C05D6E3CC120B71941E7939FBAE2D
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\c9262732-6684-4be7-a045-67413ece6478.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	45877
Entropy (8bit):	6.089346163595409
Encrypted:	false
SSDEEP:	768:mMkbJrT8IeQc5ioqzSGhDO6vP6WsivwTSzVFDlExXRYNxoZ20+WCAoPGoup1Xl3/:mMk1rT8HqoqA6xvwdYNGU0XRoPhu3VlZ
MD5:	A8B7A14963CDD9F6BB3DFC1CD7053670
SHA1:	3CB1B4406B8B189302912346E24E4B67CA8F1619
SHA-256:	8F45ED77DB2BC140FF512302BC7838932BD605C7D2D9CA70B3CF2581CFE79B5A
SHA-512:	1DFFA24D6EF6F270DD1EA9F35681190B38214D6332AC92B8D840BB43DB99397163732AF67C6BFF804A689440F0A7372F6F014DC0F94DC5323B5CAA6639BEFD7F
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\f4919b23-425f-4815-a28a-ef7ad7462881.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45799
Entropy (8bit):	6.0895099596492335
Encrypted:	false
SSDEEP:	768:mMkbJrT8IeQc5d9qzSGhDO6vP6Oivw7SzVFDlExXRYNxoZ20+WCAoPGoup1Xl3jT:mMk1rT8H19qA6CvwlYNGU0XRoPhu3VlZ
MD5:	FF520F219286006C77DBC475DDB79809
SHA1:	2DAC91B060CCDE80566972DC365F97222E6AFB9A
SHA-256:	DE878B90AFDD93B259A6EEE23D6E12FDCFB0C556B8F5B103577AFEC34C088BB4
SHA-512:	FDFCA09394A3B29EB4A28B381FE47E0088512BCBAA2F903C85A2862AAE8CEBE2DDC22C13F41D7311329A6B8BD0E696F2D1827D2CCDA1A95242BA98E7482C1DE1
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2278
Entropy (8bit):	3.850151017271524
Encrypted:	false
SSDEEP:	48:uiTrlKxrgxyxl9Il8uiuidpqJUEOaMwbzmCD8hDNGwd1rc:m7YEuidpCE2KCDcAn
MD5:	E00839BAE3E962974F78F7C6B6B955FB
SHA1:	7C92F64EF1DC6CED14143D18A155EE3B5EB5DF6F
SHA-256:	C005171D7421CBADD854C064796386C8D8DE8D71D16829E14FB5DC5EA413C1FD
SHA-512:	6170600546BEBF6A611A52C89C971CCF023242F271D5B3BEDC4ED7B51F16054854E931160A1AEDC709A7983C8CE84B30577AA01DA14853CE74F38228F4D37ED2
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".W.i.p.w.W.M.+.N.H.l.b.C.D.m.s.Z.p.8.S.O.s.j.h.t.F.B.s.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.D.v.8.b.J.F.M.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.r.+.o.h.C.k.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4622
Entropy (8bit):	3.9992958139004178
Encrypted:	false
SSDEEP:	48:uiTrlKxExXxD9Il8ul0Ycw2RFMgTYGGxMydJPqMoApBNmbgbP4F8l6QbilTknw+n:JYz0YcPFMPdJPZcbMP4F8IQu5Ew8t
MD5:	73567CB88600C06B0D768614B0D6528B
SHA1:	E60A32DD2E14C55C5F786C3434C34102E7DFA1E4
SHA-256:	C1B15E7AFBAC1B981835394668F06A559301055C7BA7B722D7EA2D1B9423AEA2
SHA-512:	C3B00535944B170E62114EF64400B4FEA1255ECAE40AB43F84CF303B6ABD57B7F450B2E8526FBEDD284F75539E7D0841553F55AAC57FD7F857F87DFFF344286C
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".z.3.U.T.q.T.b.3.7./.u.z.h.i.f.l.b.4.0.f.z.h.D.r.E.s.w.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".2.+.8.y.U.o.l.M.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.w.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.r.+.o.h.C.k.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2684
Entropy (8bit):	3.8912725855680734
Encrypted:	false
SSDEEP:	48:uiTrlKx68Wa7x4lwxl9Il8uDX6t2D74c1l2CEwcZv98Vi8Ed/vc:aJYVX6kD77UCwZv+Vi8N
MD5:	CBC4BAF0C5BFD26DC1472AC0B207B70E
SHA1:	F5C021DB28C906FB5952D557A83EC4B7FC7D2367
SHA-256:	09309239D62DD14812DAB67C93CF82120AD9FEB170174969B675B6FA2817C88F
SHA-512:	DE66259CD1E499138D864A28148198EFC97DD5FD25FB8EE79E180531E2263F576441B2999DC8E7C223770D9A55CB44BAB04C1617AF9A6B195784141AF68A8C10
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".6.N.3.U.y.9.n.A.U.E.q.s.5.u.9.6.E./.o.g.0.E./.V.J.A.g.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".v.x.2.I.g.l.p.r.3.A.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.r.+.o.h.C.k.

C:\Users\user\AppData\Local\Temp\115064ae-43d8-4a8a-8c7f-5181bbef87b0.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\64e3cc1a-c045-4700-994a-8c4388032cd6.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Local\Temp\7ebfc201-cf9c-4cf8-b6b3-866b84738822.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\9792a86d-11fe-4f61-ab23-3b8e15fdf162.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	138356
Entropy (8bit):	7.809609231921042
Encrypted:	false
SSDEEP:	3072:AQ++ZdS5+fnwcxO+XwquyeNnmraugZ/1DOoncWD/5q:AQ++/PZmlyeNnh/1SmRq
MD5:	3F6F93C3DCCD4A91C4EB25C7F6FEB1C1
SHA1:	9B73F46ADFA1F4464929B408407E73D4535C6827
SHA-256:	19F05352CB4C6E231C1C000B6C8B7E9EDCC1E8082CAF46FFF16B239D32AA7C9E
SHA-512:	D488FA67E3A29D0147E9EAF2EABC74D9A255F8470CF79A4AEA60E3B3B5E48A3FCBC4FC3E9CE58DFF8D7D0CAA8AE749295F221E1FE1BA5D20DEB2D97544A12BA4
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[........q.a.....E..i.t,..7C..7!...`l.-.......T.vH...~.....'..aH..C.oJOE..d..2..$J......I..;.(9l.(..+.N.6.@...].a.n.S.6..=.b.W.\....o...#.~J.W.1..E...2H....S.g0....../.H...y.O8...kE.,..m!..F.D.p......H..s.W ...#.L........Ij.........-..n..\..vD.d.V.....!......[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. ?Eq.M...[6^...+.].G..Y]...7..o.. U...v....P.J...@.E!...B.d..p..i".%............oo.<....~=..!t.+...`....h..LK....0....h...,.R%.....u...._..V_.q:_._..5}.uS\.....x?...~]..C-....S=L...._c.P.B....-M...62.i*.Q.....9.....+S=...../6:...W..ql/g..&j.y..{.."....\|..F....\|....V....w.%t.y..?..&..a..<.n....S+\|..=.ra.....

C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files.cab

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 1694160 bytes, 1 file, at 0x2c +A "setup.exe", ID 43142, number 1, 20880 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	1694160
Entropy (8bit):	5.533913443472102
Encrypted:	false
SSDEEP:	24576:QQS9k2+y4csX3+4OkoorlvRaLicTOUKXr:QVxP4XO4OKrPaLNazXr
MD5:	809337E8FBA896E6C6BE38773398AFD5
SHA1:	F1CF29E8175BA87B9B28A02DCA9E5FB09F175027
SHA-256:	6B956A5C80BEB1085C7BB11F6386B31B718BBF59C59EE8BD83DE2C0FEBE90AA3
SHA-512:	4EDF0A07ECB49A0AF6B06621C06221E2FE5D48808CC305B59D4142C990474543BCE0C6FB99677257A3DEDE9C6EDCBAA8E613AF31C3AD0CF0C21576A783EE19F2
Malicious:	false
Preview:	MSCF............,...................F....Q.....(......XY.R .setup.exe.....r>..[...6 F.q.....5..P..mN.V.VE.a..J.(n.E..M..B...v.b...Q.X.!.{t...nk...v.S......hd..........K..H.p%....y.(..},..."..u.....s.......t 3.Qh ..G......ntXT..7.FPE.u#..R.P7.H$.......I.$:%IHJ..1.#'Yb.............U........;....w.o.....Z...UFcJ.$Wj,....bA@D.p....0..p..G.@..s...4..p..,.=<.<........o`u..I.y.>...k.J..w...W.p..o........}.y..Go.........>I..."...}"0..z.y................".....I....h."\|<..\|....:m.h....>.Iw..;g.G0.....xE..aKa}..7y.....e..k..K.n.b[jp......T..2.$...4.~L.G.MRp.}.N..z......>.....T....FjF.(.<....Qd6..Q........k3ue..\.=@...{X#...B%yw.Q. ;...4......-y..M......9yo..2..}..MH.5........._.....d..2..EY.S..VB....4.U...W....>.^MP...&..".t....'..I.EY)..m.p.B.D.]".~.V...i....b.....%..C.Q.D..Z..mh.F..Pqt+..F/....j$:.ECl..w..!..P6N\|.1u.b`....\....O..9..ub.r....Cp@\|G.@......:...:JQM.J....K+..%....1.k<=.qb.J=.M'.`9.ao..5.GJ.Z...@q!.$J.....%..#.........o:.l...3.W...w...{@..v>....-

C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\f578ccbf803c49818274db23b47701b7$dpx$.tmp\02f00f7a480dcc4ebcae8d80bfc2e9bf.tmp

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	684188672
Entropy (8bit):	0.04741227929086557
Encrypted:	false
SSDEEP:
MD5:	E5BAA8B4BBE30FE905CBE269739D7B31
SHA1:	EF808AD37C6D8BD99BFF4EE5AFBA173DB143D1A7
SHA-256:	D696363C1FE4E62ED0A467871C3F397470887785E0BE39D18449269FFF84532D
SHA-512:	9B5A6348DC43360F8A6C892468193EBEBBDDA9A52CA6E18D529F95A58D04989D1280A663F8B378F84DA58E98514FB59A83514F2E28118D4C63181D0BB9F54AE4
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 37%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L......g..........................................@...........................".....&..(..@.................................Xa..x.............................!......................................................c...............................text.............................. ..`.rdata..............................@..@.data...(........8..................@....00cfg..............................@..@.tls................................@....voltbl.,................................rsrc...............................@..@.reloc........!....... .............@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe (copy)

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	684188672
Entropy (8bit):	0.04741227929086557
Encrypted:	false
SSDEEP:
MD5:	E5BAA8B4BBE30FE905CBE269739D7B31
SHA1:	EF808AD37C6D8BD99BFF4EE5AFBA173DB143D1A7
SHA-256:	D696363C1FE4E62ED0A467871C3F397470887785E0BE39D18449269FFF84532D
SHA-512:	9B5A6348DC43360F8A6C892468193EBEBBDDA9A52CA6E18D529F95A58D04989D1280A663F8B378F84DA58E98514FB59A83514F2E28118D4C63181D0BB9F54AE4
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 37%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L......g..........................................@...........................".....&..(..@.................................Xa..x.............................!......................................................c...............................text.............................. ..`.rdata..............................@..@.data...(........8..................@....00cfg..............................@..@.tls................................@....voltbl.,................................rsrc...............................@..@.reloc........!....... .............@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\msiwrapper.ini

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	1814
Entropy (8bit):	3.7239578409058574
Encrypted:	false
SSDEEP:	24:L0Vdv8DW8Xj+7hvalcHpZESrFhOmOiVbyfTc5A07qVEQSymOnhFHwe8S:LKAeZaspZJFhOmO8byL0A5SbOnzqS
MD5:	59F97A62DABF3496407186CDFD30B0A2
SHA1:	F72CEEAC40EBEAF19DAE8DF75C07522A0FA9EE1D
SHA-256:	8E719BBC1FD121A0C4E47CAFEA5457C8183542F98B087EA9C7B06A72D71F759C
SHA-512:	9D3BF102A601DC6919B69598C8893506B5985873AF13473FA3A19FBF2425D72602A00A4226C0287E501D69EA0F9DF9FF7A4A2715B6371FB7FB1AC3631EA3BEA6
Malicious:	false
Preview:	W.r.a.p.p.e.d.A.p.p.l.i.c.a.t.i.o.n.I.d.=.G.o.o.g.l.e. .C.h.r.o.m.e...W.r.a.p.p.e.d.R.e.g.i.s.t.r.a.t.i.o.n.=.N.o.n.e...I.n.s.t.a.l.l.S.u.c.c.e.s.s.C.o.d.e.s.=.0...E.l.e.v.a.t.i.o.n.M.o.d.e.=.n.e.v.e.r...B.a.s.e.N.a.m.e.=.s.e.t.u.p...e.x.e...C.a.b.H.a.s.h.=.6.b.9.5.6.a.5.c.8.0.b.e.b.1.0.8.5.c.7.b.b.1.1.f.6.3.8.6.b.3.1.b.7.1.8.b.b.f.5.9.c.5.9.e.e.8.b.d.8.3.d.e.2.c.0.f.e.b.e.9.0.a.a.3...S.e.t.u.p.P.a.r.a.m.e.t.e.r.s.=./.V.E.R.Y.S.I.L.E.N.T. . ./.V.E.R.Y.S.I.L.E.N.T. ...W.o.r.k.i.n.g.D.i.r.=...C.u.r.r.e.n.t.D.i.r.=..S.O.U.R.C.E.D.I.R....U.I.L.e.v.e.l.=.5...F.o.c.u.s.=.y.e.s...S.e.s.s.i.o.n.D.i.r.=.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.M.W.-.4.9.4.5.8.a.e.7.-.0.3.f.9.-.4.e.6.4.-.9.c.b.c.-.1.9.8.7.7.2.b.e.5.3.b.6.\...F.i.l.e.s.D.i.r.=.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.M.W.-.4.9.4.5.8.a.e.7.-.0.3.f.9.-.4.e.6.4.-.9.c.b.c.-.1.9.8.7.7.2.b.e.5.3.b.6.\.f.i.l.e.s.\...R.u.n.B.e.f.o.r.e.I.n.s.t.a.l.l.F.i.l.e.=.c.m.d...e.x.e...R.u.

C:\Users\user\AppData\Local\Temp\cc5acbde-dc9f-4a0d-84ef-a10e74671849.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 41900
Category:	dropped
Size (bytes):	76321
Entropy (8bit):	7.996057445951542
Encrypted:	true
SSDEEP:	1536:hS5Vvm808scZeEzFrSpzBUl4MZIGM/iys3BBrYunau6wpGzxue:GdS8scZNzFrMa4M+lK5/nXexue
MD5:	D7A1AC56ED4F4D17DD0524C88892C56D
SHA1:	4153CA1A9A4FD0F781ECD5BA9D2A1E68C760ECD4
SHA-256:	0A29576C4002D863B0C5AE7A0B36C0BBEB0FB9AFD16B008451D4142C07E1FF2B
SHA-512:	31503F2F6831070E887EA104296E17EE755BB6BBFB1EF2A15371534BFA2D3F0CD53862389625CF498754B071885A53E1A7F82A3546275DB1F4588E0E80BF7BEE
Malicious:	false
Preview:	...........m{..(.}...7.\...N.D.w..m..q....%XfL.I.ql..;/.....s...E...0....`..A..[o^.^Y...F_.'..."L...^.......Y..W..l...E0..YY...:.&.u?....J..U<.q."...p.ib:.g..^.q.mr.....^&.{.E.....,EAp.q.......=.=.....z^.,d.^..J.R..zI4..2b?.-D5/.^...+.G..Y..?5..k........i.,.T#........_DV....P..d2......b\..L....o....Z.}../....CU.$.-..D9`..~......=....._.2O..?....b.{...7IY.L..q....K....T..5m.d.s.4.^... ..~<..7~6OS..b...^>.......s..n....k."..G.....L...z.U...... ... .ZY...,...kU1..N...(..V.r\$..s...X.It...x.mr..W....g........9DQR....*d......;L.S.....G... .._D.{.=.zI.g.Y~...`T..p.yO..4......8$..v.J..I.%..._.d.[..du5._._...?\..8.c.....U...fy.t....q.t....T@.......:zu..\,.!.I..AN_.....FeX..h.c.i.W.......(.....Y..F...R%.\..@.. 2(e,&.76..F+...l.t.$..`...........Wi.{.U.&(.b}...}.i..,...k....!..%...&.c..D-."..SQ.......q9....)j....7.".N....AX...).d./giR....uk.....s.....^...........:...~......(hP..K.@.&..?.E0:+D\|9...U.q.cu..)t{.e...X...{.....z......LL&I6.=.

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping1896_740143793\crl-set

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	22512
Entropy (8bit):	7.7925552321905265
Encrypted:	false
SSDEEP:	384:qt71+UBzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1pA:a4GBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
MD5:	846FEB52BD6829102A780EC0DA74AB04
SHA1:	DD98409B49F0CD1F9D0028962D7276860579FB54
SHA-256:	124B7EEBA31F0E3D9B842A62F3441204BEB13FADE81DA38B854AECBA0E03A5B4
SHA-512:	C8759E675506CCC6AA9807798252C7E7C48A0AB31674609738617DC105CEE38BCE69D4D41D6B95E16731466880B386D35483CBEEA6275773F7041BA6E305FAE9
Malicious:	false
Preview:	..{"Version":0,"ContentType":"CRLSet","Sequence":183,"DeltaFrom":0,"NumParents":202,"BlockedSPKIs":["Jdoa1Yu/z7In2HI7GFfUwY57qnQXtPnv+TZrXoafizk=","j1kfeqTcPv6UkMOKRpLJAR7RKPHeWVVpQG13tvofa0w=","BN3pqpp59hSYaCMl+ghwJ2cH+5ypU4QSC0aJMmhJT8k=","DEPqi83p/DvKFlZkrIIVVn40idU5OgyB4aeRQZkuGVM=","eBpM8ukkUvPuAdDDgaQhTzkEFlw5CtvWH80RJE4Jstw=","/NdsyiNH5c1bOTR/Uc9DZUtpor/JBzZwpr5H2HAebg4=","wO0gU0a7veButWD1zuAqNjTiR0p+ds+PvvVjuxF90OM=","fNKVt1VEgIq9lAlGbwg3xarcAuM7YVDGZE3goJZZ8jw=","lo26afv/Fb83YgiUMa3lp+rUt+rxvnACaBC8V9HGT24=","0x7DkoW3pTGdAVfbQg7YfHQ+Mzu8d/h3H3BGT0NqYEk=","h7/Yr6OvW0KdCamqVO5hNk9a4REx5Dj8QQlTQ80WsTU=","li5LVLuYp+5dX+uWM/mR08MwDpUU2t57DU+CjHlPjoc=","6EnHF2yT32X2S2FpgjZuVmMReBK2+ivAyPqK6u5Bgcw=","oM9T9CJlHjkxeuMa9kV3vkUPo3biie2DQrf8EzxpdBk=","r1kVGOLmxg67/AkHr6pJvEBR1F5/IUq/7nUS7gD2Ye0=","LcTLWR9+8GY0QWRrz1wOnbze13ygKUUZPO/G7bF0BhQ=","TNsGDzz+TD0/XjHDAP1oqR4NHl9Gtk5IlfIOG1z4Jp8=","qbVam1Uxu/fHGh5JIO/nlsK2eWj1Wmzly2IXLtmUW8o=","NuqWEoyJg5+2IfitDh7gucIgb2Kre02ixnZYk8m3ztI=","nFmjzK

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping1896_740143793\manifest.fingerprint

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9320289247029807
Encrypted:	false
SSDEEP:	3:SUutfo6dTkKzV7hk3Mghu:SUutfo2TkKzV7yxA
MD5:	DEE9D3BDD016C697D11E370A995E7332
SHA1:	EF13D667EFD507E160DE165F4F1FE918FC728CA2
SHA-256:	A84789942C4436967DBA5D0CE45A3F6767BCFEBF67B951FBEF75CCA32E9ACD96
SHA-512:	1C798ED77FCACCC5EC237CB6618E6425FB7DBBE5F22B2A969B915987FDA4BE8ECADC265871832F0B7F9B5656433C27F8495ECEB16598294FAB80E709B2CB3D68
Malicious:	false
Preview:	1.1AB07E887ACCA305058EEAB9053C96DC531C2C5C067AB4F30AFA2B31F1EDD966

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping1896_740143793\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	114
Entropy (8bit):	4.584576854960822
Encrypted:	false
SSDEEP:	3:3FFhAWAUNXxAujmZ2+mvbhifFXAuArmvD2S3zsFXmXYvn:3FFWe9TK37ArdS34mXYvn
MD5:	E6CD92AD3B3AB9CB3D325F3C4B7559AA
SHA1:	0704D57B52CF55674524A5278ED4F7BA1E19CA0C
SHA-256:	63DFB8D99CE83B3CA282EB697DC76B17B4A48E4065FC7EFAFB77724739074A9D
SHA-512:	172D5DC107757BB591B9A8ED7F2B48F22B5184D6537572D375801113E294FEBFBE39077C408E3A04C44E6072427CBE443C6614D205A5A4AA290101722E18F5E8
Malicious:	false
Preview:	{.. "description": "Microsoft CRLSet",.. "name": "MicrosoftCRLSet",.. "version": "6498.2024.12.2"..}..

C:\Users\user\AppData\Local\Temp\cv_debug.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2110
Entropy (8bit):	5.404778925454779
Encrypted:	false
SSDEEP:	48:Yzj57SnaJ57H57Uv5W1Sj5W175zuR5z+5zn071eDJk5c1903bj5jJp0gcU854RrO:8e2Fa116uCntc5toYNfM
MD5:	E1EF41E472BD70E157F3945E38CD30DF
SHA1:	CAC3F0E6EC1459C2DAC1E5B2928AC17AA9D1DE8E
SHA-256:	A38F81139369ACCCB505A649138E5815CE1E577DDD1FCF87B153A1A051079B97
SHA-512:	F58E35254835A57F1BD94DC85F02F6DD6F973F8F6A42125C9B2E7F1833140049DE09E5F669111D86EEF0D32E70A0DF3079B66AC08DB722C60AB88056B4C3BED0
Malicious:	false
Preview:	{"logTime": "1004/133448", "correlationVector":"vYS73lRT+EoO2Owh9jsc+Y","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133448", "correlationVector":"n/KhuHPhHmYXokB31+JZz7","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133448", "correlationVector":"fclQx26bUZO07waFEDe6Fn","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133448", "correlationVector":"0757l0tkKt37vNrdCKAm8w","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133449", "correlationVector":"uTRRkmbbqkgK/wPBCS4fct","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133449", "correlationVector":"2DrXipL1ngF91RN7IemK0e","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/134324", "correlationVector":"d0GyjEgnW85fvDIojHVIXI","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/134324", "correlationVector":"PvfzGWRutB/kmuXUK+c8XA","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/134324", "correlationVector":"29CB75FBC4C942E0817A1F7A0E2CF647

C:\Users\user\AppData\Local\Temp\d81e2bb8-936b-454e-8070-4e05aa2b6ab8.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1366x720, components 3
Category:	dropped
Size (bytes):	206855
Entropy (8bit):	7.983996634657522
Encrypted:	false
SSDEEP:	3072:5WcDW3D2an0GMJGqJCj+1ZxdmdopHjHTFYPQyairiVoo4XSWrPoiXvJddppWmEI5:l81Lel7E6lEMVo/S01fDpWmEgD
MD5:	788DF0376CE061534448AA17288FEA95
SHA1:	C3B9285574587B3D1950EE4A8D64145E93842AEB
SHA-256:	B7FB1D3C27E04785757E013EC1AC4B1551D862ACD86F6888217AB82E642882A5
SHA-512:	3AA9C1AA00060753422650BBFE58EEEA308DA018605A6C5287788C3E2909BE876367F83B541E1D05FE33F284741250706339010571D2E2D153A5C5A107D35001
Malicious:	false
Preview:	......Exif..II.................Ducky.......2......Adobe.d...........................................................#"""#''''''''''..................................................!! !!''''''''''........V.."....................................................................................!1..AQ..aq."2....R..T....Br.#S.U..b..3Cs...t6.c.$D.5uV...4d.E&....%F......................!1..AQaq....."2......BRbr3CS....#..4.............?......1f.n..T......TP....E...........P.....@.........E..@......E.P........@........E.....P.P..A@@.E..@.P.P..AP.P..AP..@....T..AP.E..P.Z .. ....."... .....7.H...w.....t.....T....M.."... P..n.n..t5..B.P..(......................................( .................... .".... .".......(.. ."....... ....o......E.6... ....."........."J......Ah......@.@@....:@{6..wCp..3...((.(.........................@..(...."............................ ........T.......@.@@........AP.P..@.E@....E@.d.E@.@@..@.P.T..@..@..P.D...@M........EO..."...=.wCp.....R......P.@......

C:\Users\user\AppData\Local\Temp\scoped_dir1896_263895066\64e3cc1a-c045-4700-994a-8c4388032cd6.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Local\Temp\scoped_dir1896_263895066\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1753
Entropy (8bit):	5.8889033066924155
Encrypted:	false
SSDEEP:	48:Pxpr7Xka2NXDpfsBJODI19Kg1JqcJW9O//JE3ZBDcpu/x:L3XgNSz9/4kIO3u3Xgpq
MD5:	738E757B92939B24CDBBD0EFC2601315
SHA1:	77058CBAFA625AAFBEA867052136C11AD3332143
SHA-256:	D23B2BA94BA22BBB681E6362AE5870ACD8A3280FA9E7241B86A9E12982968947
SHA-512:	DCA3E12DD5A9F1802DB6D11B009FCE2B787E79B9F730094367C9F26D1D87AF1EA072FF5B10888648FB1231DD83475CF45594BB0C9915B655EE363A3127A5FFC2
Malicious:	false
Preview:	[.. {.. "description": "treehash per file",.. "signed_content": {.. "payload": "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",.. "signatures": [.. {.. "header": {.. "kid": "publisher".. },.. "protected": "eyJhbGciOiJSUzI1NiJ9",.. "signature": "UglEEilkOml5P1W0X6wc-_dB87PQB73uMir11923av57zPKujb4IUe_lbGpn7cRZsy6x-8i9eEKxAW7L2TSmYqrcp4XtiON6ppcf27FWACXOUJDax9wlMr-EOtyZhykCnB9vR

C:\Users\user\AppData\Local\Temp\scoped_dir1896_263895066\CRX_INSTALL\content.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8031), with no line terminators
Category:	dropped
Size (bytes):	9815
Entropy (8bit):	6.1716321262973315
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
MD5:	3D20584F7F6C8EAC79E17CCA4207FB79
SHA1:	3C16DCC27AE52431C8CDD92FBAAB0341524D3092
SHA-256:	0D40A5153CB66B5BDE64906CA3AE750494098F68AD0B4D091256939EEA243643
SHA-512:	315D1B4CC2E70C72D7EB7D51E0F304F6E64AC13AE301FD2E46D585243A6C936B2AD35A0964745D291AE9B317C316A29760B9B9782C88CC6A68599DB531F87D59
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir1896_263895066\CRX_INSTALL\content_new.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8604), with no line terminators
Category:	dropped
Size (bytes):	10388
Entropy (8bit):	6.174387413738973
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
MD5:	3DE1E7D989C232FC1B58F4E32DE15D64
SHA1:	42B152EA7E7F31A964914F344543B8BF14B5F558
SHA-256:	D4AA4602A1590A4B8A1BCE8B8D670264C9FB532ADC97A72BC10C43343650385A
SHA-512:	177E5BDF3A1149B0229B6297BAF7B122602F7BD753F96AA41CCF2D15B2BCF6AF368A39BB20336CCCE121645EC097F6BEDB94666C74ACB6174EB728FBFC43BC2A
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir1896_263895066\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	962
Entropy (8bit):	5.698567446030411
Encrypted:	false
SSDEEP:	24:1Hg9+D3DRnbuF2+sUrzUu+Y9VwE+Fg41T1O:NBqY+6E+F7JO
MD5:	E805E9E69FD6ECDCA65136957B1FB3BE
SHA1:	2356F60884130C86A45D4B232A26062C7830E622
SHA-256:	5694C91F7D165C6F25DAF0825C18B373B0A81EA122C89DA60438CD487455FD6A
SHA-512:	049662EF470D2B9E030A06006894041AE6F787449E4AB1FBF4959ADCB88C6BB87A957490212697815BB3627763C01B7B243CF4E3C4620173A95795884D998A75
Malicious:	false
Preview:	{.. "content_scripts": [ {.. "js": [ "content.js" ],.. "matches": [ "https://chrome.google.com/webstore/" ].. }, {.. "js": [ "content_new.js" ],.. "matches": [ "https://chromewebstore.google.com/" ].. } ],.. "description": "Edge relevant text changes on select websites to improve user experience and precisely surfaces the action they want to take.",.. "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu06p2Mjoy6yJDUUjCe8Hnqvtmjll73XqcbylxFZZWe+MCEAEK+1D0Nxrp0+IuWJL02CU3jbuR5KrJYoezA36M1oSGY5lIF/9NhXWEx5GrosxcBjxqEsdWv/eDoOOEbIvIO0ziMv7T1SUnmAA07wwq8DXWYuwlkZU/PA0Mxx0aNZ5+QyMfYqRmMpwxkwPG8gyU7kmacxgCY1v7PmmZo1vSIEOBYrxl064w5Q6s/dpalSJM9qeRnvRMLsszGY/J2bjQ1F0O2JfIlBjCOUg/89+U8ZJ1mObOFrKO4um8QnenXtH0WGmsvb5qBNrvbWNPuFgr2+w5JYlpSQ+O8zUCb8QZwIDAQAB",.. "manifest_version": 3,.. "name": "Edge relevant text changes",.. "update_url": "https://edge.microsoft.com/extensionwebstorebase/v1/crx",.. "version": "1.2.1"..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\9792a86d-11fe-4f61-ab23-3b8e15fdf162.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	138356
Entropy (8bit):	7.809609231921042
Encrypted:	false
SSDEEP:	3072:AQ++ZdS5+fnwcxO+XwquyeNnmraugZ/1DOoncWD/5q:AQ++/PZmlyeNnh/1SmRq
MD5:	3F6F93C3DCCD4A91C4EB25C7F6FEB1C1
SHA1:	9B73F46ADFA1F4464929B408407E73D4535C6827
SHA-256:	19F05352CB4C6E231C1C000B6C8B7E9EDCC1E8082CAF46FFF16B239D32AA7C9E
SHA-512:	D488FA67E3A29D0147E9EAF2EABC74D9A255F8470CF79A4AEA60E3B3B5E48A3FCBC4FC3E9CE58DFF8D7D0CAA8AE749295F221E1FE1BA5D20DEB2D97544A12BA4
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[........q.a.....E..i.t,..7C..7!...`l.-.......T.vH...~.....'..aH..C.oJOE..d..2..$J......I..;.(9l.(..+.N.6.@...].a.n.S.6..=.b.W.\....o...#.~J.W.1..E...2H....S.g0....../.H...y.O8...kE.,..m!..F.D.p......H..s.W ...#.L........Ij.........-..n..\..vD.d.V.....!......[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. ?Eq.M...[6^...+.].G..Y]...7..o.. U...v....P.J...@.E!...B.d..p..i".%............oo.<....~=..!t.+...`....h..LK....0....h...,.R%.....u...._..V_.q:_._..5}.uS\.....x?...~]..C-....S=L...._c.P.B....-M...62.i*.Q.....9.....+S=...../6:...W..ql/g..&j.y..{.."....\|..F....\|....V....w.%t.y..?..&..a..<.n....S+\|..=.ra.....

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\128.png

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4982
Entropy (8bit):	7.929761711048726
Encrypted:	false
SSDEEP:	96:L7Rf7U1ylWb3KfyEfOXE+PIcvBirQFiAql1ZwKREkXCSAk:pTvWqfD+gl0sAql1u7kySAk
MD5:	913064ADAAA4C4FA2A9D011B66B33183
SHA1:	99EA751AC2597A080706C690612AEEEE43161FC1
SHA-256:	AFB4CE8882EF7AE80976EBA7D87F6E07FCDDC8E9E84747E8D747D1E996DEA8EB
SHA-512:	162BF69B1AD5122C6154C111816E4B87A8222E6994A72743ED5382D571D293E1467A2ED2FC6CC27789B644943CF617A56DA530B6A6142680C5B2497579A632B5
Malicious:	false
Preview:	.PNG........IHDR..............>a....=IDATx..]}...U..;...O.Q..QH.I(....v..E....GUb..R[.4@%..hK..B..(.B..". ....&)U#.%...jZ...JC.8.....{.cfvgf.3;.....}ow.....{...P.B...T.P.B...*Tx...=.Q..wv.w.....\|.e.1.$.P.?..l_\.n.}...~.g.....Q...A.f....m.....{,...C2 %..X.......FE.1.N..f...Q..D.K87.....:g..Q.{............3@$.8.....{.....q....G.. .....5..y......)XK..F...D.......... ."8...J#.eM.i....H.E.....a.RIP.`......)..T.....! .[p`X.`..L.a....e. .T..2.....H..p$..02...j....\..........s{...Ymm~.a........f.$./.[.{..C.2:.0..6..]....`....NW.....0..o.T..$;k.2......_...k..{,.+........{..6...L..... .dw...l$..}...K...EV....0......P...e....k....+Go....qw.9.1...X2\..qfw0v.....N...{...l.."....f.A..I..+#.v....'..~E.N-k.........{...l.$..ga..1...$......x$X=}.N..S..B$p..`..`.ZG:c..RA.(.0......Gg.A.I..>...3u.u........_..KO.m.........C...,..c.......0...@_..m...-..7.......4LZ......j@.......\..'....u. QJ.:G..I`.w'B0..w.H..'b.0- ......\|..}./.....e..,.K.1........W.u.v. ...\.o

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\af\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	908
Entropy (8bit):	4.512512697156616
Encrypted:	false
SSDEEP:	12:1HASvgMTCBxNB+kCIww3v+BBJ/wjsV8lCBxeBeRiGTCSU8biHULaBg/4srCBhUJJ:1HAkkJ+kCIwEg/wwbw0PXa22QLWmSDg
MD5:	12403EBCCE3AE8287A9E823C0256D205
SHA1:	C82D43C501FAE24BFE05DB8B8F95ED1C9AC54037
SHA-256:	B40BDE5B612CFFF936370B32FB0C58CC205FC89937729504C6C0B527B60E2CBA
SHA-512:	153401ECDB13086D2F65F9B9F20ACB3CEFE5E2AEFF1C31BA021BE35BF08AB0634812C33D1D34DA270E5693A8048FC5E2085E30974F6A703F75EA1622A0CA0FFD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKEP NUWE".. },.. "explanationofflinedisabled": {.. "message": "Jy is vanlyn. As jy Google Dokumente sonder 'n internetverbinding wil gebruik, moet jy die volgende keer as jy aan die internet gekoppel is na instellings op die Google Dokumente-tuisblad gaan en vanlynsinkronisering aanskakel.".. },.. "explanationofflineenabled": {.. "message": "Jy is vanlyn, maar jy kan nog steeds beskikbare l.ers redigeer of nuwes skep.".. },.. "extdesc": {.. "message": "Skep, wysig en bekyk jou dokumente, sigblaaie en aanbiedings . alles sonder toegang tot die internet.".. },.. "extname": {.. "message": "Google Vanlyn Dokumente".. },.. "learnmore": {.. "message": "Kom meer te wete".. },.. "popuphelptext": {.. "message": "Skryf, redigeer en werk saam, waar jy ook al is, met of sonder 'n internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\am\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1285
Entropy (8bit):	4.702209356847184
Encrypted:	false
SSDEEP:	24:1HAn6bfEpxtmqMI91ivWjm/6GcCIoToCZzlgkX/Mj:W6bMt3MITFjm/Pcd4oCZhg6k
MD5:	9721EBCE89EC51EB2BAEB4159E2E4D8C
SHA1:	58979859B28513608626B563138097DC19236F1F
SHA-256:	3D0361A85ADFCD35D0DE74135723A75B646965E775188F7DCDD35E3E42DB788E
SHA-512:	FA3689E8663565D3C1C923C81A620B006EA69C99FB1EB15D07F8F45192ED9175A6A92315FA424159C1163382A3707B25B5FC23E590300C62CBE2DACE79D84871
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ...".. },.. "explanationofflinedisabled": {.. "message": "..... .. .... Google ..... ........ ..... ..... .Google .... ... .. .. .. ..... .... ....... .. ....... ... .. .. ..... .. ..... ....".. },.. "explanationofflineenabled": {.. "message": "..... .. .... ... .. .... .... ..... .... ... ..... .... .....".. },.. "extdesc": {.. "message": "...... ..... .... ... .. ..... ...... ..... .... .. ..... . .... .. ...... .....".. },.. "extname": {.. "message": "..... .. Goog

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\ar\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1244
Entropy (8bit):	4.5533961615623735
Encrypted:	false
SSDEEP:	12:1HASvgPCBxNhieFTr9ogjIxurIyJCCBxeh6wAZKn7uCSUhStuysUm+WCBhSueW1Y:1HAgJzoaC6VEn7Css8yoXzzd
MD5:	3EC93EA8F8422FDA079F8E5B3F386A73
SHA1:	24640131CCFB21D9BC3373C0661DA02D50350C15
SHA-256:	ABD0919121956AB535E6A235DE67764F46CFC944071FCF2302148F5FB0E8C65A
SHA-512:	F40E879F85BC9B8120A9B7357ED44C22C075BF065F45BEA42BD5316AF929CBD035D5D6C35734E454AEF5B79D378E51A77A71FA23F9EBD0B3754159718FCEB95C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....".. },.. "explanationofflinedisabled": {.. "message": "... ... ...... ........ ....... Google ... ..... .......... ..... ... ......... .. ...... ........ ........ Google ..... ........ ... ..... .. ..... ....... .... .... .... ..........".. },.. "explanationofflineenabled": {.. "message": "... ... ...... .... .. .... ....... ..... ....... ....... .. ..... ..... ......".. },.. "extdesc": {.. "message": "..... ......... ...... ........ ....... ......... ........ ....... .. ... ... ..... .........".. },.. "extname": {.. "message": "....... Google ... ......".. },.. "learnmore": {.. "messa

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\az\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.867640976960053
Encrypted:	false
SSDEEP:	24:1HAWNjbwlmyuAoW32Md+80cVLdUSERHtRo3SjX:J3wlzs42m+8TV+S4H0CjX
MD5:	9A798FD298008074E59ECC253E2F2933
SHA1:	1E93DA985E880F3D3350FC94F5CCC498EFC8C813
SHA-256:	628145F4281FA825D75F1E332998904466ABD050E8B0DC8BB9B6A20488D78A66
SHA-512:	9094480379F5AB711B3C32C55FD162290CB0031644EA09A145E2EF315DA12F2E55369D824AF218C3A7C37DD9A276AEEC127D8B3627D3AB45A14B0191ED2BBE70
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN.S.N. YARADIN".. },.. "explanationofflinedisabled": {.. "message": "Oflayns.n.z. Google S.n.di internet ba.lant.s. olmadan istifad. etm.k ist.yirsinizs., Google S.n.din .sas s.hif.sind. ayarlara gedin v. n.vb.ti d.f. internet. qo.ulanda oflayn sinxronizasiyan. aktiv edin.".. },.. "explanationofflineenabled": {.. "message": "Oflayns.n.z, amma m.vcud fayllar. redakt. ed. v. yenil.rini yarada bil.rsiniz.".. },.. "extdesc": {.. "message": "S.n.d, c.dv.l v. t.qdimatlar.n ham.s.n. internet olmadan redakt. edin, yarad.n v. bax.n.".. },.. "extname": {.. "message": "Google S.n.d Oflayn".. },.. "learnmore": {.. "message": ".trafl. M.lumat".. },.. "popuphelptext": {.. "message": "Harda olma..n.zdan v. internet. qo.ulu olub-olmad...n.zdan as.l. olmayaraq, yaz.n, redakt. edin v. .m.kda.l.q edin.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\be\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3107
Entropy (8bit):	3.535189746470889
Encrypted:	false
SSDEEP:	48:YOWdTQ0QRk+QyJQAy6Qg4QWSe+QECTQLHQlQIfyQ0fnWQjQDrTQik+QvkZTQ+89b:GdTbyRvwgbCTEHQhyVues9oOT3rOCkV
MD5:	68884DFDA320B85F9FC5244C2DD00568
SHA1:	FD9C01E03320560CBBB91DC3D1917C96D792A549
SHA-256:	DDF16859A15F3EB3334D6241975CA3988AC3EAFC3D96452AC3A4AFD3644C8550
SHA-512:	7FF0FBD555B1F9A9A4E36B745CBFCAD47B33024664F0D99E8C080BE541420D1955D35D04B5E973C07725573E592CD0DD84FDBB867C63482BAFF6929ADA27CCDE
Malicious:	false
Preview:	{"createnew":{"message":"\u0421\u0422\u0412\u0410\u0420\u042b\u0426\u042c \u041d\u041e\u0412\u042b"},"explanationofflinedisabled":{"message":"\u0412\u044b \u045e \u043f\u0430\u0437\u0430\u0441\u0435\u0442\u043a\u0430\u0432\u044b\u043c \u0440\u044d\u0436\u044b\u043c\u0435. \u041a\u0430\u0431 \u043a\u0430\u0440\u044b\u0441\u0442\u0430\u0446\u0446\u0430 \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0456 Google \u0431\u0435\u0437 \u043f\u0430\u0434\u043a\u043b\u044e\u0447\u044d\u043d\u043d\u044f \u0434\u0430 \u0456\u043d\u0442\u044d\u0440\u043d\u044d\u0442\u0443, \u043f\u0435\u0440\u0430\u0439\u0434\u0437\u0456\u0446\u0435 \u0434\u0430 \u043d\u0430\u043b\u0430\u0434 \u043d\u0430 \u0433\u0430\u043b\u043e\u045e\u043d\u0430\u0439 \u0441\u0442\u0430\u0440\u043e\u043d\u0446\u044b \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u045e Google \u0456 \u045e\u043a\u043b\u044e\u0447\u044b\u0446\u0435 \u0441\u0456\u043d\u0445\u0440\u0430\u043d\u0456\u0437\u0430\u0446\u044b\u044e

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\bg\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1389
Entropy (8bit):	4.561317517930672
Encrypted:	false
SSDEEP:	24:1HAp1DQqUfZ+Yann08VOeadclUZbyMzZzsYvwUNn7nOyRK8/nn08V7:g1UTfZ+Ya08Uey3tflCRE08h
MD5:	2E6423F38E148AC5A5A041B1D5989CC0
SHA1:	88966FFE39510C06CD9F710DFAC8545672FFDCEB
SHA-256:	AC4A8B5B7C0B0DD1C07910F30DCFBDF1BCB701CFCFD182B6153FD3911D566C0E
SHA-512:	891FCDC6F07337970518322C69C6026896DD3588F41F1E6C8A1D91204412CAE01808F87F9F2DEA1754458D70F51C3CEF5F12A9E3FC011165A42B0844C75EC683
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. .. .......... Google ......... ... ........ ......, ........ ........... . ......... ........ .. Google ......... . ........ ...... .............. ......... ..., ...... ..... ...... . .........".. },.. "explanationofflineenabled": {.. "message": "...... ..., .. ... ...... .. ........... ......... ....... ... .. ......... .....".. },.. "extdesc": {.. "message": "............, .......... . ............ ...... ........., .......... ....... . ........... . ...... .... ... ...... .. .........".. },..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\bn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1763
Entropy (8bit):	4.25392954144533
Encrypted:	false
SSDEEP:	24:1HABGtNOtIyHmVd+q+3X2AFl2DhrR7FAWS9+SMzI8QVAEq8yB0XtfOyvU7D:oshmm/+H2Ml2DrFPS9+S99EzBd7D
MD5:	651375C6AF22E2BCD228347A45E3C2C9
SHA1:	109AC3A912326171D77869854D7300385F6E628C
SHA-256:	1DBF38E425C5C7FC39E8077A837DF0443692463BA1FBE94E288AB5A93242C46E
SHA-512:	958AA7CF645FAB991F2ECA0937BA734861B373FB1C8BCC001599BE57C65E0917F7833A971D93A7A6423C5F54A4839D3A4D5F100C26EFA0D2A068516953989F9D
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ....".. },.. "explanationofflinedisabled": {.. "message": ".... ....... ....... .... ......... ..... ..... Google ........ ....... ...., Google .......... ........ ....... ... ... .... ... .... ... ........... .... ....... .... ... ...... ..... .... .....".. },.. "explanationofflineenabled": {.. "message": ".... ....... ......, ...... .... .... ...... .......... ........ .... .. .... .... .... .... .......".. },.. "extdesc":

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\ca\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	930
Entropy (8bit):	4.569672473374877
Encrypted:	false
SSDEEP:	12:1HASvggoSCBxNFT0sXuqgEHQ2fTq9blUJYUJaw9CBxejZFPLOjCSUuE44pMiiDat:1HAtqs+BEHGpURxSp1iUPWCAXtRKe
MD5:	D177261FFE5F8AB4B3796D26835F8331
SHA1:	4BE708E2FFE0F018AC183003B74353AD646C1657
SHA-256:	D6E65238187A430FF29D4C10CF1C46B3F0FA4B91A5900A17C5DFD16E67FFC9BD
SHA-512:	E7D730304AED78C0F4A78DADBF835A22B3D8114FB41D67B2B26F4FE938B572763D3E127B7C1C81EBE7D538DA976A7A1E7ADC40F918F88AFADEA2201AE8AB47D0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA'N UN DE NOU".. },.. "explanationofflinedisabled": {.. "message": "No tens connexi.. Per utilitzar Documents de Google sense connexi. a Internet, ves a la configuraci. de la p.gina d'inici d'aquest servei i activa l'opci. per sincronitzar-se sense connexi. la propera vegada que estiguis connectat a la xarxa.".. },.. "explanationofflineenabled": {.. "message": "Tot i que no tens connexi., pots editar o crear fitxers.".. },.. "extdesc": {.. "message": "Edita, crea i consulta documents, fulls de c.lcul i presentacions, tot sense acc.s a Internet.".. },.. "extname": {.. "message": "Documents de Google sense connexi.".. },.. "learnmore": {.. "message": "M.s informaci.".. },.. "popuphelptext": {.. "message": "Escriu text, edita fitxers i col.labora-hi siguis on siguis, amb o sense connexi. a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\cs\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	913
Entropy (8bit):	4.947221919047
Encrypted:	false
SSDEEP:	12:1HASvgdsbCBxNBmobXP15Dxoo60n40h6qCBxeBeGG/9jZCSUKFPDLZ2B2hCBhPLm:1HApJmoZ5e50nzQhwAd7dvYB2kDSGGKs
MD5:	CCB00C63E4814F7C46B06E4A142F2DE9
SHA1:	860936B2A500CE09498B07A457E0CCA6B69C5C23
SHA-256:	21AE66CE537095408D21670585AD12599B0F575FF2CB3EE34E3A48F8CC71CFAB
SHA-512:	35839DAC6C985A6CA11C1BFF5B8B5E59DB501FCB91298E2C41CB0816B6101BF322445B249EAEA0CEF38F76D73A4E198F2B6E25EEA8D8A94EA6007D386D4F1055
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVO.IT".. },.. "explanationofflinedisabled": {.. "message": "Jste offline. Pokud chcete Dokumenty Google pou..vat bez p.ipojen. k.internetu, a. budete p...t. online, p.ejd.te do nastaven. na domovsk. str.nce Dokument. Google a.zapn.te offline synchronizaci.".. },.. "explanationofflineenabled": {.. "message": "Jste offline, ale st.le m..ete upravovat dostupn. soubory nebo vytv..et nov..".. },.. "extdesc": {.. "message": "Upravujte, vytv..ejte a.zobrazujte sv. dokumenty, tabulky a.prezentace . v.e bez p..stupu k.internetu.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Dal.. informace".. },.. "popuphelptext": {.. "message": "Pi.te, upravujte a.spolupracujte kdekoli, s.p.ipojen.m k.internetu i.bez n.j.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\cy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	806
Entropy (8bit):	4.815663786215102
Encrypted:	false
SSDEEP:	12:YGo35xMxy6gLr4Dn1eBVa1xzxyn1VFQB6FDVgdAJex9QH7uy+XJEjENK32J21j:Y735+yoeeRG54uDmdXx9Q7u3r83Xj
MD5:	A86407C6F20818972B80B9384ACFBBED
SHA1:	D1531CD0701371E95D2A6BB5EDCB79B949D65E7C
SHA-256:	A482663292A913B02A9CDE4635C7C92270BF3C8726FD274475DC2C490019A7C9
SHA-512:	D9FBF675514A890E9656F83572208830C6D977E34D5744C298A012515BC7EB5A17726ADD0D9078501393BABD65387C4F4D3AC0CC0F7C60C72E09F336DCA88DE7
Malicious:	false
Preview:	{"createnew":{"message":"CREU NEWYDD"},"explanationofflinedisabled":{"message":"Rydych chi all-lein. I ddefnyddio Dogfennau Google heb gysylltiad \u00e2'r rhyngrwyd, ewch i'r gosodiadau ar dudalen hafan Dogfennau Google a throi 'offine sync' ymlaen y tro nesaf y byddwch wedi'ch cysylltu \u00e2'r rhyngrwyd."},"explanationofflineenabled":{"message":"Rydych chi all-lein, ond gallwch barhau i olygu'r ffeiliau sydd ar gael neu greu rhai newydd."},"extdesc":{"message":"Gallwch olygu, creu a gweld eich dogfennau, taenlenni a chyflwyniadau \u2013 i gyd heb fynediad i'r rhyngrwyd."},"extname":{"message":"Dogfennau Google All-lein"},"learnmore":{"message":"DYSGU MWY"},"popuphelptext":{"message":"Ysgrifennwch, golygwch a chydweithiwch lle bynnag yr ydych, gyda chysylltiad \u00e2'r rhyngrwyd neu hebddo."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\da\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	883
Entropy (8bit):	4.5096240460083905
Encrypted:	false
SSDEEP:	24:1HA4EFkQdUULMnf1yo+9qgpukAXW9bGJTvDyqdr:zEFkegfw9qwAXWNs/yu
MD5:	B922F7FD0E8CCAC31B411FC26542C5BA
SHA1:	2D25E153983E311E44A3A348B7D97AF9AAD21A30
SHA-256:	48847D57C75AF51A44CBF8F7EF1A4496C2007E58ED56D340724FDA1604FF9195
SHA-512:	AD0954DEEB17AF04858DD5EC3D3B3DA12DFF7A666AF4061DEB6FD492992D95DB3BAF751AB6A59BEC7AB22117103A93496E07632C2FC724623BB3ACF2CA6093F3
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPRET NYT".. },.. "explanationofflinedisabled": {.. "message": "Du er offline. Hvis du vil bruge Google Docs uden en internetforbindelse, kan du g. til indstillinger p. startsiden for Google Docs og aktivere offlinesynkronisering, n.ste gang du har internetforbindelse.".. },.. "explanationofflineenabled": {.. "message": "Du er offline, men du kan stadig redigere tilg.ngelige filer eller oprette nye.".. },.. "extdesc": {.. "message": "Rediger, opret og se dine dokumenter, regneark og pr.sentationer helt uden internetadgang.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "F. flere oplysninger".. },.. "popuphelptext": {.. "message": "Skriv, rediger og samarbejd, uanset hvor du er, og uanset om du har internetforbindelse.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\de\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1031
Entropy (8bit):	4.621865814402898
Encrypted:	false
SSDEEP:	24:1HA6sZnqWd77ykJzCkhRhoe1HMNaAJPwG/p98HKpy2kX/R:WZqWxykJzthRhoQma+tpyHX2O/R
MD5:	D116453277CC860D196887CEC6432FFE
SHA1:	0AE00288FDE696795CC62FD36EABC507AB6F4EA4
SHA-256:	36AC525FA6E28F18572D71D75293970E0E1EAD68F358C20DA4FDC643EEA2C1C5
SHA-512:	C788C3202A27EC220E3232AE25E3C855F3FDB8F124848F46A3D89510C564641A2DFEA86D5014CEA20D3D2D3C1405C96DBEB7CCAD910D65C55A32FDCA8A33FDD4
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NEU ERSTELLEN".. },.. "explanationofflinedisabled": {.. "message": "Sie sind offline. Um Google Docs ohne Internetverbindung zu verwenden, gehen Sie auf der Google Docs-Startseite auf \"Einstellungen\" und schalten die Offlinesynchronisierung ein, wenn Sie das n.chste Mal mit dem Internet verbunden sind.".. },.. "explanationofflineenabled": {.. "message": "Sie sind offline, aber k.nnen weiterhin verf.gbare Dateien bearbeiten oder neue Dateien erstellen.".. },.. "extdesc": {.. "message": "Mit der Erweiterung k.nnen Sie Dokumente, Tabellen und Pr.sentationen bearbeiten, erstellen und aufrufen.. ganz ohne Internetverbindung.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Weitere Informationen".. },.. "popuphelptext": {.. "message": "Mit oder ohne Internetverbindung: Sie k.nnen von .berall Dokumente erstellen, .ndern und zusammen mit anderen

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\el\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1613
Entropy (8bit):	4.618182455684241
Encrypted:	false
SSDEEP:	24:1HAJKan4EITDZGoziRAc2Z8eEfkTJfLhGX7b0UBNoAcGpVyhxefSmuq:SKzTD0IK85JlwsGOUyaSk
MD5:	9ABA4337C670C6349BA38FDDC27C2106
SHA1:	1FC33BE9AB4AD99216629BC89FBB30E7AA42B812
SHA-256:	37CA6AB271D6E7C9B00B846FDB969811C9CE7864A85B5714027050795EA24F00
SHA-512:	8564F93AD8485C06034A89421CE74A4E719BBAC865E33A7ED0B87BAA80B7F7E54B240266F2EDB595DF4E6816144428DB8BE18A4252CBDCC1E37B9ECC9F9D7897
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......... ....".. },.. "explanationofflinedisabled": {.. "message": "..... ..... ......... ... .. ............... .. ....... Google ..... ....... ... ........., ......... .... ......... .... ...... ...... ... ........ Google ... ............. ... ........... ..... ........ ... ....... .... ... .. ..... ............ ... ..........".. },.. "explanationofflineenabled": {.. "message": "..... ..... ........ .... ........ .. .............. .. ......... ...... . .. ............. ... .......".. },.. "extdesc": {.. "message": ".............., ............ ... ..... .. ......., .

