Edit tour

Windows Analysis Report
56ff7c.msi

Overview

General Information

Sample name:	56ff7c.msi
Analysis ID:	1573628
MD5:	dc1dacc4a53407aebffc38ef512f52e7
SHA1:	737e0c4312552da152f009bdce0f9048e368fee1
SHA256:	60f172403738997a3e49ba5b7b247854bc45b42db5895c47d43b0b0ed86588c1
Tags:	aikmouciiqgecoqi-xyzmsiuser-JAMESWT_MHT
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Maps a DLL or memory area into another process

Performs DNS queries to domains with low reputation

Tries to resolve many domain names, but no domain seems valid

Checks for available system drives (often done to infect USB drives)

Connects to many different domains

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Detected potential crypto function

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Executes massive DNS lookups (> 100)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

IP address seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Suspicious MsiExec Embedding Parent

Uses a known web browser user agent for HTTP communication

Uses cacls to modify the permissions of files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

msiexec.exe (PID: 6356 cmdline: "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\56ff7c.msi" MD5: E5DA170027542E25EDE42FC54C929077)

msiexec.exe (PID: 6568 cmdline: C:\Windows\system32\msiexec.exe /V MD5: E5DA170027542E25EDE42FC54C929077)

msiexec.exe (PID: 6732 cmdline: C:\Windows\syswow64\MsiExec.exe -Embedding E03893F7B7963782D846F8C5ED735E6C MD5: 9D09DC1EDA745A5F87553048E57620CF)

icacls.exe (PID: 6888 cmdline: "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\." /SETINTEGRITYLEVEL (CI)(OI)HIGH MD5: 2E49585E4E08565F52090B144062F97E)

conhost.exe (PID: 6924 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

expand.exe (PID: 6992 cmdline: "C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files MD5: 544B0DBFF3F393BCE8BB9D815F532D51)

conhost.exe (PID: 7008 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 2084 cmdline: "C:\Windows\System32\cmd.exe" /c start msedge https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 4944 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

msedge.exe (PID: 4124 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 888 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=2088,i,17776723198320850394,9006600051924449842,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

install86.exe (PID: 2024 cmdline: "C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe" /VERYSILENT /VERYSILENT MD5: 07638426F75532B5D8E82A85D7DA7716)

msedge.exe (PID: 3588 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 7008 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 7760 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6404 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 7772 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6544 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8000 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-GB --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=7184 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:6 MD5: 69222B8101B0601CC6663F8381E7E00F)

identity_helper.exe (PID: 8148 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7504 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8 MD5: 76C58E5BABFE4ACF0308AA646FC0F416)

identity_helper.exe (PID: 8168 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7504 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8 MD5: 76C58E5BABFE4ACF0308AA646FC0F416)

msedge.exe (PID: 8944 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6432 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8152 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8248 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=2116,i,4999531332581732132,5899536460662317104,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8388 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8596 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2044,i,11800589099561053754,12146886287635931717,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

cleanup

Sigma Signatures

Sigma detected: Suspicious MsiExec Embedding Parent

Source: Process started

Author: frack113: Data: Command: "C:\Windows\System32\cmd.exe" /c start msedge https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf, CommandLine: "C:\Windows\System32\cmd.exe" /c start msedge https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\cmd.exe, NewProcessName: C:\Windows\SysWOW64\cmd.exe, OriginalFileName: C:\Windows\SysWOW64\cmd.exe, ParentCommandLine: C:\Windows\syswow64\MsiExec.exe -Embedding E03893F7B7963782D846F8C5ED735E6C, ParentImage: C:\Windows\SysWOW64\msiexec.exe, ParentProcessId: 6732, ParentProcessName: msiexec.exe, ProcessCommandLine: "C:\Windows\System32\cmd.exe" /c start msedge https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf, ProcessId: 2084, ProcessName: cmd.exe

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\f4ab6fda9a2e4611ba0200371596cdb0$dpx$.tmp\7cf468e1c0af6e4fbb9267df15a06e7a.tmp	ReversingLabs: Detection: 31%
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe (copy)	ReversingLabs: Detection: 31%

Multi AV Scanner detection for submitted file

Source: 56ff7c.msi

ReversingLabs: Detection: 25%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Source:

Binary string: C:\ss2\Projects\MsiWrapper\MsiCustomActions\Release\MsiCustomActions.pdb source: 56ff7c.msi, 3ecd54.msi.1.dr, MSICE5E.tmp.1.dr

Source: C:\Windows\System32\msiexec.exe	File opened: z:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: x:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: v:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: t:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: r:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: p:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: n:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: l:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: j:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: h:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: f:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: b:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: y:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: w:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: u:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: s:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: q:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: o:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: m:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: k:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: i:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: g:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: e:	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	File opened: c:
Source: C:\Windows\System32\msiexec.exe	File opened: a:	Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\	Jump to behavior

Networking

Performs DNS queries to domains with low reputation

Source:	DNS query: yqceweqmaumwwywy.xyz
Source:	DNS query: eqmycgagykgkqwsu.xyz
Source:	DNS query: seuuicaewuoaumes.xyz
Source:	DNS query: aomaeyokqgsuomii.xyz
Source:	DNS query: waqucgoeeeeymeii.xyz
Source:	DNS query: oqacqgmiaaewmmey.xyz
Source:	DNS query: ykeaoyaycoiamqey.xyz
Source:	DNS query: csmgwcogqqcwseka.xyz
Source:	DNS query: auowmussgaesgwas.xyz
Source:	DNS query: aikmouciiqgecoqi.xyz
Source:	DNS query: koecgqggegimaeya.xyz
Source:	DNS query: aawqwccomcemcysm.xyz
Source:	DNS query: kcyakwisycecaqgw.xyz
Source:	DNS query: uogksceymossmmqc.xyz
Source:	DNS query: qgmyeeguweaukuke.xyz
Source:	DNS query: mywaqkeaawisisky.xyz
Source:	DNS query: yqqsggacauiiugka.xyz
Source:	DNS query: equmqmqwuuuioawa.xyz
Source:	DNS query: wmoamsauiwauoosg.xyz
Source:	DNS query: oqsakkimkesccikc.xyz
Source:	DNS query: mgiwaegaqyyaakwy.xyz
Source:	DNS query: ucmioacycscyeouk.xyz
Source:	DNS query: qumaseqmggyaiauq.xyz
Source:	DNS query: uccyyemqaiiksuwm.xyz
Source:	DNS query: sesyieaiesegeaow.xyz
Source:	DNS query: kccmicaswqmswwak.xyz
Source:	DNS query: mssaogwocegysoow.xyz
Source:	DNS query: wssaqmakumewmaes.xyz
Source:	DNS query: cmukociggiqcouio.xyz
Source:	DNS query: skyqsyyymyacyayc.xyz
Source:	DNS query: uoigsiqmemcscosu.xyz
Source:	DNS query: kuywuskkgqsigqqs.xyz
Source:	DNS query: auayomwkewcomwas.xyz
Source:	DNS query: iyaikmkkowcqemsi.xyz
Source:	DNS query: ggicikyqcaiyguee.xyz
Source:	DNS query: oqyaoykomyoygics.xyz
Source:	DNS query: eqakguiwiqacqiwg.xyz
Source:	DNS query: wgcaouuqqqwucogy.xyz
Source:	DNS query: ewacuagosgqmuocm.xyz
Source:	DNS query: wgqyouayikuyuqmk.xyz
Source:	DNS query: owaaygsacguucaye.xyz
Source:	DNS query: uwgicagyykoommga.xyz
Source:	DNS query: uiggameqqycugsqw.xyz
Source:	DNS query: goguooqkgysueime.xyz
Source:	DNS query: keosqeosukqcooco.xyz
Source:	DNS query: maoeeogmuauywsyu.xyz
Source:	DNS query: ismqaewykmoiguki.xyz
Source:	DNS query: wucwykasawokemaw.xyz
Source:	DNS query: ukmcqucewskcqygg.xyz
Source:	DNS query: qqqmeagkkosgcayo.xyz
Source:	DNS query: ysawassgkwqygmmq.xyz
Source:	DNS query: osaeyoiqoqawauga.xyz
Source:	DNS query: iagisciiyoemgwaa.xyz
Source:	DNS query: ymysimqoykwqeqiq.xyz
Source:	DNS query: ymmcwogyimsuqmcc.xyz
Source:	DNS query: osmoygyawqmmimkq.xyz
Source:	DNS query: immyecuqwkiyscys.xyz
Source:	DNS query: omsqkuiwcwoegooq.xyz
Source:	DNS query: ukaiiiyqoooycyqm.xyz
Source:	DNS query: isemauqkwwiumyky.xyz
Source:	DNS query: keguuyioweymiaws.xyz
Source:	DNS query: kwaywmaequkqccai.xyz
Source:	DNS query: yyimcoiwgckeakcm.xyz
Source:	DNS query: ekcwemuekgqsimae.xyz
Source:	DNS query: imigkomgmqgmakqk.xyz
Source:	DNS query: omasqkwqyskcagwi.xyz
Source:	DNS query: awyomscgweuqmgaw.xyz
Source:	DNS query: eyoyssauceguqwmk.xyz
Source:	DNS query: gwwcqeykmseicgaw.xyz
Source:	DNS query: qwywqgsmgaoiwsga.xyz
Source:	DNS query: ososwckwcqmmwqcy.xyz
Source:	DNS query: osaymwoggqqycmse.xyz
Source:	DNS query: oyewqwkusieeoqey.xyz
Source:	DNS query: ommwaqgaemsmcqwc.xyz
Source:	DNS query: cauewwukyywyqiei.xyz
Source:	DNS query: goeykqccmemkswom.xyz
Source:	DNS query: aksuakswwkiimamq.xyz
Source:	DNS query: isaeicumkcuwqmqq.xyz
Source:	DNS query: qiswokuokugiooky.xyz
Source:	DNS query: qiswcssocuqsaqkq.xyz
Source:	DNS query: qcyksokwumicscaa.xyz
Source:	DNS query: esiaisyasoaoqwki.xyz
Source:	DNS query: giqukkwwcwgqcisg.xyz
Source:	DNS query: ymqaaskiwomkucuy.xyz
Source:	DNS query: akueuaicusaoieiy.xyz
Source:	DNS query: sauygqecsusickcu.xyz
Source:	DNS query: kkwkgmcoawgaoiwg.xyz
Source:	DNS query: saumycuogqsqykes.xyz
Source:	DNS query: ukyokaigmmkumgoa.xyz
Source:	DNS query: eswweuycwwiiykwo.xyz
Source:	DNS query: uksgyqiqaaiaiesi.xyz
Source:	DNS query: smckcsaioceiyasu.xyz
Source:	DNS query: esimsqgcwwwmyoqc.xyz
Source:	DNS query: maiyuocqqiqiiskw.xyz
Source:	DNS query: smaaowemwiwggocu.xyz
Source:	DNS query: kwuuwgemogmuomwq.xyz
Source:	DNS query: ukicsmiwggcwksam.xyz
Source:	DNS query: gwamoggwyegsseao.xyz
Source:	DNS query: immcqsiceooqyaay.xyz
Source:	DNS query: kkcqgowgkcoyokcu.xyz
Source:	DNS query: kecgikusmakuksma.xyz
Source:	DNS query: ymuiggyusggsymoi.xyz
Source:	DNS query: uecouukwkuceyuwg.xyz
Source:	DNS query: eyoaceoookqskqmy.xyz
Source:	DNS query: awwomgcseeqwkkom.xyz
Source:	DNS query: keykoekseemyiewq.xyz
Source:	DNS query: ysiwwoeeaaskykaw.xyz
Source:	DNS query: kwmcuwccqmuecgea.xyz
Source:	DNS query: gwyooeiscmwguqms.xyz
Source:	DNS query: wuokiysmiucoucak.xyz
Source:	DNS query: wuuiumemmigyyauq.xyz
Source:	DNS query: acwomuuukiomgqkm.xyz
Source:	DNS query: muwqwgaaymomgwmi.xyz
Source:	DNS query: omgcoecwsqiuqyug.xyz
Source:	DNS query: kqmsgskwgemyueya.xyz
Source:	DNS query: eyiyueewuaqmmwcm.xyz
Source:	DNS query: gwoyamckoqoaauoq.xyz
Source:	DNS query: qwqsoyoqkymakowm.xyz
Source:	DNS query: gcmiymmqgwuquokm.xyz
Source:	DNS query: ymseciekayuweoww.xyz
Source:	DNS query: oyocwswugeiqqyoo.xyz
Source:	DNS query: omgooecquoweeomo.xyz
Source:	DNS query: imgeoyougkmmeuec.xyz
Source:	DNS query: smoswyoekkccyuga.xyz
Source:	DNS query: suwkomiqcykeyako.xyz
Source:	DNS query: smwsugycuuckemue.xyz
Source:	DNS query: qigcqiaomwieqwka.xyz
Source:	DNS query: oekcyqqggaegsesm.xyz
Source:	DNS query: qcoysaaooaiccqyu.xyz
Source:	DNS query: mismuqiygyeysaoo.xyz
Source:	DNS query: wockoyekyageakcg.xyz
Source:	DNS query: ososokqeakgguwsq.xyz
Source:	DNS query: wcgqccqcugomywua.xyz
Source:	DNS query: aqaqgemescmwsqks.xyz
Source:	DNS query: aqiwocaywcswuwsq.xyz
Source:	DNS query: aqgmgoqcoqqkguyk.xyz
Source:	DNS query: oywgqkusocouysua.xyz
Source:	DNS query: uyygagweoagcuqky.xyz
Source:	DNS query: muiccguyaeaqwweg.xyz
Source:	DNS query: qiqueqokwqqgwwci.xyz
Source:	DNS query: uygmgoymcwcgkios.xyz
Source:	DNS query: qiyggmguowygeooc.xyz
Source:	DNS query: acacoiqgoimayqwm.xyz
Source:	DNS query: smisyqewaummmwoc.xyz
Source:	DNS query: mumuqocoisaucwmq.xyz
Source:	DNS query: qqoawmqqwqcusmee.xyz
Source:	DNS query: qcygacuamqqugcck.xyz
Source:	DNS query: kkiigoymgkmoggoq.xyz
Source:	DNS query: qqmicqemgcgieoau.xyz
Source:	DNS query: sagymwuwgeucsmac.xyz
Source:	DNS query: igmqooiwioymwkcm.xyz
Source:	DNS query: osyqameakgkceeog.xyz
Source:	DNS query: sgigamoeiwksoecq.xyz
Source:	DNS query: keckssemmeoqieqe.xyz
Source:	DNS query: caysswwugsmkeksw.xyz
Source:	DNS query: cgiamwsqgcmqgqse.xyz
Source:	DNS query: uyeqwcuyimescesu.xyz
Source:	DNS query: ekiwqiyewuiqoemo.xyz
Source:	DNS query: oeakuqueisysswcg.xyz
Source:	DNS query: acemcwecgiqcukys.xyz
Source:	DNS query: qcwaiaiqiwcakawa.xyz
Source:	DNS query: esyiocqieemagwmo.xyz
Source:	DNS query: kqsakygykwusqams.xyz
Source:	DNS query: ymygkkggyigeqcqe.xyz
Source:	DNS query: qqqkagyoymmosuyo.xyz
Source:	DNS query: moiimkscmiswaesw.xyz
Source:	DNS query: igkiociagqsacmwa.xyz
Source:	DNS query: ymugwyokyyccykmw.xyz
Source:	DNS query: gieksqwccmmqkemm.xyz
Source:	DNS query: iaueigwgocakgsku.xyz
Source:	DNS query: sgsasqgwayeckgoy.xyz
Source:	DNS query: kwogawueykiiumao.xyz
Source:	DNS query: iagmkeayqmuowswy.xyz
Source:	DNS query: yyyagyakeciucagk.xyz
Source:	DNS query: isukyiwyscosaaqc.xyz
Source:	DNS query: goicqsmskkygkkka.xyz
Source:	DNS query: awacwkqgsoomimye.xyz
Source:	DNS query: iaawaweqwceogamg.xyz
Source:	DNS query: kqueagsoikuyocca.xyz
Source:	DNS query: momoqikcaksewaua.xyz
Source:	DNS query: suagiqkqmkgysmiw.xyz
Source:	DNS query: gcwequgwyimwymsa.xyz
Source:	DNS query: igywsgwooemqiuss.xyz
Source:	DNS query: wikiagqsmeeaeegy.xyz
Source:	DNS query: eeoeukoqgiwsumsu.xyz
Source:	DNS query: ygooiessycewaocg.xyz
Source:	DNS query: qcqgssmagywqcgws.xyz
Source:	DNS query: goiikukwyyauemqc.xyz
Source:	DNS query: comuwmkimocayeeu.xyz
Source:	DNS query: isgasoomksiwqcmg.xyz
Source:	DNS query: qigismmgwsiseyuu.xyz
Source:	DNS query: wuqggcwmoscwykwg.xyz
Source:	DNS query: qceawaaswmsuekmu.xyz
Source:	DNS query: ygucsucmagwqsqcu.xyz
Source:	DNS query: giuccqyqokookyue.xyz
Source:	DNS query: gceesusqmuockkgw.xyz
Source:	DNS query: ygesoycecmkuwayg.xyz
Source:	DNS query: sasqgsyksiccuuws.xyz
Source:	DNS query: qwggykgwkqoceiuo.xyz
Source:	DNS query: wiguisuayimaukgu.xyz
Source:	DNS query: qcwcgegyyieaoqca.xyz
Source:	DNS query: gwcyyawigmwceaqi.xyz
Source:	DNS query: mueuwcqsioowsmce.xyz
Source:	DNS query: qiewcykmuuacuoyk.xyz
Source:	DNS query: coayaokeissieqcc.xyz
Source:	DNS query: oeooiqokqsqcsaig.xyz
Source:	DNS query: masegmsiqgamiugm.xyz
Source:	DNS query: smwywssyyaciqkae.xyz
Source:	DNS query: aweqoooqomueeiwi.xyz
Source:	DNS query: akasikewaomyiwqk.xyz
Source:	DNS query: oyyamqygcecqocmq.xyz
Source:	DNS query: qwikoqqgiayyuakq.xyz
Source:	DNS query: miqcugomwgmygyoq.xyz
Source:	DNS query: wiccyamsgmuqoeoy.xyz
Source:	DNS query: ymeiqyyqqyaaygie.xyz
Source:	DNS query: wiomcwmascsigags.xyz
Source:	DNS query: awgyuqqswicwkqcs.xyz
Source:	DNS query: iacisiamimiiqyeo.xyz
Source:	DNS query: wogawoqysgiockwa.xyz
Source:	DNS query: mayykkuyeuiggyws.xyz
Source:	DNS query: cosaygigqegeyewi.xyz
Source:	DNS query: ekqyosgcumkcecmo.xyz
Source:	DNS query: qimmkmaumumswocw.xyz
Source:	DNS query: acqaagqgmsmeouce.xyz
Source:	DNS query: awasockiaymagmci.xyz
Source:	DNS query: akuyqkmomwqyiyow.xyz
Source:	DNS query: caceukeeygaaqaec.xyz
Source:	DNS query: qwcaikouwwekssco.xyz
Source:	DNS query: qqioykeogcwkowgq.xyz
Source:	DNS query: igeqissugeuswaus.xyz
Source:	DNS query: osoawyeyassgycgy.xyz
Source:	DNS query: cuaumuqcoeegomsq.xyz
Source:	DNS query: oyogquqkmyqwwkuq.xyz
Source:	DNS query: gwyougsgeaaoiumg.xyz
Source:	DNS query: ukeoemaaimqyuais.xyz
Source:	DNS query: oewuwcsmaacckewa.xyz
Source:	DNS query: esykokiigsgwcwsa.xyz
Source:	DNS query: ekgqymkkqiwogqsy.xyz
Source:	DNS query: wueossewygqoakoq.xyz
Source:	DNS query: isceiesauogasmoo.xyz
Source:	DNS query: giscmywoiaqmqcmw.xyz
Source:	DNS query: uyqweoyukcewugsu.xyz
Source:	DNS query: imuscegymggagewg.xyz
Source:	DNS query: wgesgakysuqaewik.xyz
Source:	DNS query: uwoyyqgiwowysqou.xyz
Source:	DNS query: syaouwwyoaemeekm.xyz
Source:	DNS query: aoscugususamokuy.xyz
Source:	DNS query: qucyaygweeasqeoy.xyz
Source:	DNS query: uiwwamyuymycooey.xyz
Source:	DNS query: iygukwyuqwiuoqmi.xyz
Source:	DNS query: koaeaguekwcaousw.xyz
Source:	DNS query: skssioqkemoiieaa.xyz
Source:	DNS query: yewomygmueegmoqi.xyz
Source:	DNS query: kuyoukwwacqkcoyo.xyz
Source:	DNS query: gmcqgmkyguwkskyg.xyz
Source:	DNS query: mygiqcqokowwmgqq.xyz
Source:	DNS query: cymogqmasaiiwmww.xyz
Source:	DNS query: iykumkamcykgicyi.xyz
Source:	DNS query: cyemcqwkasuimkgs.xyz
Source:	DNS query: ieqeeiggkuqcomyo.xyz
Source:	DNS query: ssmkyomikukusksu.xyz
Source:	DNS query: kimakioiwmawksiw.xyz
Source:	DNS query: qumssmeysccykkyo.xyz
Source:	DNS query: ykuoaucocogcwoky.xyz
Source:	DNS query: semyssioekmosauo.xyz
Source:	DNS query: aiiqyyikowqaygwy.xyz
Source:	DNS query: kouumoyqiuckkcau.xyz
Source:	DNS query: qgwkkkyicoqmooqu.xyz
Source:	DNS query: uwwcocucusmeguaw.xyz
Source:	DNS query: cekggiciueyeyoku.xyz
Source:	DNS query: iqqeoamqwiuiyuua.xyz
Source:	DNS query: uokqmokseqqakiui.xyz
Source:	DNS query: cyqqgacqkowwkqqe.xyz
Source:	DNS query: cmqqeimyycgqwsgg.xyz
Source:	DNS query: wmgeoqqiwqcmimwu.xyz
Source:	DNS query: quyckaioggawuois.xyz
Source:	DNS query: eqciawooemoueyqu.xyz
Source:	DNS query: oqoaumkywacmuwwm.xyz
Source:	DNS query: ewueyekksqksycww.xyz
Source:	DNS query: csmasucykosuwouy.xyz
Source:	DNS query: seeogeqwsqmsoaqe.xyz
Source:	DNS query: gusmkkaiomeeqaiy.xyz
Source:	DNS query: msyecoiqeyqeiquy.xyz
Source:	DNS query: skawoueawceoywsy.xyz
Source:	DNS query: iyuaqococuqcsgii.xyz
Source:	DNS query: kuyaasckcgacyesi.xyz
Source:	DNS query: aaeqiiecqqumcgky.xyz
Source:	DNS query: aawiysageawcoyok.xyz
Source:	DNS query: yqysoaosqewciiww.xyz
Source:	DNS query: yessywkwcwmyewqe.xyz
Source:	DNS query: aueiqscgeicewaoo.xyz
Source:	DNS query: uccsgcekiwcyucou.xyz
Source:	DNS query: aiumyocycyyikiwc.xyz
Source:	DNS query: aoqayemwgmsyuimi.xyz
Source:	DNS query: mmiowgeswucumqae.xyz
Source:	DNS query: mmiugosumuqmuqoc.xyz
Source:	DNS query: ecqisawmymscauow.xyz
Source:	DNS query: iyoqqeicqoquiqka.xyz
Source:	DNS query: ecoqwiswmwqokmay.xyz
Source:	DNS query: ceckmwoyqkwgeoqg.xyz
Source:	DNS query: kcoiygiwuyqyaoku.xyz
Source:	DNS query: aaeyckqsgmiqsgew.xyz
Source:	DNS query: qgaiosyouwwkgsmm.xyz
Source:	DNS query: ocqseueommkkqcgs.xyz
Source:	DNS query: owmesaosmycoeceq.xyz
Source:	DNS query: qokauaicweuwscac.xyz
Source:	DNS query: sewmmwqeyauowwwo.xyz
Source:	DNS query: mmgowiccqoeomagq.xyz
Source:	DNS query: kcwiywyygywkkysk.xyz
Source:	DNS query: syiysgiqgqggqkoc.xyz
Source:	DNS query: ykuasckuceswseig.xyz
Source:	DNS query: quugmiumsieaiyys.xyz
Source:	DNS query: ikqywgcqaggogqsa.xyz
Source:	DNS query: eqyamamqwsseyoig.xyz
Source:	DNS query: seqkawokggwucsui.xyz
Source:	DNS query: gmqeqkcqackwkgao.xyz
Source:	DNS query: guowewgekuoqacyy.xyz
Source:	DNS query: aaokyscqeecowaci.xyz
Source:	DNS query: ywywwwgwekicgico.xyz
Source:	DNS query: wsisaoaauqwmuomg.xyz
Source:	DNS query: koouumcuucaeakye.xyz
Source:	DNS query: okccisioeycusekg.xyz
Source:	DNS query: cymymsciyaiacwgw.xyz
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	DNS query: aoyeoimcuuqakckw.xyz
Source:	DNS query: qoaweokuqggaymks.xyz
Source:	DNS query: ewuyacewswkoueqw.xyz
Source:	DNS query: kiuymkmaomciimcc.xyz
Source:	DNS query: oqaiyaoqwyeswaiy.xyz
Source:	DNS query: koyokggaqsagggym.xyz
Source:	DNS query: cmsuagygagqceocm.xyz
Source:	DNS query: uisgoqaoksgqsqyg.xyz
Source:	DNS query: ocgcqsagaakgkcma.xyz
Source:	DNS query: okgigkmiieweagia.xyz
Source:	DNS query: skiwkmaaeeiqqgee.xyz
Source:	DNS query: aagokgyaswscyaeu.xyz
Source:	DNS query: gmciuwiycsqycggy.xyz
Source:	DNS query: ggeymcaisciikucq.xyz
Source:	DNS query: uwskygguegqkasme.xyz
Source:	DNS query: cyumiiokkswcoeag.xyz
Source:	DNS query: oqisqmesaeoegmyc.xyz
Source:	DNS query: wagasowawsoyycom.xyz
Source:	DNS query: gaguweiwsgouugqe.xyz
Source:	DNS query: syyyweaywowycsia.xyz
Source:	DNS query: mmoycwqiuykiusuy.xyz
Source:	DNS query: ikoycakqiuuascco.xyz
Source:	DNS query: cmuqekokuyuqgige.xyz
Source:	DNS query: cywoimwmsoamqoem.xyz
Source:	DNS query: skyiqyaeoykwcgiw.xyz
Source:	DNS query: ssiooaeoaocuyaow.xyz
Source:	DNS query: ywmgykycywqqewqw.xyz
Source:	DNS query: uosaescwmkiyscay.xyz
Source:	DNS query: eigywisgeoiskekg.xyz
Source:	DNS query: msqsoggkkoiokugk.xyz
Source:	DNS query: cmaaciimeememwao.xyz
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	DNS query: uigkauqkumywguig.xyz
Source:	DNS query: wggygeoisauouuoc.xyz
Source:	DNS query: okoykokgycygucya.xyz
Source:	DNS query: ewaoowewmsomgaiw.xyz
Source:	DNS query: ieiegkokewkqmkwe.xyz
Source:	DNS query: gakesieaaickekuo.xyz
Source:	DNS query: ecasigiwguqgguyw.xyz
Source:	DNS query: okwswuciummewsui.xyz
Source:	DNS query: ggaqiymaekkywusy.xyz
Source:	DNS query: ocicimqkgucacyim.xyz
Source:	DNS query: qoyisgoayskswigs.xyz
Source:	DNS query: wsywmuwgsogemomw.xyz
Source:	DNS query: skaeggkkcmoqoywy.xyz
Source:	DNS query: uowicsywgqmgagyc.xyz
Source:	DNS query: yqyqgowkwqiggewq.xyz
Source:	DNS query: aikmggymywuooyqc.xyz
Source:	DNS query: semgkyogsqqwgsmy.xyz
Source:	DNS query: ucmwywoqciswaguc.xyz
Source:	DNS query: qowoagcmkkgqcswk.xyz
Source:	DNS query: mmgusimiaqiweyas.xyz
Source:	DNS query: wgssaogcsscmkswu.xyz
Source:	DNS query: aoeewogkicikusoc.xyz
Source:	DNS query: ikggquqsigykqamc.xyz
Source:	DNS query: waaqccyeaeywuoqu.xyz
Source:	DNS query: ecgiqiiieksaooyc.xyz
Source:	DNS query: iqcogqmwegaqewuu.xyz
Source:	DNS query: aiusammkykucyyso.xyz
Source:	DNS query: qgkswogkcsaeegki.xyz
Source:	DNS query: ywcwqgmikmycwoeu.xyz
Source:	DNS query: eiqogaaggeswoges.xyz
Source:	DNS query: sekqikccsokicgye.xyz
Source:	DNS query: ssqggwwkkaayqkgk.xyz
Source:	DNS query: seiiycgosccmaykm.xyz
Source:	DNS query: aosagqwwquakwceq.xyz
Source:	DNS query: qoiigkweqeiwycuo.xyz
Source:	DNS query: oqycmugocqsyuaae.xyz
Source:	DNS query: ewwgmiicuyowacum.xyz
Source:	DNS query: mmmoiaecqyuquoya.xyz
Source:	DNS query: auscackumyccuyuk.xyz
Source:	DNS query: okgquokwaassqyyi.xyz
Source:	DNS query: uikciyeoaumwomqo.xyz
Source:	DNS query: gmoguamscceqkamk.xyz
Source:	DNS query: eqgoeemewamgucie.xyz
Source:	DNS query: uoiyoewsiosismow.xyz
Source:	DNS query: cekeeosckoouciwe.xyz
Source:	DNS query: mycgaaaymgowwicw.xyz
Source:	DNS query: ecgmcmqswickqcgi.xyz
Source:	DNS query: guwwqcuqmkmyyyyi.xyz
Source:	DNS query: cygmqaagqcuusmiq.xyz
Source:	DNS query: wggqoukyeokwgmoy.xyz
Source:	DNS query: okoccmmgswcmakcw.xyz
Source:	DNS query: iesmewkokeqooioo.xyz
Source:	DNS query: mmiccoqwqmssougs.xyz
Source:	DNS query: aoqymkkusuecomsw.xyz
Source:	DNS query: mskmgwkuiamqikce.xyz
Source:	DNS query: waucsgsqqsqkacog.xyz
Source:	DNS query: yqmqwygosgguwqsu.xyz
Source:	DNS query: wsicgeayaoueooom.xyz
Source:	DNS query: uwagocmgakuuykiu.xyz
Source:	DNS query: uowkoqwgqqeweume.xyz
Source:	DNS query: aakowgaeoeuekqyc.xyz
Source:	DNS query: skmmaauasaqywsas.xyz
Source:	DNS query: cygeomikesiegqsk.xyz
Source:	DNS query: okeyuasamkcqqeka.xyz
Source:	DNS query: qagaeyiqsgakegya.xyz
Source:	DNS query: ucoweesewcwiosgw.xyz
Source:	DNS query: sskawiyqmweogyqi.xyz
Source:	DNS query: wgwmaeskqmwumwkk.xyz
Source:	DNS query: quwocusecekwqkaw.xyz
Source:	DNS query: qukyogcwsgswyayo.xyz
Source:	DNS query: uiicikumwwsmaeem.xyz
Source:	DNS query: wagyuykcqmqyygkw.xyz
Source:	DNS query: uiaqcykmqwcwgmeg.xyz
Source:	DNS query: uoeukcckqmmsuwaa.xyz
Source:	DNS query: gugueqckkyuaeqqy.xyz
Source:	DNS query: skqsqowayeqesqqk.xyz
Source:	DNS query: kuscomokgkmaommk.xyz
Source:	DNS query: wsmyawqeqguacwas.xyz
Source:	DNS query: ikuqcsooiucogaww.xyz
Source:	DNS query: iysmukmcmacuomic.xyz
Source:	DNS query: ecqoqckqoaogcesy.xyz
Source:	DNS query: iesmkwqgmkmksgam.xyz
Source:	DNS query: guwououoomacaysu.xyz
Source:	DNS query: ucsoeygscgagowqw.xyz
Source:	DNS query: ykeuawieaequiyag.xyz
Source:	DNS query: cskowwiekeqaakki.xyz
Source:	DNS query: ecogmmaysgwkmwqm.xyz
Source:	DNS query: uwuomysuqkaykwuy.xyz
Source:	DNS query: ikqokmauuissyuce.xyz
Source:	DNS query: oeeoucsuawuqkqoi.xyz
Source:	DNS query: ygquuyekcusgsqqu.xyz
Source:	DNS query: uqsqcgouceqmigcg.xyz
Source:	DNS query: kwoesauawkouiecq.xyz
Source:	DNS query: yywgmuqggsagcmco.xyz
Source:	DNS query: imumkckaqyieaasa.xyz
Source:	DNS query: qqkoemcaocsomwow.xyz
Source:	DNS query: awsigwcaesugycuk.xyz
Source:	DNS query: kkqoqmmcwacsqiiu.xyz
Source:	DNS query: iamowksweuqyssis.xyz
Source:	DNS query: wicwocqcucgaimwe.xyz
Source:	DNS query: wiuyuwqiqkkogmoe.xyz
Source:	DNS query: wiuyuwqiqkkogmoe.xyz
Source:	DNS query: ueyeeeegieoukoci.xyz
Source:	DNS query: ueyeeeegieoukoci.xyz
Source:	DNS query: caysuwggmqimaqwq.xyz
Source:	DNS query: caysuwggmqimaqwq.xyz
Source:	DNS query: kecsceaqksygeamy.xyz
Source:	DNS query: kecsceaqksygeamy.xyz
Source:	DNS query: oyyagswauqyckoye.xyz
Source:	DNS query: oyyagswauqyckoye.xyz
Source:	DNS query: aciemoayegyggwiq.xyz
Source:	DNS query: aciemoayegyggwiq.xyz
Source:	DNS query: micemismikicsccc.xyz
Source:	DNS query: micemismikicsccc.xyz
Source:	DNS query: kwieueawsewqigey.xyz
Source:	DNS query: kwieueawsewqigey.xyz
Source:	DNS query: qiwmqykuesscgkac.xyz
Source:	DNS query: qiwmqykuesscgkac.xyz
Source:	DNS query: issaesuceymoyccq.xyz
Source:	DNS query: issaesuceymoyccq.xyz
Source:	DNS query: sgowwwmqgkeyukwq.xyz
Source:	DNS query: sgowwwmqgkeyukwq.xyz
Source:	DNS query: kewweiikaaysqugi.xyz
Source:	DNS query: kewweiikaaysqugi.xyz
Source:	DNS query: oywkwakwykimigck.xyz
Source:	DNS query: oywkwakwykimigck.xyz
Source:	DNS query: aqkiemcseioemogk.xyz
Source:	DNS query: aqkiemcseioemogk.xyz
Source:	DNS query: omoaicgooscecewq.xyz
Source:	DNS query: omoaicgooscecewq.xyz
Source:	DNS query: gcyciogqguooyici.xyz
Source:	DNS query: gcyciogqguooyici.xyz
Source:	DNS query: qwyikqowekcgesga.xyz
Source:	DNS query: qwyikqowekcgesga.xyz
Source:	DNS query: moysoauykmieesas.xyz
Source:	DNS query: moysoauykmieesas.xyz
Source:	DNS query: ysmmeamaooogyuwa.xyz
Source:	DNS query: ysmmeamaooogyuwa.xyz
Source:	DNS query: qqggiaeuuaskcisa.xyz
Source:	DNS query: qqggiaeuuaskcisa.xyz
Source:	DNS query: ukwgsimcamwqcqus.xyz
Source:	DNS query: ukwgsimcamwqcqus.xyz
Source:	DNS query: makysawqyqkmmkuo.xyz
Source:	DNS query: makysawqyqkmmkuo.xyz
Source:	DNS query: gwuaqqsyegywuaya.xyz
Source:	DNS query: gwuaqqsyegywuaya.xyz

Tries to resolve many domain names, but no domain seems valid

Source: unknown	DNS traffic detected: query: ecoqwiswmwqokmay.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwwcqeykmseicgaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuyaasckcgacyesi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awacwkqgsoomimye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukmcqucewskcqygg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqyaoykomyoygics.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqggiaeuuaskcisa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esykokiigsgwcwsa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okeyuasamkcqqeka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiuyuwqiqkkogmoe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyeqwcuyimescesu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecogmmaysgwkmwqm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgaiosyouwwkgsmm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwamoggwyegsseao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uokqmokseqqakiui.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: miqcugomwgmygyoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skawoueawceoywsy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cgiamwsqgcmqgqse.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: coosumygqywusaaq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cosaygigqegeyewi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ucmwywoqciswaguc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: auayomwkewcomwas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcqgssmagywqcgws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymysimqoykwqeqiq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: micemismikicsccc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cskowwiekeqaakki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sewmmwqeyauowwwo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akasikewaomyiwqk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kcyakwisycecaqgw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mskmgwkuiamqikce.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoyeoimcuuqakckw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gieksqwccmmqkemm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gaguweiwsgouugqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uqsqcgouceqmigcg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqsakygykwusqams.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwuaqqsyegywuaya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyewqwkusieeoqey.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kcoiygiwuyqyaoku.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiswokuokugiooky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qoyisgoayskswigs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikuqcsooiucogaww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcweoeaqygkgoyqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wssaqmakumewmaes.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wagasowawsoyycom.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkiigoymgkmoggoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kouumoyqiuckkcau.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isgasoomksiwqcmg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwggykgwkqoceiuo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: seuuicaewuoaumes.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqceweqmaumwwywy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ismqaewykmoiguki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skmmaauasaqywsas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqaiyaoqwyeswaiy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aosagqwwquakwceq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymugwyokyyccykmw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cygmqaagqcuusmiq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwyikqowekcgesga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igkiociagqsacmwa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isemauqkwwiumyky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skyiqyaeoykwcgiw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gcgquesqkuokqoos.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgmyeeguweaukuke.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: caceukeeygaaqaec.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oeooiqokqsqcsaig.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uegmseugcsaymygc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoqayemwgmsyuimi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wuqggcwmoscwykwg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omsqkuiwcwoegooq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ocgcqsagaakgkcma.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikggquqsigykqamc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yyqmiikqggkgkcke.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iagmkeayqmuowswy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikqokmauuissyuce.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: giscmywoiaqmqcmw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygucsucmagwqsqcu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyocwswugeiqqyoo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aawqwccomcemcysm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eyoyssauceguqwmk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iqqeoamqwiuiyuua.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: quugmiumsieaiyys.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uowkoqwgqqeweume.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmgowiccqoeomagq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ososwckwcqmmwqcy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ueyeeeegieoukoci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwwkyygoyymumeqa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsywmuwgsogemomw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mygiqcqokowwmgqq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqiwocaywcswuwsq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sagymwuwgeucsmac.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwuomysuqkaykwuy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wmgeoqqiwqcmimwu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goicqsmskkygkkka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymygkkggyigeqcqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiswcssocuqsaqkq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwcaikouwwekssco.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esiaisyasoaoqwki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyogquqkmyqwwkuq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: giuccqyqokookyue.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmmoiaecqyuquoya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skyqsyyymyacyayc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyyagswauqyckoye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qceawaaswmsuekmu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukeoemaaimqyuais.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uisgoqaoksgqsqyg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eyoaceoookqskqmy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ocicimqkgucacyim.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aiusammkykucyyso.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgwmaeskqmwumwkk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kecsceaqksygeamy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uikciyeoaumwomqo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wagyuykcqmqyygkw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oesgsmmsyegwkaii.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukicsmiwggcwksam.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qowoagcmkkgqcswk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qucyaygweeasqeoy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eeimyyskiwmsmwaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqkiemcseioemogk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygooiessycewaocg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gugueqckkyuaeqqy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoeewogkicikusoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mssaogwocegysoow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oywgqkusocouysua.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekcwemuekgqsimae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: msyecoiqeyqeiquy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygesoycecmkuwayg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wcagmacwieoosqok.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aciemoayegyggwiq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omgcoecwsqiuqyug.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ggicikyqcaiyguee.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: owaaygsacguucaye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekiwqiyewuiqoemo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqoaumkywacmuwwm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iyaikmkkowcqemsi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgqyouayikuyuqmk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qigaaawumoqgmwck.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yessywkwcwmyewqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmuqekokuyuqgige.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewueyekksqksycww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wikiagqsmeeaeegy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sgsasqgwayeckgoy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqioykeogcwkowgq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: giqukkwwcwgqcisg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: masegmsiqgamiugm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iygukwyuqwiuoqmi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cyumiiokkswcoeag.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eiqogaaggeswoges.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igyccoycggkescsw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smckcsaioceiyasu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isaeicumkcuwqmqq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qoiigkweqeiwycuo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iaueigwgocakgsku.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqakguiwiqacqiwg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iaamsmcuweooiums.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wockoyekyageakcg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isceiesauogasmoo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukaiiiyqoooycyqm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gcwequgwyimwymsa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssmkyomikukusksu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akuyqkmomwqyiyow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iagisciiyoemgwaa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mgiwaegaqyyaakwy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sauygqecsusickcu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osyqameakgkceeog.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: maiyuocqqiqiiskw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mycgaaaymgowwicw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wucwykasawokemaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iyoqqeicqoquiqka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: suagiqkqmkgysmiw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cgwgwmsuyaicegcq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: coayaokeissieqcc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aweqoooqomueeiwi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imcgogsosiogeqgc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qimmkmaumumswocw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smwywssyyaciqkae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: muwqwgaaymomgwmi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imigkomgmqgmakqk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omasqkwqyskcagwi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eyiyueewuaqmmwcm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sekqikccsokicgye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wueossewygqoakoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewacuagosgqmuocm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acqaagqgmsmeouce.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekgqymkkqiwogqsy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qagaeyiqsgakegya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oewuwcsmaacckewa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymmcwogyimsuqmcc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqycmugocqsyuaae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ggaqiymaekkywusy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkqoqmmcwacsqiiu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwcyyawigmwceaqi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkwkgmcoawgaoiwg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmoycwqiuykiusuy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aakowgaeoeuekqyc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sgigamoeiwksoecq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acemcwecgiqcukys.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iesmewkokeqooioo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awyomscgweuqmgaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: moysoauykmieesas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcwcgegyyieaoqca.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekqyosgcumkcecmo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqyqgowkwqiggewq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eygeqyioakqgwkws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqmicqemgcgieoau.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: guwououoomacaysu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqqsggacauiiugka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcyksokwumicscaa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uoeukcckqmmsuwaa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqmoakcgiagmaiou.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isukyiwyscosaaqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: auscackumyccuyuk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eswweuycwwiiykwo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsicgeayaoueooom.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skiwkmaaeeiqqgee.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uosaescwmkiyscay.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okgigkmiieweagia.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uecouukwkuceyuwg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uigkauqkumywguig.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cekggiciueyeyoku.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: immcqsiceooqyaay.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ososokqeakgguwsq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmaaciimeememwao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goguooqkgysueime.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igmqooiwioymwkcm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssiooaeoaocuyaow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wicwocqcucgaimwe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wuuiumemmigyyauq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqmqwygosgguwqsu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwaywmaequkqccai.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iyuaqococuqcsgii.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqysoaosqewciiww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmiowgeswucumqae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iaawaweqwceogamg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwoyamckoqoaauoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqmsgskwgemyueya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smisyqewaummmwoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qumssmeysccykkyo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: seiiycgosccmaykm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smwcqasgeqikoqss.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmcqgmkyguwkskyg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smaaowemwiwggocu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gakesieaaickekuo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygquuyekcusgsqqu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aueiqscgeicewaoo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uysuukowkciwgmko.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okccisioeycusekg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: quyckaioggawuois.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwoesauawkouiecq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecgiqiiieksaooyc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aagokgyaswscyaeu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okwswuciummewsui.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skaeggkkcmoqoywy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ywcwqgmikmycwoeu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osaeyoiqoqawauga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmiugosumuqmuqoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymqaaskiwomkucuy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmqeqkcqackwkgao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwskygguegqkasme.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqacqgmiaaewmmey.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykeaoyaycoiamqey.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymseciekayuweoww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwywqgsmgaoiwsga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikqywgcqaggogqsa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmgusimiaqiweyas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmiccoqwqmssougs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acwomuuukiomgqkm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewaoowewmsomgaiw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: waucsgsqqsqkacog.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiyggmguowygeooc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: muikisowiqmckiao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: suwkomiqcykeyako.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keckssemmeoqieqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wuokiysmiucoucak.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ommwaqgaemsmcqwc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: guwwqcuqmkmyyyyi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: koyokggaqsagggym.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyqweoyukcewugsu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqkoemcaocsomwow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgssaogcsscmkswu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gusmkkaiomeeqaiy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: owmesaosmycoeceq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykuasckuceswseig.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qokauaicweuwscac.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awgyuqqswicwkqcs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esyiocqieemagwmo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwoyyqgiwowysqou.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ysmmeamaooogyuwa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewuyacewswkoueqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikoycakqiuuascco.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqqkagyoymmosuyo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwkiuumqgigawcek.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keosqeosukqcooco.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awcmmsyugikucuqg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gcmiymmqgwuquokm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okgquokwaassqyyi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uygmgoymcwcgkios.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sgowwwmqgkeyukwq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: muiccguyaeaqwweg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keykoekseemyiewq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukwgsimcamwqcqus.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uiaqcykmqwcwgmeg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgcaouuqqqwucogy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cymymsciyaiacwgw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mookqcgowekwsyme.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: semyssioekmosauo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymuiggyusggsymoi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uoiyoewsiosismow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyygagweoagcuqky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imuscegymggagewg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqisqmesaeoegmyc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sskawiyqmweogyqi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aiiqyyikowqaygwy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imgeoyougkmmeuec.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igywsgwooemqiuss.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cyqqgacqkowwkqqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: immyecuqwkiyscys.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awsigwcaesugycuk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqueagsoikuyocca.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoscugususamokuy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qoaweokuqggaymks.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mumuqocoisaucwmq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiccyamsgmuqoeoy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mayykkuyeuiggyws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ucsoeygscgagowqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukyokaigmmkumgoa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: momoqikcaksewaua.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiguisuayimaukgu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eigywisgeoiskekg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sasqgsyksiccuuws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: issaesuceymoyccq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uogksceymossmmqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wggygeoisauouuoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aksuakswwkiimamq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwogawueykiiumao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qigcqiaomwieqwka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uccsgcekiwcyucou.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skssioqkemoiieaa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmciuwiycsqycggy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewwgmiicuyowacum.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwikoqqgiayyuakq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ceckmwoyqkwgeoqg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcoysaaooaiccqyu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmqqeimyycgqwsgg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: koaeaguekwcaousw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akueuaicusaoieiy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: csmasucykosuwouy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esimsqgcwwwmyoqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: seeogeqwsqmsoaqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecgmcmqswickqcgi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkcqgowgkcoyokcu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ucmioacycscyeouk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwwcocucusmeguaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwyooeiscmwguqms.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ieqeeiggkuqcomyo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: makysawqyqkmmkuo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: comuwmkimocayeeu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osaymwoggqqycmse.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awwomgcseeqwkkom.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmukociggiqcouio.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqgmgoqcoqqkguyk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cymogqmasaiiwmww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qigismmgwsiseyuu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omgooecquoweeomo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keguuyioweymiaws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssqggwwkkaayqkgk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aikmggymywuooyqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cekeeosckoouciwe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcwaiaiqiwcakawa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqgoeemewamgucie.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uiicikumwwsmaeem.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ywywwwgwekicgico.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gceesusqmuockkgw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: equmqmqwuuuioawa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: seqkawokggwucsui.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuywuskkgqsigqqs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iqcogqmwegaqewuu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kimakioiwmawksiw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iacisiamimiiqyeo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ucoweesewcwiosgw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiwmqykuesscgkac.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awasockiaymagmci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yyimcoiwgckeakcm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqsakkimkesccikc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: msqsoggkkoiokugk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aaeyckqsgmiqsgew.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: guowewgekuoqacyy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqmycgagykgkqwsu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwgicagyykoommga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmsuagygagqceocm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aomaeyokqgsuomii.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcygacuamqqugcck.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skqsqowayeqesqqk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yewomygmueegmoqi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykeuawieaequiyag.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyyamqygcecqocmq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oeakuqueisysswcg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ggeymcaisciikucq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wogawoqysgiockwa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smoswyoekkccyuga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cygeomikesiegqsk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: caysuwggmqimaqwq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aaokyscqeecowaci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cywoimwmsoamqoem.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: koecgqggegimaeya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qumaseqmggyaiauq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgwkkkyicoqmooqu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iysmukmcmacuomic.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aaeqiiecqqumcgky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goeykqccmemkswom.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kewweiikaaysqugi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: moiimkscmiswaesw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecqisawmymscauow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwcqymkoyiusyywg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiomcwmascsigags.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: quwocusecekwqkaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iamowksweuqyssis.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gcyciogqguooyici.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ysiwwoeeaaskykaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymeiqyyqqyaaygie.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mismuqiygyeysaoo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yyyagyakeciucagk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osmoygyawqmmimkq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kiuymkmaomciimcc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wmoamsauiwauoosg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmoguamscceqkamk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiewcykmuuacuoyk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: caysswwugsmkeksw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qukyogcwsgswyayo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okoykokgycygucya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwuuwgemogmuomwq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oywkwakwykimigck.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: waqucgoeeeeymeii.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ywmgykycywqqewqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwmqmwoieykcoums.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: syyyweaywowycsia.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mywaqkeaawisisky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: saumycuogqsqykes.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuyoukwwacqkcoyo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okoccmmgswcmakcw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oekcyqqggaegsesm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwqsoyoqkymakowm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqyamamqwsseyoig.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuscomokgkmaommk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smwsugycuuckemue.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: syaouwwyoaemeekm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aawiysageawcoyok.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: maoeeogmuauywsyu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mueuwcqsioowsmce.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgesgakysuqaewik.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwagocmgakuuykiu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqciawooemoueyqu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqaqgemescmwsqks.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kccmicaswqmswwak.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqoawmqqwqcusmee.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uoigsiqmemcscosu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cauewwukyywyqiei.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uowicsywgqmgagyc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiqueqokwqqgwwci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: waaqccyeaeywuoqu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsmyawqeqguacwas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cyemcqwkasuimkgs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwmcuwccqmuecgea.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ysawassgkwqygmmq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imumkckaqyieaasa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwieueawsewqigey.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uccyyemqaiiksuwm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akqmmimguqeacqki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eeoeukoqgiwsumsu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goiikukwyyauemqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iesmkwqgmkmksgam.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aiumyocycyyikiwc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: syiysgiqgqggqkoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oeeoucsuawuqkqoi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ocqseueommkkqcgs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: semgkyogsqqwgsmy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yywgmuqggsagcmco.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kcwiywyygywkkysk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgkswogkcsaeegki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omoaicgooscecewq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eeuqeoimgoqakquw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: koouumcuucaeakye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoqymkkusuecomsw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sesyieaiesegeaow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecqoqckqoaogcesy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wcgqccqcugomywua.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsisaoaauqwmuomg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ieiegkokewkqmkwe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykuoaucocogcwoky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cuaumuqcoeegomsq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecasigiwguqgguyw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osoawyeyassgycgy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwyougsgeaaoiumg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wggqoukyeokwgmoy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqqmeagkkosgcayo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iykumkamcykgicyi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kecgikusmakuksma.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uksgyqiqaaiaiesi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uiggameqqycugsqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acacoiqgoimayqwm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igeqissugeuswaus.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uiwwamyuymycooey.xyz replaycode: Name error (3)

Source: unknown

Network traffic detected: DNS query count 564

Source: global traffic

DNS traffic detected: number of DNS queries: 564

Source: Joe Sandbox View	IP Address: 166.1.160.237 166.1.160.237
Source: Joe Sandbox View	IP Address: 162.159.61.3 162.159.61.3
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: global traffic	HTTP traffic detected: GET /webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf HTTP/1.1Host: www.med.unc.eduConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.med.unc.eduConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /crx/blobs/AW50ZFsLPhJJyx_4ShcDOgcEpJeOc7Vr0kMzfFRoaMfWx4pAgZ0UGF2i9_ei1A7FAHQ-EPFULeBn7F8_SEKhjbpEyKfiidX7GF_6BDOycMeg5w03wjwVQ61hkaEix8WFqmEAxlKa5cmz_tdFr9JtRwdqRu82wmLe2Ghe/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_84_1_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8

Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.57.90.162
Source: unknown	TCP traffic detected without corresponding DNS query: 23.57.90.162
Source: unknown	TCP traffic detected without corresponding DNS query: 23.57.90.162
Source: unknown	TCP traffic detected without corresponding DNS query: 23.57.90.162
Source: unknown	TCP traffic detected without corresponding DNS query: 23.57.90.162
Source: unknown	TCP traffic detected without corresponding DNS query: 23.57.90.162
Source: unknown	TCP traffic detected without corresponding DNS query: 23.57.90.162
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf HTTP/1.1Host: www.med.unc.eduConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.med.unc.eduConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /crx/blobs/AW50ZFsLPhJJyx_4ShcDOgcEpJeOc7Vr0kMzfFRoaMfWx4pAgZ0UGF2i9_ei1A7FAHQ-EPFULeBn7F8_SEKhjbpEyKfiidX7GF_6BDOycMeg5w03wjwVQ61hkaEix8WFqmEAxlKa5cmz_tdFr9JtRwdqRu82wmLe2Ghe/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_84_1_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /api/client_hello HTTP/1.1Accept: /Connection: closeHost: aikmouciiqgecoqi.xyz:443User-Agent: cpp-httplib/0.12.1

Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr

String found in binary or memory: "url": "https://www.youtube.com" equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.med.unc.edu
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic	DNS traffic detected: DNS query: bzib.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: clients2.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: yqceweqmaumwwywy.xyz
Source: global traffic	DNS traffic detected: DNS query: eqmycgagykgkqwsu.xyz
Source: global traffic	DNS traffic detected: DNS query: seuuicaewuoaumes.xyz
Source: global traffic	DNS traffic detected: DNS query: aomaeyokqgsuomii.xyz
Source: global traffic	DNS traffic detected: DNS query: waqucgoeeeeymeii.xyz
Source: global traffic	DNS traffic detected: DNS query: oqacqgmiaaewmmey.xyz
Source: global traffic	DNS traffic detected: DNS query: ykeaoyaycoiamqey.xyz
Source: global traffic	DNS traffic detected: DNS query: csmgwcogqqcwseka.xyz
Source: global traffic	DNS traffic detected: DNS query: auowmussgaesgwas.xyz
Source: global traffic	DNS traffic detected: DNS query: aikmouciiqgecoqi.xyz
Source: global traffic	DNS traffic detected: DNS query: koecgqggegimaeya.xyz
Source: global traffic	DNS traffic detected: DNS query: aawqwccomcemcysm.xyz
Source: global traffic	DNS traffic detected: DNS query: kcyakwisycecaqgw.xyz
Source: global traffic	DNS traffic detected: DNS query: uogksceymossmmqc.xyz
Source: global traffic	DNS traffic detected: DNS query: qgmyeeguweaukuke.xyz
Source: global traffic	DNS traffic detected: DNS query: mywaqkeaawisisky.xyz
Source: global traffic	DNS traffic detected: DNS query: yqqsggacauiiugka.xyz
Source: global traffic	DNS traffic detected: DNS query: equmqmqwuuuioawa.xyz
Source: global traffic	DNS traffic detected: DNS query: wmoamsauiwauoosg.xyz
Source: global traffic	DNS traffic detected: DNS query: oqsakkimkesccikc.xyz
Source: global traffic	DNS traffic detected: DNS query: mgiwaegaqyyaakwy.xyz
Source: global traffic	DNS traffic detected: DNS query: ucmioacycscyeouk.xyz
Source: global traffic	DNS traffic detected: DNS query: qumaseqmggyaiauq.xyz
Source: global traffic	DNS traffic detected: DNS query: uccyyemqaiiksuwm.xyz
Source: global traffic	DNS traffic detected: DNS query: sesyieaiesegeaow.xyz
Source: global traffic	DNS traffic detected: DNS query: kccmicaswqmswwak.xyz
Source: global traffic	DNS traffic detected: DNS query: mssaogwocegysoow.xyz
Source: global traffic	DNS traffic detected: DNS query: wssaqmakumewmaes.xyz
Source: global traffic	DNS traffic detected: DNS query: cmukociggiqcouio.xyz
Source: global traffic	DNS traffic detected: DNS query: skyqsyyymyacyayc.xyz
Source: global traffic	DNS traffic detected: DNS query: uoigsiqmemcscosu.xyz
Source: global traffic	DNS traffic detected: DNS query: kuywuskkgqsigqqs.xyz
Source: global traffic	DNS traffic detected: DNS query: auayomwkewcomwas.xyz
Source: global traffic	DNS traffic detected: DNS query: iyaikmkkowcqemsi.xyz
Source: global traffic	DNS traffic detected: DNS query: ggicikyqcaiyguee.xyz
Source: global traffic	DNS traffic detected: DNS query: oqyaoykomyoygics.xyz
Source: global traffic	DNS traffic detected: DNS query: eqakguiwiqacqiwg.xyz
Source: global traffic	DNS traffic detected: DNS query: wgcaouuqqqwucogy.xyz
Source: global traffic	DNS traffic detected: DNS query: ewacuagosgqmuocm.xyz
Source: global traffic	DNS traffic detected: DNS query: wgqyouayikuyuqmk.xyz
Source: global traffic	DNS traffic detected: DNS query: owaaygsacguucaye.xyz
Source: global traffic	DNS traffic detected: DNS query: uwgicagyykoommga.xyz
Source: global traffic	DNS traffic detected: DNS query: uiggameqqycugsqw.xyz
Source: global traffic	DNS traffic detected: DNS query: goguooqkgysueime.xyz
Source: global traffic	DNS traffic detected: DNS query: keosqeosukqcooco.xyz
Source: global traffic	DNS traffic detected: DNS query: maoeeogmuauywsyu.xyz
Source: global traffic	DNS traffic detected: DNS query: ismqaewykmoiguki.xyz
Source: global traffic	DNS traffic detected: DNS query: wucwykasawokemaw.xyz
Source: global traffic	DNS traffic detected: DNS query: ukmcqucewskcqygg.xyz
Source: global traffic	DNS traffic detected: DNS query: qqqmeagkkosgcayo.xyz
Source: global traffic	DNS traffic detected: DNS query: ysawassgkwqygmmq.xyz
Source: global traffic	DNS traffic detected: DNS query: osaeyoiqoqawauga.xyz
Source: global traffic	DNS traffic detected: DNS query: iagisciiyoemgwaa.xyz
Source: global traffic	DNS traffic detected: DNS query: ymysimqoykwqeqiq.xyz
Source: global traffic	DNS traffic detected: DNS query: ymmcwogyimsuqmcc.xyz
Source: global traffic	DNS traffic detected: DNS query: osmoygyawqmmimkq.xyz
Source: global traffic	DNS traffic detected: DNS query: immyecuqwkiyscys.xyz
Source: global traffic	DNS traffic detected: DNS query: omsqkuiwcwoegooq.xyz
Source: global traffic	DNS traffic detected: DNS query: ukaiiiyqoooycyqm.xyz
Source: global traffic	DNS traffic detected: DNS query: isemauqkwwiumyky.xyz
Source: global traffic	DNS traffic detected: DNS query: keguuyioweymiaws.xyz
Source: global traffic	DNS traffic detected: DNS query: kwaywmaequkqccai.xyz
Source: global traffic	DNS traffic detected: DNS query: yyimcoiwgckeakcm.xyz
Source: global traffic	DNS traffic detected: DNS query: ekcwemuekgqsimae.xyz
Source: global traffic	DNS traffic detected: DNS query: imigkomgmqgmakqk.xyz
Source: global traffic	DNS traffic detected: DNS query: omasqkwqyskcagwi.xyz
Source: global traffic	DNS traffic detected: DNS query: awyomscgweuqmgaw.xyz
Source: global traffic	DNS traffic detected: DNS query: eyoyssauceguqwmk.xyz
Source: global traffic	DNS traffic detected: DNS query: gwwcqeykmseicgaw.xyz
Source: global traffic	DNS traffic detected: DNS query: qwywqgsmgaoiwsga.xyz
Source: global traffic	DNS traffic detected: DNS query: ososwckwcqmmwqcy.xyz
Source: global traffic	DNS traffic detected: DNS query: osaymwoggqqycmse.xyz
Source: global traffic	DNS traffic detected: DNS query: oyewqwkusieeoqey.xyz
Source: global traffic	DNS traffic detected: DNS query: ommwaqgaemsmcqwc.xyz
Source: global traffic	DNS traffic detected: DNS query: cauewwukyywyqiei.xyz
Source: global traffic	DNS traffic detected: DNS query: goeykqccmemkswom.xyz
Source: global traffic	DNS traffic detected: DNS query: aksuakswwkiimamq.xyz
Source: global traffic	DNS traffic detected: DNS query: isaeicumkcuwqmqq.xyz
Source: global traffic	DNS traffic detected: DNS query: qiswokuokugiooky.xyz
Source: global traffic	DNS traffic detected: DNS query: qiswcssocuqsaqkq.xyz
Source: global traffic	DNS traffic detected: DNS query: qcyksokwumicscaa.xyz
Source: global traffic	DNS traffic detected: DNS query: esiaisyasoaoqwki.xyz
Source: global traffic	DNS traffic detected: DNS query: giqukkwwcwgqcisg.xyz
Source: global traffic	DNS traffic detected: DNS query: ymqaaskiwomkucuy.xyz
Source: global traffic	DNS traffic detected: DNS query: akueuaicusaoieiy.xyz
Source: global traffic	DNS traffic detected: DNS query: sauygqecsusickcu.xyz
Source: global traffic	DNS traffic detected: DNS query: kkwkgmcoawgaoiwg.xyz
Source: global traffic	DNS traffic detected: DNS query: saumycuogqsqykes.xyz
Source: global traffic	DNS traffic detected: DNS query: ukyokaigmmkumgoa.xyz
Source: global traffic	DNS traffic detected: DNS query: eswweuycwwiiykwo.xyz
Source: global traffic	DNS traffic detected: DNS query: uksgyqiqaaiaiesi.xyz
Source: global traffic	DNS traffic detected: DNS query: smckcsaioceiyasu.xyz
Source: global traffic	DNS traffic detected: DNS query: esimsqgcwwwmyoqc.xyz
Source: global traffic	DNS traffic detected: DNS query: maiyuocqqiqiiskw.xyz
Source: global traffic	DNS traffic detected: DNS query: smaaowemwiwggocu.xyz
Source: global traffic	DNS traffic detected: DNS query: kwuuwgemogmuomwq.xyz

Source: unknown

HTTP traffic detected: POST /dns-query HTTP/1.1Host: chrome.cloudflare-dns.comConnection: keep-aliveContent-Length: 128Accept: application/dns-messageAccept-Language: *User-Agent: ChromeAccept-Encoding: identityContent-Type: application/dns-message

Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://bard.google.com/
Source: Reporting and NEL.14.dr	String found in binary or memory: https://bzib.nelreports.net/api/report?cat=bingbusiness
Source: Web Data.14.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: Web Data.14.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: Network Persistent State0.14.dr, 926903f4-3f2f-4644-86cb-e13b3adb255e.tmp.15.dr	String found in binary or memory: https://chrome.cloudflare-dns.com
Source: manifest.json.14.dr	String found in binary or memory: https://chrome.google.com/webstore/
Source: manifest.json.14.dr	String found in binary or memory: https://chromewebstore.google.com/
Source: 105b3d78-a349-4fc2-9921-a82123655d58.tmp.15.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json0.14.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 105b3d78-a349-4fc2-9921-a82123655d58.tmp.15.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: manifest.json0.14.dr	String found in binary or memory: https://docs.google.com/
Source: manifest.json0.14.dr	String found in binary or memory: https://drive-autopush.corp.google.com/
Source: manifest.json0.14.dr	String found in binary or memory: https://drive-daily-0.corp.google.com/
Source: manifest.json0.14.dr	String found in binary or memory: https://drive-daily-1.corp.google.com/
Source: manifest.json0.14.dr	String found in binary or memory: https://drive-daily-2.corp.google.com/
Source: manifest.json0.14.dr	String found in binary or memory: https://drive-daily-3.corp.google.com/
Source: manifest.json0.14.dr	String found in binary or memory: https://drive-daily-4.corp.google.com/
Source: manifest.json0.14.dr	String found in binary or memory: https://drive-daily-5.corp.google.com/
Source: manifest.json0.14.dr	String found in binary or memory: https://drive-daily-6.corp.google.com/
Source: manifest.json0.14.dr	String found in binary or memory: https://drive-preprod.corp.google.com/
Source: manifest.json0.14.dr	String found in binary or memory: https://drive-staging.corp.google.com/
Source: manifest.json0.14.dr	String found in binary or memory: https://drive.google.com/
Source: Web Data.14.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: Web Data.14.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: Web Data.14.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 000003.log.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?assetgroup=Arbit
Source: 000003.log8.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtrac
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_163_music.png/1.0.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_dark.png/1.7.32/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_hc.png/1.7.32/asset
Source: HubApps Icons.14.dr, 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_light.png/1.7.32/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_hc.png/1.2.1/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_maximal_dark.png/1.2.1/ass
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_maximal_light.png/1.2.1/as
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_amazon_music_light.png/1.4.13/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_apple_music.png/1.4.12/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_bard_light.png/1.0.1/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_dark.png/1.1.17/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_dark.png/1.6.8/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_light.png/1.1.17/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_light.png/1.6.8/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_hc.png/1.1.17/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_hc.png/1.6.8/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_hc.png/1.0.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_maximal_dark.png/1.0.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_maximal_light.png/1.0.3/asse
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_deezer.png/1.4.12/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_demo_dark.png/1.0.6/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_demo_light.png/1.0.6/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_designer_color.png/1.0.14/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_designer_hc.png/1.0.14/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_hc.png/1.1.12/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_maximal_dark.png/1.1.12/asset
Source: HubApps Icons.14.dr, 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_maximal_light.png/1.1.12/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_hc.png/1.2.0/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_maximal_dark.png/1.2.0/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_maximal_light.png/1.2.0/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_excel.png/1.7.32/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_facebook_messenger.png/1.5.14/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_gaana.png/1.0.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc.png/1.7.1/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc_controller.png/1.7.1/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc_joystick.png/1.7.1/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark.png/1.7.1/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark_controller.png/1.7.1/
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark_joystick.png/1.7.1/as
Source: HubApps Icons.14.dr, 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light.png/1.7.1/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light_controller.png/1.7.1
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light_joystick.png/1.7.1/a
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_gmail.png/1.5.4/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_help.png/1.0.0/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_hc.png/0.1.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_maximal_dark.png/0.1.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_maximal_light.png/0.1.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_iHeart.png/1.0.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_hc.png/1.0.14/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_maximal_dark.png/1.0.14/as
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_maximal_light.png/1.0.14/a
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_instagram.png/1.4.13/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_ku_gou.png/1.0.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_last.png/1.0.3/asset
Source: 000003.log.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_manifest_gz/4.7.107/asset?assetgroup=Sho
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_dark.png/1.1.0/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_hc.png/1.1.0/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_light.png/1.1.0/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_naver_vibe.png/1.0.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_dark.png/1.4.9/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_hc.png/1.4.9/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_light.png/1.4.9/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_dark.png/1.9.10/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_hc.png/1.9.10/asset
Source: HubApps Icons.14.dr, 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_light.png/1.9.10/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_hc.png/1.1.0/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_maximal_dark.png/1.1.0/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_maximal_light.png/1.1.0/asse
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_power_point.png/1.7.32/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_qq.png/1.0.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_dark.png/1.1.12/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_hc.png/1.1.12/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_light.png/1.1.12/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_hc.png/1.1.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_maximal_dark.png/1.1.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_maximal_light.png/1.1.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_hc.png/1.3.6/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_maximal_dark.png/1.3.6/asset
Source: HubApps Icons.14.dr, 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_maximal_light.png/1.3.6/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.1.12/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.4.0/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.5.13/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.1.12/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.4.0/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.5.13/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.1.12/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.4.0/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.5.13/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_hc.png/1.4.0/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_maximal_dark.png/1.4.0/asset
Source: HubApps Icons.14.dr, 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_maximal_light.png/1.4.0/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_dark.png/1.3.20/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_hc.png/1.3.20/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_light.png/1.3.20/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_sound_cloud.png/1.0.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_spotify.png/1.4.12/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_dark.png/1.2.19/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_hc.png/1.2.19/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_light.png/1.2.19/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_telegram.png/1.0.4/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_hc.png/1.0.5/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_maximal_dark.png/1.0.5/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_maximal_light.png/1.0.5/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_tidal.png/1.0.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_tik_tok_light.png/1.0.5/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_hc.png/1.5.13/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_maximal_dark.png/1.5.13/asset
Source: HubApps Icons.14.dr, 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_maximal_light.png/1.5.13/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_twitter_light.png/1.0.9/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_vk.png/1.0.3/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_whats_new.png/1.0.0/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_whatsapp_light.png/1.4.11/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_word.png/1.7.32/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_yandex_music.png/1.0.10/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_youtube.png/1.4.14/asset
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://excel.new?from=EdgeM365Shoreline
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://gaana.com/
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://i.y.qq.com/n2/m/index.html
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://latest.web.skype.com/?browsername=edge_canary_shoreline
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://m.kugou.com/
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://m.soundcloud.com/
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://m.vk.com/
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://mail.google.com/mail/mu/mp/266/#tl/Inbox
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://manifestdeliveryservice.edgebrowser.microsoft-staging-falcon.io/app/page-context-demo
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://music.amazon.com
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://music.apple.com
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://music.yandex.com
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://open.spotify.com
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://outlook.live.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://outlook.live.com/mail/0/
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://outlook.live.com/mail/compose?isExtension=true
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://outlook.live.com/mail/inbox?isExtension=true&sharedHeader=1&nlp=1&client_flight=outlookedge
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://outlook.office.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://outlook.office.com/mail/0/
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://outlook.office.com/mail/compose?isExtension=true
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://outlook.office.com/mail/inbox?isExtension=true&sharedHeader=1&client_flight=outlookedge
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://powerpoint.new?from=EdgeM365Shoreline
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://tidal.com/
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://twitter.com/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.14.dr	String found in binary or memory: https://unitedstates1.ss.wd.microsoft.us/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.14.dr	String found in binary or memory: https://unitedstates2.ss.wd.microsoft.us/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.14.dr	String found in binary or memory: https://unitedstates4.ss.wd.microsoft.us/
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://vibe.naver.com/today
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://web.skype.com/?browsername=edge_canary_shoreline
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://web.skype.com/?browsername=edge_stable_shoreline
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://web.telegram.org/
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://web.whatsapp.com
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://word.new?from=EdgeM365Shoreline
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.deezer.com/
Source: content_new.js.14.dr, content.js.14.dr	String found in binary or memory: https://www.google.com/chrome
Source: Web Data.14.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.iheart.com/podcast/
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.instagram.com
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.last.fm/
Source: Session_13378477169252574.14.dr	String found in binary or memory: https://www.med.unc.edu
Source: 000003.log1.14.dr	String found in binary or memory: https://www.med.unc.edu/
Source: Favicons.14.dr	String found in binary or memory: https://www.med.unc.edu/favicon.ico
Source: Session_13378477169252574.14.dr	String found in binary or memory: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf
Source: cmd.exe, 00000008.00000002.2208897939.0000000003171000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf(Sl
Source: History.14.dr	String found in binary or memory: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfBlank
Source: cmd.exe, 00000008.00000002.2209182958.00000000032F0000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000008.00000002.2209182958.00000000032F5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000008.00000002.2208897939.0000000003140000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfC:
Source: cmd.exe, 00000008.00000002.2208897939.0000000003171000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfNPr
Source: Session_13378477169252574.14.dr	String found in binary or memory: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfT
Source: cmd.exe, 00000008.00000002.2208897939.000000000314B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfY
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.messenger.com
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1&game
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1&item
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1&item=fl
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1&playInS
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.office.com
Source: Top Sites.14.dr	String found in binary or memory: https://www.office.com/
Source: Top Sites.14.dr	String found in binary or memory: https://www.office.com/Office
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.officeplus.cn/?sid=shoreline&endpoint=OPPC&source=OPCNshoreline
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true&auth=1
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true&auth=2
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=1
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=2
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.tiktok.com/
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://www.youtube.com
Source: 346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	String found in binary or memory: https://y.music.163.com/m/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\3ecd54.msi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\SourceHash{740864D8-D5D4-4230-8D1D-1C2E0E22C8A6}	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\inprogressinstallinfo.ipi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSICE5E.tmp	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A1E490	13_2_00A1E490
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A238A0	13_2_00A238A0
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A110F0	13_2_00A110F0
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A088D0	13_2_00A088D0
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A228D0	13_2_00A228D0
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00AAF030	13_2_00AAF030
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A02010	13_2_00A02010
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A06870	13_2_00A06870
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A071C0	13_2_00A071C0
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A095D0	13_2_00A095D0
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A15970	13_2_00A15970
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A10140	13_2_00A10140
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A29950	13_2_00A29950
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A142A0	13_2_00A142A0
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A21EC0	13_2_00A21EC0
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00AB06D0	13_2_00AB06D0
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A0AA20	13_2_00A0AA20
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A01625	13_2_00A01625
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00B59A20	13_2_00B59A20
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00AAF260	13_2_00AAF260
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A05270	13_2_00A05270
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A0B650	13_2_00A0B650
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A0DA50	13_2_00A0DA50
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A15250	13_2_00A15250
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A0F7A0	13_2_00A0F7A0
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A203F0	13_2_00A203F0
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A9D300	13_2_00A9D300
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A0F310	13_2_00A0F310

Source: Joe Sandbox View

Dropped File: C:\Windows\Installer\MSICE5E.tmp FD622CF73EA951A6DE631063ABA856487D77745DD1500ADCA61902B8DDE56FE1

Source: classification engine

Classification label: mal72.troj.evad.winMSI@72/334@677/7

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

File created: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-675ACB6C-101C.pma

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7008:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6924:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4944:120:WilError_03

Source: C:\Windows\System32\msiexec.exe

File created: C:\Windows\TEMP\~DF7720AEABA0FBE7BB.TMP

Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe

File read: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\msiwrapper.ini

Jump to behavior

Source: C:\Windows\SysWOW64\icacls.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: Login Data.14.dr

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: 56ff7c.msi

ReversingLabs: Detection: 25%

Source: unknown	Process created: C:\Windows\System32\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\56ff7c.msi"
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding E03893F7B7963782D846F8C5ED735E6C
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\icacls.exe "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\." /SETINTEGRITYLEVEL (CI)(OI)HIGH
Source: C:\Windows\SysWOW64\icacls.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\expand.exe "C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files
Source: C:\Windows\SysWOW64\expand.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c start msedge https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=2088,i,17776723198320850394,9006600051924449842,262144 /prefetch:3
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe "C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe" /VERYSILENT /VERYSILENT
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6404 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6544 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-GB --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=7184 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:6
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7504 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7504 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=2116,i,4999531332581732132,5899536460662317104,262144 /prefetch:3
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2044,i,11800589099561053754,12146886287635931717,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6432 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding E03893F7B7963782D846F8C5ED735E6C	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\icacls.exe "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\." /SETINTEGRITYLEVEL (CI)(OI)HIGH	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\expand.exe "C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c start msedge https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe "C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe" /VERYSILENT /VERYSILENT	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=2088,i,17776723198320850394,9006600051924449842,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6404 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6544 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-GB --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=7184 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:6	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7504 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7504 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7504 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6432 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=2116,i,4999531332581732132,5899536460662317104,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2044,i,11800589099561053754,12146886287635931717,262144 /prefetch:3

Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msihnd.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srclient.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: spp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\icacls.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: dpx.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: wdscore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: dbgcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Section loaded: fwpuclnt.dll	Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe

File written: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\msiwrapper.ini

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: 56ff7c.msi

Static file information: File size 2002944 > 1048576

Source:

Binary string: C:\ss2\Projects\MsiWrapper\MsiCustomActions\Release\MsiCustomActions.pdb source: 56ff7c.msi, 3ecd54.msi.1.dr, MSICE5E.tmp.1.dr

Source: 7cf468e1c0af6e4fbb9267df15a06e7a.tmp.5.dr	Static PE information: section name: .00cfg
Source: 7cf468e1c0af6e4fbb9267df15a06e7a.tmp.5.dr	Static PE information: section name: .voltbl

Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A0B1C0 push eax; mov dword ptr [esp], ecx	13_2_00A0B1C5
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A0AD70 push eax; mov dword ptr [esp], ecx	13_2_00A0AD75
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00A16E60 push eax; mov dword ptr [esp], ecx	13_2_00A16E63

Source: 7cf468e1c0af6e4fbb9267df15a06e7a.tmp.5.dr

Static PE information: section name: .text entropy: 7.00022260588102

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSICE5E.tmp	Jump to dropped file
Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe (copy)	Jump to dropped file
Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\f4ab6fda9a2e4611ba0200371596cdb0$dpx$.tmp\7cf468e1c0af6e4fbb9267df15a06e7a.tmp	Jump to dropped file

Source: C:\Windows\System32\msiexec.exe

File created: C:\Windows\Installer\MSICE5E.tmp

Jump to dropped file

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run MicrosoftEdgeAutoLaunch_C366A24065C39A1BE76E148DC2D0A868			Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run MicrosoftEdgeAutoLaunch_C366A24065C39A1BE76E148DC2D0A868			Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe

Process created: C:\Windows\SysWOW64\icacls.exe "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\." /SETINTEGRITYLEVEL (CI)(OI)HIGH

Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Thread delayed: delay time: 600000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Thread delayed: delay time: 599995			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Window / User API: threadDelayed 742	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Window / User API: threadDelayed 7011	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Window / User API: threadDelayed 1252	Jump to behavior

Source: C:\Windows\System32\msiexec.exe

Dropped PE file which has not been started: C:\Windows\Installer\MSICE5E.tmp

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe

API coverage: 6.4 %

Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe TID: 1988	Thread sleep count: 340 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe TID: 1988	Thread sleep time: -204000000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe TID: 1988	Thread sleep count: 742 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe TID: 1988	Thread sleep count: 129 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe TID: 1988	Thread sleep count: 38 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe TID: 1988	Thread sleep time: -599995s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe TID: 1988	Thread sleep count: 7011 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe TID: 1988	Thread sleep count: 1252 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe TID: 1988	Thread sleep count: 40 > 30	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Last function: Thread delayed

Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Thread delayed: delay time: 600000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Thread delayed: delay time: 599995			Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\	Jump to behavior

Source: install86.exe, 0000000D.00000002.3232179250.000000000066E000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\System32\msiexec.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe

Code function: 13_2_00B6004A IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

13_2_00B6004A

Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00B6BE26 mov eax, dword ptr fs:[00000030h]	13_2_00B6BE26
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00B5D838 mov eax, dword ptr fs:[00000030h]	13_2_00B5D838
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00B6BDF5 mov eax, dword ptr fs:[00000030h]	13_2_00B6BDF5

Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00B5802B SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		13_2_00B5802B
Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe	Code function: 13_2_00B6004A IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		13_2_00B6004A

HIPS / PFW / Operating System Protection Evasion

Maps a DLL or memory area into another process

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Section loaded: NULL target: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe protection: readonly

Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\icacls.exe "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\." /SETINTEGRITYLEVEL (CI)(OI)HIGH	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\expand.exe "C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c start msedge https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe "C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe" /VERYSILENT /VERYSILENT	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe

Code function: 13_2_00B58F2A GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

13_2_00B58F2A

Source: C:\Windows\SysWOW64\expand.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Replication Through Removable Media	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	111 Process Injection	21 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Services File Permissions Weakness	1 Registry Run Keys / Startup Folder	21 Virtualization/Sandbox Evasion	LSASS Memory	111 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	1 Services File Permissions Weakness	111 Process Injection	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 DLL Side-Loading	2 Obfuscated Files or Information	NTDS	21 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	14 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Services File Permissions Weakness	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Software Packing	Cached Domain Credentials	11 Peripheral Device Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	3 File and Directory Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	14 System Information Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
56ff7c.msi	25%	ReversingLabs	Win32.Trojan.Generic

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\f4ab6fda9a2e4611ba0200371596cdb0$dpx$.tmp\7cf468e1c0af6e4fbb9267df15a06e7a.tmp	32%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe (copy)	32%	ReversingLabs	Win32.Trojan.Generic
C:\Windows\Installer\MSICE5E.tmp	0%	ReversingLabs

Source	Detection	Scanner	Label
https://powerpoint.new?from=EdgeM365Shoreline	0%	Avira URL Cloud	safe
https://word.new?from=EdgeM365Shoreline	0%	Avira URL Cloud	safe
https://latest.web.skype.com/?browsername=edge_canary_shoreline	0%	Avira URL Cloud	safe
https://vibe.naver.com/today	0%	Avira URL Cloud	safe
https://manifestdeliveryservice.edgebrowser.microsoft-staging-falcon.io/app/page-context-demo	0%	Avira URL Cloud	safe
https://excel.new?from=EdgeM365Shoreline	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
chrome.cloudflare-dns.com	162.159.61.3	true	false	high
www.med.unc.edu	152.19.9.32	true	false	high
aikmouciiqgecoqi.xyz	166.1.160.237	true	false	high
googlehosted.l.googleusercontent.com	142.250.181.65	true	false	high
ggeymcaisciikucq.xyz	unknown	unknown	false	high
maoeeogmuauywsyu.xyz	unknown	unknown	false	high
miqcugomwgmygyoq.xyz	unknown	unknown	false	high
qweaumwmomesioio.xyz	unknown	unknown	false	high
yqyqgowkwqiggewq.xyz	unknown	unknown	false	high
smwcqasgeqikoqss.xyz	unknown	unknown	false	high
omasqkwqyskcagwi.xyz	unknown	unknown	false	high
oscegykuecgmiioq.xyz	unknown	unknown	false	high
oqaiyaoqwyeswaiy.xyz	unknown	unknown	false	high
gmciuwiycsqycggy.xyz	unknown	unknown	false	high
coayaokeissieqcc.xyz	unknown	unknown	false	high
qiyggmguowygeooc.xyz	unknown	unknown	false	high
caysswwugsmkeksw.xyz	unknown	unknown	false	high
yyimcoiwgckeakcm.xyz	unknown	unknown	false	high
oyogquqkmyqwwkuq.xyz	unknown	unknown	false	high
ywmgykycywqqewqw.xyz	unknown	unknown	false	high
uyeqwcuyimescesu.xyz	unknown	unknown	false	high
sauygqecsusickcu.xyz	unknown	unknown	false	high
ecgmcmqswickqcgi.xyz	unknown	unknown	false	high
uosaescwmkiyscay.xyz	unknown	unknown	false	high
wssaqmakumewmaes.xyz	unknown	unknown	false	high
kimakioiwmawksiw.xyz	unknown	unknown	false	high
ekqyosgcumkcecmo.xyz	unknown	unknown	false	high
uoeukcckqmmsuwaa.xyz	unknown	unknown	false	high
goicqsmskkygkkka.xyz	unknown	unknown	false	high
ucmwywoqciswaguc.xyz	unknown	unknown	false	high
kcwiywyygywkkysk.xyz	unknown	unknown	false	high
qigaaawumoqgmwck.xyz	unknown	unknown	false	high
uiicikumwwsmaeem.xyz	unknown	unknown	false	high
cygmqaagqcuusmiq.xyz	unknown	unknown	false	high
eigywisgeoiskekg.xyz	unknown	unknown	false	high
wggqoukyeokwgmoy.xyz	unknown	unknown	false	high
keykoekseemyiewq.xyz	unknown	unknown	false	high
mywaqkeaawisisky.xyz	unknown	unknown	false	high
ikuqcsooiucogaww.xyz	unknown	unknown	false	high
gcyciogqguooyici.xyz	unknown	unknown	false	high
aoyeoimcuuqakckw.xyz	unknown	unknown	false	high
smckcsaioceiyasu.xyz	unknown	unknown	false	high
wsmyawqeqguacwas.xyz	unknown	unknown	false	high
ymysimqoykwqeqiq.xyz	unknown	unknown	false	high
qimmkmaumumswocw.xyz	unknown	unknown	false	high
skyiqyaeoykwcgiw.xyz	unknown	unknown	false	high
mssaogwocegysoow.xyz	unknown	unknown	false	high
gmqeqkcqackwkgao.xyz	unknown	unknown	false	high
skiwkmaaeeiqqgee.xyz	unknown	unknown	false	high
cyqqgacqkowwkqqe.xyz	unknown	unknown	false	high
qigcqiaomwieqwka.xyz	unknown	unknown	false	high
oywgqkusocouysua.xyz	unknown	unknown	false	high
ukwgsimcamwqcqus.xyz	unknown	unknown	false	high
ukmcqucewskcqygg.xyz	unknown	unknown	false	high
wgcaouuqqqwucogy.xyz	unknown	unknown	false	high
moiimkscmiswaesw.xyz	unknown	unknown	false	high
uwagocmgakuuykiu.xyz	unknown	unknown	false	high
ieqeeiggkuqcomyo.xyz	unknown	unknown	false	high
wgssaogcsscmkswu.xyz	unknown	unknown	false	high
ygucsucmagwqsqcu.xyz	unknown	unknown	false	high
aiiqyyikowqaygwy.xyz	unknown	unknown	false	high
gwuaqqsyegywuaya.xyz	unknown	unknown	false	high
skawoueawceoywsy.xyz	unknown	unknown	false	high
osyawgmkggwwaise.xyz	unknown	unknown	false	high
mskmgwkuiamqikce.xyz	unknown	unknown	false	high
issaesuceymoyccq.xyz	unknown	unknown	false	high
cskowwiekeqaakki.xyz	unknown	unknown	false	high
mueuwcqsioowsmce.xyz	unknown	unknown	false	high
ssmkyomikukusksu.xyz	unknown	unknown	false	high
aoeewogkicikusoc.xyz	unknown	unknown	false	high
qcwaiaiqiwcakawa.xyz	unknown	unknown	false	high
ywcwqgmikmycwoeu.xyz	unknown	unknown	false	high
waucsgsqqsqkacog.xyz	unknown	unknown	false	high
ssiooaeoaocuyaow.xyz	unknown	unknown	false	high
micemismikicsccc.xyz	unknown	unknown	false	high
gwoyamckoqoaauoq.xyz	unknown	unknown	false	high
wiuyuwqiqkkogmoe.xyz	unknown	unknown	false	high
keosqeosukqcooco.xyz	unknown	unknown	false	high
oyewqwkusieeoqey.xyz	unknown	unknown	false	high
suogmuweyqgoqkgk.xyz	unknown	unknown	false	high
qiqueqokwqqgwwci.xyz	unknown	unknown	false	high
mmiugosumuqmuqoc.xyz	unknown	unknown	false	high
keguuyioweymiaws.xyz	unknown	unknown	false	high
uiaqcykmqwcwgmeg.xyz	unknown	unknown	false	high
uowkoqwgqqeweume.xyz	unknown	unknown	false	high
guowewgekuoqacyy.xyz	unknown	unknown	false	high
oyyagswauqyckoye.xyz	unknown	unknown	false	high
coyikkwmyomyykmo.xyz	unknown	unknown	false	high
qiswokuokugiooky.xyz	unknown	unknown	false	high
moysoauykmieesas.xyz	unknown	unknown	false	high
caceukeeygaaqaec.xyz	unknown	unknown	false	high
keqgamuiascccwou.xyz	unknown	unknown	false	high
keckssemmeoqieqe.xyz	unknown	unknown	false	high
ymmoqwiyeomigemu.xyz	unknown	unknown	false	high
kcoiygiwuyqyaoku.xyz	unknown	unknown	false	high
kewgquswkewgaweo.xyz	unknown	unknown	false	high
mayykkuyeuiggyws.xyz	unknown	unknown	false	high
uwskygguegqkasme.xyz	unknown	unknown	false	high
akasikewaomyiwqk.xyz	unknown	unknown	false	high
aweqoooqomueeiwi.xyz	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://clients2.googleusercontent.com/crx/blobs/AW50ZFsLPhJJyx_4ShcDOgcEpJeOc7Vr0kMzfFRoaMfWx4pAgZ0UGF2i9_ei1A7FAHQ-EPFULeBn7F8_SEKhjbpEyKfiidX7GF_6BDOycMeg5w03wjwVQ61hkaEix8WFqmEAxlKa5cmz_tdFr9JtRwdqRu82wmLe2Ghe/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_84_1_0.crx	false	high
https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf	false	high
https://aikmouciiqgecoqi.xyz:443/api/client_hello	false	high
https://chrome.cloudflare-dns.com/dns-query	false	high
https://www.med.unc.edu/favicon.ico	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	Web Data.14.dr	false		high
https://web.whatsapp.com	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://duckduckgo.com/ac/?q=	Web Data.14.dr	false		high
https://www.officeplus.cn/?sid=shoreline&endpoint=OPPC&source=OPCNshoreline	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://m.kugou.com/	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://www.office.com	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://outlook.live.com/mail/0/	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://www.last.fm/	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf(Sl	cmd.exe, 00000008.00000002.2208897939.0000000003171000.00000004.00000020.00020000.00000000.sdmp	false		high
https://powerpoint.new?from=EdgeM365Shoreline	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	Web Data.14.dr	false		high
https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfC:	cmd.exe, 00000008.00000002.2209182958.00000000032F0000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000008.00000002.2209182958.00000000032F5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000008.00000002.2208897939.0000000003140000.00000004.00000020.00020000.00000000.sdmp	false		high
https://tidal.com/	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://docs.google.com/	manifest.json0.14.dr	false		high
https://www.youtube.com	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://www.instagram.com	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://web.skype.com/?browsername=edge_canary_shoreline	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://gaana.com/	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://drive-staging.corp.google.com/	manifest.json0.14.dr	false		high
https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfBlank	History.14.dr	false		high
https://drive.google.com/	manifest.json0.14.dr	false		high
https://outlook.live.com/mail/compose?isExtension=true	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=1	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	Web Data.14.dr	false		high
https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=2	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://www.messenger.com	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://outlook.live.com/mail/inbox?isExtension=true&sharedHeader=1&nlp=1&client_flight=outlookedge	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://outlook.office.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://outlook.office.com/mail/compose?isExtension=true	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfY	cmd.exe, 00000008.00000002.2208897939.000000000314B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://unitedstates4.ss.wd.microsoft.us/	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.14.dr	false		high
https://i.y.qq.com/n2/m/index.html	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://www.deezer.com/	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://latest.web.skype.com/?browsername=edge_canary_shoreline	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false	Avira URL Cloud: safe	unknown
https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfT	Session_13378477169252574.14.dr	false		high
https://word.new?from=EdgeM365Shoreline	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false	Avira URL Cloud: safe	unknown
https://www.office.com/	Top Sites.14.dr	false		high
https://chrome.cloudflare-dns.com	Network Persistent State0.14.dr, 926903f4-3f2f-4644-86cb-e13b3adb255e.tmp.15.dr	false		high
https://web.telegram.org/	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://outlook.live.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://outlook.office.com/mail/0/	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://manifestdeliveryservice.edgebrowser.microsoft-staging-falcon.io/app/page-context-demo	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	Web Data.14.dr	false		high
https://m.soundcloud.com/	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://mail.google.com/mail/mu/mp/266/#tl/Inbox	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://www.med.unc.edu/	000003.log1.14.dr	false		high
https://drive-daily-2.corp.google.com/	manifest.json0.14.dr	false		high
https://drive-autopush.corp.google.com/	manifest.json0.14.dr	false		high
https://music.amazon.com	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://drive-daily-4.corp.google.com/	manifest.json0.14.dr	false		high
https://vibe.naver.com/today	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false	Avira URL Cloud: safe	unknown
https://unitedstates1.ss.wd.microsoft.us/	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.14.dr	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	Web Data.14.dr	false		high
https://outlook.office.com/mail/inbox?isExtension=true&sharedHeader=1&client_flight=outlookedge	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://www.office.com/Office	Top Sites.14.dr	false		high
https://open.spotify.com	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://www.med.unc.edu	Session_13378477169252574.14.dr	false		high
https://twitter.com/	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://drive-daily-1.corp.google.com/	manifest.json0.14.dr	false		high
https://excel.new?from=EdgeM365Shoreline	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false	Avira URL Cloud: safe	unknown
https://web.skype.com/?browsername=edge_stable_shoreline	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://www.onenote.com/stickynotesstaging?isEdgeHub=true	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://drive-daily-5.corp.google.com/	manifest.json0.14.dr	false		high
https://m.vk.com/	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfNPr	cmd.exe, 00000008.00000002.2208897939.0000000003171000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bzib.nelreports.net/api/report?cat=bingbusiness	Reporting and NEL.14.dr	false		high
https://www.google.com/chrome	content_new.js.14.dr, content.js.14.dr	false		high
https://www.tiktok.com/	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://drive-daily-6.corp.google.com/	manifest.json0.14.dr	false		high
https://drive-daily-0.corp.google.com/	manifest.json0.14.dr	false		high
https://www.onenote.com/stickynotes?isEdgeHub=true	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://www.iheart.com/podcast/	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://music.yandex.com	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://chromewebstore.google.com/	manifest.json.14.dr	false		high
https://drive-preprod.corp.google.com/	manifest.json0.14.dr	false		high
https://clients2.googleusercontent.com	105b3d78-a349-4fc2-9921-a82123655d58.tmp.15.dr	false		high
https://www.onenote.com/stickynotes?isEdgeHub=true&auth=2	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://www.onenote.com/stickynotes?isEdgeHub=true&auth=1	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://chrome.google.com/webstore/	manifest.json.14.dr	false		high
https://y.music.163.com/m/	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://unitedstates2.ss.wd.microsoft.us/	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.14.dr	false		high
https://bard.google.com/	346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp.14.dr	false		high
https://drive-daily-3.corp.google.com/	manifest.json0.14.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
166.1.160.237	aikmouciiqgecoqi.xyz	United States	11798	ACEDATACENTERS-AS-1US	false
23.57.90.162	unknown	United States	35994	AKAMAI-ASUS	false
162.159.61.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.19.9.32	www.med.unc.edu	United States	36850	UNC-CHUS	false
142.250.181.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1573628
Start date and time:	2024-12-12 12:37:39 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	29
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	56ff7c.msi
Detection:	MAL
Classification:	mal72.troj.evad.winMSI@72/334@677/7
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .msi Close Viewer

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 217.20.58.99, 192.229.221.95, 13.107.42.16, 204.79.197.239, 13.107.21.239, 172.217.17.78, 172.165.69.228, 13.107.6.158, 2.16.158.72, 2.16.158.58, 2.16.158.41, 2.16.158.56, 2.16.158.51, 2.16.158.43, 2.16.158.42, 2.16.158.73, 2.16.158.57, 2.19.198.56, 23.32.238.138, 2.16.158.88, 2.16.158.83, 2.16.158.80, 2.16.158.75, 2.16.158.82, 2.16.158.74, 2.16.158.81, 142.251.40.195, 142.250.72.99, 4.245.163.56, 20.190.181.23, 13.107.246.63, 23.218.208.109, 23.200.0.34, 13.91.222.61, 13.107.246.40, 172.217.165.138
Excluded domains from analysis (whitelisted): nav-edge.smartscreen.microsoft.com, config.edge.skype.com.trafficmanager.net, slscr.update.microsoft.com, a416.dscd.akamai.net, data-edge.smartscreen.microsoft.com, prod-agic-us-2.uksouth.cloudapp.azure.com, clients2.google.com, e86303.dscx.akamaiedge.net, ocsp.digicert.com, www.bing.com.edgekey.net, login.live.com, config-edge-skype.l-0007.l-msedge.net, msedge.b.tlu.dl.delivery.mp.microsoft.com, www.gstatic.com, l-0007.l-msedge.net, config.edge.skype.com, www.bing.com, edge-microsoft-com.dual-a-0036.a-msedge.net, fs.microsoft.com, bzib.nelreports.net.akamaized.net, otelrules.azureedge.net, ctldl.windowsupdate.com, prod-atm-wds-edge.trafficmanager.net, b-0005.b-msedge.net, www.googleapis.com, www-www.bing.com.trafficmanager.net, edge.microsoft.com, business-bing-com.b-0005.b-msedge.net, fe3cr.delivery.mp.microsoft.com, l-0007.config.skype.com, edgeassetservice.azureedge.net, business.bing.com, clients.l.google.com, msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: 56ff7c.msi