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\en\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\en_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\en_GB\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	848
Entropy (8bit):	4.494568170878587
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3vRyc1NzXW6iFrSCBxesJGceKCSUuvlvOgwCBhUufz1tnaXrQ:1HA3djfR3NzXviFrJj4sJXJ+bA6RM
MD5:	3734D498FB377CF5E4E2508B8131C0FA
SHA1:	AA23E39BFE526B5E3379DE04E00EACBA89C55ADE
SHA-256:	AB5CDA04013DCE0195E80AF714FBF3A67675283768FFD062CF3CF16EDB49F5D4
SHA-512:	56D9C792954214B0DE56558983F7EB7805AC330AF00E944E734340BE41C68E5DD03EDDB17A63BC2AB99BDD9BE1F2E2DA5BE8BA7C43D938A67151082A9041C7BA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an Internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the Internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create and view your documents, spreadsheets and presentations . all without Internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn more".. },.. "popuphelptext": {.. "message": "Write, edit and collaborate wherever you are, with or without an Internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\en_US\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1425
Entropy (8bit):	4.461560329690825
Encrypted:	false
SSDEEP:	24:1HA6Krbbds5Kna/BNzXviFrpsCxKU4irpNQ0+qWK5yOJAaCB7MAa6:BKrbBs5Kna/BNzXvi3sCxKZirA0jWK5m
MD5:	578215FBB8C12CB7E6CD73FBD16EC994
SHA1:	9471D71FA6D82CE1863B74E24237AD4FD9477187
SHA-256:	102B586B197EA7D6EDFEB874B97F95B05D229EA6A92780EA8544C4FF1E6BC5B1
SHA-512:	E698B1A6A6ED6963182F7D25AC12C6DE06C45D14499DDC91E81BDB35474E7EC9071CFEBD869B7D129CB2CD127BC1442C75E408E21EB8E5E6906A607A3982B212
Malicious:	false
Preview:	{.. "createNew": {.. "description": "Text shown in the extension pop up for creating a new document",.. "message": "CREATE NEW".. },.. "explanationOfflineDisabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is disabled.",.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationOfflineEnabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is enabled.",.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extDesc": {.. "description": "Extension description",.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extName": {.. "description": "Extension name",..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\es\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	961
Entropy (8bit):	4.537633413451255
Encrypted:	false
SSDEEP:	12:1HASvggeCBxNFxcw2CVcfamedatqWCCBxeFxCF/m+rWAaFQbCSUuExqIQdO06stp:1HAqn0gcfa9dc/5mCpmIWck02USfWmk
MD5:	F61916A206AC0E971CDCB63B29E580E3
SHA1:	994B8C985DC1E161655D6E553146FB84D0030619
SHA-256:	2008F4FAAB71AB8C76A5D8811AD40102C380B6B929CE0BCE9C378A7CADFC05EB
SHA-512:	D9C63B2F99015355ACA04D74A27FD6B81170750C4B4BE7293390DC81EF4CD920EE9184B05C61DC8979B6C2783528949A4AE7180DBF460A2620DBB0D3FD7A05CF
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a Configuraci.n en la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que te conectes a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n. Aun as., puedes crear archivos o editar los que est.n disponibles.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones; todo ello, sin acceso a Internet.".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe o edita contenido y colabora con otras personas desde cualquier lugar, con o sin conexi.n a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\es_419\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	959
Entropy (8bit):	4.570019855018913
Encrypted:	false
SSDEEP:	24:1HARn05cfa9dcDmQOTtSprj0zaGUSjSGZ:+n0CfMcDmQOTQprj4qpC
MD5:	535331F8FB98894877811B14994FEA9D
SHA1:	42475E6AFB6A8AE41E2FC2B9949189EF9BBE09FB
SHA-256:	90A560FF82605DB7EDA26C90331650FF9E42C0B596CEDB79B23598DEC1B4988F
SHA-512:	2CE9C69E901AB5F766E6CFC1E592E1AF5A07AA78D154CCBB7898519A12E6B42A21C5052A86783ABE3E7A05043D4BD41B28960FEDDB30169FF7F7FE7208C8CFE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NUEVO".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a la configuraci.n de la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que est.s conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n, pero a.n puedes modificar los archivos disponibles o crear otros nuevos.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones aunque no tengas acceso a Internet".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, modifica y colabora dondequiera que est.s, con conexi.n a Internet o sin ella.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\et\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	968
Entropy (8bit):	4.633956349931516
Encrypted:	false
SSDEEP:	24:1HA5WG6t306+9sihHvMfdJLjUk4NJPNczGr:mWGY0cOUdJODPmzs
MD5:	64204786E7A7C1ED9C241F1C59B81007
SHA1:	586528E87CD670249A44FB9C54B1796E40CDB794
SHA-256:	CC31B877238DA6C1D51D9A6155FDE565727A1956572F466C387B7E41C4923A29
SHA-512:	44FCF93F3FB10A3DB68D74F9453995995AB2D16863EC89779DB451A4D90F19743B8F51095EEC3ECEF5BD0C5C60D1BF3DFB0D64DF288DCCFBE70C129AE350B2C6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LOO UUS".. },.. "explanationofflinedisabled": {.. "message": "Teil ei ole v.rgu.hendust. Teenuse Google.i dokumendid kasutamiseks ilma Interneti-.henduseta avage j.rgmine kord, kui olete Internetiga .hendatud, teenuse Google.i dokumendid avalehel seaded ja l.litage sisse v.rgu.henduseta s.nkroonimine.".. },.. "explanationofflineenabled": {.. "message": "Teil ei ole v.rgu.hendust, kuid saate endiselt saadaolevaid faile muuta v.i uusi luua.".. },.. "extdesc": {.. "message": "Saate luua, muuta ja vaadata oma dokumente, arvustustabeleid ning esitlusi ilma Interneti-.henduseta.".. },.. "extname": {.. "message": "V.rgu.henduseta Google.i dokumendid".. },.. "learnmore": {.. "message": "Lisateave".. },.. "popuphelptext": {.. "message": "Kirjutage, muutke ja tehke koost..d .ksk.ik kus olenemata sellest, kas teil on Interneti-.hendus.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\eu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	838
Entropy (8bit):	4.4975520913636595
Encrypted:	false
SSDEEP:	24:YnmjggqTWngosqYQqE1kjO39m7OddC0vjWQMmWgqwgQ8KLcxOb:Ynmsgqyngosq9qxTOs0vjWQMbgqchb
MD5:	29A1DA4ACB4C9D04F080BB101E204E93
SHA1:	2D0E4587DDD4BAC1C90E79A88AF3BD2C140B53B1
SHA-256:	A41670D52423BA69C7A65E7E153E7B9994E8DD0370C584BDA0714BD61C49C578
SHA-512:	B7B7A5A0AA8F6724B0FA15D65F25286D9C66873F03080CBABA037BDEEA6AADC678AC4F083BC52C2DB01BEB1B41A755ED67BBDDB9C0FE4E35A004537A3F7FC458
Malicious:	false
Preview:	{"createnew":{"message":"SORTU"},"explanationofflinedisabled":{"message":"Ez zaude konektatuta Internetera. Google Dokumentuak konexiorik gabe erabiltzeko, joan Google Dokumentuak zerbitzuaren orri nagusiko ezarpenetara eta aktibatu konexiorik gabeko sinkronizazioa Internetera konektatzen zaren hurrengoan."},"explanationofflineenabled":{"message":"Ez zaude konektatuta Internetera, baina erabilgarri dauden fitxategiak edita ditzakezu, baita beste batzuk sortu ere."},"extdesc":{"message":"Editatu, sortu eta ikusi dokumentuak, kalkulu-orriak eta aurkezpenak Interneteko konexiorik gabe."},"extname":{"message":"Google Dokumentuak konexiorik gabe"},"learnmore":{"message":"Lortu informazio gehiago"},"popuphelptext":{"message":"Edonon zaudela ere, ez duzu zertan konektatuta egon idatzi, editatu eta lankidetzan jardun ahal izateko."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\fa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1305
Entropy (8bit):	4.673517697192589
Encrypted:	false
SSDEEP:	24:1HAX9yM7oiI99Rwx4xyQakJbfAEJhmq/RlBu92P7FbNcgYVJ0:JM7ovex4xyQaKjAEyq/p7taX0
MD5:	097F3BA8DE41A0AAF436C783DCFE7EF3
SHA1:	986B8CABD794E08C7AD41F0F35C93E4824AC84DF
SHA-256:	7C4C09D19AC4DA30CC0F7F521825F44C4DFBC19482A127FBFB2B74B3468F48F1
SHA-512:	8114EA7422E3B20AE3F08A3A64A6FFE1517A7579A3243919B8F789EB52C68D6F5A591F7B4D16CEE4BD337FF4DAF4057D81695732E5F7D9E761D04F859359FADB
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ... ....".. },.. "explanationofflinedisabled": {.. "message": "...... ...... .... ....... .. ....... Google .... ..... ........ .... ... .. .. ....... ... ..... .. ....... .. .... .... ....... Google ..... . .......... ...... .. .... .....".. },.. "explanationofflineenabled": {.. "message": "...... ..... ... ...... ......... ......... .. .. .. ..... ..... ...... .... .. ........ ..... ..... .....".. },.. "extdesc": {.. "message": "...... ............ . ........ .. ....... ..... . ...... .... . ... ... ..... .... ...... .. ........".. },.. "extname": {.. "message": "....... Google .

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\fi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	911
Entropy (8bit):	4.6294343834070935
Encrypted:	false
SSDEEP:	12:1HASvguCBxNMME2BESA7gPQk36xCBxeMMcXYBt+CSU1pfazCBhUunV1tLaX5GI2N:1HAVioESAsPf36O3Xst/p3J8JeEY
MD5:	B38CBD6C2C5BFAA6EE252D573A0B12A1
SHA1:	2E490D5A4942D2455C3E751F96BD9960F93C4B60
SHA-256:	2D752A5DBE80E34EA9A18C958B4C754F3BC10D63279484E4DF5880B8FD1894D2
SHA-512:	6E65207F4D8212736059CC802C6A7104E71A9CC0935E07BD13D17EC46EA26D10BC87AD923CD84D78781E4F93231A11CB9ED8D3558877B6B0D52C07CB005F1C0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LUO UUSI".. },.. "explanationofflinedisabled": {.. "message": "Olet offline-tilassa. Jos haluat k.ytt.. Google Docsia ilman internetyhteytt., siirry Google Docsin etusivulle ja ota asetuksissa k.ytt..n offline-synkronointi, kun seuraavan kerran olet yhteydess. internetiin.".. },.. "explanationofflineenabled": {.. "message": "Olet offline-tilassa. Voit kuitenkin muokata k.ytett.viss. olevia tiedostoja tai luoda uusia.".. },.. "extdesc": {.. "message": "Muokkaa, luo ja katso dokumentteja, laskentataulukoita ja esityksi. ilman internetyhteytt..".. },.. "extname": {.. "message": "Google Docsin offline-tila".. },.. "learnmore": {.. "message": "Lis.tietoja".. },.. "popuphelptext": {.. "message": "Kirjoita, muokkaa ja tee yhteisty.t. paikasta riippumatta, my.s ilman internetyhteytt..".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\fil\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	939
Entropy (8bit):	4.451724169062555
Encrypted:	false
SSDEEP:	24:1HAXbH2eZXn6sjLITdRSJpGL/gWFJ3sqixO:ubHfZqsHIT/FLL3qO
MD5:	FCEA43D62605860FFF41BE26BAD80169
SHA1:	F25C2CE893D65666CC46EA267E3D1AA080A25F5B
SHA-256:	F51EEB7AAF5F2103C1043D520E5A4DE0FA75E4DC375E23A2C2C4AFD4D9293A72
SHA-512:	F66F113A26E5BCF54B9AAFA69DAE3C02C9C59BD5B9A05F829C92AF208C06DC8CCC7A1875CBB7B7CE425899E4BA27BFE8CE2CDAF43A00A1B9F95149E855989EE0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "GUMAWA NG BAGO".. },.. "explanationofflinedisabled": {.. "message": "Naka-offline ka. Upang magamit ang Google Docs nang walang koneksyon sa internet, pumunta sa mga setting sa homepage ng Google Docs at i-on ang offline na pag-sync sa susunod na nakakonekta ka sa internet.".. },.. "explanationofflineenabled": {.. "message": "Naka-offline ka, ngunit maaari mo pa ring i-edit ang mga available na file o gumawa ng mga bago.".. },.. "extdesc": {.. "message": "I-edit, gawin, at tingnan ang iyong mga dokumento, spreadsheet, at presentation . lahat ng ito nang walang access sa internet.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Matuto Pa".. },.. "popuphelptext": {.. "message": "Magsulat, mag-edit at makipag-collaborate nasaan ka man, nang mayroon o walang koneksyon sa internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\fr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.622066056638277
Encrypted:	false
SSDEEP:	24:1HAdy42ArMdsH50Jd6Z1PCBolXAJ+GgNHp0X16M1J1:EyfArMS2Jd6Z1PCBolX2+vNmX16Y1
MD5:	A58C0EEBD5DC6BB5D91DAF923BD3A2AA
SHA1:	F169870EEED333363950D0BCD5A46D712231E2AE
SHA-256:	0518287950A8B010FFC8D52554EB82E5D93B6C3571823B7CECA898906C11ABCC
SHA-512:	B04AFD61DE490BC838354E8DC6C22BE5C7AC6E55386FFF78489031ACBE2DBF1EAA2652366F7A1E62CE87CFCCB75576DA3B2645FEA1645B0ECEB38B1FA3A409E8
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour pouvoir utiliser Google.Docs sans connexion Internet, acc.dez aux param.tres de la page d'accueil de Google.Docs et activez la synchronisation hors connexion lors de votre prochaine connexion . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez quand m.me modifier les fichiers disponibles ou cr.er des fichiers.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez des documents, feuilles de calcul et pr.sentations, sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Docs hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": "R.digez des documents, modifiez-les et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\fr_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	972
Entropy (8bit):	4.621319511196614
Encrypted:	false
SSDEEP:	24:1HAdyg2pwbv1V8Cd61PC/vT2fg3YHDyM1J1:EyHpwbpd61C/72Y3YOY1
MD5:	6CAC04BDCC09034981B4AB567B00C296
SHA1:	84F4D0E89E30ED7B7ACD7644E4867FFDB346D2A5
SHA-256:	4CAA46656ECC46A420AA98D3307731E84F5AC1A89111D2E808A228C436D83834
SHA-512:	160590B6EC3DCF48F3EA7A5BAA11A8F6FA4131059469623E00AD273606B468B3A6E56D199E97DAA0ECB6C526260EBAE008570223F2822811F441D1C900DC33D6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour utiliser Google.Documents sans connexion Internet, acc.dez aux param.tres sur la page d'accueil Google.Documents et activez la synchronisation hors ligne la prochaine fois que vous .tes connect. . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez toujours modifier les fichiers disponibles ou en cr.er.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez vos documents, vos feuilles de calcul et vos pr.sentations, le tout sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Documents hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": ".crivez, modifiez et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\gl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	990
Entropy (8bit):	4.497202347098541
Encrypted:	false
SSDEEP:	12:1HASvggECBxNbWVqMjlMgaPLqXPhTth0CBxebWbMRCSUCjAKFCSIj0tR7tCBhP1l:1HACzWsMlajIhJhHKWbFKFC0tR8oNK5
MD5:	6BAAFEE2F718BEFBC7CD58A04CCC6C92
SHA1:	CE0BDDDA2FA1F0AD222B604C13FF116CBB6D02CF
SHA-256:	0CF098DFE5BBB46FC0132B3CF0C54B06B4D2C8390D847EE2A65D20F9B7480F4C
SHA-512:	3DA23E74CD6CF9C0E2A0C4DBA60301281D362FB0A2A908F39A55ABDCA4CC69AD55638C63CC3BEFD44DC032F9CBB9E2FDC1B4C4ABE292917DF8272BA25B82AF20
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est.s sen conexi.n. Para utilizar Documentos de Google sen conexi.n a Internet, accede .s opci.ns de configuraci.n na p.xina de inicio de Documentos de Google e activa a sincronizaci.n sen conexi.n a pr.xima vez que esteas conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "Est.s sen conexi.n. A.nda podes editar os ficheiros dispo.ibles ou crear outros novos.".. },.. "extdesc": {.. "message": "Modifica, crea e consulta os teus documentos, follas de c.lculo e presentaci.ns sen necesidade de acceder a Internet.".. },.. "extname": {.. "message": "Documentos de Google sen conexi.n".. },.. "learnmore": {.. "message": "M.is informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, edita e colabora esteas onde esteas, tanto se tes conexi.n a Internet como se non a tes.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\gu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1658
Entropy (8bit):	4.294833932445159
Encrypted:	false
SSDEEP:	24:1HA3k3FzEVeXWuvLujNzAK11RiqRC2sA0O3cEiZ7dPRFFOPtZdK0A41yG3BczKT3:Q4pE4rCjNjw6/0y+5j8ZHA4PBSKr
MD5:	BC7E1D09028B085B74CB4E04D8A90814
SHA1:	E28B2919F000B41B41209E56B7BF3A4448456CFE
SHA-256:	FE8218DF25DB54E633927C4A1640B1A41B8E6CB3360FA386B5382F833B0B237C
SHA-512:	040A8267D67DB05BBAA52F1FAC3460F58D35C5B73AA76BBF17FA78ACC6D3BFB796A870DD44638F9AC3967E35217578A20D6F0B975CEEEEDBADFC9F65BE7E72C9
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .....".. },.. "explanationofflinedisabled": {.. "message": "... ...... ... ........ ....... ... Google .......... ..... .... ...., ... .... .... ...... ........ .... ...... ... ...... Google ........ ...... .. ........ .. ... ... ...... ....... .... ....".. },.. "explanationofflineenabled": {.. "message": "... ...... .., ..... ... ... .. ...... ..... ....... ... ... .. .... ... ..... ... ...".. },.. "extdesc": {.. "message": "..... ........., ..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\hi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1672
Entropy (8bit):	4.314484457325167
Encrypted:	false
SSDEEP:	48:46G2+ymELbLNzGVx/hXdDtxSRhqv7Qm6/7Lm:4GbxzGVzXdDtx+qzU/7C
MD5:	98A7FC3E2E05AFFFC1CFE4A029F47476
SHA1:	A17E077D6E6BA1D8A90C1F3FAF25D37B0FF5A6AD
SHA-256:	D2D1AFA224CDA388FF1DC8FAC24CDA228D7CE09DE5D375947D7207FA4A6C4F8D
SHA-512:	457E295C760ABFD29FC6BBBB7FC7D4959287BCA7FB0E3E99EB834087D17EED331DEF18138838D35C48C6DDC8A0134AFFFF1A5A24033F9B5607B355D3D48FDF88
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... .....".. },.. "explanationofflinedisabled": {.. "message": ".. ...... .... ....... ....... .. .... Google ........ .. ..... .... .. ..., .... ... ....... .. ...... .... .. Google ........ .. ........ .. ...... ... .... .. ...... ....... .... .....".. },.. "explanationofflineenabled": {.. "message": ".. ...... ..., ..... .. .. .. ...... ...... ..... .. .... ... .. .. ...... ... .... ....".. },.. "extdesc": {.. "message": ".... .... ....... ...... ..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\hr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	935
Entropy (8bit):	4.6369398601609735
Encrypted:	false
SSDEEP:	24:1HA7sR5k/I+UX/hrcySxG1fIZ3tp/S/d6Gpb+D:YsE/I+UX/hVSxQ03f/Sj+D
MD5:	25CDFF9D60C5FC4740A48EF9804BF5C7
SHA1:	4FADECC52FB43AEC084DF9FF86D2D465FBEBCDC0
SHA-256:	73E6E246CEEAB9875625CD4889FBF931F93B7B9DEAA11288AE1A0F8A6E311E76
SHA-512:	EF00B08496427FEB5A6B9FB3FE2E5404525BE7C329D9DD2A417480637FD91885837D134A26980DCF9F61E463E6CB68F09A24402805807E656AF16B116A75E02C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZRADI NOVI".. },.. "explanationofflinedisabled": {.. "message": "Vi ste izvan mre.e. Da biste koristili Google dokumente bez internetske veze, idite na postavke na po.etnoj stranici Google dokumenata i uklju.ite izvanmre.nu sinkronizaciju sljede.i put kada se pove.ete s internetom.".. },.. "explanationofflineenabled": {.. "message": "Vi ste izvan mre.e, no i dalje mo.ete ure.ivati dostupne datoteke i izra.ivati nove.".. },.. "extdesc": {.. "message": "Uredite, izradite i pregledajte dokumente, prora.unske tablice i prezentacije . sve bez pristupa internetu.".. },.. "extname": {.. "message": "Google dokumenti izvanmre.no".. },.. "learnmore": {.. "message": "Saznajte vi.e".. },.. "popuphelptext": {.. "message": "Pi.ite, ure.ujte i sura.ujte gdje god se nalazili, povezani s internetom ili izvanmre.no.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\hu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1065
Entropy (8bit):	4.816501737523951
Encrypted:	false
SSDEEP:	24:1HA6J54gEYwFFMxv4gvyB9FzmxlsN147g/zJcYwJgrus4QY2jom:NJ54gEYwUmgKHFzmsG7izJcYOgKgYjm
MD5:	8930A51E3ACE3DD897C9E61A2AEA1D02
SHA1:	4108506500C68C054BA03310C49FA5B8EE246EA4
SHA-256:	958C0F664FCA20855FA84293566B2DDB7F297185619143457D6479E6AC81D240
SHA-512:	126B80CD3428C0BC459EEAAFCBE4B9FDE2541A57F19F3EC7346BAF449F36DC073A9CF015594A57203255941551B25F6FAA6D2C73C57C44725F563883FF902606
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".J L.TREHOZ.SA".. },.. "explanationofflinedisabled": {.. "message": "Jelenleg offline .llapotban van. Ha a Google Dokumentumokat internetkapcsolat n.lk.l szeretn. haszn.lni, a legk.zelebbi internethaszn.lata sor.n nyissa meg a Google Dokumentumok kezd.oldal.n tal.lhat. be.ll.t.sokat, .s tiltsa le az offline szinkroniz.l.s be.ll.t.st.".. },.. "explanationofflineenabled": {.. "message": "Offline .llapotban van, de az el.rhet. f.jlokat .gy is szerkesztheti, valamint l.trehozhat .jakat.".. },.. "extdesc": {.. "message": "Szerkesszen, hozzon l.tre .s tekintsen meg dokumentumokat, t.bl.zatokat .s prezent.ci.kat . ak.r internetkapcsolat n.lk.l is.".. },.. "extname": {.. "message": "Google Dokumentumok Offline".. },.. "learnmore": {.. "message": "Tov.bbi inform.ci.".. },.. "popuphelptext": {.. "message": ".rjon, szerkesszen .s dolgozzon egy.tt m.sokkal

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\hy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2771
Entropy (8bit):	3.7629875118570055
Encrypted:	false
SSDEEP:	48:Y0Fx+eiYZBZ7K1ZZ/5QQxTuDLoFZaIZSK7lq0iC0mlMO6M3ih1oAgC:lF2BTz6N/
MD5:	55DE859AD778E0AA9D950EF505B29DA9
SHA1:	4479BE637A50C9EE8A2F7690AD362A6A8FFC59B2
SHA-256:	0B16E3F8BD904A767284345AE86A0A9927C47AFE89E05EA2B13AD80009BDF9E4
SHA-512:	EDAB2FCC14CABB6D116E9C2907B42CFBC34F1D9035F43E454F1F4D1F3774C100CBADF6B4C81B025810ED90FA91C22F1AEFE83056E4543D92527E4FE81C7889A8
Malicious:	false
Preview:	{"createnew":{"message":"\u054d\u054f\u0535\u0542\u053e\u0535\u053c \u0546\u0548\u0550"},"explanationofflinedisabled":{"message":"Google \u0553\u0561\u057d\u057f\u0561\u0569\u0572\u0569\u0565\u0580\u0568 \u0576\u0561\u0587 \u0561\u0576\u0581\u0561\u0576\u0581 \u057c\u0565\u056a\u056b\u0574\u0578\u0582\u0574 \u0585\u0563\u057f\u0561\u0563\u0578\u0580\u056e\u0565\u056c\u0578\u0582 \u0570\u0561\u0574\u0561\u0580 \u0574\u056b\u0561\u0581\u0565\u0584 \u0570\u0561\u0574\u0561\u0581\u0561\u0576\u0581\u056b\u0576, \u0562\u0561\u0581\u0565\u0584 \u056e\u0561\u057c\u0561\u0575\u0578\u0582\u0569\u0575\u0561\u0576 \u0563\u056c\u056d\u0561\u057e\u0578\u0580 \u0567\u057b\u0568, \u0561\u0576\u0581\u0565\u0584 \u056f\u0561\u0580\u0563\u0561\u057e\u0578\u0580\u0578\u0582\u0574\u0576\u0565\u0580 \u0587 \u0574\u056b\u0561\u0581\u0580\u0565\u0584 \u0561\u0576\u0581\u0561\u0576\u0581 \u0570\u0561\u0574\u0561\u056a\u0561\u0574\u0561\u0581\u0578\u0582\u0574\u0568:"},"explanationofflineenabled":{"message":"\u

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\id\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	858
Entropy (8bit):	4.474411340525479
Encrypted:	false
SSDEEP:	12:1HASvgJX4CBxNpXemNOAJRFqjRpCBxedIdjTi92OvbCSUuoi01uRwCBhUuvz1thK:1HARXzhXemNOQWGcEoeH1eXJNvT2
MD5:	34D6EE258AF9429465AE6A078C2FB1F5
SHA1:	612CAE151984449A4346A66C0A0DF4235D64D932
SHA-256:	E3C86DDD2EFEBE88EED8484765A9868202546149753E03A61EB7C28FD62CFCA1
SHA-512:	20427807B64A0F79A6349F8A923152D9647DA95C05DE19AD3A4BF7DB817E25227F3B99307C8745DD323A6591B515221BD2F1E92B6F1A1783BDFA7142E84601B1
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BARU".. },.. "explanationofflinedisabled": {.. "message": "Anda sedang offline. Untuk menggunakan Google Dokumen tanpa koneksi internet, buka setelan di beranda Google Dokumen dan aktifkan sinkronisasi offline saat terhubung ke internet.".. },.. "explanationofflineenabled": {.. "message": "Anda sedang offline, namun Anda masih dapat mengedit file yang tersedia atau membuat file baru.".. },.. "extdesc": {.. "message": "Edit, buat, dan lihat dokumen, spreadsheet, dan presentasi . tanpa perlu akses internet.".. },.. "extname": {.. "message": "Google Dokumen Offline".. },.. "learnmore": {.. "message": "Pelajari Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit, dan gabungkan di mana saja, dengan atau tanpa koneksi internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\is\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	954
Entropy (8bit):	4.6457079159286545
Encrypted:	false
SSDEEP:	12:YGXU2rOcxGe+J97M9TP2DBX9tMfxqbTMvOfWWgdraqlifVpm0Ekf95Mw89KkJ+je:YwBrD2g2DBLMfFuWvdpY94viDO+uh
MD5:	CAEB37F451B5B5E9F5EB2E7E7F46E2D7
SHA1:	F917F9EAE268A385A10DB3E19E3CC3ACED56D02E
SHA-256:	943E61988C859BB088F548889F0449885525DD660626A89BA67B2C94CFBFBB1B
SHA-512:	A55DEC2404E1D7FA5A05475284CBECC2A6208730F09A227D75FDD4AC82CE50F3751C89DC687C14B91950F9AA85503BD6BF705113F2F1D478E728DF64D476A9EE
Malicious:	false
Preview:	{"createnew":{"message":"B\u00daA TIL N\u00ddTT"},"explanationofflinedisabled":{"message":"\u00de\u00fa ert \u00e1n nettengingar. Til a\u00f0 nota Google-skj\u00f6l \u00e1n nettengingar skaltu opna stillingarnar \u00e1 heimas\u00ed\u00f0u Google skjala og virkja samstillingu \u00e1n nettengingar n\u00e6st \u00feegar \u00fe\u00fa tengist netinu."},"explanationofflineenabled":{"message":"Engin nettenging. \u00de\u00fa getur samt sem \u00e1\u00f0ur breytt tilt\u00e6kum skr\u00e1m e\u00f0a b\u00fai\u00f0 til n\u00fdjar."},"extdesc":{"message":"Breyttu, b\u00fa\u00f0u til og sko\u00f0a\u00f0u skj\u00f6lin \u00fe\u00edn, t\u00f6flureikna og kynningar \u2014 allt \u00e1n nettengingar."},"extname":{"message":"Google-skj\u00f6l \u00e1n nettengingar"},"learnmore":{"message":"Frekari uppl\u00fdsingar"},"popuphelptext":{"message":"Skrifa\u00f0u, breyttu og starfa\u00f0u me\u00f0 \u00f6\u00f0rum hvort sem nettenging er til sta\u00f0ar e\u00f0a ekki."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\it\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	899
Entropy (8bit):	4.474743599345443
Encrypted:	false
SSDEEP:	12:1HASvggrCBxNp8WJOJJrJ3WytVCBxep3bjP5CSUCjV8AgJJm2CBhr+z1tWgjqEOW:1HANXJOTBFtKa8Agju4NB3j
MD5:	0D82B734EF045D5FE7AA680B6A12E711
SHA1:	BD04F181E4EE09F02CD53161DCABCEF902423092
SHA-256:	F41862665B13C0B4C4F562EF1743684CCE29D4BCF7FE3EA494208DF253E33885
SHA-512:	01F305A280112482884485085494E871C66D40C0B03DE710B4E5F49C6A478D541C2C1FDA2CEAF4307900485946DEE9D905851E98A2EB237642C80D464D1B3ADA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA NUOVO".. },.. "explanationofflinedisabled": {.. "message": "Sei offline. Per utilizzare Documenti Google senza una connessione Internet, apri le impostazioni nella home page di Documenti Google e attiva la sincronizzazione offline la prossima volta che ti colleghi a Internet.".. },.. "explanationofflineenabled": {.. "message": "Sei offline, ma puoi comunque modificare i file disponibili o crearne di nuovi.".. },.. "extdesc": {.. "message": "Modifica, crea e visualizza documenti, fogli di lavoro e presentazioni, senza accesso a Internet.".. },.. "extname": {.. "message": "Documenti Google offline".. },.. "learnmore": {.. "message": "Ulteriori informazioni".. },.. "popuphelptext": {.. "message": "Scrivi, modifica e collabora ovunque ti trovi, con o senza una connessione Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\iw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2230
Entropy (8bit):	3.8239097369647634
Encrypted:	false
SSDEEP:	24:YIiTVLrLD1MEzMEH82LBLjO5YaQEqLytLLBm3dnA5LcqLWAU75yxFLcx+UxWRJLI:YfTFf589rZNgNA12Qzt4/zRz2vc
MD5:	26B1533C0852EE4661EC1A27BD87D6BF
SHA1:	18234E3ABAF702DF9330552780C2F33B83A1188A
SHA-256:	BBB81C32F482BA3216C9B1189C70CEF39CA8C2181AF3538FFA07B4C6AD52F06A
SHA-512:	450BFAF0E8159A4FAE309737EA69CA8DD91CAAFD27EF662087C4E7716B2DCAD3172555898E75814D6F11487F4F254DE8625EF0CFEA8DF0133FC49E18EC7FD5D2
Malicious:	false
Preview:	{"createnew":{"message":"\u05d9\u05e6\u05d9\u05e8\u05ea \u05d7\u05d3\u05e9"},"explanationofflinedisabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8. \u05db\u05d3\u05d9 \u05dc\u05d4\u05e9\u05ea\u05de\u05e9 \u05d1-Google Docs \u05dc\u05dc\u05d0 \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d1\u05d4\u05ea\u05d7\u05d1\u05e8\u05d5\u05ea \u05d4\u05d1\u05d0\u05d4 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d9\u05e9 \u05dc\u05e2\u05d1\u05d5\u05e8 \u05dc\u05e7\u05d8\u05e2 \u05d4\u05d4\u05d2\u05d3\u05e8\u05d5\u05ea \u05d1\u05d3\u05e3 \u05d4\u05d1\u05d9\u05ea \u05e9\u05dc Google Docs \u05d5\u05dc\u05d4\u05e4\u05e2\u05d9\u05dc \u05e1\u05e0\u05db\u05e8\u05d5\u05df \u05d1\u05de\u05e6\u05d1 \u05d0\u05d5\u05e4\u05dc\u05d9\u05d9\u05df."},"explanationofflineenabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\ja\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1160
Entropy (8bit):	5.292894989863142
Encrypted:	false
SSDEEP:	24:1HAoc3IiRF1viQ1RF3CMP3rnicCCAFrr1Oo0Y5ReXCCQkb:Dc3zF7F3CMTnOCAFVLHXCFb
MD5:	15EC1963FC113D4AD6E7E59AE5DE7C0A
SHA1:	4017FC6D8B302335469091B91D063B07C9E12109
SHA-256:	34AC08F3C4F2D42962A3395508818B48CA323D22F498738CC9F09E78CB197D73
SHA-512:	427251F471FA3B759CA1555E9600C10F755BC023701D058FF661BEC605B6AB94CFB3456C1FEA68D12B4D815FFBAFABCEB6C12311DD1199FC783ED6863AF97C0F
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ............................... Google .............. [..] .......[.......] ...........".. },.. "explanationofflineenabled": {.. "message": ".............................................".. },.. "extdesc": {.. "message": ".........................................................".. },.. "extname": {.. "message": "Google ..... ......".. },.. "learnmore": {.. "message": "..".. },.. "popuphelp

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\ka\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3264
Entropy (8bit):	3.586016059431306
Encrypted:	false
SSDEEP:	48:YGFbhVhVn0nM/XGbQTvxnItVJW/476CFdqaxWNlR:HFbhV/n0MfGbw875FkaANlR
MD5:	83F81D30913DC4344573D7A58BD20D85
SHA1:	5AD0E91EA18045232A8F9DF1627007FE506A70E0
SHA-256:	30898BBF51BDD58DB397FF780F061E33431A38EF5CFC288B5177ECF76B399F26
SHA-512:	85F97F12AD4482B5D9A6166BB2AE3C4458A582CF575190C71C1D8E0FB87C58482F8C0EFEAD56E3A70EDD42BED945816DB5E07732AD27B8FFC93F4093710DD58F
Malicious:	false
Preview:	{"createnew":{"message":"\u10d0\u10ee\u10da\u10d8\u10e1 \u10e8\u10d4\u10e5\u10db\u10dc\u10d0"},"explanationofflinedisabled":{"message":"\u10d7\u10e5\u10d5\u10d4\u10dc \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10ee\u10d0\u10e0\u10d7. Google Docs-\u10d8\u10e1 \u10d8\u10dc\u10e2\u10d4\u10e0\u10dc\u10d4\u10e2\u10d7\u10d0\u10dc \u10d9\u10d0\u10d5\u10e8\u10d8\u10e0\u10d8\u10e1 \u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10d2\u10d0\u10db\u10dd\u10e1\u10d0\u10e7\u10d4\u10dc\u10d4\u10d1\u10da\u10d0\u10d3 \u10d2\u10d0\u10d3\u10d0\u10d3\u10d8\u10d7 \u10de\u10d0\u10e0\u10d0\u10db\u10d4\u10e2\u10e0\u10d4\u10d1\u10d6\u10d4 Google Docs-\u10d8\u10e1 \u10db\u10d7\u10d0\u10d5\u10d0\u10e0 \u10d2\u10d5\u10d4\u10e0\u10d3\u10d6\u10d4 \u10d3\u10d0 \u10e9\u10d0\u10e0\u10d7\u10d4\u10d7 \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10e1\u10d8\u10dc\u10e5\u10e0\u10dd\u10dc\u10d8\u10d6\u10d0\u10ea\u10d8\u10d0, \u10e0\u10dd\u10d3\u10d4\u10e1\u10d0\u10ea \u10e8\u10d4\u10db\u10d3\u10d2\u10dd\u10

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\kk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3235
Entropy (8bit):	3.6081439490236464
Encrypted:	false
SSDEEP:	96:H3E+6rOEAbeHTln2EQ77Uayg45RjhCSj+OyRdM7AE9qdV:HXcR/nQXUayYV
MD5:	2D94A58795F7B1E6E43C9656A147AD3C
SHA1:	E377DB505C6924B6BFC9D73DC7C02610062F674E
SHA-256:	548DC6C96E31A16CE355DC55C64833B08EF3FBA8BF33149031B4A685959E3AF4
SHA-512:	F51CC857E4CF2D4545C76A2DCE7D837381CE59016E250319BF8D39718BE79F9F6EE74EA5A56DE0E8759E4E586D93430D51651FC902376D8A5698628E54A0F2D8
Malicious:	false
Preview:	{"createnew":{"message":"\u0416\u0410\u04a2\u0410\u0421\u042b\u041d \u0416\u0410\u0421\u0410\u0423"},"explanationofflinedisabled":{"message":"\u0421\u0456\u0437 \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u043d\u0434\u0435\u0441\u0456\u0437. Google Docs \u049b\u043e\u043b\u0434\u0430\u043d\u0431\u0430\u0441\u044b\u043d \u0436\u0435\u043b\u0456 \u0431\u0430\u0439\u043b\u0430\u043d\u044b\u0441\u044b\u043d\u0441\u044b\u0437 \u049b\u043e\u043b\u0434\u0430\u043d\u0443 \u04af\u0448\u0456\u043d, \u043a\u0435\u043b\u0435\u0441\u0456 \u0436\u043e\u043b\u044b \u0436\u0435\u043b\u0456\u0433\u0435 \u049b\u043e\u0441\u044b\u043b\u0493\u0430\u043d\u0434\u0430, Google Docs \u043d\u0435\u0433\u0456\u0437\u0433\u0456 \u0431\u0435\u0442\u0456\u043d\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043b\u0435\u0440 \u0431\u04e9\u043b\u0456\u043c\u0456\u043d \u043a\u0456\u0440\u0456\u043f, \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\km\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3122
Entropy (8bit):	3.891443295908904
Encrypted:	false
SSDEEP:	96:/OOrssRU6Bg7VSdL+zsCfoZiWssriWqo2gx7RRCos2sEeBkS7Zesg:H5GRZlXsGdo
MD5:	B3699C20A94776A5C2F90AEF6EB0DAD9
SHA1:	1F9B968B0679A20FA097624C9ABFA2B96C8C0BEA
SHA-256:	A6118F0A0DE329E07C01F53CD6FB4FED43E54C5F53DB4CD1C7F5B2B4D9FB10E6
SHA-512:	1E8D15B8BFF1D289434A244172F9ED42B4BB6BCB6372C1F300B01ACEA5A88167E97FEDABA0A7AE3BEB5E24763D1B09046AE8E30745B80E2E2FE785C94DF362F6
Malicious:	false
Preview:	{"createnew":{"message":"\u1794\u1784\u17d2\u1780\u17be\u178f\u200b\u1790\u17d2\u1798\u17b8"},"explanationofflinedisabled":{"message":"\u17a2\u17d2\u1793\u1780\u200b\u1782\u17d2\u1798\u17b6\u1793\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f\u17d4 \u178a\u17be\u1798\u17d2\u1794\u17b8\u200b\u1794\u17d2\u179a\u17be Google \u17af\u1780\u179f\u17b6\u179a\u200b\u1794\u17b6\u1793\u200b\u200b\u178a\u17c4\u1799\u200b\u200b\u1798\u17b7\u1793\u1798\u17b6\u1793\u200b\u200b\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f \u179f\u17bc\u1798\u200b\u200b\u1791\u17c5\u200b\u1780\u17b6\u1793\u17cb\u200b\u1780\u17b6\u179a\u200b\u1780\u17c6\u178e\u178f\u17cb\u200b\u1793\u17c5\u200b\u179b\u17be\u200b\u1782\u17c1\u17a0\u1791\u17c6\u1796\u17d0\u179a Google \u17af\u1780\u179f\u17b6\u179a \u1793\u17b7\u1784\u200b\u1794\u17be\u1780\u200b\u1780\u17b6\u179a\u1792\u17d2\u179c\u17be\u200b\u179f\u1798\u1780\u17b6\u179b\u1780\u1798\u17d2\u1798\u200b\u200b\u200b\u1782\u17d2\u1798\u17b6\u1793

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\kn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1895
Entropy (8bit):	4.28990403715536
Encrypted:	false
SSDEEP:	48:SHYGuEETiuF6OX5tCYFZt5GurMRRevsY4tVZIGnZRxlKT6/U0WG:yYG8iuF6yTCYFH5GjLPtVZVZRxOZ0J
MD5:	38BE0974108FC1CC30F13D8230EE5C40
SHA1:	ACF44889DD07DB97D26D534AD5AFA1BC1A827BAD
SHA-256:	30078EF35A76E02A400F03B3698708A0145D9B57241CC4009E010696895CF3A1
SHA-512:	7BDB2BADE4680801FC3B33E82C8AA4FAC648F45C795B4BACE4669D6E907A578FF181C093464884C0E00C9762E8DB75586A253D55CD10A7777D281B4BFFAFE302
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........ .....".. },.. "explanationofflinedisabled": {.. "message": ".... ..................... ......... ............. Google ...... ....., Google ...... ............ ............... .... ..... ...... .... .... ............ ............. ........ ..... ... .....".. },.. "explanationofflineenabled": {.. "message": ".... ...................., .... .... .... ......... ........... ............ .... ........ .........."..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\ko\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1042
Entropy (8bit):	5.3945675025513955
Encrypted:	false
SSDEEP:	24:1HAWYsF4dqNfBQH49Hk8YfIhYzTJ+6WJBtl/u4s+6:ZF4wNfvm87mX4LF6
MD5:	F3E59EEEB007144EA26306C20E04C292
SHA1:	83E7BDFA1F18F4C7534208493C3FF6B1F2F57D90
SHA-256:	C52D9B955D229373725A6E713334BBB31EA72EFA9B5CF4FBD76A566417B12CAC
SHA-512:	7808CB5FF041B002CBD78171EC5A0B4DBA3E017E21F7E8039084C2790F395B839BEE04AD6C942EED47CCB53E90F6DE818A725D1450BF81BA2990154AFD3763AF
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".. ...".. },.. "explanationofflinedisabled": {.. "message": ".... ...... ... .. .. Google Docs. ..... Google Docs .... .... .... .... .... ..... . .... .... ..... ......".. },.. "explanationofflineenabled": {.. "message": ".... ...... ... .. ... ... ..... ... ... .. . .....".. },.. "extdesc": {.. "message": ".... .... ... .., ...... . ....... .., .., ......".. },.. "extname": {.. "message": "Google Docs ....".. },.. "learnmore": {.. "message": "... ....".. },.. "popuphelptext": {.. "message": "... .. ... .... ..... .... .... .....

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\lo\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2535
Entropy (8bit):	3.8479764584971368
Encrypted:	false
SSDEEP:	48:YRcHe/4raK1EIlZt1wg62FIOg+xGaF8guI5EP9I2yC:+cs4raK1xlZtOgviOfGaF8RI5EP95b
MD5:	E20D6C27840B406555E2F5091B118FC5
SHA1:	0DCECC1A58CEB4936E255A64A2830956BFA6EC14
SHA-256:	89082FB05229826BC222F5D22C158235F025F0E6DF67FF135A18BD899E13BB8F
SHA-512:	AD53FC0B153005F47F9F4344DF6C4804049FAC94932D895FD02EEBE75222CFE77EEDD9CD3FDC4C88376D18C5972055B00190507AA896488499D64E884F84F093
Malicious:	false
Preview:	{"createnew":{"message":"\u0eaa\u0ec9\u0eb2\u0e87\u0ec3\u0edd\u0ec8"},"explanationofflinedisabled":{"message":"\u0e97\u0ec8\u0eb2\u0e99\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ea2\u0eb9\u0ec8. \u0ec0\u0e9e\u0eb7\u0ec8\u0ead\u0ec3\u0e8a\u0ec9 Google Docs \u0ec2\u0e94\u0e8d\u0e9a\u0ecd\u0ec8\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94, \u0ec3\u0eab\u0ec9\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e81\u0eb2\u0e99\u0e95\u0eb1\u0ec9\u0e87\u0e84\u0ec8\u0eb2\u0ec3\u0e99\u0edc\u0ec9\u0eb2 Google Docs \u0ec1\u0ea5\u0ec9\u0ea7\u0ec0\u0e9b\u0eb5\u0e94\u0ec3\u0e8a\u0ec9\u0e81\u0eb2\u0e99\u0e8a\u0eb4\u0ec9\u0e87\u0ec1\u0e9a\u0e9a\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ec3\u0e99\u0ec0\u0e97\u0eb7\u0ec8\u0ead\u0e95\u0ecd\u0ec8\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e97\u0ec8\u0eb2\u0e99\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94."},"explanationofflineenabled":{"message":"\u0e97\u0ec

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\lt\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1028
Entropy (8bit):	4.797571191712988
Encrypted:	false
SSDEEP:	24:1HAivZZaJ3Rje394+k7IKgpAJjUpSkiQjuRBMd:fZZahBeu7IKgqeMg
MD5:	970544AB4622701FFDF66DC556847652
SHA1:	14BEE2B77EE74C5E38EBD1DB09E8D8104CF75317
SHA-256:	5DFCBD4DFEAEC3ABE973A78277D3BD02CD77AE635D5C8CD1F816446C61808F59
SHA-512:	CC12D00C10B970189E90D47390EEB142359A8D6F3A9174C2EF3AE0118F09C88AB9B689D9773028834839A7DFAF3AAC6747BC1DCB23794A9F067281E20B8DC6EA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SUKURTI NAUJ.".. },.. "explanationofflinedisabled": {.. "message": "Esate neprisijung.. Jei norite naudoti .Google. dokumentus be interneto ry.io, pagrindiniame .Google. dokument. puslapyje eikite . nustatym. skilt. ir .junkite sinchronizavim. neprisijungus, kai kit. kart. b.site prisijung. prie interneto.".. },.. "explanationofflineenabled": {.. "message": "Esate neprisijung., bet vis tiek galite redaguoti pasiekiamus failus arba sukurti nauj..".. },.. "extdesc": {.. "message": "Redaguokite, kurkite ir per.i.r.kite savo dokumentus, skai.iuokles ir pristatymus . visk. darykite be prieigos prie interneto.".. },.. "extname": {.. "message": ".Google. dokumentai neprisijungus".. },.. "learnmore": {.. "message": "Su.inoti daugiau".. },.. "popuphelptext": {.. "message": "Ra.ykite, redaguokite ir bendradarbiaukite bet kurioje vietoje naudodami interneto ry.. arba

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\lv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	994
Entropy (8bit):	4.700308832360794
Encrypted:	false
SSDEEP:	24:1HAaJ7a/uNpoB/Y4vPnswSPkDzLKFQHpp//BpPDB:7J7a/uzQ/Y4vvswhDzDr/LDB
MD5:	A568A58817375590007D1B8ABCAEBF82
SHA1:	B0F51FE6927BB4975FC6EDA7D8A631BF0C1AB597
SHA-256:	0621DE9161748F45D53052ED8A430962139D7F19074C7FFE7223ECB06B0B87DB
SHA-512:	FCFBADEC9F73975301AB404DB6B09D31457FAC7CCAD2FA5BE348E1CAD6800F87CB5B56DE50880C55BBADB3C40423351A6B5C2D03F6A327D898E35F517B1C628C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZVEIDOT JAUNU".. },.. "explanationofflinedisabled": {.. "message": "J.s esat bezsaist.. Lai lietotu pakalpojumu Google dokumenti bez interneta savienojuma, n.kamaj. reiz., kad ir izveidots savienojums ar internetu, atveriet Google dokumentu s.kumlapas iestat.jumu izv.lni un iesl.dziet sinhroniz.ciju bezsaist..".. },.. "explanationofflineenabled": {.. "message": "J.s esat bezsaist., ta.u varat redi..t pieejamos failus un izveidot jaunus.".. },.. "extdesc": {.. "message": "Redi..jiet, veidojiet un skatiet savus dokumentus, izkl.jlapas un prezent.cijas, neizmantojot savienojumu ar internetu.".. },.. "extname": {.. "message": "Google dokumenti bezsaist.".. },.. "learnmore": {.. "message": "Uzziniet vair.k".. },.. "popuphelptext": {.. "message": "Rakstiet, redi..jiet un sadarbojieties ar interneta savienojumu vai bez t. neatkar.gi no t., kur atrodaties.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\ml\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2091
Entropy (8bit):	4.358252286391144
Encrypted:	false
SSDEEP:	24:1HAnHdGc4LtGxVY6IuVzJkeNL5kP13a67wNcYP8j5PIaSTIjPU4ELFPCWJjMupV/:idGcyYPVtkAUl7wqziBsg9DbpN6XoN/
MD5:	4717EFE4651F94EFF6ACB6653E868D1A
SHA1:	B8A7703152767FBE1819808876D09D9CC1C44450
SHA-256:	22CA9415E294D9C3EC3384B9D08CDAF5164AF73B4E4C251559E09E529C843EA6
SHA-512:	487EAB4938F6BC47B1D77DD47A5E2A389B94E01D29849E38E96C95CABC7BD98679451F0E22D3FEA25C045558CD69FDDB6C4FEF7C581141F1C53C4AA17578D7F7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ............".. },.. "explanationofflinedisabled": {.. "message": "...... ........... ........... ............. ..... Google ....... ..........., Google ....... .......... ............. .... ...... ...... ... ............... .................... '.......... ................' .........".. },.. "explanationofflineenabled": {.. "message": "................., .......... ......... ....... ...... ..............

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\mn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2778
Entropy (8bit):	3.595196082412897
Encrypted:	false
SSDEEP:	48:Y943BFU1LQ4HwQLQ4LQhlmVQL3QUm6H6ZgFIcwn6Rs2ShpQ3IwjGLQSJ/PYoEQj8:I43BCymz8XNcfuQDXYN2sum
MD5:	83E7A14B7FC60D4C66BF313C8A2BEF0B
SHA1:	1CCF1D79CDED5D65439266DB58480089CC110B18
SHA-256:	613D8751F6CC9D3FA319F4B7EA8B2BD3BED37FD077482CA825929DD7C12A69A8
SHA-512:	3742E24FFC4B5283E6EE496813C1BDC6835630D006E8647D427C3DE8B8E7BF814201ADF9A27BFAB3ABD130B6FEC64EBB102AC0EB8DEDFE7B63D82D3E1233305D
Malicious:	false
Preview:	{"createnew":{"message":"\u0428\u0418\u041d\u0418\u0419\u0413 \u04ae\u04ae\u0421\u0413\u042d\u0425"},"explanationofflinedisabled":{"message":"\u0422\u0430 \u043e\u0444\u043b\u0430\u0439\u043d \u0431\u0430\u0439\u043d\u0430. Google \u0414\u043e\u043a\u044b\u0433 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u0433\u04af\u0439\u0433\u044d\u044d\u0440 \u0430\u0448\u0438\u0433\u043b\u0430\u0445\u044b\u043d \u0442\u0443\u043b\u0434 \u0434\u0430\u0440\u0430\u0430\u0433\u0438\u0439\u043d \u0443\u0434\u0430\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u044d\u0434 \u0445\u043e\u043b\u0431\u043e\u0433\u0434\u043e\u0445\u0434\u043e\u043e Google \u0414\u043e\u043a\u044b\u043d \u043d\u04af\u04af\u0440 \u0445\u0443\u0443\u0434\u0430\u0441\u043d\u0430\u0430\u0441 \u0442\u043e\u0445\u0438\u0440\u0433\u043e\u043e \u0434\u043e\u0442\u043e\u0440\u0445 \u043e\u0444\u043b\u0430\u0439\u043d \u0441\u0438\u043d\u043a\u0438\u0439\u0433 \u0438\u0434\u044d\u0432\u0445\u0436\u04af\u04af\u043b\u043d\u0

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\mr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1719
Entropy (8bit):	4.287702203591075
Encrypted:	false
SSDEEP:	48:65/5EKaDMw6pEf4I5+jSksOTJqQyrFO8C:65/5EKaAw6pEf4I5+vsOVqQyFO8C
MD5:	3B98C4ED8874A160C3789FEAD5553CFA
SHA1:	5550D0EC548335293D962AAA96B6443DD8ABB9F6
SHA-256:	ADEB082A9C754DFD5A9D47340A3DDCC19BF9C7EFA6E629A2F1796305F1C9A66F
SHA-512:	5139B6C6DF9459C7B5CDC08A98348891499408CD75B46519BA3AC29E99AAAFCC5911A1DEE6C3A57E3413DBD0FAE72D7CBC676027248DCE6364377982B5CE4151
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ...".. },.. "explanationofflinedisabled": {.. "message": "...... ...... ..... ......... ....... ....... ..... Google ....... ............, Google ....... .............. .......... .. ... ..... .... ...... ......... ...... ...... ...... .... .... ....".. },.. "explanationofflineenabled": {.. "message": "...... ...... ...., ..... ...... ...... ...... .... ....... ... ..... .... .... ... .....".. },.. "extdesc": {.. "message": "..... ..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\ms\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	936
Entropy (8bit):	4.457879437756106
Encrypted:	false
SSDEEP:	24:1HARXIqhmemNKsE27rhdfNLChtyo2JJ/YgTgin:iIqFC7lrDfNLCIBRzn
MD5:	7D273824B1E22426C033FF5D8D7162B7
SHA1:	EADBE9DBE5519BD60458B3551BDFC36A10049DD1
SHA-256:	2824CF97513DC3ECC261F378BFD595AE95A5997E9D1C63F5731A58B1F8CD54F9
SHA-512:	E5B611BBFAB24C9924D1D5E1774925433C65C322769E1F3B116254B1E9C69B6DF1BE7828141EEBBF7524DD179875D40C1D8F29C4FB86D663B8A365C6C60421A7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BAHARU".. },.. "explanationofflinedisabled": {.. "message": "Anda berada di luar talian. Untuk menggunakan Google Docs tanpa sambungan Internet, pergi ke tetapan di halaman utama Google Docs dan hidupkan penyegerakan luar talian apabila anda disambungkan ke Internet selepas ini.".. },.. "explanationofflineenabled": {.. "message": "Anda berada di luar talian, tetapi anda masih boleh mengedit fail yang tersedia atau buat fail baharu.".. },.. "extdesc": {.. "message": "Edit, buat dan lihat dokumen, hamparan dan pembentangan anda . kesemuanya tanpa akses Internet.".. },.. "extname": {.. "message": "Google Docs Luar Talian".. },.. "learnmore": {.. "message": "Ketahui Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit dan bekerjasama di mana-mana sahaja anda berada, dengan atau tanpa sambungan Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\my\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3830
Entropy (8bit):	3.5483353063347587
Encrypted:	false
SSDEEP:	48:Ya+Ivxy6ur1+j3P7Xgr5ELkpeCgygyOxONHO3pj6H57ODyOXOVp6:8Uspsj3P3ty2a66xl09
MD5:	342335A22F1886B8BC92008597326B24
SHA1:	2CB04F892E430DCD7705C02BF0A8619354515513
SHA-256:	243BEFBD6B67A21433DCC97DC1A728896D3A070DC20055EB04D644E1BB955FE7
SHA-512:	CD344D060E30242E5A4705547E807CE3CE2231EE983BB9A8AD22B3E7598A7EC87399094B04A80245AD51D039370F09D74FE54C0B0738583884A73F0C7E888AD8
Malicious:	false
Preview:	{"createnew":{"message":"\u1021\u101e\u1005\u103a \u1015\u103c\u102f\u101c\u102f\u1015\u103a\u101b\u1014\u103a"},"explanationofflinedisabled":{"message":"\u101e\u1004\u103a \u1021\u1031\u102c\u1037\u1016\u103a\u101c\u102d\u102f\u1004\u103a\u1038\u1016\u103c\u1005\u103a\u1014\u1031\u1015\u102b\u101e\u100a\u103a\u104b \u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u1019\u103e\u102f \u1019\u101b\u103e\u102d\u1018\u1032 Google Docs \u1000\u102d\u102f \u1021\u101e\u102f\u1036\u1038\u1015\u103c\u102f\u101b\u1014\u103a \u1014\u1031\u102c\u1000\u103a\u1010\u1005\u103a\u1000\u103c\u102d\u1019\u103a \u101e\u1004\u103a\u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u101e\u100a\u1037\u103a\u1021\u1001\u102b Google Docs \u1015\u1004\u103a\u1019\u1005\u102c\u1019\u103b\u1000\u103a\u1014\u103e\u102c\u101b\u103e\u102d \u1006\u1000\u103a\u1010\u1004\u103a\u1019\u103b\u102c\u1038\u101e\u102d\u102f\u1037\u1

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\ne\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1898
Entropy (8bit):	4.187050294267571
Encrypted:	false
SSDEEP:	24:1HAmQ6ZSWfAx6fLMr48tE/cAbJtUZJScSIQoAfboFMiQ9pdvz48YgqG:TQ6W6MbkcAltUJxQdfbqQ9pp0gqG
MD5:	B1083DA5EC718D1F2F093BD3D1FB4F37
SHA1:	74B6F050D918448396642765DEF1AD5390AB5282
SHA-256:	E6ED0A023EF31705CCCBAF1E07F2B4B2279059296B5CA973D2070417BA16F790
SHA-512:	7102B90ABBE2C811E8EE2F1886A73B1298D4F3D5D05F0FFDB57CF78B9A49A25023A290B255BAA4895BB150B388BAFD9F8432650B8C70A1A9A75083FFFCD74F1A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... ....... .........".. },.. "explanationofflinedisabled": {.. "message": "..... ...... .......... .... ........ .... .... Google ........ ...... .... ..... ..... ... .......... ....... .... Google ........ .......... ..... .......... .. ...... ..... .... ..... ......... .. ..........".. },.. "explanationofflineenabled": {.. "message": "..... ...... ........., .. ..... ... ... ...... ....... ....... .. .... ....... ....