Simulations

Behavior and APIs

Time	Type	Description
06:39:31	API Interceptor	905665x Sleep call for process: install86.exe modified
11:39:36	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run MicrosoftEdgeAutoLaunch_C366A24065C39A1BE76E148DC2D0A868 "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
11:39:44	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run MicrosoftEdgeAutoLaunch_C366A24065C39A1BE76E148DC2D0A868 "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
162.159.61.3	57ff67.msi	Get hash	malicious	Unknown	Browse
	427c7bdc-ea02-97de-e5ef-a2c58c2d0a48.eml	Get hash	malicious	Unknown	Browse
	setup (2).msi	Get hash	malicious	Unknown	Browse
	setup.msi	Get hash	malicious	Unknown	Browse
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse
	Nieuwebestellingen10122024.exe	Get hash	malicious	FormBook	Browse
	751ietQPnX.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	l92fYljXWF.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	qxjDerXRGR.lnk	Get hash	malicious	RHADAMANTHYS	Browse
166.1.160.237	5c322c.msi	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	57ff67.msi	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	systemtask (2).exe	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	setup (2).msi	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	systemtask.exe	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	HvASs4SYK9.exe	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	293944637.dll	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	systemtask (2).exe	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	systemtask.exe	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	HvASs4SYK9.exe	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
239.255.255.250	https://www.google.cv/url?duf=FbLLcAJXWZoeUZJIjST2&lfg=uVQGQao2QJuMH6TEkmpq&sa=t&fmc=XCKeeJBBTaVsgNFTQcDe&url=amp%2Fshairmylife.com%2Fkam%2FOATWMWQPC27P047EIPR32X/YWxpc29ub0B0aG9ydWsuY29t	Get hash	malicious	Unknown	Browse
	57ff67.msi	Get hash	malicious	Unknown	Browse
	http://productfocus.com	Get hash	malicious	Unknown	Browse
	427c7bdc-ea02-97de-e5ef-a2c58c2d0a48.eml	Get hash	malicious	Unknown	Browse
	setup (2).msi	Get hash	malicious	Unknown	Browse
	setup.msi	Get hash	malicious	Unknown	Browse
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse
	https://feji.us/m266he	Get hash	malicious	Unknown	Browse
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse
	Rockwool-Msg-S9039587897.pdf	Get hash	malicious	EvilProxy, HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
chrome.cloudflare-dns.com	57ff67.msi	Get hash	malicious	Unknown	Browse	162.159.61.3
	setup (2).msi	Get hash	malicious	Unknown	Browse	162.159.61.3
	setup.msi	Get hash	malicious	Unknown	Browse	162.159.61.3
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse	172.64.41.3
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse	172.64.41.3
	Nieuwebestellingen10122024.exe	Get hash	malicious	FormBook	Browse	172.64.41.3
	751ietQPnX.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.159.61.3
	l92fYljXWF.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.159.61.3
	qxjDerXRGR.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.159.61.3
	taCCGTk8n1.lnk	Get hash	malicious	RHADAMANTHYS	Browse	172.64.41.3
aikmouciiqgecoqi.xyz	5c322c.msi	Get hash	malicious	Unknown	Browse	166.1.160.237
	57ff67.msi	Get hash	malicious	Unknown	Browse	166.1.160.237
	systemtask (2).exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	setup (2).msi	Get hash	malicious	Unknown	Browse	166.1.160.237
	systemtask.exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	HvASs4SYK9.exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	293944637.dll	Get hash	malicious	Unknown	Browse	166.1.160.237
	systemtask (2).exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	systemtask.exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	HvASs4SYK9.exe	Get hash	malicious	Unknown	Browse	166.1.160.237

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AKAMAI-ASUS	57ff67.msi	Get hash	malicious	Unknown	Browse	23.57.90.153
	427c7bdc-ea02-97de-e5ef-a2c58c2d0a48.eml	Get hash	malicious	Unknown	Browse	23.47.168.24
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse	23.207.6.152
	https://feji.us/m266he	Get hash	malicious	Unknown	Browse	2.20.41.119
	jew.mips.elf	Get hash	malicious	Unknown	Browse	23.37.180.40
	arm5.elf	Get hash	malicious	Mirai	Browse	96.16.159.247
	mpsl.elf	Get hash	malicious	Mirai	Browse	104.93.240.53
	mips.elf	Get hash	malicious	Mirai	Browse	23.213.140.182
	sh4.elf	Get hash	malicious	Mirai	Browse	23.51.122.180
	https://download-695-18811-018-webdav-logicaldoc.cdn-serveri4731-ns.shop/Documents/Instruction_695-18014-012_Rev.PDF.lnk	Get hash	malicious	Unknown	Browse	104.78.188.188
UNC-CHUS	https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/archive-virtio/virtio-win-0.1.190-1/virtio-win-guest-tools.exe	Get hash	malicious	Unknown	Browse	152.19.134.196
	botnet.spc.elf	Get hash	malicious	Mirai, Moobot	Browse	152.19.86.242
	m68k.elf	Get hash	malicious	Mirai, Moobot	Browse	152.23.211.5
	pjyhwsdgkl.elf	Get hash	malicious	Unknown	Browse	152.23.139.159
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	152.23.236.115
	w18Ys8qKuX.elf	Get hash	malicious	Unknown	Browse	152.2.60.13
	la.bot.mips.elf	Get hash	malicious	Unknown	Browse	152.2.11.89
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	152.2.11.1
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	152.23.24.144
	IWnUKXop2x.elf	Get hash	malicious	Mirai, Okiru	Browse	152.23.101.193
CLOUDFLARENETUS	https://www.google.cv/url?duf=FbLLcAJXWZoeUZJIjST2&lfg=uVQGQao2QJuMH6TEkmpq&sa=t&fmc=XCKeeJBBTaVsgNFTQcDe&url=amp%2Fshairmylife.com%2Fkam%2FOATWMWQPC27P047EIPR32X/YWxpc29ub0B0aG9ydWsuY29t	Get hash	malicious	Unknown	Browse	104.17.25.14
	57ff67.msi	Get hash	malicious	Unknown	Browse	172.64.41.3
	http://productfocus.com	Get hash	malicious	Unknown	Browse	104.26.0.186
	427c7bdc-ea02-97de-e5ef-a2c58c2d0a48.eml	Get hash	malicious	Unknown	Browse	1.1.1.1
	setup (2).msi	Get hash	malicious	Unknown	Browse	162.159.61.3
	setup.msi	Get hash	malicious	Unknown	Browse	172.64.41.3
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse	104.18.86.42
	https://feji.us/m266he	Get hash	malicious	Unknown	Browse	104.20.3.69
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse	172.64.41.3
	Rockwool-Msg-S9039587897.pdf	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	104.21.96.1
ACEDATACENTERS-AS-1US	5c322c.msi	Get hash	malicious	Unknown	Browse	166.1.160.237
	57ff67.msi	Get hash	malicious	Unknown	Browse	166.1.160.237
	systemtask (2).exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	setup (2).msi	Get hash	malicious	Unknown	Browse	166.1.160.237
	systemtask.exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	HvASs4SYK9.exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	293944637.dll	Get hash	malicious	Unknown	Browse	166.1.160.237
	systemtask (2).exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	systemtask.exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	HvASs4SYK9.exe	Get hash	malicious	Unknown	Browse	166.1.160.237

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Windows\Installer\MSICE5E.tmp	510286.msi	Get hash	malicious	Unknown	Browse
	5c322c.msi	Get hash	malicious	Unknown	Browse
	33abb.msi	Get hash	malicious	Unknown	Browse
	57ff67.msi	Get hash	malicious	Unknown	Browse
	setup (2).msi	Get hash	malicious	Unknown	Browse
	5c322c.msi	Get hash	malicious	Unknown	Browse
	57ff67.msi	Get hash	malicious	Unknown	Browse
	293944637.dll	Get hash	malicious	Unknown	Browse
	setup (2).msi	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\0859c576-fcdf-4037-9e1f-0f994e41ee87.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23870
Entropy (8bit):	6.048453026304974
Encrypted:	false
SSDEEP:	384:5tMkaMJH2m8qVT8IeQ0I5t0b9MEFdsNwh5DsDN9BHOUlC/hAP8SylvHJPduE:DMkbJrT8IeQc5d1DwpHOUlyAelvpVL
MD5:	C4E15D3A5A357F6D32AD06E806D36DD7
SHA1:	06DE272DC97B8D5264A20963F9732E5F173B761C
SHA-256:	5D2547769241F74BAC610BD71658B88379F1C1CCC31F1A7CA36A368D87860E5C
SHA-512:	CEFA82734CA356BE069E6AA67495BADAC15EDFEDB1B0540660247E4F68ED823B5FD4728ED887042C782FFBCBDCE52C9D357237DD55AE17FA58F9F3CC9FFB76EC
Malicious:	false
Preview:	{"apps_count_check_time":"13378477168744766","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_redirect_origin":"","last_seen_whats_new_page_version":"117.0.2045.47"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734003573"},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\0c829e4b-54c7-419b-b4dd-9deaa087e0ef.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	22852
Entropy (8bit):	6.046201272176499
Encrypted:	false
SSDEEP:	384:5tMkaMJH2m8qVT8IeQ0I5t0b9MEFdsNwh5DsihOQC/hAP8SylvHJPduQ:DMkbJrT8IeQc5d1DwihOQyAelvpVx
MD5:	3F8EC162F579E548C4D6FF3FEAE3F793
SHA1:	B5DCDC744F8449E5B1122A38B1D4C50E3E69E021
SHA-256:	92E26226E949F9A881512EE72D86F59D2EB8CD2C4804641F18359EE9771A0695
SHA-512:	626026884B09D58516E0339FFC144A7BC36FBDFCEA27B0021CCCD205DB9C368634E7D51E707DF7F77CC20AC76FA7118D461A5426610A76BFE5E2624F0042D48B
Malicious:	false
Preview:	{"apps_count_check_time":"13378477168744766","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_redirect_origin":"","last_seen_whats_new_page_version":"117.0.2045.47"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734003573"},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\0dbda9d5-2a07-422c-afcf-2c0f1f561cea.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25076
Entropy (8bit):	6.0308471170121
Encrypted:	false
SSDEEP:	384:9tMkaMJH2m8qVT8IeQ0I5t0b9MEF8sNwh5DsYJLBXhOQC/hAP8SylvHJPduQ:3MkbJrT8IeQc581DwYPXhOQyAelvpVx
MD5:	F28F7223E182B9BC59FDF0565D8C6DC6
SHA1:	1A164AF1D5AF3786D85C965D582DC353A4DD0C7A
SHA-256:	449F374E6E033F30A57676FB702413AFE08AA4FE696A0B13DC23DAC8C1D9D3AA
SHA-512:	BF7EBC577ABA63A384AF48D5D4441419B183F7EE09A7979E61408DC310086A984DBC6C7D6FA253F85379B094820518ABAC8F3F71306590173CCCF7875C5FF161
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","apps_count_check_time":"13378477168744766","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_redirect_origin":"","last_seen_whats_new_page_version":"117.0.2045.47"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734003573"},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMsEX9JMK3GLbeAvNjhrlo5G

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\25964c73-37ee-4312-9aea-eaca39770ae3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6820
Entropy (8bit):	5.795651303027429
Encrypted:	false
SSDEEP:	96:iaqkHfWhqJM5ih/cI9URLl8RotoZMFVvlwhue4IbONIeTC6XQS0qGqk+Z4uj+rj1:akOhq3eiRUKhu6qRAq1k8SPxVLZ7VTiq
MD5:	E0FB8139FB51473FA37039BCF8943620
SHA1:	DF3F0FC4AF9B57A223058A29E9FE4547841B8B5C
SHA-256:	FCCA4536367B09E6779D48A6861BFF47820B493871DFD1FDC4F9FA1D5677CD03
SHA-512:	3EA42D36FFC2BE75D37710EBE9272AB2DCB91469957D53AE644E2F28C8DB078E819E14AA54F5A7D538CE1298E47A2EC6B9B0FAD49333CF5FE5F36F9252C5F821
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_migration_success":false},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAB8Q8igE+XsRaSEfvDD9PhxEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACMLNU8nXrR+9b+DWPlNdGy4N+cLlWKYPn1zh1ZRtmuRgAAAAA

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\32370cff-ab55-4f86-9039-5618ecbb52ce.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	8090
Entropy (8bit):	5.815523307714972
Encrypted:	false
SSDEEP:	192:asNAOhqZeiRUtEQskOB6qRAq1k8SPxVLZ7VTiq:asNAOYApnOB6q3QxVNZTiq
MD5:	764CCCCA1D16BAC0D1BEB76655C04199
SHA1:	5D97EFB59AF61622FE322458066FDD31C0414F28
SHA-256:	EADBB48D0AC919A8904FE4E7EE01D8285ABA504FF0C509A9E54E8C1D7A11F79F
SHA-512:	E0FBBC98857BC0E08476EFD70FA9C812BB3356AC5A5732C4B88959140D7FBF8C628F00D2C6E52D9702555E986B02BCC11E1ACC84EBA2D516A09664090902F10A
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false},"tab_stabs":{"closed_without_unfreeze_never_unfrozen":0,"closed_without_unfreeze_previously_unfrozen":0,"discard_without_unfreeze_never_unfrozen":0,"discard_without_unfreeze_previously_unfrozen":0},"tab_stats":{"frozen_daily":0,"unfrozen_daily":0}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_mig

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\3248c6fd-b02e-445c-8bc7-08361c211c64.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	22948
Entropy (8bit):	6.046626872343591
Encrypted:	false
SSDEEP:	384:9tMkaMJH2m8qVT8IeQ0I5t0b9MEFdsNwh5DsihOQC/hAP8SylvHJPduQ:3MkbJrT8IeQc5d1DwihOQyAelvpVx
MD5:	F8F45EB368FA80BAFAB22B998F0B09D1
SHA1:	2802603B7A87479A564B636E2A276729A3D91D66
SHA-256:	2EFD4F2B378C2D1392141D26FD6A726B1FA20E0FC2FD6CFCBB3B64EC6D1A2BBA
SHA-512:	CFE7A8A806C8A79B3D6D02B0D1B6076B706EA42EE16E8F8AFED9409221B7BE3869BEC76A06957DA797046F35EAB5D20A846BB9FB74A657413EB0604F7EFDBE5B
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","apps_count_check_time":"13378477168744766","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_redirect_origin":"","last_seen_whats_new_page_version":"117.0.2045.47"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734003573"},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMsEX9JMK3GLbeAvNjhrlo5G

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\33028ba0-20bc-487d-a142-cd2933b12f2d.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23886
Entropy (8bit):	6.0484975234780345
Encrypted:	false
SSDEEP:	384:5tMkaMJH2m8qVT8IeQ0I5t0b9MEFdsNwh5DsDN9DeOialC/hAP8SylvHJPduE:DMkbJrT8IeQc5d1DwLeOialyAelvpVL
MD5:	D089C8ACD32DDB7AF16335EC836214B7
SHA1:	CAC0172B47627E9DA17A471210D89E502152C554
SHA-256:	1665B03D7901953180C05BDEB5FB4E0D7E903ACA7FD8D17ED3993230C9316F54
SHA-512:	37D283E9DB1873BF5FD92A7CE618AE300C1E72DB121529300879C18822BB7BDD71AD9E3E67555FE1711F72DFC6738572A34D04DD745767CC9317B740066A3CDD
Malicious:	false
Preview:	{"apps_count_check_time":"13378477168744766","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_redirect_origin":"","last_seen_whats_new_page_version":"117.0.2045.47"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734003573"},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\357c1d78-d170-44cf-b942-e587685f01e1.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25076
Entropy (8bit):	6.030856523281624
Encrypted:	false
SSDEEP:	384:9tMkaMJH2m8qVT8IeQ0I5t0b9MEF8sNwh5DsYJLBgfhOQC/hAP8SylvHJPduQ:3MkbJrT8IeQc581DwYPgfhOQyAelvpVx
MD5:	50F35DB86DF3E0E760360E1235628801
SHA1:	D29C80B03C0EDC784721089123041B2AA8E422BF
SHA-256:	8AAE340FC26EA451CF6B0E87CA321B69CA81F36C502E1B7FA253C72DA773BCA2
SHA-512:	C5AC5CAC1D6055A1134EC34D59C2BF07D667E9A4C08345F3EBCED7AE64D76BCAF8CC9353215EFB73B372E9B5930C0942CAB53E8BA81E0A9475EB3BF1273019DC
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","apps_count_check_time":"13378477168744766","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_redirect_origin":"","last_seen_whats_new_page_version":"117.0.2045.47"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734003573"},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMsEX9JMK3GLbeAvNjhrlo5G

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\6976db17-0c5c-48a0-bf0f-b8a0314293fb.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	25127
Entropy (8bit):	6.030047943577458
Encrypted:	false
SSDEEP:	384:9tMkaMJH2m8qVT8IeQ0I5t0b9MEF8sNnh5DsYJLBgfhOQC/hAP8SylvHJPduQ:3MkbJrT8IeQc58kDwYPgfhOQyAelvpVx
MD5:	EC5DADE49FB8461665F67B057484B25C
SHA1:	8BAB8CA5605CD7A6E65ECE3B9A7A33310F0F33C3
SHA-256:	60004A4B00D2353ACAC8C5DC581A2953737CE1D2F68C9A431307BCB2A4D4290A
SHA-512:	1D2E5086D043B49D436BA335C45B8CE0B4F03444419039E810602A3FCCC07DEA0CBA845BA4ADDE883BC907F734499DFE9604AF5E91EF8F14E2E0FE9CDBEE8D1A
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","apps_count_check_time":"13378477168744766","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_redirect_origin":"","last_seen_whats_new_page_version":"117.0.2045.47"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734003573"},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMsEX9JMK3GLbeAvNjhrlo5G

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\9e5bde85-cbeb-403f-a76c-887e0a6e87be.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	23886
Entropy (8bit):	6.0484975234780345
Encrypted:	false
SSDEEP:	384:5tMkaMJH2m8qVT8IeQ0I5t0b9MEFdsNwh5DsDN9DeOialC/hAP8SylvHJPduE:DMkbJrT8IeQc5d1DwLeOialyAelvpVL
MD5:	D089C8ACD32DDB7AF16335EC836214B7
SHA1:	CAC0172B47627E9DA17A471210D89E502152C554
SHA-256:	1665B03D7901953180C05BDEB5FB4E0D7E903ACA7FD8D17ED3993230C9316F54
SHA-512:	37D283E9DB1873BF5FD92A7CE618AE300C1E72DB121529300879C18822BB7BDD71AD9E3E67555FE1711F72DFC6738572A34D04DD745767CC9317B740066A3CDD
Malicious:	false
Preview:	{"apps_count_check_time":"13378477168744766","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_redirect_origin":"","last_seen_whats_new_page_version":"117.0.2045.47"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734003573"},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\7a1d7f09-4ae7-4696-83b7-47141e94ecda.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	107893
Entropy (8bit):	4.6401415786958475
Encrypted:	false
SSDEEP:	1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7L:fwUQC5VwBIiElEd2K57P7L
MD5:	8574D972959B295FEA388493B825FDF1
SHA1:	388510DBD841625F1DFFC1347A4C41B8AF07B23C
SHA-256:	8520149C20006B78EBBDCD489C459D56B922C235102433F8D4C5A440ABA6E776
SHA-512:	E50D2B5D7ED6A634865875A570CA441CD6C3AA68ED181C4329E2BDE3AA06929DA02E4D1900691C88B3D7A501AB5223140969CCDE4C2B670F0937A2A75DFA763D
Malicious:	false
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	107893
Entropy (8bit):	4.6401415786958475
Encrypted:	false
SSDEEP:	1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7L:fwUQC5VwBIiElEd2K57P7L
MD5:	8574D972959B295FEA388493B825FDF1
SHA1:	388510DBD841625F1DFFC1347A4C41B8AF07B23C
SHA-256:	8520149C20006B78EBBDCD489C459D56B922C235102433F8D4C5A440ABA6E776
SHA-512:	E50D2B5D7ED6A634865875A570CA441CD6C3AA68ED181C4329E2BDE3AA06929DA02E4D1900691C88B3D7A501AB5223140969CCDE4C2B670F0937A2A75DFA763D
Malicious:	false
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-675ACB6C-101C.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.039969628431560905
Encrypted:	false
SSDEEP:	192:rJ01utmqvDDKFoJviaVRaPr3nXgXXXOT5YMhFwNEvdeRQMQxsUgn8y08Tcm2RGOD:t0Et3SQQh6IGjUg08T2RGOD
MD5:	DF6C7F9C9AF5238B825ED5976F68E463
SHA1:	223A1ECCC37E6E512B6FFCD6E983B9B0C2614B46
SHA-256:	52DB20C162673F721D8AB342969DEB9C4B5048ECFBB24DD380176F3472372A29
SHA-512:	8A50A595B3DF497C5569EFC798F8927C232755175C0853D385563A28641AA054BD30130AA5D0BACD691C1B4252F72DEC9DFE90B678C7A57E00C927ECD669DBC9
Malicious:	false
Preview:	...@..@...@.....C.].....@................a..HQ..............`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30....e.........117.0.2045.47-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".unlhxj20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@............./......................w..U.>.........."....."...2..."..:............B)..1.3.147.37.. .*.RegKeyNotFound2.windowsR...Z.....K7..E@..$...SF@.......Y@.......Y@.......Y@........?........?.................?.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@................Y@.......Y@.......Y@........?........?z.......................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-675ACB6D-E04.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.4182175459654061
Encrypted:	false
SSDEEP:	3072:hmrtrE5eK3lLiPUUYYCyt6Tbu8ZPml4g1HFwqQOmWJK2x11Cie5vhp7qLw/sK8q2:2QBwUNTvpml4aHwONBUT8qQL6ijvkaH
MD5:	EBE91DFBE786481D82C31CD7CDC6F658
SHA1:	1DB4E2DBA8135CAD5B3A39E82C1706E58C8E0087
SHA-256:	9740D2FA10AD721A16DF10CA42CD626B174CF866555E8871AF19D279A0D84A25
SHA-512:	9895F5C8268A901FDC1F343A1ABD6D681ED2D041FC697616A595D03559E3B2A175ABE70EDAE6AF5EB3D93F17347F417B7058C9FB1D4CF918449BBAAA53C2C9E3
Malicious:	false
Preview:	...@..@...@.....C.].....@................... ...............`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30....u.........117.0.2045.47-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".unlhxj20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J...I.r.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@............./......................w..U?:K..>.........."....."...2..."..:............B)..1.3.147.37.. .*.RegKeyNotFound2.windowsR...Z.....K7..E@..$...SF@.......Y@.......Y@.......Y@........?........?.................?.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@................Y@.......Y@.......Y@........?........?z............<..8...#...msNurturingAssistanceHomeDependency.....triggere

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-675ACB80-1FD8.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.04072236562790057
Encrypted:	false
SSDEEP:	192:EY0EbtmqvDtKX7GJEa3XxxTxqZ/g+XY+970R6ENShk7Nonh1gQMZqW0Pn8y08Tcp:j0EtReK8Y7Ubhysjg11Q08T2RGOD
MD5:	A22F0DD80EA0A71E1A6D349425132156
SHA1:	602B395B78DCC3CA4B15F490E08878D38856FA75
SHA-256:	FB628D6CA4AF1C20B01BC0C230731A38F827DA978EB3B4CF049D5B62F70596F9
SHA-512:	AA703D381221D9530CB15C58E58DF5FB82289210A7ABBD18925C0EAC88A43FF3594EEBAFFBA5461C152E8151ACEF8EA80A9D53AAA23901570A19384462D08D68
Malicious:	false
Preview:	...@..@...@.....C.].....@................b...Q..............`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30....q.........117.0.2045.47-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".unlhxj20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@............./......................w..U].0r........>.........."....."...2..."..:............B)..1.3.147.37.. .*.RegKeyNotFound2.windowsR...Z.....K7..E@..$...SF@.......Y@.......Y@.......Y@........?........?.................?.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@................Y@.......Y@.......Y@........?........?z...........................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-675ACB88-20C4.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.03990713940920237
Encrypted:	false
SSDEEP:	192:PR0EbtmqvD3KX7eTJEa3Xxx7uqZGXPtg34khtbNE0KMO1gQpe8i65nGn8y08TcmQ:Z0EtdTe18xphlBagwXi+G08T2RGOD
MD5:	257BABA58FF49DFCB730C6DA1F4A3BAC
SHA1:	87898F94E7AC40799D9237C9E0A73C79FD4CCF3A
SHA-256:	F202C93C736EA47F8C6119D23F83D509BFDF8D4567AAF9FE0105F5C20122CCEC
SHA-512:	9CE38EC436A018F8B19FD814FC3092797645C23FC7616C315E44068455E855D6EF95D7495FB3693E7B856CFC79885DFB5D2F76C3C299C4195686322F2FC7BD32
Malicious:	false
Preview:	...@..@...@.....C.].....@................`...O..............`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30....}.........117.0.2045.47-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".unlhxj20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J...I.r.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@............./......................w..U].0r........>.........."....."...2..."..:............B)..1.3.147.37.. .*.RegKeyNotFound2.windowsR...Z.....K7..E@..$...SF@.......Y@.......Y@.......Y@........?........?.................?.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@................Y@.......Y@.......Y@........?........?z...............................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.3553968406659012
Encrypted:	false
SSDEEP:	12:biUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:bFRqxosU8xWMk8xVZ4YWI30otWn
MD5:	CFAB81B800EDABACBF6CB61AA78D5258
SHA1:	2730D4DA1BE7238D701DC84EB708A064B8D1CF27
SHA-256:	452A5479B9A2E03612576C30D30E6F51F51274CD30EF576EA1E71D20C657376F
SHA-512:	EC188B0EE4D3DAABC26799B34EE471BEE988BDD7CEB011ED7DF3D4CF26F98932BBBB4B70DC2B7FD4DF9A3981B3CE22F4B5BE4A0DB97514D526E521575EFB2EC6
Malicious:	false
Preview:	...@.@...@..............@...................................`... ...i.y.........CrashpadMetrics.....i.y..Yd.h.......A.......e............,.........W.......................W....................Microsoft.UMA.PersistentAllocator.CrashpadMetrics.UsedPct.......h...i.y.[".................................!...&...+...0...6...;...@...E...K...P...U...Z...`...e...........i.y..Yd.........A............................E.[4.f..................E.[4.f.................Microsoft.UMA.PersistentAllocator.CrashpadMetrics.Errors............i.y..Yd.........A..................._..-`....h-.....................h-....................Crashpad.HandlerLifetimeMilestone.......0...i.y.[".........................................i.y..Yd.@.......C...........................VM....],................WM....],................Stability.BrowserExitCodes...... ...i.y......VM....],........H...i.y.1U!S............................................................ ...i.y...0...WM....],........................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	3.060980776278344
Encrypted:	false
SSDEEP:	3:FiWWltl/9UgBVP/Sh/JzvLi2RRIxINXj1J1:o1//BVsJDG2Yq
MD5:	74B32A83C9311607EB525C6E23854EE0
SHA1:	C345A4A3BB52D7CD94EA63B75A424BE7B52CFCD2
SHA-256:	06509A7E418D9CCE502E897EAEEE8C6E3DCB1D0622B421DD968AF3916A5BFF90
SHA-512:	ADC193A89F0E476E7326B4EA0472814FE6DD0C16FC010AAF7B4CF78567D5DF6A1574C1CE99A63018AFE7E9AD68918147880621A3C00FAA7AD1014A0056B4B9C4
Malicious:	false
Preview:	sdPC......................5.y&.K.?....................................................................................................................................47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=....................48ea0ba2-e9bb-4568-92cb-0f42a5c5d505............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\00029744-ceef-49f3-be9a-438f103784d8.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13795
Entropy (8bit):	5.2395950995857605
Encrypted:	false
SSDEEP:	192:sViJ9pQTryZigaba4uy0J/TM+1UfrYm3x8tpj+FX4QA2OobR1f:sViLA3uPJ/TXjpUoQlOoP
MD5:	68EA74AE76E46835C49B6BF62E432C29
SHA1:	7C3940FEEED50D43276BFD2D70E6A847CDED0C5B
SHA-256:	F6688B7F55FA610BCD9A68FBB2473A6D7188A8BD5038BD856AA696D6A8B4BE6D
SHA-512:	0ACA601B8B621A70629A084BFD69A728777DD88344D0BD03BB948B6DD9A4D3AE2720E8324202D0D37F5D7382C46EEF4BEDB23A4131D32022C741BC246240C628
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_id_migration_state":2,"account_tracker_service_last_update":"13378477168638059","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b649608c":{"last_path":""},"3b5ee6f6-5322-4061-81e4-d976818

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\339b17da-d609-4542-8191-8b5b0a6d5f20.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13623
Entropy (8bit):	5.241776366102749
Encrypted:	false
SSDEEP:	192:sViJ9pQTryZigaba4uy0J/TM+1UfrYm3x8tpj+FX4QADOibR1f:sViLA3uPJ/TXjpUoQgOiP
MD5:	1052F28EC513390E88CF1B5883DFEE40
SHA1:	B72F0E20D41A5BFEDF925D92C4489DA7FAF1F6BF
SHA-256:	57A501721D28923204E08F8C28087F985057FE3060CBDF84A5D6F6C023DC3520
SHA-512:	8FFF716F42E59F2AF7F353A3341A23397FD7CA68DA5F47591A60C7CC9D83E7D0998492175297988474B0F9DED6C8E5B20E01439E6C00A5DF873332D88E6611A9
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_id_migration_state":2,"account_tracker_service_last_update":"13378477168638059","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b649608c":{"last_path":""},"3b5ee6f6-5322-4061-81e4-d976818

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\346a49f5-47d2-4a2c-845d-86572d54b6ef.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\4b9743a7-9c4a-4bf8-bfef-f9bc6541902a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\630cd3ca-ac44-4920-bc25-b993c7e56e09.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13757
Entropy (8bit):	5.240505999265179
Encrypted:	false
SSDEEP:	192:sViJ9pQTryZigaba4uy0J/TM+1UfrYm3x8tpj+FX4QAtO/bR1f:sViLA3uPJ/TXjpUoQmO/P
MD5:	B8627A87D7DCEF652D82C2222C1FA346
SHA1:	866555290B49FAC9082401E019A2A66293F321C5
SHA-256:	1B657EB496A75EE23CC3AA1EFD820579378A38BBD4CD3250F738841C5602EE71
SHA-512:	A256B8C7B636C8B7FF01A7720C9C8D10E28988A2E62144A2FFB3BD21B853392DFB9E28ABEE1AED40EEECFBFF647962FD3254D4E2AE1DECCBD5DC3AE9EBA7DA02
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_id_migration_state":2,"account_tracker_service_last_update":"13378477168638059","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b649608c":{"last_path":""},"3b5ee6f6-5322-4061-81e4-d976818

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\76784332-7d61-41d1-8ef8-b9cde2cf6483.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	39694
Entropy (8bit):	5.562419096449649
Encrypted:	false
SSDEEP:	768:ulwZt27pLGLPkWWPQCfCC8F1+UoAYDCx9Tuqh0VfUC9xbog/OVR6ovK9lrw0g9aJ:ulwZtWcPkWWPQCfCCu1jaY6oS9O0g9YP
MD5:	9CB2CED48F1D667EFEB1575EBF429DD8
SHA1:	C475092B2BFEA491F1F5D94054C6C1CF68313E7E
SHA-256:	671A6EECB7D0E5920B3CC8A24FCEEEF780F71301979919B4179978E9D5CCFBDE
SHA-512:	253024EA5E4F1C91464E42F5E82FFD8F1E5D123793AC9545898E27E0724F60F317EE5712EB3CDDD8499433826217865D34C657CF7E3D2DD8715A79367D038BFC
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378477166750602","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378477166750602","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	modified
Size (bytes):	1695826
Entropy (8bit):	5.041137947037916
Encrypted:	false
SSDEEP:	24576:5PfQUg6kAdRhiGzmYoAo2ENU0ifYeV3br2M:5PfZ/mS5
MD5:	EC3F887700B80C1D08C3855C5BCA9DC9
SHA1:	F9854AA9A0D23FA30D7383451A471648E9DDEC8F
SHA-256:	3293BF426D975424848C9741304BA75872D632DC90B2EEF97A23B0DFB03608D0
SHA-512:	1DE406B70E263A09CBB88C427A04FBDC3311DC9DEECF0902F22E3E094C5C823D008DCB6FE4909281D33AA929DE86C525DD0A04A3872AADF4D99D01B8BA73DEFA
Malicious:	false
Preview:	...m.................DB_VERSION.1..MI.................QUERY_TIMESTAMP:arbitration_priority_list4...13378477177416934.$QUERY:arbitration_priority_list4....[{"name":"arbitration_priority_list","url":"https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?assetgroup=ArbitrationService","version":{"major":4,"minor":0,"patch":5},"hash":"2DPW9BV28WrPpgGHdKsEvldNQvD7dA0AAxPa3B/lKN0=","size":11989}]..J.................QUERY_TIMESTAMP:edge_hub_apps_manifest_gz4.7..13378477177424395.$QUERY:edge_hub_apps_manifest_gz4.7...[{"name":"edge_hub_apps_manifest_gz","url":"https://edgeassetservice.azureedge.net/assets/edge_hub_apps_manifest_gz/4.7.107/asset?assetgroup=Shoreline","version":{"major":4,"minor":7,"patch":107},"hash":"Qoxdh2pZS19o99emYo77uFsfzxtXVDB75kV6eln53YE=","size":1682291}]=_.../..............'ASSET_VERSION:arbitration_priority_list.4.0.5..ASSET:arbitration_priority_list.]{.. "configVersion": 32,.. "PrivilegedExperiences": [.. "ShorelinePrivileged

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	293
Entropy (8bit):	5.102717188111898
Encrypted:	false
SSDEEP:	6:7wxUY1wkn23oH+Tcwt9Eh1ZB2KLlpw5eAn+q2Pwkn23oH+Tcwt9Eh1tIFUv:7wSnfYeb9Eh1ZFLTw5eAn+vYfYeb9Ehp
MD5:	32F8DFC52B2396A9A6A81451353703B0
SHA1:	EE5BD4997555495C96757ACCE95108CB1709EBB5
SHA-256:	96ECCFB188A9D6661634A1E7B2715D9271049CF81478101D0DBA74C211B10EF9
SHA-512:	5F341E003F9A9C45F216FA2E6702FDF0F451C3D54BE320B8EDB164F68EAD56D7E06165CD4447AE7CD4C2A6794B58B660CE1458B51BA3B6B1117E507E11874D93
Malicious:	false
Preview:	2024/12/12-06:39:34.223 1e9c Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db since it was missing..2024/12/12-06:39:34.544 1e9c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AssistanceHome\AssistanceHomeSQLite

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.3202460253800455
Encrypted:	false
SSDEEP:	6:l9bNFlEuWk8TRH9MRumWEyE4gLueXdNOmWxFxCxmWxYgCxmW5y/mWz4ynLAtD/W4:TLiuWkMORuHEyESeXdwDQ3SOAtD/ie
MD5:	40B18EC43DB334E7B3F6295C7626F28D
SHA1:	0E46584B0E0A9703C6B2EC1D246F41E63AF2296F
SHA-256:	85E961767239E90A361FB6AA0A3FD9DAA57CAAF9E30599BB70124F1954B751C8
SHA-512:	8BDACDC4A9559E4273AD01407D5D411035EECD927385A51172F401558444AD29B5AD2DC5562D1101244665EBE86BBDDE072E75ECA050B051482005EB6A52CDBD
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DIPS

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.46161052840851086
Encrypted:	false
SSDEEP:	24:TLi5YFQq3qh7z3WMYziciNW9WkZ96UwOfBuh:TouQq3qh7z3bY2LNW9WMcUvBuh
MD5:	DB94F4487CCF9AFABCC6373781C2476B
SHA1:	924FB2A0B98D75E854A30C2AF3D5F6FAF2A65277
SHA-256:	309C006DF8C6FAC1DEF9333E807028A6F16E447117008DA71279222B732B3348
SHA-512:	4A4921DCF72E342688AD4759728A71939158149C8AE77F34E8D55BB53546E16B1850DEADBC859641C9A257055A88B838934C07EBA63B31387AC24A2922779686
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....8...n................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNltCD/:Ls3tC7
MD5:	1C7C01822E013F3FC1CA46709768A68E
SHA1:	785446392542C49C5AC1300BA832C3B16D83362A
SHA-256:	430D10241C31B882869BA4D2007B5340C2A7B473074BCB0D0FC089B707E09313
SHA-512:	C3D3DE7BE62F7B02C151DAD2C378DCB7F76C17B83CCB00C682B2E5A6C42BA519157DE786B12177802495D751399501C7FF8603324A6B5D7F1CB70A2CD8E526E5
Malicious:	false
Preview:	..........................................As../.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	3.5394429593752084
Encrypted:	false
SSDEEP:	3:iWstvhYNrkUn:iptAd
MD5:	F27314DD366903BBC6141EAE524B0FDE
SHA1:	4714D4A11C53CF4258C3A0246B98E5F5A01FBC12
SHA-256:	68C7AD234755B9EDB06832A084D092660970C89A7305E0C47D327B6AC50DD898
SHA-512:	07A0D529D9458DE5E46385F2A9D77E0987567BA908B53DDB1F83D40D99A72E6B2E3586B9F79C2264A83422C4E7FC6559CAC029A6F969F793F7407212BB3ECD51
Malicious:	false
Preview:	...m.................DB_VERSION.1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	305
Entropy (8bit):	5.223933372636495
Encrypted:	false
SSDEEP:	6:7w/TsB1wkn23oH+TcwtnG2tbB2KLlpw/Td+q2Pwkn23oH+TcwtnG2tMsIFUv:7w/TskfYebn9VFLTw/Td+vYfYebn9GF2
MD5:	C427FE0A975E2711886CEA83F0536D57
SHA1:	651DE5EF98183C9AA358C35AE533474345F96BA4
SHA-256:	A49FF2DF8E099E34398E4C2820FC8B53428D4CB971C99125390333B0AF8E0410
SHA-512:	0AB62F6FCB7875BCA4FB6E7467A6A738DA462EDA524CB13CAA9CB19F8236E646B93643D835FDFDCD6A83E240B774210B0107FDE72F7753FA0FCDDF207E205561
Malicious:	false
Preview:	2024/12/12-06:39:26.804 170c Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db since it was missing..2024/12/12-06:39:26.876 170c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeEDrop\EdgeEDropSQLite.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 14, database pages 8, cookie 0xe, schema 4, UTF-8, version-valid-for 14
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.494709561094235
Encrypted:	false
SSDEEP:	24:TLEC30OIcqIn2o0FUFlA2cs0US5S693Xlej2:ThLaJUnAg0UB6I
MD5:	CF7760533536E2AF66EA68BC3561B74D
SHA1:	E991DE2EA8F42AE7E0A96A3B3B8AF87A689C8CCD
SHA-256:	E1F183FAE5652BA52F5363A7E28BF62B53E7781314C9AB76B5708AF9918BE066
SHA-512:	38B15FE7503F6DFF9D39BC74AA0150A7FF038029F973BE9A37456CDE6807BCBDEAB06E624331C8DFDABE95A5973B0EE26A391DB2587E614A37ADD50046470162
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...i............t...c................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6129619590773221
Encrypted:	false
SSDEEP:	24:TLqpR+DDNzWjJ0npnyXKUO8+jWDIWUpsIW4emL:Te8D4jJ/6Up+lr
MD5:	4F0B1CF5FC8B93451C73ABE583C57682
SHA1:	EF06338A253962DC0064A21E290CB24D8D1829F2
SHA-256:	EB1ED6D758D60E8271633895C830F7BE4F23583CF182488A6C76C51F3974C416
SHA-512:	5900AC9ACF5DF60294D9A8AE1BBDAEFE00F89B54743D23187DE042343E74F2B4305E895A96140C903480E05C39F04F79FD0421D73A6CD71C744BC94ECD60EA05
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...%.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	375520
Entropy (8bit):	5.354125669182957
Encrypted:	false
SSDEEP:	6144:/A/imBpx6WdPSxKWcHu5MURacq49QxxPnyEndBuHltBfdK5WNbsVEziP/CfXtLPz:/FdMyq49tEndBuHltBfdK5WNbsVEziPU
MD5:	80E2D33AEF59151B6CBC42AAC018E7E5
SHA1:	4D50BCCF6D4503BD69426ADB2A42E2606E435F51
SHA-256:	EBCB397D4D5BB3FD2E2F37AE0C61F22D423732CDCF0D70BC9F5ED2A1D4EB7859
SHA-512:	14B3258434B9D9354934990C5EEE5479C46456C058697EBC0EEAD5C5FD2C4B303D4408F09A6425DDE7E592649450818603B6F4F3BE59C50DF757F3DAC919E298
Malicious:	false
Preview:	...m.................DB_VERSION.1a...q...............&QUERY_TIMESTAMP:domains_config_gz2...13378477177422699..QUERY:domains_config_gz2....[{"name":"domains_config_gz","url":"https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtractionDomainsConfig","version":{"major":2,"minor":8,"patch":76},"hash":"78Xsq/1H+MXv88uuTT1Rx79Nu2ryKVXh2J6ZzLZd38w=","size":374872}]..*.`~...............ASSET_VERSION:domains_config_gz.2.8.76..ASSET:domains_config_gz...{"config": {"token_limit": 1600, "page_cutoff": 4320, "default_locale_map": {"bg": "bg-bg", "bs": "bs-ba", "el": "el-gr", "en": "en-us", "es": "es-mx", "et": "et-ee", "cs": "cs-cz", "da": "da-dk", "de": "de-de", "fa": "fa-ir", "fi": "fi-fi", "fr": "fr-fr", "he": "he-il", "hr": "hr-hr", "hu": "hu-hu", "id": "id-id", "is": "is-is", "it": "it-it", "ja": "ja-jp", "ko": "ko-kr", "lv": "lv-lv", "lt": "lt-lt", "mk": "mk-mk", "nl": "nl-nl", "nb": "nb-no", "no": "no-no", "pl": "pl-pl", "pt": "pt-pt", "ro": "

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	309
Entropy (8bit):	5.178936669657469
Encrypted:	false
SSDEEP:	6:7w/ax4M1wkn23oH+Tcwtk2WwnvB2KLlpw5JJq2Pwkn23oH+Tcwtk2WwnvIFUv:7wm4rfYebkxwnvFLTw5JJvYfYebkxwnp
MD5:	9476FF7C389E518B3C84F98C9D38C457
SHA1:	C1B7B3DA8D78BD00F48AD101B6A55BBCEEE6BE2C
SHA-256:	86799AB0993DA74E758A7923D22580234EA52DE433F1BCDAB31A898FF6D65191
SHA-512:	C0555E8B1EE1CB2449D6D3933F3A3B6A83D2BE3A364DDCCB678A4DBB0AD24CF0DC632DD1925EE4D5966A3FE26B7C0A315D32A100D7AACB3AD5B340EC182912A7
Malicious:	false
Preview:	2024/12/12-06:39:34.321 1ed4 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db since it was missing..2024/12/12-06:39:34.561 1ed4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\domains_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	358859
Entropy (8bit):	5.324605511870152
Encrypted:	false
SSDEEP:	6144:CgimBVvUrsc6rRA81b/18jyJNjfvrfM6RS:C1gAg1zfvq
MD5:	FF034665F63736814A4736BA884D20C2
SHA1:	AD231A079FC29FF1E6D74E7CEFFABC71034DFF4F
SHA-256:	3CE6BAFE995B8693263FA5D3B62027A20B2781634E85B83EC681DDE1668FF8BB
SHA-512:	1DFE38DA6F030F5051AD9D159B23FEC2677AE23BFF6F5BCF23ABF332BA057160C1AD7A917AFFEC4B6CB393AAFEDC38F510DEDC0F85940113D6FB03B0414972D1
Malicious:	false
Preview:	{"aee_config":{"ar":{"price_regex":{"ae":"(((ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)))","dz":"(((dzd\|da\|\\x{062F}\\x{062C})\\s\\d{1,3})\|(\\d{1,3}\\s(dzd\|da\|\\x{062F}\\x{062C})))","eg":"(((e\\x{00a3}\|egp)\\s\\d{1,3})\|(\\d{1,3}\\s(e\\x{00a3}\|egp)))","ma":"(((mad\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(mad\|dhs\|dh)))","sa":"((\\d{1,3}\\s(sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633}))\|((sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633})\\s\\d{1,3}))"},"product_terms":"((\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{0639}\\x{0631}\\x{0628}\\x{0629})\|(\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{062D}\\x{0642}\\x{064A}\\x{0628}\\x{0629})\|(\\x{0627}\\x{0634}\\x{062A}\\x{0631}\\x{064A}\\s*\\x{0627}\\x{0644}\\x{0622}\\x{0646})\|(\\x{062E}\\x{064A}\\x{0627}\\x{0631}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	209
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	3:FQxlXNQxlXNQxlXNQxlXNQxlXNQxlXNQxlXNQxlXNQxlXNQxlXNQxlX:qTCTCTCTCTCTCTCTCTCTCT
MD5:	478D49D9CCB25AC14589F834EA70FB9E
SHA1:	5D30E87D66E279F8815AFFE4C691AAF1D577A21E
SHA-256:	BB6CC6DF54CF476D95409032C79E065F4E10D512E73F7E16018E550456F753D5
SHA-512:	FB5431054A23D3C532568B1F150873D9130DBC4A88BE19BC2A4907D0DC2888C5B55993154EAD4A6C466E2173092B8705684A6802B850F051639E1F2457387471
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	281
Entropy (8bit):	5.20988659159578
Encrypted:	false
SSDEEP:	6:7w/TZe1wkn23oH+Tcwt8aVdg2KLlpw/Teq2Pwkn23oH+Tcwt8aPrqIFUv:7w/TZpfYeb0LTw/TevYfYebL3FUv
MD5:	8BB6DF6365EF862D9EA69452C55586FB
SHA1:	CA2431465B4040E944DFEDA36BC34654F94566BD
SHA-256:	1086DFCEC21F0D8EDE808CA3E462ADBFBD50385DD508C016A27C447B8BE53328
SHA-512:	77B848282A55A9468D8873BAF6A619F49F96FA91D32F2FF8C3014F21C3BC06F19C906C62F665F2F3858FBC69E0CFBDA545CA97FF8191D43D920521B926E5C0DE
Malicious:	false
Preview:	2024/12/12-06:39:26.857 1530 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules since it was missing..2024/12/12-06:39:26.892 1530 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	209
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	3:FQxlXNQxlXNQxlXNQxlXNQxlXNQxlXNQxlXNQxlXNQxlXNQxlXNQxlX:qTCTCTCTCTCTCTCTCTCTCT
MD5:	478D49D9CCB25AC14589F834EA70FB9E
SHA1:	5D30E87D66E279F8815AFFE4C691AAF1D577A21E
SHA-256:	BB6CC6DF54CF476D95409032C79E065F4E10D512E73F7E16018E550456F753D5
SHA-512:	FB5431054A23D3C532568B1F150873D9130DBC4A88BE19BC2A4907D0DC2888C5B55993154EAD4A6C466E2173092B8705684A6802B850F051639E1F2457387471
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.193696001823517
Encrypted:	false
SSDEEP:	6:7w/TE1wkn23oH+Tcwt86FB2KLlpw/ToIq2Pwkn23oH+Tcwt865IFUv:7w/TzfYeb/FFLTw/ToIvYfYeb/WFUv
MD5:	C524B1C5D15F75B7689DDA245D64E931
SHA1:	26BA4D3B7F342E1E1BD75816000C4EA73396CDA6
SHA-256:	8154F4FCAB0651C133BB6C5C3DE9D52C5975EA77EDAD2CA43D0A9D9C68B01899
SHA-512:	5E3C9150224BFB63CF801A01F9E00C225D720E94BD56CFF95CB5890DEFA2B9D65C774015C987B14B5195EDC711FF3703BCC4FAC3C69F6423493222450F747CD3
Malicious:	false
Preview:	2024/12/12-06:39:26.897 1530 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts since it was missing..2024/12/12-06:39:26.916 1530 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1197
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	12:qWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW:
MD5:	A2A3B1383E3AAC2430F44FC7BF3E447E
SHA1:	B807210A1205126A107A5FE25F070D2879407AA4
SHA-256:	90685D4E050DA5B6E6F7A42A1EE21264A68F1734FD3BD4A0E044BB53791020A2
SHA-512:	396FAB9625A2FF396222DBC86A0E2CDE724C83F3130EE099F2872AED2F2F2ECE13B0853D635F589B70BD1B5E586C05A3231D68CAF9E46B6E2DAC105A10D0A1C8
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	322
Entropy (8bit):	5.157920524122386
Encrypted:	false
SSDEEP:	6:7w/dlVVq2Pwkn23oH+Tcwt8NIFUt8Ow/dlVgZmw+Ow/diIkwOwkn23oH+Tcwt8+Q:7w/rfvYfYebpFUt8Ow/rS/+Ow/35JfYN
MD5:	C5BE38F8A61B66698BFE937F0FFB989F
SHA1:	2EC9CAE8B12863D27CD3C6761823FB6EBEDC1A5E
SHA-256:	0A90B8C6CAD81DB54435503277ABAF0A4DF2007A62EF7DAF7222A376F1088939
SHA-512:	D87A1E24846021EFE8FD47B262E0CD5B19FD9AF350C9D11DD0A176796C4DEE21FE3C6ECD21C5A928A954C80E5ADA71E4D46C54955934D3EB76B9F68EEB4D1036
Malicious:	false
Preview:	2024/12/12-06:39:28.950 1020 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/12/12-06:39:28.950 1020 Recovering log #3.2024/12/12-06:39:28.951 1020 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	322
Entropy (8bit):	5.157920524122386
Encrypted:	false
SSDEEP:	6:7w/dlVVq2Pwkn23oH+Tcwt8NIFUt8Ow/dlVgZmw+Ow/diIkwOwkn23oH+Tcwt8+Q:7w/rfvYfYebpFUt8Ow/rS/+Ow/35JfYN
MD5:	C5BE38F8A61B66698BFE937F0FFB989F
SHA1:	2EC9CAE8B12863D27CD3C6761823FB6EBEDC1A5E
SHA-256:	0A90B8C6CAD81DB54435503277ABAF0A4DF2007A62EF7DAF7222A376F1088939
SHA-512:	D87A1E24846021EFE8FD47B262E0CD5B19FD9AF350C9D11DD0A176796C4DEE21FE3C6ECD21C5A928A954C80E5ADA71E4D46C54955934D3EB76B9F68EEB4D1036
Malicious:	false
Preview:	2024/12/12-06:39:28.950 1020 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/12/12-06:39:28.950 1020 Recovering log #3.2024/12/12-06:39:28.951 1020 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityComp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 1, cookie 0x1, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	0.3169096321222068
Encrypted:	false
SSDEEP:	3:lSWbNFl/sl+ltl4ltllOl83/XWEEabIDWzdWuAzTgdWj3FtFIU:l9bNFlEs1ok8fDEPDadUTgd81Z
MD5:	2554AD7847B0D04963FDAE908DB81074
SHA1:	F84ABD8D05D7B0DFB693485614ECF5204989B74A
SHA-256:	F6EF01E679B9096A7D8A0BD8151422543B51E65142119A9F3271F25F966E6C42
SHA-512:	13009172518387D77A67BBF86719527077BE9534D90CB06E7F34E1CCE7C40B49A185D892EE859A8BAFB69D5EBB6D667831A0FAFBA28AC1F44570C8B68F8C90A4
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 8, cookie 0x8, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.40981274649195937
Encrypted:	false
SSDEEP:	24:TL1WK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/5eQQ:Tmm+/9ZW943WOT/
MD5:	1A7F642FD4F71A656BE75B26B2D9ED79
SHA1:	51BBF587FB0CCC2D726DDB95C96757CC2854CFAD
SHA-256:	B96B6DDC10C29496069E16089DB0AB6911D7C13B82791868D583897C6D317977
SHA-512:	FD14EADCF5F7AB271BE6D8EF682977D1A0B5199A142E4AB353614F2F96AE9B49A6F35A19CC237489F297141994A4A16B580F88FAC44486FCB22C05B2F1C3F7D1
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j............M.....8...b..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	429
Entropy (8bit):	5.809210454117189
Encrypted:	false
SSDEEP:	6:Y8U0vEjrAWT0VAUD9lpMXO4SrqiweVHUSENjrAWT0HQQ9/LZyVMQ3xqiweVHlrSQ:Y8U5j0pqCjJA7tNj0pHx/LZ4hcdQ
MD5:	5D1D9020CCEFD76CA661902E0C229087
SHA1:	DCF2AA4A1C626EC7FFD9ABD284D29B269D78FCB6
SHA-256:	B829B0DF7E3F2391BFBA70090EB4CE2BA6A978CCD665EEBF1073849BDD4B8FB9
SHA-512:	5F6E72720E64A7AC19F191F0179992745D5136D41DCDC13C5C3C2E35A71EB227570BD47C7B376658EF670B75929ABEEBD8EF470D1E24B595A11D320EC1479E3C
Malicious:	false
Preview:	{"file_hashes":[{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","6RbL+qKART8FehO4s7U0u67iEI8/jaN+8Kg3kII+uy4=","CuN6+RcZAysZCfrzCZ8KdWDkQqyaIstSrcmsZ/c2MVs="],"block_size":4096,"path":"content.js"},{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","UL53sQ5hOhAmII/Yx6muXikzahxM+k5gEmVOh7xJ3Rw=","u6MdmVNzBUfDzMwv2LEJ6pXR8k0nnvpYRwOL8aApwP8="],"block_size":4096,"path":"content_new.js"}],"version":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Favicons