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\nl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.513485418448461
Encrypted:	false
SSDEEP:	12:1HASvgFARCBxNBv52/fXjOXl6W6ICBxeBvMzU1CSUJAO6SFAIVIbCBhZHdb1tvz+:1HABJx4X6QDwEzlm2uGvYzKU
MD5:	32DF72F14BE59A9BC9777113A8B21DE6
SHA1:	2A8D9B9A998453144307DD0B700A76E783062AD0
SHA-256:	F3FE1FFCB182183B76E1B46C4463168C746A38E461FD25CA91FF2A40846F1D61
SHA-512:	E0966F5CCA5A8A6D91C58D716E662E892D1C3441DAA5D632E5E843839BB989F620D8AC33ED3EDBAFE18D7306B40CD0C4639E5A4E04DA2C598331DACEC2112AAD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NIEUW MAKEN".. },.. "explanationofflinedisabled": {.. "message": "Je bent offline. Wil je Google Documenten zonder internetverbinding gebruiken, ga dan de volgende keer dat je verbinding met internet hebt naar 'Instellingen' op de homepage van Google Documenten en zet 'Offline synchronisatie' aan.".. },.. "explanationofflineenabled": {.. "message": "Je bent offline, maar je kunt nog wel beschikbare bestanden bewerken of nieuwe bestanden maken.".. },.. "extdesc": {.. "message": "Bewerk, maak en bekijk je documenten, spreadsheets en presentaties. Allemaal zonder internettoegang.".. },.. "extname": {.. "message": "Offline Documenten".. },.. "learnmore": {.. "message": "Meer informatie".. },.. "popuphelptext": {.. "message": "Overal schrijven, bewerken en samenwerken, met of zonder internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\no\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	878
Entropy (8bit):	4.4541485835627475
Encrypted:	false
SSDEEP:	24:1HAqwwrJ6wky68uk+NILxRGJwBvDyrj9V:nwwQwky6W+NwswVyT
MD5:	A1744B0F53CCF889955B95108367F9C8
SHA1:	6A5A6771DFF13DCB4FD425ED839BA100B7123DE0
SHA-256:	21CEFF02B45A4BFD60D144879DFA9F427949A027DD49A3EB0E9E345BD0B7C9A8
SHA-512:	F55E43F14514EECB89F6727A0D3C234149609020A516B193542B5964D2536D192F40CC12D377E70C683C269A1BDCDE1C6A0E634AA84A164775CFFE776536A961
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPPRETT NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du er uten nett. For . bruke Google Dokumenter uten internettilkobling, g. til innstillingene p. Google Dokumenter-nettsiden og sl. p. synkronisering uten nett neste gang du er koblet til Internett.".. },.. "explanationofflineenabled": {.. "message": "Du er uten nett, men du kan likevel endre tilgjengelige filer eller opprette nye.".. },.. "extdesc": {.. "message": "Rediger, opprett og se dokumentene, regnearkene og presentasjonene dine . uten nettilgang.".. },.. "extname": {.. "message": "Google Dokumenter uten nett".. },.. "learnmore": {.. "message": "Finn ut mer".. },.. "popuphelptext": {.. "message": "Skriv, rediger eller samarbeid uansett hvor du er, med eller uten internettilkobling.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\pa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2766
Entropy (8bit):	3.839730779948262
Encrypted:	false
SSDEEP:	48:YEH6/o0iZbNCbDMUcipdkNtQjsGKIhO9aBjj/nxt9o5nDAj3:p6wbZbEbvJ8jQkIhO9aBjb/90Ab
MD5:	97F769F51B83D35C260D1F8CFD7990AF
SHA1:	0D59A76564B0AEE31D0A074305905472F740CECA
SHA-256:	BBD37D41B7DE6F93948FA2437A7699D4C30A3C39E736179702F212CB36A3133C
SHA-512:	D91F5E2D22FC2D7F73C1F1C4AF79DB98FCFD1C7804069AE9B2348CBC729A6D2DFF7FB6F44D152B0BDABA6E0D05DFF54987E8472C081C4D39315CEC2CBC593816
Malicious:	false
Preview:	{"createnew":{"message":"\u0a28\u0a35\u0a3e\u0a02 \u0a2c\u0a23\u0a3e\u0a13"},"explanationofflinedisabled":{"message":"\u0a24\u0a41\u0a38\u0a40\u0a02 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a39\u0a4b\u0964 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a15\u0a28\u0a48\u0a15\u0a36\u0a28 \u0a26\u0a47 \u0a2c\u0a3f\u0a28\u0a3e\u0a02 Google Docs \u0a28\u0a42\u0a70 \u0a35\u0a30\u0a24\u0a23 \u0a32\u0a08, \u0a05\u0a17\u0a32\u0a40 \u0a35\u0a3e\u0a30 \u0a1c\u0a26\u0a4b\u0a02 \u0a24\u0a41\u0a38\u0a40\u0a02 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a26\u0a47 \u0a28\u0a3e\u0a32 \u0a15\u0a28\u0a48\u0a15\u0a1f \u0a39\u0a4b\u0a35\u0a4b \u0a24\u0a3e\u0a02 Google Docs \u0a2e\u0a41\u0a71\u0a16 \u0a2a\u0a70\u0a28\u0a47 '\u0a24\u0a47 \u0a38\u0a48\u0a1f\u0a3f\u0a70\u0a17\u0a3e\u0a02 \u0a35\u0a3f\u0a71\u0a1a \u0a1c\u0a3e\u0a13 \u0a05\u0a24\u0a47 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a38\u0a3f\u0a70\u0a15 \u0a28\u0a42\u0a70 \u0a1a\u0a3e\u0a32\u0a42 \u0a15\u0a30\u0a4b\u0964"},"expla

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\pl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	978
Entropy (8bit):	4.879137540019932
Encrypted:	false
SSDEEP:	24:1HApiJiRelvm3wi8QAYcbm24sK+tFJaSDD:FJMx3whxYcbNp
MD5:	B8D55E4E3B9619784AECA61BA15C9C0F
SHA1:	B4A9C9885FBEB78635957296FDDD12579FEFA033
SHA-256:	E00FF20437599A5C184CA0C79546CB6500171A95E5F24B9B5535E89A89D3EC3D
SHA-512:	266589116EEE223056391C65808255EDAE10EB6DC5C26655D96F8178A41E283B06360AB8E08AC3857D172023C4F616EF073D0BEA770A3B3DD3EE74F5FFB2296B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "UTW.RZ NOWY".. },.. "explanationofflinedisabled": {.. "message": "Jeste. offline. Aby korzysta. z Dokument.w Google bez po..czenia internetowego, otw.rz ustawienia na stronie g..wnej Dokument.w Google i w..cz synchronizacj. offline nast.pnym razem, gdy b.dziesz mie. dost.p do internetu.".. },.. "explanationofflineenabled": {.. "message": "Jeste. offline, ale nadal mo.esz edytowa. dost.pne pliki i tworzy. nowe.".. },.. "extdesc": {.. "message": "Edytuj, tw.rz i wy.wietlaj swoje dokumenty, arkusze kalkulacyjne oraz prezentacje bez konieczno.ci ..czenia si. z internetem.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Wi.cej informacji".. },.. "popuphelptext": {.. "message": "Pisz, edytuj i wsp..pracuj, gdziekolwiek jeste. . niezale.nie od tego, czy masz po..czenie z internetem.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\pt_BR\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	907
Entropy (8bit):	4.599411354657937
Encrypted:	false
SSDEEP:	12:1HASvgU30CBxNd6GwXOK1styCJ02OK9+4KbCBxed6X4LBAt4rXgUCSUuYDHIIQka:1HAcXlyCJ5+Tsz4LY4rXSw/Q+ftkC
MD5:	608551F7026E6BA8C0CF85D9AC11F8E3
SHA1:	87B017B2D4DA17E322AF6384F82B57B807628617
SHA-256:	A73EEA087164620FA2260D3910D3FBE302ED85F454EDB1493A4F287D42FC882F
SHA-512:	82F52F8591DB3C0469CC16D7CBFDBF9116F6D5B5D2AD02A3D8FA39CE1378C64C0EA80AB8509519027F71A89EB8BBF38A8702D9AD26C8E6E0F499BF7DA18BF747
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Voc. est. off-line. Para usar o Documentos Google sem conex.o com a Internet, na pr.xima vez que se conectar, acesse as configura..es na p.gina inicial do Documentos Google e ative a sincroniza..o off-line.".. },.. "explanationofflineenabled": {.. "message": "Voc. est. off-line, mas mesmo assim pode editar os arquivos dispon.veis ou criar novos arquivos.".. },.. "extdesc": {.. "message": "Edite, crie e veja seus documentos, planilhas e apresenta..es sem precisar de acesso . Internet.".. },.. "extname": {.. "message": "Documentos Google off-line".. },.. "learnmore": {.. "message": "Saiba mais".. },.. "popuphelptext": {.. "message": "Escreva, edite e colabore onde voc. estiver, com ou sem conex.o com a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\pt_PT\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.604761241355716
Encrypted:	false
SSDEEP:	24:1HAcXzw8M+N0STDIjxX+qxCjKw5BKriEQFMJXkETs:zXzw0pKXbxqKw5BKri3aNY
MD5:	0963F2F3641A62A78B02825F6FA3941C
SHA1:	7E6972BEAB3D18E49857079A24FB9336BC4D2D48
SHA-256:	E93B8E7FB86D2F7DFAE57416BB1FB6EE0EEA25629B972A5922940F0023C85F90
SHA-512:	22DD42D967124DA5A2209DD05FB6AD3F5D0D2687EA956A22BA1E31C56EC09DEB53F0711CD5B24D672405358502E9D1C502659BB36CED66CAF83923B021CA0286
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est. offline. Para utilizar o Google Docs sem uma liga..o . Internet, aceda .s defini..es na p.gina inicial do Google Docs e ative a sincroniza..o offline da pr.xima vez que estiver ligado . Internet.".. },.. "explanationofflineenabled": {.. "message": "Est. offline, mas continua a poder editar os ficheiros dispon.veis ou criar novos ficheiros.".. },.. "extdesc": {.. "message": "Edite, crie e veja os documentos, as folhas de c.lculo e as apresenta..es, tudo sem precisar de aceder . Internet.".. },.. "extname": {.. "message": "Google Docs offline".. },.. "learnmore": {.. "message": "Saber mais".. },.. "popuphelptext": {.. "message": "Escreva edite e colabore onde quer que esteja, com ou sem uma liga..o . Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\ro\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	937
Entropy (8bit):	4.686555713975264
Encrypted:	false
SSDEEP:	24:1HA8dC6e6w+uFPHf2TFMMlecFpweWV4RE:pC6KvHf4plVweCx
MD5:	BED8332AB788098D276B448EC2B33351
SHA1:	6084124A2B32F386967DA980CBE79DD86742859E
SHA-256:	085787999D78FADFF9600C9DC5E3FF4FB4EB9BE06D6BB19DF2EEF8C284BE7B20
SHA-512:	22596584D10707CC1C8179ED3ABE46EF2C314CF9C3D0685921475944B8855AAB660590F8FA1CFDCE7976B4BB3BD9ABBBF053F61F1249A325FD0094E1C95692ED
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREEAZ. UN DOCUMENT".. },.. "explanationofflinedisabled": {.. "message": "E.ti offline. Pentru a utiliza Documente Google f.r. conexiune la internet, intr. .n set.rile din pagina principal. Documente Google .i activeaz. sincronizarea offline data viitoare c.nd e.ti conectat(.) la internet.".. },.. "explanationofflineenabled": {.. "message": "E.ti offline, dar po.i .nc. s. editezi fi.ierele disponibile sau s. creezi altele.".. },.. "extdesc": {.. "message": "Editeaz., creeaz. .i acceseaz. documente, foi de calcul .i prezent.ri - totul f.r. acces la internet.".. },.. "extname": {.. "message": "Documente Google Offline".. },.. "learnmore": {.. "message": "Afl. mai multe".. },.. "popuphelptext": {.. "message": "Scrie, editeaz. .i colaboreaz. oriunde ai fi, cu sau f.r. conexiune la internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\ru\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1337
Entropy (8bit):	4.69531415794894
Encrypted:	false
SSDEEP:	24:1HABEapHTEmxUomjsfDVs8THjqBK8/hHUg41v+Lph5eFTHQ:I/VdxUomjsre8Kh4Riph5eFU
MD5:	51D34FE303D0C90EE409A2397FCA437D
SHA1:	B4B9A7B19C62D0AA95D1F10640A5FBA628CCCA12
SHA-256:	BE733625ACD03158103D62BC0EEF272CA3F265AC30C87A6A03467481A177DAE3
SHA-512:	E8670DED44DC6EE30E5F41C8B2040CF8A463CD9A60FC31FA70EB1D4C9AC1A3558369792B5B86FA761A21F5266D5A35E5C2C39297F367DAA84159585C19EC492A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......".. },.. "explanationofflinedisabled": {.. "message": "..... ............ Google ......... ... ........., ............ . .... . ......... ............. . ......-...... . .......... .. ......... .........".. },.. "explanationofflineenabled": {.. "message": "... ........... . .......... .. ...... ......... ..... ..... . ............. .., . ....... ........ ......-.......".. },.. "extdesc": {.. "message": ".........., .............. . ............ ........., ....... . ........... ... ....... . ..........".. },.. "extname": {.. "message": "Google.......... ......".. },.. "learnmore": {.

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\si\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2846
Entropy (8bit):	3.7416822879702547
Encrypted:	false
SSDEEP:	48:YWi+htQTKEQb3aXQYJLSWy7sTQThQTnQtQTrEmQ6kiLsegQSJFwsQGaiPn779I+S:zhiTK5b3tUGVjTGTnQiTryOLpyaxYf/S
MD5:	B8A4FD612534A171A9A03C1984BB4BDD
SHA1:	F513F7300827FE352E8ECB5BD4BB1729F3A0E22A
SHA-256:	54241EBE651A8344235CC47AFD274C080ABAEBC8C3A25AFB95D8373B6A5670A2
SHA-512:	C03E35BFDE546AEB3245024EF721E7E606327581EFE9EAF8C5B11989D9033BDB58437041A5CB6D567BAA05466B6AAF054C47F976FD940EEEDF69FDF80D79095B
Malicious:	false
Preview:	{"createnew":{"message":"\u0db1\u0dc0 \u0dbd\u0dda\u0d9b\u0db1\u0dba\u0d9a\u0dca \u0dc3\u0dcf\u0daf\u0db1\u0dca\u0db1"},"explanationofflinedisabled":{"message":"\u0d94\u0db6 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2\u0dba. \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd \u0dc3\u0db8\u0dca\u0db6\u0db1\u0dca\u0db0\u0dad\u0dcf\u0dc0\u0d9a\u0dca \u0db1\u0ddc\u0db8\u0dd0\u0dad\u0dd2\u0dc0 Google Docs \u0db7\u0dcf\u0dc0\u0dd2\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8\u0da7, Google Docs \u0db8\u0dd4\u0dbd\u0dca \u0db4\u0dd2\u0da7\u0dd4\u0dc0 \u0db8\u0dad \u0dc3\u0dd0\u0d9a\u0dc3\u0dd3\u0db8\u0dca \u0dc0\u0dd9\u0dad \u0d9c\u0ddc\u0dc3\u0dca \u0d94\u0db6 \u0d8a\u0dc5\u0d9f \u0d85\u0dc0\u0dc3\u0dca\u0dae\u0dcf\u0dc0\u0dda \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd\u0dba\u0da7 \u0dc3\u0db6\u0dd0\u0db3\u0dd2 \u0dc0\u0dd2\u0da7 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2 \u0dc3\u0db8\u0db8\u0dd4\u0dc4\u0dd4\u0dbb\u0dca\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8 \u0d9a\u0dca\u200d\u0dbb\u0dd2\u0dba\u0dc

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\sk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	934
Entropy (8bit):	4.882122893545996
Encrypted:	false
SSDEEP:	24:1HAF8pMv1RS4LXL22IUjdh8uJwpPqLDEtxKLhSS:hyv1RS4LXx38u36QsS
MD5:	8E55817BF7A87052F11FE554A61C52D5
SHA1:	9ABDC0725FE27967F6F6BE0DF5D6C46E2957F455
SHA-256:	903060EC9E76040B46DEB47BBB041D0B28A6816CB9B892D7342FC7DC6782F87C
SHA-512:	EFF9EC7E72B272DDE5F29123653BC056A4BC2C3C662AE3C448F8CB6A4D1865A0679B7E74C1B3189F3E262109ED6BC8F8D2BDE14AEFC8E87E0F785AE4837D01C7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVORI. NOV.".. },.. "explanationofflinedisabled": {.. "message": "Ste offline. Ak chcete pou.i. Dokumenty Google bez pripojenia na internet, po najbli..om pripojen. na internet prejdite do nastaven. na domovskej str.nke Dokumentov Google a.zapnite offline synchroniz.ciu.".. },.. "explanationofflineenabled": {.. "message": "Ste offline, no st.le m..ete upravova. dostupn. s.bory a.vytv.ra. nov..".. },.. "extdesc": {.. "message": ".prava, tvorba a.zobrazenie dokumentov, tabuliek a.prezent.ci.. To v.etko bez pr.stupu na internet.".. },.. "extname": {.. "message": "Dokumenty Google v re.ime offline".. },.. "learnmore": {.. "message": ".al.ie inform.cie".. },.. "popuphelptext": {.. "message": "P..te, upravujte a.spolupracuje, kdeko.vek ste, a.to s.pripojen.m na internet aj bez neho.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\sl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	963
Entropy (8bit):	4.6041913416245
Encrypted:	false
SSDEEP:	12:1HASvgfECBxNFCEuKXowwJrpvPwNgEcPJJJEfWOCBxeFCJuGuU4KYXCSUXKDxX4A:1HAXMKYw8VYNLcaeDmKYLdX2zJBG5
MD5:	BFAEFEFF32813DF91C56B71B79EC2AF4
SHA1:	F8EDA2B632610972B581724D6B2F9782AC37377B
SHA-256:	AAB9CF9098294A46DC0F2FA468AFFF7CA7C323A1A0EFA70C9DB1E3A4DA05D1D4
SHA-512:	971F2BBF5E9C84DE3D31E5F2A4D1A00D891A2504F8AF6D3F75FC19056BFD059A270C4C9836AF35258ABA586A1888133FB22B484F260C1CBC2D1D17BC3B4451AA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "USTVARI NOVO".. },.. "explanationofflinedisabled": {.. "message": "Nimate vzpostavljene povezave. .e .elite uporabljati Google Dokumente brez internetne povezave, odprite nastavitve na doma.i strani Google Dokumentov in vklopite sinhronizacijo brez povezave, ko naslednji. vzpostavite internetno povezavo.".. },.. "explanationofflineenabled": {.. "message": "Nimate vzpostavljene povezave, vendar lahko .e vedno urejate razpolo.ljive datoteke ali ustvarjate nove.".. },.. "extdesc": {.. "message": "Urejajte, ustvarjajte in si ogledujte dokumente, preglednice in predstavitve . vse to brez internetnega dostopa.".. },.. "extname": {.. "message": "Google Dokumenti brez povezave".. },.. "learnmore": {.. "message": "Ve. o tem".. },.. "popuphelptext": {.. "message": "Pi.ite, urejajte in sodelujte, kjer koli ste, z internetno povezavo ali brez nje.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\sr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1320
Entropy (8bit):	4.569671329405572
Encrypted:	false
SSDEEP:	24:1HArg/fjQg2JwrfZtUWTrw1P4epMnRGi5TBmuPDRxZQ/XtiCw/Rwh/Q9EVz:ogUg2JwDZe6rwKI8VTP9xK1CwhI94
MD5:	7F5F8933D2D078618496C67526A2B066
SHA1:	B7050E3EFA4D39548577CF47CB119FA0E246B7A4
SHA-256:	4E8B69E864F57CDDD4DC4E4FAF2C28D496874D06016BC22E8D39E0CB69552769
SHA-512:	0FBAB56629368EEF87DEEF2977CA51831BEB7DEAE98E02504E564218425C751853C4FDEAA40F51ECFE75C633128B56AE105A6EB308FD5B4A2E983013197F5DBA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ....".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. ..... ......... Google ......... ... ........ ...., ..... . .......... .. ........ ........ Google .......... . ........ ...... .............. ... ....... ... ...... ........ .. ...........".. },.. "explanationofflineenabled": {.. "message": "...... ..., ... . .... ...... .. ....... ...... . ........ ........ ... .. ....... .....".. },.. "extdesc": {.. "message": "....... . ........... ........., ...... . ............ . ....... ...... . ... . ... .. ... ........ .........".. },.. "extname": {.. "message

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\sv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	884
Entropy (8bit):	4.627108704340797
Encrypted:	false
SSDEEP:	24:1HA0NOYT/6McbnX/yzklyOIPRQrJlvDymvBd:vNOcyHnX/yg0P4Bymn
MD5:	90D8FB448CE9C0B9BA3D07FB8DE6D7EE
SHA1:	D8688CAC0245FD7B886D0DEB51394F5DF8AE7E84
SHA-256:	64B1E422B346AB77C5D1C77142685B3FF7661D498767D104B0C24CB36D0EB859
SHA-512:	6D58F49EE3EF0D3186EA036B868B2203FE936CE30DC8E246C32E90B58D9B18C624825419346B62AF8F7D61767DBE9721957280AA3C524D3A5DFB1A3A76C00742
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKAPA NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du .r offline. Om du vill anv.nda Google Dokument utan internetuppkoppling, .ppna inst.llningarna p. Google Dokuments startsida och aktivera offlinesynkronisering n.sta g.ng du .r ansluten till internet.".. },.. "explanationofflineenabled": {.. "message": "Du .r offline, men det g.r fortfarande att redigera tillg.ngliga filer eller skapa nya.".. },.. "extdesc": {.. "message": "Redigera, skapa och visa dina dokument, kalkylark och presentationer . helt utan internet.tkomst.".. },.. "extname": {.. "message": "Google Dokument Offline".. },.. "learnmore": {.. "message": "L.s mer".. },.. "popuphelptext": {.. "message": "Skriv, redigera och samarbeta .verallt, med eller utan internetanslutning.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\sw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	980
Entropy (8bit):	4.50673686618174
Encrypted:	false
SSDEEP:	12:1HASvgNHCBxNx1HMHyMhybK7QGU78oCuafIvfCBxex6EYPE5E1pOCSUJqONtCBh8:1HAGDQ3y0Q/Kjp/zhDoKMkeAT6dBaX
MD5:	D0579209686889E079D87C23817EDDD5
SHA1:	C4F99E66A5891973315D7F2BC9C1DAA524CB30DC
SHA-256:	0D20680B74AF10EF8C754FCDE259124A438DCE3848305B0CAF994D98E787D263
SHA-512:	D59911F91ED6C8FF78FD158389B4D326DAF4C031B940C399569FE210F6985E23897E7F404B7014FC7B0ACEC086C01CC5F76354F7E5D3A1E0DEDEF788C23C2978
Malicious:	false
Preview:	{.. "createnew": {.. "message": "FUNGUA MPYA".. },.. "explanationofflinedisabled": {.. "message": "Haupo mtandaoni. Ili uweze kutumia Hati za Google bila muunganisho wa intaneti, wakati utakuwa umeunganishwa kwenye intaneti, nenda kwenye sehemu ya mipangilio kwenye ukurasa wa kwanza wa Hati za Google kisha uwashe kipengele cha usawazishaji nje ya mtandao.".. },.. "explanationofflineenabled": {.. "message": "Haupo mtandaoni, lakini bado unaweza kubadilisha faili zilizopo au uunde mpya.".. },.. "extdesc": {.. "message": "Badilisha, unda na uangalie hati, malahajedwali na mawasilisho yako . yote bila kutumia muunganisho wa intaneti.".. },.. "extname": {.. "message": "Hati za Google Nje ya Mtandao".. },.. "learnmore": {.. "message": "Pata Maelezo Zaidi".. },.. "popuphelptext": {.. "message": "Andika hati, zibadilishe na ushirikiane na wengine popote ulipo, iwe una muunganisho wa intaneti au huna.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\ta\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1941
Entropy (8bit):	4.132139619026436
Encrypted:	false
SSDEEP:	24:1HAoTZwEj3YfVLiANpx96zjlXTwB4uNJDZwq3CP1B2xIZiIH1CYFIZ03SoFyxrph:JCEjWiAD0ZXkyYFyPND1L/I
MD5:	DCC0D1725AEAEAAF1690EF8053529601
SHA1:	BB9D31859469760AC93E84B70B57909DCC02EA65
SHA-256:	6282BF9DF12AD453858B0B531C8999D5FD6251EB855234546A1B30858462231A
SHA-512:	6243982D764026D342B3C47C706D822BB2B0CAFFA51F0591D8C878F981EEF2A7FC68B76D012630B1C1EB394AF90EB782E2B49329EB6538DD5608A7F0791FDCF5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....... .........".. },.. "explanationofflinedisabled": {.. "message": ".......... ........... .... ....... ..... Google ......... .........., ...... .... ........... ......... ...., Google ... ................... ................ ......, ........ ......... ..........".. },.. "explanationofflineenabled": {.. "message": ".......... ..........., .......... .......... .......... ......... ........... ...... .....

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\te\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1969
Entropy (8bit):	4.327258153043599
Encrypted:	false
SSDEEP:	48:R7jQrEONienBcFNBNieCyOBw0/kCcj+sEf24l+Q+u1LU4ljCj55ONipR41ssrNix:RjQJN1nBcFNBNlCyGcj+RXl+Q+u1LU4s
MD5:	385E65EF723F1C4018EEE6E4E56BC03F
SHA1:	0CEA195638A403FD99BAEF88A360BD746C21DF42
SHA-256:	026C164BAE27DBB36A564888A796AA3F188AAD9E0C37176D48910395CF772CEA
SHA-512:	E55167CB5638E04DF3543D57C8027B86B9483BFCAFA8E7C148EDED66454AEBF554B4C1CF3C33E93EC63D73E43800D6A6E7B9B1A1B0798B6BDB2F699D3989B052
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ...... ........ ......".. },.. "explanationofflinedisabled": {.. "message": ".... ........... ........ ......... ........ ....... Google Docs... .............., .... ............ ....... ..... ...... .... Google Docs .... ...... ............. ......, ........ ........ ... .......".. },.. "explanationofflineenabled": {.. "message": ".... ........... ......., .... .... ........ .......... .... ....... ..... ....... .... ..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\th\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1674
Entropy (8bit):	4.343724179386811
Encrypted:	false
SSDEEP:	48:fcGjnU3UnGKD1GeU3pktOggV1tL2ggG7Q:f3jnDG1eUk0g6RLE
MD5:	64077E3D186E585A8BEA86FF415AA19D
SHA1:	73A861AC810DABB4CE63AD052E6E1834F8CA0E65
SHA-256:	D147631B2334A25B8AA4519E4A30FB3A1A85B6A0396BC688C68DC124EC387D58
SHA-512:	56DD389EB9DD335A6214E206B3BF5D63562584394D1DE1928B67D369E548477004146E6CB2AD19D291CB06564676E2B2AC078162356F6BC9278B04D29825EF0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": ".............. ............. Google .................................... ............................... Google ...... .................................................................".. },.. "explanationofflineenabled": {.. "message": "................................................................".. },.. "extdesc": {.. "message": "..... ..... ........

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\tr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1063
Entropy (8bit):	4.853399816115876
Encrypted:	false
SSDEEP:	24:1HAowYuBPgoMC4AGehrgGm7tJ3ckwFrXnRs5m:GYsPgrCtGehkGc3cvXr
MD5:	76B59AAACC7B469792694CF3855D3F4C
SHA1:	7C04A2C1C808FA57057A4CCEEE66855251A3C231
SHA-256:	B9066A162BEE00FD50DC48C71B32B69DFFA362A01F84B45698B017A624F46824
SHA-512:	2E507CA6874DE8028DC769F3D9DFD9E5494C268432BA41B51568D56F7426F8A5F2E5B111DDD04259EB8D9A036BB4E3333863A8FC65AAB793BCEF39EDFE41403B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN. OLU.TUR".. },.. "explanationofflinedisabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Google Dok.manlar'. .nternet ba.lant.s. olmadan kullanmak i.in, .nternet'e ba.lanabildi.inizde Google Dok.manlar ana sayfas.nda Ayarlar'a gidin ve .evrimd... senkronizasyonu etkinle.tirin.".. },.. "explanationofflineenabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Ancak, yine de mevcut dosyalar. d.zenleyebilir veya yeni dosyalar olu.turabilirsiniz.".. },.. "extdesc": {.. "message": "Dok.man, e-tablo ve sunu olu.turun, bunlar. d.zenleyin ve g.r.nt.leyin. T.m bu i.lemleri internet eri.imi olmadan yapabilirsiniz.".. },.. "extname": {.. "message": "Google Dok.manlar .evrimd...".. },.. "learnmore": {.. "message": "Daha Fazla Bilgi".. },.. "popuphelptext": {.. "message": ".nternet ba.lant.n.z olsun veya olmas.n, nerede olursan.z olun yaz.n, d.zenl

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\uk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1333
Entropy (8bit):	4.686760246306605
Encrypted:	false
SSDEEP:	24:1HAk9oxkm6H4KyGGB9GeGoxPEYMQhpARezTtHUN97zlwpEH7:VKU1GB9GeBc/OARETt+9/WCb
MD5:	970963C25C2CEF16BB6F60952E103105
SHA1:	BBDDACFEEE60E22FB1C130E1EE8EFDA75EA600AA
SHA-256:	9FA26FF09F6ACDE2457ED366C0C4124B6CAC1435D0C4FD8A870A0C090417DA19
SHA-512:	1BED9FE4D4ADEED3D0BC8258D9F2FD72C6A177C713C3B03FC6F5452B6D6C2CB2236C54EA972ECE7DBFD756733805EB2352CAE44BAB93AA8EA73BB80460349504
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........".. },.. "explanationofflinedisabled": {.. "message": ".. . ...... ....... ... ............. Google ........... ... ......... . .........., ......... . ............ .. ........ ........ Google .......... . ......... ......-............., .... ...... . .......".. },.. "explanationofflineenabled": {.. "message": ".. . ...... ......, ..... ... .... ...... .......... ........ ..... ... .......... .....".. },.. "extdesc": {.. "message": "........., ......... . ............ ........., .......... ....... .. ........... ... ....... .. ..........".. },.. "extname": {.. "message": "Goo

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\ur\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1263
Entropy (8bit):	4.861856182762435
Encrypted:	false
SSDEEP:	24:1HAl3zNEUhN3mNjkSIkmdNpInuUVsqNtOJDhY8Dvp/IkLzx:e3uUhQKvkmd+s11Lp1F
MD5:	8B4DF6A9281333341C939C244DDB7648
SHA1:	382C80CAD29BCF8AAF52D9A24CA5A6ECF1941C6B
SHA-256:	5DA836224D0F3A96F1C5EB5063061AAD837CA9FC6FED15D19C66DA25CF56F8AC
SHA-512:	FA1C015D4EA349F73468C78FDB798D462EEF0F73C1A762298798E19F825E968383B0A133E0A2CE3B3DF95F24C71992235BFC872C69DC98166B44D3183BF8A9E5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ......".. },.. "explanationofflinedisabled": {.. "message": ".. .. .... .... Google Docs .. .... ....... ..... ....... .... ..... .... ... .. .. ....... .. ..... ... .. Google Docs ... ... .. ....... .. ..... ... .. .... ...... ..... .. .. .....".. },.. "explanationofflineenabled": {.. "message": ".. .. .... ... .... .. ... ... ...... ..... ... ..... .. .... ... .. ... ..... ... .... ....".. },.. "extdesc": {.. "message": ".......... .......... ... ....... . .... ... ....... .. ..... .. .... ...... ..... .... ... ..... .......".. },.. "extname": {.. "message": "Google Docs .. ....".. },.. "learnmore": {..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\vi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1074
Entropy (8bit):	5.062722522759407
Encrypted:	false
SSDEEP:	24:1HAhBBLEBOVUSUfE+eDFmj4BLErQ7e2CIer32KIxqJ/HtNiE5nIGeU+KCVT:qHCDheDFmjDQgX32/S/hI9jh
MD5:	773A3B9E708D052D6CBAA6D55C8A5438
SHA1:	5617235844595D5C73961A2C0A4AC66D8EA5F90F
SHA-256:	597C5F32BC999746BC5C2ED1E5115C523B7EB1D33F81B042203E1C1DF4BBCAFE
SHA-512:	E5F906729E38B23F64D7F146FA48F3ABF6BAED9AAFC0E5F6FA59F369DC47829DBB4BFA94448580BD61A34E844241F590B8D7AEC7091861105D8EBB2590A3BEE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "T.O M.I".. },.. "explanationofflinedisabled": {.. "message": "B.n .ang ngo.i tuy.n. .. s. d.ng Google T.i li.u m. kh.ng c.n k.t n.i Internet, .i ..n c.i ..t tr.n trang ch. c.a Google T.i li.u v. b.t ..ng b. h.a ngo.i tuy.n v.o l.n ti.p theo b.n ...c k.t n.i v.i m.ng Internet.".. },.. "explanationofflineenabled": {.. "message": "B.n .ang ngo.i tuy.n, tuy nhi.n b.n v.n c. th. ch.nh s.a c.c t.p c. s.n ho.c t.o c.c t.p m.i.".. },.. "extdesc": {.. "message": "Ch.nh s.a, t.o v. xem t.i li.u, b.ng t.nh v. b.n tr.nh b.y . t.t c. m. kh.ng c.n truy c.p Internet.".. },.. "extname": {.. "message": "Google T.i li.u ngo.i tuy.n".. },.. "learnmore": {.. "message": "Ti.m hi..u th.m".. },.. "popuphelptext": {.. "message": "Vi.t, ch.nh s.a v. c.ng t.c

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\zh_CN\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	879
Entropy (8bit):	5.7905809868505544
Encrypted:	false
SSDEEP:	12:1HASvgteHCBxNtSBXuetOrgIkA2OrWjMOCBxetSBXK01fg/SOiCSUEQ27e1CBhUj:1HAFsHtrIkA2jqldI/727eggcLk9pf
MD5:	3E76788E17E62FB49FB5ED5F4E7A3DCE
SHA1:	6904FFA0D13D45496F126E58C886C35366EFCC11
SHA-256:	E72D0BB08CC3005556E95A498BD737E7783BB0E56DCC202E7D27A536616F5EE0
SHA-512:	F431E570AB5973C54275C9EEF05E49E6FE2D6C17000F98D672DD31F9A1FAD98E0D50B5B0B9CF85D5BBD3B655B93FD69768C194C8C1688CB962AA75FF1AF9BDB6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ................ Google ....................".. },.. "explanationofflineenabled": {.. "message": ".............................".. },.. "extdesc": {.. "message": "...................... - ........".. },.. "extname": {.. "message": "Google .......".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "...............................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\zh_HK\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1205
Entropy (8bit):	4.50367724745418
Encrypted:	false
SSDEEP:	24:YWvqB0f7Cr591AhI9Ah8U1F4rw4wtB9G976d6BY9scKUrPoAhNehIrI/uIXS1:YWvl7Cr5JHrw7k7u6BY9trW+rHR
MD5:	524E1B2A370D0E71342D05DDE3D3E774
SHA1:	60D1F59714F9E8F90EF34138D33FBFF6DD39E85A
SHA-256:	30F44CFAD052D73D86D12FA20CFC111563A3B2E4523B43F7D66D934BA8DACE91
SHA-512:	D2225CF2FA94B01A7B0F70A933E1FDCF69CDF92F76C424CE4F9FCC86510C481C9A87A7B71F907C836CBB1CA41A8BEBBD08F68DBC90710984CA738D293F905272
Malicious:	false
Preview:	{"createnew":{"message":"\u5efa\u7acb\u65b0\u9805\u76ee"},"explanationofflinedisabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\u3002\u5982\u8981\u5728\u6c92\u6709\u4e92\u806f\u7db2\u9023\u7dda\u7684\u60c5\u6cc1\u4e0b\u4f7f\u7528\u300cGoogle \u6587\u4ef6\u300d\uff0c\u8acb\u524d\u5f80\u300cGoogle \u6587\u4ef6\u300d\u9996\u9801\u7684\u8a2d\u5b9a\uff0c\u4e26\u5728\u4e0b\u6b21\u9023\u63a5\u4e92\u806f\u7db2\u6642\u958b\u555f\u96e2\u7dda\u540c\u6b65\u529f\u80fd\u3002"},"explanationofflineenabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\uff0c\u4f46\u60a8\u4ecd\u53ef\u4ee5\u7de8\u8f2f\u53ef\u7528\u6a94\u6848\u6216\u5efa\u7acb\u65b0\u6a94\u6848\u3002"},"extdesc":{"message":"\u7de8\u8f2f\u3001\u5efa\u7acb\u53ca\u67e5\u770b\u60a8\u7684\u6587\u4ef6\u3001\u8a66\u7b97\u8868\u548c\u7c21\u5831\uff0c\u5b8c\u5168\u4e0d\u9700\u4f7f\u7528\u4e92\u806f\u7db2\u3002"},"extname":{"message":"\u300cGoogle \u6587\u4ef6\u300d\u96e2\u7dda\u7248"},"learnmore":{"message":"\u77ad\u89e3\u8a

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\zh_TW\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	843
Entropy (8bit):	5.76581227215314
Encrypted:	false
SSDEEP:	12:1HASvgmaCBxNtBtA24ZOuAeOEHGOCBxetBtMHQIJECSUnLRNocPNy6CBhU5OGg1O:1HAEfQkekYyLvRmcPGgzcL2kx5U
MD5:	0E60627ACFD18F44D4DF469D8DCE6D30
SHA1:	2BFCB0C3CA6B50D69AD5745FA692BAF0708DB4B5
SHA-256:	F94C6DDEDF067642A1AF18D629778EC65E02B6097A8532B7E794502747AEB008
SHA-512:	6FF517EED4381A61075AC7C8E80C73FAFAE7C0583BA4FA7F4951DD7DBE183C253702DEE44B3276EFC566F295DAC1592271BE5E0AC0C7D2C9F6062054418C7C27
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".....".. },.. "explanationofflinedisabled": {.. "message": ".................. Google ................ Google .................".. },.. "explanationofflineenabled": {.. "message": ".........................".. },.. "extdesc": {.. "message": ".............................".. },.. "extname": {.. "message": "Google .....".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "................................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_locales\zu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	912
Entropy (8bit):	4.65963951143349
Encrypted:	false
SSDEEP:	24:YlMBKqLnI7EgBLWFQbTQIF+j4h3OadMJzLWnCieqgwLeOvKrCRPE:YlMBKqjI7EQOQb0Pj4heOWqeyaBrMPE
MD5:	71F916A64F98B6D1B5D1F62D297FDEC1
SHA1:	9386E8F723C3F42DA5B3F7E0B9970D2664EA0BAA
SHA-256:	EC78DDD4CCF32B5D76EC701A20167C3FBD146D79A505E4FB0421FC1E5CF4AA63
SHA-512:	30FA4E02120AF1BE6E7CC7DBB15FAE5D50825BD6B3CF28EF21D2F2E217B14AF5B76CFCC165685C3EDC1D09536BFCB10CA07E1E2CC0DA891CEC05E19394AD7144
Malicious:	false
Preview:	{"createnew":{"message":"DALA ENTSHA"},"explanationofflinedisabled":{"message":"Awuxhunyiwe ku-inthanethi. Ukuze usebenzise i-Google Amadokhumenti ngaphandle koxhumano lwe-inthanethi, iya kokuthi izilungiselelo ekhasini lasekhaya le-Google Amadokhumenti bese uvula ukuvumelanisa okungaxhunyiwe ku-inthanethi ngesikhathi esilandelayo lapho uxhunywe ku-inthanethi."},"explanationofflineenabled":{"message":"Awuxhunyiwe ku-inthanethi, kodwa usangakwazi ukuhlela amafayela atholakalayo noma udale amasha."},"extdesc":{"message":"Hlela, dala, futhi ubuke amadokhumenti akho, amaspredishithi, namaphrezentheshini \u2014 konke ngaphandle kokufinyelela kwe-inthanethi."},"extname":{"message":"I-Google Amadokhumenti engaxhumekile ku-intanethi"},"learnmore":{"message":"Funda kabanzi"},"popuphelptext":{"message":"Bhala, hlela, futhi hlanganyela noma yikuphi lapho okhona, unalo noma ungenalo uxhumano lwe-inthanethi."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11280
Entropy (8bit):	5.751992630887702
Encrypted:	false
SSDEEP:	192:RBG1G1UPkUj/86Op//Ier/2nsNLJtwg+K8HNnswuHEIIMuuqd7CKqvUpGTcjG:m8IEI4u8Rp
MD5:	250C48F4915DD4C0DFA7E7E021A4F066
SHA1:	092A98BF40D8C18280393BF3811A7DFA9A9FD326
SHA-256:	26D9B129339E2E2EB8E0223E16DB3CF0EA220AC0799480D462C236E6A425665E
SHA-512:	8B18E232992E55E8DA97AC46D7AACA061508341D1EADCEFF1E9D0677734DFA8B892AB44754A3AA100585F5B2F2562BC4F2D7103065050FFCD00F91D5915CE5E6
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\dasherSettingSchema.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	854
Entropy (8bit):	4.284628987131403
Encrypted:	false
SSDEEP:	12:ont+QByTwnnGNcMbyWM+Q9TZldnnnGGxlF/S0WOtUL0M0r:vOrGe4dDCVGOjWJ0nr
MD5:	4EC1DF2DA46182103D2FFC3B92D20CA5
SHA1:	FB9D1BA3710CF31A87165317C6EDC110E98994CE
SHA-256:	6C69CE0FE6FAB14F1990A320D704FEE362C175C00EB6C9224AA6F41108918CA6
SHA-512:	939D81E6A82B10FF73A35C931052D8D53D42D915E526665079EEB4820DF4D70F1C6AEBAB70B59519A0014A48514833FEFD687D5A3ED1B06482223A168292105D
Malicious:	false
Preview:	{. "type": "object",. "properties": {. "allowedDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Allow users to enable Docs offline for the specified managed domains.",. "description": "Users on managed devices will be able to enable docs offline if they are part of the specified managed domains.". },. "autoEnabledDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Auto enable Docs offline for the specified managed domains in certain eligible situations.",. "description": "Users on managed devices, in certain eligible situations, will be able to automatically access and edit recent files offline for the managed domains set in this property. They can still disable it from Drive settings.". }. }.}.

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2525
Entropy (8bit):	5.417833205646285
Encrypted:	false
SSDEEP:	24:1HEZ4WPoolELb/KxktGw3VwELb/4iL2QDkUpvdz1xxy/Atj1K9yiVvQe:WdP5aLTKQGwlTLT4oRvvxs/APKgiVb
MD5:	236D2DD305D64C2B6ABD232ED53270DF
SHA1:	9F6885E95FBC4213631F0B0EA49C803D07D34136
SHA-256:	2A4D526B9D1C8665427FB9E0DA58D16FDDE382DD74C1258941B18701EF7880C3
SHA-512:	B76AF22153F79BCA2429A23746A62A430A521E952E7F94936648ECFD25AFDD9801ACBF6FD16941918A4FEDE39DE747AB6C6336BC86CA74384920AF7E815DB855
Malicious:	false
Preview:	{.. "author": {.. "email": "docs-hosted-app-own@google.com".. },.. "background": {.. "service_worker": "service_worker_bin_prod.js".. },.. "content_capabilities": {.. "matches": [ "https://docs.google.com/", "https://drive.google.com/", "https://drive-autopush.corp.google.com/", "https://drive-daily-0.corp.google.com/", "https://drive-daily-1.corp.google.com/", "https://drive-daily-2.corp.google.com/", "https://drive-daily-3.corp.google.com/", "https://drive-daily-4.corp.google.com/", "https://drive-daily-5.corp.google.com/", "https://drive-daily-6.corp.google.com/", "https://drive-preprod.corp.google.com/", "https://drive-staging.corp.google.com/" ],.. "permissions": [ "clipboardRead", "clipboardWrite", "unlimitedStorage" ].. },.. "content_security_policy": {.. "extension_pages": "script-src 'self'; object-src 'self'".. },.. "default_locale": "en_US",.. "description": "__MSG_extDesc__",.. "externally_connectable": {.. "ma

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\offscreendocument.html

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	97
Entropy (8bit):	4.862433271815736
Encrypted:	false
SSDEEP:	3:PouV7uJL5XL/oGLvLAAJR90bZNGXIL0Hac4NGb:hxuJL5XsOv0EmNV4HX4Qb
MD5:	B747B5922A0BC74BBF0A9BC59DF7685F
SHA1:	7BF124B0BE8EE2CFCD2506C1C6FFC74D1650108C
SHA-256:	B9FA2D52A4FFABB438B56184131B893B04655B01F336066415D4FE839EFE64E7
SHA-512:	7567761BE4054FCB31885E16D119CD4E419A423FFB83C3B3ED80BFBF64E78A73C2E97AAE4E24AB25486CD1E43877842DB0836DB58FBFBCEF495BC53F9B2A20EC
Malicious:	false
Preview:	<!DOCTYPE html>.<html>.<body>. <script src="offscreendocument_main.js"></script>.</body>.</html>

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\offscreendocument_main.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3777)
Category:	dropped
Size (bytes):	98880
Entropy (8bit):	5.414989230634404
Encrypted:	false
SSDEEP:	1536:M+TW9bPq1M3ZOC0pJ/BjXf3Zk/7hry6fq66V3gr9KUw5SXfPxhZhGurH6c/V:WPLZwJJXf3ZvRV3gJKU/fP+urHRV
MD5:	DC93A1045D1AD8D7ADD06B93B2FE79E2
SHA1:	CAFCC8DB7F8E3FD2F8C1EFAC7B385D7616F55EA3
SHA-256:	D5CEB4449384CD2D7898C052B7B99417961880945FC4EAE80EBBAF8E24CC0A3E
SHA-512:	025F7103D1F7D607825BE916D0131C1E04B295EB562974A77F5A16E7BF40250B5608071779B420E4738F86F09A6F7C889469FA898268894FFFEEB7465C589E81
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function ba(){return function(){}}function l(a){return function(){return this[a]}}function ca(a){return function(){return a}}var n;function da(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function fa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var q=fa(this);function r(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new Ty

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\page_embed_script.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	291
Entropy (8bit):	4.65176400421739
Encrypted:	false
SSDEEP:	6:2LGX86tj66rU8j6D3bWq2un/XBtzHrH9Mnj63LK603:2Q8KVqb2u/Rt3Onj1
MD5:	3AB0CD0F493B1B185B42AD38AE2DD572
SHA1:	079B79C2ED6F67B5A5BD9BC8C85801F96B1B0F4B
SHA-256:	73E3888CCBC8E0425C3D2F8D1E6A7211F7910800EEDE7B1E23AD43D3B21173F7
SHA-512:	32F9DB54654F29F39D49F7A24A1FC800DBC0D4A8A1BAB2369C6F9799BC6ADE54962EFF6010EF6D6419AE51D5B53EC4B26B6E2CDD98DEF7CC0D2ADC3A865F37D3
Malicious:	false
Preview:	(function(){window._docs_chrome_extension_exists=!0;window._docs_chrome_extension_features_version=2;window._docs_chrome_extension_permissions="alarms clipboardRead clipboardWrite storage unlimitedStorage offscreen".split(" ");window._docs_chrome_extension_manifest_version=3;}).call(this);.

C:\Users\user\AppData\Local\Temp\scoped_dir1896_680869441\CRX_INSTALL\service_worker_bin_prod.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3782)
Category:	dropped
Size (bytes):	107677
Entropy (8bit):	5.396220758526552
Encrypted:	false
SSDEEP:	1536:7nwyvB1qCo7mWUgsUopF5Xy4FlAwxdhvHcrdncqAKxwjBnKwIDQgrOChkPIgmrCp:wh6gstXy4FM5ncJKxCnKWgrd0v
MD5:	E8015AC436B33034EDF7DA060E853A04
SHA1:	62D0F6EB0E441158A1F56F6E0C70D3D229B57886
SHA-256:	23C953E989FF4AF6126D4A3B2AD21B33A82512FC8768045C00F05940DE2C9978
SHA-512:	C35AC8692FC22B78365CA202E173A90AE4B5DBA338B7FC9EEB17EDDF5868B52CF1D13DC0EDAF36BE1CC0E0152F41AC4027C51D7ECA27778B483E3FC83F11EA82
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function ba(){return function(){}}function k(a){return function(){return this[a]}}function ca(a){return function(){return a}}var n;function da(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function fa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var q=fa(this);function r(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new Ty

C:\Windows\Installer\6cb8c3.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Google Chrome 130.0.6723.60, Subject: Google Chrome, Author: Google LLC, Keywords: Installer, Template: Intel;1033, Revision Number: {8433B8FF-2AEA-4C0A-ACBD-5B269201A41E}, Create Time/Date: Thu Jan 11 14:59:44 2024, Last Saved Time/Date: Thu Jan 11 14:59:44 2024, Number of Pages: 200, Number of Words: 12, Name of Creating Application: MSI Wrapper (11.0.53.0), Security: 2
Category:	dropped
Size (bytes):	2002944
Entropy (8bit):	5.799025318631515
Encrypted:	false
SSDEEP:	24576:ht9cpVDhXukQS9k2+y4csX3+4OkoorlvRaLicTOUKX:WpRhX5VxP4XO4OKrPaLNazX
MD5:	8B77331198791037F336022EF7E269D2
SHA1:	C48DDD7547EEC8417B295BCD00CBAC3C34BD175B
SHA-256:	AA283D1F02C6D3C83DCC1665E9944ED54705E6C46132276C3DB208D043E6CA34
SHA-512:	D841C91694094CBB1EA9B6F282748EC994C6BD0AF3D037831481B9713C28DD8AE79149B93B7A30D2BCDDE7875B42AD102EA81DE6F99E6C4DD5F25AE7B5D947E5
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSIBE32.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	212992
Entropy (8bit):	6.513409725320959
Encrypted:	false
SSDEEP:	3072:xspAtOdmXwCGjtYNKbYO2gjpcm8rRuqpjCL42loHUvU0yGxr5GqM2a8:jtOdiRQYpgjpjew5DHyGxcqo8
MD5:	0C8921BBCC37C6EFD34FAF44CF3B0CB5
SHA1:	DCFA71246157EDCD09EECAF9D4C5E360B24B3E49
SHA-256:	FD622CF73EA951A6DE631063ABA856487D77745DD1500ADCA61902B8DDE56FE1
SHA-512:	ED55443E20D40CCA90596F0A0542FA5AB83FE0270399ADFAAFD172987FB813DFD44EC0DA0A58C096AF3641003F830341FE259AD5BCE9823F238AE63B7E11E108
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: 57ff67.msi, Detection: malicious, Browse Filename: 293944637.dll, Detection: malicious, Browse Filename: setup.msi, Detection: malicious, Browse Filename: Document.lnk.download.lnk, Detection: malicious, Browse Filename: 2Wr5r2e9vo.msi, Detection: malicious, Browse Filename: 2Wr5r2e9vo.msi, Detection: malicious, Browse Filename: wE1inOhJA5.msi, Detection: malicious, Browse Filename: wE1inOhJA5.msi, Detection: malicious, Browse Filename: EVp6NE5N9g.msi, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............p...p...p.......p.....p..../.p.......p...q.%.p.......p.....p.....p.Rich..p.........................PE..L...Y..e...........!.....h..........K................................................]....@.........................P...]............P.......................`.....................................p...@...............t............................text....f.......h.................. ..`.rdata...............l..............@..@.data....5..........................@....rsrc........P......................@..@.reloc...)...`...*..................@..B........................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\SourceHash{0B0E6C8A-C139-47E7-99E1-CFD19140782C}

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.7687627893345323
Encrypted:	false
SSDEEP:	12:JSbX72FjaaAGiLIlHVRpiBh/7777777777777777777777777vDHFoc8oipHGp7z:JQaQI5Aenoi5ZF
MD5:	C9296956D688366DDA8BBD7D81702278
SHA1:	27469C935D593D04899A4473CEA95215727CFFC9
SHA-256:	3515C1DDBB239D9618A762EB435D1CF379A3A99F4FFC0CF6B4B7B80412B50A31
SHA-512:	B9551DFF1239DB8256BB1D5D9344F9E4034DE4723C19AC098F6A694A02AB1EFF25264D606B03BB676BB7018445D969C25CB6D0C191DA8B61016AA0159C482B2E
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\inprogressinstallinfo.ipi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.211286285753737
Encrypted:	false
SSDEEP:	48:u3JGucJveFXJPT5mDeoddSP8rzddSBGrl4:uZGC3Tgau9qt
MD5:	E1C831A3E1F68AEC48B02B19A6D432C5
SHA1:	A3316D308517DFA529E898BC8305ABB21B814120
SHA-256:	C0F206133FBE2616E54259880F4EAE3776A7979EB1AF56683015D688F31B5CE9
SHA-512:	69DBD7D7A23BE83B5B61FEF7A8F1E5F8294A464A380513E31D9A6D03CF78CD86A875983B4AADD3747F8693E14D8CC88F2E1EE997F3E46043CA2079E0E9BA1C37
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	364484
Entropy (8bit):	5.365496317208267
Encrypted:	false
SSDEEP:	1536:6qELG7gK+RaOOp3LCCpfmLgYI66xgFF9Sq8K6MAS2OMUHl6Gin327D22A26Kgauk:zTtbmkExhMJCIpED
MD5:	6C71CA99EBB3740A72F86E1E4C887B2E
SHA1:	8D31CB726B3E70AB0DC7E7268BB6822EF092364C
SHA-256:	DDF2028C3B50986E51EC1A2FB9C082DA81072FD3DCD1A34F58178B38CA191A09
SHA-512:	8AD51FACB232E6DD22812668746AC17D1FAC84854CF67D975754E8864A8AE5878BA56D5C04CC7897DA891D3560116C702AEE7436E2740D548AA715B61FF7C12A
Malicious:	false
Preview:	.To learn about increasing the verbosity of the NGen log files please see http://go.microsoft.com/fwlink/?linkid=210113..12/07/2019 14:54:22.458 [5488]: Command line: D:\wd\compilerTemp\BMT.200yuild.1bk\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe executeQueuedItems /nologo ..12/07/2019 14:54:22.473 [5488]: Executing command from offline queue: install "System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil" /NoDependencies /queue:1..12/07/2019 14:54:22.490 [5488]: Executing command from offline queue: install "System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil" /NoDependencies /queue:3..12/07/2019 14:54:22.490 [5488]: Exclusion list entry found for System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil; it will not be installed..12/07/2019 14:54:22.490 [

C:\Windows\Temp\~DF0D43D863E0A816CD.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	81920
Entropy (8bit):	0.10422018981867405
Encrypted:	false
SSDEEP:	24:Urj0hJfAebfddipV7UddipVdVQwGrlrkg9S/+eq:U3QrfddSBUddSP8rm5q
MD5:	199823AA386DB17797F44DD87FDF65D6
SHA1:	A7B1D834B1EDC83DF1C10DABE0DC5BC0F06B0DF0
SHA-256:	43AE0491C5EE9CC2E293C768FF6CB001BA5EB3B746524C0D7CB98DCA5D6731F9
SHA-512:	465EBB86D310DC70B1910079230F88BF0A1AA0053902EB5EEB3C30E18FC419575CA0ADA4671C4A6466435DA942F452AB1E8A3624B4A16483BE8CF2EDA605D0BB
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF3F6F1BF70D072A3C.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.07124915526552107
Encrypted:	false
SSDEEP:	6:2/9LG7iVCnLG7iVrKOzPLHKOoc8o/d4WsHRXiVky6l7:2F0i8n0itFzDHFoc8oipHH7
MD5:	9733A36C4825183B6352CF03CC41F8E1
SHA1:	A702F86D60F9EB2B4D985FFA8035D3C9CC6CB88D
SHA-256:	8760D146700B5F6295B64B4ABCE3467CFD6BBC3F65ADA309010AB9E19A933213
SHA-512:	6E0A950DB85EE467DE718F57736FD00DB711768929E96E6E4D5D16206EFD7FB990490FAF8D99163C7E871F6E2653B13E43358345D7F7DEC53A952AE6252BA07A
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

\Device\ConDrv

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	ASCII text, with very long lines (962), with CRLF, CR, LF line terminators, with overstriking
Category:	dropped
Size (bytes):	1161
Entropy (8bit):	3.5299366232711566
Encrypted:	false
SSDEEP:	24:zKcNDrQDdXXXXXXXXXXXXXXXXXXeDYJQn:zKaDM5XXXXXXXXXXXXXXXXXXe9
MD5:	EE5EFB2A06F74BDE3CEC3D97D77126E6
SHA1:	85B14F02D168AD5CE8260BED113C0EB78D3D8B70
SHA-256:	2488DAAC0A5076F18D31821F1C52F003DC17CC0B51A625AA5A3473873C128C1C
SHA-512:	61F68418AFFB3158C63754F6B30B3FF457DAB9CE068BD40C6B8B5817B4C14330E6DACFFFE724EC0FAAFA58E15189AAD462D507D0FD5AF7CF6172620DDB520FD7
Malicious:	false
Preview:	Microsoft (R) File Expansion Utility..Copyright (c) Microsoft Corporation. All rights reserved.....Adding files\setup.exe to Extraction Queue....Expanding Files ......Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................P

Static File Info

General

File type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Google Chrome 130.0.6723.60, Subject: Google Chrome, Author: Google LLC, Keywords: Installer, Template: Intel;1033, Revision Number: {8433B8FF-2AEA-4C0A-ACBD-5B269201A41E}, Create Time/Date: Thu Jan 11 14:59:44 2024, Last Saved Time/Date: Thu Jan 11 14:59:44 2024, Number of Pages: 200, Number of Words: 12, Name of Creating Application: MSI Wrapper (11.0.53.0), Security: 2
Entropy (8bit):	5.799025318631515
TrID:	Generic OLE2 / Multistream Compound File (8008/1) 100.00%
File name:	setup (2).msi
File size:	2'002'944 bytes
MD5:	8b77331198791037f336022ef7e269d2
SHA1:	c48ddd7547eec8417b295bcd00cbac3c34bd175b
SHA256:	aa283d1f02c6d3c83dcc1665e9944ed54705e6c46132276c3db208d043e6ca34
SHA512:	d841c91694094cbb1ea9b6f282748ec994c6bd0af3d037831481b9713c28dd8ae79149b93b7a30d2bcdde7875b42ad102ea81de6f99e6c4dd5f25ae7b5d947e5
SSDEEP:	24576:ht9cpVDhXukQS9k2+y4csX3+4OkoorlvRaLicTOUKX:WpRhX5VxP4XO4OKrPaLNazX
TLSH:	2A9578D13744C127E94B08314E67C799A76DFCA0AA30B0873770BB5E5B3AAD3AE61741
File Content Preview:	........................>......................................................................................................................................................................................................................................