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 10, cookie 0x8, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.1091286797510445
Encrypted:	false
SSDEEP:	24:LLWxh0GY/l1rWR1PmCx9fZjsBX+T6UwcE85fBh7n8CJ9ocOI9IgeOo/Xc39pd743:0Bmw6fU1zBhLfLiIqgeO+ctbE3
MD5:	5B320A6B28BE9C2BCAE28A468C2BF439
SHA1:	49805F3BB0A4200A6C22B2B45A4DE013541909A4
SHA-256:	8F26D248B228B35BB6C77F557E63FA04A8D5B8250AF8D193B53DA6B410EE0BB5
SHA-512:	BC843EA8B81558D1FF34188F7BBC5EF5F761486A169D574BEF93DA6B3A77D27F4CFBF02FA6BC3E7D96567183E6F6DA2639093318803D9D491A3F45FCC354EE90
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g....._.c...~.2.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................s...;+...indexfavicon_bitmaps_icon_idfavico

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 39, 1st free page 10, free pages 4, cookie 0x45, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	159744
Entropy (8bit):	0.5492632813481235
Encrypted:	false
SSDEEP:	96:JSr/U+bGzPDLjGQLBE3up+U0jBo4tgi3JMe9xJDECVjNv:Jx+GPXBBE3upb0HtTTDxVj
MD5:	04BA9A1CCA7E0400746CB3947BD83E09
SHA1:	061403E6529E29E250C02082E997F3B7898D56E4
SHA-256:	98784F2306C30A9C4706A01587216010C99C14AC3DAF346DB160F927B2DBAE32
SHA-512:	B787EC67062CA898F021AC019964F4EC7BC3B0CE6E5EFA59F5A945EA57E54D94DB9B8F25B8AC74DA0CC2C8C7A4F338F4BB80B52608AFF0F2BDDB93B2054B9428
Malicious:	false
Preview:	SQLite format 3......@ .......'...........E......................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	0.3283577581710296
Encrypted:	false
SSDEEP:	6:jl0A/J3+t76Y4QZZofU99pO0BYWlcqR4EZY4QZvGOgd:HhHQws9LdzhBQZGPd
MD5:	832651CC28234154C7E615BA4A562681
SHA1:	04BAFF033F3813989DCB9E13047F22817AB297A0
SHA-256:	C2D09FFAE0ED5AFD0414DAE494F7177DA93229B214995ED242F9A80B21FA9506
SHA-512:	17814B6F30434696A59D4296BFB4C4AC60EA6F6A1F3FFA74A71EEC4D0E42027B89406C046BD8F20C5965DC9792DFF85D380F57AF3847ADC179B38EC5A9F1189E
Malicious:	false
Preview:	............H......'....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps Icons

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 11, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	45056
Entropy (8bit):	3.5493561025929496
Encrypted:	false
SSDEEP:	384:zj9P0KpJP/KbtRcqQkQerchwgam6IeRKToaA0773pLG:zdhnP/7qe2c9ORKc478
MD5:	47C283B69C591F36BC661E506F045699
SHA1:	EE06426556C1E12AEA72C0096E74726A30D4E0A2
SHA-256:	B0C168B140A6CC80CC01AE9D4A1276724797C4A6EC7113D3FDE14D8EF7524F6A
SHA-512:	2B7046E10A87280C44BB9CF2C305424C203E34186D30B4F3EDABAB2B919FA4EE2F921A3F13364F0B2AD1FA167404CE1B78B4A70F455CB45E59CBED3371314C7D
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...:.8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	406
Entropy (8bit):	5.269769242624741
Encrypted:	false
SSDEEP:	12:7wOQvYfYeb8rcHEZrELFUt8Owb/+Owx5JfYeb8rcHEZrEZSJ:7cYfYeb8nZrExg8OQyJfYeb8nZrEZe
MD5:	EE4D7526D32D0CA561F84DC473856EF4
SHA1:	0046D6E49943415D8E416F84ACF1E01AC942C116
SHA-256:	526340772EAF6E6770E442844F7248F5691729B89B568285CA851764B6A00AC4
SHA-512:	F6CC4FC1AA83CC50221B1C725737F4BB5DB52DA62B02F7AA93CF395A91E75621F51320ECF909110A882234F50E7ECC9F9CBA67578F9DB8E8E6CF364C04C5F9C0
Malicious:	false
Preview:	2024/12/12-06:39:30.458 1020 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/12/12-06:39:30.459 1020 Recovering log #3.2024/12/12-06:39:30.459 1020 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	406
Entropy (8bit):	5.269769242624741
Encrypted:	false
SSDEEP:	12:7wOQvYfYeb8rcHEZrELFUt8Owb/+Owx5JfYeb8rcHEZrEZSJ:7cYfYeb8nZrExg8OQyJfYeb8nZrEZe
MD5:	EE4D7526D32D0CA561F84DC473856EF4
SHA1:	0046D6E49943415D8E416F84ACF1E01AC942C116
SHA-256:	526340772EAF6E6770E442844F7248F5691729B89B568285CA851764B6A00AC4
SHA-512:	F6CC4FC1AA83CC50221B1C725737F4BB5DB52DA62B02F7AA93CF395A91E75621F51320ECF909110A882234F50E7ECC9F9CBA67578F9DB8E8E6CF364C04C5F9C0
Malicious:	false
Preview:	2024/12/12-06:39:30.458 1020 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/12/12-06:39:30.459 1020 Recovering log #3.2024/12/12-06:39:30.459 1020 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.168941422681586
Encrypted:	false
SSDEEP:	6:7w/GFK+q2Pwkn23oH+Tcwt8a2jMGIFUt8Ow/IFOZmw+Ow/qdtVkwOwkn23oH+TcL:7w/SrvYfYeb8EFUt8Ow/Ig/+Ow/qdT52
MD5:	5809781EB41F5F1DB8C20310465D0147
SHA1:	A648553F93F60D1177AE4E7C45934C2374FE46F5
SHA-256:	18583905DD80E2F389A4C99EB34108DE6070809396DD71C63BC72C1AECABB1BA
SHA-512:	EEE9341619F0F898DDD9A67AF19BC76CDA27002F92D0DFDEB4DBFFE074C44758B19DA3B596F45DCE19E3047315D56727B7463E377B708BB792842945D3731209
Malicious:	false
Preview:	2024/12/12-06:39:27.107 1ae8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/12/12-06:39:27.109 1ae8 Recovering log #3.2024/12/12-06:39:27.117 1ae8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.168941422681586
Encrypted:	false
SSDEEP:	6:7w/GFK+q2Pwkn23oH+Tcwt8a2jMGIFUt8Ow/IFOZmw+Ow/qdtVkwOwkn23oH+TcL:7w/SrvYfYeb8EFUt8Ow/Ig/+Ow/qdT52
MD5:	5809781EB41F5F1DB8C20310465D0147
SHA1:	A648553F93F60D1177AE4E7C45934C2374FE46F5
SHA-256:	18583905DD80E2F389A4C99EB34108DE6070809396DD71C63BC72C1AECABB1BA
SHA-512:	EEE9341619F0F898DDD9A67AF19BC76CDA27002F92D0DFDEB4DBFFE074C44758B19DA3B596F45DCE19E3047315D56727B7463E377B708BB792842945D3731209
Malicious:	false
Preview:	2024/12/12-06:39:27.107 1ae8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/12/12-06:39:27.109 1ae8 Recovering log #3.2024/12/12-06:39:27.117 1ae8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 28, cookie 0x1d, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	57344
Entropy (8bit):	0.863060653641558
Encrypted:	false
SSDEEP:	96:u7/KLPeymOT7ynlm+yKwt7izhGnvgbn8MouB6wznP:u74CnlmVizhGE7IwD
MD5:	C681C90B3AAD7F7E4AF8664DE16971DF
SHA1:	9F72588CEA6569261291B19E06043A1EFC3653BC
SHA-256:	ADB987BF641B2531991B8DE5B10244C3FE1ACFA7AD7A61A65D2E2D8E7AB34C1D
SHA-512:	4696BF334961E4C9757BAC40C41B4FBE3E0B9F821BD242CE6967B347053787BE54D1270D7166745126AFA42E8193AC2E695B0D8F11DE8F0B2876628B7C128942
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network Action Predictor

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 11, cookie 0x6, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	45056
Entropy (8bit):	0.40293591932113104
Encrypted:	false
SSDEEP:	24:TLVgTjDk5Yk8k+/kCkzD3zzbLGfIzLihje90xq/WMFFfeFzfXVVlYWOT/CUFSe:Tmo9n+8dv/qALihje9kqL42WOT/9F
MD5:	ADC0CFB8A1A20DE2C4AB738B413CBEA4
SHA1:	238EF489E5FDC6EBB36F09D415FB353350E7097B
SHA-256:	7C071E36A64FB1881258712C9880F155D9CBAC693BADCC391A1CB110C257CC37
SHA-512:	38C8B7293B8F7BEF03299BAFB981EEEE309945B1BDE26ACDAD6FDD63247C21CA04D493A1DDAFC3B9A1904EFED998E9C7C0C8E98506FD4AC0AB252DFF34566B66
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......=......\.t.+.>...,...=........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\105b3d78-a349-4fc2-9921-a82123655d58.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1144
Entropy (8bit):	5.315286434944905
Encrypted:	false
SSDEEP:	24:YXsL5ZVMdBs5ZFRudFGcsKqZ6ma3yeebsL7ZFGJ/dbG7n7:YXsLv8svfcds9leebsL1gzbg
MD5:	7EB38B08178F0A66B7C939D3AF7C694D
SHA1:	9E6D5CC6C85F106C0062EADB85B858B3B1657A24
SHA-256:	3199ACC245CDCDDC18141B9E805DABF6FE4175B58579DB14E177FFD48D7B4CE5
SHA-512:	F55F57B46AD609B31F46758E3D4956AC7B71B02B3BD8AAEF9EAA0A6F3B63A5E7A7FE03A0B908F00F2788365401E9EE345B321BA2181BDFDB1B3F7B8572ADEBB5
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381069173297775","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com"},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381069176193388","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com"},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13378570778842395","port":443,"protocol_str":"quic"}],"anonymization":["HAAAABUAAABodHRwczovL21pY3Jvc29mdC5jb20AAAA=",false],"server":"https://msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com"},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381069180320572","port":443,"protocol_str":"quic"}],"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://w

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\4f17b884-cec6-433f-ac5d-bbaf3d8ef71d.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\810bdda4-c4b2-4601-b2b2-436af62e6163.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	111
Entropy (8bit):	4.718418993774295
Encrypted:	false
SSDEEP:	3:YLb9N+eAXRfHDH2LS7PMVKJq0nMb1KKqk1Yn:YHpoeS7PMVKJTnMRKXk1Yn
MD5:	807419CA9A4734FEAF8D8563A003B048
SHA1:	A723C7D60A65886FFA068711F1E900CCC85922A6
SHA-256:	AA10BF07B0D265BED28F2A475F3564D8DDB5E4D4FFEE0AB6F3A0CC564907B631
SHA-512:	F10D496AE75DB5BA412BD9F17BF0C7DA7632DB92A3FABF7F24071E40F5759C6A875AD8F3A72BAD149DA58B3DA3B816077DF125D0D9F3544ADBA68C66353D206C
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\902fbbea-9425-4c9e-8d39-57928c265067.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	22
Entropy (8bit):	3.788754913993502
Encrypted:	false
SSDEEP:	3:YWRAW4J2LSQ:YWyW5SQ
MD5:	3BB76EC23C5506830EAD56540E06159F
SHA1:	94695E47D907E559E91E677CEC4EB763DC0C5CA9
SHA-256:	6B40F4AE548688A472BE3CA0C1B08ECF520B31E706FEC0F9793B4666134EBA06
SHA-512:	307F9BD06CA5EE753ACDC450CF1599DFC8ED080D9A1B19D752DD9B7950377A5B04E44D374F12ED76ABD74961C2B1F8AD6C93E4663EA77F5D6E066570C1AA6BAD
Malicious:	false
Preview:	{"sts":[],"version":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\9709ac54-caf0-47d2-b1f2-53e312d0c380.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.926136109079379
Encrypted:	false
SSDEEP:	3:YLb9N+eAXRfHDH2LSL:YHpoeSL
MD5:	4DF4574BFBB7E0B0BC56C2C9B12B6C47
SHA1:	81EFCBD3E3DA8221444A21F45305AF6FA4B71907
SHA-256:	E1B77550222C2451772C958E44026ABE518A2C8766862F331765788DDD196377
SHA-512:	78B14F60F2D80400FE50360CF303A961685396B7697775D078825A29B717081442D357C2039AD0984D4B622976B0314EDE8F478CDE320DAEC118DA546CB0682A
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[],"version":5}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State~RF3a087.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.926136109079379
Encrypted:	false
SSDEEP:	3:YLb9N+eAXRfHDH2LSL:YHpoeSL
MD5:	4DF4574BFBB7E0B0BC56C2C9B12B6C47
SHA1:	81EFCBD3E3DA8221444A21F45305AF6FA4B71907
SHA-256:	E1B77550222C2451772C958E44026ABE518A2C8766862F331765788DDD196377
SHA-512:	78B14F60F2D80400FE50360CF303A961685396B7697775D078825A29B717081442D357C2039AD0984D4B622976B0314EDE8F478CDE320DAEC118DA546CB0682A
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[],"version":5}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State~RF492d6.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.926136109079379
Encrypted:	false
SSDEEP:	3:YLb9N+eAXRfHDH2LSL:YHpoeSL
MD5:	4DF4574BFBB7E0B0BC56C2C9B12B6C47
SHA1:	81EFCBD3E3DA8221444A21F45305AF6FA4B71907
SHA-256:	E1B77550222C2451772C958E44026ABE518A2C8766862F331765788DDD196377
SHA-512:	78B14F60F2D80400FE50360CF303A961685396B7697775D078825A29B717081442D357C2039AD0984D4B622976B0314EDE8F478CDE320DAEC118DA546CB0682A
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[],"version":5}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.7604699535165863
Encrypted:	false
SSDEEP:	48:TKIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBkD+:eIEumQv8m1ccnvS6H
MD5:	2DB8389D4D0BBE637F3ECD265FB4333D
SHA1:	3D82662A001CC5B4FE4EC3E764DA4131124E4047
SHA-256:	7AE9DD0B6F9C77ED7B33297ECB8E3E0F2BFDB1009C38AD0AE2C3C8AFEADBED46
SHA-512:	AF23339BDA003B3E2DF2A5904895820B7D6DDBED69F631A312A880185F0F5AE38CC30C5B5D9F49AA5A499E9DF3B20C04C6FC3C73917BDE755A8E0F9D459AB036
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...D.........7............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF37bb9.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF394ee.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	203
Entropy (8bit):	5.4042796420747425
Encrypted:	false
SSDEEP:	6:YAQN1iL50xHA9vh8wXwlmUUAnIMp5sXX2SQ:Y45Sg9vt+UAnIXZQ
MD5:	24D66E5F1B8C76C76511DA68057CDE5E
SHA1:	70225FEC1AE3FEF8D8A767D9EA0B0E108BF8F10D
SHA-256:	D5CB3A4A104E2EC4F13E8B4CDF3BD469E0AB638713928BEA1EAEAF03998B794C
SHA-512:	1CA093B4BB4E0B3EE0B791AD0E6B39AC9640CEB6ED005BD10A10B4AF904858F4898D86D26B60B625CDA9425FF317C6B9FE0DF2E12C897A52720AF775B19491AA
Malicious:	false
Preview:	{"expect_ct":[],"sts":[{"expiry":1727869700.805692,"host":"dUymlFcJcEIuWrPNRCRXYtREHxXDHdPfT47kO1IQnQ0=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1696333700.805702}],"version":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity~RF3a087.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	203
Entropy (8bit):	5.4042796420747425
Encrypted:	false
SSDEEP:	6:YAQN1iL50xHA9vh8wXwlmUUAnIMp5sXX2SQ:Y45Sg9vt+UAnIXZQ
MD5:	24D66E5F1B8C76C76511DA68057CDE5E
SHA1:	70225FEC1AE3FEF8D8A767D9EA0B0E108BF8F10D
SHA-256:	D5CB3A4A104E2EC4F13E8B4CDF3BD469E0AB638713928BEA1EAEAF03998B794C
SHA-512:	1CA093B4BB4E0B3EE0B791AD0E6B39AC9640CEB6ED005BD10A10B4AF904858F4898D86D26B60B625CDA9425FF317C6B9FE0DF2E12C897A52720AF775B19491AA
Malicious:	false
Preview:	{"expect_ct":[],"sts":[{"expiry":1727869700.805692,"host":"dUymlFcJcEIuWrPNRCRXYtREHxXDHdPfT47kO1IQnQ0=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1696333700.805702}],"version":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Trust Tokens

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 9, cookie 0x6, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.36515621748816035
Encrypted:	false
SSDEEP:	24:TLH3lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:Tb31DtX5nDOvyKDhU1cSB
MD5:	25363ADC3C9D98BAD1A33D0792405CBF
SHA1:	D06E343087D86EF1A06F7479D81B26C90A60B5C3
SHA-256:	6E019B8B9E389216D5BDF1F2FE63F41EF98E71DA101F2A6BE04F41CC5954532D
SHA-512:	CF7EEE35D0E00945AF221BEC531E8BF06C08880DA00BD103FA561BC069D7C6F955CBA3C1C152A4884601E5A670B7487D39B4AE9A4D554ED8C14F129A74E555F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......X..g...}.....$.X..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\acb0478c-f548-4bf9-beee-5b605bb44b35.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\c2485dc1-7780-4a98-adb1-1ad88da6c8b4.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Nurturing\campaign_history

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.5744102022039023
Encrypted:	false
SSDEEP:	12:TL1QAFUxOUDaabZXiDiIF8izX4fhhdWeci2oesJaYi3isCHIrdNG7fdjxHIXOFSY:TLiOUOq0afDdWec9sJKG7zo7J5fc
MD5:	8B7CCBAE5FB8F1D3FDB331AED0833FB0
SHA1:	7924CE8D7CF818F1132F1C8A047FBEEF13F18877
SHA-256:	8029C4EAA75734867C5970AB41422A7F551EBFDF65E152C09F8A4038B17080C8
SHA-512:	23B07F98E037ECC9BAAB37EA93264503B936CA180F4873D19944D186F3529926CBDC7A0962E7A51EADC8CEB2CA85D94BFC3C431D0068B8320C45BF24C0DDB163
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Pdf\pdfSQLite

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	6144
Entropy (8bit):	0.7765974439657591
Encrypted:	false
SSDEEP:	12:LBtiuWkKcwF11DM/FAf4ADO+sO7L0rqq4+fPY:LLiuW9LFPY/Wf4ADSo0rqqH4
MD5:	CE1BE400F3CB5B35987AFA90E15E6E25
SHA1:	6E7773A34D87A84EFFD1AA959421BD35B178CE36
SHA-256:	4FC520596455D81B997F9B5CB9B0661E5E6C809A888C768F5AD52CB81E75B290
SHA-512:	F5054E3C540E03D791505208FB15A28C1F6284800EE7668DEDFB868951DF3B0B4CE2379D78C23FE4472882D4E1689D642BC489ABA31942C46ABEBD8A34168255
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9838
Entropy (8bit):	4.9460428867638715
Encrypted:	false
SSDEEP:	96:sVCkdBkZJ1Yb9MvWQaYm3x85Bh6Cp9/x+6M8muec041eAeC4n2O8Fe4zvrb2aHQu:sVCkd0J/TaYm3x8tpj+FX4QADOibR1f
MD5:	FB25831F0CC81EF5E7EE3924486795D4
SHA1:	D5DCE9243FE3C990051B8C2DA44083D27F87F6EE
SHA-256:	A680356510F3E24317FCAA1C903F98C85D54CDDBB88B603902F9DDC528F1FCE5
SHA-512:	924C5138AD24378825A2321ACFDA329992DAD5AAF045E6FA9060582EA14D932DA539FE74FF01234C0DB9264728C4266548EE1648DDC626D6701C7D876FC8B394
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_id_migration_state":2,"account_tracker_service_last_update":"13378477168638059","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":914,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":70,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"list":[]},"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0"

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF3c3de.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9838
Entropy (8bit):	4.9460428867638715
Encrypted:	false
SSDEEP:	96:sVCkdBkZJ1Yb9MvWQaYm3x85Bh6Cp9/x+6M8muec041eAeC4n2O8Fe4zvrb2aHQu:sVCkd0J/TaYm3x8tpj+FX4QADOibR1f
MD5:	FB25831F0CC81EF5E7EE3924486795D4
SHA1:	D5DCE9243FE3C990051B8C2DA44083D27F87F6EE
SHA-256:	A680356510F3E24317FCAA1C903F98C85D54CDDBB88B603902F9DDC528F1FCE5
SHA-512:	924C5138AD24378825A2321ACFDA329992DAD5AAF045E6FA9060582EA14D932DA539FE74FF01234C0DB9264728C4266548EE1648DDC626D6701C7D876FC8B394
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_id_migration_state":2,"account_tracker_service_last_update":"13378477168638059","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":914,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":70,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"list":[]},"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0"

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF403f4.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9838
Entropy (8bit):	4.9460428867638715
Encrypted:	false
SSDEEP:	96:sVCkdBkZJ1Yb9MvWQaYm3x85Bh6Cp9/x+6M8muec041eAeC4n2O8Fe4zvrb2aHQu:sVCkd0J/TaYm3x8tpj+FX4QADOibR1f
MD5:	FB25831F0CC81EF5E7EE3924486795D4
SHA1:	D5DCE9243FE3C990051B8C2DA44083D27F87F6EE
SHA-256:	A680356510F3E24317FCAA1C903F98C85D54CDDBB88B603902F9DDC528F1FCE5
SHA-512:	924C5138AD24378825A2321ACFDA329992DAD5AAF045E6FA9060582EA14D932DA539FE74FF01234C0DB9264728C4266548EE1648DDC626D6701C7D876FC8B394
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_id_migration_state":2,"account_tracker_service_last_update":"13378477168638059","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":914,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":70,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"list":[]},"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0"

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF47943.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9838
Entropy (8bit):	4.9460428867638715
Encrypted:	false
SSDEEP:	96:sVCkdBkZJ1Yb9MvWQaYm3x85Bh6Cp9/x+6M8muec041eAeC4n2O8Fe4zvrb2aHQu:sVCkd0J/TaYm3x8tpj+FX4QADOibR1f
MD5:	FB25831F0CC81EF5E7EE3924486795D4
SHA1:	D5DCE9243FE3C990051B8C2DA44083D27F87F6EE
SHA-256:	A680356510F3E24317FCAA1C903F98C85D54CDDBB88B603902F9DDC528F1FCE5
SHA-512:	924C5138AD24378825A2321ACFDA329992DAD5AAF045E6FA9060582EA14D932DA539FE74FF01234C0DB9264728C4266548EE1648DDC626D6701C7D876FC8B394
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_id_migration_state":2,"account_tracker_service_last_update":"13378477168638059","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":914,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":70,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"list":[]},"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0"

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\PreferredApps

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	4.051821770808046
Encrypted:	false
SSDEEP:	3:YVXADAEvTLSJ:Y9AcEvHSJ
MD5:	2B432FEF211C69C745ACA86DE4F8E4AB
SHA1:	4B92DA8D4C0188CF2409500ADCD2200444A82FCC
SHA-256:	42B55D126D1E640B1ED7A6BDCB9A46C81DF461FA7E131F4F8C7108C2C61C14DE
SHA-512:	948502DE4DC89A7E9D2E1660451FCD0F44FD3816072924A44F145D821D0363233CC92A377DBA3A0A9F849E3C17B1893070025C369C8120083A622D025FE1EACF
Malicious:	false
Preview:	{"preferred_apps":[],"version":1}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	24853
Entropy (8bit):	5.5655335239588455
Encrypted:	false
SSDEEP:	768:uEuZNWWPQCfLC8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCvKulrwapntubE:uEuZNWWPQCfLCu1jaHSuOStmE
MD5:	4016388746F5231A2A6738BDE9DA8E76
SHA1:	4EFE6A190AA31C473A111BED6F23C374F036BE2D
SHA-256:	AD7A35029FA28672FDCDC583D88E465FB26FE6B305D753DBE59F657CDBE73A4E
SHA-512:	67CE09210C4B58E9B07E2ABC6C03C8E53F4AF4AB9D34C121AAA67963F9893C18C42C2DE34D702FA0157437FC342DBD74CEE34C7910C529832BEC26C0978F6628
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378477166750602","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378477166750602","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF3b603.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	24853
Entropy (8bit):	5.5655335239588455
Encrypted:	false
SSDEEP:	768:uEuZNWWPQCfLC8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCvKulrwapntubE:uEuZNWWPQCfLCu1jaHSuOStmE
MD5:	4016388746F5231A2A6738BDE9DA8E76
SHA1:	4EFE6A190AA31C473A111BED6F23C374F036BE2D
SHA-256:	AD7A35029FA28672FDCDC583D88E465FB26FE6B305D753DBE59F657CDBE73A4E
SHA-512:	67CE09210C4B58E9B07E2ABC6C03C8E53F4AF4AB9D34C121AAA67963F9893C18C42C2DE34D702FA0157437FC342DBD74CEE34C7910C529832BEC26C0978F6628
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378477166750602","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378477166750602","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	360
Entropy (8bit):	4.013597752621165
Encrypted:	false
SSDEEP:	6:S85aEFljljljljljljle/la3NGKRhsLaCSAUEEE:S+a8ljljljljljljlOoN7
MD5:	08DC76772483147FCAE9F6B456C13920
SHA1:	6C8AE141CEF6EF5E220F620057A478B8A521C265
SHA-256:	37C287E309AED44A4AF7158F3C9AE3B6557204960E8B041F8C5D56DD351BE326
SHA-512:	A7E1C670B61E5CE42B4403AEC89384967F773735C0DED628F813D8019361307F09425CEB0762119220A9DD9BFE50F910DE21E971A5ECAB226C5C6389265BBBAF
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f.................&f.................&f.................&f.................&f.................&f...............[;.f................next-map-id.1.Gnamespace-0e72a237_5e57_4d82_a6a2_09c84217b958-https://www.med.unc.edu/.0V.e................V.e................V.e................V.e................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	322
Entropy (8bit):	5.133774850678449
Encrypted:	false
SSDEEP:	6:7w/+4HN+q2Pwkn23oH+TcwtrQMxIFUt8Ow/+QZmw+Ow/CFNVkwOwkn23oH+Tcwtf:7w/+4ovYfYebCFUt8Ow/+Q/+Ow/O5Jfn
MD5:	FE1DF869548C710A9FCA33B0F58D991C
SHA1:	798DF7E6FA7B2BF2BF7BB3FD09BF44D46A92F702
SHA-256:	6AA68EE51E562605B5076096525792A7EE401D70B9CAE84B178D7944EFB2B1D3
SHA-512:	718EA841CCBC399922EF4F5F9C79A888AF22244EE029E9AE04E9395095F646432D14A93B413378CD7189CFE3C7BF31E1F065D4AB9542DC54D95131BC905DF815
Malicious:	false
Preview:	2024/12/12-06:39:29.031 1ae8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/12/12-06:39:29.035 1ae8 Recovering log #3.2024/12/12-06:39:29.313 1ae8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	322
Entropy (8bit):	5.133774850678449
Encrypted:	false
SSDEEP:	6:7w/+4HN+q2Pwkn23oH+TcwtrQMxIFUt8Ow/+QZmw+Ow/CFNVkwOwkn23oH+Tcwtf:7w/+4ovYfYebCFUt8Ow/+Q/+Ow/O5Jfn
MD5:	FE1DF869548C710A9FCA33B0F58D991C
SHA1:	798DF7E6FA7B2BF2BF7BB3FD09BF44D46A92F702
SHA-256:	6AA68EE51E562605B5076096525792A7EE401D70B9CAE84B178D7944EFB2B1D3
SHA-512:	718EA841CCBC399922EF4F5F9C79A888AF22244EE029E9AE04E9395095F646432D14A93B413378CD7189CFE3C7BF31E1F065D4AB9542DC54D95131BC905DF815
Malicious:	false
Preview:	2024/12/12-06:39:29.031 1ae8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/12/12-06:39:29.035 1ae8 Recovering log #3.2024/12/12-06:39:29.313 1ae8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13378477169252574

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2287
Entropy (8bit):	3.5033526344248807
Encrypted:	false
SSDEEP:	48:3wbgaS5jqJAKFvtxhBFvtxZWaAp5DFK1:3HLjqeWt3TtP801
MD5:	E6321F57D72A57C2DCE0E3E3C3983B30
SHA1:	2F5090C92C1344A65E1906EA5E0DD4C7632AF8E5
SHA-256:	0205EFE46F608329C0A6F67FF39CBE330E52769852B6398C85B8732336F1C05D
SHA-512:	C2E8CA97AFD12F6FE9149AE5487A6483256779F01C3243891BCAFCA46C76876EDA22FA34306ABDF980A1E899B2B3AB684631D05B7860C309D0D78B10E05E5516
Malicious:	false
Preview:	SNSS........!'X............!'X......".!'X............!'X........!'X........!'X........!'X....!...!'X................................!'X.!'X1..,....!'X$...0e72a237_5e57_4d82_a6a2_09c84217b958....!'X........!'X......i.........!'X....!'X........................!'X.......................5..0....!'X&...{1A5CCF63-1000-409F-B5C1-AFEC7F75D4D9}......!'X........!'X........................!'X....i..d....!'X....R...https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf......T...P...!...H...........................................................8...............@...............8...........)......)..x...............................X...................................................R...h.t.t.p.s.:././.w.w.w...m.e.d...u.n.c...e.d.u./.w.e.b.g.u.i.d.e./.w.p.-.c.o.n.t.e.n.t./.u.p.l.o.a.d.s./.s.i.t.e.s./.4.1.9./.2.0.1.9./.0.7./.A.d.o.b.e.P.D.F...p.d.f.....................................8.......0.......8.......................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Shortcuts

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.44194574462308833
Encrypted:	false
SSDEEP:	12:TLiNCcUMskMVcIWGhWxBzEXx7AAQlvsdFxOUwa5qgufTJpbZ75fOS:TLisVMnYPhIY5Qlvsd6UwccNp15fB
MD5:	B35F740AA7FFEA282E525838EABFE0A6
SHA1:	A67822C17670CCE0BA72D3E9C8DA0CE755A3421A
SHA-256:	5D599596D116802BAD422497CF68BE59EEB7A9135E3ED1C6BEACC48F73827161
SHA-512:	05C0D33516B2C1AB6928FB34957AD3E03CB0A8B7EEC0FD627DD263589655A16DEA79100B6CC29095C3660C95FD2AFB2E4DD023F0597BD586DD664769CABB67F8
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g....."....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	350
Entropy (8bit):	5.209249265238248
Encrypted:	false
SSDEEP:	6:7w/TPq2Pwkn23oH+Tcwt7Uh2ghZIFUt8Ow/TYXZmw+Ow/TYFkwOwkn23oH+Tcwts:7w/TPvYfYebIhHh2FUt8Ow/TYX/+Ow/r
MD5:	2F539D71127A3FD3078CA25063C595BF
SHA1:	50604B9824341DC1B6DE9052CBD0D19F82025241
SHA-256:	75231811F966B51ED795CD868C20EC12BBF034F8621DBA32A2A2424F2428BC8D
SHA-512:	23EDAB88431EEDB7A0D3D45AE629016DB217217417B534BDD3C3752BAEF9280D4447EB638A984DC92452F11824F2D127F21FBA3CFEAB579396DF95A69BD61696
Malicious:	false
Preview:	2024/12/12-06:39:26.772 1b84 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/12/12-06:39:26.774 1b84 Recovering log #3.2024/12/12-06:39:26.774 1b84 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	350
Entropy (8bit):	5.209249265238248
Encrypted:	false
SSDEEP:	6:7w/TPq2Pwkn23oH+Tcwt7Uh2ghZIFUt8Ow/TYXZmw+Ow/TYFkwOwkn23oH+Tcwts:7w/TPvYfYebIhHh2FUt8Ow/TYX/+Ow/r
MD5:	2F539D71127A3FD3078CA25063C595BF
SHA1:	50604B9824341DC1B6DE9052CBD0D19F82025241
SHA-256:	75231811F966B51ED795CD868C20EC12BBF034F8621DBA32A2A2424F2428BC8D
SHA-512:	23EDAB88431EEDB7A0D3D45AE629016DB217217417B534BDD3C3752BAEF9280D4447EB638A984DC92452F11824F2D127F21FBA3CFEAB579396DF95A69BD61696
Malicious:	false
Preview:	2024/12/12-06:39:26.772 1b84 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/12/12-06:39:26.774 1b84 Recovering log #3.2024/12/12-06:39:26.774 1b84 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Cache\Cache_Data\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Cache\Cache_Data\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Cache\Cache_Data\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Cache\Cache_Data\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Cache\Cache_Data\index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	524656
Entropy (8bit):	5.027445846313988E-4
Encrypted:	false
SSDEEP:	3:LsulY+ll/:Lsx+X
MD5:	1ED2205BAA77299A8A6CD3AB838AB5E8
SHA1:	6D7D15FB4EADAB60583DCE933BD9A691282C224B
SHA-256:	FA1083B9526E140E6D9DF25E2EFD0CD655E03A311B3C4AE94F09141ED5EB475C
SHA-512:	E8658CDD04AB74492AE735C01C6C1DE9D28A73067192FCBC9369A5305234BF3B077A73C8D5CFA0A98C94E8A8B39150827593BA25EA1EEE780662ECAED7B4936D
Malicious:	false
Preview:	..........................................ws../.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNlGal/:Ls3X
MD5:	A16179C20B7D695CB87D3F75CFA4201C
SHA1:	97C288A0D3DA52AEC73CD73EE6BF2B6FCC3611E2
SHA-256:	BFEA5E460C05FB9D39BB995F7B03DE743DDC690882E81DB7203486AA892BAC64
SHA-512:	01BE64DC500C0BFB4D2A2C6A3798B6D0704ED4240296E4A8D4B30C7AD8ADA15E5CCBFCBF81F567E27880CC23BC6DEB4AC440BF05E8605BD9835FD975D5A10F62
Malicious:	false
Preview:	..........................................Ns../.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	432
Entropy (8bit):	5.240196805036103
Encrypted:	false
SSDEEP:	12:7w/+XHAvYfYebvqBQFUt8Ow/+c/+Ow/Q5JfYebvqBvJ:7sOyYfYebvZg8OsTsaJfYebvk
MD5:	3C1800C966FD494A9E004B15FFDB9740
SHA1:	A44F894CE05BAFD7936D91A103791B89DBD7B8F4
SHA-256:	E57E081E068911D06141BF6669E23245F80D2A4854E669B8969A4B3E49E95532
SHA-512:	8B7593747CF0B8B8041A5548E8A2963CD7C2DBA4894DFE2FC758D1914C7C321820C6D75FAA652F76E177A860B36D01BBEAD1384BBA38767EE21937AFCAC25412
Malicious:	false
Preview:	2024/12/12-06:39:29.020 1b50 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/12/12-06:39:29.034 1b50 Recovering log #3.2024/12/12-06:39:29.310 1b50 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	432
Entropy (8bit):	5.240196805036103
Encrypted:	false
SSDEEP:	12:7w/+XHAvYfYebvqBQFUt8Ow/+c/+Ow/Q5JfYebvqBvJ:7sOyYfYebvZg8OsTsaJfYebvk
MD5:	3C1800C966FD494A9E004B15FFDB9740
SHA1:	A44F894CE05BAFD7936D91A103791B89DBD7B8F4
SHA-256:	E57E081E068911D06141BF6669E23245F80D2A4854E669B8969A4B3E49E95532
SHA-512:	8B7593747CF0B8B8041A5548E8A2963CD7C2DBA4894DFE2FC758D1914C7C321820C6D75FAA652F76E177A860B36D01BBEAD1384BBA38767EE21937AFCAC25412
Malicious:	false
Preview:	2024/12/12-06:39:29.020 1b50 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/12/12-06:39:29.034 1b50 Recovering log #3.2024/12/12-06:39:29.310 1b50 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\570e9cfc-17ea-420d-88e5-13f4cbe27b7a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	111
Entropy (8bit):	4.718418993774295
Encrypted:	false
SSDEEP:	3:YLb9N+eAXRfHDH2LS7PMVKJq0nMb1KKqk1Yn:YHpoeS7PMVKJTnMRKXk1Yn
MD5:	807419CA9A4734FEAF8D8563A003B048
SHA1:	A723C7D60A65886FFA068711F1E900CCC85922A6
SHA-256:	AA10BF07B0D265BED28F2A475F3564D8DDB5E4D4FFEE0AB6F3A0CC564907B631
SHA-512:	F10D496AE75DB5BA412BD9F17BF0C7DA7632DB92A3FABF7F24071E40F5759C6A875AD8F3A72BAD149DA58B3DA3B816077DF125D0D9F3544ADBA68C66353D206C
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\7e17e809-a8ac-4cf9-be9c-6bf78ffc8fa1.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\926903f4-3f2f-4644-86cb-e13b3adb255e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.864047146590611
Encrypted:	false
SSDEEP:	6:YHpoueH2a9a1o3/QBR70S7PMVKJTnMRKXk1Yn:YH/u2caq3QH7E4TX
MD5:	1192DD11B1F5F8724DA374B0366A428E
SHA1:	CB40812A40613465E160C478DDF991C0AAA00731
SHA-256:	8E9C85442D198CE1085D98E21111320C07C08869CDD11853AF32FDFE8B2FDC58
SHA-512:	B7F100EA4668A801CA3BE81F38615E66EC871A8E093742D9B9673A278094508EA7099B6799EEF5D9C8FC5BB9CF72E52AC638EF93BBE14CB860E008BDBCA6FA32
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\93b08f58-b836-4029-b99c-7a7d7add9e3b.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Network Persistent State

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.864047146590611
Encrypted:	false
SSDEEP:	6:YHpoueH2a9a1o3/QBR70S7PMVKJTnMRK3VY:YH/u2caq3QH7E4T3y
MD5:	18D8AE83268DD3A59C64AAD659CF2FD3
SHA1:	018C9736438D095A67B1C9953082F671C2FDB681
SHA-256:	D659029D35ADEBB7918AF32FFF3202C63D8047043A8BDF329B2A97751CF95056
SHA-512:	BB0962F930E9844E8C0E9CD209C07F46259E4C7677D5443B7AEE90DCF7B7E8F9960C5E3FCB8A83B9BB40862FBE0442C547083A9FD421D86674B88B2BEBBEB2FB
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Network Persistent State~RF3a866.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.864047146590611
Encrypted:	false
SSDEEP:	6:YHpoueH2a9a1o3/QBR70S7PMVKJTnMRK3VY:YH/u2caq3QH7E4T3y
MD5:	18D8AE83268DD3A59C64AAD659CF2FD3
SHA1:	018C9736438D095A67B1C9953082F671C2FDB681
SHA-256:	D659029D35ADEBB7918AF32FFF3202C63D8047043A8BDF329B2A97751CF95056
SHA-512:	BB0962F930E9844E8C0E9CD209C07F46259E4C7677D5443B7AEE90DCF7B7E8F9960C5E3FCB8A83B9BB40862FBE0442C547083A9FD421D86674B88B2BEBBEB2FB
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Network Persistent State~RF49612.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.864047146590611
Encrypted:	false
SSDEEP:	6:YHpoueH2a9a1o3/QBR70S7PMVKJTnMRK3VY:YH/u2caq3QH7E4T3y
MD5:	18D8AE83268DD3A59C64AAD659CF2FD3
SHA1:	018C9736438D095A67B1C9953082F671C2FDB681
SHA-256:	D659029D35ADEBB7918AF32FFF3202C63D8047043A8BDF329B2A97751CF95056
SHA-512:	BB0962F930E9844E8C0E9CD209C07F46259E4C7677D5443B7AEE90DCF7B7E8F9960C5E3FCB8A83B9BB40862FBE0442C547083A9FD421D86674B88B2BEBBEB2FB
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Reporting and NEL

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, file counter 4, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.555790634850688
Encrypted:	false
SSDEEP:	48:TsIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSB:QIEumQv8m1ccnvS6
MD5:	0247E46DE79B6CD1BF08CAF7782F7793
SHA1:	B3A63ED5BE3D8EC6E3949FC5E2D21D97ACC873A6
SHA-256:	AAD0053186875205E014AB98AE8C18A6233CB715DD3AF44E7E8EB259AEAB5EEA
SHA-512:	148804598D2A9EA182BD2ADC71663D481F88683CE3D672CE12A43E53B0D34FD70458BE5AAA781B20833E963804E7F4562855F2D18F7731B7C2EAEA5D6D52FBB6
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................O}.........g...D.........7............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF394ee.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Trust Tokens

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 9, cookie 0x6, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.36515621748816035
Encrypted:	false
SSDEEP:	24:TLH3lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:Tb31DtX5nDOvyKDhU1cSB
MD5:	25363ADC3C9D98BAD1A33D0792405CBF
SHA1:	D06E343087D86EF1A06F7479D81B26C90A60B5C3
SHA-256:	6E019B8B9E389216D5BDF1F2FE63F41EF98E71DA101F2A6BE04F41CC5954532D
SHA-512:	CF7EEE35D0E00945AF221BEC531E8BF06C08880DA00BD103FA561BC069D7C6F955CBA3C1C152A4884601E5A670B7487D39B4AE9A4D554ED8C14F129A74E555F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......X..g...}.....$.X..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\b20bebb5-f7ae-41c3-8643-5935d21f3449.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	3.4921535629071894
Encrypted:	false
SSDEEP:	3:S8ltHlS+QUl1ASEGhTFljl:S85aEFljl
MD5:	69449520FD9C139C534E2970342C6BD8
SHA1:	230FE369A09DEF748F8CC23AD70FD19ED8D1B885
SHA-256:	3F2E9648DFDB2DDB8E9D607E8802FEF05AFA447E17733DD3FD6D933E7CA49277
SHA-512:	EA34C39AEA13B281A6067DE20AD0CDA84135E70C97DB3CDD59E25E6536B19F7781E5FC0CA4A11C3618D43FC3BD3FBC120DD5C1C47821A248B8AD351F9F4E6367
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	420
Entropy (8bit):	5.260296396401297
Encrypted:	false
SSDEEP:	12:7wUrvYfYebvqBZFUt8OwK/+OwW5JfYebvqBaJ:7DYfYebvyg8O1lJfYebvL
MD5:	EF90B16AF5ECCFB42FC4A4BA0695F8BB
SHA1:	F394ABE13EB2CC929B6F820F1FC661A6D3A6CD63
SHA-256:	87FA5046138BCA0BA9F915DB5C5553E91080589701964D9D7EE7F1012642BF95
SHA-512:	E4BDA9CA4991501FD489CAD61504318C97D634B23FE7198A5DFB4C438B033823F00064416BDB0BE0983AA9890366AA0FA910C5B68363F4B39F537FE94D0EF999
Malicious:	false
Preview:	2024/12/12-06:39:45.181 1ae8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/12/12-06:39:45.193 1ae8 Recovering log #3.2024/12/12-06:39:45.221 1ae8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	420
Entropy (8bit):	5.260296396401297
Encrypted:	false
SSDEEP:	12:7wUrvYfYebvqBZFUt8OwK/+OwW5JfYebvqBaJ:7DYfYebvyg8O1lJfYebvL
MD5:	EF90B16AF5ECCFB42FC4A4BA0695F8BB
SHA1:	F394ABE13EB2CC929B6F820F1FC661A6D3A6CD63
SHA-256:	87FA5046138BCA0BA9F915DB5C5553E91080589701964D9D7EE7F1012642BF95
SHA-512:	E4BDA9CA4991501FD489CAD61504318C97D634B23FE7198A5DFB4C438B033823F00064416BDB0BE0983AA9890366AA0FA910C5B68363F4B39F537FE94D0EF999
Malicious:	false
Preview:	2024/12/12-06:39:45.181 1ae8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/12/12-06:39:45.193 1ae8 Recovering log #3.2024/12/12-06:39:45.221 1ae8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.281777997130558
Encrypted:	false
SSDEEP:	6:7w/TuN+q2Pwkn23oH+TcwtpIFUt8Ow/TmBZmw+Ow/TmVVkwOwkn23oH+Tcwta/Wd:7w/TuN+vYfYebmFUt8Ow/TmB/+Ow/TmL
MD5:	DAB3FBA3826ADE0340E8F930F28DE0E5
SHA1:	2FFF37026D286DBE2F96845A4238F60485255D6F
SHA-256:	607461459A67A1708306EC87629157498625655F79F5ECF2183665E45A7177BD
SHA-512:	37A7575D49D19F7E084D55B8150D8579F51F9F57089A8024FE12F0A0D84C88842963EBF97898BD5E63478BCFE6AB9AB706463411C7EBE9C851B4E3E494CE2833
Malicious:	false
Preview:	2024/12/12-06:39:26.859 1b7c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/12/12-06:39:26.862 1b7c Recovering log #3.2024/12/12-06:39:26.862 1b7c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.281777997130558
Encrypted:	false
SSDEEP:	6:7w/TuN+q2Pwkn23oH+TcwtpIFUt8Ow/TmBZmw+Ow/TmVVkwOwkn23oH+Tcwta/Wd:7w/TuN+vYfYebmFUt8Ow/TmB/+Ow/TmL
MD5:	DAB3FBA3826ADE0340E8F930F28DE0E5
SHA1:	2FFF37026D286DBE2F96845A4238F60485255D6F
SHA-256:	607461459A67A1708306EC87629157498625655F79F5ECF2183665E45A7177BD
SHA-512:	37A7575D49D19F7E084D55B8150D8579F51F9F57089A8024FE12F0A0D84C88842963EBF97898BD5E63478BCFE6AB9AB706463411C7EBE9C851B4E3E494CE2833
Malicious:	false
Preview:	2024/12/12-06:39:26.859 1b7c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/12/12-06:39:26.862 1b7c Recovering log #3.2024/12/12-06:39:26.862 1b7c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Top Sites