File Icon


Icon Hash:	2d2e3797b32b2b99

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 12, 2024 12:28:25.362078905 CET	49675	443	192.168.2.5	23.1.237.91
Dec 12, 2024 12:28:25.363339901 CET	49674	443	192.168.2.5	23.1.237.91
Dec 12, 2024 12:28:25.471420050 CET	49673	443	192.168.2.5	23.1.237.91
Dec 12, 2024 12:28:34.971435070 CET	49675	443	192.168.2.5	23.1.237.91
Dec 12, 2024 12:28:34.971462965 CET	49674	443	192.168.2.5	23.1.237.91
Dec 12, 2024 12:28:35.080776930 CET	49673	443	192.168.2.5	23.1.237.91
Dec 12, 2024 12:28:37.480595112 CET	443	49703	23.1.237.91	192.168.2.5
Dec 12, 2024 12:28:37.480680943 CET	49703	443	192.168.2.5	23.1.237.91
Dec 12, 2024 12:28:58.888580084 CET	49752	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:28:58.888628960 CET	443	49752	3.33.186.135	192.168.2.5
Dec 12, 2024 12:28:58.888844967 CET	49752	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:28:58.889435053 CET	49752	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:28:58.889448881 CET	443	49752	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:00.128360987 CET	443	49752	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:00.136055946 CET	49752	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:00.136071920 CET	443	49752	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:00.137284994 CET	443	49752	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:00.137356043 CET	49752	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:00.137371063 CET	443	49752	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:00.137423038 CET	49752	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:00.138850927 CET	49752	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:00.138927937 CET	443	49752	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:00.141452074 CET	49752	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:00.141463995 CET	443	49752	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:00.290647030 CET	49752	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:00.650145054 CET	443	49752	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:00.650192022 CET	443	49752	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:00.650219917 CET	443	49752	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:00.650279045 CET	49752	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:00.650301933 CET	443	49752	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:00.650321007 CET	443	49752	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:00.650343895 CET	49752	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:00.650376081 CET	49752	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:00.850800991 CET	49752	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:00.850836039 CET	443	49752	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:01.407212973 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:01.407254934 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:01.407318115 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:01.407505989 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:01.407524109 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:02.979765892 CET	49766	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:02.979815006 CET	443	49766	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:02.979875088 CET	49766	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:02.980109930 CET	49766	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:02.980123043 CET	443	49766	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:02.980499029 CET	49767	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:02.980602026 CET	443	49767	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:02.980681896 CET	49767	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:02.980845928 CET	49767	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:02.980884075 CET	443	49767	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:02.991332054 CET	49768	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:02.991368055 CET	443	49768	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:02.991453886 CET	49768	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:02.992412090 CET	49768	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:02.992425919 CET	443	49768	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:03.301834106 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:03.302164078 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:03.302194118 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:03.302737951 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:03.302758932 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:03.302830935 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:03.302850962 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:03.302952051 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:03.303710938 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:03.308866024 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:03.309058905 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:03.309190035 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:03.309205055 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:03.446991920 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:03.653563976 CET	49776	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:03.653608084 CET	443	49776	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:03.653681040 CET	49776	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:03.653938055 CET	49776	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:03.653945923 CET	443	49776	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:03.719902992 CET	49777	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:03.720031023 CET	443	49777	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:03.720108986 CET	49777	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:03.720665932 CET	49778	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:03.720772028 CET	443	49778	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:03.720844984 CET	49778	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:03.724843979 CET	49778	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:03.724899054 CET	443	49778	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:03.724987984 CET	49777	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:03.725029945 CET	443	49777	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:03.771311045 CET	49779	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:03.771363974 CET	443	49779	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:03.771460056 CET	49779	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:03.772371054 CET	49779	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:03.772387981 CET	443	49779	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:03.836253881 CET	49783	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:03.836292028 CET	443	49783	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:03.836353064 CET	49783	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:03.836530924 CET	49783	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:03.836546898 CET	443	49783	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:03.983423948 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:03.987610102 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:03.987670898 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:03.987695932 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:03.998897076 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:03.998948097 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:03.998958111 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.008611917 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.008666039 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.008675098 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.021451950 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.021524906 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.021542072 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.033492088 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.033562899 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.033571959 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.084983110 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.193717003 CET	443	49766	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.194114923 CET	49766	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.194133043 CET	443	49766	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.194327116 CET	443	49767	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.194539070 CET	49767	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.194555998 CET	443	49767	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.195195913 CET	443	49766	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.195266008 CET	49766	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.195580006 CET	443	49767	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.195641041 CET	49767	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.196324110 CET	49766	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.196393967 CET	443	49766	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.196618080 CET	49767	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.196681976 CET	443	49767	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.196728945 CET	49766	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.196734905 CET	443	49766	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.196819067 CET	49767	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.196825981 CET	443	49767	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.201258898 CET	443	49768	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.203232050 CET	49768	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.203260899 CET	443	49768	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.204339981 CET	443	49768	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.204390049 CET	49768	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.206466913 CET	49768	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.206546068 CET	443	49768	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.206619978 CET	49768	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.206649065 CET	443	49768	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.268243074 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.271940947 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.271992922 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.272007942 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.279402018 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.279449940 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.279459953 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.294218063 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.294281006 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.294291019 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.301641941 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.301673889 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.301701069 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.301723957 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.301778078 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.303723097 CET	49767	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.309082031 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.316598892 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.316658974 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.316675901 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.324071884 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.324127913 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.324150085 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.331716061 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.331765890 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.331782103 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.339004040 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.339052916 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.339063883 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.353813887 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.353861094 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.353869915 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.367774963 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.370085001 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.370156050 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.370172977 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.370841026 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.381894112 CET	49766	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.382337093 CET	49768	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.384517908 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.411006927 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.411156893 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.411181927 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.438316107 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.438389063 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.438424110 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.460901976 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.460942030 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.460982084 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.461008072 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.461124897 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.463733912 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.469763994 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.469831944 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.469851971 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.475888014 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.476027012 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.476048946 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.481889963 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.482027054 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.482043028 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.487648010 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.487726927 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.487740993 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.563400984 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.563461065 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.563498020 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.591062069 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.591135979 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.591201067 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.617701054 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.617765903 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.617785931 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.622973919 CET	443	49766	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.623063087 CET	443	49766	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.623224020 CET	49766	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.623501062 CET	49766	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.623522997 CET	443	49766	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.624557018 CET	443	49767	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.624627113 CET	443	49767	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.624716043 CET	49767	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.624912024 CET	49767	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.624927044 CET	443	49767	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.636364937 CET	443	49768	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.636538029 CET	443	49768	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.636678934 CET	49768	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.636809111 CET	49768	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.636821032 CET	443	49768	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.645225048 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.645323038 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.645332098 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.652431965 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.652486086 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.652494907 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.655827045 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.655873060 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.655879974 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.658696890 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.658776999 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.658781052 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.658790112 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.658832073 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.661664009 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.664726019 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.664776087 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.664786100 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.666760921 CET	49783	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.667516947 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.667572975 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.667587996 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.667747021 CET	49789	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.667784929 CET	443	49789	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.667977095 CET	49789	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.668857098 CET	49779	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.669305086 CET	49777	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:04.669375896 CET	49778	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:04.669861078 CET	49790	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.669912100 CET	443	49790	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.670008898 CET	49776	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.670053005 CET	49790	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.670361996 CET	49791	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.670375109 CET	443	49791	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.670428991 CET	49791	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.670727015 CET	49789	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.670747995 CET	443	49789	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.672550917 CET	49790	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.672581911 CET	443	49790	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.672667027 CET	49791	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.672693968 CET	443	49791	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.672903061 CET	49792	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.672935009 CET	443	49792	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.672993898 CET	49792	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.673249006 CET	49793	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.673265934 CET	443	49793	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.673320055 CET	49793	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.673428059 CET	49794	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.673443079 CET	443	49794	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.673530102 CET	49794	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.673598051 CET	49795	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.673605919 CET	443	49795	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.673651934 CET	49795	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.674057007 CET	49792	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.674077988 CET	443	49792	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.674165010 CET	49793	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.674175024 CET	443	49793	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.674261093 CET	49795	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.674272060 CET	443	49795	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.674367905 CET	49794	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.674380064 CET	443	49794	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.707338095 CET	443	49783	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.711324930 CET	443	49776	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.711338043 CET	443	49778	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:04.711344957 CET	443	49777	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:04.715328932 CET	443	49779	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.754333019 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.754390001 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.754406929 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.781851053 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.781927109 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.781954050 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.809005976 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.809058905 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.809072971 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.837371111 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.837435007 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.837460041 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.840306997 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.840411901 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.840440035 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.845424891 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.845475912 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.845490932 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.848476887 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.848541021 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.848551035 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.851367950 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.851440907 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.851449966 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.851464987 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.851511002 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.854315042 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.857274055 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.857327938 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.857341051 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.862574100 CET	443	49776	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.862639904 CET	49776	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.946511984 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.946636915 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.946681023 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.950587988 CET	443	49778	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:04.950704098 CET	49778	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:04.950716019 CET	443	49778	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:04.950766087 CET	49778	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:04.951451063 CET	443	49777	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:04.951621056 CET	443	49777	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:04.951679945 CET	49777	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:04.952590942 CET	49777	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:04.974191904 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.974241972 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.974283934 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.974309921 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.974349976 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:04.975501060 CET	49796	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.975539923 CET	443	49796	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.975600004 CET	49796	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.975625992 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:04.975825071 CET	49797	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.975862026 CET	443	49797	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.975934982 CET	49797	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.986238956 CET	443	49779	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.986599922 CET	443	49779	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.986754894 CET	49779	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.989120007 CET	49779	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.991322041 CET	49798	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.991348028 CET	443	49798	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.992300034 CET	49799	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.992319107 CET	443	49799	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:04.992341042 CET	49798	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.992378950 CET	49799	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.992567062 CET	49796	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.992584944 CET	443	49796	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.001130104 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:05.002331972 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:05.002360106 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:05.003005981 CET	49797	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.003026009 CET	443	49797	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.003479958 CET	49798	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.003499985 CET	443	49798	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.028930902 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:05.028968096 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:05.029043913 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:05.029071093 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:05.029906034 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:05.029962063 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:05.030838966 CET	49799	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.030883074 CET	443	49799	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.041193008 CET	49763	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:29:05.041215897 CET	443	49763	172.217.19.193	192.168.2.5
Dec 12, 2024 12:29:05.051023006 CET	443	49783	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.051424026 CET	443	49783	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.051523924 CET	49783	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.052597046 CET	49783	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.220398903 CET	49800	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.220438957 CET	443	49800	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.220671892 CET	49800	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.221072912 CET	49800	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.221088886 CET	443	49800	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.681570053 CET	49808	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:05.681581020 CET	443	49808	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:05.681632042 CET	49808	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:05.682830095 CET	49808	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:05.682840109 CET	443	49808	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:05.877768040 CET	443	49789	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.878155947 CET	49789	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.878209114 CET	443	49789	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.878609896 CET	443	49789	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.880110979 CET	49789	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.880198002 CET	443	49789	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.880686998 CET	443	49791	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.880969048 CET	49791	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.880985975 CET	443	49791	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.881392002 CET	443	49791	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.882353067 CET	443	49790	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.882919073 CET	49791	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.883002043 CET	443	49791	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.883106947 CET	49790	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.883133888 CET	443	49790	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.883857012 CET	443	49793	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.883913040 CET	443	49790	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.884042025 CET	443	49792	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.884092093 CET	49793	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.884155989 CET	443	49793	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.884586096 CET	49792	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.884601116 CET	443	49792	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.884955883 CET	49790	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.884969950 CET	443	49792	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.885126114 CET	443	49795	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.885133028 CET	443	49790	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.885274887 CET	443	49793	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.885288954 CET	49792	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.885340929 CET	49793	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.885356903 CET	443	49792	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.885407925 CET	443	49794	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.885550022 CET	49795	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.885565042 CET	443	49795	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.885992050 CET	49794	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.885999918 CET	443	49794	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.886440992 CET	49793	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.886519909 CET	443	49793	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.887115002 CET	443	49794	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.887176991 CET	49794	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.887487888 CET	443	49795	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.887501001 CET	49794	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.887562990 CET	49795	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.887583971 CET	443	49794	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.887821913 CET	49795	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.887923002 CET	443	49795	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.991697073 CET	49790	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.991705894 CET	49789	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.991705894 CET	49791	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.991712093 CET	49792	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.991712093 CET	49794	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.991740942 CET	443	49794	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.991786003 CET	49793	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.991786003 CET	49795	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.991815090 CET	443	49793	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.991843939 CET	443	49795	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.101069927 CET	49794	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.174793959 CET	49793	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.174855947 CET	49795	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.205223083 CET	443	49796	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.205590010 CET	49796	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.205635071 CET	443	49796	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.206872940 CET	443	49796	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.207288027 CET	49796	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.207386971 CET	443	49796	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.212349892 CET	443	49797	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.212565899 CET	49797	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.212579966 CET	443	49797	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.214133024 CET	443	49797	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.214205027 CET	49797	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.214358091 CET	443	49798	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.214495897 CET	49797	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.214587927 CET	443	49797	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.214660883 CET	49798	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.214675903 CET	443	49798	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.215799093 CET	443	49798	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.215862989 CET	49798	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.216206074 CET	49798	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.216281891 CET	443	49798	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.244503021 CET	443	49799	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.244918108 CET	49799	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.244931936 CET	443	49799	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.246165037 CET	443	49799	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.246232033 CET	49799	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.246634007 CET	49799	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.246702909 CET	443	49799	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.288609982 CET	49796	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.288609982 CET	49798	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.288688898 CET	443	49798	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.304192066 CET	49797	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.304210901 CET	443	49797	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.304239035 CET	49799	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.304244995 CET	443	49799	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.412679911 CET	49798	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.430723906 CET	443	49800	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.431097031 CET	49800	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.431107044 CET	443	49800	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.432171106 CET	443	49800	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.432229042 CET	49800	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.432676077 CET	49800	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.432740927 CET	443	49800	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.491708040 CET	49797	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.491796970 CET	49799	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.585438967 CET	49800	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.585448027 CET	443	49800	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.632307053 CET	49800	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.905342102 CET	443	49808	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:06.905627012 CET	49808	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:06.905658007 CET	443	49808	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:06.906711102 CET	443	49808	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:06.906775951 CET	49808	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:06.906797886 CET	443	49808	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:06.906841993 CET	49808	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:06.907939911 CET	49808	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:06.908004999 CET	443	49808	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:06.908159018 CET	49808	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:06.908174038 CET	443	49808	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:06.960417032 CET	49808	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:07.348450899 CET	443	49808	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:07.348592997 CET	443	49808	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:07.348670006 CET	49808	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:07.348696947 CET	443	49808	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:07.348783970 CET	49808	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:07.356875896 CET	443	49808	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:07.356887102 CET	443	49808	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:07.356945038 CET	49808	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:07.359769106 CET	443	49808	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:07.359854937 CET	443	49808	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:07.359920979 CET	49808	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:07.360013008 CET	49808	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:07.360033035 CET	443	49808	3.33.186.135	192.168.2.5
Dec 12, 2024 12:29:07.360042095 CET	49808	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:07.360075951 CET	49808	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:29:20.683974981 CET	443	49789	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:20.684041977 CET	443	49789	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:20.684256077 CET	49789	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:20.687141895 CET	443	49791	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:20.687216997 CET	443	49791	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:20.687329054 CET	49791	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:20.688118935 CET	443	49793	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:20.688173056 CET	443	49793	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:20.688266039 CET	49793	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:20.688954115 CET	443	49790	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:20.689012051 CET	443	49790	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:20.689105988 CET	49790	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:20.689694881 CET	443	49792	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:20.689758062 CET	443	49792	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:20.689841032 CET	49792	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:20.690346003 CET	443	49795	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:20.690378904 CET	443	49794	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:20.690417051 CET	443	49795	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:20.690437078 CET	443	49794	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:20.690475941 CET	49795	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:20.690677881 CET	49794	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:21.007034063 CET	443	49796	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:21.007101059 CET	443	49796	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:21.007235050 CET	49796	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:21.016807079 CET	443	49797	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:21.016863108 CET	443	49797	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:21.016966105 CET	49797	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:21.017498016 CET	443	49798	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:21.017565966 CET	443	49798	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:21.017621040 CET	49798	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:21.046665907 CET	443	49799	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:21.046751022 CET	443	49799	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:21.046891928 CET	49799	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:21.234992027 CET	443	49800	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:21.235161066 CET	443	49800	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:21.235368967 CET	49800	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:41.417108059 CET	49921	443	192.168.2.5	166.1.160.237
Dec 12, 2024 12:29:41.417172909 CET	443	49921	166.1.160.237	192.168.2.5
Dec 12, 2024 12:29:41.417248964 CET	49921	443	192.168.2.5	166.1.160.237
Dec 12, 2024 12:29:41.418337107 CET	49921	443	192.168.2.5	166.1.160.237
Dec 12, 2024 12:29:41.418370008 CET	443	49921	166.1.160.237	192.168.2.5
Dec 12, 2024 12:29:41.418432951 CET	443	49921	166.1.160.237	192.168.2.5
Dec 12, 2024 12:29:57.357415915 CET	49789	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:57.357443094 CET	443	49789	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:57.357461929 CET	49792	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:57.357506037 CET	443	49792	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:57.357511997 CET	49793	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:57.357548952 CET	443	49793	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:57.357558012 CET	49794	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:57.357567072 CET	443	49794	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:57.357645035 CET	49795	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:57.357652903 CET	443	49795	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:59.719789982 CET	51138	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:59.839493990 CET	53	51138	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:59.839715958 CET	51138	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:59.959501028 CET	53	51138	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:00.924110889 CET	51138	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:01.044405937 CET	53	51138	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:01.044526100 CET	51138	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:02.865583897 CET	49790	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:02.865624905 CET	443	49790	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:02.865637064 CET	49796	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:02.865643024 CET	443	49796	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:02.865695953 CET	49797	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:02.865725994 CET	443	49797	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:02.865747929 CET	49798	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:02.865753889 CET	443	49798	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:02.865833044 CET	49799	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:02.865840912 CET	443	49799	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:02.865904093 CET	49800	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:02.865921974 CET	443	49800	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:03.186523914 CET	51148	443	192.168.2.5	204.79.197.237
Dec 12, 2024 12:30:03.186577082 CET	443	51148	204.79.197.237	192.168.2.5
Dec 12, 2024 12:30:03.186791897 CET	51148	443	192.168.2.5	204.79.197.237
Dec 12, 2024 12:30:03.186894894 CET	51148	443	192.168.2.5	204.79.197.237
Dec 12, 2024 12:30:03.186903000 CET	443	51148	204.79.197.237	192.168.2.5
Dec 12, 2024 12:30:04.195871115 CET	51151	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:30:04.195908070 CET	443	51151	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:04.196005106 CET	51151	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:30:04.196235895 CET	51152	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:30:04.196266890 CET	443	51152	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:04.196326017 CET	51152	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:30:04.196557045 CET	51152	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:30:04.196574926 CET	443	51152	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:04.196643114 CET	51151	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:30:04.196660042 CET	443	51151	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:04.722697973 CET	443	51148	204.79.197.237	192.168.2.5
Dec 12, 2024 12:30:04.723155022 CET	51148	443	192.168.2.5	204.79.197.237
Dec 12, 2024 12:30:04.723176956 CET	443	51148	204.79.197.237	192.168.2.5
Dec 12, 2024 12:30:04.723602057 CET	443	51148	204.79.197.237	192.168.2.5
Dec 12, 2024 12:30:04.723920107 CET	51148	443	192.168.2.5	204.79.197.237
Dec 12, 2024 12:30:04.724318027 CET	443	51148	204.79.197.237	192.168.2.5
Dec 12, 2024 12:30:04.724392891 CET	51148	443	192.168.2.5	204.79.197.237
Dec 12, 2024 12:30:04.726759911 CET	51148	443	192.168.2.5	204.79.197.237
Dec 12, 2024 12:30:04.726828098 CET	443	51148	204.79.197.237	192.168.2.5
Dec 12, 2024 12:30:04.772681952 CET	51148	443	192.168.2.5	204.79.197.237
Dec 12, 2024 12:30:04.772710085 CET	443	51148	204.79.197.237	192.168.2.5
Dec 12, 2024 12:30:04.819559097 CET	51148	443	192.168.2.5	204.79.197.237
Dec 12, 2024 12:30:05.418972969 CET	443	51152	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:05.419363022 CET	51152	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:30:05.419398069 CET	443	51152	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:05.419797897 CET	443	51152	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:05.420694113 CET	51152	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:30:05.420790911 CET	443	51152	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:05.423449993 CET	443	51151	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:05.424140930 CET	51151	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:30:05.424154043 CET	443	51151	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:05.425405979 CET	443	51151	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:05.425733089 CET	51151	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:30:05.425913095 CET	443	51151	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:05.460536003 CET	51152	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:30:05.475918055 CET	51151	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:30:05.694572926 CET	49791	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:05.694593906 CET	443	49791	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:10.739213943 CET	443	51152	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:10.739296913 CET	443	51152	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:10.739341021 CET	51152	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:30:10.742012978 CET	443	51151	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:10.742079020 CET	443	51151	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:10.742134094 CET	51151	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:30:11.712668896 CET	51148	443	192.168.2.5	204.79.197.237
Dec 12, 2024 12:30:11.712805986 CET	51152	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:30:11.712831974 CET	443	51152	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:11.712835073 CET	443	51148	204.79.197.237	192.168.2.5
Dec 12, 2024 12:30:11.712919950 CET	51148	443	192.168.2.5	204.79.197.237
Dec 12, 2024 12:30:11.712933064 CET	51151	443	192.168.2.5	3.33.186.135
Dec 12, 2024 12:30:11.712955952 CET	443	51151	3.33.186.135	192.168.2.5
Dec 12, 2024 12:30:11.713320017 CET	51171	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.713366985 CET	443	51171	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:11.713422060 CET	51171	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.713618040 CET	51172	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.713649988 CET	443	51172	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:11.713699102 CET	51172	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.713800907 CET	51171	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.713815928 CET	443	51171	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:11.713908911 CET	51172	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.713924885 CET	443	51172	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:11.714154959 CET	49791	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.714178085 CET	443	49791	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:12.923845053 CET	443	51172	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:12.924247980 CET	51172	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:12.924279928 CET	443	51172	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:12.924629927 CET	443	51172	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:12.925044060 CET	443	51171	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:12.926573992 CET	51172	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:12.926640034 CET	443	51172	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:12.926970005 CET	51171	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:12.926990986 CET	443	51171	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:12.927309036 CET	443	51171	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:12.927791119 CET	51171	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:12.927843094 CET	443	51171	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:12.977658987 CET	51172	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:12.977660894 CET	51171	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:27.508311987 CET	64499	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:27.628142118 CET	53	64499	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:27.628220081 CET	64499	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:27.729291916 CET	443	51172	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:27.729374886 CET	443	51172	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:27.729439974 CET	51172	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:27.730366945 CET	443	51171	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:27.730551958 CET	443	51171	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:27.730614901 CET	51171	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:27.750941992 CET	53	64499	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:28.716722012 CET	64499	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:28.836829901 CET	53	64499	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:28.838113070 CET	64499	53	192.168.2.5	1.1.1.1