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 7, 1st free page 5, free pages 2, cookie 0x5, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.26707851465859517
Encrypted:	false
SSDEEP:	12:TLPp5yN8h6MvDOH+FxOUwa5qVZ7Nkl25Pe2d:TLh8Gxk+6Uwc8NlYC
MD5:	04F8B790DF73BD7CD01238F4681C3F44
SHA1:	DF12D0A21935FC01B36A24BF72AB9640FEBB2077
SHA-256:	96BD789329E46DD9D83002DC40676922A48A3601BF4B5D7376748B34ECE247A0
SHA-512:	0DD492C371D310121F7FD57D29F8CE92AA2536A74923AC27F9C4C0C1580C849D7779348FC80410DEBB5EEE14F357EBDF33BF670D1E7B6CCDF15D69AC127AB7C3
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.......j.j................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	0.0033464165558137224
Encrypted:	false
SSDEEP:	3:ImtVui//l/V7l:IiVui//
MD5:	A5AC14C16926E7A91C1E63FBC0953A93
SHA1:	EA652BF0397E4367FE51696E3FABA7A4F72EFA82
SHA-256:	F41D58BA1F09B86C6E5A3CD2A6CB894D283D8E1EFB38C0C414E2910DF61C682A
SHA-512:	4214017128807DD7144054305C5F5E905A88E614C40C4EE518C5D9E371DFD6BF18A6A0D6C46394A5896D9CBCF3E7C298390D1256036AE40D2FB31DAFC48EAA8D
Malicious:	false
Preview:	VLnk.....?.........u.6Q.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 5, database pages 89, cookie 0x66, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	184320
Entropy (8bit):	1.0668174505160726
Encrypted:	false
SSDEEP:	192:QSqzWMMUfTUnGCTjHbRJkkqtXaWTK+hGgH+6e7EHVumYIXn6:QrzWMffQnzkkqtXnTK+hNH+5EVumT
MD5:	7150F580109FE089FBBDF44781FD9BBA
SHA1:	5F906A870F43A1BE225AFF72E0BE98BF3188F527
SHA-256:	994021CD7844DE271A6E7792BD5667E1C0EFDE21CBB6FEDB2B463313302EDB4A
SHA-512:	1F466E6949C5F49033A78BFFBCF9CF6F5B84FB44A64EBCBF75338804999D3C45F18624870A32324DFFE2F9F731607C7AA051897155FC702BF1834A0CEA46710A
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........f......................................................j............O........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 10, database pages 7, cookie 0xb, schema 4, UTF-8, version-valid-for 10
Category:	dropped
Size (bytes):	14336
Entropy (8bit):	0.7836182415564406
Encrypted:	false
SSDEEP:	24:LLqlCouxhK3thdkSdj5QjUsEGcGBXp22iSBgm+xjgm:uOK3tjkSdj5IUltGhp22iSBgm+xj/
MD5:	AA9965434F66985F0979719F3035C6E1
SHA1:	39FC31CBB2BB4F8FA8FB6C34154FB48FBCBAEEF4
SHA-256:	F42877E694E9AFC76E1BBA279F6EC259E28A7E7C574EFDCC15D58EFAE06ECA09
SHA-512:	201667EAA3DF7DBCCF296DE6FCF4E79897C1BB744E29EF37235C44821A18EAD78697DFEB9253AA01C0DC28E5758E2AF50852685CDC9ECA1010DBAEE642590CEA
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..................n..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 10, cookie 0x7, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.41235120905181716
Encrypted:	false
SSDEEP:	48:Tnj7dojKsKmjKZKAsjZNOjAhts3N8g1j3UcB:v7doKsKuKZKlZNmu46yjx
MD5:	981F351994975A68A0DD3ECE5E889FD0
SHA1:	080D3386290A14A68FCE07709A572AF98097C52D
SHA-256:	3F0C0B2460E0AA2A94E0BF79C8944F2F4835D2701249B34A13FD200F7E5316D7
SHA-512:	C5930797C46EEC25D356BAEB6CFE37E9F462DEE2AE8866343B2C382DBAD45C1544EF720D520C4407F56874596B31EFD6822B58A9D3DAE6F85E47FF802DBAA20B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......w..g...........M...w..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\a0e7c701-7a6f-4336-9f4c-b2b60b7c0e6c.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\ac961874-a8c8-4804-bc8d-a4db7903a324.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	24853
Entropy (8bit):	5.5655335239588455
Encrypted:	false
SSDEEP:	768:uEuZNWWPQCfLC8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCvKulrwapntubE:uEuZNWWPQCfLCu1jaHSuOStmE
MD5:	4016388746F5231A2A6738BDE9DA8E76
SHA1:	4EFE6A190AA31C473A111BED6F23C374F036BE2D
SHA-256:	AD7A35029FA28672FDCDC583D88E465FB26FE6B305D753DBE59F657CDBE73A4E
SHA-512:	67CE09210C4B58E9B07E2ABC6C03C8E53F4AF4AB9D34C121AAA67963F9893C18C42C2DE34D702FA0157437FC342DBD74CEE34C7910C529832BEC26C0978F6628
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378477166750602","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378477166750602","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3951), with CRLF line terminators
Category:	dropped
Size (bytes):	11755
Entropy (8bit):	5.190465908239046
Encrypted:	false
SSDEEP:	192:hH4vrmqRBB4W4PoiUDNaxvR5FCHFcoaSbqGEDI:hH4vrmUB6W4jR3GaSbqGEDI
MD5:	07301A857C41B5854E6F84CA00B81EA0
SHA1:	7441FC1018508FF4F3DBAA139A21634C08ED979C
SHA-256:	2343C541E095E1D5F202E8D2A0807113E69E1969AF8E15E3644C51DB0BF33FBF
SHA-512:	00ADE38E9D2F07C64648202F1D5F18A2DFB2781C0517EAEBCD567D8A77DBB7CB40A58B7C7D4EC03336A63A20D2E11DD64448F020C6FF72F06CA870AA2B4765E0
Malicious:	false
Preview:	{.. "DefaultCohort": {.. "21f3388b-c2a5-4791-8f6e-a4cad6d17f4f.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.BingHomePage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Covid.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Finance.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Jobs.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.KnowledgeCard.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Local.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NTP3PCLICK.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NotifySearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Recipe.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.SearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Sports.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Travel.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Weather.Bubble": 1,.. "2cb2db96-3bd0-403e-abe2-9269b3761041.Bubble": 1,.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\b14c01d8-fbc8-4bb0-8280-95ae314db7fc.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9838
Entropy (8bit):	4.9460428867638715
Encrypted:	false
SSDEEP:	96:sVCkdBkZJ1Yb9MvWQaYm3x85Bh6Cp9/x+6M8muec041eAeC4n2O8Fe4zvrb2aHQu:sVCkd0J/TaYm3x8tpj+FX4QADOibR1f
MD5:	FB25831F0CC81EF5E7EE3924486795D4
SHA1:	D5DCE9243FE3C990051B8C2DA44083D27F87F6EE
SHA-256:	A680356510F3E24317FCAA1C903F98C85D54CDDBB88B603902F9DDC528F1FCE5
SHA-512:	924C5138AD24378825A2321ACFDA329992DAD5AAF045E6FA9060582EA14D932DA539FE74FF01234C0DB9264728C4266548EE1648DDC626D6701C7D876FC8B394
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_id_migration_state":2,"account_tracker_service_last_update":"13378477168638059","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":914,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":70,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"list":[]},"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0"

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\databases\Databases.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x4, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.3410017321959524
Encrypted:	false
SSDEEP:	12:TLiqi/nGb0EiDFIlTSFbyrKZb9YwFOqAyl+FxOUwa5qgufTJpbZ75fOSG:TLiMNiD+lZk/Fj+6UwccNp15fBG
MD5:	98643AF1CA5C0FE03CE8C687189CE56B
SHA1:	ECADBA79A364D72354C658FD6EA3D5CF938F686B
SHA-256:	4DC3BF7A36AB5DA80C0995FAF61ED0F96C4DE572F2D6FF9F120F9BC44B69E444
SHA-512:	68B69FCE8EF5AB1DDA2994BA4DB111136BD441BC3EFC0251F57DC20A3095B8420669E646E2347EAB7BAF30CACA4BCF74BD88E049378D8DE57DE72E4B8A5FF74B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....P....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\heavy_ad_intervention_opt_out.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 4, cookie 0x2, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.35226517389931394
Encrypted:	false
SSDEEP:	12:TLC+waBg9LBgVDBgQjiZBgKuFtuQkMbmgcVAzO5kMCgGUg5OR:TLPdBgtBgJBgQjiZS53uQFE27MCgGZsR
MD5:	D2CCDC36225684AAE8FA563AFEDB14E7
SHA1:	3759649035F23004A4C30A14C5F0B54191BEBF80
SHA-256:	080AEE864047C67CB1586A5BA5EDA007AFD18ECC2B702638287E386F159D7AEE
SHA-512:	1A915AF643D688CA68AEDC1FF26C407D960D18DFDE838B417C437D7ADAC7B91C906E782DCC414784E64287915BD1DE5BB6A282E59AA9FEB8C384B4D4BC5F70EC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......Q......Q......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.03824557679014072
Encrypted:	false
SSDEEP:	3:Gtl5/8YptPZ1Z94tl5/8YptPZ1ZlMRa9//9lnl/telfl6ll:GtoYptPZp4toYptPZxM89XHl/c
MD5:	1C82D3840505354B5779ABD237598717
SHA1:	BD69002AB491FF7756F8F6E1E5037051340FFF1D
SHA-256:	6D6621F9E9F2CA53A3CA8302C116205601F744A84A6B4178AC2396EA141DFCCA
SHA-512:	101AB8E93E8B34463D12CD0561094A648219BDBCFC82A972CD00A603C4700C317C8650032A463A43D46255FC642E21726CB8C17769EB8C973761BF38E0D0344F
Malicious:	false
Preview:	..-.....................07....YH@0.=$.d.2....O!z..-.....................07....YH@0.=$.d.2....O!z........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	16512
Entropy (8bit):	0.23821959975076748
Encrypted:	false
SSDEEP:	12:KSeHsGpLcBmWOIaRN0DqmWOIaR/RgVrhd:KS6pLcsJ1NMHJ1/RgVP
MD5:	F3AD4F03CA6B371265D43B0A2EE795CF
SHA1:	208C34D6DDD9C521E399EE11B245B6C790B6EA3A
SHA-256:	C19FDB92098FB312A4540311F0BE9BB3F4778A68F7E5CB9D2AF03C5D7A0C74FB
SHA-512:	CF0F62152DC36FA088C4469796A30E39BDF80E28C0AFC87EC44CD70EB46F80EC1D6DA6A7E1635746314AD2908AC3706D56EF37EEB616B0D2CFB907A2F873C553
Malicious:	false
Preview:	7....-..........@0.=$.d...3S.0..........@0.=$.d..c+~.K.b................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	221
Entropy (8bit):	4.585704582025059
Encrypted:	false
SSDEEP:	3:VVXntjQPEnjQvxljlhmlt3r6P/FDdllDtm4VNM5lkzXlfseGKT9rcQ6xHOU:/XntM+4ljlhmlt3illw4vs69sedhOuU
MD5:	0ED4D83E80356EF6E8651612BCCD4CA5
SHA1:	C566CF6BAE6CDBC8232C99826D0AFCB83D73A473
SHA-256:	639301B93B254381A51286469C31BA365F969610D817C5463C8840B3985AC674
SHA-512:	C305D94B5A84ADAF51662C316A997401ACFCDF9B4A417FC1FA47AB4319A46FC8E50154E0F1B715A78E1BDF9CCD1268AE1AE6DF67229712C899BB1648D4CE39FA
Malicious:	false
Preview:	A..r.................20_1_1...1.,U.................20_1_1...1..&f.................&f................<..;...............#38_h.......6.Z..W.F.....k\w.....k\w..........B.#0................39_config..........6.....n ....1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	279
Entropy (8bit):	5.24071924558904
Encrypted:	false
SSDEEP:	6:7w/dSh1wkn23oH+Tcwtfrl2KLlpw/dSMq2Pwkn23oH+TcwtfrK+IFUv:7w//fYeb1LTw/VvYfYeb23FUv
MD5:	B441CA7838DBBBB050A3602C79D658AA
SHA1:	0494C6B191F82AA29CE70B03A08F8B16D0BB2CE4
SHA-256:	8DCB1C507797280D41FFD920026BD5B44CB91F02DDC3CD950DC6CE07602C8FF1
SHA-512:	997F606A4D70E312FF9F296473D64E7ABE65538D18C69D468AC06384FBF4C59CCC5E2FB7CB6042853C70FD078A1D37A7EF814C0A83B576EF1D8E7CDE6B255C11
Malicious:	false
Preview:	2024/12/12-06:39:28.662 a80 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db since it was missing..2024/12/12-06:39:28.675 a80 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	617
Entropy (8bit):	3.913229270846343
Encrypted:	false
SSDEEP:	12:G0nYUteza//z3iL/ZCbhXNtr7QRjvRtin01zv0:G0nYUtezaD3A/ZWhXNu1L0
MD5:	AABAFBE331B840F79AE555B1B786994A
SHA1:	3564FFEB1C17C303B8505E5E935A50CA7EA07309
SHA-256:	18D722846A78F3AB689D969F7CBBA10F83D801661ECB77D08DD517764E3731AF
SHA-512:	F6E9A7FB2335B8226CF414873561B8B23BF5911E175E8423AFE7D2A16A30418D97C9820CC317B09C9AFEB20137ECC0FA9680BAB4AB32E9B5CB00A4E8AE304935
Malicious:	false
Preview:	.h.6.................__global... .t...................__global... .9..b.................33_..........................21_.....n[.=.................33_.....vuNX.................21_.....<...................20_.....,.1..................19_.....T....................20_......Q...................20_..........................19_........7.................18_.....G....................37_.....[Q.\|.................38_.......K..................39_.....D8.X.................18_......`...................37_..........................38_......\e..................39_.....dz.\|.................9_.....'\c..................9_.....

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	297
Entropy (8bit):	5.207570710449936
Encrypted:	false
SSDEEP:	6:7w/dWDR1wkn23oH+Tcwtfrzs52KLlpw/dQ0dq2Pwkn23oH+TcwtfrzAdIFUv:7w/K0fYebs9LTw/S0dvYfYeb9FUv
MD5:	5D31C27B8BFEC3F6BD567C5180B0DE63
SHA1:	31921D73DFA1C89DEFFC6F77627B1F93940A723D
SHA-256:	3A52F24A73F4C0A90BCF6A72B657D094A013BE1BD16F42E0F42D0AEEB393CDC6
SHA-512:	6E6270326B2DB40DA06D93A6CCD0785410D8CE997BE27367148BE4DB8210DAFCA17E232E58B30ADBB9B55CF0666DD950EAF7CF30FC621D66C34EF64856CE7638
Malicious:	false
Preview:	2024/12/12-06:39:28.637 a80 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata since it was missing..2024/12/12-06:39:28.659 a80 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNlijWct/:Ls3ijWU
MD5:	AF69E9629CC4DA15CC3C7827D37773A9
SHA1:	B1BA7691D950164AA694A9E932BBADCB6A6AB801
SHA-256:	6EC94915CA491D098D1A618EC0D18525E908C949FECFA37515A98B9B15FF3529
SHA-512:	23B21E01C23E2EA51CABB7F4C03A1EC93B5CFA787763FB5D27AD5D999E02DAA228B25EA10105B9EC81A51D0F308FB142F5AE5AB34B20DDBFDB68F2D5014966E8
Malicious:	false
Preview:	.........................................Fs../.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNlg0/:Ls3b
MD5:	2F54C5D2128D43F7C02D62B75FECAE1B
SHA1:	D13F22E37825B28EE33F1D906F804DF421FB2193
SHA-256:	9CC0F25870611325F8327ABA6D187BBEE643B8C59E186EC86912255E9A1F2B14
SHA-512:	E472E9FA95457B5110871C0D8BBE364DD917263FBD2CAA38B7C95199B5724D419B3C25F83203D11BD9EB5333EE154BF654D5B5C31CD912BA7973A6C241DC0D9C
Malicious:	false
Preview:	........................................0[Ms../.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	120
Entropy (8bit):	3.32524464792714
Encrypted:	false
SSDEEP:	3:tbloIlrJFlXnpQoWcNylRjlgbYnPdJiG6R7lZAUAl:tbdlrYoWcV0n1IGi7kBl
MD5:	A397E5983D4A1619E36143B4D804B870
SHA1:	AA135A8CC2469CFD1EF2D7955F027D95BE5DFBD4
SHA-256:	9C70F766D3B84FC2BB298EFA37CC9191F28BEC336329CC11468CFADBC3B137F4
SHA-512:	4159EA654152D2810C95648694DD71957C84EA825FCCA87B36F7E3282A72B30EF741805C610C5FA847CA186E34BDE9C289AAA7B6931C5B257F1D11255CD2A816
Malicious:	false
Preview:	C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t.\.E.d.g.e.\.A.p.p.l.i.c.a.t.i.o.n.\.m.s.e.d.g.e...e.x.e.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.7192945256669794
Encrypted:	false
SSDEEP:	3:NYLFRQI:ap2I
MD5:	BF16C04B916ACE92DB941EBB1AF3CB18
SHA1:	FA8DAEAE881F91F61EE0EE21BE5156255429AA8A
SHA-256:	7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
SHA-512:	F0B7DF5517596B38D57C57B5777E008D6229AB5B1841BBE74602C77EEA2252BF644B8650C7642BD466213F62E15CC7AB5A95B28E26D3907260ED1B96A74B65FB
Malicious:	false
Preview:	117.0.2045.47

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6820
Entropy (8bit):	5.795651303027429
Encrypted:	false
SSDEEP:	96:iaqkHfWhqJM5ih/cI9URLl8RotoZMFVvlwhue4IbONIeTC6XQS0qGqk+Z4uj+rj1:akOhq3eiRUKhu6qRAq1k8SPxVLZ7VTiq
MD5:	E0FB8139FB51473FA37039BCF8943620
SHA1:	DF3F0FC4AF9B57A223058A29E9FE4547841B8B5C
SHA-256:	FCCA4536367B09E6779D48A6861BFF47820B493871DFD1FDC4F9FA1D5677CD03
SHA-512:	3EA42D36FFC2BE75D37710EBE9272AB2DCB91469957D53AE644E2F28C8DB078E819E14AA54F5A7D538CE1298E47A2EC6B9B0FAD49333CF5FE5F36F9252C5F821
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_migration_success":false},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAB8Q8igE+XsRaSEfvDD9PhxEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACMLNU8nXrR+9b+DWPlNdGy4N+cLlWKYPn1zh1ZRtmuRgAAAAA

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3610d.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6820
Entropy (8bit):	5.795651303027429
Encrypted:	false
SSDEEP:	96:iaqkHfWhqJM5ih/cI9URLl8RotoZMFVvlwhue4IbONIeTC6XQS0qGqk+Z4uj+rj1:akOhq3eiRUKhu6qRAq1k8SPxVLZ7VTiq
MD5:	E0FB8139FB51473FA37039BCF8943620
SHA1:	DF3F0FC4AF9B57A223058A29E9FE4547841B8B5C
SHA-256:	FCCA4536367B09E6779D48A6861BFF47820B493871DFD1FDC4F9FA1D5677CD03
SHA-512:	3EA42D36FFC2BE75D37710EBE9272AB2DCB91469957D53AE644E2F28C8DB078E819E14AA54F5A7D538CE1298E47A2EC6B9B0FAD49333CF5FE5F36F9252C5F821
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_migration_success":false},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAB8Q8igE+XsRaSEfvDD9PhxEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACMLNU8nXrR+9b+DWPlNdGy4N+cLlWKYPn1zh1ZRtmuRgAAAAA

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3611c.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6820
Entropy (8bit):	5.795651303027429
Encrypted:	false
SSDEEP:	96:iaqkHfWhqJM5ih/cI9URLl8RotoZMFVvlwhue4IbONIeTC6XQS0qGqk+Z4uj+rj1:akOhq3eiRUKhu6qRAq1k8SPxVLZ7VTiq
MD5:	E0FB8139FB51473FA37039BCF8943620
SHA1:	DF3F0FC4AF9B57A223058A29E9FE4547841B8B5C
SHA-256:	FCCA4536367B09E6779D48A6861BFF47820B493871DFD1FDC4F9FA1D5677CD03
SHA-512:	3EA42D36FFC2BE75D37710EBE9272AB2DCB91469957D53AE644E2F28C8DB078E819E14AA54F5A7D538CE1298E47A2EC6B9B0FAD49333CF5FE5F36F9252C5F821
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_migration_success":false},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAB8Q8igE+XsRaSEfvDD9PhxEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACMLNU8nXrR+9b+DWPlNdGy4N+cLlWKYPn1zh1ZRtmuRgAAAAA

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF36831.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6820
Entropy (8bit):	5.795651303027429
Encrypted:	false
SSDEEP:	96:iaqkHfWhqJM5ih/cI9URLl8RotoZMFVvlwhue4IbONIeTC6XQS0qGqk+Z4uj+rj1:akOhq3eiRUKhu6qRAq1k8SPxVLZ7VTiq
MD5:	E0FB8139FB51473FA37039BCF8943620
SHA1:	DF3F0FC4AF9B57A223058A29E9FE4547841B8B5C
SHA-256:	FCCA4536367B09E6779D48A6861BFF47820B493871DFD1FDC4F9FA1D5677CD03
SHA-512:	3EA42D36FFC2BE75D37710EBE9272AB2DCB91469957D53AE644E2F28C8DB078E819E14AA54F5A7D538CE1298E47A2EC6B9B0FAD49333CF5FE5F36F9252C5F821
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_migration_success":false},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAB8Q8igE+XsRaSEfvDD9PhxEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACMLNU8nXrR+9b+DWPlNdGy4N+cLlWKYPn1zh1ZRtmuRgAAAAA

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF36840.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6820
Entropy (8bit):	5.795651303027429
Encrypted:	false
SSDEEP:	96:iaqkHfWhqJM5ih/cI9URLl8RotoZMFVvlwhue4IbONIeTC6XQS0qGqk+Z4uj+rj1:akOhq3eiRUKhu6qRAq1k8SPxVLZ7VTiq
MD5:	E0FB8139FB51473FA37039BCF8943620
SHA1:	DF3F0FC4AF9B57A223058A29E9FE4547841B8B5C
SHA-256:	FCCA4536367B09E6779D48A6861BFF47820B493871DFD1FDC4F9FA1D5677CD03
SHA-512:	3EA42D36FFC2BE75D37710EBE9272AB2DCB91469957D53AE644E2F28C8DB078E819E14AA54F5A7D538CE1298E47A2EC6B9B0FAD49333CF5FE5F36F9252C5F821
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_migration_success":false},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAB8Q8igE+XsRaSEfvDD9PhxEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACMLNU8nXrR+9b+DWPlNdGy4N+cLlWKYPn1zh1ZRtmuRgAAAAA

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF38ef3.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6820
Entropy (8bit):	5.795651303027429
Encrypted:	false
SSDEEP:	96:iaqkHfWhqJM5ih/cI9URLl8RotoZMFVvlwhue4IbONIeTC6XQS0qGqk+Z4uj+rj1:akOhq3eiRUKhu6qRAq1k8SPxVLZ7VTiq
MD5:	E0FB8139FB51473FA37039BCF8943620
SHA1:	DF3F0FC4AF9B57A223058A29E9FE4547841B8B5C
SHA-256:	FCCA4536367B09E6779D48A6861BFF47820B493871DFD1FDC4F9FA1D5677CD03
SHA-512:	3EA42D36FFC2BE75D37710EBE9272AB2DCB91469957D53AE644E2F28C8DB078E819E14AA54F5A7D538CE1298E47A2EC6B9B0FAD49333CF5FE5F36F9252C5F821
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_migration_success":false},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAB8Q8igE+XsRaSEfvDD9PhxEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACMLNU8nXrR+9b+DWPlNdGy4N+cLlWKYPn1zh1ZRtmuRgAAAAA

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3ad77.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6820
Entropy (8bit):	5.795651303027429
Encrypted:	false
SSDEEP:	96:iaqkHfWhqJM5ih/cI9URLl8RotoZMFVvlwhue4IbONIeTC6XQS0qGqk+Z4uj+rj1:akOhq3eiRUKhu6qRAq1k8SPxVLZ7VTiq
MD5:	E0FB8139FB51473FA37039BCF8943620
SHA1:	DF3F0FC4AF9B57A223058A29E9FE4547841B8B5C
SHA-256:	FCCA4536367B09E6779D48A6861BFF47820B493871DFD1FDC4F9FA1D5677CD03
SHA-512:	3EA42D36FFC2BE75D37710EBE9272AB2DCB91469957D53AE644E2F28C8DB078E819E14AA54F5A7D538CE1298E47A2EC6B9B0FAD49333CF5FE5F36F9252C5F821
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_migration_success":false},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAB8Q8igE+XsRaSEfvDD9PhxEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACMLNU8nXrR+9b+DWPlNdGy4N+cLlWKYPn1zh1ZRtmuRgAAAAA

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3adb6.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6820
Entropy (8bit):	5.795651303027429
Encrypted:	false
SSDEEP:	96:iaqkHfWhqJM5ih/cI9URLl8RotoZMFVvlwhue4IbONIeTC6XQS0qGqk+Z4uj+rj1:akOhq3eiRUKhu6qRAq1k8SPxVLZ7VTiq
MD5:	E0FB8139FB51473FA37039BCF8943620
SHA1:	DF3F0FC4AF9B57A223058A29E9FE4547841B8B5C
SHA-256:	FCCA4536367B09E6779D48A6861BFF47820B493871DFD1FDC4F9FA1D5677CD03
SHA-512:	3EA42D36FFC2BE75D37710EBE9272AB2DCB91469957D53AE644E2F28C8DB078E819E14AA54F5A7D538CE1298E47A2EC6B9B0FAD49333CF5FE5F36F9252C5F821
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_migration_success":false},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAB8Q8igE+XsRaSEfvDD9PhxEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACMLNU8nXrR+9b+DWPlNdGy4N+cLlWKYPn1zh1ZRtmuRgAAAAA

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3ae04.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6820
Entropy (8bit):	5.795651303027429
Encrypted:	false
SSDEEP:	96:iaqkHfWhqJM5ih/cI9URLl8RotoZMFVvlwhue4IbONIeTC6XQS0qGqk+Z4uj+rj1:akOhq3eiRUKhu6qRAq1k8SPxVLZ7VTiq
MD5:	E0FB8139FB51473FA37039BCF8943620
SHA1:	DF3F0FC4AF9B57A223058A29E9FE4547841B8B5C
SHA-256:	FCCA4536367B09E6779D48A6861BFF47820B493871DFD1FDC4F9FA1D5677CD03
SHA-512:	3EA42D36FFC2BE75D37710EBE9272AB2DCB91469957D53AE644E2F28C8DB078E819E14AA54F5A7D538CE1298E47A2EC6B9B0FAD49333CF5FE5F36F9252C5F821
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_migration_success":false},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAB8Q8igE+XsRaSEfvDD9PhxEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACMLNU8nXrR+9b+DWPlNdGy4N+cLlWKYPn1zh1ZRtmuRgAAAAA

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3ae13.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6820
Entropy (8bit):	5.795651303027429
Encrypted:	false
SSDEEP:	96:iaqkHfWhqJM5ih/cI9URLl8RotoZMFVvlwhue4IbONIeTC6XQS0qGqk+Z4uj+rj1:akOhq3eiRUKhu6qRAq1k8SPxVLZ7VTiq
MD5:	E0FB8139FB51473FA37039BCF8943620
SHA1:	DF3F0FC4AF9B57A223058A29E9FE4547841B8B5C
SHA-256:	FCCA4536367B09E6779D48A6861BFF47820B493871DFD1FDC4F9FA1D5677CD03
SHA-512:	3EA42D36FFC2BE75D37710EBE9272AB2DCB91469957D53AE644E2F28C8DB078E819E14AA54F5A7D538CE1298E47A2EC6B9B0FAD49333CF5FE5F36F9252C5F821
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_migration_success":false},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAB8Q8igE+XsRaSEfvDD9PhxEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACMLNU8nXrR+9b+DWPlNdGy4N+cLlWKYPn1zh1ZRtmuRgAAAAA

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3ce2e.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6820
Entropy (8bit):	5.795651303027429
Encrypted:	false
SSDEEP:	96:iaqkHfWhqJM5ih/cI9URLl8RotoZMFVvlwhue4IbONIeTC6XQS0qGqk+Z4uj+rj1:akOhq3eiRUKhu6qRAq1k8SPxVLZ7VTiq
MD5:	E0FB8139FB51473FA37039BCF8943620
SHA1:	DF3F0FC4AF9B57A223058A29E9FE4547841B8B5C
SHA-256:	FCCA4536367B09E6779D48A6861BFF47820B493871DFD1FDC4F9FA1D5677CD03
SHA-512:	3EA42D36FFC2BE75D37710EBE9272AB2DCB91469957D53AE644E2F28C8DB078E819E14AA54F5A7D538CE1298E47A2EC6B9B0FAD49333CF5FE5F36F9252C5F821
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_migration_success":false},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAB8Q8igE+XsRaSEfvDD9PhxEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACMLNU8nXrR+9b+DWPlNdGy4N+cLlWKYPn1zh1ZRtmuRgAAAAA

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3ce3e.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6820
Entropy (8bit):	5.795651303027429
Encrypted:	false
SSDEEP:	96:iaqkHfWhqJM5ih/cI9URLl8RotoZMFVvlwhue4IbONIeTC6XQS0qGqk+Z4uj+rj1:akOhq3eiRUKhu6qRAq1k8SPxVLZ7VTiq
MD5:	E0FB8139FB51473FA37039BCF8943620
SHA1:	DF3F0FC4AF9B57A223058A29E9FE4547841B8B5C
SHA-256:	FCCA4536367B09E6779D48A6861BFF47820B493871DFD1FDC4F9FA1D5677CD03
SHA-512:	3EA42D36FFC2BE75D37710EBE9272AB2DCB91469957D53AE644E2F28C8DB078E819E14AA54F5A7D538CE1298E47A2EC6B9B0FAD49333CF5FE5F36F9252C5F821
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_migration_success":false},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAB8Q8igE+XsRaSEfvDD9PhxEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACMLNU8nXrR+9b+DWPlNdGy4N+cLlWKYPn1zh1ZRtmuRgAAAAA

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF47442.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6820
Entropy (8bit):	5.795651303027429
Encrypted:	false
SSDEEP:	96:iaqkHfWhqJM5ih/cI9URLl8RotoZMFVvlwhue4IbONIeTC6XQS0qGqk+Z4uj+rj1:akOhq3eiRUKhu6qRAq1k8SPxVLZ7VTiq
MD5:	E0FB8139FB51473FA37039BCF8943620
SHA1:	DF3F0FC4AF9B57A223058A29E9FE4547841B8B5C
SHA-256:	FCCA4536367B09E6779D48A6861BFF47820B493871DFD1FDC4F9FA1D5677CD03
SHA-512:	3EA42D36FFC2BE75D37710EBE9272AB2DCB91469957D53AE644E2F28C8DB078E819E14AA54F5A7D538CE1298E47A2EC6B9B0FAD49333CF5FE5F36F9252C5F821
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_migration_success":false},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAB8Q8igE+XsRaSEfvDD9PhxEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACMLNU8nXrR+9b+DWPlNdGy4N+cLlWKYPn1zh1ZRtmuRgAAAAA

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF49b71.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6820
Entropy (8bit):	5.795651303027429
Encrypted:	false
SSDEEP:	96:iaqkHfWhqJM5ih/cI9URLl8RotoZMFVvlwhue4IbONIeTC6XQS0qGqk+Z4uj+rj1:akOhq3eiRUKhu6qRAq1k8SPxVLZ7VTiq
MD5:	E0FB8139FB51473FA37039BCF8943620
SHA1:	DF3F0FC4AF9B57A223058A29E9FE4547841B8B5C
SHA-256:	FCCA4536367B09E6779D48A6861BFF47820B493871DFD1FDC4F9FA1D5677CD03
SHA-512:	3EA42D36FFC2BE75D37710EBE9272AB2DCB91469957D53AE644E2F28C8DB078E819E14AA54F5A7D538CE1298E47A2EC6B9B0FAD49333CF5FE5F36F9252C5F821
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_migration_success":false},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAB8Q8igE+XsRaSEfvDD9PhxEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACMLNU8nXrR+9b+DWPlNdGy4N+cLlWKYPn1zh1ZRtmuRgAAAAA

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF4ddaa.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6820
Entropy (8bit):	5.795651303027429
Encrypted:	false
SSDEEP:	96:iaqkHfWhqJM5ih/cI9URLl8RotoZMFVvlwhue4IbONIeTC6XQS0qGqk+Z4uj+rj1:akOhq3eiRUKhu6qRAq1k8SPxVLZ7VTiq
MD5:	E0FB8139FB51473FA37039BCF8943620
SHA1:	DF3F0FC4AF9B57A223058A29E9FE4547841B8B5C
SHA-256:	FCCA4536367B09E6779D48A6861BFF47820B493871DFD1FDC4F9FA1D5677CD03
SHA-512:	3EA42D36FFC2BE75D37710EBE9272AB2DCB91469957D53AE644E2F28C8DB078E819E14AA54F5A7D538CE1298E47A2EC6B9B0FAD49333CF5FE5F36F9252C5F821
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_migration_success":false},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAB8Q8igE+XsRaSEfvDD9PhxEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACMLNU8nXrR+9b+DWPlNdGy4N+cLlWKYPn1zh1ZRtmuRgAAAAA

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.46731661083066856
Encrypted:	false
SSDEEP:	12:TL1QAFUxOUDaabZXiDiIF8izX4fhhdWeci2oesJaYi3is25q0S9K0xHZ75fOV:TLiOUOq0afDdWec9sJf5Q7J5fc
MD5:	E93ACF0820CA08E5A5D2D159729F70E3
SHA1:	2C1A4D4924B9AEC1A796F108607404B000877C5D
SHA-256:	F2267FDA7F45499F7A01186B75CEFB799F8D2BC97E2E9B5068952D477294302C
SHA-512:	3BF36C20E04DCF1C16DC794E272F82F68B0DE43F16B4A9746B63B6D6BBC953B00BD7111CDA7AFE85CEBB2C447145483A382B15E2B0A5B36026C3441635D4E50C
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNlEt/:Ls3E1
MD5:	DFBB47FC8812BA3DF4919837D6F1F2EF
SHA1:	0FC8FEB9719A5F0E2C32BB33C5F6C37568E12705
SHA-256:	07C17C04C0FD7ADB06B5300C645251073BA930AB70EF212760053BD91DDA9497
SHA-512:	7773C22D723E2A6CE7A2AF4DC8779229C70DCB0FFAE46CBFB77C8F226C690745DC03B10431C33826AD8FD111C84395ACAC7A5703139DDBAABCA5284551AC44F3
Malicious:	false
Preview:	..........................................Ms../.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.3818353308528755
Encrypted:	false
SSDEEP:	3:2jRo6jhM6ceYcUtS2djIn:5I2uxUt5Mn
MD5:	48324111147DECC23AC222A361873FC5
SHA1:	0DF8B2267ABBDBD11C422D23338262E3131A4223
SHA-256:	D8D672F953E823063955BD9981532FC3453800C2E74C0CC3653D091088ABD3B3
SHA-512:	E3B5DB7BA5E4E3DE3741F53D91B6B61D6EB9ECC8F4C07B6AE1C2293517F331B716114BAB41D7935888A266F7EBDA6FABA90023EFFEC850A929986053853F1E02
Malicious:	false
Preview:	customSettings_F95BA787499AB4FA9EFFF472CE383A14

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings_F95BA787499AB4FA9EFFF472CE383A14

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.014438730983427
Encrypted:	false
SSDEEP:	3:YDMGA2ADH/AYKEqsYq:YQXT/bKE1F
MD5:	BB57A76019EADEDC27F04EB2FB1F1841
SHA1:	8B41A1B995D45B7A74A365B6B1F1F21F72F86760
SHA-256:	2BAE8302F9BD2D87AE26ACF692663DF1639B8E2068157451DA4773BD8BD30A2B
SHA-512:	A455D7F8E0BE9A27CFB7BE8FE0B0E722B35B4C8F206CAD99064473F15700023D5995CC2C4FAFDB8FBB50F0BAB3EC8B241E9A512C0766AAAE1A86C3472C589FFD
Malicious:	false
Preview:	{"forceServiceDetermination":false}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSynchronousLookupUris

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	29
Entropy (8bit):	3.922828737239167
Encrypted:	false
SSDEEP:	3:2NGw+K+:fwZ+
MD5:	7BAAFE811F480ACFCCCEE0D744355C79
SHA1:	24B89AE82313084BB8BBEB9AD98A550F41DF7B27
SHA-256:	D5743766AF0312C7B7728219FC24A03A4FB1C2A54A506F337953FBC2C1B847C7
SHA-512:	70FE1C197AF507CC0D65E99807D245C896A40A4271BA1121F9B621980877B43019E584C48780951FC1AD2A5D7D146FC6EA4678139A5B38F9B6F7A5F1E2E86BA3
Malicious:	false
Preview:	customSynchronousLookupUris_0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSynchronousLookupUris_0

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	35302
Entropy (8bit):	7.99333285466604
Encrypted:	true
SSDEEP:	768:rRhaFePY38QBsj61g3g01LXoDGPpgb8KbMcnjrQCckBuJyqk3x8cBBT:rLP+TBK6ZQLXSsaMcnHQQcox80
MD5:	0E06E28C3536360DE3486B1A9E5195E8
SHA1:	EB768267F34EC16A6CCD1966DCA4C3C2870268AB
SHA-256:	F2658B1C913A96E75B45E6ADB464C8D796B34AC43BAF1635AA32E16D1752971C
SHA-512:	45F1E909599E2F63372867BC359CF72FD846619DFEB5359E52D5700E0B1BCFFE5FF07606511A3BFFDDD933A0507195439457E4E29A49EB6451F26186B7240041
Malicious:	false
Preview:	.......murmur3.....IN...9.......0..X..#l....C....]......pv..E..........,..?.N?....V..B-..F.1....g\|..._.>'.-(V... .=.7P.m....#}.r.....>.LE...G.A.h5........J..=..L^-.Zl++,..h..o.y..~j.]u...W...&s.........M..........h3b..[.5.]..V^w.........a....6g3..%.gy../{\|Z.B..X.}5.]..t.1.H&B.[.).$Y......2....L.t...{...[WE.yy.]..e.v0..\.J3..T.`1Lnh.../..-=w...W.&N7.nz.P...z......'i..R6....../....t.[..&-.....T&l..e....$.8.."....Iq....J.v..\|.6.M...zE...a9uw..'.$6.L..m$......NB).JL.G.7}8(`....J.)b.E.m...c.0I.V...\|$....;.k.......8v..l.:..@.F.........K..2...%(...kA......LJd~._A.N.....$3...5....Z"...X=.....%.........6.k.....F..1..l,ia..i.i....y.M..Cl........}.I..r..-+=b.6....%...#...W..K.....=.F....~.....[.......-...../;....~.09..d.....GR..H.lR...m.Huh9.:..A H./)..D.F..Y.n7.....7D.O.a;>Z.K....w...sq..qo3N...8@.zpD.Ku......+.Z=.zNFgP._@.z.ic.......3.....+..j...an%...X..7.q..A.l.7.S2..+....1.s.b..z...@v..!.y...N.C.XQ.p.\..x8(.<.....cq.(

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	81
Entropy (8bit):	4.3439888556902035
Encrypted:	false
SSDEEP:	3:kDnaV6bVsFUIMf1HDOWg3djTHXoSWDSQ97P:kDYaoUIe1HDM3oskP
MD5:	177F4D75F4FEE84EF08C507C3476C0D2
SHA1:	08E17AEB4D4066AC034207420F1F73DD8BE3FAA0
SHA-256:	21EE7A30C2409E0041CDA6C04EEE72688EB92FE995DC94487FF93AD32BD8F849
SHA-512:	94FC142B3CC4844BF2C0A72BCE57363C554356C799F6E581AA3012E48375F02ABD820076A8C2902A3C6BE6AC4D8FA8D4F010D4FF261327E878AF5E5EE31038FB
Malicious:	false
Preview:	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings_2.0-0

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3581
Entropy (8bit):	4.459693941095613
Encrypted:	false
SSDEEP:	96:JTMhnytNaSA4BOsNQNhnUZTFGKDIWHCgL5tfHaaJzRHF+P1sYmnfHUdT+GWBH7Y/:KyMot7vjFU
MD5:	BDE38FAE28EC415384B8CFE052306D6C
SHA1:	3019740AF622B58D573C00BF5C98DD77F3FBB5CD
SHA-256:	1F4542614473AE103A5EE3DEEEC61D033A40271CFF891AAA6797534E4DBB4D20
SHA-512:	9C369D69298EBF087412EDA782EE72AFE5448FD0D69EA5141C2744EA5F6C36CDF70A51845CDC174838BAC0ADABDFA70DF6AEDBF6E7867578AE7C4B7805A8B55E
Malicious:	false
Preview:	{"models":[],"geoidMaps":{"gw_my":"https://malaysia.smartscreen.microsoft.com/","gw_tw":"https://taiwan.smartscreen.microsoft.com/","gw_at":"https://austria.smartscreen.microsoft.com/","gw_es":"https://spain.smartscreen.microsoft.com/","gw_pl":"https://poland.smartscreen.microsoft.com/","gw_se":"https://sweden.smartscreen.microsoft.com/","gw_kr":"https://southkorea.smartscreen.microsoft.com/","gw_br":"https://brazil.smartscreen.microsoft.com/","au":"https://australia.smartscreen.microsoft.com/","dk":"https://denmark.smartscreen.microsoft.com/","gw_sg":"https://singapore.smartscreen.microsoft.com/","gw_fr":"https://france.smartscreen.microsoft.com/","gw_ca":"https://canada.smartscreen.microsoft.com/","test":"https://eu-9.smartscreen.microsoft.com/","gw_il":"https://israel.smartscreen.microsoft.com/","gw_au":"https://australia.smartscreen.microsoft.com/","gw_ffl4mod":"https://unitedstates4.ss.wd.microsoft.us/","gw_ffl4":"https://unitedstates1.ss.wd.microsoft.us/","gw_eu":"https://europe.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	130439
Entropy (8bit):	3.80180718117079
Encrypted:	false
SSDEEP:	1536:RlIyFAMrwvaGbyLWzDr6PDofI8vsUnPRLz+PMh:weWGP7Eh
MD5:	EB75CEFFE37E6DF9C171EE8380439EDA
SHA1:	F00119BA869133D64E4F7F0181161BD47968FA23
SHA-256:	48B11410DC937A1723BF4C5AD33ECDB286D8EC69544241BC373F753E64B396C1
SHA-512:	044C5113D877CE2E3B42CF07670620937ED7BE2D8B3BF2BAB085C43EF4F64598A7AC56328DDBBE7F0F3CFB9EA49D38CA332BB4ECBFEDBE24AE53B14334A30C8E
Malicious:	false
Preview:	{.. "geoidMaps": {.. "au": "https://australia.smartscreen.microsoft.com/",.. "ch": "https://switzerland.smartscreen.microsoft.com/",.. "eu": "https://europe.smartscreen.microsoft.com/",.. "ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "in": "https://india.smartscreen.microsoft.com/",.. "test": "https://eu-9.smartscreen.microsoft.com/",.. "uk": "https://unitedkingdom.smartscreen.microsoft.com/",.. "us": "https://unitedstates.smartscreen.microsoft.com/",.. "gw_au": "https://australia.smartscreen.microsoft.com/",.. "gw_ch": "https://switzerland.smartscreen.microsoft.com/",.. "gw_eu": "https://europe.smartscreen.microsoft.com/",.. "gw_ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "gw_ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "gw_ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "gw_in": "https

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.346439344671015
Encrypted:	false
SSDEEP:	3:kfKbUPVXXMVQX:kygV5
MD5:	6A3A60A3F78299444AACAA89710A64B6
SHA1:	2A052BF5CF54F980475085EEF459D94C3CE5EF55
SHA-256:	61597278D681774EFD8EB92F5836EB6362975A74CEF807CE548E50A7EC38E11F
SHA-512:	C5D0419869A43D712B29A5A11DC590690B5876D1D95C1F1380C2F773CA0CB07B173474EE16FE66A6AF633B04CC84E58924A62F00DCC171B2656D554864BF57A4
Malicious:	false
Preview:	synchronousLookupUris_638343870221005468

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris_636976985063396749.rel.v2

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	35302
Entropy (8bit):	7.99333285466604
Encrypted:	true
SSDEEP:	768:rRhaFePY38QBsj61g3g01LXoDGPpgb8KbMcnjrQCckBuJyqk3x8cBBT:rLP+TBK6ZQLXSsaMcnHQQcox80
MD5:	0E06E28C3536360DE3486B1A9E5195E8
SHA1:	EB768267F34EC16A6CCD1966DCA4C3C2870268AB
SHA-256:	F2658B1C913A96E75B45E6ADB464C8D796B34AC43BAF1635AA32E16D1752971C
SHA-512:	45F1E909599E2F63372867BC359CF72FD846619DFEB5359E52D5700E0B1BCFFE5FF07606511A3BFFDDD933A0507195439457E4E29A49EB6451F26186B7240041
Malicious:	false
Preview:	.......murmur3.....IN...9.......0..X..#l....C....]......pv..E..........,..?.N?....V..B-..F.1....g\|..._.>'.-(V... .=.7P.m....#}.r.....>.LE...G.A.h5........J..=..L^-.Zl++,..h..o.y..~j.]u...W...&s.........M..........h3b..[.5.]..V^w.........a....6g3..%.gy../{\|Z.B..X.}5.]..t.1.H&B.[.).$Y......2....L.t...{...[WE.yy.]..e.v0..\.J3..T.`1Lnh.../..-=w...W.&N7.nz.P...z......'i..R6....../....t.[..&-.....T&l..e....$.8.."....Iq....J.v..\|.6.M...zE...a9uw..'.$6.L..m$......NB).JL.G.7}8(`....J.)b.E.m...c.0I.V...\|$....;.k.......8v..l.:..@.F.........K..2...%(...kA......LJd~._A.N.....$3...5....Z"...X=.....%.........6.k.....F..1..l,ia..i.i....y.M..Cl........}.I..r..-+=b.6....%...#...W..K.....=.F....~.....[.......-...../;....~.09..d.....GR..H.lR...m.Huh9.:..A H./)..D.F..Y.n7.....7D.O.a;>Z.K....w...sq..qo3N...8@.zpD.Ku......+.Z=.zNFgP._@.z.ic.......3.....+..j...an%...X..7.q..A.l.7.S2..+....1.s.b..z...@v..!.y...N.C.XQ.p.\..x8(.<.....cq.(

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris_638343870221005468

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.556488479039065
Encrypted:	false
SSDEEP:	3:GSCIPPlzYxi21goD:bCWBYx99D
MD5:	3A05EAEA94307F8C57BAC69C3DF64E59
SHA1:	9B852B902B72B9D5F7B9158E306E1A2C5F6112C8
SHA-256:	A8EF112DF7DAD4B09AAA48C3E53272A2EEC139E86590FD80E2B7CBD23D14C09E
SHA-512:	6080AEF2339031FAFDCFB00D3179285E09B707A846FD2EA03921467DF5930B3F9C629D37400D625A8571B900BC46021047770BAC238F6BAC544B48FB3D522FB0
Malicious:	false
Preview:	9.......murmur3.............,M.h...Z...8.\..<&Li.H..[.?m

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.030394788231021
Encrypted:	false
SSDEEP:	3:0xXeZUSXkcVn:0Re5kcV
MD5:	52E2839549E67CE774547C9F07740500
SHA1:	B172E16D7756483DF0CA0A8D4F7640DD5D557201
SHA-256:	F81B7B9CE24F5A2B94182E817037B5F1089DC764BC7E55A9B0A6227A7E121F32
SHA-512:	D80E7351E4D83463255C002D3FDCE7E5274177C24C4C728D7B7932D0BE3EBCFEB68E1E65697ED5E162E1B423BB8CDFA0864981C4B466D6AD8B5E724D84B4203B
Malicious:	false
Preview:	topTraffic_638004170464094982

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_170540185939602997400506234197983529371