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 12, 2024 12:28:58.371534109 CET	64906	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:28:58.371994972 CET	65275	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:00.674599886 CET	51599	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:00.674885988 CET	63540	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:01.147310972 CET	53	61317	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:01.255681038 CET	58321	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:01.255821943 CET	52662	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:01.393656015 CET	53	58321	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:01.405113935 CET	53	52662	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:02.840755939 CET	50713	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:02.841078043 CET	51610	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:02.841500044 CET	53972	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:02.841651917 CET	52538	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:02.847867012 CET	56528	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:02.848076105 CET	60294	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:02.977745056 CET	53	50713	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:02.977787971 CET	53	51610	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:02.979099989 CET	53	52538	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:02.979254961 CET	53	53972	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:02.985493898 CET	53	56528	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:02.990012884 CET	53	60294	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:04.671793938 CET	53649	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.673912048 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.975028038 CET	53649	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:04.975143909 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.586013079 CET	53649	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.586082935 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.755826950 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.755990028 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.757333040 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.757496119 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.757597923 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.758440018 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.758531094 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.758738995 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.758830070 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.760338068 CET	53649	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.760771990 CET	53649	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.761667013 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.763401985 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.764734983 CET	53649	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.764900923 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.822827101 CET	53649	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.835994005 CET	53649	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.899991035 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.900677919 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:05.913741112 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.913832903 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.914335012 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:05.929480076 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.074482918 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.074605942 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.074620962 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.074628115 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.075054884 CET	53649	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.075181007 CET	53649	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.077656031 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.077666998 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.077670097 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.077677011 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.077970028 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.078064919 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.078233004 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.081197977 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.082106113 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.082581043 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.082786083 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.083121061 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.117271900 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.137285948 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.142692089 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.142865896 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.150521994 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.165287971 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.165298939 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.165669918 CET	53649	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.189354897 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.214744091 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.227422953 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.227587938 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.243092060 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.243308067 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.389698029 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.391689062 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.429866076 CET	53649	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.430018902 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:06.456537962 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.456679106 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:06.491878986 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:07.851356030 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:07.851464033 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:08.224468946 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:08.224479914 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:08.224483967 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:08.224951982 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:08.399156094 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:08.399616957 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:08.400870085 CET	53649	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:08.401689053 CET	53649	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:08.714086056 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:08.714636087 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:08.715529919 CET	443	59625	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:08.715550900 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:08.715801954 CET	59625	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:08.716768980 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:08.716777086 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:08.716800928 CET	443	53649	162.159.61.3	192.168.2.5
Dec 12, 2024 12:29:08.717056990 CET	53649	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:29:08.851106882 CET	53003	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:08.988977909 CET	53	53003	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:08.994230032 CET	52508	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:09.132127047 CET	53	52508	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:09.133268118 CET	53629	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:09.272047997 CET	53	53629	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:09.273225069 CET	56322	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:09.411727905 CET	53	56322	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:09.412796974 CET	56674	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:09.550721884 CET	53	56674	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:09.622148037 CET	56523	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:09.760886908 CET	53	56523	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:09.787537098 CET	58754	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:09.925734043 CET	53	58754	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:09.934253931 CET	53413	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:10.073474884 CET	53	53413	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:10.074476004 CET	49987	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:10.212760925 CET	53	49987	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:10.214463949 CET	50097	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:10.352440119 CET	53	50097	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:10.353420973 CET	50299	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:10.491676092 CET	53	50299	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:10.492691040 CET	54880	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:10.634807110 CET	53	54880	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:10.635776997 CET	51152	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:10.775194883 CET	53	51152	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:10.776180983 CET	64056	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:10.914021969 CET	53	64056	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:10.914928913 CET	51845	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:11.052784920 CET	53	51845	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:11.053730011 CET	64334	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:11.191936016 CET	53	64334	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:11.193816900 CET	62287	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:11.437700987 CET	53	62287	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:11.438641071 CET	53465	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:11.576030016 CET	53	53465	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:11.577223063 CET	65280	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:11.715631008 CET	53	65280	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:11.716541052 CET	62994	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:11.854836941 CET	53	62994	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:11.856015921 CET	51083	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:11.993952036 CET	53	51083	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:11.996437073 CET	61971	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:12.134929895 CET	53	61971	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:12.136151075 CET	51944	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:12.272850037 CET	53	51944	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:12.274096966 CET	50932	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:12.411304951 CET	53	50932	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:12.412484884 CET	56206	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:12.551136971 CET	53	56206	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:12.552150965 CET	54710	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:12.689971924 CET	53	54710	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:12.692260981 CET	61064	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:12.832225084 CET	53	61064	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:12.833697081 CET	64539	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:12.973644018 CET	53	64539	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:12.974559069 CET	49989	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:13.112350941 CET	53	49989	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:13.113486052 CET	50524	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:13.261470079 CET	53	50524	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:13.262392998 CET	52322	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:13.400738001 CET	53	52322	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:13.401699066 CET	58795	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:13.540797949 CET	53	58795	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:13.542319059 CET	58436	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:13.680080891 CET	53	58436	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:13.682080984 CET	64073	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:13.820035934 CET	53	64073	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:13.822850943 CET	61332	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:13.961394072 CET	53	61332	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:13.962450027 CET	53183	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:14.100315094 CET	53	53183	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:14.102264881 CET	64929	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:14.240128994 CET	53	64929	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:14.241147041 CET	62958	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:14.379684925 CET	53	62958	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:14.380646944 CET	52062	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:14.519682884 CET	53	52062	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:14.520670891 CET	54545	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:14.658616066 CET	53	54545	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:14.659724951 CET	57479	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:14.797923088 CET	53	57479	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:14.798846006 CET	55320	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:14.940057993 CET	53	55320	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:14.941006899 CET	59872	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:15.078689098 CET	53	59872	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:15.079647064 CET	58164	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:15.218137026 CET	53	58164	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:15.219059944 CET	54564	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:15.357388020 CET	53	54564	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:15.358453989 CET	53127	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:15.496177912 CET	53	53127	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:15.497136116 CET	61833	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:15.635015011 CET	53	61833	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:15.636007071 CET	58469	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:15.773996115 CET	53	58469	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:15.775262117 CET	54008	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:15.912333012 CET	53	54008	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:15.913499117 CET	51882	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:16.051625967 CET	53	51882	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:16.052514076 CET	54642	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:16.190789938 CET	53	54642	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:16.192128897 CET	52719	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:16.330022097 CET	53	52719	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:16.331669092 CET	59157	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:16.468633890 CET	53	59157	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:16.469605923 CET	53982	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:16.608026028 CET	53	53982	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:16.609006882 CET	50978	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:16.748172998 CET	53	50978	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:16.749175072 CET	59553	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:16.890407085 CET	53	59553	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:16.891438007 CET	54397	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:17.029683113 CET	53	54397	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:17.030643940 CET	50428	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:17.168037891 CET	53	50428	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:17.168948889 CET	50055	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:17.979998112 CET	53	50055	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:17.980957985 CET	62428	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:18.121572971 CET	53	62428	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:18.122489929 CET	63119	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:18.260931969 CET	53	63119	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:18.262000084 CET	65400	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:18.399589062 CET	53	65400	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:18.400587082 CET	50462	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:18.538247108 CET	53	50462	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:18.539486885 CET	56292	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:18.678014040 CET	53	56292	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:18.679260015 CET	60064	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:18.818845034 CET	53	60064	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:18.820086002 CET	59507	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:18.958498955 CET	53	59507	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:18.959486008 CET	49587	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:19.099376917 CET	53	49587	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:19.100276947 CET	52111	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:19.238285065 CET	53	52111	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:19.239332914 CET	65141	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:19.477413893 CET	53	65141	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:19.478363991 CET	53061	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:19.720482111 CET	53	53061	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:19.721375942 CET	61359	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:19.863715887 CET	53	61359	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:19.864667892 CET	55748	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:20.003603935 CET	53	55748	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:20.004524946 CET	57827	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:20.142134905 CET	53	57827	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:20.143043995 CET	57791	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:20.280616999 CET	53	57791	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:20.281450033 CET	56125	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:20.419898033 CET	53	56125	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:20.420885086 CET	63974	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:20.559142113 CET	53	63974	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:20.560139894 CET	60938	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:20.698112965 CET	53	60938	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:20.699763060 CET	64812	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:20.837692976 CET	53	64812	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:20.839240074 CET	63590	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:20.980381966 CET	53	63590	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:20.983134985 CET	59132	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:21.120206118 CET	53	59132	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:21.121203899 CET	53749	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:21.259238005 CET	53	53749	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:21.260164976 CET	51212	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:21.397945881 CET	53	51212	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:21.398899078 CET	65229	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:21.537904978 CET	53	65229	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:21.538876057 CET	51448	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:21.678560019 CET	53	51448	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:21.679543972 CET	54899	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:21.817688942 CET	53	54899	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:21.818614960 CET	57692	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:21.957227945 CET	53	57692	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:21.958178997 CET	63377	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:22.096749067 CET	53	63377	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:22.097704887 CET	62782	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:22.238601923 CET	53	62782	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:22.239948034 CET	62602	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:22.379331112 CET	53	62602	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:22.380290031 CET	60843	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:22.518656969 CET	53	60843	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:22.519551992 CET	58166	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:22.658807993 CET	53	58166	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:22.659759045 CET	57088	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:22.797489882 CET	53	57088	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:22.798422098 CET	53681	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:22.936903954 CET	53	53681	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:22.938564062 CET	50305	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:23.076261044 CET	53	50305	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:23.077194929 CET	64977	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:23.216298103 CET	53	64977	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:23.217303991 CET	51277	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:23.356652021 CET	53	51277	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:23.357563972 CET	54154	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:23.497248888 CET	53	54154	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:23.498179913 CET	62092	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:23.637212038 CET	53	62092	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:23.641876936 CET	64562	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:23.780256987 CET	53	64562	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:23.781414032 CET	63634	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:23.918649912 CET	53	63634	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:23.919588089 CET	60854	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:24.058056116 CET	53	60854	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:24.059143066 CET	56741	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:24.197745085 CET	53	56741	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:24.198759079 CET	63572	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:24.336159945 CET	53	63572	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:24.344178915 CET	62467	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:24.484143019 CET	53	62467	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:24.485223055 CET	58042	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:24.624185085 CET	53	58042	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:24.625185013 CET	61076	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:24.762967110 CET	53	61076	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:24.763917923 CET	49664	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:24.902024031 CET	53	49664	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:24.902959108 CET	50776	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:25.041155100 CET	53	50776	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:25.042154074 CET	63523	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:25.181878090 CET	53	63523	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:25.182786942 CET	57594	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:25.320517063 CET	53	57594	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:25.321432114 CET	65317	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:25.458905935 CET	53	65317	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:25.459846020 CET	54042	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:25.598051071 CET	53	54042	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:25.598997116 CET	57298	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:25.738400936 CET	53	57298	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:25.739392042 CET	54040	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:25.876909018 CET	53	54040	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:25.877847910 CET	64024	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:26.017374992 CET	53	64024	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:26.018559933 CET	52792	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:26.157058954 CET	53	52792	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:26.158000946 CET	57843	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:26.295650005 CET	53	57843	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:26.296581030 CET	50656	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:26.434809923 CET	53	50656	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:26.435604095 CET	51629	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:26.573108912 CET	53	51629	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:26.574100018 CET	62860	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:26.714162111 CET	53	62860	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:26.721698046 CET	64539	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:26.862211943 CET	53	64539	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:26.863168955 CET	54787	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:27.001240969 CET	53	54787	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:27.002191067 CET	58371	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:27.551008940 CET	53	58371	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:27.551949024 CET	57951	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:27.689820051 CET	53	57951	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:27.690666914 CET	62100	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:27.828521967 CET	53	62100	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:27.829411030 CET	61632	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:27.967511892 CET	53	61632	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:27.968394995 CET	53118	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:28.108077049 CET	53	53118	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:28.109082937 CET	62583	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:28.250207901 CET	53	62583	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:28.251132965 CET	59998	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:28.394118071 CET	53	59998	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:28.395050049 CET	54211	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:28.533051968 CET	53	54211	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:28.534019947 CET	53162	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:28.671902895 CET	53	53162	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:28.672815084 CET	56888	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:28.810940027 CET	53	56888	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:28.811839104 CET	50938	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:28.949232101 CET	53	50938	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:28.950138092 CET	64839	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:29.087992907 CET	53	64839	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:29.088880062 CET	58795	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:29.227885008 CET	53	58795	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:29.228879929 CET	63250	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:29.367522955 CET	53	63250	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:29.368428946 CET	55258	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:29.508958101 CET	53	55258	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:29.509903908 CET	61796	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:29.650501966 CET	53	61796	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:29.651464939 CET	51484	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:29.789124012 CET	53	51484	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:29.790057898 CET	65304	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:29.928458929 CET	53	65304	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:29.929317951 CET	52956	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:30.067257881 CET	53	52956	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:30.068269968 CET	50546	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:30.205982924 CET	53	50546	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:30.206882954 CET	56294	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:30.598356009 CET	53	56294	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:30.599399090 CET	58174	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:30.739511013 CET	53	58174	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:30.740432024 CET	61822	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:30.882549047 CET	53	61822	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:30.886841059 CET	58411	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:31.024775982 CET	53	58411	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:31.026087999 CET	54909	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:31.164731979 CET	53	54909	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:31.165806055 CET	54696	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:31.303491116 CET	53	54696	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:31.304368019 CET	49233	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:31.441549063 CET	53	49233	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:31.442485094 CET	55139	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:31.580754042 CET	53	55139	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:31.581710100 CET	65135	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:31.719705105 CET	53	65135	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:31.720724106 CET	56185	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:31.859261990 CET	53	56185	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:31.860186100 CET	61619	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:31.998097897 CET	53	61619	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:31.999110937 CET	55563	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:32.137742996 CET	53	55563	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:32.138705969 CET	59568	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:32.276881933 CET	53	59568	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:32.278017998 CET	57126	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:32.415676117 CET	53	57126	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:32.416637897 CET	64316	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:32.554424047 CET	53	64316	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:32.561774015 CET	54182	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:32.698945045 CET	53	54182	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:32.699969053 CET	57649	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:32.837404013 CET	53	57649	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:32.838360071 CET	51471	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:32.975883961 CET	53	51471	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:32.977264881 CET	50911	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:33.114883900 CET	53	50911	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:33.115813971 CET	52449	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:33.253710985 CET	53	52449	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:33.254602909 CET	55362	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:33.392334938 CET	53	55362	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:33.393357038 CET	55694	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:33.535212040 CET	53	55694	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:33.536432028 CET	58340	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:33.673813105 CET	53	58340	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:33.675234079 CET	58452	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:33.812908888 CET	53	58452	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:33.814063072 CET	51399	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:33.951822042 CET	53	51399	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:33.953083992 CET	54136	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:34.094003916 CET	53	54136	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:34.095077038 CET	56540	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:34.232707977 CET	53	56540	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:34.233866930 CET	50741	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:34.371416092 CET	53	50741	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:34.372523069 CET	53362	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:34.510960102 CET	53	53362	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:34.512054920 CET	52376	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:34.649923086 CET	53	52376	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:34.650903940 CET	65259	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:34.788670063 CET	53	65259	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:34.789932013 CET	64713	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:34.932045937 CET	53	64713	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:34.932997942 CET	59888	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:35.073430061 CET	53	59888	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:35.075056076 CET	61965	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:35.213577986 CET	53	61965	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:35.214808941 CET	49389	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:35.431901932 CET	53	49389	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:35.433047056 CET	64997	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:35.571073055 CET	53	64997	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:35.572168112 CET	52658	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:35.709923029 CET	53	52658	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:35.711194992 CET	58893	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:35.848630905 CET	53	58893	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:35.850194931 CET	54428	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:35.987896919 CET	53	54428	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:35.988981009 CET	55517	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:36.126775026 CET	53	55517	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:36.127757072 CET	57399	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:36.265598059 CET	53	57399	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:36.266670942 CET	50590	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:36.405201912 CET	53	50590	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:36.406075954 CET	53942	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:36.544529915 CET	53	53942	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:36.545526981 CET	53230	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:36.683552027 CET	53	53230	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:36.695403099 CET	64171	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:36.832864046 CET	53	64171	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:36.834063053 CET	53140	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:37.058152914 CET	53	53140	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:37.059233904 CET	60505	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:37.196326017 CET	53	60505	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:37.197360992 CET	60259	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:37.414016008 CET	53	60259	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:37.414969921 CET	65298	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:37.552798986 CET	53	65298	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:37.553934097 CET	62700	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:37.866750002 CET	53	62700	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:37.867780924 CET	51694	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:38.005172014 CET	53	51694	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:38.006247044 CET	60210	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:38.144449949 CET	53	60210	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:38.145345926 CET	64708	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:38.282953978 CET	53	64708	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:38.283868074 CET	61025	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:38.423019886 CET	53	61025	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:38.423979998 CET	55664	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:38.562891006 CET	53	55664	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:38.563985109 CET	56282	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:38.874416113 CET	53	56282	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:38.875431061 CET	63336	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:39.015578032 CET	53	63336	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:39.016716957 CET	56197	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:39.159216881 CET	53	56197	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:39.160312891 CET	60447	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:39.298214912 CET	53	60447	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:39.299617052 CET	54342	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:39.437771082 CET	53	54342	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:39.439064026 CET	49781	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:39.581928968 CET	53	49781	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:39.583400011 CET	55857	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:39.722714901 CET	53	55857	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:39.723843098 CET	63813	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:39.948651075 CET	53	63813	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:39.949888945 CET	58553	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:40.087434053 CET	53	58553	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:40.088443995 CET	52403	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:40.225550890 CET	53	52403	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:40.226747990 CET	50617	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:40.364603996 CET	53	50617	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:40.365622997 CET	54994	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:40.504173994 CET	53	54994	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:40.505122900 CET	50067	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:40.827111959 CET	53	50067	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:40.828015089 CET	65366	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:41.050676107 CET	53	65366	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:41.051618099 CET	56418	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:41.194780111 CET	53	56418	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:41.195812941 CET	53332	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:41.412823915 CET	53	53332	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:41.419352055 CET	50208	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:41.558264017 CET	53	50208	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:41.559334040 CET	54533	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:41.697458982 CET	53	54533	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:41.698483944 CET	63469	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:41.836292982 CET	53	63469	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:41.837325096 CET	61436	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:41.976988077 CET	53	61436	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:41.978020906 CET	63528	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:42.116024971 CET	53	63528	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:42.117141962 CET	63878	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:42.254713058 CET	53	63878	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:42.255745888 CET	60381	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:42.393383980 CET	53	60381	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:42.394687891 CET	64829	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:42.531840086 CET	53	64829	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:42.532913923 CET	49199	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:42.670594931 CET	53	49199	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:42.671534061 CET	61634	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:42.814573050 CET	53	61634	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:42.815655947 CET	54683	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:42.952277899 CET	53	54683	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:42.953088045 CET	52675	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:43.090703011 CET	53	52675	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:43.091733932 CET	51011	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:43.229736090 CET	53	51011	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:43.230840921 CET	54705	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:43.373234034 CET	53	54705	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:43.374346972 CET	64980	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:43.512316942 CET	53	64980	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:43.513194084 CET	64327	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:43.650980949 CET	53	64327	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:43.652409077 CET	61227	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:43.790076971 CET	53	61227	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:43.791047096 CET	59777	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:43.928913116 CET	53	59777	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:43.931710958 CET	59143	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:44.070796967 CET	53	59143	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:44.071738958 CET	50662	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:44.209764957 CET	53	50662	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:44.210836887 CET	55521	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:44.349019051 CET	53	55521	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:44.350066900 CET	61073	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:44.487466097 CET	53	61073	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:44.488440037 CET	50639	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:44.626640081 CET	53	50639	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:44.627563953 CET	55647	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:44.766343117 CET	53	55647	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:44.767368078 CET	56424	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:44.904735088 CET	53	56424	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:44.905829906 CET	60252	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:45.043382883 CET	53	60252	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:45.044317961 CET	54898	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:45.181875944 CET	53	54898	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:45.182848930 CET	52208	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:45.320281982 CET	53	52208	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:45.321376085 CET	56629	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:45.459003925 CET	53	56629	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:45.460134029 CET	61675	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:45.803833008 CET	53	61675	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:45.805035114 CET	52027	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:45.942323923 CET	53	52027	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:45.943346977 CET	50849	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:46.081414938 CET	53	50849	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:46.082272053 CET	59532	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:46.219630003 CET	53	59532	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:46.220696926 CET	59296	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:46.360097885 CET	53	59296	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:46.361022949 CET	54769	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:46.498537064 CET	53	54769	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:46.499545097 CET	55315	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:46.638205051 CET	53	55315	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:46.639138937 CET	49267	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:46.776752949 CET	53	49267	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:46.777865887 CET	63938	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:46.915751934 CET	53	63938	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:46.916779995 CET	63492	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:47.054193020 CET	53	63492	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:47.055167913 CET	49559	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:47.193150043 CET	53	49559	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:47.194303036 CET	60249	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:47.331727028 CET	53	60249	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:47.332549095 CET	63953	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:47.470406055 CET	53	63953	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:47.471366882 CET	60935	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:47.608644962 CET	53	60935	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:47.609693050 CET	64096	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:47.747870922 CET	53	64096	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:47.748828888 CET	53166	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:47.886893988 CET	53	53166	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:47.887903929 CET	51626	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:48.025806904 CET	53	51626	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:48.031662941 CET	57359	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:48.169217110 CET	53	57359	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:48.170058012 CET	63118	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:48.307005882 CET	53	63118	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:48.307967901 CET	55151	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:48.445475101 CET	53	55151	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:48.446377039 CET	60030	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:48.584518909 CET	53	60030	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:48.585490942 CET	64572	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:48.723136902 CET	53	64572	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:48.724155903 CET	61054	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:48.865621090 CET	53	61054	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:48.866581917 CET	52779	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:49.006648064 CET	53	52779	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:49.007772923 CET	52387	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:49.145220041 CET	53	52387	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:49.146354914 CET	51650	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:49.283927917 CET	53	51650	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:49.284779072 CET	57443	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:49.425759077 CET	53	57443	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:49.426707983 CET	65096	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:49.565002918 CET	53	65096	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:49.566214085 CET	63614	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:49.706450939 CET	53	63614	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:49.707514048 CET	56383	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:49.847541094 CET	53	56383	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:49.848747015 CET	62823	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:49.988956928 CET	53	62823	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:49.989943027 CET	50979	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:50.127188921 CET	53	50979	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:50.128577948 CET	55583	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:50.265682936 CET	53	55583	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:50.266973019 CET	56774	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:50.406547070 CET	53	56774	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:50.407653093 CET	52961	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:50.546499014 CET	53	52961	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:50.547509909 CET	52103	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:50.684762001 CET	53	52103	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:50.686043024 CET	57145	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:50.823606968 CET	53	57145	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:50.824762106 CET	50670	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:50.962652922 CET	53	50670	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:50.963859081 CET	56893	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:51.101711988 CET	53	56893	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:51.102807045 CET	56145	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:51.242679119 CET	53	56145	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:51.243789911 CET	53404	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:51.382003069 CET	53	53404	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:51.383631945 CET	64879	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:51.521091938 CET	53	64879	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:51.522345066 CET	60034	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:51.660063028 CET	53	60034	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:51.661093950 CET	57693	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:52.188640118 CET	53	57693	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:52.189697981 CET	57972	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:52.327491045 CET	53	57972	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:52.328589916 CET	55347	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:52.471756935 CET	53	55347	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:52.472753048 CET	52799	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:52.610444069 CET	53	52799	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:52.611408949 CET	55140	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:52.749303102 CET	53	55140	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:52.750231028 CET	61413	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:52.888020039 CET	53	61413	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:52.889072895 CET	57332	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:53.027251959 CET	53	57332	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:53.028158903 CET	57142	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:53.182193995 CET	53	57142	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:53.183074951 CET	63949	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:53.320890903 CET	53	63949	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:53.321878910 CET	54348	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:53.459660053 CET	53	54348	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:53.460645914 CET	55900	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:53.601701021 CET	53	55900	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:53.602530003 CET	60150	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:53.740076065 CET	53	60150	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:53.741360903 CET	62863	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:53.878856897 CET	53	62863	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:53.880162001 CET	57454	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:54.017672062 CET	53	57454	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:54.018630028 CET	54003	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:54.156457901 CET	53	54003	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:54.157366991 CET	50958	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:54.295355082 CET	53	50958	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:54.296386003 CET	60547	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:54.434118032 CET	53	60547	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:54.435033083 CET	58069	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:54.575906038 CET	53	58069	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:54.581059933 CET	54109	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:54.719614029 CET	53	54109	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:54.720644951 CET	57954	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:54.857933044 CET	53	57954	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:54.858989954 CET	55405	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:54.997071981 CET	53	55405	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:54.998315096 CET	53084	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:55.138967037 CET	53	53084	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:55.140130043 CET	56737	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:55.277900934 CET	53	56737	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:55.278979063 CET	49659	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:55.417289972 CET	53	49659	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:55.418224096 CET	50945	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:55.556145906 CET	53	50945	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:55.557329893 CET	61424	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:55.695615053 CET	53	61424	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:55.696639061 CET	54243	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:55.834512949 CET	53	54243	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:55.835679054 CET	55251	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:55.973429918 CET	53	55251	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:55.974509001 CET	50466	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:56.112420082 CET	53	50466	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:56.113497019 CET	62476	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:56.250972986 CET	53	62476	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:56.251996994 CET	60246	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:56.390189886 CET	53	60246	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:56.391171932 CET	50351	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:56.528955936 CET	53	50351	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:56.529937983 CET	56191	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:56.667359114 CET	53	56191	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:56.668224096 CET	50586	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:57.094527960 CET	53	50586	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:57.095629930 CET	53911	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:57.233243942 CET	53	53911	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:57.234323978 CET	61008	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:57.371592045 CET	53	61008	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:57.372651100 CET	49605	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:57.510540009 CET	53	49605	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:57.511702061 CET	60650	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:57.649430990 CET	53	60650	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:57.650634050 CET	52094	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:57.791934967 CET	53	52094	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:57.792845964 CET	61800	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:57.930833101 CET	53	61800	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:57.931843042 CET	57652	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:58.069758892 CET	53	57652	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:58.070796013 CET	51487	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:58.208266973 CET	53	51487	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:58.209242105 CET	56628	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:58.347012043 CET	53	56628	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:58.348001957 CET	59920	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:58.486830950 CET	53	59920	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:58.487848997 CET	57021	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:58.626343012 CET	53	57021	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:58.627254963 CET	65112	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:58.768371105 CET	53	65112	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:58.769382000 CET	61994	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:58.907933950 CET	53	61994	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:58.908894062 CET	60570	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:59.046690941 CET	53	60570	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:59.047750950 CET	61210	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:59.189976931 CET	53	61210	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:59.191066980 CET	57940	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:59.330343962 CET	53	57940	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:59.331408978 CET	52908	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:59.468852997 CET	53	52908	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:59.469739914 CET	54351	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:59.608160973 CET	53	54351	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:59.609146118 CET	56402	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:59.714823961 CET	53	50213	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:59.746252060 CET	53	56402	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:59.747138977 CET	62846	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:29:59.884949923 CET	53	62846	1.1.1.1	192.168.2.5
Dec 12, 2024 12:29:59.885786057 CET	55745	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:00.024744987 CET	53	55745	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:00.025633097 CET	60074	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:00.163507938 CET	53	60074	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:00.164453983 CET	55835	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:00.301492929 CET	53	55835	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:00.302447081 CET	52875	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:00.440341949 CET	53	52875	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:00.441291094 CET	59326	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:00.580085039 CET	53	59326	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:00.581013918 CET	61220	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:00.718815088 CET	53	61220	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:00.719695091 CET	57504	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:00.857780933 CET	53	57504	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:00.858774900 CET	50710	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:00.996123075 CET	53	50710	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:00.997152090 CET	63040	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:01.134912014 CET	53	63040	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:01.135838032 CET	64567	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:01.274260998 CET	53	64567	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:01.275321960 CET	50031	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:01.412970066 CET	53	50031	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:01.414407015 CET	53769	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:01.556850910 CET	53	53769	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:01.557693005 CET	51273	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:01.699913025 CET	53	51273	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:01.700849056 CET	52775	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:01.714487076 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:01.714667082 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:01.714935064 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:01.715034962 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:01.843034029 CET	53	52775	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:01.843935013 CET	49897	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:01.986762047 CET	53	49897	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:01.987719059 CET	60588	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:02.129982948 CET	53	60588	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:02.130983114 CET	56306	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:02.289923906 CET	56306	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:02.313827991 CET	53	56306	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:02.314923048 CET	65241	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:02.429368973 CET	53	56306	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:02.456145048 CET	53	65241	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:02.457201004 CET	57530	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:02.594954967 CET	53	57530	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:02.595864058 CET	54287	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:02.727247953 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:02.727248907 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:02.727785110 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:02.727818966 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:02.732835054 CET	53	54287	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:02.733813047 CET	59268	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:02.799787045 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:02.800404072 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:02.836462021 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:02.866636992 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:02.866719007 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:02.871246099 CET	53	59268	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:02.872081041 CET	64136	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:03.011667013 CET	53	64136	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:03.012486935 CET	59222	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:03.041692972 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:03.041759014 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:03.041788101 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:03.041801929 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:03.041827917 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:03.041846037 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:03.042176962 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:03.042253971 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:03.042296886 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:03.055147886 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:03.114696980 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:03.149265051 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:03.150672913 CET	53	59222	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:03.156800985 CET	64924	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:03.185272932 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:03.185307980 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:03.185342073 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:03.185914040 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:03.297069073 CET	53	64924	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:03.298000097 CET	55638	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:03.356822014 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:03.356832981 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:03.369312048 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:03.383248091 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:03.437957048 CET	53	55638	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:03.438859940 CET	51210	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:03.576772928 CET	53	51210	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:03.577876091 CET	65451	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:03.719022036 CET	53	65451	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:03.719989061 CET	49367	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:03.759644032 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:03.759731054 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:03.860289097 CET	53	49367	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:03.861160994 CET	57438	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:03.999757051 CET	53	57438	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:04.000639915 CET	56975	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:04.075254917 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:04.138257027 CET	53	56975	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:04.139071941 CET	63350	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:04.193949938 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:04.194097042 CET	443	52512	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:04.194307089 CET	52512	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:04.279763937 CET	53	63350	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:04.280599117 CET	59674	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:04.419123888 CET	53	59674	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:04.420017004 CET	51535	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:04.557934046 CET	53	51535	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:04.559005022 CET	54311	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:04.697433949 CET	53	54311	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:04.698421955 CET	55184	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:04.835982084 CET	53	55184	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:04.840804100 CET	58807	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:04.978652954 CET	53	58807	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:04.979675055 CET	61766	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:05.117918015 CET	53	61766	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:05.119014978 CET	64206	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:05.257539988 CET	53	64206	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:05.258517981 CET	60015	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:05.396734953 CET	53	60015	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:05.397753954 CET	54212	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:05.536427021 CET	53	54212	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:05.539488077 CET	59355	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:05.680649042 CET	53	59355	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:05.681657076 CET	62108	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:05.819354057 CET	53	62108	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:05.820391893 CET	56648	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:05.957914114 CET	53	56648	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:05.959034920 CET	62400	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:06.096923113 CET	53	62400	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:06.099822998 CET	61055	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:06.237888098 CET	53	61055	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:06.240070105 CET	58768	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:06.377969980 CET	53	58768	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:06.381625891 CET	53860	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:06.519243002 CET	53	53860	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:06.520554066 CET	52288	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:06.663443089 CET	52288	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:06.665158987 CET	53	52288	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:06.666052103 CET	61863	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:06.800420046 CET	53	52288	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:06.804752111 CET	53	61863	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:06.805629015 CET	62102	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:06.944083929 CET	53	62102	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:06.944972038 CET	61074	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:07.082890987 CET	53	61074	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:07.083825111 CET	57952	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:07.221082926 CET	53	57952	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:07.221976042 CET	58580	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:07.359801054 CET	53	58580	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:07.360697031 CET	60280	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:07.501908064 CET	53	60280	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:07.502969980 CET	60668	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:07.640748024 CET	53	60668	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:07.641839027 CET	55011	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:07.781064987 CET	53	55011	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:07.782195091 CET	56051	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:07.920499086 CET	53	56051	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:07.924320936 CET	53863	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:08.063081026 CET	53	53863	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:08.064240932 CET	59145	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:08.205838919 CET	53	59145	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:08.206902027 CET	49614	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:08.345493078 CET	53	49614	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:08.346493959 CET	59842	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:08.484534025 CET	53	59842	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:08.485599995 CET	53819	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:08.623754025 CET	53	53819	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:08.624893904 CET	60627	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:08.762967110 CET	53	60627	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:08.763962984 CET	57201	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:08.901272058 CET	53	57201	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:08.902332067 CET	56897	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:09.039947987 CET	53	56897	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:09.040879011 CET	65070	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:09.178833008 CET	53	65070	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:09.179824114 CET	54667	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:09.320470095 CET	53	54667	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:09.320908070 CET	54667	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:09.321696043 CET	51059	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:09.458800077 CET	53	54667	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:09.460445881 CET	53	51059	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:09.461467028 CET	59678	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:09.601280928 CET	53	59678	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:09.602291107 CET	54483	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:09.740703106 CET	53	54483	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:09.741786957 CET	61707	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:09.881226063 CET	53	61707	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:09.883147001 CET	49552	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:10.020183086 CET	53	49552	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:10.021267891 CET	63436	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:10.159615040 CET	53	63436	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:10.160598993 CET	63814	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:10.298949957 CET	53	63814	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:10.299901962 CET	55622	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:10.437968016 CET	53	55622	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:10.449784040 CET	55622	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:10.465677977 CET	51224	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:10.587344885 CET	53	55622	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:10.603643894 CET	53	51224	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:10.626125097 CET	51926	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:10.763698101 CET	53	51926	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:10.764775991 CET	65425	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:10.913238049 CET	65425	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:10.918791056 CET	53	65425	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:10.919747114 CET	62328	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:11.050246000 CET	53	65425	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:11.057429075 CET	53	62328	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:11.058446884 CET	50540	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:11.196470022 CET	53	50540	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:11.197474003 CET	65419	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:11.336730003 CET	53	65419	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:11.337598085 CET	64374	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:11.475688934 CET	53	64374	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:11.476753950 CET	61449	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:11.614618063 CET	53	61449	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:11.615618944 CET	61688	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:11.705096006 CET	51218	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.705351114 CET	51218	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.705725908 CET	51218	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.705890894 CET	51218	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.710475922 CET	51218	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.710654020 CET	51218	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.710773945 CET	51218	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.710810900 CET	51218	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.712454081 CET	58393	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.715426922 CET	58393	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:11.753279924 CET	53	61688	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:11.756400108 CET	53536	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:11.894505978 CET	53	53536	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:11.895807981 CET	55503	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:12.022933006 CET	58393	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:12.034657001 CET	53	55503	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:12.036417961 CET	54572	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:12.174257994 CET	53	54572	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:12.176323891 CET	59871	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:12.313779116 CET	53	59871	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:12.315884113 CET	60980	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:12.453800917 CET	53	60980	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:12.454771042 CET	62318	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:12.593085051 CET	53	62318	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:12.594022989 CET	62103	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:12.632138968 CET	58393	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:12.731024027 CET	53	62103	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:12.737237930 CET	59128	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:12.789696932 CET	443	51218	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:12.791472912 CET	443	51218	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:12.792357922 CET	51218	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:12.796947002 CET	443	58393	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:12.797003031 CET	443	58393	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:12.797013044 CET	443	58393	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:12.797058105 CET	443	58393	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:12.797069073 CET	443	58393	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:12.798106909 CET	58393	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:12.798362017 CET	58393	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:12.798513889 CET	58393	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:12.798589945 CET	58393	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:12.820503950 CET	51218	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:12.875741959 CET	53	59128	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:12.876924992 CET	59203	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:12.947113991 CET	443	58393	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:13.014880896 CET	53	59203	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:13.016459942 CET	49984	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:13.106769085 CET	443	51218	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:13.106784105 CET	443	51218	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:13.106795073 CET	443	51218	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:13.106810093 CET	443	51218	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:13.107182980 CET	51218	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:13.107325077 CET	51218	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:13.112787962 CET	443	58393	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:13.112838984 CET	443	58393	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:13.123773098 CET	58393	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:13.154584885 CET	53	49984	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:13.200815916 CET	64275	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:13.344145060 CET	53	64275	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:13.345007896 CET	51444	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:13.421292067 CET	443	51218	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:13.422683001 CET	51218	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:13.439721107 CET	443	58393	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:13.483109951 CET	53	51444	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:13.484239101 CET	61739	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:13.622445107 CET	53	61739	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:13.623594999 CET	64422	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:13.736803055 CET	443	51218	162.159.61.3	192.168.2.5
Dec 12, 2024 12:30:13.761838913 CET	53	64422	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:13.763118982 CET	58532	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:13.773276091 CET	51218	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:30:13.901048899 CET	53	58532	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:13.901947021 CET	58805	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:14.042213917 CET	53	58805	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:14.043200016 CET	62916	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:14.183270931 CET	53	62916	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:14.184173107 CET	56905	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:14.323740005 CET	53	56905	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:14.324841022 CET	51746	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:14.465241909 CET	53	51746	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:14.466170073 CET	55715	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:14.604914904 CET	53	55715	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:14.605895996 CET	57607	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:14.743695021 CET	53	57607	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:14.744637012 CET	54077	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:14.883141994 CET	53	54077	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:14.884057999 CET	62318	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:15.021791935 CET	53	62318	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:15.023005962 CET	64230	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:15.161369085 CET	53	64230	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:15.162343025 CET	49565	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:15.300947905 CET	53	49565	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:15.301932096 CET	52526	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:15.439785957 CET	53	52526	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:15.440713882 CET	61154	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:15.578706026 CET	53	61154	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:15.579694986 CET	62493	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:15.718138933 CET	53	62493	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:15.719707966 CET	58979	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:15.859837055 CET	53	58979	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:15.860886097 CET	57330	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:15.998744011 CET	53	57330	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:15.999663115 CET	63085	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:16.137773037 CET	53	63085	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:16.138709068 CET	56182	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:16.276774883 CET	53	56182	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:16.277661085 CET	59132	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:16.415667057 CET	53	59132	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:16.416522026 CET	51799	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:16.554368019 CET	53	51799	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:16.557682037 CET	52609	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:16.695416927 CET	53	52609	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:16.696366072 CET	63655	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:16.836289883 CET	53	63655	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:16.837816954 CET	61866	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:16.975732088 CET	53	61866	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:16.977291107 CET	51242	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:17.115731001 CET	53	51242	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:17.117039919 CET	63882	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:17.254822969 CET	53	63882	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:17.255867004 CET	62097	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:17.394325972 CET	53	62097	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:17.395371914 CET	62674	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:17.532885075 CET	53	62674	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:17.534244061 CET	53598	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:17.671855927 CET	53	53598	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:17.672744036 CET	50387	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:17.810806990 CET	53	50387	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:17.811667919 CET	53518	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:17.949350119 CET	53	53518	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:17.950274944 CET	59292	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:18.089505911 CET	53	59292	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:18.090501070 CET	61421	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:18.228399038 CET	53	61421	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:18.229409933 CET	52983	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:18.366924047 CET	53	52983	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:18.367943048 CET	64348	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:18.505882025 CET	53	64348	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:18.507041931 CET	53890	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:18.644619942 CET	53	53890	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:18.645535946 CET	49286	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:18.787247896 CET	53	49286	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:18.788271904 CET	54241	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:18.925993919 CET	53	54241	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:18.931674004 CET	51355	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:19.068681955 CET	53	51355	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:19.069577932 CET	55739	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:19.208093882 CET	53	55739	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:19.209032059 CET	54140	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:19.347300053 CET	53	54140	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:19.348108053 CET	50877	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:19.486591101 CET	53	50877	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:19.487739086 CET	55567	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:19.625077963 CET	53	55567	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:19.627726078 CET	54878	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:19.765662909 CET	53	54878	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:19.766634941 CET	50132	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:19.904500008 CET	53	50132	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:19.908283949 CET	59207	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:20.047657013 CET	53	59207	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:20.048526049 CET	63113	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:20.187386036 CET	53	63113	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:20.188646078 CET	51816	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:20.327143908 CET	53	51816	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:20.328140974 CET	52531	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:20.465025902 CET	53	52531	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:20.465981007 CET	57360	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:20.603943110 CET	53	57360	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:20.604911089 CET	64973	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:20.742705107 CET	53	64973	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:20.743544102 CET	54699	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:20.881762028 CET	53	54699	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:20.882898092 CET	52016	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:21.020427942 CET	53	52016	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:21.021531105 CET	53041	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:21.158344984 CET	53	53041	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:21.159324884 CET	49885	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:21.301246881 CET	53	49885	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:21.302438974 CET	56262	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:21.440371037 CET	53	56262	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:21.441243887 CET	63661	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:21.583525896 CET	53	63661	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:21.584605932 CET	58516	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:21.723066092 CET	53	58516	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:21.724164009 CET	64939	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:21.863085032 CET	53	64939	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:21.863915920 CET	59498	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:22.005600929 CET	53	59498	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:22.006407976 CET	52686	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:22.148237944 CET	52686	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:22.149288893 CET	53	52686	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:22.150028944 CET	56694	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:22.285716057 CET	53	52686	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:22.286957026 CET	53	56694	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:22.287874937 CET	62790	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:22.429004908 CET	53	62790	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:22.429929018 CET	52451	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:22.572475910 CET	53	52451	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:22.573565006 CET	63190	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:22.712528944 CET	53	63190	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:22.713392019 CET	52076	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:22.857892036 CET	53	52076	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:22.859004974 CET	59590	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:22.998261929 CET	53	59590	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:22.999475956 CET	49392	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:23.140348911 CET	53	49392	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:23.141568899 CET	64339	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:23.279591084 CET	53	64339	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:23.280921936 CET	50425	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:23.421644926 CET	53	50425	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:23.422878981 CET	63015	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:23.560666084 CET	53	63015	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:23.565895081 CET	50388	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:23.705290079 CET	53	50388	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:23.708543062 CET	50116	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:23.846396923 CET	53	50116	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:23.847582102 CET	62812	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:23.985410929 CET	53	62812	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:23.987201929 CET	51073	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:24.125197887 CET	53	51073	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:24.157788992 CET	51073	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:24.191559076 CET	53064	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:24.294924021 CET	53	51073	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:24.328856945 CET	53	53064	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:24.329791069 CET	53671	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:24.467365026 CET	53	53671	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:24.469424009 CET	59331	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:24.607383966 CET	53	59331	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:24.608336926 CET	59095	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:24.745759010 CET	53	59095	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:24.746892929 CET	56330	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:24.884937048 CET	53	56330	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:24.885972977 CET	64102	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:25.023441076 CET	53	64102	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:25.024482965 CET	50144	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:25.175017118 CET	53	50144	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:25.181931973 CET	57491	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:25.319928885 CET	53	57491	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:25.321613073 CET	54518	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:25.459949017 CET	53	54518	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:25.460850954 CET	61162	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:25.598761082 CET	53	61162	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:25.599808931 CET	56210	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:25.737391949 CET	53	56210	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:25.738425970 CET	50383	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:25.877980947 CET	53	50383	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:25.879581928 CET	58306	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:26.019680977 CET	53	58306	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:26.020854950 CET	63657	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:26.158358097 CET	53	63657	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:26.159420013 CET	61179	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:26.297224998 CET	53	61179	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:26.298675060 CET	49856	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:26.439362049 CET	53	49856	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:26.440422058 CET	59057	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:26.577727079 CET	53	59057	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:26.610122919 CET	59057	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:26.611242056 CET	59461	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:26.747035027 CET	53	59057	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:26.748872042 CET	53	59461	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:26.753454924 CET	55866	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:26.891343117 CET	53	55866	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:26.892184019 CET	55120	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:27.029148102 CET	53	55120	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:27.029982090 CET	52239	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:27.168262005 CET	53	52239	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:27.169068098 CET	52744	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:27.305687904 CET	53	52744	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:27.306619883 CET	62713	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:27.444462061 CET	53	62713	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:27.445621014 CET	51094	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:27.507018089 CET	53	56982	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:27.583067894 CET	53	51094	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:27.584223986 CET	59147	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:27.722003937 CET	53	59147	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:27.723325014 CET	64019	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:27.861357927 CET	53	64019	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:27.862503052 CET	65534	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:27.999888897 CET	53	65534	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:28.001100063 CET	53542	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:28.138060093 CET	53	53542	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:28.138933897 CET	49976	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:28.276921988 CET	53	49976	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:28.277872086 CET	58223	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:28.416903019 CET	53	58223	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:28.420283079 CET	50416	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:28.559221983 CET	53	50416	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:28.560188055 CET	52952	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:28.699829102 CET	53	52952	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:28.700937986 CET	54292	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:28.838840008 CET	53	54292	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:28.839814901 CET	62221	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:28.977380991 CET	53	62221	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:28.978329897 CET	64811	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:29.117703915 CET	53	64811	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:29.118935108 CET	58952	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:29.256581068 CET	53	58952	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:29.257531881 CET	64139	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:29.395900965 CET	53	64139	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:29.396913052 CET	63183	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:29.534848928 CET	53	63183	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:29.535770893 CET	58813	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:29.674186945 CET	53	58813	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:29.675429106 CET	52622	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:29.813976049 CET	53	52622	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:29.815076113 CET	51153	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:29.952522993 CET	53	51153	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:29.953524113 CET	60542	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:30.091188908 CET	53	60542	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:30.092192888 CET	61684	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:30.229469061 CET	53	61684	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:30.231978893 CET	64463	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:30.370424986 CET	53	64463	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:30.371344090 CET	54814	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:30.509324074 CET	53	54814	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:30.510519981 CET	61639	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:30.648878098 CET	53	61639	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:30.654990911 CET	50670	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:30.791878939 CET	53	50670	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:30.795698881 CET	52672	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:30.936338902 CET	53	52672	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:30.940761089 CET	50677	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:31.078567028 CET	53	50677	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:31.084863901 CET	64721	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:31.222656965 CET	53	64721	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:31.224534035 CET	55069	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:31.362149954 CET	53	55069	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:31.363081932 CET	65512	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:31.502357006 CET	53	65512	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:31.505703926 CET	56879	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:31.643301010 CET	53	56879	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:31.645032883 CET	56294	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:31.782721043 CET	53	56294	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:31.783687115 CET	58208	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:31.922214985 CET	53	58208	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:31.923655033 CET	52248	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:32.062751055 CET	53	52248	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:32.070183992 CET	52248	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:32.072112083 CET	51191	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:32.226558924 CET	51191	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:32.296920061 CET	53	52248	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:32.296935081 CET	53	51191	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:32.297838926 CET	62249	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:32.445446014 CET	62249	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:32.538642883 CET	53	51191	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:32.538767099 CET	53	62249	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:32.539773941 CET	50991	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:32.582449913 CET	53	62249	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:32.679617882 CET	53	50991	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:32.681624889 CET	49884	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:32.822465897 CET	53	49884	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:32.826937914 CET	62043	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:32.964479923 CET	53	62043	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:32.966753960 CET	52133	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:33.106508970 CET	53	52133	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:33.108784914 CET	49959	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:33.246692896 CET	53	49959	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:33.247934103 CET	61265	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:33.385472059 CET	53	61265	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:33.589241028 CET	58923	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:33.727307081 CET	53	58923	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:33.728661060 CET	49507	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:33.869386911 CET	53	49507	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:33.871660948 CET	52479	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:34.009428024 CET	53	52479	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:34.011143923 CET	56051	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:34.149259090 CET	53	56051	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:34.151215076 CET	60652	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:34.289011955 CET	53	60652	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:34.289997101 CET	65295	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:34.429150105 CET	53	65295	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:34.430453062 CET	61027	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:34.568550110 CET	53	61027	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:34.569513083 CET	60901	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:34.707243919 CET	53	60901	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:34.708174944 CET	53192	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:34.845963001 CET	53	53192	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:34.847524881 CET	56870	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:34.986044884 CET	53	56870	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:34.987097979 CET	60278	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:35.126420021 CET	53	60278	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:35.127562046 CET	52077	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:35.265316010 CET	53	52077	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:35.266423941 CET	54961	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:35.404767036 CET	53	54961	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:35.405577898 CET	61878	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:35.543108940 CET	53	61878	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:35.544039011 CET	58154	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:35.682375908 CET	53	58154	1.1.1.1	192.168.2.5
Dec 12, 2024 12:30:35.683239937 CET	50709	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:30:35.822282076 CET	53	50709	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 12, 2024 12:30:02.429521084 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:30:06.800592899 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:30:09.459125996 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:30:10.587424994 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:30:22.285845041 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:30:24.294996977 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:30:26.747095108 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:30:32.296983957 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 12, 2024 12:28:58.371534109 CET	192.168.2.5	1.1.1.1	0xbf80	Standard query (0)	www.docusign.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:28:58.371994972 CET	192.168.2.5	1.1.1.1	0xc834	Standard query (0)	www.docusign.com	65	IN (0x0001)	false
Dec 12, 2024 12:29:00.674599886 CET	192.168.2.5	1.1.1.1	0x993b	Standard query (0)	bzib.nelreports.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:00.674885988 CET	192.168.2.5	1.1.1.1	0x7b55	Standard query (0)	bzib.nelreports.net	65	IN (0x0001)	false
Dec 12, 2024 12:29:01.255681038 CET	192.168.2.5	1.1.1.1	0x7989	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:01.255821943 CET	192.168.2.5	1.1.1.1	0x1120	Standard query (0)	clients2.googleusercontent.com	65	IN (0x0001)	false
Dec 12, 2024 12:29:02.840755939 CET	192.168.2.5	1.1.1.1	0x27b1	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:02.841078043 CET	192.168.2.5	1.1.1.1	0x224a	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Dec 12, 2024 12:29:02.841500044 CET	192.168.2.5	1.1.1.1	0x4916	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:02.841651917 CET	192.168.2.5	1.1.1.1	0xfa7b	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Dec 12, 2024 12:29:02.847867012 CET	192.168.2.5	1.1.1.1	0xaeb	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:02.848076105 CET	192.168.2.5	1.1.1.1	0xccea	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Dec 12, 2024 12:29:08.851106882 CET	192.168.2.5	1.1.1.1	0x4a22	Standard query (0)	eyoyiqskiciwwoyw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:08.994230032 CET	192.168.2.5	1.1.1.1	0xe626	Standard query (0)	ueaokkmeuioagwuc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:09.133268118 CET	192.168.2.5	1.1.1.1	0xa1af	Standard query (0)	wiaiwegmqcmwcouw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:09.273225069 CET	192.168.2.5	1.1.1.1	0xd58a	Standard query (0)	muuagqkickggsewc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:09.412796974 CET	192.168.2.5	1.1.1.1	0xca48	Standard query (0)	uyicacsgusyikwmy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:09.622148037 CET	192.168.2.5	1.1.1.1	0xe595	Standard query (0)	qcwcksiayqqmwssm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:09.787537098 CET	192.168.2.5	1.1.1.1	0x3d7c	Standard query (0)	ekacwgokqcscqysi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:09.934253931 CET	192.168.2.5	1.1.1.1	0x4f40	Standard query (0)	esuyiyesukcuoico.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:10.074476004 CET	192.168.2.5	1.1.1.1	0xbeae	Standard query (0)	oeegecksewamggaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:10.214463949 CET	192.168.2.5	1.1.1.1	0xa1ef	Standard query (0)	yyacmosgygqayqys.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:10.353420973 CET	192.168.2.5	1.1.1.1	0x931c	Standard query (0)	cgeewuguwiikcwug.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:10.492691040 CET	192.168.2.5	1.1.1.1	0x239b	Standard query (0)	qckwwsmukogkeuge.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:10.635776997 CET	192.168.2.5	1.1.1.1	0x568a	Standard query (0)	keoqiqigggqkcykq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:10.776180983 CET	192.168.2.5	1.1.1.1	0xe1fd	Standard query (0)	kqsamcsauqiagmma.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:10.914928913 CET	192.168.2.5	1.1.1.1	0x8e14	Standard query (0)	mocikyoeikocwkuc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:11.053730011 CET	192.168.2.5	1.1.1.1	0x342b	Standard query (0)	uymiagmwmqmimewm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:11.193816900 CET	192.168.2.5	1.1.1.1	0x840	Standard query (0)	gcikuiqswcgsscog.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:11.438641071 CET	192.168.2.5	1.1.1.1	0xebc4	Standard query (0)	qwmaokcmiwuqqyes.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:11.577223063 CET	192.168.2.5	1.1.1.1	0x3f98	Standard query (0)	igaiseoqksuoukqg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:11.716541052 CET	192.168.2.5	1.1.1.1	0xa2a9	Standard query (0)	kqukwaogqoucsaas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:11.856015921 CET	192.168.2.5	1.1.1.1	0xbaa	Standard query (0)	miacggmycyqikoyq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:11.996437073 CET	192.168.2.5	1.1.1.1	0xe0d5	Standard query (0)	woceumwmwioocusa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:12.136151075 CET	192.168.2.5	1.1.1.1	0x5702	Standard query (0)	acgcaiyykiigugms.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:12.274096966 CET	192.168.2.5	1.1.1.1	0xae11	Standard query (0)	cogsyycsuwoysugi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:12.412484884 CET	192.168.2.5	1.1.1.1	0xc543	Standard query (0)	oekyamueeiiousia.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:12.552150965 CET	192.168.2.5	1.1.1.1	0x561	Standard query (0)	wukaqiusicksuguo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:12.692260981 CET	192.168.2.5	1.1.1.1	0x614c	Standard query (0)	yyusosuyycoeikgo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:12.833697081 CET	192.168.2.5	1.1.1.1	0x8eb0	Standard query (0)	kqoceoymymoicqky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:12.974559069 CET	192.168.2.5	1.1.1.1	0x8c5a	Standard query (0)	uykkwkqqemamguwa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:13.113486052 CET	192.168.2.5	1.1.1.1	0x8f22	Standard query (0)	oyekqyccewougasu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:13.262392998 CET	192.168.2.5	1.1.1.1	0x4e19	Standard query (0)	ymsaymyugccysmow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:13.401699066 CET	192.168.2.5	1.1.1.1	0x5294	Standard query (0)	omuquowgiusiesgk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:13.542319059 CET	192.168.2.5	1.1.1.1	0x4949	Standard query (0)	wiywykakusaygisc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:13.682080984 CET	192.168.2.5	1.1.1.1	0x78fb	Standard query (0)	aqmqywkwsmmayyoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:13.822850943 CET	192.168.2.5	1.1.1.1	0x3518	Standard query (0)	cuccygameukkeumw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:13.962450027 CET	192.168.2.5	1.1.1.1	0xd0f9	Standard query (0)	ukekykoqskumoikg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:14.102264881 CET	192.168.2.5	1.1.1.1	0x53bd	Standard query (0)	uyqcacmsiquuwggq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:14.241147041 CET	192.168.2.5	1.1.1.1	0xfa3f	Standard query (0)	ysoqqwckkqssyigm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:14.380646944 CET	192.168.2.5	1.1.1.1	0xa659	Standard query (0)	yyemsyoimicqmais.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:14.520670891 CET	192.168.2.5	1.1.1.1	0x17e1	Standard query (0)	miigookwguakmkeu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:14.659724951 CET	192.168.2.5	1.1.1.1	0x84fe	Standard query (0)	qiuswcgwaqgemwcg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:14.798846006 CET	192.168.2.5	1.1.1.1	0xebec	Standard query (0)	wuusiiukmwcmimyk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:14.941006899 CET	192.168.2.5	1.1.1.1	0x7763	Standard query (0)	uqyukkamycuaimsu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:15.079647064 CET	192.168.2.5	1.1.1.1	0xa2f5	Standard query (0)	woeamasicuiqyckq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:15.219059944 CET	192.168.2.5	1.1.1.1	0x6e88	Standard query (0)	akaueuwoocwkkoya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:15.358453989 CET	192.168.2.5	1.1.1.1	0x8ff5	Standard query (0)	qciqgoeogwwmwkcw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:15.497136116 CET	192.168.2.5	1.1.1.1	0xdc93	Standard query (0)	ucwesqiquqggymqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:15.636007071 CET	192.168.2.5	1.1.1.1	0x4817	Standard query (0)	mgseamqmgkqcuewy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:15.775262117 CET	192.168.2.5	1.1.1.1	0x27e4	Standard query (0)	gaoweoyqcuuykwgu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:15.913499117 CET	192.168.2.5	1.1.1.1	0x81a1	Standard query (0)	oqegmuqkgyaywwmc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:16.052514076 CET	192.168.2.5	1.1.1.1	0x4542	Standard query (0)	qusmiuqmmgqsgeci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:16.192128897 CET	192.168.2.5	1.1.1.1	0x26cf	Standard query (0)	yqcakkmwigkaumii.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:16.331669092 CET	192.168.2.5	1.1.1.1	0xe4f6	Standard query (0)	qokykyyigsyqggqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:16.469605923 CET	192.168.2.5	1.1.1.1	0x745b	Standard query (0)	cyyyokugycioysok.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:16.609006882 CET	192.168.2.5	1.1.1.1	0x5dff	Standard query (0)	iqcaysimoeeqamky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:16.749175072 CET	192.168.2.5	1.1.1.1	0x1c64	Standard query (0)	yekiwquqaacesqqq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:16.891438007 CET	192.168.2.5	1.1.1.1	0x7c19	Standard query (0)	gmooqswyuuqaiomi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:17.030643940 CET	192.168.2.5	1.1.1.1	0xe6b9	Standard query (0)	kuiomoiwauwckqeq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:17.168948889 CET	192.168.2.5	1.1.1.1	0x5e63	Standard query (0)	ceucuuwiwwuiweaq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:17.980957985 CET	192.168.2.5	1.1.1.1	0xfbc4	Standard query (0)	cycscsqyqkeaykgc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:18.122489929 CET	192.168.2.5	1.1.1.1	0xcaee	Standard query (0)	ssagiiaauyewiswa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:18.262000084 CET	192.168.2.5	1.1.1.1	0x3126	Standard query (0)	ggwsuoyyioagegkw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:18.400587082 CET	192.168.2.5	1.1.1.1	0x71f4	Standard query (0)	ieikmuieoqqmugwu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:18.539486885 CET	192.168.2.5	1.1.1.1	0xcab9	Standard query (0)	kcqkucqkogqiuukw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:18.679260015 CET	192.168.2.5	1.1.1.1	0x47c4	Standard query (0)	oqouwceoowyiwgag.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:18.820086002 CET	192.168.2.5	1.1.1.1	0x6341	Standard query (0)	gakowseyscmeqkya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:18.959486008 CET	192.168.2.5	1.1.1.1	0xdff3	Standard query (0)	quisoakcuqsygyyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:19.100276947 CET	192.168.2.5	1.1.1.1	0x4f23	Standard query (0)	auuisqaykqgeesae.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:19.239332914 CET	192.168.2.5	1.1.1.1	0xf662	Standard query (0)	iyawyckqggkwsyoq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:19.478363991 CET	192.168.2.5	1.1.1.1	0xf5c3	Standard query (0)	ecmyomcaicqysoqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:19.721375942 CET	192.168.2.5	1.1.1.1	0xe4e6	Standard query (0)	iqcqqquiwomgsmma.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:19.864667892 CET	192.168.2.5	1.1.1.1	0x7f95	Standard query (0)	ssegwgieumyoasym.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:20.004524946 CET	192.168.2.5	1.1.1.1	0xdfe5	Standard query (0)	ceeomiecgymecgau.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:20.143043995 CET	192.168.2.5	1.1.1.1	0xe683	Standard query (0)	myisokqwsmqeusuy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:20.281450033 CET	192.168.2.5	1.1.1.1	0xf062	Standard query (0)	ywkamsiogkycyosy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:20.420885086 CET	192.168.2.5	1.1.1.1	0x3905	Standard query (0)	ggkyecqguqkkuoso.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:20.560139894 CET	192.168.2.5	1.1.1.1	0xec4c	Standard query (0)	kcyoeiykekuqkkmg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:20.699763060 CET	192.168.2.5	1.1.1.1	0xe61f	Standard query (0)	ikwyuqgsegcgcccg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:20.839240074 CET	192.168.2.5	1.1.1.1	0xd61	Standard query (0)	wgswkwaesqqwkoaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:20.983134985 CET	192.168.2.5	1.1.1.1	0x487f	Standard query (0)	eqkkkcuwkiqiecac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:21.121203899 CET	192.168.2.5	1.1.1.1	0xbc82	Standard query (0)	kigcewceemkckeow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:21.260164976 CET	192.168.2.5	1.1.1.1	0xecb8	Standard query (0)	ykaimcgigakggwec.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:21.398899078 CET	192.168.2.5	1.1.1.1	0xde5d	Standard query (0)	uceaygkekiassamu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:21.538876057 CET	192.168.2.5	1.1.1.1	0xbcd2	Standard query (0)	seioywksogeseqig.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:21.679543972 CET	192.168.2.5	1.1.1.1	0x33f9	Standard query (0)	ssoqscyewimqiqme.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:21.818614960 CET	192.168.2.5	1.1.1.1	0x1a37	Standard query (0)	kocgeaeoakgqewog.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:21.958178997 CET	192.168.2.5	1.1.1.1	0x8259	Standard query (0)	kuiqsugkqeoscguo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:22.097704887 CET	192.168.2.5	1.1.1.1	0x7303	Standard query (0)	kcsqwmkusesaccwa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:22.239948034 CET	192.168.2.5	1.1.1.1	0x606a	Standard query (0)	ywyawywiuyecuiuu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:22.380290031 CET	192.168.2.5	1.1.1.1	0xddf1	Standard query (0)	uowowiqiyeiuwmcc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:22.519551992 CET	192.168.2.5	1.1.1.1	0xf292	Standard query (0)	uokqeaieowiogsgc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:22.659759045 CET	192.168.2.5	1.1.1.1	0xd88b	Standard query (0)	ikoqkscwsowwukmi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:22.798422098 CET	192.168.2.5	1.1.1.1	0x194	Standard query (0)	iymukyseoieqccac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:22.938564062 CET	192.168.2.5	1.1.1.1	0xf57e	Standard query (0)	qascmswkaisogoaq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:23.077194929 CET	192.168.2.5	1.1.1.1	0xcb9c	Standard query (0)	gacgceaygaecuguy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:23.217303991 CET	192.168.2.5	1.1.1.1	0xf549	Standard query (0)	eqyyguuwsyqaqgsq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:23.357563972 CET	192.168.2.5	1.1.1.1	0x788c	Standard query (0)	ewywcoeukaoaegci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:23.498179913 CET	192.168.2.5	1.1.1.1	0x9da8	Standard query (0)	mmygsewuukqkiiok.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:23.641876936 CET	192.168.2.5	1.1.1.1	0xa4fb	Standard query (0)	wgyimykogekgewoa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:23.781414032 CET	192.168.2.5	1.1.1.1	0x55b6	Standard query (0)	uiguoqqagkiuagyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:23.919588089 CET	192.168.2.5	1.1.1.1	0x386c	Standard query (0)	kcesagqugouwkqyg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:24.059143066 CET	192.168.2.5	1.1.1.1	0x9839	Standard query (0)	yqeugeoquqsokgqk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:24.198759079 CET	192.168.2.5	1.1.1.1	0x274c	Standard query (0)	eigkgwkyuqssgamw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:24.344178915 CET	192.168.2.5	1.1.1.1	0x7e8f	Standard query (0)	waqmyueimmyiuawq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:24.485223055 CET	192.168.2.5	1.1.1.1	0x24c3	Standard query (0)	qgukewuuykmmkgeq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:24.625185013 CET	192.168.2.5	1.1.1.1	0x45d9	Standard query (0)	gmwcscokucowyogs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:24.763917923 CET	192.168.2.5	1.1.1.1	0xc4a1	Standard query (0)	ywegqamoegumacgi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:24.902959108 CET	192.168.2.5	1.1.1.1	0x2705	Standard query (0)	yquocucuqoywwcsu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:25.042154074 CET	192.168.2.5	1.1.1.1	0x7def	Standard query (0)	eqmeimmouegoasay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:25.182786942 CET	192.168.2.5	1.1.1.1	0x48e	Standard query (0)	cykgmsqcgysgaioo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:25.321432114 CET	192.168.2.5	1.1.1.1	0x9b17	Standard query (0)	oqoemaogyoikomiy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:25.459846020 CET	192.168.2.5	1.1.1.1	0xa1fd	Standard query (0)	qoiiomimuoaqgeku.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:25.598997116 CET	192.168.2.5	1.1.1.1	0x4583	Standard query (0)	wgymkeismmiemsqq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:25.739392042 CET	192.168.2.5	1.1.1.1	0x86b4	Standard query (0)	ykocagogmeiwmymy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:25.877847910 CET	192.168.2.5	1.1.1.1	0x4d0d	Standard query (0)	csoqiicgaaiyyoom.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:26.018559933 CET	192.168.2.5	1.1.1.1	0xbe15	Standard query (0)	koioiiwouukqousy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:26.158000946 CET	192.168.2.5	1.1.1.1	0x4111	Standard query (0)	okkyekwuommcicqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:26.296581030 CET	192.168.2.5	1.1.1.1	0x4943	Standard query (0)	ecacmycegqoaquio.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:26.435604095 CET	192.168.2.5	1.1.1.1	0x61ec	Standard query (0)	skgcsksqyekiymii.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:26.574100018 CET	192.168.2.5	1.1.1.1	0xb418	Standard query (0)	kckcekceqgcyqcsa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:26.721698046 CET	192.168.2.5	1.1.1.1	0xa58c	Standard query (0)	uoaeyoycyycqkoci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:26.863168955 CET	192.168.2.5	1.1.1.1	0x54fa	Standard query (0)	wsaekoiomeagsaes.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:27.002191067 CET	192.168.2.5	1.1.1.1	0xa5d8	Standard query (0)	iqmeccigieosgmwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:27.551949024 CET	192.168.2.5	1.1.1.1	0xbd41	Standard query (0)	ggeqowwmmmeekigg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:27.690666914 CET	192.168.2.5	1.1.1.1	0x8143	Standard query (0)	sssawsmmkmuyqsaq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:27.829411030 CET	192.168.2.5	1.1.1.1	0x2c78	Standard query (0)	ecmckkeyoskcigeu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:27.968394995 CET	192.168.2.5	1.1.1.1	0x8e7d	Standard query (0)	quoqoooiamqkkosc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:28.109082937 CET	192.168.2.5	1.1.1.1	0x1f95	Standard query (0)	waokmuyyeooamowm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:28.251132965 CET	192.168.2.5	1.1.1.1	0x3718	Standard query (0)	ykomskascimimomo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:28.395050049 CET	192.168.2.5	1.1.1.1	0x3bd6	Standard query (0)	mmisquwegymayaee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:28.534019947 CET	192.168.2.5	1.1.1.1	0xb610	Standard query (0)	mmyukmsqamgicqai.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:28.672815084 CET	192.168.2.5	1.1.1.1	0xb5ae	Standard query (0)	ikwyooieywakeqog.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:28.811839104 CET	192.168.2.5	1.1.1.1	0x8e4a	Standard query (0)	mgwmkyyqckeewgce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:28.950138092 CET	192.168.2.5	1.1.1.1	0xc29b	Standard query (0)	owoksuegymmgesys.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:29.088880062 CET	192.168.2.5	1.1.1.1	0xb1b5	Standard query (0)	aamuskacaaiycguu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:29.228879929 CET	192.168.2.5	1.1.1.1	0x70a4	Standard query (0)	yegskieoocgoamyi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:29.368428946 CET	192.168.2.5	1.1.1.1	0x270b	Standard query (0)	aaiouwywwcwuuasm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:29.509903908 CET	192.168.2.5	1.1.1.1	0xd774	Standard query (0)	kuoqgwooymgsqaum.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:29.651464939 CET	192.168.2.5	1.1.1.1	0xdd16	Standard query (0)	myoyccuwcyaygceg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:29.790057898 CET	192.168.2.5	1.1.1.1	0x78c8	Standard query (0)	ggqgwuaseamkyywa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:29.929317951 CET	192.168.2.5	1.1.1.1	0x11bd	Standard query (0)	uwimwwicgcscuoku.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:30.068269968 CET	192.168.2.5	1.1.1.1	0x706c	Standard query (0)	cyyukyomsoiqyyqa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:30.206882954 CET	192.168.2.5	1.1.1.1	0xfa97	Standard query (0)	gaisoawuoicqsumy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:30.599399090 CET	192.168.2.5	1.1.1.1	0xe8e0	Standard query (0)	qogsmcecyusiyaim.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:30.740432024 CET	192.168.2.5	1.1.1.1	0x82	Standard query (0)	ykqocceawkwoagmc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:30.886841059 CET	192.168.2.5	1.1.1.1	0x6757	Standard query (0)	aosywgkogcissggi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:31.026087999 CET	192.168.2.5	1.1.1.1	0x3940	Standard query (0)	ieywwkeuouoqgqms.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:31.165806055 CET	192.168.2.5	1.1.1.1	0x87b4	Standard query (0)	ecgkeyeueawgcuqo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:31.304368019 CET	192.168.2.5	1.1.1.1	0x539a	Standard query (0)	guimuaoiecmouigq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:31.442485094 CET	192.168.2.5	1.1.1.1	0x3445	Standard query (0)	ggkyuooyikmqoscw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:31.581710100 CET	192.168.2.5	1.1.1.1	0x8f54	Standard query (0)	uoeeuiaewmogugeo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:31.720724106 CET	192.168.2.5	1.1.1.1	0x72d9	Standard query (0)	okgeqaswygsgykme.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:31.860186100 CET	192.168.2.5	1.1.1.1	0x9f7c	Standard query (0)	ywqiciegywcouoiy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:31.999110937 CET	192.168.2.5	1.1.1.1	0x82e5	Standard query (0)	qgkgogieieoomkqq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:32.138705969 CET	192.168.2.5	1.1.1.1	0x4782	Standard query (0)	qgkmsekougssaawq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:32.278017998 CET	192.168.2.5	1.1.1.1	0xe120	Standard query (0)	ggmwwewskeiggosq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:32.416637897 CET	192.168.2.5	1.1.1.1	0xb91f	Standard query (0)	eqgwaamacqweiwie.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:32.561774015 CET	192.168.2.5	1.1.1.1	0x6a0	Standard query (0)	wmqcgwcegsomeqas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:32.699969053 CET	192.168.2.5	1.1.1.1	0x545c	Standard query (0)	oqummowmqwcgsegm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:32.838360071 CET	192.168.2.5	1.1.1.1	0x6498	Standard query (0)	qoowyoueaaaccgqs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:32.977264881 CET	192.168.2.5	1.1.1.1	0x7920	Standard query (0)	csiykwakekqoqaym.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:33.115813971 CET	192.168.2.5	1.1.1.1	0x64ff	Standard query (0)	mmymmauyiiksiugu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:33.254602909 CET	192.168.2.5	1.1.1.1	0xc759	Standard query (0)	cseksqccmgaieyic.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:33.393357038 CET	192.168.2.5	1.1.1.1	0x8a4a	Standard query (0)	cykgucwkesokooyw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:33.536432028 CET	192.168.2.5	1.1.1.1	0x28b3	Standard query (0)	okoguckagygoqqgk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:33.675234079 CET	192.168.2.5	1.1.1.1	0xdd00	Standard query (0)	cyswykkcmggyiqwo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:33.814063072 CET	192.168.2.5	1.1.1.1	0xa6d8	Standard query (0)	gmmacaiigwcscggs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:33.953083992 CET	192.168.2.5	1.1.1.1	0x8e86	Standard query (0)	yequgaccqouegcmw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:34.095077038 CET	192.168.2.5	1.1.1.1	0x7bd3	Standard query (0)	sksiyqgummyycgmi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:34.233866930 CET	192.168.2.5	1.1.1.1	0x3809	Standard query (0)	skekiggeimmceqcg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:34.372523069 CET	192.168.2.5	1.1.1.1	0xb15c	Standard query (0)	eiqqequeskcqiqmw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:34.512054920 CET	192.168.2.5	1.1.1.1	0x5ca8	Standard query (0)	ecsamoyaimquqwow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:34.650903940 CET	192.168.2.5	1.1.1.1	0xb4fb	Standard query (0)	aiyksmkyqgyaemiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:34.789932013 CET	192.168.2.5	1.1.1.1	0x6fd	Standard query (0)	owewoieiwasaueco.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:34.932997942 CET	192.168.2.5	1.1.1.1	0xd878	Standard query (0)	aoymcmmeqqqgwwca.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:35.075056076 CET	192.168.2.5	1.1.1.1	0xb9b0	Standard query (0)	iygsiugeeogoeiyi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:35.214808941 CET	192.168.2.5	1.1.1.1	0x2beb	Standard query (0)	quuemeewaqaiiyqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:35.433047056 CET	192.168.2.5	1.1.1.1	0x63cc	Standard query (0)	wggikwiqowiwqcqg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:35.572168112 CET	192.168.2.5	1.1.1.1	0xe778	Standard query (0)	ucuiiwcwwgimkyyi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:35.711194992 CET	192.168.2.5	1.1.1.1	0xa9f3	Standard query (0)	koiugmaqgkawaiyw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:35.850194931 CET	192.168.2.5	1.1.1.1	0xbcd6	Standard query (0)	waeqkmeeasauygum.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:35.988981009 CET	192.168.2.5	1.1.1.1	0x64ba	Standard query (0)	ecimsaauyieykegi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:36.127757072 CET	192.168.2.5	1.1.1.1	0xa3d3	Standard query (0)	ocsqocikkcggeaaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:36.266670942 CET	192.168.2.5	1.1.1.1	0x5153	Standard query (0)	iyaqqeamygmakcgo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:36.406075954 CET	192.168.2.5	1.1.1.1	0xcfaa	Standard query (0)	uowgcyqcgaqiumoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:36.545526981 CET	192.168.2.5	1.1.1.1	0x4b9d	Standard query (0)	myymasomksgeawqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:36.695403099 CET	192.168.2.5	1.1.1.1	0xc7bf	Standard query (0)	myaueqycgeikwagc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:36.834063053 CET	192.168.2.5	1.1.1.1	0xba44	Standard query (0)	seoomaqwwimwueiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:37.059233904 CET	192.168.2.5	1.1.1.1	0xc7de	Standard query (0)	mgeycqkiwggsymyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:37.197360992 CET	192.168.2.5	1.1.1.1	0x218d	Standard query (0)	ikgkgaaqqsmomuim.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:37.414969921 CET	192.168.2.5	1.1.1.1	0x9b53	Standard query (0)	ieuaeqceycqyqygk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:37.553934097 CET	192.168.2.5	1.1.1.1	0xa44	Standard query (0)	waeqwwagawqkksya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:37.867780924 CET	192.168.2.5	1.1.1.1	0x93e2	Standard query (0)	mmeuqmoaekswggoe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:38.006247044 CET	192.168.2.5	1.1.1.1	0x5ee1	Standard query (0)	ucyoqcksaiiwgqae.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:38.145345926 CET	192.168.2.5	1.1.1.1	0xa42c	Standard query (0)	aoosomigeaiewqom.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:38.283868074 CET	192.168.2.5	1.1.1.1	0x6a06	Standard query (0)	cyqaqqcqamemsiog.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:38.423979998 CET	192.168.2.5	1.1.1.1	0x7132	Standard query (0)	wacqigcacsemkyos.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:38.563985109 CET	192.168.2.5	1.1.1.1	0x9e45	Standard query (0)	yqocoeikiyacyuck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:38.875431061 CET	192.168.2.5	1.1.1.1	0x9f90	Standard query (0)	ywcuqkkmmqioiwqk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:39.016716957 CET	192.168.2.5	1.1.1.1	0xce32	Standard query (0)	waqcciyigkuoygqy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:39.160312891 CET	192.168.2.5	1.1.1.1	0x180d	Standard query (0)	ceoqyeiycqkumwao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:39.299617052 CET	192.168.2.5	1.1.1.1	0x3b01	Standard query (0)	aauquiiqeugcwswc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:39.439064026 CET	192.168.2.5	1.1.1.1	0xcfc	Standard query (0)	uoeiymqawsqiyuck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:39.583400011 CET	192.168.2.5	1.1.1.1	0x18b	Standard query (0)	yqceweqmaumwwywy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:39.723843098 CET	192.168.2.5	1.1.1.1	0xb6e5	Standard query (0)	eqmycgagykgkqwsu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:39.949888945 CET	192.168.2.5	1.1.1.1	0x75e2	Standard query (0)	seuuicaewuoaumes.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:40.088443995 CET	192.168.2.5	1.1.1.1	0xe673	Standard query (0)	aomaeyokqgsuomii.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:40.226747990 CET	192.168.2.5	1.1.1.1	0xbe16	Standard query (0)	waqucgoeeeeymeii.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:40.365622997 CET	192.168.2.5	1.1.1.1	0xbd1d	Standard query (0)	oqacqgmiaaewmmey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:40.505122900 CET	192.168.2.5	1.1.1.1	0x410d	Standard query (0)	ykeaoyaycoiamqey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:40.828015089 CET	192.168.2.5	1.1.1.1	0x7d76	Standard query (0)	csmgwcogqqcwseka.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:41.051618099 CET	192.168.2.5	1.1.1.1	0x5864	Standard query (0)	auowmussgaesgwas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:41.195812941 CET	192.168.2.5	1.1.1.1	0xe1a8	Standard query (0)	aikmouciiqgecoqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:41.419352055 CET	192.168.2.5	1.1.1.1	0xd76e	Standard query (0)	koecgqggegimaeya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:41.559334040 CET	192.168.2.5	1.1.1.1	0x1ad0	Standard query (0)	aawqwccomcemcysm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:41.698483944 CET	192.168.2.5	1.1.1.1	0x2b91	Standard query (0)	kcyakwisycecaqgw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:41.837325096 CET	192.168.2.5	1.1.1.1	0x23b5	Standard query (0)	uogksceymossmmqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:41.978020906 CET	192.168.2.5	1.1.1.1	0xd749	Standard query (0)	qgmyeeguweaukuke.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:42.117141962 CET	192.168.2.5	1.1.1.1	0x3235	Standard query (0)	mywaqkeaawisisky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:42.255745888 CET	192.168.2.5	1.1.1.1	0x9f1e	Standard query (0)	yqqsggacauiiugka.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:42.394687891 CET	192.168.2.5	1.1.1.1	0x6333	Standard query (0)	equmqmqwuuuioawa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:42.532913923 CET	192.168.2.5	1.1.1.1	0xae5b	Standard query (0)	wmoamsauiwauoosg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:42.671534061 CET	192.168.2.5	1.1.1.1	0xe2f	Standard query (0)	oqsakkimkesccikc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:42.815655947 CET	192.168.2.5	1.1.1.1	0x8fc2	Standard query (0)	mgiwaegaqyyaakwy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:42.953088045 CET	192.168.2.5	1.1.1.1	0x2161	Standard query (0)	ucmioacycscyeouk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:43.091733932 CET	192.168.2.5	1.1.1.1	0x7afa	Standard query (0)	qumaseqmggyaiauq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:43.230840921 CET	192.168.2.5	1.1.1.1	0x348d	Standard query (0)	uccyyemqaiiksuwm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:43.374346972 CET	192.168.2.5	1.1.1.1	0x7942	Standard query (0)	sesyieaiesegeaow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:43.513194084 CET	192.168.2.5	1.1.1.1	0x1b9d	Standard query (0)	kccmicaswqmswwak.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:43.652409077 CET	192.168.2.5	1.1.1.1	0xbc2d	Standard query (0)	mssaogwocegysoow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:43.791047096 CET	192.168.2.5	1.1.1.1	0x3fe0	Standard query (0)	wssaqmakumewmaes.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:43.931710958 CET	192.168.2.5	1.1.1.1	0x331a	Standard query (0)	cmukociggiqcouio.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:44.071738958 CET	192.168.2.5	1.1.1.1	0x6aa9	Standard query (0)	skyqsyyymyacyayc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:44.210836887 CET	192.168.2.5	1.1.1.1	0x99f2	Standard query (0)	uoigsiqmemcscosu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:44.350066900 CET	192.168.2.5	1.1.1.1	0xdd3b	Standard query (0)	kuywuskkgqsigqqs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:44.488440037 CET	192.168.2.5	1.1.1.1	0x5f1b	Standard query (0)	auayomwkewcomwas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:44.627563953 CET	192.168.2.5	1.1.1.1	0x5063	Standard query (0)	iyaikmkkowcqemsi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:44.767368078 CET	192.168.2.5	1.1.1.1	0x3805	Standard query (0)	ggicikyqcaiyguee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:44.905829906 CET	192.168.2.5	1.1.1.1	0xccd8	Standard query (0)	oqyaoykomyoygics.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:45.044317961 CET	192.168.2.5	1.1.1.1	0xc665	Standard query (0)	eqakguiwiqacqiwg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:45.182848930 CET	192.168.2.5	1.1.1.1	0xf2f4	Standard query (0)	wgcaouuqqqwucogy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:45.321376085 CET	192.168.2.5	1.1.1.1	0x577c	Standard query (0)	ewacuagosgqmuocm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:45.460134029 CET	192.168.2.5	1.1.1.1	0xb4ad	Standard query (0)	wgqyouayikuyuqmk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:45.805035114 CET	192.168.2.5	1.1.1.1	0x6692	Standard query (0)	owaaygsacguucaye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:45.943346977 CET	192.168.2.5	1.1.1.1	0x5dc1	Standard query (0)	uwgicagyykoommga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:46.082272053 CET	192.168.2.5	1.1.1.1	0xadc9	Standard query (0)	uiggameqqycugsqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:46.220696926 CET	192.168.2.5	1.1.1.1	0xc45d	Standard query (0)	goguooqkgysueime.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:46.361022949 CET	192.168.2.5	1.1.1.1	0x962f	Standard query (0)	keosqeosukqcooco.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:46.499545097 CET	192.168.2.5	1.1.1.1	0xfa31	Standard query (0)	maoeeogmuauywsyu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:46.639138937 CET	192.168.2.5	1.1.1.1	0x7fc9	Standard query (0)	ismqaewykmoiguki.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:46.777865887 CET	192.168.2.5	1.1.1.1	0x7962	Standard query (0)	wucwykasawokemaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:46.916779995 CET	192.168.2.5	1.1.1.1	0xc71c	Standard query (0)	ukmcqucewskcqygg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:47.055167913 CET	192.168.2.5	1.1.1.1	0xc6f7	Standard query (0)	qqqmeagkkosgcayo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:47.194303036 CET	192.168.2.5	1.1.1.1	0xa9b9	Standard query (0)	ysawassgkwqygmmq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:47.332549095 CET	192.168.2.5	1.1.1.1	0x2164	Standard query (0)	osaeyoiqoqawauga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:47.471366882 CET	192.168.2.5	1.1.1.1	0xfe7	Standard query (0)	iagisciiyoemgwaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:47.609693050 CET	192.168.2.5	1.1.1.1	0xae6	Standard query (0)	ymysimqoykwqeqiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:47.748828888 CET	192.168.2.5	1.1.1.1	0xccb5	Standard query (0)	ymmcwogyimsuqmcc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:47.887903929 CET	192.168.2.5	1.1.1.1	0x308f	Standard query (0)	osmoygyawqmmimkq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:48.031662941 CET	192.168.2.5	1.1.1.1	0xa85a	Standard query (0)	immyecuqwkiyscys.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:48.170058012 CET	192.168.2.5	1.1.1.1	0x633b	Standard query (0)	omsqkuiwcwoegooq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:48.307967901 CET	192.168.2.5	1.1.1.1	0x5ad0	Standard query (0)	ukaiiiyqoooycyqm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:48.446377039 CET	192.168.2.5	1.1.1.1	0x3116	Standard query (0)	isemauqkwwiumyky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:48.585490942 CET	192.168.2.5	1.1.1.1	0xf964	Standard query (0)	keguuyioweymiaws.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:48.724155903 CET	192.168.2.5	1.1.1.1	0x9564	Standard query (0)	kwaywmaequkqccai.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:48.866581917 CET	192.168.2.5	1.1.1.1	0x776f	Standard query (0)	yyimcoiwgckeakcm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:49.007772923 CET	192.168.2.5	1.1.1.1	0xc86	Standard query (0)	ekcwemuekgqsimae.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:49.146354914 CET	192.168.2.5	1.1.1.1	0x7a77	Standard query (0)	imigkomgmqgmakqk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:49.284779072 CET	192.168.2.5	1.1.1.1	0x8f0f	Standard query (0)	omasqkwqyskcagwi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:49.426707983 CET	192.168.2.5	1.1.1.1	0x1889	Standard query (0)	awyomscgweuqmgaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:49.566214085 CET	192.168.2.5	1.1.1.1	0x23c2	Standard query (0)	eyoyssauceguqwmk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:49.707514048 CET	192.168.2.5	1.1.1.1	0xb719	Standard query (0)	gwwcqeykmseicgaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:49.848747015 CET	192.168.2.5	1.1.1.1	0x1222	Standard query (0)	qwywqgsmgaoiwsga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:49.989943027 CET	192.168.2.5	1.1.1.1	0x44cd	Standard query (0)	ososwckwcqmmwqcy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:50.128577948 CET	192.168.2.5	1.1.1.1	0xe2be	Standard query (0)	osaymwoggqqycmse.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:50.266973019 CET	192.168.2.5	1.1.1.1	0x86ff	Standard query (0)	oyewqwkusieeoqey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:50.407653093 CET	192.168.2.5	1.1.1.1	0xbe9	Standard query (0)	ommwaqgaemsmcqwc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:50.547509909 CET	192.168.2.5	1.1.1.1	0x9359	Standard query (0)	cauewwukyywyqiei.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:50.686043024 CET	192.168.2.5	1.1.1.1	0x6c58	Standard query (0)	goeykqccmemkswom.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:50.824762106 CET	192.168.2.5	1.1.1.1	0xffef	Standard query (0)	aksuakswwkiimamq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:50.963859081 CET	192.168.2.5	1.1.1.1	0xe527	Standard query (0)	isaeicumkcuwqmqq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:51.102807045 CET	192.168.2.5	1.1.1.1	0xa217	Standard query (0)	qiswokuokugiooky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:51.243789911 CET	192.168.2.5	1.1.1.1	0x2c3e	Standard query (0)	qiswcssocuqsaqkq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:51.383631945 CET	192.168.2.5	1.1.1.1	0x5ce8	Standard query (0)	qcyksokwumicscaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:51.522345066 CET	192.168.2.5	1.1.1.1	0x1f32	Standard query (0)	esiaisyasoaoqwki.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:51.661093950 CET	192.168.2.5	1.1.1.1	0x5762	Standard query (0)	giqukkwwcwgqcisg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:52.189697981 CET	192.168.2.5	1.1.1.1	0x574d	Standard query (0)	ymqaaskiwomkucuy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:52.328589916 CET	192.168.2.5	1.1.1.1	0x73dc	Standard query (0)	akueuaicusaoieiy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:52.472753048 CET	192.168.2.5	1.1.1.1	0xd525	Standard query (0)	sauygqecsusickcu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:52.611408949 CET	192.168.2.5	1.1.1.1	0x5d83	Standard query (0)	kkwkgmcoawgaoiwg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:52.750231028 CET	192.168.2.5	1.1.1.1	0x9996	Standard query (0)	saumycuogqsqykes.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:52.889072895 CET	192.168.2.5	1.1.1.1	0x5f21	Standard query (0)	ukyokaigmmkumgoa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:53.028158903 CET	192.168.2.5	1.1.1.1	0x3ef6	Standard query (0)	eswweuycwwiiykwo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:53.183074951 CET	192.168.2.5	1.1.1.1	0x363b	Standard query (0)	uksgyqiqaaiaiesi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:53.321878910 CET	192.168.2.5	1.1.1.1	0xf59f	Standard query (0)	smckcsaioceiyasu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:53.460645914 CET	192.168.2.5	1.1.1.1	0xd074	Standard query (0)	esimsqgcwwwmyoqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:53.602530003 CET	192.168.2.5	1.1.1.1	0x79a9	Standard query (0)	maiyuocqqiqiiskw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:53.741360903 CET	192.168.2.5	1.1.1.1	0x6ddc	Standard query (0)	smaaowemwiwggocu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:53.880162001 CET	192.168.2.5	1.1.1.1	0xcd48	Standard query (0)	kwuuwgemogmuomwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:54.018630028 CET	192.168.2.5	1.1.1.1	0x243	Standard query (0)	ukicsmiwggcwksam.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:54.157366991 CET	192.168.2.5	1.1.1.1	0xd0ee	Standard query (0)	gwamoggwyegsseao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:54.296386003 CET	192.168.2.5	1.1.1.1	0x5585	Standard query (0)	immcqsiceooqyaay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:54.435033083 CET	192.168.2.5	1.1.1.1	0x9931	Standard query (0)	kkcqgowgkcoyokcu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:54.581059933 CET	192.168.2.5	1.1.1.1	0x9fa1	Standard query (0)	kecgikusmakuksma.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:54.720644951 CET	192.168.2.5	1.1.1.1	0x68f	Standard query (0)	ymuiggyusggsymoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:54.858989954 CET	192.168.2.5	1.1.1.1	0xb887	Standard query (0)	uecouukwkuceyuwg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:54.998315096 CET	192.168.2.5	1.1.1.1	0x8488	Standard query (0)	eyoaceoookqskqmy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:55.140130043 CET	192.168.2.5	1.1.1.1	0xa17f	Standard query (0)	awwomgcseeqwkkom.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:55.278979063 CET	192.168.2.5	1.1.1.1	0x5616	Standard query (0)	keykoekseemyiewq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:55.418224096 CET	192.168.2.5	1.1.1.1	0x4e95	Standard query (0)	ysiwwoeeaaskykaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:55.557329893 CET	192.168.2.5	1.1.1.1	0x6432	Standard query (0)	kwmcuwccqmuecgea.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:55.696639061 CET	192.168.2.5	1.1.1.1	0xdb3b	Standard query (0)	gwyooeiscmwguqms.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:55.835679054 CET	192.168.2.5	1.1.1.1	0xdd57	Standard query (0)	wuokiysmiucoucak.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:55.974509001 CET	192.168.2.5	1.1.1.1	0x105d	Standard query (0)	wuuiumemmigyyauq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:56.113497019 CET	192.168.2.5	1.1.1.1	0x14bd	Standard query (0)	acwomuuukiomgqkm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:56.251996994 CET	192.168.2.5	1.1.1.1	0xd91a	Standard query (0)	muwqwgaaymomgwmi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:56.391171932 CET	192.168.2.5	1.1.1.1	0x7576	Standard query (0)	omgcoecwsqiuqyug.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:56.529937983 CET	192.168.2.5	1.1.1.1	0x1c3	Standard query (0)	kqmsgskwgemyueya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:56.668224096 CET	192.168.2.5	1.1.1.1	0x9b5e	Standard query (0)	eyiyueewuaqmmwcm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:57.095629930 CET	192.168.2.5	1.1.1.1	0x4cf4	Standard query (0)	gwoyamckoqoaauoq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:57.234323978 CET	192.168.2.5	1.1.1.1	0xcf40	Standard query (0)	qwqsoyoqkymakowm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:57.372651100 CET	192.168.2.5	1.1.1.1	0xb058	Standard query (0)	gcmiymmqgwuquokm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:57.511702061 CET	192.168.2.5	1.1.1.1	0x3d36	Standard query (0)	ymseciekayuweoww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:57.650634050 CET	192.168.2.5	1.1.1.1	0x6351	Standard query (0)	oyocwswugeiqqyoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:57.792845964 CET	192.168.2.5	1.1.1.1	0xfe71	Standard query (0)	omgooecquoweeomo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:57.931843042 CET	192.168.2.5	1.1.1.1	0x1e4c	Standard query (0)	imgeoyougkmmeuec.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:58.070796013 CET	192.168.2.5	1.1.1.1	0x41a1	Standard query (0)	smoswyoekkccyuga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:58.209242105 CET	192.168.2.5	1.1.1.1	0x2593	Standard query (0)	suwkomiqcykeyako.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:58.348001957 CET	192.168.2.5	1.1.1.1	0x1e0a	Standard query (0)	smwsugycuuckemue.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:58.487848997 CET	192.168.2.5	1.1.1.1	0xdb62	Standard query (0)	qigcqiaomwieqwka.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:58.627254963 CET	192.168.2.5	1.1.1.1	0x8422	Standard query (0)	oekcyqqggaegsesm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:58.769382000 CET	192.168.2.5	1.1.1.1	0xf40c	Standard query (0)	qcoysaaooaiccqyu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:58.908894062 CET	192.168.2.5	1.1.1.1	0x1bc9	Standard query (0)	mismuqiygyeysaoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:59.047750950 CET	192.168.2.5	1.1.1.1	0xceb6	Standard query (0)	wockoyekyageakcg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:59.191066980 CET	192.168.2.5	1.1.1.1	0x507f	Standard query (0)	ososokqeakgguwsq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:59.331408978 CET	192.168.2.5	1.1.1.1	0xd985	Standard query (0)	wcgqccqcugomywua.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:59.469739914 CET	192.168.2.5	1.1.1.1	0x98a2	Standard query (0)	aqaqgemescmwsqks.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:59.609146118 CET	192.168.2.5	1.1.1.1	0x2037	Standard query (0)	aqiwocaywcswuwsq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:59.747138977 CET	192.168.2.5	1.1.1.1	0xebf5	Standard query (0)	aqgmgoqcoqqkguyk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:59.885786057 CET	192.168.2.5	1.1.1.1	0xb9cb	Standard query (0)	oywgqkusocouysua.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:00.025633097 CET	192.168.2.5	1.1.1.1	0x3b37	Standard query (0)	uyygagweoagcuqky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:00.164453983 CET	192.168.2.5	1.1.1.1	0x6b53	Standard query (0)	muiccguyaeaqwweg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:00.302447081 CET	192.168.2.5	1.1.1.1	0xe803	Standard query (0)	qiqueqokwqqgwwci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:00.441291094 CET	192.168.2.5	1.1.1.1	0xf300	Standard query (0)	uygmgoymcwcgkios.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:00.581013918 CET	192.168.2.5	1.1.1.1	0x7490	Standard query (0)	qiyggmguowygeooc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:00.719695091 CET	192.168.2.5	1.1.1.1	0xb0da	Standard query (0)	acacoiqgoimayqwm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:00.858774900 CET	192.168.2.5	1.1.1.1	0xd64a	Standard query (0)	smisyqewaummmwoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:00.997152090 CET	192.168.2.5	1.1.1.1	0xd634	Standard query (0)	mumuqocoisaucwmq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:01.135838032 CET	192.168.2.5	1.1.1.1	0xb48b	Standard query (0)	qqoawmqqwqcusmee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:01.275321960 CET	192.168.2.5	1.1.1.1	0xda3e	Standard query (0)	qcygacuamqqugcck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:01.414407015 CET	192.168.2.5	1.1.1.1	0x7d99	Standard query (0)	kkiigoymgkmoggoq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:01.557693005 CET	192.168.2.5	1.1.1.1	0xc860	Standard query (0)	qqmicqemgcgieoau.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:01.700849056 CET	192.168.2.5	1.1.1.1	0xb9e0	Standard query (0)	sagymwuwgeucsmac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:01.843935013 CET	192.168.2.5	1.1.1.1	0xe451	Standard query (0)	igmqooiwioymwkcm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:01.987719059 CET	192.168.2.5	1.1.1.1	0x79c5	Standard query (0)	osyqameakgkceeog.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:02.130983114 CET	192.168.2.5	1.1.1.1	0xe878	Standard query (0)	sgigamoeiwksoecq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:02.289923906 CET	192.168.2.5	1.1.1.1	0xe878	Standard query (0)	sgigamoeiwksoecq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:02.314923048 CET	192.168.2.5	1.1.1.1	0x824c	Standard query (0)	keckssemmeoqieqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:02.457201004 CET	192.168.2.5	1.1.1.1	0x8821	Standard query (0)	caysswwugsmkeksw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:02.595864058 CET	192.168.2.5	1.1.1.1	0xd24e	Standard query (0)	cgiamwsqgcmqgqse.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:02.733813047 CET	192.168.2.5	1.1.1.1	0xda03	Standard query (0)	uyeqwcuyimescesu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:02.872081041 CET	192.168.2.5	1.1.1.1	0x4c99	Standard query (0)	ekiwqiyewuiqoemo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:03.012486935 CET	192.168.2.5	1.1.1.1	0x330a	Standard query (0)	oeakuqueisysswcg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:03.156800985 CET	192.168.2.5	1.1.1.1	0x81a4	Standard query (0)	acemcwecgiqcukys.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:03.298000097 CET	192.168.2.5	1.1.1.1	0x4e05	Standard query (0)	qcwaiaiqiwcakawa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:03.438859940 CET	192.168.2.5	1.1.1.1	0xc8b9	Standard query (0)	esyiocqieemagwmo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:03.577876091 CET	192.168.2.5	1.1.1.1	0xbc5e	Standard query (0)	kqsakygykwusqams.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:03.719989061 CET	192.168.2.5	1.1.1.1	0xc403	Standard query (0)	ymygkkggyigeqcqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:03.861160994 CET	192.168.2.5	1.1.1.1	0x1746	Standard query (0)	qqqkagyoymmosuyo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:04.000639915 CET	192.168.2.5	1.1.1.1	0x543d	Standard query (0)	moiimkscmiswaesw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:04.139071941 CET	192.168.2.5	1.1.1.1	0x5c7	Standard query (0)	igkiociagqsacmwa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:04.280599117 CET	192.168.2.5	1.1.1.1	0xa0bb	Standard query (0)	ymugwyokyyccykmw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:04.420017004 CET	192.168.2.5	1.1.1.1	0xb79a	Standard query (0)	gieksqwccmmqkemm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:04.559005022 CET	192.168.2.5	1.1.1.1	0x9d15	Standard query (0)	iaueigwgocakgsku.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:04.698421955 CET	192.168.2.5	1.1.1.1	0x1e20	Standard query (0)	sgsasqgwayeckgoy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:04.840804100 CET	192.168.2.5	1.1.1.1	0xfc19	Standard query (0)	kwogawueykiiumao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:04.979675055 CET	192.168.2.5	1.1.1.1	0x2b3f	Standard query (0)	iagmkeayqmuowswy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:05.119014978 CET	192.168.2.5	1.1.1.1	0x8d46	Standard query (0)	yyyagyakeciucagk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:05.258517981 CET	192.168.2.5	1.1.1.1	0xfc8f	Standard query (0)	isukyiwyscosaaqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:05.397753954 CET	192.168.2.5	1.1.1.1	0x8fb	Standard query (0)	goicqsmskkygkkka.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:05.539488077 CET	192.168.2.5	1.1.1.1	0x636b	Standard query (0)	awacwkqgsoomimye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:05.681657076 CET	192.168.2.5	1.1.1.1	0x2407	Standard query (0)	iaawaweqwceogamg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:05.820391893 CET	192.168.2.5	1.1.1.1	0x997	Standard query (0)	kqueagsoikuyocca.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:05.959034920 CET	192.168.2.5	1.1.1.1	0x59	Standard query (0)	momoqikcaksewaua.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:06.099822998 CET	192.168.2.5	1.1.1.1	0x7da2	Standard query (0)	suagiqkqmkgysmiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:06.240070105 CET	192.168.2.5	1.1.1.1	0xc373	Standard query (0)	gcwequgwyimwymsa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:06.381625891 CET	192.168.2.5	1.1.1.1	0x4ae2	Standard query (0)	igywsgwooemqiuss.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:06.520554066 CET	192.168.2.5	1.1.1.1	0xcfc2	Standard query (0)	wikiagqsmeeaeegy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:06.663443089 CET	192.168.2.5	1.1.1.1	0xcfc2	Standard query (0)	wikiagqsmeeaeegy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:06.666052103 CET	192.168.2.5	1.1.1.1	0x6507	Standard query (0)	eeoeukoqgiwsumsu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:06.805629015 CET	192.168.2.5	1.1.1.1	0x33bf	Standard query (0)	ygooiessycewaocg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:06.944972038 CET	192.168.2.5	1.1.1.1	0x540a	Standard query (0)	qcqgssmagywqcgws.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:07.083825111 CET	192.168.2.5	1.1.1.1	0x8070	Standard query (0)	goiikukwyyauemqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:07.221976042 CET	192.168.2.5	1.1.1.1	0x621f	Standard query (0)	comuwmkimocayeeu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:07.360697031 CET	192.168.2.5	1.1.1.1	0x9fc3	Standard query (0)	isgasoomksiwqcmg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:07.502969980 CET	192.168.2.5	1.1.1.1	0xe570	Standard query (0)	qigismmgwsiseyuu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:07.641839027 CET	192.168.2.5	1.1.1.1	0x948e	Standard query (0)	wuqggcwmoscwykwg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:07.782195091 CET	192.168.2.5	1.1.1.1	0x157a	Standard query (0)	qceawaaswmsuekmu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:07.924320936 CET	192.168.2.5	1.1.1.1	0x344f	Standard query (0)	ygucsucmagwqsqcu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:08.064240932 CET	192.168.2.5	1.1.1.1	0x7d9d	Standard query (0)	giuccqyqokookyue.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:08.206902027 CET	192.168.2.5	1.1.1.1	0xbe43	Standard query (0)	gceesusqmuockkgw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:08.346493959 CET	192.168.2.5	1.1.1.1	0xa428	Standard query (0)	ygesoycecmkuwayg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:08.485599995 CET	192.168.2.5	1.1.1.1	0x110	Standard query (0)	sasqgsyksiccuuws.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:08.624893904 CET	192.168.2.5	1.1.1.1	0xbf35	Standard query (0)	qwggykgwkqoceiuo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:08.763962984 CET	192.168.2.5	1.1.1.1	0x4316	Standard query (0)	wiguisuayimaukgu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:08.902332067 CET	192.168.2.5	1.1.1.1	0xc8a5	Standard query (0)	qcwcgegyyieaoqca.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:09.040879011 CET	192.168.2.5	1.1.1.1	0xee47	Standard query (0)	gwcyyawigmwceaqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:09.179824114 CET	192.168.2.5	1.1.1.1	0x2360	Standard query (0)	mueuwcqsioowsmce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:09.320908070 CET	192.168.2.5	1.1.1.1	0x2360	Standard query (0)	mueuwcqsioowsmce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:09.321696043 CET	192.168.2.5	1.1.1.1	0xf1aa	Standard query (0)	qiewcykmuuacuoyk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:09.461467028 CET	192.168.2.5	1.1.1.1	0x88f3	Standard query (0)	coayaokeissieqcc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:09.602291107 CET	192.168.2.5	1.1.1.1	0x5c06	Standard query (0)	oeooiqokqsqcsaig.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:09.741786957 CET	192.168.2.5	1.1.1.1	0x1bca	Standard query (0)	masegmsiqgamiugm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:09.883147001 CET	192.168.2.5	1.1.1.1	0x366b	Standard query (0)	smwywssyyaciqkae.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.021267891 CET	192.168.2.5	1.1.1.1	0x983c	Standard query (0)	aweqoooqomueeiwi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.160598993 CET	192.168.2.5	1.1.1.1	0xc700	Standard query (0)	akasikewaomyiwqk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.299901962 CET	192.168.2.5	1.1.1.1	0x1576	Standard query (0)	oyyamqygcecqocmq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.449784040 CET	192.168.2.5	1.1.1.1	0x1576	Standard query (0)	oyyamqygcecqocmq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.465677977 CET	192.168.2.5	1.1.1.1	0xce1f	Standard query (0)	qwikoqqgiayyuakq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.626125097 CET	192.168.2.5	1.1.1.1	0x194f	Standard query (0)	miqcugomwgmygyoq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.764775991 CET	192.168.2.5	1.1.1.1	0x4aa0	Standard query (0)	wiccyamsgmuqoeoy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.913238049 CET	192.168.2.5	1.1.1.1	0x4aa0	Standard query (0)	wiccyamsgmuqoeoy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.919747114 CET	192.168.2.5	1.1.1.1	0x9d4b	Standard query (0)	ymeiqyyqqyaaygie.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:11.058446884 CET	192.168.2.5	1.1.1.1	0xe19b	Standard query (0)	wiomcwmascsigags.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:11.197474003 CET	192.168.2.5	1.1.1.1	0xf41c	Standard query (0)	awgyuqqswicwkqcs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:11.337598085 CET	192.168.2.5	1.1.1.1	0xff0b	Standard query (0)	iacisiamimiiqyeo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:11.476753950 CET	192.168.2.5	1.1.1.1	0x85f6	Standard query (0)	wogawoqysgiockwa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:11.615618944 CET	192.168.2.5	1.1.1.1	0x37f7	Standard query (0)	mayykkuyeuiggyws.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:11.756400108 CET	192.168.2.5	1.1.1.1	0x5d32	Standard query (0)	cosaygigqegeyewi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:11.895807981 CET	192.168.2.5	1.1.1.1	0xf3ef	Standard query (0)	ekqyosgcumkcecmo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:12.036417961 CET	192.168.2.5	1.1.1.1	0xb101	Standard query (0)	qimmkmaumumswocw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:12.176323891 CET	192.168.2.5	1.1.1.1	0x8565	Standard query (0)	acqaagqgmsmeouce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:12.315884113 CET	192.168.2.5	1.1.1.1	0x3d76	Standard query (0)	awasockiaymagmci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:12.454771042 CET	192.168.2.5	1.1.1.1	0xc0a8	Standard query (0)	akuyqkmomwqyiyow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:12.594022989 CET	192.168.2.5	1.1.1.1	0x8e5c	Standard query (0)	caceukeeygaaqaec.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:12.737237930 CET	192.168.2.5	1.1.1.1	0x4a7f	Standard query (0)	qwcaikouwwekssco.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:12.876924992 CET	192.168.2.5	1.1.1.1	0xe625	Standard query (0)	qqioykeogcwkowgq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:13.016459942 CET	192.168.2.5	1.1.1.1	0xe6ba	Standard query (0)	igeqissugeuswaus.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:13.200815916 CET	192.168.2.5	1.1.1.1	0x9b8b	Standard query (0)	osoawyeyassgycgy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:13.345007896 CET	192.168.2.5	1.1.1.1	0xc35a	Standard query (0)	cuaumuqcoeegomsq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:13.484239101 CET	192.168.2.5	1.1.1.1	0xd35b	Standard query (0)	oyogquqkmyqwwkuq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:13.623594999 CET	192.168.2.5	1.1.1.1	0x56eb	Standard query (0)	gwyougsgeaaoiumg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:13.763118982 CET	192.168.2.5	1.1.1.1	0x5738	Standard query (0)	ukeoemaaimqyuais.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:13.901947021 CET	192.168.2.5	1.1.1.1	0xddef	Standard query (0)	oewuwcsmaacckewa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:14.043200016 CET	192.168.2.5	1.1.1.1	0x35d5	Standard query (0)	esykokiigsgwcwsa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:14.184173107 CET	192.168.2.5	1.1.1.1	0x9a52	Standard query (0)	ekgqymkkqiwogqsy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:14.324841022 CET	192.168.2.5	1.1.1.1	0x3c79	Standard query (0)	wueossewygqoakoq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:14.466170073 CET	192.168.2.5	1.1.1.1	0x176f	Standard query (0)	isceiesauogasmoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:14.605895996 CET	192.168.2.5	1.1.1.1	0x30e7	Standard query (0)	giscmywoiaqmqcmw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:14.744637012 CET	192.168.2.5	1.1.1.1	0xa1ae	Standard query (0)	uyqweoyukcewugsu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:14.884057999 CET	192.168.2.5	1.1.1.1	0xa948	Standard query (0)	imuscegymggagewg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:15.023005962 CET	192.168.2.5	1.1.1.1	0xc677	Standard query (0)	wgesgakysuqaewik.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:15.162343025 CET	192.168.2.5	1.1.1.1	0x94b4	Standard query (0)	uwoyyqgiwowysqou.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:15.301932096 CET	192.168.2.5	1.1.1.1	0x5857	Standard query (0)	syaouwwyoaemeekm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:15.440713882 CET	192.168.2.5	1.1.1.1	0x97f1	Standard query (0)	aoscugususamokuy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:15.579694986 CET	192.168.2.5	1.1.1.1	0x253e	Standard query (0)	qucyaygweeasqeoy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:15.719707966 CET	192.168.2.5	1.1.1.1	0xe4ae	Standard query (0)	uiwwamyuymycooey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:15.860886097 CET	192.168.2.5	1.1.1.1	0xf1ff	Standard query (0)	iygukwyuqwiuoqmi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:15.999663115 CET	192.168.2.5	1.1.1.1	0x196d	Standard query (0)	koaeaguekwcaousw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:16.138709068 CET	192.168.2.5	1.1.1.1	0x835f	Standard query (0)	skssioqkemoiieaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:16.277661085 CET	192.168.2.5	1.1.1.1	0x6970	Standard query (0)	yewomygmueegmoqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:16.416522026 CET	192.168.2.5	1.1.1.1	0x4332	Standard query (0)	kuyoukwwacqkcoyo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:16.557682037 CET	192.168.2.5	1.1.1.1	0xd54c	Standard query (0)	gmcqgmkyguwkskyg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:16.696366072 CET	192.168.2.5	1.1.1.1	0x500f	Standard query (0)	mygiqcqokowwmgqq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:16.837816954 CET	192.168.2.5	1.1.1.1	0xa51e	Standard query (0)	cymogqmasaiiwmww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:16.977291107 CET	192.168.2.5	1.1.1.1	0xe376	Standard query (0)	iykumkamcykgicyi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:17.117039919 CET	192.168.2.5	1.1.1.1	0xad8f	Standard query (0)	cyemcqwkasuimkgs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:17.255867004 CET	192.168.2.5	1.1.1.1	0xc4c5	Standard query (0)	ieqeeiggkuqcomyo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:17.395371914 CET	192.168.2.5	1.1.1.1	0xf2f5	Standard query (0)	ssmkyomikukusksu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:17.534244061 CET	192.168.2.5	1.1.1.1	0x9691	Standard query (0)	kimakioiwmawksiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:17.672744036 CET	192.168.2.5	1.1.1.1	0xb571	Standard query (0)	qumssmeysccykkyo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:17.811667919 CET	192.168.2.5	1.1.1.1	0x9a81	Standard query (0)	ykuoaucocogcwoky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:17.950274944 CET	192.168.2.5	1.1.1.1	0xfbfe	Standard query (0)	semyssioekmosauo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:18.090501070 CET	192.168.2.5	1.1.1.1	0xc3b1	Standard query (0)	aiiqyyikowqaygwy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:18.229409933 CET	192.168.2.5	1.1.1.1	0x79a6	Standard query (0)	kouumoyqiuckkcau.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:18.367943048 CET	192.168.2.5	1.1.1.1	0x7b0c	Standard query (0)	qgwkkkyicoqmooqu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:18.507041931 CET	192.168.2.5	1.1.1.1	0xdf95	Standard query (0)	uwwcocucusmeguaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:18.645535946 CET	192.168.2.5	1.1.1.1	0x3f12	Standard query (0)	cekggiciueyeyoku.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:18.788271904 CET	192.168.2.5	1.1.1.1	0x4f1f	Standard query (0)	iqqeoamqwiuiyuua.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:18.931674004 CET	192.168.2.5	1.1.1.1	0x124f	Standard query (0)	uokqmokseqqakiui.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:19.069577932 CET	192.168.2.5	1.1.1.1	0x32b7	Standard query (0)	cyqqgacqkowwkqqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:19.209032059 CET	192.168.2.5	1.1.1.1	0x1968	Standard query (0)	cmqqeimyycgqwsgg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:19.348108053 CET	192.168.2.5	1.1.1.1	0x7e6b	Standard query (0)	wmgeoqqiwqcmimwu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:19.487739086 CET	192.168.2.5	1.1.1.1	0x45e2	Standard query (0)	quyckaioggawuois.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:19.627726078 CET	192.168.2.5	1.1.1.1	0x72ea	Standard query (0)	eqciawooemoueyqu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:19.766634941 CET	192.168.2.5	1.1.1.1	0x92d	Standard query (0)	oqoaumkywacmuwwm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:19.908283949 CET	192.168.2.5	1.1.1.1	0x100	Standard query (0)	ewueyekksqksycww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:20.048526049 CET	192.168.2.5	1.1.1.1	0x3dc9	Standard query (0)	csmasucykosuwouy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:20.188646078 CET	192.168.2.5	1.1.1.1	0x9a	Standard query (0)	seeogeqwsqmsoaqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:20.328140974 CET	192.168.2.5	1.1.1.1	0x8d88	Standard query (0)	gusmkkaiomeeqaiy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:20.465981007 CET	192.168.2.5	1.1.1.1	0x272	Standard query (0)	msyecoiqeyqeiquy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:20.604911089 CET	192.168.2.5	1.1.1.1	0xfc49	Standard query (0)	skawoueawceoywsy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:20.743544102 CET	192.168.2.5	1.1.1.1	0xfc53	Standard query (0)	iyuaqococuqcsgii.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:20.882898092 CET	192.168.2.5	1.1.1.1	0xb9cb	Standard query (0)	kuyaasckcgacyesi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:21.021531105 CET	192.168.2.5	1.1.1.1	0xdd63	Standard query (0)	aaeqiiecqqumcgky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:21.159324884 CET	192.168.2.5	1.1.1.1	0x7197	Standard query (0)	aawiysageawcoyok.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:21.302438974 CET	192.168.2.5	1.1.1.1	0xc373	Standard query (0)	yqysoaosqewciiww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:21.441243887 CET	192.168.2.5	1.1.1.1	0xbb52	Standard query (0)	yessywkwcwmyewqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:21.584605932 CET	192.168.2.5	1.1.1.1	0xe744	Standard query (0)	aueiqscgeicewaoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:21.724164009 CET	192.168.2.5	1.1.1.1	0x275b	Standard query (0)	uccsgcekiwcyucou.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:21.863915920 CET	192.168.2.5	1.1.1.1	0x7b1f	Standard query (0)	aiumyocycyyikiwc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.006407976 CET	192.168.2.5	1.1.1.1	0x6542	Standard query (0)	aoqayemwgmsyuimi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.148237944 CET	192.168.2.5	1.1.1.1	0x6542	Standard query (0)	aoqayemwgmsyuimi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.150028944 CET	192.168.2.5	1.1.1.1	0x6770	Standard query (0)	mmiowgeswucumqae.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.287874937 CET	192.168.2.5	1.1.1.1	0x6f71	Standard query (0)	mmiugosumuqmuqoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.429929018 CET	192.168.2.5	1.1.1.1	0x5065	Standard query (0)	ecqisawmymscauow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.573565006 CET	192.168.2.5	1.1.1.1	0x708	Standard query (0)	iyoqqeicqoquiqka.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.713392019 CET	192.168.2.5	1.1.1.1	0xc7aa	Standard query (0)	ecoqwiswmwqokmay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.859004974 CET	192.168.2.5	1.1.1.1	0x6f28	Standard query (0)	ceckmwoyqkwgeoqg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.999475956 CET	192.168.2.5	1.1.1.1	0x31d9	Standard query (0)	kcoiygiwuyqyaoku.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:23.141568899 CET	192.168.2.5	1.1.1.1	0x46dc	Standard query (0)	aaeyckqsgmiqsgew.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:23.280921936 CET	192.168.2.5	1.1.1.1	0x9963	Standard query (0)	qgaiosyouwwkgsmm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:23.422878981 CET	192.168.2.5	1.1.1.1	0x6b0f	Standard query (0)	ocqseueommkkqcgs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:23.565895081 CET	192.168.2.5	1.1.1.1	0xc0e3	Standard query (0)	owmesaosmycoeceq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:23.708543062 CET	192.168.2.5	1.1.1.1	0xf5d6	Standard query (0)	qokauaicweuwscac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:23.847582102 CET	192.168.2.5	1.1.1.1	0x6798	Standard query (0)	sewmmwqeyauowwwo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:23.987201929 CET	192.168.2.5	1.1.1.1	0x687d	Standard query (0)	mmgowiccqoeomagq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:24.157788992 CET	192.168.2.5	1.1.1.1	0x687d	Standard query (0)	mmgowiccqoeomagq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:24.191559076 CET	192.168.2.5	1.1.1.1	0x7300	Standard query (0)	kcwiywyygywkkysk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:24.329791069 CET	192.168.2.5	1.1.1.1	0x6a50	Standard query (0)	syiysgiqgqggqkoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:24.469424009 CET	192.168.2.5	1.1.1.1	0x2de8	Standard query (0)	ykuasckuceswseig.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:24.608336926 CET	192.168.2.5	1.1.1.1	0xb3a7	Standard query (0)	quugmiumsieaiyys.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:24.746892929 CET	192.168.2.5	1.1.1.1	0xaf0e	Standard query (0)	ikqywgcqaggogqsa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:24.885972977 CET	192.168.2.5	1.1.1.1	0xd95e	Standard query (0)	eqyamamqwsseyoig.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:25.024482965 CET	192.168.2.5	1.1.1.1	0x7a16	Standard query (0)	seqkawokggwucsui.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:25.181931973 CET	192.168.2.5	1.1.1.1	0x527a	Standard query (0)	gmqeqkcqackwkgao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:25.321613073 CET	192.168.2.5	1.1.1.1	0xbecc	Standard query (0)	guowewgekuoqacyy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:25.460850954 CET	192.168.2.5	1.1.1.1	0x5449	Standard query (0)	aaokyscqeecowaci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:25.599808931 CET	192.168.2.5	1.1.1.1	0xeada	Standard query (0)	ywywwwgwekicgico.