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	575056
Entropy (8bit):	7.999649474060713
Encrypted:	true
SSDEEP:	12288:fXdhUG0PlM/EXEBQlbk19RrH76Im4u8C1jJodha:Ji80e9Rb7Tm4u8CnR
MD5:	BE5D1A12C1644421F877787F8E76642D
SHA1:	06C46A95B4BD5E145E015FA7E358A2D1AC52C809
SHA-256:	C1CE928FBEF4EF5A4207ABAFD9AB6382CC29D11DDECC215314B0522749EF6A5A
SHA-512:	FD5B100E2F192164B77F4140ADF6DE0322F34D7B6F0CF14AED91BACAB18BB8F195F161F7CF8FB10651122A598CE474AC4DC39EDF47B6A85C90C854C2A3170960
Malicious:	false
Preview:	...._+jE.`..}....S..1....G}s..E....y".Wh.^.W.H...-...#.A...KR...9b........>k......bU.IVo...D......Y..[l.yx.......'c=..I0.....E.d...-...1 ....m../C...OQ.........qW..<:N.....38.u..X-..s....<..U.,Mi..._.......`.Y/.........^..,.E..........j@..G8..N.... ..Ea...4.+.79k.!T.-5W..!..@+..!.P..LDG.....V."....L.... .(#..$..&......C.....%A.T}....K_.S..'Q.".d....s....(j.D!......Ov..)d0)."(..%..-..G..L.}....i.....m9;.....t.w..0....f?..-..M.c.3.....N7K.T..D>.3.x...z..u$5!..4..T.....U.O^L{.5..=E..'..;.}(\|.6.:..f!.>...?M.8......P.D.J.I4.<....y.E....>....i%.6..Y.@..n.....M..r..C.f.;..<..0.H...F....h.......HB1]1....u..:...H..k....B.Q..J...@}j~.#...'Y.J~....I...ub.&..L[z..1.W/.Ck....M.......[.......N.F..z.{nZ~d.V.4.u.K.V.......X.<p..cz..>....X...W..da3(..g..Z$.L4.j=~.p.l.\.[e.&&.Y ...U)..._.^r0.,.{_......`S..[....(.\..p.bt.g..%.$+....f.....d....Im..f...W ......G..i_8a..ae..7....pS.....z-H..A.s.4.3..O.r.....u.S......a.}..v.-/..... ...a.x#./:...sS&U.().xL...pg

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_638004170464094982

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	raw G3 (Group 3) FAX, byte-padded
Category:	dropped
Size (bytes):	460992
Entropy (8bit):	7.999625908035124
Encrypted:	true
SSDEEP:	12288:KaRwcD8XXTZGZJHXBjOVX3xFttENr4+3eGPnKvJWXrydqb:KaR5oZ2MBFt8r4+3eG/URdqb
MD5:	E9C502DB957CDB977E7F5745B34C32E6
SHA1:	DBD72B0D3F46FA35A9FE2527C25271AEC08E3933
SHA-256:	5A6B49358772DB0B5C682575F02E8630083568542B984D6D00727740506569D4
SHA-512:	B846E682427CF144A440619258F5AA5C94CAEE7612127A60E4BD3C712F8FF614DA232D9A488E27FC2B0D53FD6ACF05409958AEA3B21EA2C1127821BD8E87A5CA
Malicious:	false
Preview:	...2lI.5.<C.;.{....._+jE.`..}....-...#.A...KR...l.M0,s...).9..........x.......F.b......jU....y.h'....L<.....Z..%...._...g.4yu...........'c=..I0..........qW..<:N....<..U.,Mi..._......'(..U.9.!........u....7...4. ..Ea...4.+.79k.!T.-5W..!..@+..$..t\|1.E..7F...+..xf....z&_Q...-.B...)8R.c....0.......B.M.Z...0....&v..<..H...3.....N7K.T..D>.8......P.D.J.I4.B.H.VHy...@.Wc.Cl..6aD..j.....E..4..mI..X]2.GH.G.L...E.F.=.J...@}j~.#...'Y.L[z..1.W/.Ck....L..X........J.NYd........>...N.F..z.{nZ~d.N..../..6.\L...Q...+.w..p...>.S.iG...0]..8....S..)`B#.v..^..T.?...Z.rz.D'.!.T.w....S..8....V.4.u.K.V.......W.6s...Y.).[.c.X.S..........5.X7F...tQ....z.L.X..(3#j...8...i.[..j$.Q....0...]"W.c.H..n..2Te.ak...c..-F(..W2.b....3.]......c.d\|.../....._...f.....d....Im..g.b..R.q.<xx...i2..r.I()Iat..b.j.r@K.+5..C.....nJ.>P,.V@.....s.4.3..O.r.....smd7...L.....].u&1../t.*.......uXb...=@.....wv......]....#.{$.w......i.....\|.....?....E7...}$+..t).E.U..Q..~.`.)..Y@.6.h.......%(

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	3.169925001442312
Encrypted:	false
SSDEEP:	3:CMzOn:CM6
MD5:	B6F7A6B03164D4BF8E3531A5CF721D30
SHA1:	A2134120D4712C7C629CDCEEF9DE6D6E48CA13FA
SHA-256:	3D6F3F8F1456D7CE78DD9DFA8187318B38E731A658E513F561EE178766E74D39
SHA-512:	4B473F45A5D45D420483EA1D9E93047794884F26781BBFE5370A554D260E80AD462E7EEB74D16025774935C3A80CBB2FD1293941EE3D7B64045B791B365F2B63
Malicious:	false
Preview:	uriCache_

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache_

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	180
Entropy (8bit):	4.9586995763058415
Encrypted:	false
SSDEEP:	3:YTyLSmafBoTfvSVACWXWKc4AozROWtm5EQnqdbRWE/QNAo2AvHfjg9PIAclRSQ/V:YWLSGTvSVAVXWHpo9w5/nmbRL/ov/EMF
MD5:	29AF0697CDEAD296A1278AE10A92C664
SHA1:	00D61861CF1709E7E4B39487BAFB3ACC4E883F5B
SHA-256:	FFF8FE4001B73731DC8145C388C8373A519A190BDE4537BC9219466557EF59A7
SHA-512:	AF3171A480322BFAC7FB071E4BBB1F02F69F5B013E63412AAA7A57B4DF490B5D3C442B0BAC61D4736653C71F53FEA9015B792F83B22675D9A1A5A94741D26931
Malicious:	false
Preview:	{"version":1,"cache_data":[{"file_hash":"317570e5238036c9","server_context":"1;c5faad59-a2e3-31f2-b86e-aaf958e12824;phsh:005;7e-05","result":0,"expiration_time":1734104372763545}]}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.389669793590032
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ25AmIpozQOn:YQ3Kq9X0dMgAEiLIMn
MD5:	03B6D5E81A4DC4D4E6C27BE1E932B9D9
SHA1:	3C5EF0615314BDB136AB57C90359F1839BDD5C93
SHA-256:	73B017F7C5ECD629AD41D14147D53F7D3D070C5967E1E571811A6DB39F06EACC
SHA-512:	0037EB23CCDBDDE93CFEB7B9A223D59D0872D4EC7F5E3CA4F7767A7301E96E1AF1175980DC4F08531D5571AFB94DF789567588DEB2D6D611C57EE4CC05376547
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":true,"variations_crash_streak":15}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\a2f783eb-8d29-4948-b486-ce827b8713c9.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	22779
Entropy (8bit):	6.045562630717864
Encrypted:	false
SSDEEP:	384:5tMkaMJH2m8qVT8IeQ0I5t0b9MEFdsNwh5Dsl6OQC/hAP8SylvHJPduE:DMkbJrT8IeQc5d1Dwl6OQyAelvpVL
MD5:	54F4D479D6DEAAD2CE4D0489E3793651
SHA1:	132A7A28D449B241C881AA37DE06FACDFA9A1D4D
SHA-256:	218B1C926891A6BC3DC52B395763B571B18CA4DCF75E2C77463D92B2A04C459A
SHA-512:	9768247DF535D222EABAE4C5B840F933959AB328DAD99F69BF643CFC22CA254C728816C7B5D26E3A50E69BD4179E499BBCDF5BBAD6551D42A7D1D5187451B2FE
Malicious:	false
Preview:	{"apps_count_check_time":"13378477168744766","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_redirect_origin":"","last_seen_whats_new_page_version":"117.0.2045.47"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734003573"},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMsEX9JMK3GLbeAvNjhrlo5GOJiTA/oXLTdG6qXtmMBDiyS59PvY7eCklyb4QcfFi7tpdwu3VBt1XNorvM4+RiU6+CjD0kb+pHz7rRm3rXSyzABnWdKBG+Ij

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\b588023e-3042-4165-8849-fe76cf0358ef.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	8090
Entropy (8bit):	5.815523307714972
Encrypted:	false
SSDEEP:	192:asNAOhqZeiRUtEQskOB6qRAq1k8SPxVLZ7VTiq:asNAOYApnOB6q3QxVNZTiq
MD5:	764CCCCA1D16BAC0D1BEB76655C04199
SHA1:	5D97EFB59AF61622FE322458066FDD31C0414F28
SHA-256:	EADBB48D0AC919A8904FE4E7EE01D8285ABA504FF0C509A9E54E8C1D7A11F79F
SHA-512:	E0FBBC98857BC0E08476EFD70FA9C812BB3356AC5A5732C4B88959140D7FBF8C628F00D2C6E52D9702555E986B02BCC11E1ACC84EBA2D516A09664090902F10A
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false},"tab_stabs":{"closed_without_unfreeze_never_unfrozen":0,"closed_without_unfreeze_previously_unfrozen":0,"discard_without_unfreeze_never_unfrozen":0,"discard_without_unfreeze_previously_unfrozen":0},"tab_stats":{"frozen_daily":0,"unfrozen_daily":0}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Version 2009 (Build 19045.2006)","last_edgeuwp_pin_mig

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\c3527cee-786f-406a-934e-688df11c6947.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	8255
Entropy (8bit):	5.798230700414325
Encrypted:	false
SSDEEP:	192:fsNAOhqZeiRUtZjikOE6qRAq1k8SPxVLZ7VTiQ:fsNAOYWthOE6q3QxVNZTiQ
MD5:	E6EEEC5AD505517A8D9895AF3431E985
SHA1:	F1BD9C307D7737FC66BEC875F29FE3BAFC60117E
SHA-256:	848BBD51AD121F5ED9EE1838ACD9F297BAB86AFB510DF58E6F78DC4B1FE37960
SHA-512:	391605E87DC37D711E25AACA0B5DC9E46A0456E4871FF0EC9F5629D86FC01A88916440374F572D61E85378ABCC409EAD02D59638711874094E3827C0F15915A0
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"dual_engine":{"ie_to_edge":{"redirection_mode":0}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false},"tab_stabs":{"closed_without_unfreeze_never_unfrozen":0,"closed_without_unfreeze_previously_unfrozen":0,"discard_without_unfreeze_never_unfrozen":0,"discard_without_unfreeze_previously_unfrozen":0},"tab_stats":{"frozen_daily":0,"unfrozen_daily":0}},"fire_local_softlanding_notification":false,"fre":{"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration_on_os_version":"10 OS Ve

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\f1110a69-7b54-40d4-8bc0-a0297be36889.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	8337
Entropy (8bit):	5.792190845331311
Encrypted:	false
SSDEEP:	192:fsNwOhqZeiRUYZjikOE6qRAq1k8SPxVLZ7VTiQ:fsNwOYFthOE6q3QxVNZTiQ
MD5:	7A71905D0A35B246B3B177741CB07758
SHA1:	D57000E6BF94D2E85506FC6BCCB9CE69A95375C0
SHA-256:	E2B59109703BC3CE56A57B61B8EB9EEC05CDC2F91F6849F7FD44D4C6EC09281C
SHA-512:	FC66DE68F39C76DE2BDC1D1E39D0CEB75AE4FD2C99C242AC717372FA4389D5532B3114CE3DD379D0CD71E2CD63F773C76D734005D380E05FA6229F48FCF82CC1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":""},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"dual_engine":{"ie_to_edge":{"redirection_mode":0}},"edge":{"perf_center":{"efficiency_mode_v2_is_active":false,"perf_game_mode":true,"performance_mode":3,"performance_mode_is_on":false,"performance_mode_main_toggle":false},"tab_stabs":{"closed_without_unfreeze_never_unfrozen":0,"closed_without_unfreeze_previously_unfrozen":0,"discard_without_unfreeze_never_unfrozen":0,"discard_without_unfreeze_previously_unfrozen":0},"tab_stats":{"frozen_daily":0,"unfrozen_daily":0}},"fire_local_softlanding_notification":false,"fre":{"oem_bookmarks_set":true,"soft_landing_bubble":{"bubble_response":0,"has_user_seen_bubble":true,"is_bubble_triggered":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"migration":{"last_edgeuwp_pin_migration_on_edge_version":"92.0.902.67","last_edgeuwp_pin_migration

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\f4a6f9c2-378c-48f5-a5ed-65b8f05ecb31.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23870
Entropy (8bit):	6.048453026304974
Encrypted:	false
SSDEEP:	384:5tMkaMJH2m8qVT8IeQ0I5t0b9MEFdsNwh5DsDN9BHOUlC/hAP8SylvHJPduE:DMkbJrT8IeQc5d1DwpHOUlyAelvpVL
MD5:	C4E15D3A5A357F6D32AD06E806D36DD7
SHA1:	06DE272DC97B8D5264A20963F9732E5F173B761C
SHA-256:	5D2547769241F74BAC610BD71658B88379F1C1CCC31F1A7CA36A368D87860E5C
SHA-512:	CEFA82734CA356BE069E6AA67495BADAC15EDFEDB1B0540660247E4F68ED823B5FD4728ED887042C782FFBCBDCE52C9D357237DD55AE17FA58F9F3CC9FFB76EC
Malicious:	false
Preview:	{"apps_count_check_time":"13378477168744766","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_redirect_origin":"","last_seen_whats_new_page_version":"117.0.2045.47"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734003573"},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2278
Entropy (8bit):	3.845321679517091
Encrypted:	false
SSDEEP:	48:uiTrlKxrgxZxl9Il8unO3Q5Plc96V5DLpcyCdOmDQhpd1rc:msYxcQha96V9LpcyCdOmDQhK
MD5:	5F799A2906DE402D35528986C62A88B5
SHA1:	B14B075E9BD3598CC320ECDE67AC6FA8CF89B950
SHA-256:	7ABA0E36D00939257F63C6F1504529018E700A422B78D527335DA6821CAC722F
SHA-512:	D24F720011C1FE7C73313070094F2B46F792391EA161329C0E500E33958A9F1C5BB5A2FD5B25557B51BCFA51C6E10C3807DDC252F82D440A1431F9934F447644
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".W.i.p.w.W.M.+.N.H.l.b.C.D.m.s.Z.p.8.S.O.s.j.h.t.F.B.s.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".g.A.P.m.4.5.J.M.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.f.E.P.I.o.B.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4622
Entropy (8bit):	4.005221772442465
Encrypted:	false
SSDEEP:	96:uxYxcOK4MvzQ4xCsFioTFnW3SyAi14z/AQea:uxioBvk4JFPpISyL8wa
MD5:	EED8CA8AB3FD613B7E0F551CA8EC11CB
SHA1:	52E9B724BBFB5A773E3669F9E1B74ACE6940B742
SHA-256:	57F49EF4F1F14871FB439D26F57D30F577F2EB78E5EA990A17ADE3923CD04513
SHA-512:	81D8F4543E00C020BA1951BF6437A276102483B089C483F1732A261CADB3B91F200A270704921F169DAFB08CCD1494A8E0B7A64FEB46BA2BC15221BC232A9456
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".z.3.U.T.q.T.b.3.7./.u.z.h.i.f.l.b.4.0.f.z.h.D.r.E.s.w.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".O.b.Y.S.y.o.p.M.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.w.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.f.E.P.I.o.B.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2684
Entropy (8bit):	3.9085560677849878
Encrypted:	false
SSDEEP:	48:uiTrlKx68Wa7xuVxl9Il8unO3izu03mzMfK+NsJDWszRq0xdNKRtj+d/vc:aSYxciq03mzR9ZzoSdN2f
MD5:	0AA30A3EA07700310A2AB0FCDBF4BA15
SHA1:	8BC230B438FFFCD8FF8037C20389EAF61FAEA9EE
SHA-256:	354C4B2732242E62236C4495AF714F4E14CD3B8160DCD6B2DB7671D1779523A7
SHA-512:	BDAE5F4F7958499E52D76D1C84F0FEC6E586E99C9B25E41F2277BA937470C0E5B8755F15A0A9198491FC38FBF309075B527719E4E4B4D074BAE79B67207DCCDD
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".6.N.3.U.y.9.n.A.U.E.q.s.5.u.9.6.E./.o.g.0.E./.V.J.A.g.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".F.d.o.H.+.1.t.r.3.A.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.f.E.P.I.o.B.

C:\Users\user\AppData\Local\Temp\78c8a621-d995-4b16-8d3d-712a8d7dbf00.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	138356
Entropy (8bit):	7.809609231921042
Encrypted:	false
SSDEEP:	3072:AQ++ZdS5+fnwcxO+XwquyeNnmraugZ/1DOoncWD/5q:AQ++/PZmlyeNnh/1SmRq
MD5:	3F6F93C3DCCD4A91C4EB25C7F6FEB1C1
SHA1:	9B73F46ADFA1F4464929B408407E73D4535C6827
SHA-256:	19F05352CB4C6E231C1C000B6C8B7E9EDCC1E8082CAF46FFF16B239D32AA7C9E
SHA-512:	D488FA67E3A29D0147E9EAF2EABC74D9A255F8470CF79A4AEA60E3B3B5E48A3FCBC4FC3E9CE58DFF8D7D0CAA8AE749295F221E1FE1BA5D20DEB2D97544A12BA4
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[........q.a.....E..i.t,..7C..7!...`l.-.......T.vH...~.....'..aH..C.oJOE..d..2..$J......I..;.(9l.(..+.N.6.@...].a.n.S.6..=.b.W.\....o...#.~J.W.1..E...2H....S.g0....../.H...y.O8...kE.,..m!..F.D.p......H..s.W ...#.L........Ij.........-..n..\..vD.d.V.....!......[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. ?Eq.M...[6^...+.].G..Y]...7..o.. U...v....P.J...@.E!...B.d..p..i".%............oo.<....~=..!t.+...`....h..LK....0....h...,.R%.....u...._..V_.q:_._..5}.uS\.....x?...~]..C-....S=L...._c.P.B....-M...62.i*.Q.....9.....+S=...../6:...W..ql/g..&j.y..{.."....\|..F....\|....V....w.%t.y..?..&..a..<.n....S+\|..=.ra.....

C:\Users\user\AppData\Local\Temp\94308939-3dc3-435e-9f54-73b86d2a1159.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\9d6310dd-951b-42dc-8aa7-262c11375fd0.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 276634
Category:	dropped
Size (bytes):	410885
Entropy (8bit):	7.998889045816899
Encrypted:	true
SSDEEP:	12288:uTi9JPNfgBTIxXL2v6YRl5JCqqpRFW0X2yk:Is1IBTI9LkhSqqQ0Xq
MD5:	A2C02BDC5C337CDAE04E5C53DC3F3B91
SHA1:	5FF56CE9A2B671693947F7A210636367F698A781
SHA-256:	367B7B1BBCADB1562C37558BDF6464CEB990D5811620321D71D8AB926337C97A
SHA-512:	7E41F65356D38B01884892A5256146331BE9D9BFB3E18553DB292D6C4C07FF76C08D5D49A3E73E65B463CF50DED70A298D5759A468824E17197306DC38F48650
Malicious:	false
Preview:	...........W.H.8.....q..v.y...1..o.fm..ds..n@.#y%9...._U.%.d...s.{.N..Q].]]]U]]].:.."..q.......6(I.OB..w/_.i.lVY.....jB....X.....}.IN..G..=.qNn...]:.h......vv'a.'... .{7l}...... ...MN...H$.._...~.d...W.w.5...oTB...r...._...o...0>8...'.ak...../..v..Ds{..u.......I.-{...Ion..L5....~M.[.5........7..../...3....w.^k...U~..5..#.N.=n......5...;.K^sg.0D....'...!..u.e..kns.%9....?..Y.U6.....B.s.:;.oH..pv...n#R..A....i..U.n..F....?..m..D..F..r[.f.#.../...v.;...`.k}..m.\|U..\|........`\|.;U...M:...t..l......v..\|PFGg'..V.x....$!.f.l.j......%..j.0.j\|O..x0.v.....W/W.k.zEZ............7.}8><;>...:.....j.b.m....._.g.0.._.f.5_7X..Qk.Iu..v6..z..`@....u..k.~.$1.)..&3w.\./..}E&.k2..KH_@...!...]@...:..A.d...1?......{..a....:m$.....k..'@=C`w...H.....h.m...kw....#....Y.s..;.t..6..{....C\V0=g2y[........t...^..V.?n.@l.....>4.C.T..Z_.!....v..8 ...4. .Q.x......?h.`..a..`....md._:..U.....w.w!\|..J6.~....&.....:..v.}....n..3B&vz68=. ...v.9.R.....k....K.\..%;..o...

C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files.cab

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 1693708 bytes, 1 file, at 0x2c +A "install86.exe", ID 4848, number 1, 20944 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	1693708
Entropy (8bit):	5.526206300906094
Encrypted:	false
SSDEEP:	12288:MC0st3iH4Vk173mKFJ8MqvRdT+cG5GxHdt3FXJIHdyrd+SIRxHV/HkULBjm:MCw4o72KP8MgRhG52dt3JJCyrdEnlBjm
MD5:	32AE8557D0880ECF9D0120578C3D4262
SHA1:	06B7E7C8FFDBBBDA50982135C5966B248D882535
SHA-256:	6F8CC33CB74CF753413E56B40ACA479B6AA5A88EDC02C8AA26A2B902F448F862
SHA-512:	181EBFA32F8906A9B7032B0417262B13240310E40EDD76F6B45DDEB6BF3C02A083105256D0AA7B028C9C32D87B92C1ADD298B5E01AA38D756F2CDD386E41FA39
Malicious:	false
Preview:	MSCF............,...................J....Q.....(......{Y.E .install86.exe...b..A..[...5 f.q.....4..`...]..i.h..Ci.E.W.....HB.B=...\B....!.....[y.....J.R..[.mmU..U......{?......>..aIs.-..MR...G..b.<H....]....\|.BX.}xJ..<.o....O.2X'.....<m..."....H.@.GG.HP..T.....R7.#IJK.p$.K.>.%....Q.........#.....}..y....{..........Y.K..#....J...... .( ....".C.G.p....8&89.........&......_N].a.O..\|d.?.....gp.T\..../.....X....#p.+....#+..........!&.xr.q.D7.........b`{.J#....s........._.V....".]...w.../........p.8...\|/..6...)_..ML.p...S.....m...\|qS.....@.Q....`....x......9.W.hw......}d....FivxW.?(..q?EE$.-X..o..B.{`..q.s...]00..W$...!9...;80........Y.n..x...;q.l..5..D.H.............9b..aWA'....EpPC......"...F.!%mL-f....%.........9.K1..K..g..H.I$.\..Y%..U3}..S.D~WH;2.o.o....N>N...2^Q.Em.o....-.(...S.bJ6.\_..:w.F.}z........@m..c.. z.3s.b..zq........S.!.r.[..."T0...,"wp...V...@!JyJ0..y.....P..]...(.\|..'...%..D...!.vG.o..U.5..p'..Q.oq..%X.}.*WI.......X{Y\FN'<.y.....aq...

C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\f4ab6fda9a2e4611ba0200371596cdb0$dpx$.tmp\7cf468e1c0af6e4fbb9267df15a06e7a.tmp

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	686285824
Entropy (8bit):	0.04711303228045161
Encrypted:	false
SSDEEP:
MD5:	07638426F75532B5D8E82A85D7DA7716
SHA1:	1254980C7A77BD2D6C0D42086A74B7CC9F7DB573
SHA-256:	860E5A00578D060F9138E606D87DCF4EF1FFD3AD79FCB6C7C61556B5CDDCF97B
SHA-512:	F059ACB0066BF8438339AB70EEFF8F4AD263E8BC5DB37C424D303DB385824E4FE4761FDC4D10D75565FFEFAC205221A26439C7DD08B66119314020492E9BB160
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 32%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....LGg.................h.......................@..........................`".....N..(..@.................................tB..x.............................!......................................................D...............................text....f.......h.................. ..`.rdata........... ...l..............@..@.data...(........>..................@....00cfg..............................@..@.tls................................@....voltbl.,................................rsrc...............................@..@.reloc........!....... .............@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe (copy)

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	686285824
Entropy (8bit):	0.04711303228045161
Encrypted:	false
SSDEEP:
MD5:	07638426F75532B5D8E82A85D7DA7716
SHA1:	1254980C7A77BD2D6C0D42086A74B7CC9F7DB573
SHA-256:	860E5A00578D060F9138E606D87DCF4EF1FFD3AD79FCB6C7C61556B5CDDCF97B
SHA-512:	F059ACB0066BF8438339AB70EEFF8F4AD263E8BC5DB37C424D303DB385824E4FE4761FDC4D10D75565FFEFAC205221A26439C7DD08B66119314020492E9BB160
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 32%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....LGg.................h.......................@..........................`".....N..(..@.................................tB..x.............................!......................................................D...............................text....f.......h.................. ..`.rdata........... ...l..............@..@.data...(........>..................@....00cfg..............................@..@.tls................................@....voltbl.,................................rsrc...............................@..@.reloc........!....... .............@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\msiwrapper.ini

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	1818
Entropy (8bit):	3.725282244922139
Encrypted:	false
SSDEEP:	48:LKAggy9bOlpZJF39g9v6byFvtxf5Sl9vsM:uh9alpW6bOtpofsM
MD5:	461D604085A39C792DEBCB4D27EC5CDE
SHA1:	9F6ED670B75261DB32228BAB5B1C11C01208172E
SHA-256:	98DC98EEAC796C3ABB61687FF06064C581C22F770D4B7C18067ACD847763AEE1
SHA-512:	62E65E3707D47092A9896170E5F4E25C3454EF779D1E53BECE3ABD8066CF237CE1439880829A39F98FEC42BF53901D8F246B397AD733F507201F9A34C2E4E07A
Malicious:	false
Preview:	W.r.a.p.p.e.d.A.p.p.l.i.c.a.t.i.o.n.I.d.=.G.o.o.g.l.e. .C.h.r.o.m.e...W.r.a.p.p.e.d.R.e.g.i.s.t.r.a.t.i.o.n.=.N.o.n.e...I.n.s.t.a.l.l.S.u.c.c.e.s.s.C.o.d.e.s.=.0...E.l.e.v.a.t.i.o.n.M.o.d.e.=.n.e.v.e.r...B.a.s.e.N.a.m.e.=.i.n.s.t.a.l.l.8.6...e.x.e...C.a.b.H.a.s.h.=.6.f.8.c.c.3.3.c.b.7.4.c.f.7.5.3.4.1.3.e.5.6.b.4.0.a.c.a.4.7.9.b.6.a.a.5.a.8.8.e.d.c.0.2.c.8.a.a.2.6.a.2.b.9.0.2.f.4.4.8.f.8.6.2...S.e.t.u.p.P.a.r.a.m.e.t.e.r.s.=./.V.E.R.Y.S.I.L.E.N.T. . ./.V.E.R.Y.S.I.L.E.N.T. ...W.o.r.k.i.n.g.D.i.r.=...C.u.r.r.e.n.t.D.i.r.=..S.O.U.R.C.E.D.I.R....U.I.L.e.v.e.l.=.5...F.o.c.u.s.=.y.e.s...S.e.s.s.i.o.n.D.i.r.=.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.M.W.-.8.1.3.f.7.7.a.1.-.a.6.9.c.-.4.8.3.1.-.9.5.1.5.-.8.8.9.e.1.4.4.d.f.7.3.c.\...F.i.l.e.s.D.i.r.=.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.M.W.-.8.1.3.f.7.7.a.1.-.a.6.9.c.-.4.8.3.1.-.9.5.1.5.-.8.8.9.e.1.4.4.d.f.7.3.c.\.f.i.l.e.s.\...R.u.n.B.e.f.o.r.e.I.n.s.t.a.l.l.F.i.l.e.=.c.m.d...e.x.e...

C:\Users\user\AppData\Local\Temp\a16d7dfa-7ac6-4d4e-8368-90dbeab517fa.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 41902
Category:	dropped
Size (bytes):	76319
Entropy (8bit):	7.996132588300074
Encrypted:	true
SSDEEP:	1536:hS5Vvm808scZeEzFrSpzBUl4MZIGM/iys3BBrYunau6w6DLZ8:GdS8scZNzFrMa4M+lK5/nEDd8
MD5:	24439F0E82F6A60E541FB2697F02043F
SHA1:	E3FAA84B0ED8CDD2268D53A0ECC6F3134D5EBD8F
SHA-256:	B24DD5C374F8BB381A48605D183B6590245EE802C65F643632A3BE9BB1F313C5
SHA-512:	8FD794657A9F80FDBC2350DC26A2C82DFD82266B934A4472B3319FDB870841C832137D4F5CE41D518859B8B1DA63031C6B7E750D301F87D6ECA45B958B147FCD
Malicious:	false
Preview:	...........m{..(.}...7.\...N.D.w..m..q....%XfL.I.ql..;/.....s...E...0....`..A..[o^.^Y...F_.'..."L...^.......Y..W..l...E0..YY...:.&.u?....J..U<.q."...p.ib:.g..^.q.mr.....^&.{.E.....,EAp.q.......=.=.....z^.,d.^..J.R..zI4..2b?.-D5/.^...+.G..Y..?5..k........i.,.T#........_DV....P..d2......b\..L....o....Z.}../....CU.$.-..D9`..~......=....._.2O..?....b.{...7IY.L..q....K....T..5m.d.s.4.^... ..~<..7~6OS..b...^>.......s..n....k."..G.....L...z.U...... ... .ZY...,...kU1..N...(..V.r\$..s...X.It...x.mr..W....g........9DQR....*d......;L.S.....G... .._D.{.=.zI.g.Y~...`T..p.yO..4......8$..v.J..I.%..._.d.[..du5._._...?\..8.c.....U...fy.t....q.t....T@.......:zu..\,.!.I..AN_.....FeX..h.c.i.W.......(.....Y..F...R%.\..@.. 2(e,&.76..F+...l.t.$..`...........Wi.{.U.&(.b}...}.i..,...k....!..%...&.c..D-."..SQ.......q9....)j....7.".N....AX...).d./giR....uk.....s.....^...........:...~......(hP..K.@.&..?.E0:+D\|9...U.q.cu..)t{.e...X...{.....z......LL&I6.=.

C:\Users\user\AppData\Local\Temp\b88a03dc-5152-40f1-adc9-a3469e5b7151.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Local\Temp\ccd532c8-9f64-4f2b-a189-d064852f22a2.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1366x720, components 3
Category:	dropped
Size (bytes):	206855
Entropy (8bit):	7.983996634657522
Encrypted:	false
SSDEEP:	3072:5WcDW3D2an0GMJGqJCj+1ZxdmdopHjHTFYPQyairiVoo4XSWrPoiXvJddppWmEI5:l81Lel7E6lEMVo/S01fDpWmEgD
MD5:	788DF0376CE061534448AA17288FEA95
SHA1:	C3B9285574587B3D1950EE4A8D64145E93842AEB
SHA-256:	B7FB1D3C27E04785757E013EC1AC4B1551D862ACD86F6888217AB82E642882A5
SHA-512:	3AA9C1AA00060753422650BBFE58EEEA308DA018605A6C5287788C3E2909BE876367F83B541E1D05FE33F284741250706339010571D2E2D153A5C5A107D35001
Malicious:	false
Preview:	......Exif..II.................Ducky.......2......Adobe.d...........................................................#"""#''''''''''..................................................!! !!''''''''''........V.."....................................................................................!1..AQ..aq."2....R..T....Br.#S.U..b..3Cs...t6.c.$D.5uV...4d.E&....%F......................!1..AQaq....."2......BRbr3CS....#..4.............?......1f.n..T......TP....E...........P.....@.........E..@......E.P........@........E.....P.P..A@@.E..@.P.P..AP.P..AP..@....T..AP.E..P.Z .. ....."... .....7.H...w.....t.....T....M.."... P..n.n..t5..B.P..(......................................( .................... .".... .".......(.. ."....... ....o......E.6... ....."........."J......Ah......@.@@....:@{6..wCp..3...((.(.........................@..(...."............................ ........T.......@.@@........AP.P..@.E@....E@.d.E@.@@..@.P.T..@..@..P.D...@M........EO..."...=.wCp.....R......P.@......

C:\Users\user\AppData\Local\Temp\cv_debug.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	353
Entropy (8bit):	5.31121033484239
Encrypted:	false
SSDEEP:	6:YEiXRhelTTspHJ56s/uiXRnj2X4ivcmTQJjDrwv/uiXRGJs2p56s/C:YtheJ+p56s/bj2XZf0Dkv/bup56s/C
MD5:	CF9819F537D5CDDD3DC588B0CC7446AE
SHA1:	E66AB8AACC206D5351391E036914151FFF3F4834
SHA-256:	9B88D354BC9B15F1CE604F9F9451B4BE6099D4D033039E27B01113EB000293EA
SHA-512:	2D20846DE58C29C6205E135DCA70F91AB91573E979C42823C40ABD6DCEFE67F072F08E032733D121D4AC957FA77B101125A67E6AC66A7F7DB6BB7288E166F2DE
Malicious:	false
Preview:	{"logTime": "1212/113935", "correlationVector":"azHOdZBDBUCvyz8E6EkmBn","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1212/113935", "correlationVector":"7C064D91E31F45B2A6AEC58E5D39AA16","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1212/113935", "correlationVector":"C94r8AUilaihhCibA6fI7b","action":"EXTENSION_UPDATER", "result":""}.

C:\Users\user\AppData\Local\Temp\d95320e3-429b-4386-86c7-b0e34a66e071.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\78c8a621-d995-4b16-8d3d-712a8d7dbf00.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	138356
Entropy (8bit):	7.809609231921042
Encrypted:	false
SSDEEP:	3072:AQ++ZdS5+fnwcxO+XwquyeNnmraugZ/1DOoncWD/5q:AQ++/PZmlyeNnh/1SmRq
MD5:	3F6F93C3DCCD4A91C4EB25C7F6FEB1C1
SHA1:	9B73F46ADFA1F4464929B408407E73D4535C6827
SHA-256:	19F05352CB4C6E231C1C000B6C8B7E9EDCC1E8082CAF46FFF16B239D32AA7C9E
SHA-512:	D488FA67E3A29D0147E9EAF2EABC74D9A255F8470CF79A4AEA60E3B3B5E48A3FCBC4FC3E9CE58DFF8D7D0CAA8AE749295F221E1FE1BA5D20DEB2D97544A12BA4
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[........q.a.....E..i.t,..7C..7!...`l.-.......T.vH...~.....'..aH..C.oJOE..d..2..$J......I..;.(9l.(..+.N.6.@...].a.n.S.6..=.b.W.\....o...#.~J.W.1..E...2H....S.g0....../.H...y.O8...kE.,..m!..F.D.p......H..s.W ...#.L........Ij.........-..n..\..vD.d.V.....!......[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. ?Eq.M...[6^...+.].G..Y]...7..o.. U...v....P.J...@.E!...B.d..p..i".%............oo.<....~=..!t.+...`....h..LK....0....h...,.R%.....u...._..V_.q:_._..5}.uS\.....x?...~]..C-....S=L...._c.P.B....-M...62.i*.Q.....9.....+S=...../6:...W..ql/g..&j.y..{.."....\|..F....\|....V....w.%t.y..?..&..a..<.n....S+\|..=.ra.....

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\128.png

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4982
Entropy (8bit):	7.929761711048726
Encrypted:	false
SSDEEP:	96:L7Rf7U1ylWb3KfyEfOXE+PIcvBirQFiAql1ZwKREkXCSAk:pTvWqfD+gl0sAql1u7kySAk
MD5:	913064ADAAA4C4FA2A9D011B66B33183
SHA1:	99EA751AC2597A080706C690612AEEEE43161FC1
SHA-256:	AFB4CE8882EF7AE80976EBA7D87F6E07FCDDC8E9E84747E8D747D1E996DEA8EB
SHA-512:	162BF69B1AD5122C6154C111816E4B87A8222E6994A72743ED5382D571D293E1467A2ED2FC6CC27789B644943CF617A56DA530B6A6142680C5B2497579A632B5
Malicious:	false
Preview:	.PNG........IHDR..............>a....=IDATx..]}...U..;...O.Q..QH.I(....v..E....GUb..R[.4@%..hK..B..(.B..". ....&)U#.%...jZ...JC.8.....{.cfvgf.3;.....}ow.....{...P.B...T.P.B...*Tx...=.Q..wv.w.....\|.e.1.$.P.?..l_\.n.}...~.g.....Q...A.f....m.....{,...C2 %..X.......FE.1.N..f...Q..D.K87.....:g..Q.{............3@$.8.....{.....q....G.. .....5..y......)XK..F...D.......... ."8...J#.eM.i....H.E.....a.RIP.`......)..T.....! .[p`X.`..L.a....e. .T..2.....H..p$..02...j....\..........s{...Ymm~.a........f.$./.[.{..C.2:.0..6..]....`....NW.....0..o.T..$;k.2......_...k..{,.+........{..6...L..... .dw...l$..}...K...EV....0......P...e....k....+Go....qw.9.1...X2\..qfw0v.....N...{...l.."....f.A..I..+#.v....'..~E.N-k.........{...l.$..ga..1...$......x$X=}.N..S..B$p..`..`.ZG:c..RA.(.0......Gg.A.I..>...3u.u........_..KO.m.........C...,..c.......0...@_..m...-..7.......4LZ......j@.......\..'....u. QJ.:G..I`.w'B0..w.H..'b.0- ......\|..}./.....e..,.K.1........W.u.v. ...\.o

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\af\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	908
Entropy (8bit):	4.512512697156616
Encrypted:	false
SSDEEP:	12:1HASvgMTCBxNB+kCIww3v+BBJ/wjsV8lCBxeBeRiGTCSU8biHULaBg/4srCBhUJJ:1HAkkJ+kCIwEg/wwbw0PXa22QLWmSDg
MD5:	12403EBCCE3AE8287A9E823C0256D205
SHA1:	C82D43C501FAE24BFE05DB8B8F95ED1C9AC54037
SHA-256:	B40BDE5B612CFFF936370B32FB0C58CC205FC89937729504C6C0B527B60E2CBA
SHA-512:	153401ECDB13086D2F65F9B9F20ACB3CEFE5E2AEFF1C31BA021BE35BF08AB0634812C33D1D34DA270E5693A8048FC5E2085E30974F6A703F75EA1622A0CA0FFD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKEP NUWE".. },.. "explanationofflinedisabled": {.. "message": "Jy is vanlyn. As jy Google Dokumente sonder 'n internetverbinding wil gebruik, moet jy die volgende keer as jy aan die internet gekoppel is na instellings op die Google Dokumente-tuisblad gaan en vanlynsinkronisering aanskakel.".. },.. "explanationofflineenabled": {.. "message": "Jy is vanlyn, maar jy kan nog steeds beskikbare l.ers redigeer of nuwes skep.".. },.. "extdesc": {.. "message": "Skep, wysig en bekyk jou dokumente, sigblaaie en aanbiedings . alles sonder toegang tot die internet.".. },.. "extname": {.. "message": "Google Vanlyn Dokumente".. },.. "learnmore": {.. "message": "Kom meer te wete".. },.. "popuphelptext": {.. "message": "Skryf, redigeer en werk saam, waar jy ook al is, met of sonder 'n internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\am\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1285
Entropy (8bit):	4.702209356847184
Encrypted:	false
SSDEEP:	24:1HAn6bfEpxtmqMI91ivWjm/6GcCIoToCZzlgkX/Mj:W6bMt3MITFjm/Pcd4oCZhg6k
MD5:	9721EBCE89EC51EB2BAEB4159E2E4D8C
SHA1:	58979859B28513608626B563138097DC19236F1F
SHA-256:	3D0361A85ADFCD35D0DE74135723A75B646965E775188F7DCDD35E3E42DB788E
SHA-512:	FA3689E8663565D3C1C923C81A620B006EA69C99FB1EB15D07F8F45192ED9175A6A92315FA424159C1163382A3707B25B5FC23E590300C62CBE2DACE79D84871
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ...".. },.. "explanationofflinedisabled": {.. "message": "..... .. .... Google ..... ........ ..... ..... .Google .... ... .. .. .. ..... .... ....... .. ....... ... .. .. ..... .. ..... ....".. },.. "explanationofflineenabled": {.. "message": "..... .. .... ... .. .... .... ..... .... ... ..... .... .....".. },.. "extdesc": {.. "message": "...... ..... .... ... .. ..... ...... ..... .... .. ..... . .... .. ...... .....".. },.. "extname": {.. "message": "..... .. Goog

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\ar\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1244
Entropy (8bit):	4.5533961615623735
Encrypted:	false
SSDEEP:	12:1HASvgPCBxNhieFTr9ogjIxurIyJCCBxeh6wAZKn7uCSUhStuysUm+WCBhSueW1Y:1HAgJzoaC6VEn7Css8yoXzzd
MD5:	3EC93EA8F8422FDA079F8E5B3F386A73
SHA1:	24640131CCFB21D9BC3373C0661DA02D50350C15
SHA-256:	ABD0919121956AB535E6A235DE67764F46CFC944071FCF2302148F5FB0E8C65A
SHA-512:	F40E879F85BC9B8120A9B7357ED44C22C075BF065F45BEA42BD5316AF929CBD035D5D6C35734E454AEF5B79D378E51A77A71FA23F9EBD0B3754159718FCEB95C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....".. },.. "explanationofflinedisabled": {.. "message": "... ... ...... ........ ....... Google ... ..... .......... ..... ... ......... .. ...... ........ ........ Google ..... ........ ... ..... .. ..... ....... .... .... .... ..........".. },.. "explanationofflineenabled": {.. "message": "... ... ...... .... .. .... ....... ..... ....... ....... .. ..... ..... ......".. },.. "extdesc": {.. "message": "..... ......... ...... ........ ....... ......... ........ ....... .. ... ... ..... .........".. },.. "extname": {.. "message": "....... Google ... ......".. },.. "learnmore": {.. "messa

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\az\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.867640976960053
Encrypted:	false
SSDEEP:	24:1HAWNjbwlmyuAoW32Md+80cVLdUSERHtRo3SjX:J3wlzs42m+8TV+S4H0CjX
MD5:	9A798FD298008074E59ECC253E2F2933
SHA1:	1E93DA985E880F3D3350FC94F5CCC498EFC8C813
SHA-256:	628145F4281FA825D75F1E332998904466ABD050E8B0DC8BB9B6A20488D78A66
SHA-512:	9094480379F5AB711B3C32C55FD162290CB0031644EA09A145E2EF315DA12F2E55369D824AF218C3A7C37DD9A276AEEC127D8B3627D3AB45A14B0191ED2BBE70
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN.S.N. YARADIN".. },.. "explanationofflinedisabled": {.. "message": "Oflayns.n.z. Google S.n.di internet ba.lant.s. olmadan istifad. etm.k ist.yirsinizs., Google S.n.din .sas s.hif.sind. ayarlara gedin v. n.vb.ti d.f. internet. qo.ulanda oflayn sinxronizasiyan. aktiv edin.".. },.. "explanationofflineenabled": {.. "message": "Oflayns.n.z, amma m.vcud fayllar. redakt. ed. v. yenil.rini yarada bil.rsiniz.".. },.. "extdesc": {.. "message": "S.n.d, c.dv.l v. t.qdimatlar.n ham.s.n. internet olmadan redakt. edin, yarad.n v. bax.n.".. },.. "extname": {.. "message": "Google S.n.d Oflayn".. },.. "learnmore": {.. "message": ".trafl. M.lumat".. },.. "popuphelptext": {.. "message": "Harda olma..n.zdan v. internet. qo.ulu olub-olmad...n.zdan as.l. olmayaraq, yaz.n, redakt. edin v. .m.kda.l.q edin.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\be\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3107
Entropy (8bit):	3.535189746470889
Encrypted:	false
SSDEEP:	48:YOWdTQ0QRk+QyJQAy6Qg4QWSe+QECTQLHQlQIfyQ0fnWQjQDrTQik+QvkZTQ+89b:GdTbyRvwgbCTEHQhyVues9oOT3rOCkV
MD5:	68884DFDA320B85F9FC5244C2DD00568
SHA1:	FD9C01E03320560CBBB91DC3D1917C96D792A549
SHA-256:	DDF16859A15F3EB3334D6241975CA3988AC3EAFC3D96452AC3A4AFD3644C8550
SHA-512:	7FF0FBD555B1F9A9A4E36B745CBFCAD47B33024664F0D99E8C080BE541420D1955D35D04B5E973C07725573E592CD0DD84FDBB867C63482BAFF6929ADA27CCDE
Malicious:	false
Preview:	{"createnew":{"message":"\u0421\u0422\u0412\u0410\u0420\u042b\u0426\u042c \u041d\u041e\u0412\u042b"},"explanationofflinedisabled":{"message":"\u0412\u044b \u045e \u043f\u0430\u0437\u0430\u0441\u0435\u0442\u043a\u0430\u0432\u044b\u043c \u0440\u044d\u0436\u044b\u043c\u0435. \u041a\u0430\u0431 \u043a\u0430\u0440\u044b\u0441\u0442\u0430\u0446\u0446\u0430 \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0456 Google \u0431\u0435\u0437 \u043f\u0430\u0434\u043a\u043b\u044e\u0447\u044d\u043d\u043d\u044f \u0434\u0430 \u0456\u043d\u0442\u044d\u0440\u043d\u044d\u0442\u0443, \u043f\u0435\u0440\u0430\u0439\u0434\u0437\u0456\u0446\u0435 \u0434\u0430 \u043d\u0430\u043b\u0430\u0434 \u043d\u0430 \u0433\u0430\u043b\u043e\u045e\u043d\u0430\u0439 \u0441\u0442\u0430\u0440\u043e\u043d\u0446\u044b \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u045e Google \u0456 \u045e\u043a\u043b\u044e\u0447\u044b\u0446\u0435 \u0441\u0456\u043d\u0445\u0440\u0430\u043d\u0456\u0437\u0430\u0446\u044b\u044e

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\bg\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1389
Entropy (8bit):	4.561317517930672
Encrypted:	false
SSDEEP:	24:1HAp1DQqUfZ+Yann08VOeadclUZbyMzZzsYvwUNn7nOyRK8/nn08V7:g1UTfZ+Ya08Uey3tflCRE08h
MD5:	2E6423F38E148AC5A5A041B1D5989CC0
SHA1:	88966FFE39510C06CD9F710DFAC8545672FFDCEB
SHA-256:	AC4A8B5B7C0B0DD1C07910F30DCFBDF1BCB701CFCFD182B6153FD3911D566C0E
SHA-512:	891FCDC6F07337970518322C69C6026896DD3588F41F1E6C8A1D91204412CAE01808F87F9F2DEA1754458D70F51C3CEF5F12A9E3FC011165A42B0844C75EC683
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. .. .......... Google ......... ... ........ ......, ........ ........... . ......... ........ .. Google ......... . ........ ...... .............. ......... ..., ...... ..... ...... . .........".. },.. "explanationofflineenabled": {.. "message": "...... ..., .. ... ...... .. ........... ......... ....... ... .. ......... .....".. },.. "extdesc": {.. "message": "............, .......... . ............ ...... ........., .......... ....... . ........... . ...... .... ... ...... .. .........".. },..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\bn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1763
Entropy (8bit):	4.25392954144533
Encrypted:	false
SSDEEP:	24:1HABGtNOtIyHmVd+q+3X2AFl2DhrR7FAWS9+SMzI8QVAEq8yB0XtfOyvU7D:oshmm/+H2Ml2DrFPS9+S99EzBd7D
MD5:	651375C6AF22E2BCD228347A45E3C2C9
SHA1:	109AC3A912326171D77869854D7300385F6E628C
SHA-256:	1DBF38E425C5C7FC39E8077A837DF0443692463BA1FBE94E288AB5A93242C46E
SHA-512:	958AA7CF645FAB991F2ECA0937BA734861B373FB1C8BCC001599BE57C65E0917F7833A971D93A7A6423C5F54A4839D3A4D5F100C26EFA0D2A068516953989F9D
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ....".. },.. "explanationofflinedisabled": {.. "message": ".... ....... ....... .... ......... ..... ..... Google ........ ....... ...., Google .......... ........ ....... ... ... .... ... .... ... ........... .... ....... .... ... ...... ..... .... .....".. },.. "explanationofflineenabled": {.. "message": ".... ....... ......, ...... .... .... ...... .......... ........ .... .. .... .... .... .... .......".. },.. "extdesc":