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:25.738425970 CET	192.168.2.5	1.1.1.1	0xf81f	Standard query (0)	wsisaoaauqwmuomg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:25.879581928 CET	192.168.2.5	1.1.1.1	0x8bad	Standard query (0)	koouumcuucaeakye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:26.020854950 CET	192.168.2.5	1.1.1.1	0xbf18	Standard query (0)	okccisioeycusekg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:26.159420013 CET	192.168.2.5	1.1.1.1	0x47a6	Standard query (0)	cymymsciyaiacwgw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:26.298675060 CET	192.168.2.5	1.1.1.1	0xb1a2	Standard query (0)	aoyeoimcuuqakckw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:26.440422058 CET	192.168.2.5	1.1.1.1	0x5684	Standard query (0)	qoaweokuqggaymks.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:26.610122919 CET	192.168.2.5	1.1.1.1	0x5684	Standard query (0)	qoaweokuqggaymks.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:26.611242056 CET	192.168.2.5	1.1.1.1	0x8b5a	Standard query (0)	ewuyacewswkoueqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:26.753454924 CET	192.168.2.5	1.1.1.1	0x9f5d	Standard query (0)	kiuymkmaomciimcc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:26.892184019 CET	192.168.2.5	1.1.1.1	0x1c96	Standard query (0)	oqaiyaoqwyeswaiy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:27.029982090 CET	192.168.2.5	1.1.1.1	0x82fe	Standard query (0)	koyokggaqsagggym.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:27.169068098 CET	192.168.2.5	1.1.1.1	0xe148	Standard query (0)	cmsuagygagqceocm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:27.306619883 CET	192.168.2.5	1.1.1.1	0xe3a	Standard query (0)	uisgoqaoksgqsqyg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:27.445621014 CET	192.168.2.5	1.1.1.1	0x8f25	Standard query (0)	ocgcqsagaakgkcma.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:27.584223986 CET	192.168.2.5	1.1.1.1	0x3575	Standard query (0)	okgigkmiieweagia.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:27.723325014 CET	192.168.2.5	1.1.1.1	0x4ea3	Standard query (0)	skiwkmaaeeiqqgee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:27.862503052 CET	192.168.2.5	1.1.1.1	0x6144	Standard query (0)	aagokgyaswscyaeu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:28.001100063 CET	192.168.2.5	1.1.1.1	0x18a2	Standard query (0)	gmciuwiycsqycggy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:28.138933897 CET	192.168.2.5	1.1.1.1	0x2f22	Standard query (0)	ggeymcaisciikucq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:28.277872086 CET	192.168.2.5	1.1.1.1	0xa588	Standard query (0)	uwskygguegqkasme.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:28.420283079 CET	192.168.2.5	1.1.1.1	0x7b40	Standard query (0)	cyumiiokkswcoeag.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:28.560188055 CET	192.168.2.5	1.1.1.1	0x82dd	Standard query (0)	oqisqmesaeoegmyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:28.700937986 CET	192.168.2.5	1.1.1.1	0x3683	Standard query (0)	wagasowawsoyycom.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:28.839814901 CET	192.168.2.5	1.1.1.1	0x9b7b	Standard query (0)	gaguweiwsgouugqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:28.978329897 CET	192.168.2.5	1.1.1.1	0x7ff1	Standard query (0)	syyyweaywowycsia.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:29.118935108 CET	192.168.2.5	1.1.1.1	0xc33d	Standard query (0)	mmoycwqiuykiusuy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:29.257531881 CET	192.168.2.5	1.1.1.1	0xbe98	Standard query (0)	ikoycakqiuuascco.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:29.396913052 CET	192.168.2.5	1.1.1.1	0x7509	Standard query (0)	cmuqekokuyuqgige.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:29.535770893 CET	192.168.2.5	1.1.1.1	0xbcb1	Standard query (0)	cywoimwmsoamqoem.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:29.675429106 CET	192.168.2.5	1.1.1.1	0x5431	Standard query (0)	skyiqyaeoykwcgiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:29.815076113 CET	192.168.2.5	1.1.1.1	0x94a7	Standard query (0)	ssiooaeoaocuyaow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:29.953524113 CET	192.168.2.5	1.1.1.1	0x9837	Standard query (0)	ywmgykycywqqewqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:30.092192888 CET	192.168.2.5	1.1.1.1	0xccb5	Standard query (0)	uosaescwmkiyscay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:30.231978893 CET	192.168.2.5	1.1.1.1	0xd488	Standard query (0)	eigywisgeoiskekg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:30.371344090 CET	192.168.2.5	1.1.1.1	0x978e	Standard query (0)	msqsoggkkoiokugk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:30.510519981 CET	192.168.2.5	1.1.1.1	0xd824	Standard query (0)	cmaaciimeememwao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:30.654990911 CET	192.168.2.5	1.1.1.1	0x8a55	Standard query (0)	uigkauqkumywguig.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:30.795698881 CET	192.168.2.5	1.1.1.1	0x856a	Standard query (0)	wggygeoisauouuoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:30.940761089 CET	192.168.2.5	1.1.1.1	0x343d	Standard query (0)	okoykokgycygucya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:31.084863901 CET	192.168.2.5	1.1.1.1	0xd7ec	Standard query (0)	ewaoowewmsomgaiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:31.224534035 CET	192.168.2.5	1.1.1.1	0x7c59	Standard query (0)	ieiegkokewkqmkwe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:31.363081932 CET	192.168.2.5	1.1.1.1	0x41e	Standard query (0)	gakesieaaickekuo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:31.505703926 CET	192.168.2.5	1.1.1.1	0x326f	Standard query (0)	ecasigiwguqgguyw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:31.645032883 CET	192.168.2.5	1.1.1.1	0x629c	Standard query (0)	okwswuciummewsui.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:31.783687115 CET	192.168.2.5	1.1.1.1	0xba66	Standard query (0)	ggaqiymaekkywusy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:31.923655033 CET	192.168.2.5	1.1.1.1	0x507a	Standard query (0)	ocicimqkgucacyim.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.070183992 CET	192.168.2.5	1.1.1.1	0x507a	Standard query (0)	ocicimqkgucacyim.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.072112083 CET	192.168.2.5	1.1.1.1	0x7323	Standard query (0)	qoyisgoayskswigs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.226558924 CET	192.168.2.5	1.1.1.1	0x7323	Standard query (0)	qoyisgoayskswigs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.297838926 CET	192.168.2.5	1.1.1.1	0x34f2	Standard query (0)	wsywmuwgsogemomw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.445446014 CET	192.168.2.5	1.1.1.1	0x34f2	Standard query (0)	wsywmuwgsogemomw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.539773941 CET	192.168.2.5	1.1.1.1	0x27bd	Standard query (0)	skaeggkkcmoqoywy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.681624889 CET	192.168.2.5	1.1.1.1	0xa18b	Standard query (0)	uowicsywgqmgagyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.826937914 CET	192.168.2.5	1.1.1.1	0x491a	Standard query (0)	yqyqgowkwqiggewq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.966753960 CET	192.168.2.5	1.1.1.1	0x454d	Standard query (0)	aikmggymywuooyqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:33.108784914 CET	192.168.2.5	1.1.1.1	0xd647	Standard query (0)	semgkyogsqqwgsmy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:33.247934103 CET	192.168.2.5	1.1.1.1	0x804a	Standard query (0)	ucmwywoqciswaguc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:33.589241028 CET	192.168.2.5	1.1.1.1	0x2910	Standard query (0)	qowoagcmkkgqcswk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:33.728661060 CET	192.168.2.5	1.1.1.1	0x22d8	Standard query (0)	mmgusimiaqiweyas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:33.871660948 CET	192.168.2.5	1.1.1.1	0x487	Standard query (0)	wgssaogcsscmkswu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:34.011143923 CET	192.168.2.5	1.1.1.1	0x62f3	Standard query (0)	aoeewogkicikusoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:34.151215076 CET	192.168.2.5	1.1.1.1	0x7453	Standard query (0)	ikggquqsigykqamc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:34.289997101 CET	192.168.2.5	1.1.1.1	0x8603	Standard query (0)	waaqccyeaeywuoqu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:34.430453062 CET	192.168.2.5	1.1.1.1	0x7ba7	Standard query (0)	ecgiqiiieksaooyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:34.569513083 CET	192.168.2.5	1.1.1.1	0x45a1	Standard query (0)	iqcogqmwegaqewuu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:34.708174944 CET	192.168.2.5	1.1.1.1	0x6a51	Standard query (0)	aiusammkykucyyso.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:34.847524881 CET	192.168.2.5	1.1.1.1	0xad9e	Standard query (0)	qgkswogkcsaeegki.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:34.987097979 CET	192.168.2.5	1.1.1.1	0x364a	Standard query (0)	ywcwqgmikmycwoeu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:35.127562046 CET	192.168.2.5	1.1.1.1	0x6b2e	Standard query (0)	eiqogaaggeswoges.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:35.266423941 CET	192.168.2.5	1.1.1.1	0xde05	Standard query (0)	sekqikccsokicgye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:35.405577898 CET	192.168.2.5	1.1.1.1	0x65b9	Standard query (0)	ssqggwwkkaayqkgk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:35.544039011 CET	192.168.2.5	1.1.1.1	0x978b	Standard query (0)	seiiycgosccmaykm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:35.683239937 CET	192.168.2.5	1.1.1.1	0x9c46	Standard query (0)	aosagqwwquakwceq.xyz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 12, 2024 12:28:58.764193058 CET	1.1.1.1	192.168.2.5	0x165a	No error (0)	bingadsedgeextension-prod-europe.azurewebsites.net	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:28:58.771393061 CET	1.1.1.1	192.168.2.5	0xe70	No error (0)	bingadsedgeextension-prod-europe.azurewebsites.net	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:28:58.771393061 CET	1.1.1.1	192.168.2.5	0xe70	No error (0)	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		94.245.104.56	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:28:58.882049084 CET	1.1.1.1	192.168.2.5	0xc834	No error (0)	www.docusign.com	ds-www.docusign.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:28:58.882910967 CET	1.1.1.1	192.168.2.5	0xbf80	No error (0)	www.docusign.com	ds-www.docusign.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:28:58.882910967 CET	1.1.1.1	192.168.2.5	0xbf80	No error (0)	docusign-dxe.netlifyglobalcdn.com		3.33.186.135	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:28:58.882910967 CET	1.1.1.1	192.168.2.5	0xbf80	No error (0)	docusign-dxe.netlifyglobalcdn.com		15.197.167.90	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:00.812247038 CET	1.1.1.1	192.168.2.5	0x7b55	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:29:00.812309027 CET	1.1.1.1	192.168.2.5	0x993b	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:29:01.393656015 CET	1.1.1.1	192.168.2.5	0x7989	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:29:01.393656015 CET	1.1.1.1	192.168.2.5	0x7989	No error (0)	googlehosted.l.googleusercontent.com		172.217.19.193	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:01.405113935 CET	1.1.1.1	192.168.2.5	0x1120	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:29:02.977745056 CET	1.1.1.1	192.168.2.5	0x27b1	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:02.977745056 CET	1.1.1.1	192.168.2.5	0x27b1	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:02.977787971 CET	1.1.1.1	192.168.2.5	0x224a	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Dec 12, 2024 12:29:02.979099989 CET	1.1.1.1	192.168.2.5	0xfa7b	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Dec 12, 2024 12:29:02.979254961 CET	1.1.1.1	192.168.2.5	0x4916	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:02.979254961 CET	1.1.1.1	192.168.2.5	0x4916	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:02.985493898 CET	1.1.1.1	192.168.2.5	0xaeb	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:02.985493898 CET	1.1.1.1	192.168.2.5	0xaeb	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:02.990012884 CET	1.1.1.1	192.168.2.5	0xccea	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Dec 12, 2024 12:29:06.352473021 CET	1.1.1.1	192.168.2.5	0x5b5d	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:29:06.352473021 CET	1.1.1.1	192.168.2.5	0x5b5d	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:08.988977909 CET	1.1.1.1	192.168.2.5	0x4a22	Name error (3)	eyoyiqskiciwwoyw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:09.132127047 CET	1.1.1.1	192.168.2.5	0xe626	Name error (3)	ueaokkmeuioagwuc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:09.272047997 CET	1.1.1.1	192.168.2.5	0xa1af	Name error (3)	wiaiwegmqcmwcouw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:09.411727905 CET	1.1.1.1	192.168.2.5	0xd58a	Name error (3)	muuagqkickggsewc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:09.550721884 CET	1.1.1.1	192.168.2.5	0xca48	Name error (3)	uyicacsgusyikwmy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:09.760886908 CET	1.1.1.1	192.168.2.5	0xe595	Name error (3)	qcwcksiayqqmwssm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:09.925734043 CET	1.1.1.1	192.168.2.5	0x3d7c	Name error (3)	ekacwgokqcscqysi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:10.073474884 CET	1.1.1.1	192.168.2.5	0x4f40	Name error (3)	esuyiyesukcuoico.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:10.352440119 CET	1.1.1.1	192.168.2.5	0xa1ef	Name error (3)	yyacmosgygqayqys.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:10.491676092 CET	1.1.1.1	192.168.2.5	0x931c	Name error (3)	cgeewuguwiikcwug.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:10.634807110 CET	1.1.1.1	192.168.2.5	0x239b	Name error (3)	qckwwsmukogkeuge.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:10.775194883 CET	1.1.1.1	192.168.2.5	0x568a	Name error (3)	keoqiqigggqkcykq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:10.914021969 CET	1.1.1.1	192.168.2.5	0xe1fd	Name error (3)	kqsamcsauqiagmma.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:11.052784920 CET	1.1.1.1	192.168.2.5	0x8e14	Name error (3)	mocikyoeikocwkuc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:11.191936016 CET	1.1.1.1	192.168.2.5	0x342b	Name error (3)	uymiagmwmqmimewm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:11.437700987 CET	1.1.1.1	192.168.2.5	0x840	Name error (3)	gcikuiqswcgsscog.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:11.576030016 CET	1.1.1.1	192.168.2.5	0xebc4	Name error (3)	qwmaokcmiwuqqyes.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:11.715631008 CET	1.1.1.1	192.168.2.5	0x3f98	Name error (3)	igaiseoqksuoukqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:11.854836941 CET	1.1.1.1	192.168.2.5	0xa2a9	Name error (3)	kqukwaogqoucsaas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:11.993952036 CET	1.1.1.1	192.168.2.5	0xbaa	Name error (3)	miacggmycyqikoyq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:12.134929895 CET	1.1.1.1	192.168.2.5	0xe0d5	Name error (3)	woceumwmwioocusa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:12.272850037 CET	1.1.1.1	192.168.2.5	0x5702	Name error (3)	acgcaiyykiigugms.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:12.411304951 CET	1.1.1.1	192.168.2.5	0xae11	Name error (3)	cogsyycsuwoysugi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:12.551136971 CET	1.1.1.1	192.168.2.5	0xc543	Name error (3)	oekyamueeiiousia.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:12.689971924 CET	1.1.1.1	192.168.2.5	0x561	Name error (3)	wukaqiusicksuguo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:12.832225084 CET	1.1.1.1	192.168.2.5	0x614c	Name error (3)	yyusosuyycoeikgo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:12.973644018 CET	1.1.1.1	192.168.2.5	0x8eb0	Name error (3)	kqoceoymymoicqky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:13.112350941 CET	1.1.1.1	192.168.2.5	0x8c5a	Name error (3)	uykkwkqqemamguwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:13.261470079 CET	1.1.1.1	192.168.2.5	0x8f22	Name error (3)	oyekqyccewougasu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:13.400738001 CET	1.1.1.1	192.168.2.5	0x4e19	Name error (3)	ymsaymyugccysmow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:13.540797949 CET	1.1.1.1	192.168.2.5	0x5294	Name error (3)	omuquowgiusiesgk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:13.680080891 CET	1.1.1.1	192.168.2.5	0x4949	Name error (3)	wiywykakusaygisc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:13.820035934 CET	1.1.1.1	192.168.2.5	0x78fb	Name error (3)	aqmqywkwsmmayyoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:13.961394072 CET	1.1.1.1	192.168.2.5	0x3518	Name error (3)	cuccygameukkeumw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:14.100315094 CET	1.1.1.1	192.168.2.5	0xd0f9	Name error (3)	ukekykoqskumoikg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:14.240128994 CET	1.1.1.1	192.168.2.5	0x53bd	Name error (3)	uyqcacmsiquuwggq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:14.379684925 CET	1.1.1.1	192.168.2.5	0xfa3f	Name error (3)	ysoqqwckkqssyigm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:14.519682884 CET	1.1.1.1	192.168.2.5	0xa659	Name error (3)	yyemsyoimicqmais.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:14.658616066 CET	1.1.1.1	192.168.2.5	0x17e1	Name error (3)	miigookwguakmkeu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:14.797923088 CET	1.1.1.1	192.168.2.5	0x84fe	Name error (3)	qiuswcgwaqgemwcg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:14.940057993 CET	1.1.1.1	192.168.2.5	0xebec	Name error (3)	wuusiiukmwcmimyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:15.078689098 CET	1.1.1.1	192.168.2.5	0x7763	Name error (3)	uqyukkamycuaimsu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:15.218137026 CET	1.1.1.1	192.168.2.5	0xa2f5	Name error (3)	woeamasicuiqyckq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:15.357388020 CET	1.1.1.1	192.168.2.5	0x6e88	Name error (3)	akaueuwoocwkkoya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:15.496177912 CET	1.1.1.1	192.168.2.5	0x8ff5	Name error (3)	qciqgoeogwwmwkcw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:15.635015011 CET	1.1.1.1	192.168.2.5	0xdc93	Name error (3)	ucwesqiquqggymqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:15.773996115 CET	1.1.1.1	192.168.2.5	0x4817	Name error (3)	mgseamqmgkqcuewy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:15.912333012 CET	1.1.1.1	192.168.2.5	0x27e4	Name error (3)	gaoweoyqcuuykwgu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:16.051625967 CET	1.1.1.1	192.168.2.5	0x81a1	Name error (3)	oqegmuqkgyaywwmc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:16.190789938 CET	1.1.1.1	192.168.2.5	0x4542	Name error (3)	qusmiuqmmgqsgeci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:16.330022097 CET	1.1.1.1	192.168.2.5	0x26cf	Name error (3)	yqcakkmwigkaumii.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:16.468633890 CET	1.1.1.1	192.168.2.5	0xe4f6	Name error (3)	qokykyyigsyqggqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:16.608026028 CET	1.1.1.1	192.168.2.5	0x745b	Name error (3)	cyyyokugycioysok.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:16.748172998 CET	1.1.1.1	192.168.2.5	0x5dff	Name error (3)	iqcaysimoeeqamky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:16.890407085 CET	1.1.1.1	192.168.2.5	0x1c64	Name error (3)	yekiwquqaacesqqq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:17.029683113 CET	1.1.1.1	192.168.2.5	0x7c19	Name error (3)	gmooqswyuuqaiomi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:17.168037891 CET	1.1.1.1	192.168.2.5	0xe6b9	Name error (3)	kuiomoiwauwckqeq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:17.979998112 CET	1.1.1.1	192.168.2.5	0x5e63	Name error (3)	ceucuuwiwwuiweaq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:18.121572971 CET	1.1.1.1	192.168.2.5	0xfbc4	Name error (3)	cycscsqyqkeaykgc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:18.260931969 CET	1.1.1.1	192.168.2.5	0xcaee	Name error (3)	ssagiiaauyewiswa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:18.399589062 CET	1.1.1.1	192.168.2.5	0x3126	Name error (3)	ggwsuoyyioagegkw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:18.538247108 CET	1.1.1.1	192.168.2.5	0x71f4	Name error (3)	ieikmuieoqqmugwu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:18.678014040 CET	1.1.1.1	192.168.2.5	0xcab9	Name error (3)	kcqkucqkogqiuukw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:18.818845034 CET	1.1.1.1	192.168.2.5	0x47c4	Name error (3)	oqouwceoowyiwgag.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:18.958498955 CET	1.1.1.1	192.168.2.5	0x6341	Name error (3)	gakowseyscmeqkya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:19.099376917 CET	1.1.1.1	192.168.2.5	0xdff3	Name error (3)	quisoakcuqsygyyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:19.238285065 CET	1.1.1.1	192.168.2.5	0x4f23	Name error (3)	auuisqaykqgeesae.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:19.477413893 CET	1.1.1.1	192.168.2.5	0xf662	Name error (3)	iyawyckqggkwsyoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:19.720482111 CET	1.1.1.1	192.168.2.5	0xf5c3	Name error (3)	ecmyomcaicqysoqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:19.863715887 CET	1.1.1.1	192.168.2.5	0xe4e6	Name error (3)	iqcqqquiwomgsmma.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:20.003603935 CET	1.1.1.1	192.168.2.5	0x7f95	Name error (3)	ssegwgieumyoasym.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:20.142134905 CET	1.1.1.1	192.168.2.5	0xdfe5	Name error (3)	ceeomiecgymecgau.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:20.280616999 CET	1.1.1.1	192.168.2.5	0xe683	Name error (3)	myisokqwsmqeusuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:20.419898033 CET	1.1.1.1	192.168.2.5	0xf062	Name error (3)	ywkamsiogkycyosy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:20.559142113 CET	1.1.1.1	192.168.2.5	0x3905	Name error (3)	ggkyecqguqkkuoso.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:20.698112965 CET	1.1.1.1	192.168.2.5	0xec4c	Name error (3)	kcyoeiykekuqkkmg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:20.837692976 CET	1.1.1.1	192.168.2.5	0xe61f	Name error (3)	ikwyuqgsegcgcccg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:20.980381966 CET	1.1.1.1	192.168.2.5	0xd61	Name error (3)	wgswkwaesqqwkoaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:21.120206118 CET	1.1.1.1	192.168.2.5	0x487f	Name error (3)	eqkkkcuwkiqiecac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:21.259238005 CET	1.1.1.1	192.168.2.5	0xbc82	Name error (3)	kigcewceemkckeow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:21.397945881 CET	1.1.1.1	192.168.2.5	0xecb8	Name error (3)	ykaimcgigakggwec.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:21.537904978 CET	1.1.1.1	192.168.2.5	0xde5d	Name error (3)	uceaygkekiassamu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:21.678560019 CET	1.1.1.1	192.168.2.5	0xbcd2	Name error (3)	seioywksogeseqig.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:21.817688942 CET	1.1.1.1	192.168.2.5	0x33f9	Name error (3)	ssoqscyewimqiqme.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:21.957227945 CET	1.1.1.1	192.168.2.5	0x1a37	Name error (3)	kocgeaeoakgqewog.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:22.096749067 CET	1.1.1.1	192.168.2.5	0x8259	Name error (3)	kuiqsugkqeoscguo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:22.238601923 CET	1.1.1.1	192.168.2.5	0x7303	Name error (3)	kcsqwmkusesaccwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:22.379331112 CET	1.1.1.1	192.168.2.5	0x606a	Name error (3)	ywyawywiuyecuiuu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:22.518656969 CET	1.1.1.1	192.168.2.5	0xddf1	Name error (3)	uowowiqiyeiuwmcc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:22.658807993 CET	1.1.1.1	192.168.2.5	0xf292	Name error (3)	uokqeaieowiogsgc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:22.797489882 CET	1.1.1.1	192.168.2.5	0xd88b	Name error (3)	ikoqkscwsowwukmi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:22.936903954 CET	1.1.1.1	192.168.2.5	0x194	Name error (3)	iymukyseoieqccac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:23.076261044 CET	1.1.1.1	192.168.2.5	0xf57e	Name error (3)	qascmswkaisogoaq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:23.216298103 CET	1.1.1.1	192.168.2.5	0xcb9c	Name error (3)	gacgceaygaecuguy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:23.356652021 CET	1.1.1.1	192.168.2.5	0xf549	Name error (3)	eqyyguuwsyqaqgsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:23.497248888 CET	1.1.1.1	192.168.2.5	0x788c	Name error (3)	ewywcoeukaoaegci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:23.637212038 CET	1.1.1.1	192.168.2.5	0x9da8	Name error (3)	mmygsewuukqkiiok.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:23.780256987 CET	1.1.1.1	192.168.2.5	0xa4fb	Name error (3)	wgyimykogekgewoa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:23.918649912 CET	1.1.1.1	192.168.2.5	0x55b6	Name error (3)	uiguoqqagkiuagyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:24.058056116 CET	1.1.1.1	192.168.2.5	0x386c	Name error (3)	kcesagqugouwkqyg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:24.197745085 CET	1.1.1.1	192.168.2.5	0x9839	Name error (3)	yqeugeoquqsokgqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:24.336159945 CET	1.1.1.1	192.168.2.5	0x274c	Name error (3)	eigkgwkyuqssgamw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:24.484143019 CET	1.1.1.1	192.168.2.5	0x7e8f	Name error (3)	waqmyueimmyiuawq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:24.624185085 CET	1.1.1.1	192.168.2.5	0x24c3	Name error (3)	qgukewuuykmmkgeq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:24.762967110 CET	1.1.1.1	192.168.2.5	0x45d9	Name error (3)	gmwcscokucowyogs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:24.902024031 CET	1.1.1.1	192.168.2.5	0xc4a1	Name error (3)	ywegqamoegumacgi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:25.041155100 CET	1.1.1.1	192.168.2.5	0x2705	Name error (3)	yquocucuqoywwcsu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:25.181878090 CET	1.1.1.1	192.168.2.5	0x7def	Name error (3)	eqmeimmouegoasay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:25.320517063 CET	1.1.1.1	192.168.2.5	0x48e	Name error (3)	cykgmsqcgysgaioo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:25.458905935 CET	1.1.1.1	192.168.2.5	0x9b17	Name error (3)	oqoemaogyoikomiy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:25.598051071 CET	1.1.1.1	192.168.2.5	0xa1fd	Name error (3)	qoiiomimuoaqgeku.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:25.738400936 CET	1.1.1.1	192.168.2.5	0x4583	Name error (3)	wgymkeismmiemsqq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:25.876909018 CET	1.1.1.1	192.168.2.5	0x86b4	Name error (3)	ykocagogmeiwmymy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:26.017374992 CET	1.1.1.1	192.168.2.5	0x4d0d	Name error (3)	csoqiicgaaiyyoom.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:26.157058954 CET	1.1.1.1	192.168.2.5	0xbe15	Name error (3)	koioiiwouukqousy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:26.295650005 CET	1.1.1.1	192.168.2.5	0x4111	Name error (3)	okkyekwuommcicqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:26.434809923 CET	1.1.1.1	192.168.2.5	0x4943	Name error (3)	ecacmycegqoaquio.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:26.573108912 CET	1.1.1.1	192.168.2.5	0x61ec	Name error (3)	skgcsksqyekiymii.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:26.714162111 CET	1.1.1.1	192.168.2.5	0xb418	Name error (3)	kckcekceqgcyqcsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:26.862211943 CET	1.1.1.1	192.168.2.5	0xa58c	Name error (3)	uoaeyoycyycqkoci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:27.001240969 CET	1.1.1.1	192.168.2.5	0x54fa	Name error (3)	wsaekoiomeagsaes.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:27.551008940 CET	1.1.1.1	192.168.2.5	0xa5d8	Name error (3)	iqmeccigieosgmwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:27.689820051 CET	1.1.1.1	192.168.2.5	0xbd41	Name error (3)	ggeqowwmmmeekigg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:27.828521967 CET	1.1.1.1	192.168.2.5	0x8143	Name error (3)	sssawsmmkmuyqsaq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:27.967511892 CET	1.1.1.1	192.168.2.5	0x2c78	Name error (3)	ecmckkeyoskcigeu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:28.108077049 CET	1.1.1.1	192.168.2.5	0x8e7d	Name error (3)	quoqoooiamqkkosc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:28.250207901 CET	1.1.1.1	192.168.2.5	0x1f95	Name error (3)	waokmuyyeooamowm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:28.394118071 CET	1.1.1.1	192.168.2.5	0x3718	Name error (3)	ykomskascimimomo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:28.533051968 CET	1.1.1.1	192.168.2.5	0x3bd6	Name error (3)	mmisquwegymayaee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:28.671902895 CET	1.1.1.1	192.168.2.5	0xb610	Name error (3)	mmyukmsqamgicqai.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:28.810940027 CET	1.1.1.1	192.168.2.5	0xb5ae	Name error (3)	ikwyooieywakeqog.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:28.949232101 CET	1.1.1.1	192.168.2.5	0x8e4a	Name error (3)	mgwmkyyqckeewgce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:29.087992907 CET	1.1.1.1	192.168.2.5	0xc29b	Name error (3)	owoksuegymmgesys.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:29.227885008 CET	1.1.1.1	192.168.2.5	0xb1b5	Name error (3)	aamuskacaaiycguu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:29.367522955 CET	1.1.1.1	192.168.2.5	0x70a4	Name error (3)	yegskieoocgoamyi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:29.508958101 CET	1.1.1.1	192.168.2.5	0x270b	Name error (3)	aaiouwywwcwuuasm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:29.650501966 CET	1.1.1.1	192.168.2.5	0xd774	Name error (3)	kuoqgwooymgsqaum.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:29.789124012 CET	1.1.1.1	192.168.2.5	0xdd16	Name error (3)	myoyccuwcyaygceg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:29.928458929 CET	1.1.1.1	192.168.2.5	0x78c8	Name error (3)	ggqgwuaseamkyywa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:30.067257881 CET	1.1.1.1	192.168.2.5	0x11bd	Name error (3)	uwimwwicgcscuoku.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:30.205982924 CET	1.1.1.1	192.168.2.5	0x706c	Name error (3)	cyyukyomsoiqyyqa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:30.598356009 CET	1.1.1.1	192.168.2.5	0xfa97	Name error (3)	gaisoawuoicqsumy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:30.739511013 CET	1.1.1.1	192.168.2.5	0xe8e0	Name error (3)	qogsmcecyusiyaim.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:30.882549047 CET	1.1.1.1	192.168.2.5	0x82	Name error (3)	ykqocceawkwoagmc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:31.024775982 CET	1.1.1.1	192.168.2.5	0x6757	Name error (3)	aosywgkogcissggi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:31.164731979 CET	1.1.1.1	192.168.2.5	0x3940	Name error (3)	ieywwkeuouoqgqms.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:31.303491116 CET	1.1.1.1	192.168.2.5	0x87b4	Name error (3)	ecgkeyeueawgcuqo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:31.441549063 CET	1.1.1.1	192.168.2.5	0x539a	Name error (3)	guimuaoiecmouigq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:31.580754042 CET	1.1.1.1	192.168.2.5	0x3445	Name error (3)	ggkyuooyikmqoscw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:31.719705105 CET	1.1.1.1	192.168.2.5	0x8f54	Name error (3)	uoeeuiaewmogugeo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:31.859261990 CET	1.1.1.1	192.168.2.5	0x72d9	Name error (3)	okgeqaswygsgykme.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:31.998097897 CET	1.1.1.1	192.168.2.5	0x9f7c	Name error (3)	ywqiciegywcouoiy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:32.137742996 CET	1.1.1.1	192.168.2.5	0x82e5	Name error (3)	qgkgogieieoomkqq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:32.276881933 CET	1.1.1.1	192.168.2.5	0x4782	Name error (3)	qgkmsekougssaawq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:32.415676117 CET	1.1.1.1	192.168.2.5	0xe120	Name error (3)	ggmwwewskeiggosq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:32.554424047 CET	1.1.1.1	192.168.2.5	0xb91f	Name error (3)	eqgwaamacqweiwie.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:32.698945045 CET	1.1.1.1	192.168.2.5	0x6a0	Name error (3)	wmqcgwcegsomeqas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:32.837404013 CET	1.1.1.1	192.168.2.5	0x545c	Name error (3)	oqummowmqwcgsegm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:32.975883961 CET	1.1.1.1	192.168.2.5	0x6498	Name error (3)	qoowyoueaaaccgqs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:33.114883900 CET	1.1.1.1	192.168.2.5	0x7920	Name error (3)	csiykwakekqoqaym.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:33.253710985 CET	1.1.1.1	192.168.2.5	0x64ff	Name error (3)	mmymmauyiiksiugu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:33.392334938 CET	1.1.1.1	192.168.2.5	0xc759	Name error (3)	cseksqccmgaieyic.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:33.535212040 CET	1.1.1.1	192.168.2.5	0x8a4a	Name error (3)	cykgucwkesokooyw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:33.673813105 CET	1.1.1.1	192.168.2.5	0x28b3	Name error (3)	okoguckagygoqqgk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:33.812908888 CET	1.1.1.1	192.168.2.5	0xdd00	Name error (3)	cyswykkcmggyiqwo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:33.951822042 CET	1.1.1.1	192.168.2.5	0xa6d8	Name error (3)	gmmacaiigwcscggs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:34.094003916 CET	1.1.1.1	192.168.2.5	0x8e86	Name error (3)	yequgaccqouegcmw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:34.232707977 CET	1.1.1.1	192.168.2.5	0x7bd3	Name error (3)	sksiyqgummyycgmi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:34.371416092 CET	1.1.1.1	192.168.2.5	0x3809	Name error (3)	skekiggeimmceqcg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:34.510960102 CET	1.1.1.1	192.168.2.5	0xb15c	Name error (3)	eiqqequeskcqiqmw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:34.649923086 CET	1.1.1.1	192.168.2.5	0x5ca8	Name error (3)	ecsamoyaimquqwow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:34.788670063 CET	1.1.1.1	192.168.2.5	0xb4fb	Name error (3)	aiyksmkyqgyaemiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:34.932045937 CET	1.1.1.1	192.168.2.5	0x6fd	Name error (3)	owewoieiwasaueco.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:35.073430061 CET	1.1.1.1	192.168.2.5	0xd878	Name error (3)	aoymcmmeqqqgwwca.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:35.213577986 CET	1.1.1.1	192.168.2.5	0xb9b0	Name error (3)	iygsiugeeogoeiyi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:35.431901932 CET	1.1.1.1	192.168.2.5	0x2beb	Name error (3)	quuemeewaqaiiyqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:35.571073055 CET	1.1.1.1	192.168.2.5	0x63cc	Name error (3)	wggikwiqowiwqcqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:35.709923029 CET	1.1.1.1	192.168.2.5	0xe778	Name error (3)	ucuiiwcwwgimkyyi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:35.848630905 CET	1.1.1.1	192.168.2.5	0xa9f3	Name error (3)	koiugmaqgkawaiyw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:35.987896919 CET	1.1.1.1	192.168.2.5	0xbcd6	Name error (3)	waeqkmeeasauygum.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:36.126775026 CET	1.1.1.1	192.168.2.5	0x64ba	Name error (3)	ecimsaauyieykegi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:36.265598059 CET	1.1.1.1	192.168.2.5	0xa3d3	Name error (3)	ocsqocikkcggeaaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:36.405201912 CET	1.1.1.1	192.168.2.5	0x5153	Name error (3)	iyaqqeamygmakcgo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:36.544529915 CET	1.1.1.1	192.168.2.5	0xcfaa	Name error (3)	uowgcyqcgaqiumoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:36.683552027 CET	1.1.1.1	192.168.2.5	0x4b9d	Name error (3)	myymasomksgeawqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:36.832864046 CET	1.1.1.1	192.168.2.5	0xc7bf	Name error (3)	myaueqycgeikwagc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:37.058152914 CET	1.1.1.1	192.168.2.5	0xba44	Name error (3)	seoomaqwwimwueiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:37.196326017 CET	1.1.1.1	192.168.2.5	0xc7de	Name error (3)	mgeycqkiwggsymyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:37.414016008 CET	1.1.1.1	192.168.2.5	0x218d	Name error (3)	ikgkgaaqqsmomuim.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:37.552798986 CET	1.1.1.1	192.168.2.5	0x9b53	Name error (3)	ieuaeqceycqyqygk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:37.866750002 CET	1.1.1.1	192.168.2.5	0xa44	Name error (3)	waeqwwagawqkksya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:38.005172014 CET	1.1.1.1	192.168.2.5	0x93e2	Name error (3)	mmeuqmoaekswggoe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:38.144449949 CET	1.1.1.1	192.168.2.5	0x5ee1	Name error (3)	ucyoqcksaiiwgqae.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:38.282953978 CET	1.1.1.1	192.168.2.5	0xa42c	Name error (3)	aoosomigeaiewqom.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:38.423019886 CET	1.1.1.1	192.168.2.5	0x6a06	Name error (3)	cyqaqqcqamemsiog.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:38.562891006 CET	1.1.1.1	192.168.2.5	0x7132	Name error (3)	wacqigcacsemkyos.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:38.874416113 CET	1.1.1.1	192.168.2.5	0x9e45	Name error (3)	yqocoeikiyacyuck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:39.015578032 CET	1.1.1.1	192.168.2.5	0x9f90	Name error (3)	ywcuqkkmmqioiwqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:39.159216881 CET	1.1.1.1	192.168.2.5	0xce32	Name error (3)	waqcciyigkuoygqy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:39.298214912 CET	1.1.1.1	192.168.2.5	0x180d	Name error (3)	ceoqyeiycqkumwao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:39.437771082 CET	1.1.1.1	192.168.2.5	0x3b01	Name error (3)	aauquiiqeugcwswc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:39.581928968 CET	1.1.1.1	192.168.2.5	0xcfc	Name error (3)	uoeiymqawsqiyuck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:39.722714901 CET	1.1.1.1	192.168.2.5	0x18b	Name error (3)	yqceweqmaumwwywy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:39.948651075 CET	1.1.1.1	192.168.2.5	0xb6e5	Name error (3)	eqmycgagykgkqwsu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:40.087434053 CET	1.1.1.1	192.168.2.5	0x75e2	Name error (3)	seuuicaewuoaumes.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:40.225550890 CET	1.1.1.1	192.168.2.5	0xe673	Name error (3)	aomaeyokqgsuomii.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:40.364603996 CET	1.1.1.1	192.168.2.5	0xbe16	Name error (3)	waqucgoeeeeymeii.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:40.504173994 CET	1.1.1.1	192.168.2.5	0xbd1d	Name error (3)	oqacqgmiaaewmmey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:40.827111959 CET	1.1.1.1	192.168.2.5	0x410d	Name error (3)	ykeaoyaycoiamqey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:41.412823915 CET	1.1.1.1	192.168.2.5	0xe1a8	No error (0)	aikmouciiqgecoqi.xyz		166.1.160.237	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:41.558264017 CET	1.1.1.1	192.168.2.5	0xd76e	Name error (3)	koecgqggegimaeya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:41.697458982 CET	1.1.1.1	192.168.2.5	0x1ad0	Name error (3)	aawqwccomcemcysm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:41.836292982 CET	1.1.1.1	192.168.2.5	0x2b91	Name error (3)	kcyakwisycecaqgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:41.976988077 CET	1.1.1.1	192.168.2.5	0x23b5	Name error (3)	uogksceymossmmqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:42.116024971 CET	1.1.1.1	192.168.2.5	0xd749	Name error (3)	qgmyeeguweaukuke.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:42.254713058 CET	1.1.1.1	192.168.2.5	0x3235	Name error (3)	mywaqkeaawisisky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:42.393383980 CET	1.1.1.1	192.168.2.5	0x9f1e	Name error (3)	yqqsggacauiiugka.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:42.531840086 CET	1.1.1.1	192.168.2.5	0x6333	Name error (3)	equmqmqwuuuioawa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:42.670594931 CET	1.1.1.1	192.168.2.5	0xae5b	Name error (3)	wmoamsauiwauoosg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:42.814573050 CET	1.1.1.1	192.168.2.5	0xe2f	Name error (3)	oqsakkimkesccikc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:42.952277899 CET	1.1.1.1	192.168.2.5	0x8fc2	Name error (3)	mgiwaegaqyyaakwy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:43.090703011 CET	1.1.1.1	192.168.2.5	0x2161	Name error (3)	ucmioacycscyeouk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:43.229736090 CET	1.1.1.1	192.168.2.5	0x7afa	Name error (3)	qumaseqmggyaiauq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:43.373234034 CET	1.1.1.1	192.168.2.5	0x348d	Name error (3)	uccyyemqaiiksuwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:43.512316942 CET	1.1.1.1	192.168.2.5	0x7942	Name error (3)	sesyieaiesegeaow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:43.650980949 CET	1.1.1.1	192.168.2.5	0x1b9d	Name error (3)	kccmicaswqmswwak.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:43.790076971 CET	1.1.1.1	192.168.2.5	0xbc2d	Name error (3)	mssaogwocegysoow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:43.928913116 CET	1.1.1.1	192.168.2.5	0x3fe0	Name error (3)	wssaqmakumewmaes.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:44.070796967 CET	1.1.1.1	192.168.2.5	0x331a	Name error (3)	cmukociggiqcouio.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:44.209764957 CET	1.1.1.1	192.168.2.5	0x6aa9	Name error (3)	skyqsyyymyacyayc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:44.349019051 CET	1.1.1.1	192.168.2.5	0x99f2	Name error (3)	uoigsiqmemcscosu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:44.487466097 CET	1.1.1.1	192.168.2.5	0xdd3b	Name error (3)	kuywuskkgqsigqqs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:44.626640081 CET	1.1.1.1	192.168.2.5	0x5f1b	Name error (3)	auayomwkewcomwas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:44.766343117 CET	1.1.1.1	192.168.2.5	0x5063	Name error (3)	iyaikmkkowcqemsi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:44.904735088 CET	1.1.1.1	192.168.2.5	0x3805	Name error (3)	ggicikyqcaiyguee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:45.043382883 CET	1.1.1.1	192.168.2.5	0xccd8	Name error (3)	oqyaoykomyoygics.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:45.181875944 CET	1.1.1.1	192.168.2.5	0xc665	Name error (3)	eqakguiwiqacqiwg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:45.320281982 CET	1.1.1.1	192.168.2.5	0xf2f4	Name error (3)	wgcaouuqqqwucogy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:45.459003925 CET	1.1.1.1	192.168.2.5	0x577c	Name error (3)	ewacuagosgqmuocm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:45.803833008 CET	1.1.1.1	192.168.2.5	0xb4ad	Name error (3)	wgqyouayikuyuqmk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:45.942323923 CET	1.1.1.1	192.168.2.5	0x6692	Name error (3)	owaaygsacguucaye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:46.081414938 CET	1.1.1.1	192.168.2.5	0x5dc1	Name error (3)	uwgicagyykoommga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:46.219630003 CET	1.1.1.1	192.168.2.5	0xadc9	Name error (3)	uiggameqqycugsqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:46.360097885 CET	1.1.1.1	192.168.2.5	0xc45d	Name error (3)	goguooqkgysueime.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:46.498537064 CET	1.1.1.1	192.168.2.5	0x962f	Name error (3)	keosqeosukqcooco.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:46.638205051 CET	1.1.1.1	192.168.2.5	0xfa31	Name error (3)	maoeeogmuauywsyu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:46.776752949 CET	1.1.1.1	192.168.2.5	0x7fc9	Name error (3)	ismqaewykmoiguki.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:46.915751934 CET	1.1.1.1	192.168.2.5	0x7962	Name error (3)	wucwykasawokemaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:47.054193020 CET	1.1.1.1	192.168.2.5	0xc71c	Name error (3)	ukmcqucewskcqygg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:47.193150043 CET	1.1.1.1	192.168.2.5	0xc6f7	Name error (3)	qqqmeagkkosgcayo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:47.331727028 CET	1.1.1.1	192.168.2.5	0xa9b9	Name error (3)	ysawassgkwqygmmq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:47.470406055 CET	1.1.1.1	192.168.2.5	0x2164	Name error (3)	osaeyoiqoqawauga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:47.608644962 CET	1.1.1.1	192.168.2.5	0xfe7	Name error (3)	iagisciiyoemgwaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:47.747870922 CET	1.1.1.1	192.168.2.5	0xae6	Name error (3)	ymysimqoykwqeqiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:47.886893988 CET	1.1.1.1	192.168.2.5	0xccb5	Name error (3)	ymmcwogyimsuqmcc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:48.025806904 CET	1.1.1.1	192.168.2.5	0x308f	Name error (3)	osmoygyawqmmimkq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:48.169217110 CET	1.1.1.1	192.168.2.5	0xa85a	Name error (3)	immyecuqwkiyscys.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:48.307005882 CET	1.1.1.1	192.168.2.5	0x633b	Name error (3)	omsqkuiwcwoegooq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:48.445475101 CET	1.1.1.1	192.168.2.5	0x5ad0	Name error (3)	ukaiiiyqoooycyqm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:48.584518909 CET	1.1.1.1	192.168.2.5	0x3116	Name error (3)	isemauqkwwiumyky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:48.723136902 CET	1.1.1.1	192.168.2.5	0xf964	Name error (3)	keguuyioweymiaws.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:48.865621090 CET	1.1.1.1	192.168.2.5	0x9564	Name error (3)	kwaywmaequkqccai.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:49.006648064 CET	1.1.1.1	192.168.2.5	0x776f	Name error (3)	yyimcoiwgckeakcm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:49.145220041 CET	1.1.1.1	192.168.2.5	0xc86	Name error (3)	ekcwemuekgqsimae.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:49.283927917 CET	1.1.1.1	192.168.2.5	0x7a77	Name error (3)	imigkomgmqgmakqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:49.425759077 CET	1.1.1.1	192.168.2.5	0x8f0f	Name error (3)	omasqkwqyskcagwi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:49.565002918 CET	1.1.1.1	192.168.2.5	0x1889	Name error (3)	awyomscgweuqmgaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:49.706450939 CET	1.1.1.1	192.168.2.5	0x23c2	Name error (3)	eyoyssauceguqwmk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:49.847541094 CET	1.1.1.1	192.168.2.5	0xb719	Name error (3)	gwwcqeykmseicgaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:49.988956928 CET	1.1.1.1	192.168.2.5	0x1222	Name error (3)	qwywqgsmgaoiwsga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:50.127188921 CET	1.1.1.1	192.168.2.5	0x44cd	Name error (3)	ososwckwcqmmwqcy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:50.265682936 CET	1.1.1.1	192.168.2.5	0xe2be	Name error (3)	osaymwoggqqycmse.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:50.406547070 CET	1.1.1.1	192.168.2.5	0x86ff	Name error (3)	oyewqwkusieeoqey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:50.546499014 CET	1.1.1.1	192.168.2.5	0xbe9	Name error (3)	ommwaqgaemsmcqwc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:50.684762001 CET	1.1.1.1	192.168.2.5	0x9359	Name error (3)	cauewwukyywyqiei.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:50.823606968 CET	1.1.1.1	192.168.2.5	0x6c58	Name error (3)	goeykqccmemkswom.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:50.962652922 CET	1.1.1.1	192.168.2.5	0xffef	Name error (3)	aksuakswwkiimamq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:51.101711988 CET	1.1.1.1	192.168.2.5	0xe527	Name error (3)	isaeicumkcuwqmqq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:51.242679119 CET	1.1.1.1	192.168.2.5	0xa217	Name error (3)	qiswokuokugiooky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:51.382003069 CET	1.1.1.1	192.168.2.5	0x2c3e	Name error (3)	qiswcssocuqsaqkq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:51.521091938 CET	1.1.1.1	192.168.2.5	0x5ce8	Name error (3)	qcyksokwumicscaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:51.660063028 CET	1.1.1.1	192.168.2.5	0x1f32	Name error (3)	esiaisyasoaoqwki.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:52.188640118 CET	1.1.1.1	192.168.2.5	0x5762	Name error (3)	giqukkwwcwgqcisg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:52.327491045 CET	1.1.1.1	192.168.2.5	0x574d	Name error (3)	ymqaaskiwomkucuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:52.471756935 CET	1.1.1.1	192.168.2.5	0x73dc	Name error (3)	akueuaicusaoieiy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:52.610444069 CET	1.1.1.1	192.168.2.5	0xd525	Name error (3)	sauygqecsusickcu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:52.749303102 CET	1.1.1.1	192.168.2.5	0x5d83	Name error (3)	kkwkgmcoawgaoiwg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:52.888020039 CET	1.1.1.1	192.168.2.5	0x9996	Name error (3)	saumycuogqsqykes.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:53.027251959 CET	1.1.1.1	192.168.2.5	0x5f21	Name error (3)	ukyokaigmmkumgoa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:53.182193995 CET	1.1.1.1	192.168.2.5	0x3ef6	Name error (3)	eswweuycwwiiykwo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:53.320890903 CET	1.1.1.1	192.168.2.5	0x363b	Name error (3)	uksgyqiqaaiaiesi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:53.459660053 CET	1.1.1.1	192.168.2.5	0xf59f	Name error (3)	smckcsaioceiyasu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:53.601701021 CET	1.1.1.1	192.168.2.5	0xd074	Name error (3)	esimsqgcwwwmyoqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:53.740076065 CET	1.1.1.1	192.168.2.5	0x79a9	Name error (3)	maiyuocqqiqiiskw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:53.878856897 CET	1.1.1.1	192.168.2.5	0x6ddc	Name error (3)	smaaowemwiwggocu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:54.017672062 CET	1.1.1.1	192.168.2.5	0xcd48	Name error (3)	kwuuwgemogmuomwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:54.156457901 CET	1.1.1.1	192.168.2.5	0x243	Name error (3)	ukicsmiwggcwksam.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:54.295355082 CET	1.1.1.1	192.168.2.5	0xd0ee	Name error (3)	gwamoggwyegsseao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:54.434118032 CET	1.1.1.1	192.168.2.5	0x5585	Name error (3)	immcqsiceooqyaay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:54.575906038 CET	1.1.1.1	192.168.2.5	0x9931	Name error (3)	kkcqgowgkcoyokcu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:54.719614029 CET	1.1.1.1	192.168.2.5	0x9fa1	Name error (3)	kecgikusmakuksma.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:54.857933044 CET	1.1.1.1	192.168.2.5	0x68f	Name error (3)	ymuiggyusggsymoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:54.997071981 CET	1.1.1.1	192.168.2.5	0xb887	Name error (3)	uecouukwkuceyuwg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:55.138967037 CET	1.1.1.1	192.168.2.5	0x8488	Name error (3)	eyoaceoookqskqmy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:55.277900934 CET	1.1.1.1	192.168.2.5	0xa17f	Name error (3)	awwomgcseeqwkkom.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:55.417289972 CET	1.1.1.1	192.168.2.5	0x5616	Name error (3)	keykoekseemyiewq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:55.556145906 CET	1.1.1.1	192.168.2.5	0x4e95	Name error (3)	ysiwwoeeaaskykaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:55.695615053 CET	1.1.1.1	192.168.2.5	0x6432	Name error (3)	kwmcuwccqmuecgea.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:55.834512949 CET	1.1.1.1	192.168.2.5	0xdb3b	Name error (3)	gwyooeiscmwguqms.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:55.973429918 CET	1.1.1.1	192.168.2.5	0xdd57	Name error (3)	wuokiysmiucoucak.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:56.112420082 CET	1.1.1.1	192.168.2.5	0x105d	Name error (3)	wuuiumemmigyyauq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:56.250972986 CET	1.1.1.1	192.168.2.5	0x14bd	Name error (3)	acwomuuukiomgqkm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:56.390189886 CET	1.1.1.1	192.168.2.5	0xd91a	Name error (3)	muwqwgaaymomgwmi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:56.528955936 CET	1.1.1.1	192.168.2.5	0x7576	Name error (3)	omgcoecwsqiuqyug.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:56.667359114 CET	1.1.1.1	192.168.2.5	0x1c3	Name error (3)	kqmsgskwgemyueya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:57.094527960 CET	1.1.1.1	192.168.2.5	0x9b5e	Name error (3)	eyiyueewuaqmmwcm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:57.233243942 CET	1.1.1.1	192.168.2.5	0x4cf4	Name error (3)	gwoyamckoqoaauoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:57.371592045 CET	1.1.1.1	192.168.2.5	0xcf40	Name error (3)	qwqsoyoqkymakowm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:57.510540009 CET	1.1.1.1	192.168.2.5	0xb058	Name error (3)	gcmiymmqgwuquokm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:57.649430990 CET	1.1.1.1	192.168.2.5	0x3d36	Name error (3)	ymseciekayuweoww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:57.791934967 CET	1.1.1.1	192.168.2.5	0x6351	Name error (3)	oyocwswugeiqqyoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:57.930833101 CET	1.1.1.1	192.168.2.5	0xfe71	Name error (3)	omgooecquoweeomo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:58.069758892 CET	1.1.1.1	192.168.2.5	0x1e4c	Name error (3)	imgeoyougkmmeuec.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:58.208266973 CET	1.1.1.1	192.168.2.5	0x41a1	Name error (3)	smoswyoekkccyuga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:58.347012043 CET	1.1.1.1	192.168.2.5	0x2593	Name error (3)	suwkomiqcykeyako.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:58.486830950 CET	1.1.1.1	192.168.2.5	0x1e0a	Name error (3)	smwsugycuuckemue.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:58.626343012 CET	1.1.1.1	192.168.2.5	0xdb62	Name error (3)	qigcqiaomwieqwka.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:58.768371105 CET	1.1.1.1	192.168.2.5	0x8422	Name error (3)	oekcyqqggaegsesm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:58.907933950 CET	1.1.1.1	192.168.2.5	0xf40c	Name error (3)	qcoysaaooaiccqyu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:59.046690941 CET	1.1.1.1	192.168.2.5	0x1bc9	Name error (3)	mismuqiygyeysaoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:59.189976931 CET	1.1.1.1	192.168.2.5	0xceb6	Name error (3)	wockoyekyageakcg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:59.330343962 CET	1.1.1.1	192.168.2.5	0x507f	Name error (3)	ososokqeakgguwsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:59.468852997 CET	1.1.1.1	192.168.2.5	0xd985	Name error (3)	wcgqccqcugomywua.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:59.608160973 CET	1.1.1.1	192.168.2.5	0x98a2	Name error (3)	aqaqgemescmwsqks.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:59.746252060 CET	1.1.1.1	192.168.2.5	0x2037	Name error (3)	aqiwocaywcswuwsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:29:59.884949923 CET	1.1.1.1	192.168.2.5	0xebf5	Name error (3)	aqgmgoqcoqqkguyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:00.024744987 CET	1.1.1.1	192.168.2.5	0xb9cb	Name error (3)	oywgqkusocouysua.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:00.163507938 CET	1.1.1.1	192.168.2.5	0x3b37	Name error (3)	uyygagweoagcuqky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:00.301492929 CET	1.1.1.1	192.168.2.5	0x6b53	Name error (3)	muiccguyaeaqwweg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:00.440341949 CET	1.1.1.1	192.168.2.5	0xe803	Name error (3)	qiqueqokwqqgwwci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:00.580085039 CET	1.1.1.1	192.168.2.5	0xf300	Name error (3)	uygmgoymcwcgkios.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:00.718815088 CET	1.1.1.1	192.168.2.5	0x7490	Name error (3)	qiyggmguowygeooc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:00.857780933 CET	1.1.1.1	192.168.2.5	0xb0da	Name error (3)	acacoiqgoimayqwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:00.996123075 CET	1.1.1.1	192.168.2.5	0xd64a	Name error (3)	smisyqewaummmwoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:01.134912014 CET	1.1.1.1	192.168.2.5	0xd634	Name error (3)	mumuqocoisaucwmq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:01.274260998 CET	1.1.1.1	192.168.2.5	0xb48b	Name error (3)	qqoawmqqwqcusmee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:01.412970066 CET	1.1.1.1	192.168.2.5	0xda3e	Name error (3)	qcygacuamqqugcck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:01.556850910 CET	1.1.1.1	192.168.2.5	0x7d99	Name error (3)	kkiigoymgkmoggoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:01.699913025 CET	1.1.1.1	192.168.2.5	0xc860	Name error (3)	qqmicqemgcgieoau.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:01.843034029 CET	1.1.1.1	192.168.2.5	0xb9e0	Name error (3)	sagymwuwgeucsmac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:01.986762047 CET	1.1.1.1	192.168.2.5	0xe451	Name error (3)	igmqooiwioymwkcm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:02.129982948 CET	1.1.1.1	192.168.2.5	0x79c5	Name error (3)	osyqameakgkceeog.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:02.313827991 CET	1.1.1.1	192.168.2.5	0xe878	Name error (3)	sgigamoeiwksoecq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:02.429368973 CET	1.1.1.1	192.168.2.5	0xe878	Name error (3)	sgigamoeiwksoecq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:02.456145048 CET	1.1.1.1	192.168.2.5	0x824c	Name error (3)	keckssemmeoqieqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:02.594954967 CET	1.1.1.1	192.168.2.5	0x8821	Name error (3)	caysswwugsmkeksw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:02.732835054 CET	1.1.1.1	192.168.2.5	0xd24e	Name error (3)	cgiamwsqgcmqgqse.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:02.871246099 CET	1.1.1.1	192.168.2.5	0xda03	Name error (3)	uyeqwcuyimescesu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:03.011667013 CET	1.1.1.1	192.168.2.5	0x4c99	Name error (3)	ekiwqiyewuiqoemo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:03.150672913 CET	1.1.1.1	192.168.2.5	0x330a	Name error (3)	oeakuqueisysswcg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:03.297069073 CET	1.1.1.1	192.168.2.5	0x81a4	Name error (3)	acemcwecgiqcukys.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:03.437957048 CET	1.1.1.1	192.168.2.5	0x4e05	Name error (3)	qcwaiaiqiwcakawa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:03.576772928 CET	1.1.1.1	192.168.2.5	0xc8b9	Name error (3)	esyiocqieemagwmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:03.719022036 CET	1.1.1.1	192.168.2.5	0xbc5e	Name error (3)	kqsakygykwusqams.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:03.860289097 CET	1.1.1.1	192.168.2.5	0xc403	Name error (3)	ymygkkggyigeqcqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:03.999757051 CET	1.1.1.1	192.168.2.5	0x1746	Name error (3)	qqqkagyoymmosuyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:04.138257027 CET	1.1.1.1	192.168.2.5	0x543d	Name error (3)	moiimkscmiswaesw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:04.279763937 CET	1.1.1.1	192.168.2.5	0x5c7	Name error (3)	igkiociagqsacmwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:04.419123888 CET	1.1.1.1	192.168.2.5	0xa0bb	Name error (3)	ymugwyokyyccykmw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:04.557934046 CET	1.1.1.1	192.168.2.5	0xb79a	Name error (3)	gieksqwccmmqkemm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:04.697433949 CET	1.1.1.1	192.168.2.5	0x9d15	Name error (3)	iaueigwgocakgsku.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:04.835982084 CET	1.1.1.1	192.168.2.5	0x1e20	Name error (3)	sgsasqgwayeckgoy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:04.978652954 CET	1.1.1.1	192.168.2.5	0xfc19	Name error (3)	kwogawueykiiumao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:05.117918015 CET	1.1.1.1	192.168.2.5	0x2b3f	Name error (3)	iagmkeayqmuowswy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:05.257539988 CET	1.1.1.1	192.168.2.5	0x8d46	Name error (3)	yyyagyakeciucagk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:05.396734953 CET	1.1.1.1	192.168.2.5	0xfc8f	Name error (3)	isukyiwyscosaaqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:05.536427021 CET	1.1.1.1	192.168.2.5	0x8fb	Name error (3)	goicqsmskkygkkka.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:05.680649042 CET	1.1.1.1	192.168.2.5	0x636b	Name error (3)	awacwkqgsoomimye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:05.819354057 CET	1.1.1.1	192.168.2.5	0x2407	Name error (3)	iaawaweqwceogamg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:05.957914114 CET	1.1.1.1	192.168.2.5	0x997	Name error (3)	kqueagsoikuyocca.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:06.096923113 CET	1.1.1.1	192.168.2.5	0x59	Name error (3)	momoqikcaksewaua.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:06.237888098 CET	1.1.1.1	192.168.2.5	0x7da2	Name error (3)	suagiqkqmkgysmiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:06.377969980 CET	1.1.1.1	192.168.2.5	0xc373	Name error (3)	gcwequgwyimwymsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:06.519243002 CET	1.1.1.1	192.168.2.5	0x4ae2	Name error (3)	igywsgwooemqiuss.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:06.665158987 CET	1.1.1.1	192.168.2.5	0xcfc2	Name error (3)	wikiagqsmeeaeegy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:06.800420046 CET	1.1.1.1	192.168.2.5	0xcfc2	Name error (3)	wikiagqsmeeaeegy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:06.804752111 CET	1.1.1.1	192.168.2.5	0x6507	Name error (3)	eeoeukoqgiwsumsu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:06.944083929 CET	1.1.1.1	192.168.2.5	0x33bf	Name error (3)	ygooiessycewaocg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:07.082890987 CET	1.1.1.1	192.168.2.5	0x540a	Name error (3)	qcqgssmagywqcgws.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:07.221082926 CET	1.1.1.1	192.168.2.5	0x8070	Name error (3)	goiikukwyyauemqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:07.359801054 CET	1.1.1.1	192.168.2.5	0x621f	Name error (3)	comuwmkimocayeeu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:07.501908064 CET	1.1.1.1	192.168.2.5	0x9fc3	Name error (3)	isgasoomksiwqcmg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:07.640748024 CET	1.1.1.1	192.168.2.5	0xe570	Name error (3)	qigismmgwsiseyuu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:07.781064987 CET	1.1.1.1	192.168.2.5	0x948e	Name error (3)	wuqggcwmoscwykwg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:07.920499086 CET	1.1.1.1	192.168.2.5	0x157a	Name error (3)	qceawaaswmsuekmu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:08.063081026 CET	1.1.1.1	192.168.2.5	0x344f	Name error (3)	ygucsucmagwqsqcu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:08.205838919 CET	1.1.1.1	192.168.2.5	0x7d9d	Name error (3)	giuccqyqokookyue.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:08.345493078 CET	1.1.1.1	192.168.2.5	0xbe43	Name error (3)	gceesusqmuockkgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:08.484534025 CET	1.1.1.1	192.168.2.5	0xa428	Name error (3)	ygesoycecmkuwayg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:08.623754025 CET	1.1.1.1	192.168.2.5	0x110	Name error (3)	sasqgsyksiccuuws.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:08.762967110 CET	1.1.1.1	192.168.2.5	0xbf35	Name error (3)	qwggykgwkqoceiuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:08.901272058 CET	1.1.1.1	192.168.2.5	0x4316	Name error (3)	wiguisuayimaukgu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:09.039947987 CET	1.1.1.1	192.168.2.5	0xc8a5	Name error (3)	qcwcgegyyieaoqca.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:09.178833008 CET	1.1.1.1	192.168.2.5	0xee47	Name error (3)	gwcyyawigmwceaqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:09.320470095 CET	1.1.1.1	192.168.2.5	0x2360	Name error (3)	mueuwcqsioowsmce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:09.458800077 CET	1.1.1.1	192.168.2.5	0x2360	Name error (3)	mueuwcqsioowsmce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:09.460445881 CET	1.1.1.1	192.168.2.5	0xf1aa	Name error (3)	qiewcykmuuacuoyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:09.601280928 CET	1.1.1.1	192.168.2.5	0x88f3	Name error (3)	coayaokeissieqcc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:09.740703106 CET	1.1.1.1	192.168.2.5	0x5c06	Name error (3)	oeooiqokqsqcsaig.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:09.881226063 CET	1.1.1.1	192.168.2.5	0x1bca	Name error (3)	masegmsiqgamiugm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.020183086 CET	1.1.1.1	192.168.2.5	0x366b	Name error (3)	smwywssyyaciqkae.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.159615040 CET	1.1.1.1	192.168.2.5	0x983c	Name error (3)	aweqoooqomueeiwi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.298949957 CET	1.1.1.1	192.168.2.5	0xc700	Name error (3)	akasikewaomyiwqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.437968016 CET	1.1.1.1	192.168.2.5	0x1576	Name error (3)	oyyamqygcecqocmq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.587344885 CET	1.1.1.1	192.168.2.5	0x1576	Name error (3)	oyyamqygcecqocmq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.603643894 CET	1.1.1.1	192.168.2.5	0xce1f	Name error (3)	qwikoqqgiayyuakq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.763698101 CET	1.1.1.1	192.168.2.5	0x194f	Name error (3)	miqcugomwgmygyoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:10.918791056 CET	1.1.1.1	192.168.2.5	0x4aa0	Name error (3)	wiccyamsgmuqoeoy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:11.050246000 CET	1.1.1.1	192.168.2.5	0x4aa0	Name error (3)	wiccyamsgmuqoeoy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:11.057429075 CET	1.1.1.1	192.168.2.5	0x9d4b	Name error (3)	ymeiqyyqqyaaygie.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:11.196470022 CET	1.1.1.1	192.168.2.5	0xe19b	Name error (3)	wiomcwmascsigags.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:11.336730003 CET	1.1.1.1	192.168.2.5	0xf41c	Name error (3)	awgyuqqswicwkqcs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:11.475688934 CET	1.1.1.1	192.168.2.5	0xff0b	Name error (3)	iacisiamimiiqyeo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:11.614618063 CET	1.1.1.1	192.168.2.5	0x85f6	Name error (3)	wogawoqysgiockwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:11.753279924 CET	1.1.1.1	192.168.2.5	0x37f7	Name error (3)	mayykkuyeuiggyws.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:11.894505978 CET	1.1.1.1	192.168.2.5	0x5d32	Name error (3)	cosaygigqegeyewi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:12.034657001 CET	1.1.1.1	192.168.2.5	0xf3ef	Name error (3)	ekqyosgcumkcecmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:12.174257994 CET	1.1.1.1	192.168.2.5	0xb101	Name error (3)	qimmkmaumumswocw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:12.313779116 CET	1.1.1.1	192.168.2.5	0x8565	Name error (3)	acqaagqgmsmeouce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:12.453800917 CET	1.1.1.1	192.168.2.5	0x3d76	Name error (3)	awasockiaymagmci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:12.593085051 CET	1.1.1.1	192.168.2.5	0xc0a8	Name error (3)	akuyqkmomwqyiyow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:12.731024027 CET	1.1.1.1	192.168.2.5	0x8e5c	Name error (3)	caceukeeygaaqaec.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:12.875741959 CET	1.1.1.1	192.168.2.5	0x4a7f	Name error (3)	qwcaikouwwekssco.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:13.014880896 CET	1.1.1.1	192.168.2.5	0xe625	Name error (3)	qqioykeogcwkowgq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:13.154584885 CET	1.1.1.1	192.168.2.5	0xe6ba	Name error (3)	igeqissugeuswaus.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:13.344145060 CET	1.1.1.1	192.168.2.5	0x9b8b	Name error (3)	osoawyeyassgycgy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:13.483109951 CET	1.1.1.1	192.168.2.5	0xc35a	Name error (3)	cuaumuqcoeegomsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:13.622445107 CET	1.1.1.1	192.168.2.5	0xd35b	Name error (3)	oyogquqkmyqwwkuq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:13.761838913 CET	1.1.1.1	192.168.2.5	0x56eb	Name error (3)	gwyougsgeaaoiumg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:13.901048899 CET	1.1.1.1	192.168.2.5	0x5738	Name error (3)	ukeoemaaimqyuais.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:14.042213917 CET	1.1.1.1	192.168.2.5	0xddef	Name error (3)	oewuwcsmaacckewa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:14.183270931 CET	1.1.1.1	192.168.2.5	0x35d5	Name error (3)	esykokiigsgwcwsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:14.323740005 CET	1.1.1.1	192.168.2.5	0x9a52	Name error (3)	ekgqymkkqiwogqsy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:14.465241909 CET	1.1.1.1	192.168.2.5	0x3c79	Name error (3)	wueossewygqoakoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:14.604914904 CET	1.1.1.1	192.168.2.5	0x176f	Name error (3)	isceiesauogasmoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:14.743695021 CET	1.1.1.1	192.168.2.5	0x30e7	Name error (3)	giscmywoiaqmqcmw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:14.883141994 CET	1.1.1.1	192.168.2.5	0xa1ae	Name error (3)	uyqweoyukcewugsu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:15.021791935 CET	1.1.1.1	192.168.2.5	0xa948	Name error (3)	imuscegymggagewg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:15.161369085 CET	1.1.1.1	192.168.2.5	0xc677	Name error (3)	wgesgakysuqaewik.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:15.300947905 CET	1.1.1.1	192.168.2.5	0x94b4	Name error (3)	uwoyyqgiwowysqou.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:15.439785957 CET	1.1.1.1	192.168.2.5	0x5857	Name error (3)	syaouwwyoaemeekm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:15.578706026 CET	1.1.1.1	192.168.2.5	0x97f1	Name error (3)	aoscugususamokuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:15.718138933 CET	1.1.1.1	192.168.2.5	0x253e	Name error (3)	qucyaygweeasqeoy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:15.859837055 CET	1.1.1.1	192.168.2.5	0xe4ae	Name error (3)	uiwwamyuymycooey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:15.998744011 CET	1.1.1.1	192.168.2.5	0xf1ff	Name error (3)	iygukwyuqwiuoqmi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:16.137773037 CET	1.1.1.1	192.168.2.5	0x196d	Name error (3)	koaeaguekwcaousw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:16.276774883 CET	1.1.1.1	192.168.2.5	0x835f	Name error (3)	skssioqkemoiieaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:16.415667057 CET	1.1.1.1	192.168.2.5	0x6970	Name error (3)	yewomygmueegmoqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:16.554368019 CET	1.1.1.1	192.168.2.5	0x4332	Name error (3)	kuyoukwwacqkcoyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:16.695416927 CET	1.1.1.1	192.168.2.5	0xd54c	Name error (3)	gmcqgmkyguwkskyg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:16.836289883 CET	1.1.1.1	192.168.2.5	0x500f	Name error (3)	mygiqcqokowwmgqq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:16.975732088 CET	1.1.1.1	192.168.2.5	0xa51e	Name error (3)	cymogqmasaiiwmww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:17.115731001 CET	1.1.1.1	192.168.2.5	0xe376	Name error (3)	iykumkamcykgicyi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:17.254822969 CET	1.1.1.1	192.168.2.5	0xad8f	Name error (3)	cyemcqwkasuimkgs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:17.394325972 CET	1.1.1.1	192.168.2.5	0xc4c5	Name error (3)	ieqeeiggkuqcomyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:17.532885075 CET	1.1.1.1	192.168.2.5	0xf2f5	Name error (3)	ssmkyomikukusksu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:17.671855927 CET	1.1.1.1	192.168.2.5	0x9691	Name error (3)	kimakioiwmawksiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:17.810806990 CET	1.1.1.1	192.168.2.5	0xb571	Name error (3)	qumssmeysccykkyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:17.949350119 CET	1.1.1.1	192.168.2.5	0x9a81	Name error (3)	ykuoaucocogcwoky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:18.089505911 CET	1.1.1.1	192.168.2.5	0xfbfe	Name error (3)	semyssioekmosauo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:18.228399038 CET	1.1.1.1	192.168.2.5	0xc3b1	Name error (3)	aiiqyyikowqaygwy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:18.366924047 CET	1.1.1.1	192.168.2.5	0x79a6	Name error (3)	kouumoyqiuckkcau.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:18.505882025 CET	1.1.1.1	192.168.2.5	0x7b0c	Name error (3)	qgwkkkyicoqmooqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:18.644619942 CET	1.1.1.1	192.168.2.5	0xdf95	Name error (3)	uwwcocucusmeguaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:18.787247896 CET	1.1.1.1	192.168.2.5	0x3f12	Name error (3)	cekggiciueyeyoku.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:18.925993919 CET	1.1.1.1	192.168.2.5	0x4f1f	Name error (3)	iqqeoamqwiuiyuua.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:19.068681955 CET	1.1.1.1	192.168.2.5	0x124f	Name error (3)	uokqmokseqqakiui.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:19.208093882 CET	1.1.1.1	192.168.2.5	0x32b7	Name error (3)	cyqqgacqkowwkqqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:19.347300053 CET	1.1.1.1	192.168.2.5	0x1968	Name error (3)	cmqqeimyycgqwsgg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:19.486591101 CET	1.1.1.1	192.168.2.5	0x7e6b	Name error (3)	wmgeoqqiwqcmimwu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:19.625077963 CET	1.1.1.1	192.168.2.5	0x45e2	Name error (3)	quyckaioggawuois.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:19.765662909 CET	1.1.1.1	192.168.2.5	0x72ea	Name error (3)	eqciawooemoueyqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:19.904500008 CET	1.1.1.1	192.168.2.5	0x92d	Name error (3)	oqoaumkywacmuwwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:20.047657013 CET	1.1.1.1	192.168.2.5	0x100	Name error (3)	ewueyekksqksycww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:20.187386036 CET	1.1.1.1	192.168.2.5	0x3dc9	Name error (3)	csmasucykosuwouy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:20.327143908 CET	1.1.1.1	192.168.2.5	0x9a	Name error (3)	seeogeqwsqmsoaqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:20.465025902 CET	1.1.1.1	192.168.2.5	0x8d88	Name error (3)	gusmkkaiomeeqaiy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:20.603943110 CET	1.1.1.1	192.168.2.5	0x272	Name error (3)	msyecoiqeyqeiquy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:20.742705107 CET	1.1.1.1	192.168.2.5	0xfc49	Name error (3)	skawoueawceoywsy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:20.881762028 CET	1.1.1.1	192.168.2.5	0xfc53	Name error (3)	iyuaqococuqcsgii.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:21.020427942 CET	1.1.1.1	192.168.2.5	0xb9cb	Name error (3)	kuyaasckcgacyesi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:21.158344984 CET	1.1.1.1	192.168.2.5	0xdd63	Name error (3)	aaeqiiecqqumcgky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:21.301246881 CET	1.1.1.1	192.168.2.5	0x7197	Name error (3)	aawiysageawcoyok.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:21.440371037 CET	1.1.1.1	192.168.2.5	0xc373	Name error (3)	yqysoaosqewciiww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:21.583525896 CET	1.1.1.1	192.168.2.5	0xbb52	Name error (3)	yessywkwcwmyewqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:21.723066092 CET	1.1.1.1	192.168.2.5	0xe744	Name error (3)	aueiqscgeicewaoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:21.863085032 CET	1.1.1.1	192.168.2.5	0x275b	Name error (3)	uccsgcekiwcyucou.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.005600929 CET	1.1.1.1	192.168.2.5	0x7b1f	Name error (3)	aiumyocycyyikiwc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.149288893 CET	1.1.1.1	192.168.2.5	0x6542	Name error (3)	aoqayemwgmsyuimi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.285716057 CET	1.1.1.1	192.168.2.5	0x6542	Name error (3)	aoqayemwgmsyuimi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.286957026 CET	1.1.1.1	192.168.2.5	0x6770	Name error (3)	mmiowgeswucumqae.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.429004908 CET	1.1.1.1	192.168.2.5	0x6f71	Name error (3)	mmiugosumuqmuqoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.572475910 CET	1.1.1.1	192.168.2.5	0x5065	Name error (3)	ecqisawmymscauow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.712528944 CET	1.1.1.1	192.168.2.5	0x708	Name error (3)	iyoqqeicqoquiqka.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.857892036 CET	1.1.1.1	192.168.2.5	0xc7aa	Name error (3)	ecoqwiswmwqokmay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:22.998261929 CET	1.1.1.1	192.168.2.5	0x6f28	Name error (3)	ceckmwoyqkwgeoqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:23.140348911 CET	1.1.1.1	192.168.2.5	0x31d9	Name error (3)	kcoiygiwuyqyaoku.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:23.279591084 CET	1.1.1.1	192.168.2.5	0x46dc	Name error (3)	aaeyckqsgmiqsgew.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:23.421644926 CET	1.1.1.1	192.168.2.5	0x9963	Name error (3)	qgaiosyouwwkgsmm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:23.560666084 CET	1.1.1.1	192.168.2.5	0x6b0f	Name error (3)	ocqseueommkkqcgs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:23.705290079 CET	1.1.1.1	192.168.2.5	0xc0e3	Name error (3)	owmesaosmycoeceq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:23.846396923 CET	1.1.1.1	192.168.2.5	0xf5d6	Name error (3)	qokauaicweuwscac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:23.985410929 CET	1.1.1.1	192.168.2.5	0x6798	Name error (3)	sewmmwqeyauowwwo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:24.125197887 CET	1.1.1.1	192.168.2.5	0x687d	Name error (3)	mmgowiccqoeomagq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:24.294924021 CET	1.1.1.1	192.168.2.5	0x687d	Name error (3)	mmgowiccqoeomagq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:24.328856945 CET	1.1.1.1	192.168.2.5	0x7300	Name error (3)	kcwiywyygywkkysk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:24.467365026 CET	1.1.1.1	192.168.2.5	0x6a50	Name error (3)	syiysgiqgqggqkoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:24.607383966 CET	1.1.1.1	192.168.2.5	0x2de8	Name error (3)	ykuasckuceswseig.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:24.745759010 CET	1.1.1.1	192.168.2.5	0xb3a7	Name error (3)	quugmiumsieaiyys.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:24.884937048 CET	1.1.1.1	192.168.2.5	0xaf0e	Name error (3)	ikqywgcqaggogqsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:25.023441076 CET	1.1.1.1	192.168.2.5	0xd95e	Name error (3)	eqyamamqwsseyoig.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:25.175017118 CET	1.1.1.1	192.168.2.5	0x7a16	Name error (3)	seqkawokggwucsui.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:25.319928885 CET	1.1.1.1	192.168.2.5	0x527a	Name error (3)	gmqeqkcqackwkgao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:25.459949017 CET	1.1.1.1	192.168.2.5	0xbecc	Name error (3)	guowewgekuoqacyy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:25.598761082 CET	1.1.1.1	192.168.2.5	0x5449	Name error (3)	aaokyscqeecowaci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:25.737391949 CET	1.1.1.1	192.168.2.5	0xeada	Name error (3)	ywywwwgwekicgico.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:25.877980947 CET	1.1.1.1	192.168.2.5	0xf81f	Name error (3)	wsisaoaauqwmuomg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:26.019680977 CET	1.1.1.1	192.168.2.5	0x8bad	Name error (3)	koouumcuucaeakye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:26.158358097 CET	1.1.1.1	192.168.2.5	0xbf18	Name error (3)	okccisioeycusekg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:26.297224998 CET	1.1.1.1	192.168.2.5	0x47a6	Name error (3)	cymymsciyaiacwgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:26.439362049 CET	1.1.1.1	192.168.2.5	0xb1a2	Name error (3)	aoyeoimcuuqakckw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:26.577727079 CET	1.1.1.1	192.168.2.5	0x5684	Name error (3)	qoaweokuqggaymks.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:26.747035027 CET	1.1.1.1	192.168.2.5	0x5684	Name error (3)	qoaweokuqggaymks.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:26.748872042 CET	1.1.1.1	192.168.2.5	0x8b5a	Name error (3)	ewuyacewswkoueqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:26.891343117 CET	1.1.1.1	192.168.2.5	0x9f5d	Name error (3)	kiuymkmaomciimcc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:27.029148102 CET	1.1.1.1	192.168.2.5	0x1c96	Name error (3)	oqaiyaoqwyeswaiy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:27.168262005 CET	1.1.1.1	192.168.2.5	0x82fe	Name error (3)	koyokggaqsagggym.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:27.305687904 CET	1.1.1.1	192.168.2.5	0xe148	Name error (3)	cmsuagygagqceocm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:27.444462061 CET	1.1.1.1	192.168.2.5	0xe3a	Name error (3)	uisgoqaoksgqsqyg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:27.583067894 CET	1.1.1.1	192.168.2.5	0x8f25	Name error (3)	ocgcqsagaakgkcma.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:27.722003937 CET	1.1.1.1	192.168.2.5	0x3575	Name error (3)	okgigkmiieweagia.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:27.861357927 CET	1.1.1.1	192.168.2.5	0x4ea3	Name error (3)	skiwkmaaeeiqqgee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:27.999888897 CET	1.1.1.1	192.168.2.5	0x6144	Name error (3)	aagokgyaswscyaeu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:28.138060093 CET	1.1.1.1	192.168.2.5	0x18a2	Name error (3)	gmciuwiycsqycggy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:28.276921988 CET	1.1.1.1	192.168.2.5	0x2f22	Name error (3)	ggeymcaisciikucq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:28.416903019 CET	1.1.1.1	192.168.2.5	0xa588	Name error (3)	uwskygguegqkasme.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:28.559221983 CET	1.1.1.1	192.168.2.5	0x7b40	Name error (3)	cyumiiokkswcoeag.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:28.699829102 CET	1.1.1.1	192.168.2.5	0x82dd	Name error (3)	oqisqmesaeoegmyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:28.838840008 CET	1.1.1.1	192.168.2.5	0x3683	Name error (3)	wagasowawsoyycom.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:28.977380991 CET	1.1.1.1	192.168.2.5	0x9b7b	Name error (3)	gaguweiwsgouugqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:29.117703915 CET	1.1.1.1	192.168.2.5	0x7ff1	Name error (3)	syyyweaywowycsia.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:29.256581068 CET	1.1.1.1	192.168.2.5	0xc33d	Name error (3)	mmoycwqiuykiusuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:29.395900965 CET	1.1.1.1	192.168.2.5	0xbe98	Name error (3)	ikoycakqiuuascco.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:29.534848928 CET	1.1.1.1	192.168.2.5	0x7509	Name error (3)	cmuqekokuyuqgige.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:29.674186945 CET	1.1.1.1	192.168.2.5	0xbcb1	Name error (3)	cywoimwmsoamqoem.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:29.813976049 CET	1.1.1.1	192.168.2.5	0x5431	Name error (3)	skyiqyaeoykwcgiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:29.952522993 CET	1.1.1.1	192.168.2.5	0x94a7	Name error (3)	ssiooaeoaocuyaow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:30.091188908 CET	1.1.1.1	192.168.2.5	0x9837	Name error (3)	ywmgykycywqqewqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:30.229469061 CET	1.1.1.1	192.168.2.5	0xccb5	Name error (3)	uosaescwmkiyscay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:30.370424986 CET	1.1.1.1	192.168.2.5	0xd488	Name error (3)	eigywisgeoiskekg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:30.509324074 CET	1.1.1.1	192.168.2.5	0x978e	Name error (3)	msqsoggkkoiokugk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:30.648878098 CET	1.1.1.1	192.168.2.5	0xd824	Name error (3)	cmaaciimeememwao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:30.791878939 CET	1.1.1.1	192.168.2.5	0x8a55	Name error (3)	uigkauqkumywguig.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:30.936338902 CET	1.1.1.1	192.168.2.5	0x856a	Name error (3)	wggygeoisauouuoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:31.078567028 CET	1.1.1.1	192.168.2.5	0x343d	Name error (3)	okoykokgycygucya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:31.222656965 CET	1.1.1.1	192.168.2.5	0xd7ec	Name error (3)	ewaoowewmsomgaiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:31.362149954 CET	1.1.1.1	192.168.2.5	0x7c59	Name error (3)	ieiegkokewkqmkwe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:31.502357006 CET	1.1.1.1	192.168.2.5	0x41e	Name error (3)	gakesieaaickekuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:31.643301010 CET	1.1.1.1	192.168.2.5	0x326f	Name error (3)	ecasigiwguqgguyw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:31.782721043 CET	1.1.1.1	192.168.2.5	0x629c	Name error (3)	okwswuciummewsui.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:31.922214985 CET	1.1.1.1	192.168.2.5	0xba66	Name error (3)	ggaqiymaekkywusy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.062751055 CET	1.1.1.1	192.168.2.5	0x507a	Name error (3)	ocicimqkgucacyim.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.296920061 CET	1.1.1.1	192.168.2.5	0x507a	Name error (3)	ocicimqkgucacyim.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.296935081 CET	1.1.1.1	192.168.2.5	0x7323	Name error (3)	qoyisgoayskswigs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.538642883 CET	1.1.1.1	192.168.2.5	0x7323	Name error (3)	qoyisgoayskswigs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.538767099 CET	1.1.1.1	192.168.2.5	0x34f2	Name error (3)	wsywmuwgsogemomw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.582449913 CET	1.1.1.1	192.168.2.5	0x34f2	Name error (3)	wsywmuwgsogemomw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.679617882 CET	1.1.1.1	192.168.2.5	0x27bd	Name error (3)	skaeggkkcmoqoywy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.822465897 CET	1.1.1.1	192.168.2.5	0xa18b	Name error (3)	uowicsywgqmgagyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:32.964479923 CET	1.1.1.1	192.168.2.5	0x491a	Name error (3)	yqyqgowkwqiggewq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:33.106508970 CET	1.1.1.1	192.168.2.5	0x454d	Name error (3)	aikmggymywuooyqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:33.246692896 CET	1.1.1.1	192.168.2.5	0xd647	Name error (3)	semgkyogsqqwgsmy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:33.385472059 CET	1.1.1.1	192.168.2.5	0x804a	Name error (3)	ucmwywoqciswaguc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:33.727307081 CET	1.1.1.1	192.168.2.5	0x2910	Name error (3)	qowoagcmkkgqcswk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:33.869386911 CET	1.1.1.1	192.168.2.5	0x22d8	Name error (3)	mmgusimiaqiweyas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:34.009428024 CET	1.1.1.1	192.168.2.5	0x487	Name error (3)	wgssaogcsscmkswu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:34.149259090 CET	1.1.1.1	192.168.2.5	0x62f3	Name error (3)	aoeewogkicikusoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:34.289011955 CET	1.1.1.1	192.168.2.5	0x7453	Name error (3)	ikggquqsigykqamc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:34.429150105 CET	1.1.1.1	192.168.2.5	0x8603	Name error (3)	waaqccyeaeywuoqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:34.568550110 CET	1.1.1.1	192.168.2.5	0x7ba7	Name error (3)	ecgiqiiieksaooyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:34.707243919 CET	1.1.1.1	192.168.2.5	0x45a1	Name error (3)	iqcogqmwegaqewuu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:34.845963001 CET	1.1.1.1	192.168.2.5	0x6a51	Name error (3)	aiusammkykucyyso.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:34.986044884 CET	1.1.1.1	192.168.2.5	0xad9e	Name error (3)	qgkswogkcsaeegki.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:35.126420021 CET	1.1.1.1	192.168.2.5	0x364a	Name error (3)	ywcwqgmikmycwoeu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:35.265316010 CET	1.1.1.1	192.168.2.5	0x6b2e	Name error (3)	eiqogaaggeswoges.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:35.404767036 CET	1.1.1.1	192.168.2.5	0xde05	Name error (3)	sekqikccsokicgye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:35.543108940 CET	1.1.1.1	192.168.2.5	0x65b9	Name error (3)	ssqggwwkkaayqkgk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:35.682375908 CET	1.1.1.1	192.168.2.5	0x978b	Name error (3)	seiiycgosccmaykm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:30:35.822282076 CET	1.1.1.1	192.168.2.5	0x9c46	Name error (3)	aosagqwwquakwceq.xyz	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.docusign.com

clients2.googleusercontent.com

chrome.cloudflare-dns.com

https:

aikmouciiqgecoqi.xyz:443

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49921	166.1.160.237	443	1476	C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe

Timestamp	Bytes transferred	Direction	Data
Dec 12, 2024 12:29:41.418337107 CET	130	OUT	GET /api/client_hello HTTP/1.1 Accept: / Connection: close Host: aikmouciiqgecoqi.xyz:443 User-Agent: cpp-httplib/0.12.1

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49752	3.33.186.135	443	7192	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:29:00 UTC	739	OUT	GET /sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf HTTP/1.1 Host: www.docusign.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-12-12 11:29:00 UTC	376	IN	HTTP/1.1 404 Not Found Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Type: text/html; charset=utf-8 Date: Thu, 12 Dec 2024 11:29:00 GMT Etag: 1730908359-ssl Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01JEXA26FET5TWPYVJQH5CX6NX Connection: close Transfer-Encoding: chunked
2024-12-12 11:29:00 UTC	2372	IN	Data Raw: 63 30 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d Data Ascii: c0a<!DOCTYPE html><html> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Page Not Found</title> <link href='https://fonts.googleapis.com
2024-12-12 11:29:00 UTC	717	IN	Data Raw: 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 68 72 3e 3c 70 3e 49 66 20 74 68 69 73 20 69 73 20 79 6f 75 72 20 73 69 74 65 2c 20 61 6e 64 20 79 6f 75 20 77 65 72 65 6e 27 74 20 65 78 70 65 63 74 69 6e 67 20 61 20 34 30 34 20 66 6f 72 20 74 68 69 73 20 70 61 74 68 2c 20 70 6c 65 61 73 65 20 76 69 73 69 74 20 4e 65 74 6c 69 66 79 27 73 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6e 73 77 65 72 73 2e 6e 65 74 6c 69 66 79 2e 63 6f 6d 2f 74 2f 73 75 70 70 6f 72 74 2d 67 75 69 64 65 2d 69 2d 76 65 2d 64 65 70 6c 6f 79 65 64 2d 6d 79 2d 73 69 74 65 2d 62 75 74 2d 69 2d 73 74 69 6c 6c 2d 73 65 65 2d 70 61 67 65 2d 6e 6f 74 2d 66 6f 75 6e 64 2f 31 32 35 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 34 30 34 70 61 67 65 26 Data Ascii: > </p> <hr><p>If this is your site, and you weren't expecting a 404 for this path, please visit Netlify's <a href="https://answers.netlify.com/t/support-guide-i-ve-deployed-my-site-but-i-still-see-page-not-found/125?utm_source=404page&
2024-12-12 11:29:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49763	172.217.19.193	443	7192	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:29:03 UTC	594	OUT	GET /crx/blobs/AW50ZFsLPhJJyx_4ShcDOgcEpJeOc7Vr0kMzfFRoaMfWx4pAgZ0UGF2i9_ei1A7FAHQ-EPFULeBn7F8_SEKhjbpEyKfiidX7GF_6BDOycMeg5w03wjwVQ61hkaEix8WFqmEAxlKa5cmz_tdFr9JtRwdqRu82wmLe2Ghe/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_84_1_0.crx HTTP/1.1 Host: clients2.googleusercontent.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-12-12 11:29:03 UTC	566	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 138356 X-GUploader-UploadID: AFiumC4IQxV4q3j7O5WaAop-zN-nbICjYs5JCDxYQQTJdLHwfq1yHey8LncGkDjHls6iyR7xt5E X-Goog-Hash: crc32c=ld9IFg== Server: UploadServer Date: Wed, 11 Dec 2024 16:45:00 GMT Expires: Thu, 11 Dec 2025 16:45:00 GMT Cache-Control: public, max-age=31536000 Age: 67443 Last-Modified: Tue, 19 Nov 2024 16:44:49 GMT ETag: 2373c8b9_cba0b209_e851cacf_d4df989e_81c52a41 Content-Type: application/x-chrome-extension Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-12 11:29:03 UTC	824	IN	Data Raw: 43 72 32 34 03 00 00 00 e0 15 00 00 12 ac 04 0a a6 02 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 9c 5e d1 18 b0 31 22 89 f4 fd 77 8d 67 83 0b 74 fd c3 32 4a 0e 47 31 00 29 58 34 b1 bf 3d 26 90 3f 5b 6a 2c 4c 7a fd d5 6a b0 75 cf 65 5b 49 85 71 2a 42 61 2f 58 dd ee dc 50 c1 68 fc cd 84 4c 04 88 b9 99 dc 32 25 33 5f 6f f4 ae b5 ad 19 0d d4 b8 48 f7 29 27 b9 3d d6 95 65 f8 ac c8 9c 3f 15 e6 ef 1f 08 ab 11 6a e1 a9 c8 33 55 48 fd 7c bf 58 8c 4d 06 e3 97 75 cc c2 9c 73 5b a6 2a f2 ea 3f 24 f3 9c db 8a 05 9f 46 25 11 1d 18 b4 49 08 19 94 80 29 08 f2 2c 2d c0 2f 90 65 35 29 a6 66 83 e7 4f e4 b2 71 14 5e ff 90 92 01 8d d3 bf ca a0 d0 39 a0 08 28 e3 d2 5f d5 70 68 32 fe 10 5e d5 59 42 50 58 66 5f 38 cc 0b 08 Data Ascii: Cr240"0H0^1"wgt2JG1)X4=&?[j,Lzjue[IqBa/XPhL2%3_oH)'=e?j3UH\|XMus[*?$F%I),-/e5)fOq^9(_ph2^YBPXf_8
2024-12-12 11:29:03 UTC	1390	IN	Data Raw: 3a 5f 86 5f 7f f9 35 7d d5 75 53 5c 9b ff 18 eb af ff 78 3f ab fa d7 9f 7e 5d cf 1f 43 2d ff b3 ba 0c 53 3d 4c bf fe f2 f7 5f 63 f1 50 97 42 ea cf d7 8f b0 2d 4d db 10 dc 36 32 b3 69 2a b3 51 d5 e3 f8 c4 ad eb 39 ef e7 ef dc 9c de 2b 53 3d 89 f4 f8 84 0e 2f 36 3a df cf c2 57 83 c8 90 71 6c 2f 67 fd f9 26 6a a9 79 fc f9 7b af ae 22 8b ce b1 9a fe 7c 1c dc 46 fa 1f e7 f8 7c 9c a3 f6 e3 56 f9 f6 f0 f3 99 aa 77 be 25 74 2e 79 86 2e 3f df 17 26 e2 e2 61 cc 9c 7f 3c d2 6e c2 88 c1 89 f6 53 2b 7c d4 17 3d 05 72 61 c7 0a 84 08 01 b1 27 7d f8 28 82 70 57 fb c2 16 8f d0 39 05 d7 73 e5 43 a3 d8 1f 9f 8e ca b9 96 26 6a 4a 9f 2d 27 13 f6 27 13 a8 ca 42 8d 30 f5 75 3f 2e a5 b9 3b 9f f6 e1 a3 34 9d 7f cf f3 e7 d9 c2 b9 f0 d4 c0 ac e6 90 42 86 4e 5c 7c a7 3d 83 9c c3 33 Data Ascii: :__5}uS\x?~]C-S=L_cPB-M62i*Q9+S=/6:Wql/g&jy{"\|F\|Vw%t.y.?&a<nS+\|=ra'}(pW9sC&jJ-''B0u?.;4BN\\|=3
2024-12-12 11:29:03 UTC	1390	IN	Data Raw: 60 65 eb 98 45 ab ec b5 f7 df 38 3e ce 17 36 8b 4c d7 7b 85 4d 64 18 16 65 b0 90 1e f2 cb 03 4c 8a 00 e1 48 79 96 ec 9b 3d f6 a0 d6 80 10 57 0f 10 60 43 7e af 8e 3f 1c b7 7a ee 1d 59 c2 29 1a 94 12 c6 ec 9e 28 ba 47 74 ea a9 92 fb f2 20 bd f4 20 c3 8a 8a 04 03 ec 56 83 d6 68 aa f5 88 d1 39 0a d6 d7 be fa 7f 68 70 d5 e2 31 37 1a 25 03 f1 55 98 2a 4b bd 68 22 81 eb 25 ad 18 84 19 e6 b8 d7 a1 60 b9 67 e1 89 9c f6 e2 ad 52 d0 c5 a6 dc ad e7 9e dc ca 7f d2 3e 77 87 7d e1 a1 a5 e9 a4 17 9a 04 c0 1e 05 42 14 c6 78 22 8b d6 00 1f f3 28 78 31 13 f3 7e 67 01 4e 72 8a 0f 75 ff 71 5f e5 6f 6d cd bd d1 43 0a 76 99 35 be 4a e5 2d 31 6c 3a 02 10 c5 56 13 ea 1e 23 15 1d 58 74 af 43 75 3d f0 13 03 bc 22 a2 fc ca 82 66 b9 ee fd 2e c5 46 f6 b8 53 d7 bc 55 5e 3d b8 46 34 c8 Data Ascii: `eE8>6L{MdeLHy=W`C~?zY)(Gt Vh9hp17%U*Kh"%`gR>w}Bx"(x1~gNruq_omCv5J-1l:V#XtCu="f.FSU^=F4
2024-12-12 11:29:03 UTC	1390	IN	Data Raw: 7d dd cf 6f 71 6a 3c aa 40 7e 15 06 ce 18 81 87 14 8e b0 58 44 27 7a dd 77 ac b1 b7 dc 66 ab cf 89 e9 ce a6 3c ec 05 3f 02 02 d8 27 ea 46 4f 70 bb e1 2d 44 84 4e 09 f6 ed 1b e9 1b c5 3d 68 a6 0c d9 75 0f 3f b1 8e cd 35 f6 95 bf 91 bd 1a 69 d1 42 51 b5 ee b9 e2 ce 89 50 6c 26 16 de 89 5e bc e6 c4 fd 26 da f5 e3 ce 69 10 77 1e cc c8 01 e9 9e 41 6a 55 a0 38 bc ac b1 bf 6b be 7b ba 51 77 aa c0 9b 05 fc b0 44 37 6a e6 e1 c0 0e 78 4a 7b 14 13 4f eb 10 ed ee 3f fb 8d c4 1f af b9 25 7e f2 af cb 87 f0 11 f9 c7 c7 ff c1 df c8 80 4b b7 c6 3f 03 ce 51 66 ae c1 bd e9 35 31 9c a0 54 88 27 0b eb 52 98 2c 14 76 36 e7 d3 53 74 70 f3 94 48 50 51 74 c1 6a 6c c5 02 57 75 bf ea 37 d6 5c 85 75 ff 1a de 92 f6 c3 8e 3c db 2b f4 fc 0a bf 49 4b a8 ce 14 7e 00 ce c6 ac 26 ca 94 9e Data Ascii: }oqj<@~XD'zwf<?'FOp-DN=hu?5iBQPl&^&iwAjU8k{QwD7jxJ{O?%~K?Qf51T'R,v6StpHPQtjlWu7\u<+IK~&
2024-12-12 11:29:03 UTC	1390	IN	Data Raw: ae e7 0e 9d 1f 06 63 15 24 ff cb b8 61 7b a2 4e 58 74 c0 4c 09 86 ba 97 48 e8 03 c4 a9 0f ee 35 65 bd 60 e1 21 a1 18 44 a6 bd 68 e1 33 23 9a dc 91 a1 d2 1c 38 bf d3 98 ca 64 0f d9 ab 56 8f 6d 95 56 f8 a5 e3 ec 3d ef d5 2d b3 5c 3d e6 ff 3a fe 0d 19 c0 60 d4 b8 23 8f b9 88 da a3 ee df 88 f6 ec a7 9c 21 9f 2e 21 cc 81 f2 75 fd ed 12 f6 f3 fe 52 6a 9f db f0 a2 fb e9 a7 81 d4 f7 eb f5 58 53 9e 25 3f f7 32 7e 98 ff 3b 96 ae c7 fe 9f e7 2d df ff f0 9c e5 bf be 3b 4a 9f 4d 99 a9 ba 7f 9d 95 6c 74 8c da b7 42 c7 85 e0 d3 bd e4 8e ca 4d fb 56 f6 ea 5a f6 b6 f6 9f f3 77 e9 37 5f 85 df 9d ff fb bb 96 8e e7 01 8d 3f b9 f3 73 16 f3 d4 7e 18 a7 d6 fb f9 ff 5d c7 97 a1 e3 ee bb 84 8e a9 59 2c 05 d7 fa d6 5e e6 f7 e4 df 87 46 8b e9 f6 55 5f 7f fd e5 af 7f ff d5 d4 85 ac Data Ascii: c$a{NXtLH5e`!Dh3#8dVmV=-\=:`#!.!uRjXS%?2~;-;JMltBMVZw7_?s~]Y,^FU_
2024-12-12 11:29:04 UTC	1390	IN	Data Raw: c2 43 a0 f0 9c cf 84 2c dc 6f 77 dd ff 5e 04 27 23 01 db 3b d0 22 fa fd ca c2 00 94 91 17 e4 5e bb e4 28 b3 f2 09 87 4b 75 14 8e e0 c2 6f 3a 13 0a 28 96 4a ee 0a 6a 2c 09 f3 2c c2 e9 23 6a 8c ec 09 a0 e8 96 87 84 d2 68 a5 cd ca f5 ec 0a 46 60 f9 be 7b e8 5e a6 f5 2e a5 46 6e c8 a6 db bc 01 50 4b 07 08 1d fb 12 3a a0 00 00 00 23 01 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 19 00 2d 00 5f 6c 6f 63 61 6c 65 73 2f 72 6f 2f 6d 65 73 73 61 67 65 73 2e 6a 73 6f 6e 55 54 05 00 01 ca 36 2a 67 0a 00 20 00 00 00 00 00 01 00 18 00 00 41 64 ae 95 2f db 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8d 52 c1 4e 1c 31 0c bd f3 15 d6 9c 8a 34 a0 65 7b 82 1b 82 55 4f 85 aa 2d 97 aa 17 6f c6 b3 58 ca 38 51 e2 00 5a c4 bf e3 99 Data Ascii: C,ow^'#;"^(Kuo:(Jj,,#jhF`{^.FnPK:#PK!-_locales/ro/messages.jsonUT6*g Ad/RN14e{UO-oX8QZ
2024-12-12 11:29:04 UTC	1390	IN	Data Raw: 0f 6e 3d 2c 91 9f b7 f2 c2 8f 9e 81 ed 64 91 89 5f c8 93 db ec d7 38 3e f4 ec 97 19 5a 11 ad f3 b8 82 28 3a 6c b3 ee 24 e1 50 fb 79 09 cf f1 ad 57 e9 76 70 aa 85 35 32 aa 0a 0f 41 0d 1c 63 cf 15 51 0d 8c 44 97 9c 43 b8 94 04 8f 60 5f 09 e2 4b c0 6e a2 3a 29 12 e1 86 4f 49 97 b9 92 11 e2 5a d6 16 fc 60 20 03 a5 d7 f5 68 06 5f 65 93 9a dd ad 65 97 51 8b ac 05 b4 69 a5 64 30 17 f8 1c 4a 1d 10 6c a0 02 36 20 1b 29 c2 cd 6a e6 f5 e9 55 66 60 81 a8 0e 0c 0c 22 4a e0 41 05 8c 7f 9c 57 46 cf 54 ff 32 7c 7d 9b 6e 4b 1e be a1 2b 8b 2c ea 96 fa 5c 18 5d 04 b1 51 7c 89 a2 45 6d 3a 0b 61 c3 6f a2 78 04 e6 19 c0 10 c1 b2 2f e8 63 ec 0d 6c f9 20 a0 26 d6 8b ea b0 75 64 be 5d fd c4 70 d9 3b b5 ed d4 f1 bc 8d 4d 4a b4 8e 05 bc 1a 18 57 05 34 4d 40 13 b4 28 e5 ea ff 64 31 Data Ascii: n=,d_8>Z(:l$PyWvp52AcQDC`_Kn:)OIZ` h_eeQid0Jl6 )jUf`"JAWFT2\|}nK+,\]Q\|Em:aox/cl &ud]p;MJW4M@(d1
2024-12-12 11:29:04 UTC	1390	IN	Data Raw: 80 ac 82 c5 04 63 89 63 38 bd 2a 36 1c e9 9a 44 2a 3c 4e 2d ee 92 46 8e 50 dc e3 94 bb f5 61 c2 1d cf 5c 48 24 42 49 6c 12 12 d7 49 d9 ae b5 78 32 3e ee bd 6d 14 36 10 04 42 78 75 49 e8 56 12 9a c0 f8 4e 5b 9e a8 18 48 07 60 fa c4 f3 b8 1c e9 66 42 8d 56 0a 4d 3a 20 57 32 60 3d 87 5b 12 2d 22 e5 44 56 25 e1 21 a6 58 0d e8 46 f5 04 83 06 0e 87 28 fb a4 f0 19 18 b8 02 88 01 7c 80 61 ef 0c 9c e0 24 d3 07 48 c9 09 3f e2 9c 5e e9 89 97 4b 26 3f f6 66 0d 22 cf 03 86 52 31 81 e4 3a 97 fa 54 dc fb b0 49 d9 ef a1 7d 1a 46 e5 77 f4 02 a7 fd a6 7b 35 4f fa 61 2c 0d 6e 07 7a 72 4d 94 18 5d f3 fe 4e 2c 30 9b 6d f6 54 60 d0 58 d4 81 d8 05 43 89 9b 2d 91 75 b1 84 72 e5 82 16 5a a8 d1 8f 71 28 22 a2 ed 69 03 7e 0f 3a 87 3c 26 69 4c 4d 0a 36 d7 c7 a7 16 96 fa 98 fd 47 dc Data Ascii: cc86D<N-FPa\H$BIlIx2>m6BxuIVN[H`fBVM: W2`=[-"DV%!XF(\|a$H?^K&?f"R1:TI}Fw{5Oa,nzrM]N,0mT`XC-urZq("i~:<&iLM6G
2024-12-12 11:29:04 UTC	1390	IN	Data Raw: 92 6f 30 19 61 42 16 3c c5 8e d8 b3 84 2e 10 d8 71 39 f8 5c 22 7b 60 27 ee 3a 3f 1a 26 6a f5 a8 f2 1f 13 ad 85 fc dd 51 24 58 d5 3c 25 19 9d fa 2b 81 d6 c7 4d 37 fd 9a e2 f2 53 ad 5f c1 c9 b9 41 f8 0f 77 84 84 39 d5 5c 7f 74 b0 dd bb 43 ac e6 be ce d5 bf df bb 77 82 1b a6 ff 9c 05 67 3a 77 fe 7a f2 5d 9a 09 4d 66 b5 8d f8 e6 d8 2d cb 4e 6d ee a3 82 48 7b c6 a8 5d b2 e8 52 97 3d e5 a5 b8 ef 36 ad cf 46 de f8 e7 8e 98 46 5f 0f 08 b5 d5 be 41 c5 77 eb e3 54 28 7a 31 07 87 c9 e3 1b f0 13 22 9f 73 e2 40 ce 5e e0 09 2d 54 01 dc 63 06 df 9b 0e c1 43 bf 5c bc 02 50 4b 07 08 c0 47 8a 9f 88 01 00 00 46 03 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 19 00 2d 00 5f 6c 6f 63 61 6c 65 73 2f 6b 6d 2f 6d 65 73 73 61 67 65 73 2e 6a Data Ascii: o0aB<.q9\"{`':?&jQ$X<%+M7S_Aw9\tCwg:wz]Mf-NmH{]R=6FF_AwT(z1"s@^-TcC\PKGFPK!-_locales/km/messages.j
2024-12-12 11:29:04 UTC	1390	IN	Data Raw: 46 69 27 57 e6 ee 9e df fa e6 7c 6c 22 ff dc fc cd 83 bf 84 75 53 df fb 95 fb e0 a6 5b e2 f7 c1 5f 87 cb 78 0d a9 ac a4 0c 68 8e 44 f1 68 52 0e 42 cf 48 31 70 61 e4 4c d1 69 c5 a7 46 2f 04 a6 71 7a 9a be 86 7e 9a df 4a 91 d1 b6 e2 f0 34 96 a4 11 21 a4 4d e9 67 b4 5d b3 aa 52 cd 51 3d 41 bb 66 f2 ab fd 2b c2 fc 18 cf 78 47 7c 50 e9 5f 0e f0 9b c4 43 6a 2a f2 42 35 42 84 04 d7 70 02 ab 0d b5 b1 89 32 98 e2 55 e6 4f d6 3f 1c 81 d7 4f df 01 50 4b 07 08 80 81 20 9b 32 02 00 00 f3 0a 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 19 00 2d 00 5f 6c 6f 63 61 6c 65 73 2f 73 6b 2f 6d 65 73 73 61 67 65 73 2e 6a 73 6f 6e 55 54 05 00 01 ca 36 2a 67 0a 00 20 00 00 00 00 00 01 00 18 00 00 41 64 ae 95 2f db 01 00 00 00 00 00 00 00 00 Data Ascii: Fi'W\|l"uS[_xhDhRBH1paLiF/qz~J4!Mg]RQ=Af+xG\|P_CjB5Bp2UO?OPK 2PK!-_locales/sk/messages.jsonUT6g Ad/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49766	162.159.61.3	443	7192	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:29:04 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-12 11:29:04 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-12-12 11:29:04 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 12 Dec 2024 11:29:04 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f0d5fe2ee0e42cc-EWR alt-svc: h3=":443"; ma=86400
2024-12-12 11:29:04 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 26 00 04 8e fb 28 63 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom&(c)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49767	162.159.61.3	443	7192	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:29:04 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-12 11:29:04 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-12-12 11:29:04 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 12 Dec 2024 11:29:04 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f0d5fe2edef432b-EWR alt-svc: h3=":443"; ma=86400
2024-12-12 11:29:04 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 02 00 04 8e fb 28 c3 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49768	162.159.61.3	443	7192	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:29:04 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-12 11:29:04 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-12-12 11:29:04 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 12 Dec 2024 11:29:04 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f0d5fe30d060f36-EWR alt-svc: h3=":443"; ma=86400
2024-12-12 11:29:04 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 00 e3 00 04 8e fb 20 63 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom c)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49808	3.33.186.135	443	7192	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:29:06 UTC	668	OUT	GET /favicon.ico HTTP/1.1 Host: www.docusign.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-12-12 11:29:07 UTC	407	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 7656 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 9662 Content-Type: image/vnd.microsoft.icon Date: Thu, 12 Dec 2024 11:29:07 GMT Etag: "84a1a7e7e8f932ecc95c7c3cbbc0e98a-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01JEXA2D3MPJ7EY0BR4SWD2KBN Connection: close
2024-12-12 11:29:07 UTC	779	IN	Data Raw: 00 00 01 00 01 00 30 30 00 00 01 00 20 00 a8 25 00 00 16 00 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %(0` $
2024-12-12 11:29:07 UTC	2372	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-12-12 11:29:07 UTC	538	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4d 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff bf 00 39 ff Data Ascii: LLLLLLLLLLLLLLLLLLLLLLM`LLLLLLLLL9
2024-12-12 11:29:07 UTC	4744	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff ff 00 4c ff 9f 00 30 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 33 33 a0 ff 52 52 ff ff 52 52 ff ff 52 52 ff ff 52 52 ff ef 54 54 ff 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 Data Ascii: LLLLLLLL033RRRRRRRRTT@
2024-12-12 11:29:07 UTC	1229	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Target ID:	0
Start time:	06:28:27
Start date:	12/12/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\setup (2).msi"
Imagebase:	0x7ff68a870000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	06:28:28
Start date:	12/12/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\msiexec.exe /V
Imagebase:	0x7ff68a870000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	06:28:31
Start date:	12/12/2024
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\syswow64\MsiExec.exe -Embedding DF750E06877FC987E1961B6363098C75
Imagebase:	0x520000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	06:28:31
Start date:	12/12/2024
Path:	C:\Windows\SysWOW64\icacls.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\." /SETINTEGRITYLEVEL (CI)(OI)HIGH
Imagebase:	0x8b0000
File size:	29'696 bytes
MD5 hash:	2E49585E4E08565F52090B144062F97E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	06:28:32
Start date:	12/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	06:28:32
Start date:	12/12/2024
Path:	C:\Windows\SysWOW64\expand.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files
Imagebase:	0x5f0000
File size:	53'248 bytes
MD5 hash:	544B0DBFF3F393BCE8BB9D815F532D51
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	06:28:32
Start date:	12/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	06:28:53
Start date:	12/12/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\cmd.exe" /c start msedge https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	06:28:54
Start date:	12/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	06:28:54
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	06:28:54
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1972,i,15460452474060400035,15271760892993525039,262144 /prefetch:3
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	06:29:03
Start date:	12/12/2024
Path:	C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\MW-49458ae7-03f9-4e64-9cbc-198772be53b6\files\setup.exe" /VERYSILENT /VERYSILENT
Imagebase:	0x140000
File size:	684'188'672 bytes
MD5 hash:	E5BAA8B4BBE30FE905CBE269739D7B31
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	06:28:55
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate https://www.docusign.com/sites/default/files/Signature_Appliance_Client_Guide_8.0.pdf
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	06:28:56
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2420,i,16787966548657019127,18376101955376312634,262144 /prefetch:3
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	06:29:00
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6492 --field-trial-handle=2420,i,16787966548657019127,18376101955376312634,262144 /prefetch:8
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	06:29:00
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6664 --field-trial-handle=2420,i,16787966548657019127,18376101955376312634,262144 /prefetch:8
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	06:29:56
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6064 --field-trial-handle=2420,i,16787966548657019127,18376101955376312634,262144 /prefetch:8
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	0.6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	5.9%
Total number of Nodes:	1412
Total number of Limit Nodes:	24

Executed Functions

Function 002AE166 Relevance: .0, Instructions: 29
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 464e9fcd0d044449a483600e33d6c1411a88c98722c99fb9e9be804d87bf1ca1
Instruction ID: 70c96c89a2cc2da0c09b178a9cd3acaf9fbf8017fc28952a2548706cc24384a7
Opcode Fuzzy Hash: 464e9fcd0d044449a483600e33d6c1411a88c98722c99fb9e9be804d87bf1ca1
Instruction Fuzzy Hash: 5FF01C72A212249BCF169A4C9805A59B3A8EB46B51F124096F545AB291CAB09D51CBD0

Function 002AB9A9 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 77
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

api-ms-, xrefs: 002ABA00
ext-ms-, xrefs: 002ABA14

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID: api-ms-$ext-ms-
API String ID: 0-537541572
Opcode ID: 5c1df9ab974d12ee6d5d3d590591878ce3b24ec359348315e3c87df3fcd4c0be
Instruction ID: e9ee5746015937c1f6d3c960732eaa7c7890da057320d90237381234d26ea77b
Opcode Fuzzy Hash: 5c1df9ab974d12ee6d5d3d590591878ce3b24ec359348315e3c87df3fcd4c0be
Instruction Fuzzy Hash: C221C631A25622ABCB338B64AC49B5A3798AF03760B110250ED06A7293DF70EE20C6D0

Function 0029F98E Relevance: 3.0, APIs: 2, Instructions: 38
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLastError.KERNEL32(002CB3C8,0000000C), ref: 0029F9A1
ExitThread.KERNEL32 ref: 0029F9A8

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: ErrorExitLastThread
String ID:
API String ID: 1611280651-0
Opcode ID: efd4c9f25d87b917ee9277b86edcc052f0ba8f5325c1039b61ada3759f37a629
Instruction ID: 4c64a250b40d36f09d597ee51b99342bb11a74a111207f18ac69b2f699e4d2f7
Opcode Fuzzy Hash: efd4c9f25d87b917ee9277b86edcc052f0ba8f5325c1039b61ada3759f37a629
Instruction Fuzzy Hash: 3FF08771A20300AFDF15AFB0D94AE6E7B74BF02701F200159F001972A2CF34AA61CFA2

Function 002ABA70 Relevance: 1.6, APIs: 1, Instructions: 57
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2b91c9c1c64ec328bf4492c8285a1cc219a1385fb7b51b16d053bd850298b80
Instruction ID: 0be4781ec0853d8faaf7d5c51295d2a3bff0b57a8746476765cb665efa954a04
Opcode Fuzzy Hash: c2b91c9c1c64ec328bf4492c8285a1cc219a1385fb7b51b16d053bd850298b80
Instruction Fuzzy Hash: D701B5376306229FAF27CE69FC4595A33A6FBC6330B254124F905CB556EF319811CA50

Function 002AACD1 Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,?,?,?,002AC98A,00000220,!-+,?,?,?,?,?,00000000,00000000,?,002B2D21), ref: 002AAD03

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: c37f7dc11e0c5068517233f8036e70155beb6474ed974e5c740279db3e313a52
Instruction ID: 7502d5d11db009ad87ecd7dddbfb495d10d31dcc2ea08ec0dd410110d6180399
Opcode Fuzzy Hash: c37f7dc11e0c5068517233f8036e70155beb6474ed974e5c740279db3e313a52
Instruction Fuzzy Hash: 59E0E53117072667EB312F659C09B5A764D9F477B1F240123FC4A96490DF50CC70C5A3

Non-executed Functions

Function 00142160 Relevance: 14.2, Strings: 11, Instructions: 432
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

4, xrefs: 00142715
i8pO, xrefs: 001422F6
3, xrefs: 0014223C
Ym, xrefs: 001424C2
4, xrefs: 00142680
4, xrefs: 0014271F
Ym, xrefs: 0014264E
4, xrefs: 001424B6
i8pO, xrefs: 001422EC
i8pO, xrefs: 001423D7
i8pO, xrefs: 001423FB

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID: 3$4$4$4$4$Ym$Ym$i8pO$i8pO$i8pO$i8pO
API String ID: 0-3379736927
Opcode ID: 7ceb071512fda89fe717dc965cee237e11ea5a32b650b20f8065511bdf532ced
Instruction ID: a9ea75703c96f8d2cd8a1bc06f7880fa8a52e47f1fe70362579d1373ca6261e9
Opcode Fuzzy Hash: 7ceb071512fda89fe717dc965cee237e11ea5a32b650b20f8065511bdf532ced
Instruction Fuzzy Hash: 85E12B3B6042018B9B2C8634A9E457932D29FE4764BF6421EF9675F7F0DB358CC64782

Function 001499D0 Relevance: 11.7, Strings: 9, Instructions: 434
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

_, xrefs: 00149E1B
*^S, xrefs: 00149A50
+^S, xrefs: 00149B36
_, xrefs: 00149E2F
_, xrefs: 00149B2B
+^S, xrefs: 00149E95
_, xrefs: 00149CE0
_, xrefs: 00149E90
+^S, xrefs: 00149E9F

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID: *^S$+^S$+^S$+^S$_$_$_$_$_
API String ID: 0-1123277000
Opcode ID: 7cfefee6692644c5de2451fd6c4888306e52d3f3978abd63977809c77b0d029c
Instruction ID: 559e385a9e8d458be016a47ae00aaa59a496f79db933bd3a87d1df9d5c2b03f7
Opcode Fuzzy Hash: 7cfefee6692644c5de2451fd6c4888306e52d3f3978abd63977809c77b0d029c
Instruction Fuzzy Hash: BEF16F75B00209CFCB18CF68D5909AEB7F2BF89320B254569E81AEB3A0D731ED41DB51

Function 00147D80 Relevance: 9.2, Strings: 7, Instructions: 407COMMON

Download Yara Rule

Strings

\M"P, xrefs: 00147FC3
\M"P, xrefs: 00148212
\M"P, xrefs: 001483AB
.pdata, xrefs: 00147F1C, 00147FDB
.rdata, xrefs: 00148077, 00148179
\M"P, xrefs: 00148236
[M"P, xrefs: 00147E0A

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID: .pdata$.rdata$[M"P$\M"P$\M"P$\M"P$\M"P
API String ID: 0-3159524405
Opcode ID: ace78eb0e7ae4a0c5628f9b5eedd1c5168117407d74ea292e263669a1d01ecb9
Instruction ID: 4f9067201d03818b0b35d739b0724b270b388a72eeec764e44657e45a2685c48
Opcode Fuzzy Hash: ace78eb0e7ae4a0c5628f9b5eedd1c5168117407d74ea292e263669a1d01ecb9
Instruction Fuzzy Hash: 77E1387160C6618BCB2D8A6495E463E7293ABD4324F698F59E447EF3F4DB20CC4587C2

Function 001428D0 Relevance: 7.6, APIs: 1, Strings: 3, Instructions: 619COMMON

Download Yara Rule

Strings

Of{I, xrefs: 00142BB2
Nf{I, xrefs: 001429F0
Of{I, xrefs: 00142A06

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID: Nf{I$Of{I$Of{I
API String ID: 0-3805604516
Opcode ID: b6992209e692a1b52febb20fc38d28f3fd4a2b3c90f4359e3629114e0a6b3a66
Instruction ID: b7731803347a573c0731e176471e37bed81bcc72199fd00acdd42baebe9d47b6
Opcode Fuzzy Hash: b6992209e692a1b52febb20fc38d28f3fd4a2b3c90f4359e3629114e0a6b3a66
Instruction Fuzzy Hash: 2132B175304B018F8728CF28D5D4A26B7E2BF893247654A2EF866C77B0D731EC869B41

Function 002A238A Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,00000000), ref: 002A2482
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 002A248C
UnhandledExceptionFilter.KERNEL32(?,?,?,?,?,?,00000000), ref: 002A2499

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: c5705518bd70177f29e0a0103152e0b0bedee15017b906e9d7a849b95037e7ad
Instruction ID: 256f5983e5dbbb18d775f1091fcc97e6df8bae453759d869f79628e52b1c791f
Opcode Fuzzy Hash: c5705518bd70177f29e0a0103152e0b0bedee15017b906e9d7a849b95037e7ad
Instruction Fuzzy Hash: F831C2749112299BCF21DF28D989B8CBBB8BF08310F5041EAE41CA6261EB749B958F44

Function 0029FB78 Relevance: 4.5, APIs: 3, Instructions: 20COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,0029FC30,?,?,?,?), ref: 0029FB9A
TerminateProcess.KERNEL32(00000000,?,0029FC30,?,?,?,?), ref: 0029FBA1
ExitProcess.KERNEL32 ref: 0029FBB3

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: bb30f344ea1b398cc51a83241afc1f2ee762dcff8e5a2f81f58987101b0079be
Instruction ID: 6f5c92b39269794b795fe580c0a090e9480750716141256bc3278c4658798ad4
Opcode Fuzzy Hash: bb30f344ea1b398cc51a83241afc1f2ee762dcff8e5a2f81f58987101b0079be
Instruction Fuzzy Hash: 86E0B632020249AFCFA66F54EE2DD583B79EF4874AF100424F815C6531CB35DD62CA91

Function 001508F0 Relevance: 4.4, Strings: 3, Instructions: 679COMMON

Download Yara Rule

Strings

8<8V, xrefs: 001511FC
8<8V, xrefs: 00150F7F
8<8V, xrefs: 00150C2B

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID: 8<8V$8<8V$8<8V
API String ID: 0-2944903877
Opcode ID: cf785a30931a6d5d7b6ccf51ee5e6260aade07de25cebddcf7e7c16bf7d11f3e
Instruction ID: 8c5ebdda9b9aba5b411efe991448015735a8d5a0adba9a003e9937923e9a1553
Opcode Fuzzy Hash: cf785a30931a6d5d7b6ccf51ee5e6260aade07de25cebddcf7e7c16bf7d11f3e
Instruction Fuzzy Hash: B5428075B00209CFCB19CFA8D8909ADB7F2AF8D315F24495AE825EB365C7319C49CB91

Function 00146610 Relevance: 4.0, Strings: 3, Instructions: 262COMMON

Download Yara Rule

Strings

K*=>, xrefs: 00146646
J*=>, xrefs: 001466F0
K*=>, xrefs: 00146776

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID: J*=>$K*=>$K*=>
API String ID: 0-1485442292
Opcode ID: ae3fec4b38412bd6578005a263de83438e0b451ee720656a99d5ab5f0f3bfa03
Instruction ID: 5c0a858f4c4c125728cf3c4c38bf4183ebe85c04560ef6fae094fe6199d8b25c
Opcode Fuzzy Hash: ae3fec4b38412bd6578005a263de83438e0b451ee720656a99d5ab5f0f3bfa03
Instruction Fuzzy Hash: CAA18E75B002058FCB08CF68D990AAEB7F2EF8A318F658569E815DB3A5D730DC45CB52

Function 0014C130 Relevance: 4.0, Strings: 3, Instructions: 257COMMON

Download Yara Rule

Strings

$, xrefs: 0014C2F2
B1a, xrefs: 0014C1BC
B1a, xrefs: 0014C3CC

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID: $$B1a$B1a
API String ID: 0-3437788943
Opcode ID: dc70ca726f02c7f2b107ef9d3dcbbc04d3e1854c8e9be97fc48007a3b86f18f4
Instruction ID: 10aec98b4800aaff9b1541c333b9875c262a6a1f18f702abf9a6dbbbdaa0eb5e
Opcode Fuzzy Hash: dc70ca726f02c7f2b107ef9d3dcbbc04d3e1854c8e9be97fc48007a3b86f18f4
Instruction Fuzzy Hash: E4810E3270A305DFC6A89E3C5AD843A72D29B94724B3F4526D4164F3B2DB72DC4687E2

Function 00156200 Relevance: 3.4, APIs: 2, Instructions: 367COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 00156295
_strlen.LIBCMT ref: 001563B8

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: _strlen
String ID:
API String ID: 4218353326-0
Opcode ID: 0e0d4924b57aac5430c625f1550c5e688e22ace563014fa96dd01a2a47109573
Instruction ID: 3c1aee9b2fa6678f7cd864acf415b8e9d700f0e0173733a21f142592c581bbc5
Opcode Fuzzy Hash: 0e0d4924b57aac5430c625f1550c5e688e22ace563014fa96dd01a2a47109573
Instruction Fuzzy Hash: 6DD14C76600145CFCB08CF68E9A06AE7BF6AB85321F694269DC359F2E1D731CC49CB90

Function 00148470 Relevance: 3.2, Strings: 2, Instructions: 716COMMON

Download Yara Rule

Strings

z]gT, xrefs: 00148572
z]gT, xrefs: 0014894B

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID: z]gT$z]gT
API String ID: 0-2259984170
Opcode ID: e1e7c7c25c54a9c2eccd383ab42476ce7dfe565143334f0ec3bf9980a31441eb
Instruction ID: 211dabdcee0a28c538030cac0caa91cce919f65204f09b029e7cb2ff303998fe
Opcode Fuzzy Hash: e1e7c7c25c54a9c2eccd383ab42476ce7dfe565143334f0ec3bf9980a31441eb
Instruction Fuzzy Hash: D942F779B00305CFCF18DF68D5D8AADB3E1EB58324B260129DA15AB3B1CB319C49CB55

Function 0014A3D0 Relevance: 2.8, Strings: 2, Instructions: 291COMMON

Download Yara Rule

Strings

!{3, xrefs: 0014A47D
!{3, xrefs: 0014A42A

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID: !{3$!{3
API String ID: 0-640198705
Opcode ID: b002d6ce992b4bea34a7ae4fe841dd218c4dec03f01a594103421f629d25fe55
Instruction ID: 4287dffe57c34bf6fdf05c8ee41bb4b0fc100e6cf1bdd60c82d6443f53496acb
Opcode Fuzzy Hash: b002d6ce992b4bea34a7ae4fe841dd218c4dec03f01a594103421f629d25fe55
Instruction Fuzzy Hash: A2B1C279B051158F8F1CCF5CD9949BDB7F3AF89310B6A4229E916A73A0C731AC42CB52

Function 0014FD20 Relevance: .9, Instructions: 861COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eacf779337f2bb66c3336391cb5917a0d29796f0ab08cdf45f6f94c178373577
Instruction ID: 0806dacba67a563561506f35710c05f49741d30f3d3055c4ef7a0881f4c4c70c
Opcode Fuzzy Hash: eacf779337f2bb66c3336391cb5917a0d29796f0ab08cdf45f6f94c178373577
Instruction Fuzzy Hash: B162A376E00118CFCF19CFA8D9909ADBBF2AF8D310B294159E855AB3A5D3319D0ACB51

Function 001555E0 Relevance: .8, Instructions: 795COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26f69ed1a039b4526343063c4ec48a766a5de0bb19ebea5ae184e8c69708ebc7
Instruction ID: 65df62e00e004c87839282a8b80ba929f22d41b138fce825eb1df12d7e190a17
Opcode Fuzzy Hash: 26f69ed1a039b4526343063c4ec48a766a5de0bb19ebea5ae184e8c69708ebc7
Instruction Fuzzy Hash: 7E629276B00619CFCF14CF68D5A09ADBBF3AF89310B654156EC25AB3A4C7319C4ACB91

Function 001522A0 Relevance: .7, Instructions: 714COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c8c946c7e60e85cbdb5252b58b3e40c76356e4c79e3f1f9b031c31a36f7e0cfc
Instruction ID: ee2d4528aad30326f57c2511020acc17094db61e6a4ede4bde1d7860679c28b7
Opcode Fuzzy Hash: c8c946c7e60e85cbdb5252b58b3e40c76356e4c79e3f1f9b031c31a36f7e0cfc
Instruction Fuzzy Hash: 5642C936304701CFCB28CF28D59466AB7D3AF9A351B29851DDC6B8B7A1D735E84ACB40

Function 0014CCE0 Relevance: .6, Instructions: 623COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4fb6323fead7b0900517f1f883f67fc807f03c575a0ed178d0378e96571fd5e1
Instruction ID: f6880b50831d91f121a4afca4065c0732e8977f7bd2c48031b835cc0148f6c1a
Opcode Fuzzy Hash: 4fb6323fead7b0900517f1f883f67fc807f03c575a0ed178d0378e96571fd5e1
Instruction Fuzzy Hash: 3732F372B01215CFCF18CF68E6905ADBBF3AB99350F2A456ADC45AB260D7319C46CBD0

Function 00152FA0 Relevance: .4, Instructions: 408COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b482d1b2fdb298425f3634651a9563a6cddad5a8eb92b65c51301deaf9cd43ad
Instruction ID: f6a4d6169795c87338cae36f3e2310c9a29e8be36a805106bc4b01a087a68505
Opcode Fuzzy Hash: b482d1b2fdb298425f3634651a9563a6cddad5a8eb92b65c51301deaf9cd43ad
Instruction Fuzzy Hash: A7E11336B04245DB8F1C8A68A4E44BD77A36FC5362B2A451EDC336F795CB318D49CB81

Function 00153900 Relevance: .3, Instructions: 323COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9aaca1e84b1724a9e9fcbf0f1c8620f688e83dd25f8a8549574cd030291b0da4
Instruction ID: 632e5714b3cac1c3d93b5e2368cd0a9ce098f831b7ed828a144bd2bdf4ff5c36
Opcode Fuzzy Hash: 9aaca1e84b1724a9e9fcbf0f1c8620f688e83dd25f8a8549574cd030291b0da4
Instruction Fuzzy Hash: 78C11976A04255CFCF14CF68D5946AEB7F1AF893A1F15415AEC72AB390C3358E09CB90

Function 0014D628 Relevance: .3, Instructions: 323COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fcd61faabeeeb55805e8d82d5125c6e9bb6e8180bf3587b9dd4316062ff57a59
Instruction ID: 2a221b778b0ee74bdda1ed166c5eab6a96cdecf96ed0f877be2634f810988e1c
Opcode Fuzzy Hash: fcd61faabeeeb55805e8d82d5125c6e9bb6e8180bf3587b9dd4316062ff57a59
Instruction Fuzzy Hash: D3C102B670404A8BCF1CCA78B9D466E77F29F853A0B2B4626D416DB2F4D720CC45DB91

Function 00156BA0 Relevance: .3, Instructions: 309COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 173967b91d8a919b81fcbf0594a123468736a3a6d5d5d9dc99a931bec636764e
Instruction ID: f944d75e553052d39e2ffd5cadf0c5e1fe1d985e6b550667a54cf4b675366c86
Opcode Fuzzy Hash: 173967b91d8a919b81fcbf0594a123468736a3a6d5d5d9dc99a931bec636764e
Instruction Fuzzy Hash: 71B12A7AB01105CFCF18CF68E9A46AE77F2AB85321F694569DC619B2A5C7318C0DCBD0

Function 0014E6B0 Relevance: .2, Instructions: 243COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b75bab4185c1ede4f48b8d4f597a5ac34160360f6168d4e7b77f751319b25782
Instruction ID: 5bbbd73f3242e686f771431e6bb09cf2b49f75d9bf84550cbe7c460d807eb5d7
Opcode Fuzzy Hash: b75bab4185c1ede4f48b8d4f597a5ac34160360f6168d4e7b77f751319b25782
Instruction Fuzzy Hash: 7881E9693092558B8B18CA3899D896A7BD37BD5335F358E2AE466CB3F1C730CC498781

Function 00153610 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48a1d29a3077f9a6fc548b0418d0f426d20992119c10544209212e1dd6203970
Instruction ID: a9f890df25f006fd00d20e7c8746ea289b1a97e59084df90bbd8d7f784644dfb
Opcode Fuzzy Hash: 48a1d29a3077f9a6fc548b0418d0f426d20992119c10544209212e1dd6203970
Instruction Fuzzy Hash: 1281E571F05155CF8F18CE288A909AEB7E3AFC9291B298555EC35DB3A4C730CE09DB90

Function 002AE135 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8002cddf0912a3c4a4c14f9dabde380401963fb4ceedbd51d2a293b40520d5e8
Instruction ID: a581fc2b25705db4159dcb366f7e6ba35e3ff4553ff13746f98f348eeb714d2b
Opcode Fuzzy Hash: 8002cddf0912a3c4a4c14f9dabde380401963fb4ceedbd51d2a293b40520d5e8
Instruction Fuzzy Hash: 32E0EC72A21238EBCB15DF9CC944D8AF3ECEB46B54B164496F505D3211CA74DE11DBD0

Function 002AF104 Relevance: 24.6, APIs: 13, Strings: 1, Instructions: 113
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___free_lconv_mon.LIBCMT ref: 002AF148

Part of subcall function 002AE560: _free.LIBCMT ref: 002AE57D
Part of subcall function 002AE560: _free.LIBCMT ref: 002AE58F
Part of subcall function 002AE560: _free.LIBCMT ref: 002AE5A1
Part of subcall function 002AE560: _free.LIBCMT ref: 002AE5B3
Part of subcall function 002AE560: _free.LIBCMT ref: 002AE5C5
Part of subcall function 002AE560: _free.LIBCMT ref: 002AE5D7
Part of subcall function 002AE560: _free.LIBCMT ref: 002AE5E9
Part of subcall function 002AE560: _free.LIBCMT ref: 002AE5FB
Part of subcall function 002AE560: _free.LIBCMT ref: 002AE60D
Part of subcall function 002AE560: _free.LIBCMT ref: 002AE61F
Part of subcall function 002AE560: _free.LIBCMT ref: 002AE631
Part of subcall function 002AE560: _free.LIBCMT ref: 002AE643
Part of subcall function 002AE560: _free.LIBCMT ref: 002AE655

_free.LIBCMT ref: 002AF13D

Part of subcall function 002AAC97: HeapFree.KERNEL32(00000000,00000000,?,002A1AFB), ref: 002AACAD
Part of subcall function 002AAC97: GetLastError.KERNEL32(?,?,002A1AFB), ref: 002AACBF

_free.LIBCMT ref: 002AF15F
_free.LIBCMT ref: 002AF174
_free.LIBCMT ref: 002AF17F
_free.LIBCMT ref: 002AF1A1
_free.LIBCMT ref: 002AF1B4
_free.LIBCMT ref: 002AF1C2
_free.LIBCMT ref: 002AF1CD
_free.LIBCMT ref: 002AF205
_free.LIBCMT ref: 002AF20C
_free.LIBCMT ref: 002AF229
_free.LIBCMT ref: 002AF241

Strings

`,, xrefs: 002AF11A

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID: `,
API String ID: 161543041-2092815365
Opcode ID: 5750effc5bb1d3463a25a21ed3cc7d2be5f9585f4779361dff9fa858c7084be6
Instruction ID: 3dcdf3f7c4e8b1c5bed734289e15f7fd4006c45d7bd9430e271d155970152d9a
Opcode Fuzzy Hash: 5750effc5bb1d3463a25a21ed3cc7d2be5f9585f4779361dff9fa858c7084be6
Instruction Fuzzy Hash: 64316D71620302DFEB71AEB8DA45B5677E9BF02320F10442AE459D7191DF38EDA0CB21

Function 00154730 Relevance: 17.8, APIs: 4, Strings: 6, Instructions: 263
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

QFi, xrefs: 001549A7
QFi, xrefs: 00154817
QFi, xrefs: 00154A8A
QFi, xrefs: 001548FC
QFi, xrefs: 0015486B
QFi, xrefs: 001549FB

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID: QFi$QFi$QFi$QFi$QFi$QFi
API String ID: 0-1870805405
Opcode ID: 6e6323873ba43ced00cdc27f0b8e634ac00ca5c217a6442265a17eeae47a3810
Instruction ID: 33e2c0b92803822d644b148ae558d7af176bc7f438ae582d2a3159792d575b99
Opcode Fuzzy Hash: 6e6323873ba43ced00cdc27f0b8e634ac00ca5c217a6442265a17eeae47a3810
Instruction Fuzzy Hash: B4A1D275204242DFC704CF28A884A5ABBE3BBC5359F29C96DEC698B251D731DC5DCB82

Function 00156730 Relevance: 14.1, APIs: 2, Strings: 6, Instructions: 112
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 001567C6

Strings

`@Q", xrefs: 00156780
EQ[, xrefs: 00156890
a@Q", xrefs: 0015678B
EQ[, xrefs: 00156873
a@Q", xrefs: 0015683D
EQ[, xrefs: 001567A1

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: EQ[$EQ[$EQ[$`@Q"$a@Q"$a@Q"
API String ID: 4194217158-2120442390
Opcode ID: e03de09e9244373d0e5ecc81d105fb0d1664e6c6b2803b364b4a5f0ae2ef753d
Instruction ID: ea04536ae53c17fc1e1ade156602aa7244c5b7eceae2d4e3eddbef9813e03517
Opcode Fuzzy Hash: e03de09e9244373d0e5ecc81d105fb0d1664e6c6b2803b364b4a5f0ae2ef753d
Instruction Fuzzy Hash: 244138B6E04205CFCF148B689C955BE7BE1AF86355F19451ADC21DB3A1C730CD498BD1

Function 002A9D14 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 303
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

type_info::operator==.LIBVCRUNTIME ref: 002A9E33
CatchIt.LIBVCRUNTIME ref: 002A9F92
_UnwindNestedFrames.LIBCMT ref: 002AA093
CallUnexpected.LIBVCRUNTIME ref: 002AA0AE

Strings

csm, xrefs: 002A9E6A
csm, xrefs: 002A9DBE
csm, xrefs: 002A9D51

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: CallCatchFramesNestedUnexpectedUnwindtype_info::operator==
String ID: csm$csm$csm
API String ID: 2332921423-393685449
Opcode ID: 88333dbfc4b7eeed051ee4c4b2b07eb0396d70e5dee40e60c0628d7838d92d24
Instruction ID: 0399151c116de9e75da9fad94ef004f30f5210f11dcf5c054c3134020ff87c6f
Opcode Fuzzy Hash: 88333dbfc4b7eeed051ee4c4b2b07eb0396d70e5dee40e60c0628d7838d92d24
Instruction Fuzzy Hash: 09B17F3182021AEFCF15DFA5C9819AEB7B5FF16310F14419AE9146B202DB31DDA1CF92

Function 0014BAD0 Relevance: 10.7, APIs: 2, Strings: 4, Instructions: 167
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 0014BB5D

Strings

i-*, xrefs: 0014BC41
i-*, xrefs: 0014BCE5
i-*, xrefs: 0014BB49
i-*, xrefs: 0014BCD6

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: i-*$i-*$i-*$i-*
API String ID: 4194217158-1188149328
Opcode ID: 732706ddc868ef3d3d5f5be4da65ae5d34b79bafeb01fef301cdffc8a7e74ccf
Instruction ID: 2c5bba3a27780a839e14592d04e6fd3e094d3a06896eac1851a6626ce7f220ce
Opcode Fuzzy Hash: 732706ddc868ef3d3d5f5be4da65ae5d34b79bafeb01fef301cdffc8a7e74ccf
Instruction Fuzzy Hash: EB5136B2B0854A8FCF188E38ACE596E77E2AF88310B584629E816C72B1C735DC45CB41

Function 002AC8AD Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 151
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_free.LIBCMT ref: 002AC90A

Strings

x,, xrefs: 002AC901
x,, xrefs: 002AC9ED
!-+, xrefs: 002AC8BE, 002AC97F

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: _free
String ID: !-+$x,$x,
API String ID: 269201875-4126816288
Opcode ID: 4e2909719ddd6aabaedfa412b7ff9d420dccf8a042d2153a30947925c98a4a36
Instruction ID: aba218e03da5baa0d162ee984beb899212bff6a1eccdf0394e88c30cb5b27069
Opcode Fuzzy Hash: 4e2909719ddd6aabaedfa412b7ff9d420dccf8a042d2153a30947925c98a4a36
Instruction Fuzzy Hash: 1851AF7292031AAFCB11DF58C841AAEB7B5FF06320F25015AF914AB291DF31AD21CF91

Function 0029BBD0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 130COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 0029BC07
___except_validate_context_record.LIBVCRUNTIME ref: 0029BC0F
_ValidateLocalCookies.LIBCMT ref: 0029BC98
__IsNonwritableInCurrentImage.LIBCMT ref: 0029BCC3
_ValidateLocalCookies.LIBCMT ref: 0029BD18

Strings

csm, xrefs: 0029BCAD

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: f78fa9ffbbf73be1f1364f5cb340057283dfabfeff9ac48547c53199f476bc55
Instruction ID: 7dcf0d2597ffb6868e5368408b5c51237175b915989095862cbe9e8911460cbe
Opcode Fuzzy Hash: f78fa9ffbbf73be1f1364f5cb340057283dfabfeff9ac48547c53199f476bc55
Instruction Fuzzy Hash: 7941E734A20219EFCF11DF68D994A9E7BB1BF45324F14815AE8189B392DB31DE21CF91

Function 00154B20 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 107COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00154BB7

Strings

QFi, xrefs: 00154B97
QFi, xrefs: 00154C63
QFi, xrefs: 00154C77
QFi, xrefs: 00154BE4

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: ___std_exception_copy
String ID: QFi$QFi$QFi$QFi
API String ID: 2659868963-2665294592
Opcode ID: 844d91fb64fbbb2a4d2b50d45cc2ca1940f78bbc6835bec5ea88cc1c0e418f53
Instruction ID: 3f4882677d59aeb48d4c063fc0f376aecd7856272dc2b0a375a256480d8816e9
Opcode Fuzzy Hash: 844d91fb64fbbb2a4d2b50d45cc2ca1940f78bbc6835bec5ea88cc1c0e418f53
Instruction Fuzzy Hash: 1D4139766142019FC7108F18A8C4A4BBBE6FB81355F29C56EECA88B261D331DC5DCB82

Function 002AE950 Relevance: 10.6, APIs: 7, Instructions: 65COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 002AECB0: _free.LIBCMT ref: 002AECD5

_free.LIBCMT ref: 002AE99E

Part of subcall function 002AAC97: HeapFree.KERNEL32(00000000,00000000,?,002A1AFB), ref: 002AACAD
Part of subcall function 002AAC97: GetLastError.KERNEL32(?,?,002A1AFB), ref: 002AACBF

_free.LIBCMT ref: 002AE9A9
_free.LIBCMT ref: 002AE9B4
_free.LIBCMT ref: 002AEA08
_free.LIBCMT ref: 002AEA13
_free.LIBCMT ref: 002AEA1E
_free.LIBCMT ref: 002AEA29

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 10f89baa2e0e33ddf7736a6c1844a4c53b43da7e62d178f93e44d7a4bdad20d8
Instruction ID: 2cdd131bb9c3f8bac5ca66c288b383a5d45dcf3130efa29e893d155a2d4806ed
Opcode Fuzzy Hash: 10f89baa2e0e33ddf7736a6c1844a4c53b43da7e62d178f93e44d7a4bdad20d8
Instruction Fuzzy Hash: 2E116D31561B04FBE921BBB0CC07FCB7B9EAF02720F418C16B29966092DF25B5258A51

Function 002AAE98 Relevance: 9.1, APIs: 6, Instructions: 128COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,0029F9B3,002CB3C8,0000000C), ref: 002AAE9D
_free.LIBCMT ref: 002AAEFA
_free.LIBCMT ref: 002AAF30
SetLastError.KERNEL32(00000000,00000006,000000FF,?,?,0029F9B3,002CB3C8,0000000C), ref: 002AAF3B
_free.LIBCMT ref: 002AAFA5
_free.LIBCMT ref: 002AAFD9

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: _free$ErrorLast
String ID:
API String ID: 3291180501-0
Opcode ID: 496250b775ee46835ae392228deef9095a38068f1a114e0240e69427fd7706ab
Instruction ID: 3a4e0af734cd2203f3cc473cbeb6aaa5f9c5ff19ab3dd4735228d7d3bce86906
Opcode Fuzzy Hash: 496250b775ee46835ae392228deef9095a38068f1a114e0240e69427fd7706ab
Instruction Fuzzy Hash: 3A3128716345122FDB273A746C4AE2F2209AF43770B250726F524D75D3DF228C31D9A2

Function 002A944D Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,002A9444,002A9C26,?,?,?,?,0029B6BD,?,?,?,?,?,00000000,00000000), ref: 002A945B
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 002A9469
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 002A9482
SetLastError.KERNEL32(00000000,?,002A9444,002A9C26,?,?,?,?,0029B6BD,?,?,?,?,?,00000000,00000000), ref: 002A94D4

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: d9457695b457093ec2da9087195b074e376606aa149d1a164dff7cfc11f0b5f1
Instruction ID: c6e0e54bc9a1b3331b15939ad12db05259bddcbd0f6f7800d0e9c47ecc359ade
Opcode Fuzzy Hash: d9457695b457093ec2da9087195b074e376606aa149d1a164dff7cfc11f0b5f1
Instruction Fuzzy Hash: 3D01FC32139B225FDB242BBABC8EE572754EB067B4720022AF514851F0FF914D629550

Function 00154CB0 Relevance: 8.9, APIs: 2, Strings: 3, Instructions: 108COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00154D47

Strings

QFi, xrefs: 00154E01
QFi, xrefs: 00154D27
QFi, xrefs: 00154D74

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: ___std_exception_copy
String ID: QFi$QFi$QFi
API String ID: 2659868963-1574997288
Opcode ID: 6bfc363259705acb4bb36fa5118737737e43609d7c3dfe3ab46e86cd8bdc4833
Instruction ID: d12023bd959b459ad9b7999c917ee8f4101278cd696bf30f029d6ad7baf721f2
Opcode Fuzzy Hash: 6bfc363259705acb4bb36fa5118737737e43609d7c3dfe3ab46e86cd8bdc4833
Instruction Fuzzy Hash: 684128762042019FC3148F28A8C495ABBE2EFD1365F25C62DE8698B251D735DC5DCB81

Function 0029FB25 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 30libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,0029FBAF,?,?,0029FC30,?,?,?), ref: 0029FB3A
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 0029FB4D
FreeLibrary.KERNEL32(00000000,?,?,0029FBAF,?,?,0029FC30,?,?,?), ref: 0029FB70

Strings

mscoree.dll, xrefs: 0029FB33
CorExitProcess, xrefs: 0029FB45

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 5a51d706dda01dc74ccd472c845a4afe628114b0a1d88727d9330d58cbe5938b
Instruction ID: 24ef88ede241a4b12ac106579da20390291b6fcb0d00464f6ca7a16b89c2a98e
Opcode Fuzzy Hash: 5a51d706dda01dc74ccd472c845a4afe628114b0a1d88727d9330d58cbe5938b
Instruction Fuzzy Hash: 27F08C31910219FBDB629F60ED1EF9D7F79EB0476AF100164E800E20A0CB708F10DAA0

Function 002AE86C Relevance: 7.5, APIs: 5, Instructions: 40COMMONLIBRARYCODE

Download Yara Rule

APIs

_free.LIBCMT ref: 002AE884

Part of subcall function 002AAC97: HeapFree.KERNEL32(00000000,00000000,?,002A1AFB), ref: 002AACAD
Part of subcall function 002AAC97: GetLastError.KERNEL32(?,?,002A1AFB), ref: 002AACBF

_free.LIBCMT ref: 002AE896
_free.LIBCMT ref: 002AE8A8
_free.LIBCMT ref: 002AE8BA
_free.LIBCMT ref: 002AE8CC

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 343f2f9e6f20be4c7cb9450578496f5e3ae146adeea296e3fda5737b8b26f643
Instruction ID: e94da52aed778f9f82b8a459873f7809883554db9166d7444059cb8d41029d3d
Opcode Fuzzy Hash: 343f2f9e6f20be4c7cb9450578496f5e3ae146adeea296e3fda5737b8b26f643
Instruction Fuzzy Hash: 08F04F72525350AB9A21EF68F5C6D0A7BEABE023203560816F018D7510CF38FCA0CA55

Function 00154FB0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 139COMMON

Download Yara Rule

Strings

iostream stream error, xrefs: 0015502E
vO~7, xrefs: 00154FE2
vO~7, xrefs: 00155062

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID: iostream stream error$vO~7$vO~7
API String ID: 0-4269126082
Opcode ID: f1e800ecc96ee8ef73c146f71d0392bcacf0b6ff98a08edd78324a6837c6266e
Instruction ID: 63eb5fd16387b0a78d6b0f7d5127112e5c60fc2c49a6243304aedce07f555cf3
Opcode Fuzzy Hash: f1e800ecc96ee8ef73c146f71d0392bcacf0b6ff98a08edd78324a6837c6266e
Instruction Fuzzy Hash: F0414D71204600CFD7144B28A87472B7AE3ABC0365F55891DF8B68F295D331DC4DCB92

Function 002AA139 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,00000000,00000000,?,?,?,?,?,?,002AA03F,?,?,00000000,00000000,00000000,?), ref: 002AA15E
CatchIt.LIBVCRUNTIME ref: 002AA244

Strings

MOC, xrefs: 002AA170
RCC, xrefs: 002AA178

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: CatchEncodePointer
String ID: MOC$RCC
API String ID: 1435073870-2084237596
Opcode ID: ad93e3523b6fa53eb07c55e714379b8fc51c07220b9afac070271d708ededd1c
Instruction ID: 18f64faf2d21638896bc1f48f0ecb40b531cd688c138526af0a65bca2f742973
Opcode Fuzzy Hash: ad93e3523b6fa53eb07c55e714379b8fc51c07220b9afac070271d708ededd1c
Instruction Fuzzy Hash: A041487191020AAFDF16DF98D981AAEBBB5FF49300F148099F90867211DB369A60DF52

Function 002B56AF Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,00000000,00000800,?,002B574B,?,?,00000000,?,?,?,002B5609,00000002,FlsGetValue,002BF214,002BF21C), ref: 002B56BC
GetLastError.KERNEL32(?,002B574B,?,?,00000000,?,?,?,002B5609,00000002,FlsGetValue,002BF214,002BF21C,?,?,002A946E), ref: 002B56C6
LoadLibraryExW.KERNEL32(?,00000000,00000000), ref: 002B56EE

Strings

api-ms-, xrefs: 002B56D3

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 80359212436d089f5f3e40fd7be77f8922a5edd5cafaabde36972e4e4ae87cd8
Instruction ID: 9ee18e6de77224e281d547349f22137abb2e55d2beec243d7dab0b3692d1c4df
Opcode Fuzzy Hash: 80359212436d089f5f3e40fd7be77f8922a5edd5cafaabde36972e4e4ae87cd8
Instruction Fuzzy Hash: E2E09A30A90716BBEA301F61EC0AF593B5D9B11B90F504060FA0DEC4A1DBB1E9619A98

Function 002A9A3B Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 002A9B02
___AdjustPointer.LIBCMT ref: 002A9B25
___AdjustPointer.LIBCMT ref: 002A9BC1

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 593ead1e47b147b0f3f6a27fee3928609005a450af7aa0da3d958b166072dbb3
Instruction ID: a29c37333c2ac031bd6daddb2b23be47d0ce0f303a41c279e4f3c5f974dc5f2c
Opcode Fuzzy Hash: 593ead1e47b147b0f3f6a27fee3928609005a450af7aa0da3d958b166072dbb3
Instruction Fuzzy Hash: 6451B372521206DFDB29CF56E441B7AB3A8FF46714F14492EE90296691DF31ECE0CBA0

Function 002AAFEF Relevance: 6.1, APIs: 4, Instructions: 69COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,002A1C3C,002AACBD,?,?,002A1AFB), ref: 002AAFF4
_free.LIBCMT ref: 002AB051
_free.LIBCMT ref: 002AB087
SetLastError.KERNEL32(00000000,00000006,000000FF,?,?,002A1C3C,002AACBD,?,?,002A1AFB), ref: 002AB092

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: ErrorLast_free
String ID:
API String ID: 2283115069-0
Opcode ID: 4cf23cabc69fc130d0c08221a6d5c777b96e9ed97ebd9623577573f1b5ecbfd5
Instruction ID: d450ef708263673af65b06f82b610fbc4170c72983e194b18506772e06ed477b
Opcode Fuzzy Hash: 4cf23cabc69fc130d0c08221a6d5c777b96e9ed97ebd9623577573f1b5ecbfd5
Instruction Fuzzy Hash: C011A5322306416BDB133A757C8AE2B265AEBC37B4B250625F135931D3DF618C35E960

Function 002A99A4 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

___except_validate_context_record.LIBVCRUNTIME ref: 002A9C1B

Strings

csm, xrefs: 002A9C3D
csm, xrefs: 002A9CAE

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID: ___except_validate_context_record
String ID: csm$csm
API String ID: 3493665558-3733052814
Opcode ID: ae56368ea68c5c62259581b67135c0b958bd7545d624a5318e8c3a79ce56481b
Instruction ID: 49a84bbf63c76785932fb5c7ac282fa751ee0b28a02509d74f9fd4da631d2932
Opcode Fuzzy Hash: ae56368ea68c5c62259581b67135c0b958bd7545d624a5318e8c3a79ce56481b
Instruction Fuzzy Hash: 0831C632420615AFCF269F66C844A6A7BA7FF4E725B18815BFC444A112CB32CCF1DB81

Function 002AC7D7 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

GetOEMCP.KERNEL32(00000000,002AC968,002B2D21,00000000,00000000,00000000,00000000,?,002B2D21), ref: 002AC802
GetACP.KERNEL32(00000000,002AC968,002B2D21,00000000,00000000,00000000,00000000,?,002B2D21), ref: 002AC819

Strings

!-+, xrefs: 002AC826

Memory Dump Source

Source File: 0000000E.00000002.3334517324.0000000000141000.00000020.00000001.01000000.00000008.sdmp, Offset: 00140000, based on PE: true

Associated: 0000000E.00000002.3334452139.0000000000140000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334890408.00000000002BA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3334981141.00000000002CC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335045258.00000000002D8000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.00000000002DD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.3335163063.0000000000359000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_140000_setup.jbxd

Similarity

API ID:
String ID: !-+
API String ID: 0-1247303274
Opcode ID: 2cb672f5e399f5c5ae8194a2844b4d3cc9e5c65414fc628231e60cab34bf3e20
Instruction ID: 322102654b959e5d427c327a6269c86d9aac52fb8c9934974aee8b0adba4ff6f
Opcode Fuzzy Hash: 2cb672f5e399f5c5ae8194a2844b4d3cc9e5c65414fc628231e60cab34bf3e20
Instruction Fuzzy Hash: 86F06D30C241408FDB25EF68E84C7A87BB0BB01339F300385F4258A2E9DBB59D95CB40

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the binaries used by services. Adversaries may use flaws in the permissions of Windows services to replace the binary that is executed upon service start. These service processes may automatically execute specific binaries as part of their functionality or to perform other actions. If the permissions on the file system directory containing a target binary, or permissions on the binary itself are improperly set, then the target binary may be overwritten with another binary using user-level permissions and executed by the original process. If the original process and thread are running under a higher permissions level, then the replaced binary will also execute under higher-level permissions, which could include SYSTEM.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Process: Process Creation, Service: Service Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report setup (2).msi

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\1256298f-c2eb-4b3f-99f5-54ae6a5ee8e9.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\149ca973-31a4-469e-8b13-f15a2e1744b4.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\5036a7eb-293e-4f4c-bde1-4160c6de2dfe.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\506a7ffd-90a9-48fc-9c5f-2d52c8b964a8.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\f43dbdb3-c2b6-4a76-9e25-a21e0ae7bb33.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma (copy)

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-675AC8F7-768.pma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\07adbf39-6430-48fa-82b4-fa4ca5953fc4.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\0839f117-4d9c-4ff7-b0ae-a7775c85df83.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\4d0ad9c2-0f0b-4f58-ae21-b9bd17262126.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\6ae045ac-d311-4045-ae0f-4a09997abb05.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\71a9bbd9-f53f-463a-9f2e-bfa033e25f03.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\83a230ef-8915-45ae-b83d-c00b0a47e678.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000001.dbtmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000003.log

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\CURRENT (copy)

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\LOG

Windows Analysis Report
setup (2).msi