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\ca\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	930
Entropy (8bit):	4.569672473374877
Encrypted:	false
SSDEEP:	12:1HASvggoSCBxNFT0sXuqgEHQ2fTq9blUJYUJaw9CBxejZFPLOjCSUuE44pMiiDat:1HAtqs+BEHGpURxSp1iUPWCAXtRKe
MD5:	D177261FFE5F8AB4B3796D26835F8331
SHA1:	4BE708E2FFE0F018AC183003B74353AD646C1657
SHA-256:	D6E65238187A430FF29D4C10CF1C46B3F0FA4B91A5900A17C5DFD16E67FFC9BD
SHA-512:	E7D730304AED78C0F4A78DADBF835A22B3D8114FB41D67B2B26F4FE938B572763D3E127B7C1C81EBE7D538DA976A7A1E7ADC40F918F88AFADEA2201AE8AB47D0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA'N UN DE NOU".. },.. "explanationofflinedisabled": {.. "message": "No tens connexi.. Per utilitzar Documents de Google sense connexi. a Internet, ves a la configuraci. de la p.gina d'inici d'aquest servei i activa l'opci. per sincronitzar-se sense connexi. la propera vegada que estiguis connectat a la xarxa.".. },.. "explanationofflineenabled": {.. "message": "Tot i que no tens connexi., pots editar o crear fitxers.".. },.. "extdesc": {.. "message": "Edita, crea i consulta documents, fulls de c.lcul i presentacions, tot sense acc.s a Internet.".. },.. "extname": {.. "message": "Documents de Google sense connexi.".. },.. "learnmore": {.. "message": "M.s informaci.".. },.. "popuphelptext": {.. "message": "Escriu text, edita fitxers i col.labora-hi siguis on siguis, amb o sense connexi. a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\cs\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	913
Entropy (8bit):	4.947221919047
Encrypted:	false
SSDEEP:	12:1HASvgdsbCBxNBmobXP15Dxoo60n40h6qCBxeBeGG/9jZCSUKFPDLZ2B2hCBhPLm:1HApJmoZ5e50nzQhwAd7dvYB2kDSGGKs
MD5:	CCB00C63E4814F7C46B06E4A142F2DE9
SHA1:	860936B2A500CE09498B07A457E0CCA6B69C5C23
SHA-256:	21AE66CE537095408D21670585AD12599B0F575FF2CB3EE34E3A48F8CC71CFAB
SHA-512:	35839DAC6C985A6CA11C1BFF5B8B5E59DB501FCB91298E2C41CB0816B6101BF322445B249EAEA0CEF38F76D73A4E198F2B6E25EEA8D8A94EA6007D386D4F1055
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVO.IT".. },.. "explanationofflinedisabled": {.. "message": "Jste offline. Pokud chcete Dokumenty Google pou..vat bez p.ipojen. k.internetu, a. budete p...t. online, p.ejd.te do nastaven. na domovsk. str.nce Dokument. Google a.zapn.te offline synchronizaci.".. },.. "explanationofflineenabled": {.. "message": "Jste offline, ale st.le m..ete upravovat dostupn. soubory nebo vytv..et nov..".. },.. "extdesc": {.. "message": "Upravujte, vytv..ejte a.zobrazujte sv. dokumenty, tabulky a.prezentace . v.e bez p..stupu k.internetu.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Dal.. informace".. },.. "popuphelptext": {.. "message": "Pi.te, upravujte a.spolupracujte kdekoli, s.p.ipojen.m k.internetu i.bez n.j.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\cy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	806
Entropy (8bit):	4.815663786215102
Encrypted:	false
SSDEEP:	12:YGo35xMxy6gLr4Dn1eBVa1xzxyn1VFQB6FDVgdAJex9QH7uy+XJEjENK32J21j:Y735+yoeeRG54uDmdXx9Q7u3r83Xj
MD5:	A86407C6F20818972B80B9384ACFBBED
SHA1:	D1531CD0701371E95D2A6BB5EDCB79B949D65E7C
SHA-256:	A482663292A913B02A9CDE4635C7C92270BF3C8726FD274475DC2C490019A7C9
SHA-512:	D9FBF675514A890E9656F83572208830C6D977E34D5744C298A012515BC7EB5A17726ADD0D9078501393BABD65387C4F4D3AC0CC0F7C60C72E09F336DCA88DE7
Malicious:	false
Preview:	{"createnew":{"message":"CREU NEWYDD"},"explanationofflinedisabled":{"message":"Rydych chi all-lein. I ddefnyddio Dogfennau Google heb gysylltiad \u00e2'r rhyngrwyd, ewch i'r gosodiadau ar dudalen hafan Dogfennau Google a throi 'offine sync' ymlaen y tro nesaf y byddwch wedi'ch cysylltu \u00e2'r rhyngrwyd."},"explanationofflineenabled":{"message":"Rydych chi all-lein, ond gallwch barhau i olygu'r ffeiliau sydd ar gael neu greu rhai newydd."},"extdesc":{"message":"Gallwch olygu, creu a gweld eich dogfennau, taenlenni a chyflwyniadau \u2013 i gyd heb fynediad i'r rhyngrwyd."},"extname":{"message":"Dogfennau Google All-lein"},"learnmore":{"message":"DYSGU MWY"},"popuphelptext":{"message":"Ysgrifennwch, golygwch a chydweithiwch lle bynnag yr ydych, gyda chysylltiad \u00e2'r rhyngrwyd neu hebddo."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\da\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	883
Entropy (8bit):	4.5096240460083905
Encrypted:	false
SSDEEP:	24:1HA4EFkQdUULMnf1yo+9qgpukAXW9bGJTvDyqdr:zEFkegfw9qwAXWNs/yu
MD5:	B922F7FD0E8CCAC31B411FC26542C5BA
SHA1:	2D25E153983E311E44A3A348B7D97AF9AAD21A30
SHA-256:	48847D57C75AF51A44CBF8F7EF1A4496C2007E58ED56D340724FDA1604FF9195
SHA-512:	AD0954DEEB17AF04858DD5EC3D3B3DA12DFF7A666AF4061DEB6FD492992D95DB3BAF751AB6A59BEC7AB22117103A93496E07632C2FC724623BB3ACF2CA6093F3
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPRET NYT".. },.. "explanationofflinedisabled": {.. "message": "Du er offline. Hvis du vil bruge Google Docs uden en internetforbindelse, kan du g. til indstillinger p. startsiden for Google Docs og aktivere offlinesynkronisering, n.ste gang du har internetforbindelse.".. },.. "explanationofflineenabled": {.. "message": "Du er offline, men du kan stadig redigere tilg.ngelige filer eller oprette nye.".. },.. "extdesc": {.. "message": "Rediger, opret og se dine dokumenter, regneark og pr.sentationer helt uden internetadgang.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "F. flere oplysninger".. },.. "popuphelptext": {.. "message": "Skriv, rediger og samarbejd, uanset hvor du er, og uanset om du har internetforbindelse.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\de\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1031
Entropy (8bit):	4.621865814402898
Encrypted:	false
SSDEEP:	24:1HA6sZnqWd77ykJzCkhRhoe1HMNaAJPwG/p98HKpy2kX/R:WZqWxykJzthRhoQma+tpyHX2O/R
MD5:	D116453277CC860D196887CEC6432FFE
SHA1:	0AE00288FDE696795CC62FD36EABC507AB6F4EA4
SHA-256:	36AC525FA6E28F18572D71D75293970E0E1EAD68F358C20DA4FDC643EEA2C1C5
SHA-512:	C788C3202A27EC220E3232AE25E3C855F3FDB8F124848F46A3D89510C564641A2DFEA86D5014CEA20D3D2D3C1405C96DBEB7CCAD910D65C55A32FDCA8A33FDD4
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NEU ERSTELLEN".. },.. "explanationofflinedisabled": {.. "message": "Sie sind offline. Um Google Docs ohne Internetverbindung zu verwenden, gehen Sie auf der Google Docs-Startseite auf \"Einstellungen\" und schalten die Offlinesynchronisierung ein, wenn Sie das n.chste Mal mit dem Internet verbunden sind.".. },.. "explanationofflineenabled": {.. "message": "Sie sind offline, aber k.nnen weiterhin verf.gbare Dateien bearbeiten oder neue Dateien erstellen.".. },.. "extdesc": {.. "message": "Mit der Erweiterung k.nnen Sie Dokumente, Tabellen und Pr.sentationen bearbeiten, erstellen und aufrufen.. ganz ohne Internetverbindung.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Weitere Informationen".. },.. "popuphelptext": {.. "message": "Mit oder ohne Internetverbindung: Sie k.nnen von .berall Dokumente erstellen, .ndern und zusammen mit anderen

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\el\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1613
Entropy (8bit):	4.618182455684241
Encrypted:	false
SSDEEP:	24:1HAJKan4EITDZGoziRAc2Z8eEfkTJfLhGX7b0UBNoAcGpVyhxefSmuq:SKzTD0IK85JlwsGOUyaSk
MD5:	9ABA4337C670C6349BA38FDDC27C2106
SHA1:	1FC33BE9AB4AD99216629BC89FBB30E7AA42B812
SHA-256:	37CA6AB271D6E7C9B00B846FDB969811C9CE7864A85B5714027050795EA24F00
SHA-512:	8564F93AD8485C06034A89421CE74A4E719BBAC865E33A7ED0B87BAA80B7F7E54B240266F2EDB595DF4E6816144428DB8BE18A4252CBDCC1E37B9ECC9F9D7897
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......... ....".. },.. "explanationofflinedisabled": {.. "message": "..... ..... ......... ... .. ............... .. ....... Google ..... ....... ... ........., ......... .... ......... .... ...... ...... ... ........ Google ... ............. ... ........... ..... ........ ... ....... .... ... .. ..... ............ ... ..........".. },.. "explanationofflineenabled": {.. "message": "..... ..... ........ .... ........ .. .............. .. ......... ...... . .. ............. ... .......".. },.. "extdesc": {.. "message": ".............., ............ ... ..... .. ......., .

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\en\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\en_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\en_GB\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	848
Entropy (8bit):	4.494568170878587
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3vRyc1NzXW6iFrSCBxesJGceKCSUuvlvOgwCBhUufz1tnaXrQ:1HA3djfR3NzXviFrJj4sJXJ+bA6RM
MD5:	3734D498FB377CF5E4E2508B8131C0FA
SHA1:	AA23E39BFE526B5E3379DE04E00EACBA89C55ADE
SHA-256:	AB5CDA04013DCE0195E80AF714FBF3A67675283768FFD062CF3CF16EDB49F5D4
SHA-512:	56D9C792954214B0DE56558983F7EB7805AC330AF00E944E734340BE41C68E5DD03EDDB17A63BC2AB99BDD9BE1F2E2DA5BE8BA7C43D938A67151082A9041C7BA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an Internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the Internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create and view your documents, spreadsheets and presentations . all without Internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn more".. },.. "popuphelptext": {.. "message": "Write, edit and collaborate wherever you are, with or without an Internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\en_US\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1425
Entropy (8bit):	4.461560329690825
Encrypted:	false
SSDEEP:	24:1HA6Krbbds5Kna/BNzXviFrpsCxKU4irpNQ0+qWK5yOJAaCB7MAa6:BKrbBs5Kna/BNzXvi3sCxKZirA0jWK5m
MD5:	578215FBB8C12CB7E6CD73FBD16EC994
SHA1:	9471D71FA6D82CE1863B74E24237AD4FD9477187
SHA-256:	102B586B197EA7D6EDFEB874B97F95B05D229EA6A92780EA8544C4FF1E6BC5B1
SHA-512:	E698B1A6A6ED6963182F7D25AC12C6DE06C45D14499DDC91E81BDB35474E7EC9071CFEBD869B7D129CB2CD127BC1442C75E408E21EB8E5E6906A607A3982B212
Malicious:	false
Preview:	{.. "createNew": {.. "description": "Text shown in the extension pop up for creating a new document",.. "message": "CREATE NEW".. },.. "explanationOfflineDisabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is disabled.",.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationOfflineEnabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is enabled.",.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extDesc": {.. "description": "Extension description",.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extName": {.. "description": "Extension name",..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\es\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	961
Entropy (8bit):	4.537633413451255
Encrypted:	false
SSDEEP:	12:1HASvggeCBxNFxcw2CVcfamedatqWCCBxeFxCF/m+rWAaFQbCSUuExqIQdO06stp:1HAqn0gcfa9dc/5mCpmIWck02USfWmk
MD5:	F61916A206AC0E971CDCB63B29E580E3
SHA1:	994B8C985DC1E161655D6E553146FB84D0030619
SHA-256:	2008F4FAAB71AB8C76A5D8811AD40102C380B6B929CE0BCE9C378A7CADFC05EB
SHA-512:	D9C63B2F99015355ACA04D74A27FD6B81170750C4B4BE7293390DC81EF4CD920EE9184B05C61DC8979B6C2783528949A4AE7180DBF460A2620DBB0D3FD7A05CF
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a Configuraci.n en la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que te conectes a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n. Aun as., puedes crear archivos o editar los que est.n disponibles.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones; todo ello, sin acceso a Internet.".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe o edita contenido y colabora con otras personas desde cualquier lugar, con o sin conexi.n a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\es_419\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	959
Entropy (8bit):	4.570019855018913
Encrypted:	false
SSDEEP:	24:1HARn05cfa9dcDmQOTtSprj0zaGUSjSGZ:+n0CfMcDmQOTQprj4qpC
MD5:	535331F8FB98894877811B14994FEA9D
SHA1:	42475E6AFB6A8AE41E2FC2B9949189EF9BBE09FB
SHA-256:	90A560FF82605DB7EDA26C90331650FF9E42C0B596CEDB79B23598DEC1B4988F
SHA-512:	2CE9C69E901AB5F766E6CFC1E592E1AF5A07AA78D154CCBB7898519A12E6B42A21C5052A86783ABE3E7A05043D4BD41B28960FEDDB30169FF7F7FE7208C8CFE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NUEVO".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a la configuraci.n de la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que est.s conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n, pero a.n puedes modificar los archivos disponibles o crear otros nuevos.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones aunque no tengas acceso a Internet".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, modifica y colabora dondequiera que est.s, con conexi.n a Internet o sin ella.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\et\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	968
Entropy (8bit):	4.633956349931516
Encrypted:	false
SSDEEP:	24:1HA5WG6t306+9sihHvMfdJLjUk4NJPNczGr:mWGY0cOUdJODPmzs
MD5:	64204786E7A7C1ED9C241F1C59B81007
SHA1:	586528E87CD670249A44FB9C54B1796E40CDB794
SHA-256:	CC31B877238DA6C1D51D9A6155FDE565727A1956572F466C387B7E41C4923A29
SHA-512:	44FCF93F3FB10A3DB68D74F9453995995AB2D16863EC89779DB451A4D90F19743B8F51095EEC3ECEF5BD0C5C60D1BF3DFB0D64DF288DCCFBE70C129AE350B2C6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LOO UUS".. },.. "explanationofflinedisabled": {.. "message": "Teil ei ole v.rgu.hendust. Teenuse Google.i dokumendid kasutamiseks ilma Interneti-.henduseta avage j.rgmine kord, kui olete Internetiga .hendatud, teenuse Google.i dokumendid avalehel seaded ja l.litage sisse v.rgu.henduseta s.nkroonimine.".. },.. "explanationofflineenabled": {.. "message": "Teil ei ole v.rgu.hendust, kuid saate endiselt saadaolevaid faile muuta v.i uusi luua.".. },.. "extdesc": {.. "message": "Saate luua, muuta ja vaadata oma dokumente, arvustustabeleid ning esitlusi ilma Interneti-.henduseta.".. },.. "extname": {.. "message": "V.rgu.henduseta Google.i dokumendid".. },.. "learnmore": {.. "message": "Lisateave".. },.. "popuphelptext": {.. "message": "Kirjutage, muutke ja tehke koost..d .ksk.ik kus olenemata sellest, kas teil on Interneti-.hendus.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\eu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	838
Entropy (8bit):	4.4975520913636595
Encrypted:	false
SSDEEP:	24:YnmjggqTWngosqYQqE1kjO39m7OddC0vjWQMmWgqwgQ8KLcxOb:Ynmsgqyngosq9qxTOs0vjWQMbgqchb
MD5:	29A1DA4ACB4C9D04F080BB101E204E93
SHA1:	2D0E4587DDD4BAC1C90E79A88AF3BD2C140B53B1
SHA-256:	A41670D52423BA69C7A65E7E153E7B9994E8DD0370C584BDA0714BD61C49C578
SHA-512:	B7B7A5A0AA8F6724B0FA15D65F25286D9C66873F03080CBABA037BDEEA6AADC678AC4F083BC52C2DB01BEB1B41A755ED67BBDDB9C0FE4E35A004537A3F7FC458
Malicious:	false
Preview:	{"createnew":{"message":"SORTU"},"explanationofflinedisabled":{"message":"Ez zaude konektatuta Internetera. Google Dokumentuak konexiorik gabe erabiltzeko, joan Google Dokumentuak zerbitzuaren orri nagusiko ezarpenetara eta aktibatu konexiorik gabeko sinkronizazioa Internetera konektatzen zaren hurrengoan."},"explanationofflineenabled":{"message":"Ez zaude konektatuta Internetera, baina erabilgarri dauden fitxategiak edita ditzakezu, baita beste batzuk sortu ere."},"extdesc":{"message":"Editatu, sortu eta ikusi dokumentuak, kalkulu-orriak eta aurkezpenak Interneteko konexiorik gabe."},"extname":{"message":"Google Dokumentuak konexiorik gabe"},"learnmore":{"message":"Lortu informazio gehiago"},"popuphelptext":{"message":"Edonon zaudela ere, ez duzu zertan konektatuta egon idatzi, editatu eta lankidetzan jardun ahal izateko."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\fa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1305
Entropy (8bit):	4.673517697192589
Encrypted:	false
SSDEEP:	24:1HAX9yM7oiI99Rwx4xyQakJbfAEJhmq/RlBu92P7FbNcgYVJ0:JM7ovex4xyQaKjAEyq/p7taX0
MD5:	097F3BA8DE41A0AAF436C783DCFE7EF3
SHA1:	986B8CABD794E08C7AD41F0F35C93E4824AC84DF
SHA-256:	7C4C09D19AC4DA30CC0F7F521825F44C4DFBC19482A127FBFB2B74B3468F48F1
SHA-512:	8114EA7422E3B20AE3F08A3A64A6FFE1517A7579A3243919B8F789EB52C68D6F5A591F7B4D16CEE4BD337FF4DAF4057D81695732E5F7D9E761D04F859359FADB
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ... ....".. },.. "explanationofflinedisabled": {.. "message": "...... ...... .... ....... .. ....... Google .... ..... ........ .... ... .. .. ....... ... ..... .. ....... .. .... .... ....... Google ..... . .......... ...... .. .... .....".. },.. "explanationofflineenabled": {.. "message": "...... ..... ... ...... ......... ......... .. .. .. ..... ..... ...... .... .. ........ ..... ..... .....".. },.. "extdesc": {.. "message": "...... ............ . ........ .. ....... ..... . ...... .... . ... ... ..... .... ...... .. ........".. },.. "extname": {.. "message": "....... Google .

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\fi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	911
Entropy (8bit):	4.6294343834070935
Encrypted:	false
SSDEEP:	12:1HASvguCBxNMME2BESA7gPQk36xCBxeMMcXYBt+CSU1pfazCBhUunV1tLaX5GI2N:1HAVioESAsPf36O3Xst/p3J8JeEY
MD5:	B38CBD6C2C5BFAA6EE252D573A0B12A1
SHA1:	2E490D5A4942D2455C3E751F96BD9960F93C4B60
SHA-256:	2D752A5DBE80E34EA9A18C958B4C754F3BC10D63279484E4DF5880B8FD1894D2
SHA-512:	6E65207F4D8212736059CC802C6A7104E71A9CC0935E07BD13D17EC46EA26D10BC87AD923CD84D78781E4F93231A11CB9ED8D3558877B6B0D52C07CB005F1C0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LUO UUSI".. },.. "explanationofflinedisabled": {.. "message": "Olet offline-tilassa. Jos haluat k.ytt.. Google Docsia ilman internetyhteytt., siirry Google Docsin etusivulle ja ota asetuksissa k.ytt..n offline-synkronointi, kun seuraavan kerran olet yhteydess. internetiin.".. },.. "explanationofflineenabled": {.. "message": "Olet offline-tilassa. Voit kuitenkin muokata k.ytett.viss. olevia tiedostoja tai luoda uusia.".. },.. "extdesc": {.. "message": "Muokkaa, luo ja katso dokumentteja, laskentataulukoita ja esityksi. ilman internetyhteytt..".. },.. "extname": {.. "message": "Google Docsin offline-tila".. },.. "learnmore": {.. "message": "Lis.tietoja".. },.. "popuphelptext": {.. "message": "Kirjoita, muokkaa ja tee yhteisty.t. paikasta riippumatta, my.s ilman internetyhteytt..".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\fil\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	939
Entropy (8bit):	4.451724169062555
Encrypted:	false
SSDEEP:	24:1HAXbH2eZXn6sjLITdRSJpGL/gWFJ3sqixO:ubHfZqsHIT/FLL3qO
MD5:	FCEA43D62605860FFF41BE26BAD80169
SHA1:	F25C2CE893D65666CC46EA267E3D1AA080A25F5B
SHA-256:	F51EEB7AAF5F2103C1043D520E5A4DE0FA75E4DC375E23A2C2C4AFD4D9293A72
SHA-512:	F66F113A26E5BCF54B9AAFA69DAE3C02C9C59BD5B9A05F829C92AF208C06DC8CCC7A1875CBB7B7CE425899E4BA27BFE8CE2CDAF43A00A1B9F95149E855989EE0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "GUMAWA NG BAGO".. },.. "explanationofflinedisabled": {.. "message": "Naka-offline ka. Upang magamit ang Google Docs nang walang koneksyon sa internet, pumunta sa mga setting sa homepage ng Google Docs at i-on ang offline na pag-sync sa susunod na nakakonekta ka sa internet.".. },.. "explanationofflineenabled": {.. "message": "Naka-offline ka, ngunit maaari mo pa ring i-edit ang mga available na file o gumawa ng mga bago.".. },.. "extdesc": {.. "message": "I-edit, gawin, at tingnan ang iyong mga dokumento, spreadsheet, at presentation . lahat ng ito nang walang access sa internet.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Matuto Pa".. },.. "popuphelptext": {.. "message": "Magsulat, mag-edit at makipag-collaborate nasaan ka man, nang mayroon o walang koneksyon sa internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\fr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.622066056638277
Encrypted:	false
SSDEEP:	24:1HAdy42ArMdsH50Jd6Z1PCBolXAJ+GgNHp0X16M1J1:EyfArMS2Jd6Z1PCBolX2+vNmX16Y1
MD5:	A58C0EEBD5DC6BB5D91DAF923BD3A2AA
SHA1:	F169870EEED333363950D0BCD5A46D712231E2AE
SHA-256:	0518287950A8B010FFC8D52554EB82E5D93B6C3571823B7CECA898906C11ABCC
SHA-512:	B04AFD61DE490BC838354E8DC6C22BE5C7AC6E55386FFF78489031ACBE2DBF1EAA2652366F7A1E62CE87CFCCB75576DA3B2645FEA1645B0ECEB38B1FA3A409E8
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour pouvoir utiliser Google.Docs sans connexion Internet, acc.dez aux param.tres de la page d'accueil de Google.Docs et activez la synchronisation hors connexion lors de votre prochaine connexion . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez quand m.me modifier les fichiers disponibles ou cr.er des fichiers.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez des documents, feuilles de calcul et pr.sentations, sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Docs hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": "R.digez des documents, modifiez-les et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\fr_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	972
Entropy (8bit):	4.621319511196614
Encrypted:	false
SSDEEP:	24:1HAdyg2pwbv1V8Cd61PC/vT2fg3YHDyM1J1:EyHpwbpd61C/72Y3YOY1
MD5:	6CAC04BDCC09034981B4AB567B00C296
SHA1:	84F4D0E89E30ED7B7ACD7644E4867FFDB346D2A5
SHA-256:	4CAA46656ECC46A420AA98D3307731E84F5AC1A89111D2E808A228C436D83834
SHA-512:	160590B6EC3DCF48F3EA7A5BAA11A8F6FA4131059469623E00AD273606B468B3A6E56D199E97DAA0ECB6C526260EBAE008570223F2822811F441D1C900DC33D6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour utiliser Google.Documents sans connexion Internet, acc.dez aux param.tres sur la page d'accueil Google.Documents et activez la synchronisation hors ligne la prochaine fois que vous .tes connect. . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez toujours modifier les fichiers disponibles ou en cr.er.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez vos documents, vos feuilles de calcul et vos pr.sentations, le tout sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Documents hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": ".crivez, modifiez et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\gl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	990
Entropy (8bit):	4.497202347098541
Encrypted:	false
SSDEEP:	12:1HASvggECBxNbWVqMjlMgaPLqXPhTth0CBxebWbMRCSUCjAKFCSIj0tR7tCBhP1l:1HACzWsMlajIhJhHKWbFKFC0tR8oNK5
MD5:	6BAAFEE2F718BEFBC7CD58A04CCC6C92
SHA1:	CE0BDDDA2FA1F0AD222B604C13FF116CBB6D02CF
SHA-256:	0CF098DFE5BBB46FC0132B3CF0C54B06B4D2C8390D847EE2A65D20F9B7480F4C
SHA-512:	3DA23E74CD6CF9C0E2A0C4DBA60301281D362FB0A2A908F39A55ABDCA4CC69AD55638C63CC3BEFD44DC032F9CBB9E2FDC1B4C4ABE292917DF8272BA25B82AF20
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est.s sen conexi.n. Para utilizar Documentos de Google sen conexi.n a Internet, accede .s opci.ns de configuraci.n na p.xina de inicio de Documentos de Google e activa a sincronizaci.n sen conexi.n a pr.xima vez que esteas conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "Est.s sen conexi.n. A.nda podes editar os ficheiros dispo.ibles ou crear outros novos.".. },.. "extdesc": {.. "message": "Modifica, crea e consulta os teus documentos, follas de c.lculo e presentaci.ns sen necesidade de acceder a Internet.".. },.. "extname": {.. "message": "Documentos de Google sen conexi.n".. },.. "learnmore": {.. "message": "M.is informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, edita e colabora esteas onde esteas, tanto se tes conexi.n a Internet como se non a tes.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\gu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1658
Entropy (8bit):	4.294833932445159
Encrypted:	false
SSDEEP:	24:1HA3k3FzEVeXWuvLujNzAK11RiqRC2sA0O3cEiZ7dPRFFOPtZdK0A41yG3BczKT3:Q4pE4rCjNjw6/0y+5j8ZHA4PBSKr
MD5:	BC7E1D09028B085B74CB4E04D8A90814
SHA1:	E28B2919F000B41B41209E56B7BF3A4448456CFE
SHA-256:	FE8218DF25DB54E633927C4A1640B1A41B8E6CB3360FA386B5382F833B0B237C
SHA-512:	040A8267D67DB05BBAA52F1FAC3460F58D35C5B73AA76BBF17FA78ACC6D3BFB796A870DD44638F9AC3967E35217578A20D6F0B975CEEEEDBADFC9F65BE7E72C9
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .....".. },.. "explanationofflinedisabled": {.. "message": "... ...... ... ........ ....... ... Google .......... ..... .... ...., ... .... .... ...... ........ .... ...... ... ...... Google ........ ...... .. ........ .. ... ... ...... ....... .... ....".. },.. "explanationofflineenabled": {.. "message": "... ...... .., ..... ... ... .. ...... ..... ....... ... ... .. .... ... ..... ... ...".. },.. "extdesc": {.. "message": "..... ........., ..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\hi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1672
Entropy (8bit):	4.314484457325167
Encrypted:	false
SSDEEP:	48:46G2+ymELbLNzGVx/hXdDtxSRhqv7Qm6/7Lm:4GbxzGVzXdDtx+qzU/7C
MD5:	98A7FC3E2E05AFFFC1CFE4A029F47476
SHA1:	A17E077D6E6BA1D8A90C1F3FAF25D37B0FF5A6AD
SHA-256:	D2D1AFA224CDA388FF1DC8FAC24CDA228D7CE09DE5D375947D7207FA4A6C4F8D
SHA-512:	457E295C760ABFD29FC6BBBB7FC7D4959287BCA7FB0E3E99EB834087D17EED331DEF18138838D35C48C6DDC8A0134AFFFF1A5A24033F9B5607B355D3D48FDF88
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... .....".. },.. "explanationofflinedisabled": {.. "message": ".. ...... .... ....... ....... .. .... Google ........ .. ..... .... .. ..., .... ... ....... .. ...... .... .. Google ........ .. ........ .. ...... ... .... .. ...... ....... .... .....".. },.. "explanationofflineenabled": {.. "message": ".. ...... ..., ..... .. .. .. ...... ...... ..... .. .... ... .. .. ...... ... .... ....".. },.. "extdesc": {.. "message": ".... .... ....... ...... ..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\hr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	935
Entropy (8bit):	4.6369398601609735
Encrypted:	false
SSDEEP:	24:1HA7sR5k/I+UX/hrcySxG1fIZ3tp/S/d6Gpb+D:YsE/I+UX/hVSxQ03f/Sj+D
MD5:	25CDFF9D60C5FC4740A48EF9804BF5C7
SHA1:	4FADECC52FB43AEC084DF9FF86D2D465FBEBCDC0
SHA-256:	73E6E246CEEAB9875625CD4889FBF931F93B7B9DEAA11288AE1A0F8A6E311E76
SHA-512:	EF00B08496427FEB5A6B9FB3FE2E5404525BE7C329D9DD2A417480637FD91885837D134A26980DCF9F61E463E6CB68F09A24402805807E656AF16B116A75E02C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZRADI NOVI".. },.. "explanationofflinedisabled": {.. "message": "Vi ste izvan mre.e. Da biste koristili Google dokumente bez internetske veze, idite na postavke na po.etnoj stranici Google dokumenata i uklju.ite izvanmre.nu sinkronizaciju sljede.i put kada se pove.ete s internetom.".. },.. "explanationofflineenabled": {.. "message": "Vi ste izvan mre.e, no i dalje mo.ete ure.ivati dostupne datoteke i izra.ivati nove.".. },.. "extdesc": {.. "message": "Uredite, izradite i pregledajte dokumente, prora.unske tablice i prezentacije . sve bez pristupa internetu.".. },.. "extname": {.. "message": "Google dokumenti izvanmre.no".. },.. "learnmore": {.. "message": "Saznajte vi.e".. },.. "popuphelptext": {.. "message": "Pi.ite, ure.ujte i sura.ujte gdje god se nalazili, povezani s internetom ili izvanmre.no.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\hu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1065
Entropy (8bit):	4.816501737523951
Encrypted:	false
SSDEEP:	24:1HA6J54gEYwFFMxv4gvyB9FzmxlsN147g/zJcYwJgrus4QY2jom:NJ54gEYwUmgKHFzmsG7izJcYOgKgYjm
MD5:	8930A51E3ACE3DD897C9E61A2AEA1D02
SHA1:	4108506500C68C054BA03310C49FA5B8EE246EA4
SHA-256:	958C0F664FCA20855FA84293566B2DDB7F297185619143457D6479E6AC81D240
SHA-512:	126B80CD3428C0BC459EEAAFCBE4B9FDE2541A57F19F3EC7346BAF449F36DC073A9CF015594A57203255941551B25F6FAA6D2C73C57C44725F563883FF902606
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".J L.TREHOZ.SA".. },.. "explanationofflinedisabled": {.. "message": "Jelenleg offline .llapotban van. Ha a Google Dokumentumokat internetkapcsolat n.lk.l szeretn. haszn.lni, a legk.zelebbi internethaszn.lata sor.n nyissa meg a Google Dokumentumok kezd.oldal.n tal.lhat. be.ll.t.sokat, .s tiltsa le az offline szinkroniz.l.s be.ll.t.st.".. },.. "explanationofflineenabled": {.. "message": "Offline .llapotban van, de az el.rhet. f.jlokat .gy is szerkesztheti, valamint l.trehozhat .jakat.".. },.. "extdesc": {.. "message": "Szerkesszen, hozzon l.tre .s tekintsen meg dokumentumokat, t.bl.zatokat .s prezent.ci.kat . ak.r internetkapcsolat n.lk.l is.".. },.. "extname": {.. "message": "Google Dokumentumok Offline".. },.. "learnmore": {.. "message": "Tov.bbi inform.ci.".. },.. "popuphelptext": {.. "message": ".rjon, szerkesszen .s dolgozzon egy.tt m.sokkal

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\hy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2771
Entropy (8bit):	3.7629875118570055
Encrypted:	false
SSDEEP:	48:Y0Fx+eiYZBZ7K1ZZ/5QQxTuDLoFZaIZSK7lq0iC0mlMO6M3ih1oAgC:lF2BTz6N/
MD5:	55DE859AD778E0AA9D950EF505B29DA9
SHA1:	4479BE637A50C9EE8A2F7690AD362A6A8FFC59B2
SHA-256:	0B16E3F8BD904A767284345AE86A0A9927C47AFE89E05EA2B13AD80009BDF9E4
SHA-512:	EDAB2FCC14CABB6D116E9C2907B42CFBC34F1D9035F43E454F1F4D1F3774C100CBADF6B4C81B025810ED90FA91C22F1AEFE83056E4543D92527E4FE81C7889A8
Malicious:	false
Preview:	{"createnew":{"message":"\u054d\u054f\u0535\u0542\u053e\u0535\u053c \u0546\u0548\u0550"},"explanationofflinedisabled":{"message":"Google \u0553\u0561\u057d\u057f\u0561\u0569\u0572\u0569\u0565\u0580\u0568 \u0576\u0561\u0587 \u0561\u0576\u0581\u0561\u0576\u0581 \u057c\u0565\u056a\u056b\u0574\u0578\u0582\u0574 \u0585\u0563\u057f\u0561\u0563\u0578\u0580\u056e\u0565\u056c\u0578\u0582 \u0570\u0561\u0574\u0561\u0580 \u0574\u056b\u0561\u0581\u0565\u0584 \u0570\u0561\u0574\u0561\u0581\u0561\u0576\u0581\u056b\u0576, \u0562\u0561\u0581\u0565\u0584 \u056e\u0561\u057c\u0561\u0575\u0578\u0582\u0569\u0575\u0561\u0576 \u0563\u056c\u056d\u0561\u057e\u0578\u0580 \u0567\u057b\u0568, \u0561\u0576\u0581\u0565\u0584 \u056f\u0561\u0580\u0563\u0561\u057e\u0578\u0580\u0578\u0582\u0574\u0576\u0565\u0580 \u0587 \u0574\u056b\u0561\u0581\u0580\u0565\u0584 \u0561\u0576\u0581\u0561\u0576\u0581 \u0570\u0561\u0574\u0561\u056a\u0561\u0574\u0561\u0581\u0578\u0582\u0574\u0568:"},"explanationofflineenabled":{"message":"\u

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\id\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	858
Entropy (8bit):	4.474411340525479
Encrypted:	false
SSDEEP:	12:1HASvgJX4CBxNpXemNOAJRFqjRpCBxedIdjTi92OvbCSUuoi01uRwCBhUuvz1thK:1HARXzhXemNOQWGcEoeH1eXJNvT2
MD5:	34D6EE258AF9429465AE6A078C2FB1F5
SHA1:	612CAE151984449A4346A66C0A0DF4235D64D932
SHA-256:	E3C86DDD2EFEBE88EED8484765A9868202546149753E03A61EB7C28FD62CFCA1
SHA-512:	20427807B64A0F79A6349F8A923152D9647DA95C05DE19AD3A4BF7DB817E25227F3B99307C8745DD323A6591B515221BD2F1E92B6F1A1783BDFA7142E84601B1
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BARU".. },.. "explanationofflinedisabled": {.. "message": "Anda sedang offline. Untuk menggunakan Google Dokumen tanpa koneksi internet, buka setelan di beranda Google Dokumen dan aktifkan sinkronisasi offline saat terhubung ke internet.".. },.. "explanationofflineenabled": {.. "message": "Anda sedang offline, namun Anda masih dapat mengedit file yang tersedia atau membuat file baru.".. },.. "extdesc": {.. "message": "Edit, buat, dan lihat dokumen, spreadsheet, dan presentasi . tanpa perlu akses internet.".. },.. "extname": {.. "message": "Google Dokumen Offline".. },.. "learnmore": {.. "message": "Pelajari Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit, dan gabungkan di mana saja, dengan atau tanpa koneksi internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\is\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	954
Entropy (8bit):	4.6457079159286545
Encrypted:	false
SSDEEP:	12:YGXU2rOcxGe+J97M9TP2DBX9tMfxqbTMvOfWWgdraqlifVpm0Ekf95Mw89KkJ+je:YwBrD2g2DBLMfFuWvdpY94viDO+uh
MD5:	CAEB37F451B5B5E9F5EB2E7E7F46E2D7
SHA1:	F917F9EAE268A385A10DB3E19E3CC3ACED56D02E
SHA-256:	943E61988C859BB088F548889F0449885525DD660626A89BA67B2C94CFBFBB1B
SHA-512:	A55DEC2404E1D7FA5A05475284CBECC2A6208730F09A227D75FDD4AC82CE50F3751C89DC687C14B91950F9AA85503BD6BF705113F2F1D478E728DF64D476A9EE
Malicious:	false
Preview:	{"createnew":{"message":"B\u00daA TIL N\u00ddTT"},"explanationofflinedisabled":{"message":"\u00de\u00fa ert \u00e1n nettengingar. Til a\u00f0 nota Google-skj\u00f6l \u00e1n nettengingar skaltu opna stillingarnar \u00e1 heimas\u00ed\u00f0u Google skjala og virkja samstillingu \u00e1n nettengingar n\u00e6st \u00feegar \u00fe\u00fa tengist netinu."},"explanationofflineenabled":{"message":"Engin nettenging. \u00de\u00fa getur samt sem \u00e1\u00f0ur breytt tilt\u00e6kum skr\u00e1m e\u00f0a b\u00fai\u00f0 til n\u00fdjar."},"extdesc":{"message":"Breyttu, b\u00fa\u00f0u til og sko\u00f0a\u00f0u skj\u00f6lin \u00fe\u00edn, t\u00f6flureikna og kynningar \u2014 allt \u00e1n nettengingar."},"extname":{"message":"Google-skj\u00f6l \u00e1n nettengingar"},"learnmore":{"message":"Frekari uppl\u00fdsingar"},"popuphelptext":{"message":"Skrifa\u00f0u, breyttu og starfa\u00f0u me\u00f0 \u00f6\u00f0rum hvort sem nettenging er til sta\u00f0ar e\u00f0a ekki."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\it\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	899
Entropy (8bit):	4.474743599345443
Encrypted:	false
SSDEEP:	12:1HASvggrCBxNp8WJOJJrJ3WytVCBxep3bjP5CSUCjV8AgJJm2CBhr+z1tWgjqEOW:1HANXJOTBFtKa8Agju4NB3j
MD5:	0D82B734EF045D5FE7AA680B6A12E711
SHA1:	BD04F181E4EE09F02CD53161DCABCEF902423092
SHA-256:	F41862665B13C0B4C4F562EF1743684CCE29D4BCF7FE3EA494208DF253E33885
SHA-512:	01F305A280112482884485085494E871C66D40C0B03DE710B4E5F49C6A478D541C2C1FDA2CEAF4307900485946DEE9D905851E98A2EB237642C80D464D1B3ADA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA NUOVO".. },.. "explanationofflinedisabled": {.. "message": "Sei offline. Per utilizzare Documenti Google senza una connessione Internet, apri le impostazioni nella home page di Documenti Google e attiva la sincronizzazione offline la prossima volta che ti colleghi a Internet.".. },.. "explanationofflineenabled": {.. "message": "Sei offline, ma puoi comunque modificare i file disponibili o crearne di nuovi.".. },.. "extdesc": {.. "message": "Modifica, crea e visualizza documenti, fogli di lavoro e presentazioni, senza accesso a Internet.".. },.. "extname": {.. "message": "Documenti Google offline".. },.. "learnmore": {.. "message": "Ulteriori informazioni".. },.. "popuphelptext": {.. "message": "Scrivi, modifica e collabora ovunque ti trovi, con o senza una connessione Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\iw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2230
Entropy (8bit):	3.8239097369647634
Encrypted:	false
SSDEEP:	24:YIiTVLrLD1MEzMEH82LBLjO5YaQEqLytLLBm3dnA5LcqLWAU75yxFLcx+UxWRJLI:YfTFf589rZNgNA12Qzt4/zRz2vc
MD5:	26B1533C0852EE4661EC1A27BD87D6BF
SHA1:	18234E3ABAF702DF9330552780C2F33B83A1188A
SHA-256:	BBB81C32F482BA3216C9B1189C70CEF39CA8C2181AF3538FFA07B4C6AD52F06A
SHA-512:	450BFAF0E8159A4FAE309737EA69CA8DD91CAAFD27EF662087C4E7716B2DCAD3172555898E75814D6F11487F4F254DE8625EF0CFEA8DF0133FC49E18EC7FD5D2
Malicious:	false
Preview:	{"createnew":{"message":"\u05d9\u05e6\u05d9\u05e8\u05ea \u05d7\u05d3\u05e9"},"explanationofflinedisabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8. \u05db\u05d3\u05d9 \u05dc\u05d4\u05e9\u05ea\u05de\u05e9 \u05d1-Google Docs \u05dc\u05dc\u05d0 \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d1\u05d4\u05ea\u05d7\u05d1\u05e8\u05d5\u05ea \u05d4\u05d1\u05d0\u05d4 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d9\u05e9 \u05dc\u05e2\u05d1\u05d5\u05e8 \u05dc\u05e7\u05d8\u05e2 \u05d4\u05d4\u05d2\u05d3\u05e8\u05d5\u05ea \u05d1\u05d3\u05e3 \u05d4\u05d1\u05d9\u05ea \u05e9\u05dc Google Docs \u05d5\u05dc\u05d4\u05e4\u05e2\u05d9\u05dc \u05e1\u05e0\u05db\u05e8\u05d5\u05df \u05d1\u05de\u05e6\u05d1 \u05d0\u05d5\u05e4\u05dc\u05d9\u05d9\u05df."},"explanationofflineenabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\ja\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1160
Entropy (8bit):	5.292894989863142
Encrypted:	false
SSDEEP:	24:1HAoc3IiRF1viQ1RF3CMP3rnicCCAFrr1Oo0Y5ReXCCQkb:Dc3zF7F3CMTnOCAFVLHXCFb
MD5:	15EC1963FC113D4AD6E7E59AE5DE7C0A
SHA1:	4017FC6D8B302335469091B91D063B07C9E12109
SHA-256:	34AC08F3C4F2D42962A3395508818B48CA323D22F498738CC9F09E78CB197D73
SHA-512:	427251F471FA3B759CA1555E9600C10F755BC023701D058FF661BEC605B6AB94CFB3456C1FEA68D12B4D815FFBAFABCEB6C12311DD1199FC783ED6863AF97C0F
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ............................... Google .............. [..] .......[.......] ...........".. },.. "explanationofflineenabled": {.. "message": ".............................................".. },.. "extdesc": {.. "message": ".........................................................".. },.. "extname": {.. "message": "Google ..... ......".. },.. "learnmore": {.. "message": "..".. },.. "popuphelp

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\ka\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3264
Entropy (8bit):	3.586016059431306
Encrypted:	false
SSDEEP:	48:YGFbhVhVn0nM/XGbQTvxnItVJW/476CFdqaxWNlR:HFbhV/n0MfGbw875FkaANlR
MD5:	83F81D30913DC4344573D7A58BD20D85
SHA1:	5AD0E91EA18045232A8F9DF1627007FE506A70E0
SHA-256:	30898BBF51BDD58DB397FF780F061E33431A38EF5CFC288B5177ECF76B399F26
SHA-512:	85F97F12AD4482B5D9A6166BB2AE3C4458A582CF575190C71C1D8E0FB87C58482F8C0EFEAD56E3A70EDD42BED945816DB5E07732AD27B8FFC93F4093710DD58F
Malicious:	false
Preview:	{"createnew":{"message":"\u10d0\u10ee\u10da\u10d8\u10e1 \u10e8\u10d4\u10e5\u10db\u10dc\u10d0"},"explanationofflinedisabled":{"message":"\u10d7\u10e5\u10d5\u10d4\u10dc \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10ee\u10d0\u10e0\u10d7. Google Docs-\u10d8\u10e1 \u10d8\u10dc\u10e2\u10d4\u10e0\u10dc\u10d4\u10e2\u10d7\u10d0\u10dc \u10d9\u10d0\u10d5\u10e8\u10d8\u10e0\u10d8\u10e1 \u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10d2\u10d0\u10db\u10dd\u10e1\u10d0\u10e7\u10d4\u10dc\u10d4\u10d1\u10da\u10d0\u10d3 \u10d2\u10d0\u10d3\u10d0\u10d3\u10d8\u10d7 \u10de\u10d0\u10e0\u10d0\u10db\u10d4\u10e2\u10e0\u10d4\u10d1\u10d6\u10d4 Google Docs-\u10d8\u10e1 \u10db\u10d7\u10d0\u10d5\u10d0\u10e0 \u10d2\u10d5\u10d4\u10e0\u10d3\u10d6\u10d4 \u10d3\u10d0 \u10e9\u10d0\u10e0\u10d7\u10d4\u10d7 \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10e1\u10d8\u10dc\u10e5\u10e0\u10dd\u10dc\u10d8\u10d6\u10d0\u10ea\u10d8\u10d0, \u10e0\u10dd\u10d3\u10d4\u10e1\u10d0\u10ea \u10e8\u10d4\u10db\u10d3\u10d2\u10dd\u10

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\kk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3235
Entropy (8bit):	3.6081439490236464
Encrypted:	false
SSDEEP:	96:H3E+6rOEAbeHTln2EQ77Uayg45RjhCSj+OyRdM7AE9qdV:HXcR/nQXUayYV
MD5:	2D94A58795F7B1E6E43C9656A147AD3C
SHA1:	E377DB505C6924B6BFC9D73DC7C02610062F674E
SHA-256:	548DC6C96E31A16CE355DC55C64833B08EF3FBA8BF33149031B4A685959E3AF4
SHA-512:	F51CC857E4CF2D4545C76A2DCE7D837381CE59016E250319BF8D39718BE79F9F6EE74EA5A56DE0E8759E4E586D93430D51651FC902376D8A5698628E54A0F2D8
Malicious:	false
Preview:	{"createnew":{"message":"\u0416\u0410\u04a2\u0410\u0421\u042b\u041d \u0416\u0410\u0421\u0410\u0423"},"explanationofflinedisabled":{"message":"\u0421\u0456\u0437 \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u043d\u0434\u0435\u0441\u0456\u0437. Google Docs \u049b\u043e\u043b\u0434\u0430\u043d\u0431\u0430\u0441\u044b\u043d \u0436\u0435\u043b\u0456 \u0431\u0430\u0439\u043b\u0430\u043d\u044b\u0441\u044b\u043d\u0441\u044b\u0437 \u049b\u043e\u043b\u0434\u0430\u043d\u0443 \u04af\u0448\u0456\u043d, \u043a\u0435\u043b\u0435\u0441\u0456 \u0436\u043e\u043b\u044b \u0436\u0435\u043b\u0456\u0433\u0435 \u049b\u043e\u0441\u044b\u043b\u0493\u0430\u043d\u0434\u0430, Google Docs \u043d\u0435\u0433\u0456\u0437\u0433\u0456 \u0431\u0435\u0442\u0456\u043d\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043b\u0435\u0440 \u0431\u04e9\u043b\u0456\u043c\u0456\u043d \u043a\u0456\u0440\u0456\u043f, \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\km\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3122
Entropy (8bit):	3.891443295908904
Encrypted:	false
SSDEEP:	96:/OOrssRU6Bg7VSdL+zsCfoZiWssriWqo2gx7RRCos2sEeBkS7Zesg:H5GRZlXsGdo
MD5:	B3699C20A94776A5C2F90AEF6EB0DAD9
SHA1:	1F9B968B0679A20FA097624C9ABFA2B96C8C0BEA
SHA-256:	A6118F0A0DE329E07C01F53CD6FB4FED43E54C5F53DB4CD1C7F5B2B4D9FB10E6
SHA-512:	1E8D15B8BFF1D289434A244172F9ED42B4BB6BCB6372C1F300B01ACEA5A88167E97FEDABA0A7AE3BEB5E24763D1B09046AE8E30745B80E2E2FE785C94DF362F6
Malicious:	false
Preview:	{"createnew":{"message":"\u1794\u1784\u17d2\u1780\u17be\u178f\u200b\u1790\u17d2\u1798\u17b8"},"explanationofflinedisabled":{"message":"\u17a2\u17d2\u1793\u1780\u200b\u1782\u17d2\u1798\u17b6\u1793\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f\u17d4 \u178a\u17be\u1798\u17d2\u1794\u17b8\u200b\u1794\u17d2\u179a\u17be Google \u17af\u1780\u179f\u17b6\u179a\u200b\u1794\u17b6\u1793\u200b\u200b\u178a\u17c4\u1799\u200b\u200b\u1798\u17b7\u1793\u1798\u17b6\u1793\u200b\u200b\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f \u179f\u17bc\u1798\u200b\u200b\u1791\u17c5\u200b\u1780\u17b6\u1793\u17cb\u200b\u1780\u17b6\u179a\u200b\u1780\u17c6\u178e\u178f\u17cb\u200b\u1793\u17c5\u200b\u179b\u17be\u200b\u1782\u17c1\u17a0\u1791\u17c6\u1796\u17d0\u179a Google \u17af\u1780\u179f\u17b6\u179a \u1793\u17b7\u1784\u200b\u1794\u17be\u1780\u200b\u1780\u17b6\u179a\u1792\u17d2\u179c\u17be\u200b\u179f\u1798\u1780\u17b6\u179b\u1780\u1798\u17d2\u1798\u200b\u200b\u200b\u1782\u17d2\u1798\u17b6\u1793

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\kn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1895
Entropy (8bit):	4.28990403715536
Encrypted:	false
SSDEEP:	48:SHYGuEETiuF6OX5tCYFZt5GurMRRevsY4tVZIGnZRxlKT6/U0WG:yYG8iuF6yTCYFH5GjLPtVZVZRxOZ0J
MD5:	38BE0974108FC1CC30F13D8230EE5C40
SHA1:	ACF44889DD07DB97D26D534AD5AFA1BC1A827BAD
SHA-256:	30078EF35A76E02A400F03B3698708A0145D9B57241CC4009E010696895CF3A1
SHA-512:	7BDB2BADE4680801FC3B33E82C8AA4FAC648F45C795B4BACE4669D6E907A578FF181C093464884C0E00C9762E8DB75586A253D55CD10A7777D281B4BFFAFE302
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........ .....".. },.. "explanationofflinedisabled": {.. "message": ".... ..................... ......... ............. Google ...... ....., Google ...... ............ ............... .... ..... ...... .... .... ............ ............. ........ ..... ... .....".. },.. "explanationofflineenabled": {.. "message": ".... ...................., .... .... .... ......... ........... ............ .... ........ .........."..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\ko\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	1042
Entropy (8bit):	5.3945675025513955
Encrypted:	false
SSDEEP:	24:1HAWYsF4dqNfBQH49Hk8YfIhYzTJ+6WJBtl/u4s+6:ZF4wNfvm87mX4LF6
MD5:	F3E59EEEB007144EA26306C20E04C292
SHA1:	83E7BDFA1F18F4C7534208493C3FF6B1F2F57D90
SHA-256:	C52D9B955D229373725A6E713334BBB31EA72EFA9B5CF4FBD76A566417B12CAC
SHA-512:	7808CB5FF041B002CBD78171EC5A0B4DBA3E017E21F7E8039084C2790F395B839BEE04AD6C942EED47CCB53E90F6DE818A725D1450BF81BA2990154AFD3763AF
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".. ...".. },.. "explanationofflinedisabled": {.. "message": ".... ...... ... .. .. Google Docs. ..... Google Docs .... .... .... .... .... ..... . .... .... ..... ......".. },.. "explanationofflineenabled": {.. "message": ".... ...... ... .. ... ... ..... ... ... .. . .....".. },.. "extdesc": {.. "message": ".... .... ... .., ...... . ....... .., .., ......".. },.. "extname": {.. "message": "Google Docs ....".. },.. "learnmore": {.. "message": "... ....".. },.. "popuphelptext": {.. "message": "... .. ... .... ..... .... .... .....

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\lo\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2535
Entropy (8bit):	3.8479764584971368
Encrypted:	false
SSDEEP:	48:YRcHe/4raK1EIlZt1wg62FIOg+xGaF8guI5EP9I2yC:+cs4raK1xlZtOgviOfGaF8RI5EP95b
MD5:	E20D6C27840B406555E2F5091B118FC5
SHA1:	0DCECC1A58CEB4936E255A64A2830956BFA6EC14
SHA-256:	89082FB05229826BC222F5D22C158235F025F0E6DF67FF135A18BD899E13BB8F
SHA-512:	AD53FC0B153005F47F9F4344DF6C4804049FAC94932D895FD02EEBE75222CFE77EEDD9CD3FDC4C88376D18C5972055B00190507AA896488499D64E884F84F093
Malicious:	false
Preview:	{"createnew":{"message":"\u0eaa\u0ec9\u0eb2\u0e87\u0ec3\u0edd\u0ec8"},"explanationofflinedisabled":{"message":"\u0e97\u0ec8\u0eb2\u0e99\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ea2\u0eb9\u0ec8. \u0ec0\u0e9e\u0eb7\u0ec8\u0ead\u0ec3\u0e8a\u0ec9 Google Docs \u0ec2\u0e94\u0e8d\u0e9a\u0ecd\u0ec8\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94, \u0ec3\u0eab\u0ec9\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e81\u0eb2\u0e99\u0e95\u0eb1\u0ec9\u0e87\u0e84\u0ec8\u0eb2\u0ec3\u0e99\u0edc\u0ec9\u0eb2 Google Docs \u0ec1\u0ea5\u0ec9\u0ea7\u0ec0\u0e9b\u0eb5\u0e94\u0ec3\u0e8a\u0ec9\u0e81\u0eb2\u0e99\u0e8a\u0eb4\u0ec9\u0e87\u0ec1\u0e9a\u0e9a\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ec3\u0e99\u0ec0\u0e97\u0eb7\u0ec8\u0ead\u0e95\u0ecd\u0ec8\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e97\u0ec8\u0eb2\u0e99\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94."},"explanationofflineenabled":{"message":"\u0e97\u0ec

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\lt\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1028
Entropy (8bit):	4.797571191712988
Encrypted:	false
SSDEEP:	24:1HAivZZaJ3Rje394+k7IKgpAJjUpSkiQjuRBMd:fZZahBeu7IKgqeMg
MD5:	970544AB4622701FFDF66DC556847652
SHA1:	14BEE2B77EE74C5E38EBD1DB09E8D8104CF75317
SHA-256:	5DFCBD4DFEAEC3ABE973A78277D3BD02CD77AE635D5C8CD1F816446C61808F59
SHA-512:	CC12D00C10B970189E90D47390EEB142359A8D6F3A9174C2EF3AE0118F09C88AB9B689D9773028834839A7DFAF3AAC6747BC1DCB23794A9F067281E20B8DC6EA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SUKURTI NAUJ.".. },.. "explanationofflinedisabled": {.. "message": "Esate neprisijung.. Jei norite naudoti .Google. dokumentus be interneto ry.io, pagrindiniame .Google. dokument. puslapyje eikite . nustatym. skilt. ir .junkite sinchronizavim. neprisijungus, kai kit. kart. b.site prisijung. prie interneto.".. },.. "explanationofflineenabled": {.. "message": "Esate neprisijung., bet vis tiek galite redaguoti pasiekiamus failus arba sukurti nauj..".. },.. "extdesc": {.. "message": "Redaguokite, kurkite ir per.i.r.kite savo dokumentus, skai.iuokles ir pristatymus . visk. darykite be prieigos prie interneto.".. },.. "extname": {.. "message": ".Google. dokumentai neprisijungus".. },.. "learnmore": {.. "message": "Su.inoti daugiau".. },.. "popuphelptext": {.. "message": "Ra.ykite, redaguokite ir bendradarbiaukite bet kurioje vietoje naudodami interneto ry.. arba

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\lv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	994
Entropy (8bit):	4.700308832360794
Encrypted:	false
SSDEEP:	24:1HAaJ7a/uNpoB/Y4vPnswSPkDzLKFQHpp//BpPDB:7J7a/uzQ/Y4vvswhDzDr/LDB
MD5:	A568A58817375590007D1B8ABCAEBF82
SHA1:	B0F51FE6927BB4975FC6EDA7D8A631BF0C1AB597
SHA-256:	0621DE9161748F45D53052ED8A430962139D7F19074C7FFE7223ECB06B0B87DB
SHA-512:	FCFBADEC9F73975301AB404DB6B09D31457FAC7CCAD2FA5BE348E1CAD6800F87CB5B56DE50880C55BBADB3C40423351A6B5C2D03F6A327D898E35F517B1C628C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZVEIDOT JAUNU".. },.. "explanationofflinedisabled": {.. "message": "J.s esat bezsaist.. Lai lietotu pakalpojumu Google dokumenti bez interneta savienojuma, n.kamaj. reiz., kad ir izveidots savienojums ar internetu, atveriet Google dokumentu s.kumlapas iestat.jumu izv.lni un iesl.dziet sinhroniz.ciju bezsaist..".. },.. "explanationofflineenabled": {.. "message": "J.s esat bezsaist., ta.u varat redi..t pieejamos failus un izveidot jaunus.".. },.. "extdesc": {.. "message": "Redi..jiet, veidojiet un skatiet savus dokumentus, izkl.jlapas un prezent.cijas, neizmantojot savienojumu ar internetu.".. },.. "extname": {.. "message": "Google dokumenti bezsaist.".. },.. "learnmore": {.. "message": "Uzziniet vair.k".. },.. "popuphelptext": {.. "message": "Rakstiet, redi..jiet un sadarbojieties ar interneta savienojumu vai bez t. neatkar.gi no t., kur atrodaties.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\ml\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2091
Entropy (8bit):	4.358252286391144
Encrypted:	false
SSDEEP:	24:1HAnHdGc4LtGxVY6IuVzJkeNL5kP13a67wNcYP8j5PIaSTIjPU4ELFPCWJjMupV/:idGcyYPVtkAUl7wqziBsg9DbpN6XoN/
MD5:	4717EFE4651F94EFF6ACB6653E868D1A
SHA1:	B8A7703152767FBE1819808876D09D9CC1C44450
SHA-256:	22CA9415E294D9C3EC3384B9D08CDAF5164AF73B4E4C251559E09E529C843EA6
SHA-512:	487EAB4938F6BC47B1D77DD47A5E2A389B94E01D29849E38E96C95CABC7BD98679451F0E22D3FEA25C045558CD69FDDB6C4FEF7C581141F1C53C4AA17578D7F7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ............".. },.. "explanationofflinedisabled": {.. "message": "...... ........... ........... ............. ..... Google ....... ..........., Google ....... .......... ............. .... ...... ...... ... ............... .................... '.......... ................' .........".. },.. "explanationofflineenabled": {.. "message": "................., .......... ......... ....... ...... ..............

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\mn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2778
Entropy (8bit):	3.595196082412897
Encrypted:	false
SSDEEP:	48:Y943BFU1LQ4HwQLQ4LQhlmVQL3QUm6H6ZgFIcwn6Rs2ShpQ3IwjGLQSJ/PYoEQj8:I43BCymz8XNcfuQDXYN2sum
MD5:	83E7A14B7FC60D4C66BF313C8A2BEF0B
SHA1:	1CCF1D79CDED5D65439266DB58480089CC110B18
SHA-256:	613D8751F6CC9D3FA319F4B7EA8B2BD3BED37FD077482CA825929DD7C12A69A8
SHA-512:	3742E24FFC4B5283E6EE496813C1BDC6835630D006E8647D427C3DE8B8E7BF814201ADF9A27BFAB3ABD130B6FEC64EBB102AC0EB8DEDFE7B63D82D3E1233305D
Malicious:	false
Preview:	{"createnew":{"message":"\u0428\u0418\u041d\u0418\u0419\u0413 \u04ae\u04ae\u0421\u0413\u042d\u0425"},"explanationofflinedisabled":{"message":"\u0422\u0430 \u043e\u0444\u043b\u0430\u0439\u043d \u0431\u0430\u0439\u043d\u0430. Google \u0414\u043e\u043a\u044b\u0433 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u0433\u04af\u0439\u0433\u044d\u044d\u0440 \u0430\u0448\u0438\u0433\u043b\u0430\u0445\u044b\u043d \u0442\u0443\u043b\u0434 \u0434\u0430\u0440\u0430\u0430\u0433\u0438\u0439\u043d \u0443\u0434\u0430\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u044d\u0434 \u0445\u043e\u043b\u0431\u043e\u0433\u0434\u043e\u0445\u0434\u043e\u043e Google \u0414\u043e\u043a\u044b\u043d \u043d\u04af\u04af\u0440 \u0445\u0443\u0443\u0434\u0430\u0441\u043d\u0430\u0430\u0441 \u0442\u043e\u0445\u0438\u0440\u0433\u043e\u043e \u0434\u043e\u0442\u043e\u0440\u0445 \u043e\u0444\u043b\u0430\u0439\u043d \u0441\u0438\u043d\u043a\u0438\u0439\u0433 \u0438\u0434\u044d\u0432\u0445\u0436\u04af\u04af\u043b\u043d\u0

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\mr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1719
Entropy (8bit):	4.287702203591075
Encrypted:	false
SSDEEP:	48:65/5EKaDMw6pEf4I5+jSksOTJqQyrFO8C:65/5EKaAw6pEf4I5+vsOVqQyFO8C
MD5:	3B98C4ED8874A160C3789FEAD5553CFA
SHA1:	5550D0EC548335293D962AAA96B6443DD8ABB9F6
SHA-256:	ADEB082A9C754DFD5A9D47340A3DDCC19BF9C7EFA6E629A2F1796305F1C9A66F
SHA-512:	5139B6C6DF9459C7B5CDC08A98348891499408CD75B46519BA3AC29E99AAAFCC5911A1DEE6C3A57E3413DBD0FAE72D7CBC676027248DCE6364377982B5CE4151
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ...".. },.. "explanationofflinedisabled": {.. "message": "...... ...... ..... ......... ....... ....... ..... Google ....... ............, Google ....... .............. .......... .. ... ..... .... ...... ......... ...... ...... ...... .... .... ....".. },.. "explanationofflineenabled": {.. "message": "...... ...... ...., ..... ...... ...... ...... .... ....... ... ..... .... .... ... .....".. },.. "extdesc": {.. "message": "..... ..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\ms\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	936
Entropy (8bit):	4.457879437756106
Encrypted:	false
SSDEEP:	24:1HARXIqhmemNKsE27rhdfNLChtyo2JJ/YgTgin:iIqFC7lrDfNLCIBRzn
MD5:	7D273824B1E22426C033FF5D8D7162B7
SHA1:	EADBE9DBE5519BD60458B3551BDFC36A10049DD1
SHA-256:	2824CF97513DC3ECC261F378BFD595AE95A5997E9D1C63F5731A58B1F8CD54F9
SHA-512:	E5B611BBFAB24C9924D1D5E1774925433C65C322769E1F3B116254B1E9C69B6DF1BE7828141EEBBF7524DD179875D40C1D8F29C4FB86D663B8A365C6C60421A7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BAHARU".. },.. "explanationofflinedisabled": {.. "message": "Anda berada di luar talian. Untuk menggunakan Google Docs tanpa sambungan Internet, pergi ke tetapan di halaman utama Google Docs dan hidupkan penyegerakan luar talian apabila anda disambungkan ke Internet selepas ini.".. },.. "explanationofflineenabled": {.. "message": "Anda berada di luar talian, tetapi anda masih boleh mengedit fail yang tersedia atau buat fail baharu.".. },.. "extdesc": {.. "message": "Edit, buat dan lihat dokumen, hamparan dan pembentangan anda . kesemuanya tanpa akses Internet.".. },.. "extname": {.. "message": "Google Docs Luar Talian".. },.. "learnmore": {.. "message": "Ketahui Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit dan bekerjasama di mana-mana sahaja anda berada, dengan atau tanpa sambungan Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\my\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3830
Entropy (8bit):	3.5483353063347587
Encrypted:	false
SSDEEP:	48:Ya+Ivxy6ur1+j3P7Xgr5ELkpeCgygyOxONHO3pj6H57ODyOXOVp6:8Uspsj3P3ty2a66xl09
MD5:	342335A22F1886B8BC92008597326B24
SHA1:	2CB04F892E430DCD7705C02BF0A8619354515513
SHA-256:	243BEFBD6B67A21433DCC97DC1A728896D3A070DC20055EB04D644E1BB955FE7
SHA-512:	CD344D060E30242E5A4705547E807CE3CE2231EE983BB9A8AD22B3E7598A7EC87399094B04A80245AD51D039370F09D74FE54C0B0738583884A73F0C7E888AD8
Malicious:	false
Preview:	{"createnew":{"message":"\u1021\u101e\u1005\u103a \u1015\u103c\u102f\u101c\u102f\u1015\u103a\u101b\u1014\u103a"},"explanationofflinedisabled":{"message":"\u101e\u1004\u103a \u1021\u1031\u102c\u1037\u1016\u103a\u101c\u102d\u102f\u1004\u103a\u1038\u1016\u103c\u1005\u103a\u1014\u1031\u1015\u102b\u101e\u100a\u103a\u104b \u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u1019\u103e\u102f \u1019\u101b\u103e\u102d\u1018\u1032 Google Docs \u1000\u102d\u102f \u1021\u101e\u102f\u1036\u1038\u1015\u103c\u102f\u101b\u1014\u103a \u1014\u1031\u102c\u1000\u103a\u1010\u1005\u103a\u1000\u103c\u102d\u1019\u103a \u101e\u1004\u103a\u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u101e\u100a\u1037\u103a\u1021\u1001\u102b Google Docs \u1015\u1004\u103a\u1019\u1005\u102c\u1019\u103b\u1000\u103a\u1014\u103e\u102c\u101b\u103e\u102d \u1006\u1000\u103a\u1010\u1004\u103a\u1019\u103b\u102c\u1038\u101e\u102d\u102f\u1037\u1

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\ne\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1898
Entropy (8bit):	4.187050294267571
Encrypted:	false
SSDEEP:	24:1HAmQ6ZSWfAx6fLMr48tE/cAbJtUZJScSIQoAfboFMiQ9pdvz48YgqG:TQ6W6MbkcAltUJxQdfbqQ9pp0gqG
MD5:	B1083DA5EC718D1F2F093BD3D1FB4F37
SHA1:	74B6F050D918448396642765DEF1AD5390AB5282
SHA-256:	E6ED0A023EF31705CCCBAF1E07F2B4B2279059296B5CA973D2070417BA16F790
SHA-512:	7102B90ABBE2C811E8EE2F1886A73B1298D4F3D5D05F0FFDB57CF78B9A49A25023A290B255BAA4895BB150B388BAFD9F8432650B8C70A1A9A75083FFFCD74F1A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... ....... .........".. },.. "explanationofflinedisabled": {.. "message": "..... ...... .......... .... ........ .... .... Google ........ ...... .... ..... ..... ... .......... ....... .... Google ........ .......... ..... .......... .. ...... ..... .... ..... ......... .. ..........".. },.. "explanationofflineenabled": {.. "message": "..... ...... ........., .. ..... ... ... ...... ....... ....... .. .... ....... ....

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\nl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.513485418448461
Encrypted:	false
SSDEEP:	12:1HASvgFARCBxNBv52/fXjOXl6W6ICBxeBvMzU1CSUJAO6SFAIVIbCBhZHdb1tvz+:1HABJx4X6QDwEzlm2uGvYzKU
MD5:	32DF72F14BE59A9BC9777113A8B21DE6
SHA1:	2A8D9B9A998453144307DD0B700A76E783062AD0
SHA-256:	F3FE1FFCB182183B76E1B46C4463168C746A38E461FD25CA91FF2A40846F1D61
SHA-512:	E0966F5CCA5A8A6D91C58D716E662E892D1C3441DAA5D632E5E843839BB989F620D8AC33ED3EDBAFE18D7306B40CD0C4639E5A4E04DA2C598331DACEC2112AAD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NIEUW MAKEN".. },.. "explanationofflinedisabled": {.. "message": "Je bent offline. Wil je Google Documenten zonder internetverbinding gebruiken, ga dan de volgende keer dat je verbinding met internet hebt naar 'Instellingen' op de homepage van Google Documenten en zet 'Offline synchronisatie' aan.".. },.. "explanationofflineenabled": {.. "message": "Je bent offline, maar je kunt nog wel beschikbare bestanden bewerken of nieuwe bestanden maken.".. },.. "extdesc": {.. "message": "Bewerk, maak en bekijk je documenten, spreadsheets en presentaties. Allemaal zonder internettoegang.".. },.. "extname": {.. "message": "Offline Documenten".. },.. "learnmore": {.. "message": "Meer informatie".. },.. "popuphelptext": {.. "message": "Overal schrijven, bewerken en samenwerken, met of zonder internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\no\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	878
Entropy (8bit):	4.4541485835627475
Encrypted:	false
SSDEEP:	24:1HAqwwrJ6wky68uk+NILxRGJwBvDyrj9V:nwwQwky6W+NwswVyT
MD5:	A1744B0F53CCF889955B95108367F9C8
SHA1:	6A5A6771DFF13DCB4FD425ED839BA100B7123DE0
SHA-256:	21CEFF02B45A4BFD60D144879DFA9F427949A027DD49A3EB0E9E345BD0B7C9A8
SHA-512:	F55E43F14514EECB89F6727A0D3C234149609020A516B193542B5964D2536D192F40CC12D377E70C683C269A1BDCDE1C6A0E634AA84A164775CFFE776536A961
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPPRETT NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du er uten nett. For . bruke Google Dokumenter uten internettilkobling, g. til innstillingene p. Google Dokumenter-nettsiden og sl. p. synkronisering uten nett neste gang du er koblet til Internett.".. },.. "explanationofflineenabled": {.. "message": "Du er uten nett, men du kan likevel endre tilgjengelige filer eller opprette nye.".. },.. "extdesc": {.. "message": "Rediger, opprett og se dokumentene, regnearkene og presentasjonene dine . uten nettilgang.".. },.. "extname": {.. "message": "Google Dokumenter uten nett".. },.. "learnmore": {.. "message": "Finn ut mer".. },.. "popuphelptext": {.. "message": "Skriv, rediger eller samarbeid uansett hvor du er, med eller uten internettilkobling.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\pa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2766
Entropy (8bit):	3.839730779948262
Encrypted:	false
SSDEEP:	48:YEH6/o0iZbNCbDMUcipdkNtQjsGKIhO9aBjj/nxt9o5nDAj3:p6wbZbEbvJ8jQkIhO9aBjb/90Ab
MD5:	97F769F51B83D35C260D1F8CFD7990AF
SHA1:	0D59A76564B0AEE31D0A074305905472F740CECA
SHA-256:	BBD37D41B7DE6F93948FA2437A7699D4C30A3C39E736179702F212CB36A3133C
SHA-512:	D91F5E2D22FC2D7F73C1F1C4AF79DB98FCFD1C7804069AE9B2348CBC729A6D2DFF7FB6F44D152B0BDABA6E0D05DFF54987E8472C081C4D39315CEC2CBC593816
Malicious:	false
Preview:	{"createnew":{"message":"\u0a28\u0a35\u0a3e\u0a02 \u0a2c\u0a23\u0a3e\u0a13"},"explanationofflinedisabled":{"message":"\u0a24\u0a41\u0a38\u0a40\u0a02 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a39\u0a4b\u0964 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a15\u0a28\u0a48\u0a15\u0a36\u0a28 \u0a26\u0a47 \u0a2c\u0a3f\u0a28\u0a3e\u0a02 Google Docs \u0a28\u0a42\u0a70 \u0a35\u0a30\u0a24\u0a23 \u0a32\u0a08, \u0a05\u0a17\u0a32\u0a40 \u0a35\u0a3e\u0a30 \u0a1c\u0a26\u0a4b\u0a02 \u0a24\u0a41\u0a38\u0a40\u0a02 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a26\u0a47 \u0a28\u0a3e\u0a32 \u0a15\u0a28\u0a48\u0a15\u0a1f \u0a39\u0a4b\u0a35\u0a4b \u0a24\u0a3e\u0a02 Google Docs \u0a2e\u0a41\u0a71\u0a16 \u0a2a\u0a70\u0a28\u0a47 '\u0a24\u0a47 \u0a38\u0a48\u0a1f\u0a3f\u0a70\u0a17\u0a3e\u0a02 \u0a35\u0a3f\u0a71\u0a1a \u0a1c\u0a3e\u0a13 \u0a05\u0a24\u0a47 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a38\u0a3f\u0a70\u0a15 \u0a28\u0a42\u0a70 \u0a1a\u0a3e\u0a32\u0a42 \u0a15\u0a30\u0a4b\u0964"},"expla

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\pl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	978
Entropy (8bit):	4.879137540019932
Encrypted:	false
SSDEEP:	24:1HApiJiRelvm3wi8QAYcbm24sK+tFJaSDD:FJMx3whxYcbNp
MD5:	B8D55E4E3B9619784AECA61BA15C9C0F
SHA1:	B4A9C9885FBEB78635957296FDDD12579FEFA033
SHA-256:	E00FF20437599A5C184CA0C79546CB6500171A95E5F24B9B5535E89A89D3EC3D
SHA-512:	266589116EEE223056391C65808255EDAE10EB6DC5C26655D96F8178A41E283B06360AB8E08AC3857D172023C4F616EF073D0BEA770A3B3DD3EE74F5FFB2296B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "UTW.RZ NOWY".. },.. "explanationofflinedisabled": {.. "message": "Jeste. offline. Aby korzysta. z Dokument.w Google bez po..czenia internetowego, otw.rz ustawienia na stronie g..wnej Dokument.w Google i w..cz synchronizacj. offline nast.pnym razem, gdy b.dziesz mie. dost.p do internetu.".. },.. "explanationofflineenabled": {.. "message": "Jeste. offline, ale nadal mo.esz edytowa. dost.pne pliki i tworzy. nowe.".. },.. "extdesc": {.. "message": "Edytuj, tw.rz i wy.wietlaj swoje dokumenty, arkusze kalkulacyjne oraz prezentacje bez konieczno.ci ..czenia si. z internetem.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Wi.cej informacji".. },.. "popuphelptext": {.. "message": "Pisz, edytuj i wsp..pracuj, gdziekolwiek jeste. . niezale.nie od tego, czy masz po..czenie z internetem.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\pt_BR\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	907
Entropy (8bit):	4.599411354657937
Encrypted:	false
SSDEEP:	12:1HASvgU30CBxNd6GwXOK1styCJ02OK9+4KbCBxed6X4LBAt4rXgUCSUuYDHIIQka:1HAcXlyCJ5+Tsz4LY4rXSw/Q+ftkC
MD5:	608551F7026E6BA8C0CF85D9AC11F8E3
SHA1:	87B017B2D4DA17E322AF6384F82B57B807628617
SHA-256:	A73EEA087164620FA2260D3910D3FBE302ED85F454EDB1493A4F287D42FC882F
SHA-512:	82F52F8591DB3C0469CC16D7CBFDBF9116F6D5B5D2AD02A3D8FA39CE1378C64C0EA80AB8509519027F71A89EB8BBF38A8702D9AD26C8E6E0F499BF7DA18BF747
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Voc. est. off-line. Para usar o Documentos Google sem conex.o com a Internet, na pr.xima vez que se conectar, acesse as configura..es na p.gina inicial do Documentos Google e ative a sincroniza..o off-line.".. },.. "explanationofflineenabled": {.. "message": "Voc. est. off-line, mas mesmo assim pode editar os arquivos dispon.veis ou criar novos arquivos.".. },.. "extdesc": {.. "message": "Edite, crie e veja seus documentos, planilhas e apresenta..es sem precisar de acesso . Internet.".. },.. "extname": {.. "message": "Documentos Google off-line".. },.. "learnmore": {.. "message": "Saiba mais".. },.. "popuphelptext": {.. "message": "Escreva, edite e colabore onde voc. estiver, com ou sem conex.o com a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\pt_PT\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.604761241355716
Encrypted:	false
SSDEEP:	24:1HAcXzw8M+N0STDIjxX+qxCjKw5BKriEQFMJXkETs:zXzw0pKXbxqKw5BKri3aNY
MD5:	0963F2F3641A62A78B02825F6FA3941C
SHA1:	7E6972BEAB3D18E49857079A24FB9336BC4D2D48
SHA-256:	E93B8E7FB86D2F7DFAE57416BB1FB6EE0EEA25629B972A5922940F0023C85F90
SHA-512:	22DD42D967124DA5A2209DD05FB6AD3F5D0D2687EA956A22BA1E31C56EC09DEB53F0711CD5B24D672405358502E9D1C502659BB36CED66CAF83923B021CA0286
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est. offline. Para utilizar o Google Docs sem uma liga..o . Internet, aceda .s defini..es na p.gina inicial do Google Docs e ative a sincroniza..o offline da pr.xima vez que estiver ligado . Internet.".. },.. "explanationofflineenabled": {.. "message": "Est. offline, mas continua a poder editar os ficheiros dispon.veis ou criar novos ficheiros.".. },.. "extdesc": {.. "message": "Edite, crie e veja os documentos, as folhas de c.lculo e as apresenta..es, tudo sem precisar de aceder . Internet.".. },.. "extname": {.. "message": "Google Docs offline".. },.. "learnmore": {.. "message": "Saber mais".. },.. "popuphelptext": {.. "message": "Escreva edite e colabore onde quer que esteja, com ou sem uma liga..o . Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\ro\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	937
Entropy (8bit):	4.686555713975264
Encrypted:	false
SSDEEP:	24:1HA8dC6e6w+uFPHf2TFMMlecFpweWV4RE:pC6KvHf4plVweCx
MD5:	BED8332AB788098D276B448EC2B33351
SHA1:	6084124A2B32F386967DA980CBE79DD86742859E
SHA-256:	085787999D78FADFF9600C9DC5E3FF4FB4EB9BE06D6BB19DF2EEF8C284BE7B20
SHA-512:	22596584D10707CC1C8179ED3ABE46EF2C314CF9C3D0685921475944B8855AAB660590F8FA1CFDCE7976B4BB3BD9ABBBF053F61F1249A325FD0094E1C95692ED
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREEAZ. UN DOCUMENT".. },.. "explanationofflinedisabled": {.. "message": "E.ti offline. Pentru a utiliza Documente Google f.r. conexiune la internet, intr. .n set.rile din pagina principal. Documente Google .i activeaz. sincronizarea offline data viitoare c.nd e.ti conectat(.) la internet.".. },.. "explanationofflineenabled": {.. "message": "E.ti offline, dar po.i .nc. s. editezi fi.ierele disponibile sau s. creezi altele.".. },.. "extdesc": {.. "message": "Editeaz., creeaz. .i acceseaz. documente, foi de calcul .i prezent.ri - totul f.r. acces la internet.".. },.. "extname": {.. "message": "Documente Google Offline".. },.. "learnmore": {.. "message": "Afl. mai multe".. },.. "popuphelptext": {.. "message": "Scrie, editeaz. .i colaboreaz. oriunde ai fi, cu sau f.r. conexiune la internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\ru\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1337
Entropy (8bit):	4.69531415794894
Encrypted:	false
SSDEEP:	24:1HABEapHTEmxUomjsfDVs8THjqBK8/hHUg41v+Lph5eFTHQ:I/VdxUomjsre8Kh4Riph5eFU
MD5:	51D34FE303D0C90EE409A2397FCA437D
SHA1:	B4B9A7B19C62D0AA95D1F10640A5FBA628CCCA12
SHA-256:	BE733625ACD03158103D62BC0EEF272CA3F265AC30C87A6A03467481A177DAE3
SHA-512:	E8670DED44DC6EE30E5F41C8B2040CF8A463CD9A60FC31FA70EB1D4C9AC1A3558369792B5B86FA761A21F5266D5A35E5C2C39297F367DAA84159585C19EC492A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......".. },.. "explanationofflinedisabled": {.. "message": "..... ............ Google ......... ... ........., ............ . .... . ......... ............. . ......-...... . .......... .. ......... .........".. },.. "explanationofflineenabled": {.. "message": "... ........... . .......... .. ...... ......... ..... ..... . ............. .., . ....... ........ ......-.......".. },.. "extdesc": {.. "message": ".........., .............. . ............ ........., ....... . ........... ... ....... . ..........".. },.. "extname": {.. "message": "Google.......... ......".. },.. "learnmore": {.

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\si\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2846
Entropy (8bit):	3.7416822879702547
Encrypted:	false
SSDEEP:	48:YWi+htQTKEQb3aXQYJLSWy7sTQThQTnQtQTrEmQ6kiLsegQSJFwsQGaiPn779I+S:zhiTK5b3tUGVjTGTnQiTryOLpyaxYf/S
MD5:	B8A4FD612534A171A9A03C1984BB4BDD
SHA1:	F513F7300827FE352E8ECB5BD4BB1729F3A0E22A
SHA-256:	54241EBE651A8344235CC47AFD274C080ABAEBC8C3A25AFB95D8373B6A5670A2
SHA-512:	C03E35BFDE546AEB3245024EF721E7E606327581EFE9EAF8C5B11989D9033BDB58437041A5CB6D567BAA05466B6AAF054C47F976FD940EEEDF69FDF80D79095B
Malicious:	false
Preview:	{"createnew":{"message":"\u0db1\u0dc0 \u0dbd\u0dda\u0d9b\u0db1\u0dba\u0d9a\u0dca \u0dc3\u0dcf\u0daf\u0db1\u0dca\u0db1"},"explanationofflinedisabled":{"message":"\u0d94\u0db6 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2\u0dba. \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd \u0dc3\u0db8\u0dca\u0db6\u0db1\u0dca\u0db0\u0dad\u0dcf\u0dc0\u0d9a\u0dca \u0db1\u0ddc\u0db8\u0dd0\u0dad\u0dd2\u0dc0 Google Docs \u0db7\u0dcf\u0dc0\u0dd2\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8\u0da7, Google Docs \u0db8\u0dd4\u0dbd\u0dca \u0db4\u0dd2\u0da7\u0dd4\u0dc0 \u0db8\u0dad \u0dc3\u0dd0\u0d9a\u0dc3\u0dd3\u0db8\u0dca \u0dc0\u0dd9\u0dad \u0d9c\u0ddc\u0dc3\u0dca \u0d94\u0db6 \u0d8a\u0dc5\u0d9f \u0d85\u0dc0\u0dc3\u0dca\u0dae\u0dcf\u0dc0\u0dda \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd\u0dba\u0da7 \u0dc3\u0db6\u0dd0\u0db3\u0dd2 \u0dc0\u0dd2\u0da7 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2 \u0dc3\u0db8\u0db8\u0dd4\u0dc4\u0dd4\u0dbb\u0dca\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8 \u0d9a\u0dca\u200d\u0dbb\u0dd2\u0dba\u0dc

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\sk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	934
Entropy (8bit):	4.882122893545996
Encrypted:	false
SSDEEP:	24:1HAF8pMv1RS4LXL22IUjdh8uJwpPqLDEtxKLhSS:hyv1RS4LXx38u36QsS
MD5:	8E55817BF7A87052F11FE554A61C52D5
SHA1:	9ABDC0725FE27967F6F6BE0DF5D6C46E2957F455
SHA-256:	903060EC9E76040B46DEB47BBB041D0B28A6816CB9B892D7342FC7DC6782F87C
SHA-512:	EFF9EC7E72B272DDE5F29123653BC056A4BC2C3C662AE3C448F8CB6A4D1865A0679B7E74C1B3189F3E262109ED6BC8F8D2BDE14AEFC8E87E0F785AE4837D01C7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVORI. NOV.".. },.. "explanationofflinedisabled": {.. "message": "Ste offline. Ak chcete pou.i. Dokumenty Google bez pripojenia na internet, po najbli..om pripojen. na internet prejdite do nastaven. na domovskej str.nke Dokumentov Google a.zapnite offline synchroniz.ciu.".. },.. "explanationofflineenabled": {.. "message": "Ste offline, no st.le m..ete upravova. dostupn. s.bory a.vytv.ra. nov..".. },.. "extdesc": {.. "message": ".prava, tvorba a.zobrazenie dokumentov, tabuliek a.prezent.ci.. To v.etko bez pr.stupu na internet.".. },.. "extname": {.. "message": "Dokumenty Google v re.ime offline".. },.. "learnmore": {.. "message": ".al.ie inform.cie".. },.. "popuphelptext": {.. "message": "P..te, upravujte a.spolupracuje, kdeko.vek ste, a.to s.pripojen.m na internet aj bez neho.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\sl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	963
Entropy (8bit):	4.6041913416245
Encrypted:	false
SSDEEP:	12:1HASvgfECBxNFCEuKXowwJrpvPwNgEcPJJJEfWOCBxeFCJuGuU4KYXCSUXKDxX4A:1HAXMKYw8VYNLcaeDmKYLdX2zJBG5
MD5:	BFAEFEFF32813DF91C56B71B79EC2AF4
SHA1:	F8EDA2B632610972B581724D6B2F9782AC37377B
SHA-256:	AAB9CF9098294A46DC0F2FA468AFFF7CA7C323A1A0EFA70C9DB1E3A4DA05D1D4
SHA-512:	971F2BBF5E9C84DE3D31E5F2A4D1A00D891A2504F8AF6D3F75FC19056BFD059A270C4C9836AF35258ABA586A1888133FB22B484F260C1CBC2D1D17BC3B4451AA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "USTVARI NOVO".. },.. "explanationofflinedisabled": {.. "message": "Nimate vzpostavljene povezave. .e .elite uporabljati Google Dokumente brez internetne povezave, odprite nastavitve na doma.i strani Google Dokumentov in vklopite sinhronizacijo brez povezave, ko naslednji. vzpostavite internetno povezavo.".. },.. "explanationofflineenabled": {.. "message": "Nimate vzpostavljene povezave, vendar lahko .e vedno urejate razpolo.ljive datoteke ali ustvarjate nove.".. },.. "extdesc": {.. "message": "Urejajte, ustvarjajte in si ogledujte dokumente, preglednice in predstavitve . vse to brez internetnega dostopa.".. },.. "extname": {.. "message": "Google Dokumenti brez povezave".. },.. "learnmore": {.. "message": "Ve. o tem".. },.. "popuphelptext": {.. "message": "Pi.ite, urejajte in sodelujte, kjer koli ste, z internetno povezavo ali brez nje.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\sr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1320
Entropy (8bit):	4.569671329405572
Encrypted:	false
SSDEEP:	24:1HArg/fjQg2JwrfZtUWTrw1P4epMnRGi5TBmuPDRxZQ/XtiCw/Rwh/Q9EVz:ogUg2JwDZe6rwKI8VTP9xK1CwhI94
MD5:	7F5F8933D2D078618496C67526A2B066
SHA1:	B7050E3EFA4D39548577CF47CB119FA0E246B7A4
SHA-256:	4E8B69E864F57CDDD4DC4E4FAF2C28D496874D06016BC22E8D39E0CB69552769
SHA-512:	0FBAB56629368EEF87DEEF2977CA51831BEB7DEAE98E02504E564218425C751853C4FDEAA40F51ECFE75C633128B56AE105A6EB308FD5B4A2E983013197F5DBA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ....".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. ..... ......... Google ......... ... ........ ...., ..... . .......... .. ........ ........ Google .......... . ........ ...... .............. ... ....... ... ...... ........ .. ...........".. },.. "explanationofflineenabled": {.. "message": "...... ..., ... . .... ...... .. ....... ...... . ........ ........ ... .. ....... .....".. },.. "extdesc": {.. "message": "....... . ........... ........., ...... . ............ . ....... ...... . ... . ... .. ... ........ .........".. },.. "extname": {.. "message

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\sv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	884
Entropy (8bit):	4.627108704340797
Encrypted:	false
SSDEEP:	24:1HA0NOYT/6McbnX/yzklyOIPRQrJlvDymvBd:vNOcyHnX/yg0P4Bymn
MD5:	90D8FB448CE9C0B9BA3D07FB8DE6D7EE
SHA1:	D8688CAC0245FD7B886D0DEB51394F5DF8AE7E84
SHA-256:	64B1E422B346AB77C5D1C77142685B3FF7661D498767D104B0C24CB36D0EB859
SHA-512:	6D58F49EE3EF0D3186EA036B868B2203FE936CE30DC8E246C32E90B58D9B18C624825419346B62AF8F7D61767DBE9721957280AA3C524D3A5DFB1A3A76C00742
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKAPA NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du .r offline. Om du vill anv.nda Google Dokument utan internetuppkoppling, .ppna inst.llningarna p. Google Dokuments startsida och aktivera offlinesynkronisering n.sta g.ng du .r ansluten till internet.".. },.. "explanationofflineenabled": {.. "message": "Du .r offline, men det g.r fortfarande att redigera tillg.ngliga filer eller skapa nya.".. },.. "extdesc": {.. "message": "Redigera, skapa och visa dina dokument, kalkylark och presentationer . helt utan internet.tkomst.".. },.. "extname": {.. "message": "Google Dokument Offline".. },.. "learnmore": {.. "message": "L.s mer".. },.. "popuphelptext": {.. "message": "Skriv, redigera och samarbeta .verallt, med eller utan internetanslutning.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\sw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	980
Entropy (8bit):	4.50673686618174
Encrypted:	false
SSDEEP:	12:1HASvgNHCBxNx1HMHyMhybK7QGU78oCuafIvfCBxex6EYPE5E1pOCSUJqONtCBh8:1HAGDQ3y0Q/Kjp/zhDoKMkeAT6dBaX
MD5:	D0579209686889E079D87C23817EDDD5
SHA1:	C4F99E66A5891973315D7F2BC9C1DAA524CB30DC
SHA-256:	0D20680B74AF10EF8C754FCDE259124A438DCE3848305B0CAF994D98E787D263
SHA-512:	D59911F91ED6C8FF78FD158389B4D326DAF4C031B940C399569FE210F6985E23897E7F404B7014FC7B0ACEC086C01CC5F76354F7E5D3A1E0DEDEF788C23C2978
Malicious:	false
Preview:	{.. "createnew": {.. "message": "FUNGUA MPYA".. },.. "explanationofflinedisabled": {.. "message": "Haupo mtandaoni. Ili uweze kutumia Hati za Google bila muunganisho wa intaneti, wakati utakuwa umeunganishwa kwenye intaneti, nenda kwenye sehemu ya mipangilio kwenye ukurasa wa kwanza wa Hati za Google kisha uwashe kipengele cha usawazishaji nje ya mtandao.".. },.. "explanationofflineenabled": {.. "message": "Haupo mtandaoni, lakini bado unaweza kubadilisha faili zilizopo au uunde mpya.".. },.. "extdesc": {.. "message": "Badilisha, unda na uangalie hati, malahajedwali na mawasilisho yako . yote bila kutumia muunganisho wa intaneti.".. },.. "extname": {.. "message": "Hati za Google Nje ya Mtandao".. },.. "learnmore": {.. "message": "Pata Maelezo Zaidi".. },.. "popuphelptext": {.. "message": "Andika hati, zibadilishe na ushirikiane na wengine popote ulipo, iwe una muunganisho wa intaneti au huna.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\ta\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1941
Entropy (8bit):	4.132139619026436
Encrypted:	false
SSDEEP:	24:1HAoTZwEj3YfVLiANpx96zjlXTwB4uNJDZwq3CP1B2xIZiIH1CYFIZ03SoFyxrph:JCEjWiAD0ZXkyYFyPND1L/I
MD5:	DCC0D1725AEAEAAF1690EF8053529601
SHA1:	BB9D31859469760AC93E84B70B57909DCC02EA65
SHA-256:	6282BF9DF12AD453858B0B531C8999D5FD6251EB855234546A1B30858462231A
SHA-512:	6243982D764026D342B3C47C706D822BB2B0CAFFA51F0591D8C878F981EEF2A7FC68B76D012630B1C1EB394AF90EB782E2B49329EB6538DD5608A7F0791FDCF5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....... .........".. },.. "explanationofflinedisabled": {.. "message": ".......... ........... .... ....... ..... Google ......... .........., ...... .... ........... ......... ...., Google ... ................... ................ ......, ........ ......... ..........".. },.. "explanationofflineenabled": {.. "message": ".......... ..........., .......... .......... .......... ......... ........... ...... .....

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\te\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1969
Entropy (8bit):	4.327258153043599
Encrypted:	false
SSDEEP:	48:R7jQrEONienBcFNBNieCyOBw0/kCcj+sEf24l+Q+u1LU4ljCj55ONipR41ssrNix:RjQJN1nBcFNBNlCyGcj+RXl+Q+u1LU4s
MD5:	385E65EF723F1C4018EEE6E4E56BC03F
SHA1:	0CEA195638A403FD99BAEF88A360BD746C21DF42
SHA-256:	026C164BAE27DBB36A564888A796AA3F188AAD9E0C37176D48910395CF772CEA
SHA-512:	E55167CB5638E04DF3543D57C8027B86B9483BFCAFA8E7C148EDED66454AEBF554B4C1CF3C33E93EC63D73E43800D6A6E7B9B1A1B0798B6BDB2F699D3989B052
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ...... ........ ......".. },.. "explanationofflinedisabled": {.. "message": ".... ........... ........ ......... ........ ....... Google Docs... .............., .... ............ ....... ..... ...... .... Google Docs .... ...... ............. ......, ........ ........ ... .......".. },.. "explanationofflineenabled": {.. "message": ".... ........... ......., .... .... ........ .......... .... ....... ..... ....... .... ..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\th\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1674
Entropy (8bit):	4.343724179386811
Encrypted:	false
SSDEEP:	48:fcGjnU3UnGKD1GeU3pktOggV1tL2ggG7Q:f3jnDG1eUk0g6RLE
MD5:	64077E3D186E585A8BEA86FF415AA19D
SHA1:	73A861AC810DABB4CE63AD052E6E1834F8CA0E65
SHA-256:	D147631B2334A25B8AA4519E4A30FB3A1A85B6A0396BC688C68DC124EC387D58
SHA-512:	56DD389EB9DD335A6214E206B3BF5D63562584394D1DE1928B67D369E548477004146E6CB2AD19D291CB06564676E2B2AC078162356F6BC9278B04D29825EF0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": ".............. ............. Google .................................... ............................... Google ...... .................................................................".. },.. "explanationofflineenabled": {.. "message": "................................................................".. },.. "extdesc": {.. "message": "..... ..... ........

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\tr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1063
Entropy (8bit):	4.853399816115876
Encrypted:	false
SSDEEP:	24:1HAowYuBPgoMC4AGehrgGm7tJ3ckwFrXnRs5m:GYsPgrCtGehkGc3cvXr
MD5:	76B59AAACC7B469792694CF3855D3F4C
SHA1:	7C04A2C1C808FA57057A4CCEEE66855251A3C231
SHA-256:	B9066A162BEE00FD50DC48C71B32B69DFFA362A01F84B45698B017A624F46824
SHA-512:	2E507CA6874DE8028DC769F3D9DFD9E5494C268432BA41B51568D56F7426F8A5F2E5B111DDD04259EB8D9A036BB4E3333863A8FC65AAB793BCEF39EDFE41403B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN. OLU.TUR".. },.. "explanationofflinedisabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Google Dok.manlar'. .nternet ba.lant.s. olmadan kullanmak i.in, .nternet'e ba.lanabildi.inizde Google Dok.manlar ana sayfas.nda Ayarlar'a gidin ve .evrimd... senkronizasyonu etkinle.tirin.".. },.. "explanationofflineenabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Ancak, yine de mevcut dosyalar. d.zenleyebilir veya yeni dosyalar olu.turabilirsiniz.".. },.. "extdesc": {.. "message": "Dok.man, e-tablo ve sunu olu.turun, bunlar. d.zenleyin ve g.r.nt.leyin. T.m bu i.lemleri internet eri.imi olmadan yapabilirsiniz.".. },.. "extname": {.. "message": "Google Dok.manlar .evrimd...".. },.. "learnmore": {.. "message": "Daha Fazla Bilgi".. },.. "popuphelptext": {.. "message": ".nternet ba.lant.n.z olsun veya olmas.n, nerede olursan.z olun yaz.n, d.zenl

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\uk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1333
Entropy (8bit):	4.686760246306605
Encrypted:	false
SSDEEP:	24:1HAk9oxkm6H4KyGGB9GeGoxPEYMQhpARezTtHUN97zlwpEH7:VKU1GB9GeBc/OARETt+9/WCb
MD5:	970963C25C2CEF16BB6F60952E103105
SHA1:	BBDDACFEEE60E22FB1C130E1EE8EFDA75EA600AA
SHA-256:	9FA26FF09F6ACDE2457ED366C0C4124B6CAC1435D0C4FD8A870A0C090417DA19
SHA-512:	1BED9FE4D4ADEED3D0BC8258D9F2FD72C6A177C713C3B03FC6F5452B6D6C2CB2236C54EA972ECE7DBFD756733805EB2352CAE44BAB93AA8EA73BB80460349504
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........".. },.. "explanationofflinedisabled": {.. "message": ".. . ...... ....... ... ............. Google ........... ... ......... . .........., ......... . ............ .. ........ ........ Google .......... . ......... ......-............., .... ...... . .......".. },.. "explanationofflineenabled": {.. "message": ".. . ...... ......, ..... ... .... ...... .......... ........ ..... ... .......... .....".. },.. "extdesc": {.. "message": "........., ......... . ............ ........., .......... ....... .. ........... ... ....... .. ..........".. },.. "extname": {.. "message": "Goo

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\ur\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1263
Entropy (8bit):	4.861856182762435
Encrypted:	false
SSDEEP:	24:1HAl3zNEUhN3mNjkSIkmdNpInuUVsqNtOJDhY8Dvp/IkLzx:e3uUhQKvkmd+s11Lp1F
MD5:	8B4DF6A9281333341C939C244DDB7648
SHA1:	382C80CAD29BCF8AAF52D9A24CA5A6ECF1941C6B
SHA-256:	5DA836224D0F3A96F1C5EB5063061AAD837CA9FC6FED15D19C66DA25CF56F8AC
SHA-512:	FA1C015D4EA349F73468C78FDB798D462EEF0F73C1A762298798E19F825E968383B0A133E0A2CE3B3DF95F24C71992235BFC872C69DC98166B44D3183BF8A9E5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ......".. },.. "explanationofflinedisabled": {.. "message": ".. .. .... .... Google Docs .. .... ....... ..... ....... .... ..... .... ... .. .. ....... .. ..... ... .. Google Docs ... ... .. ....... .. ..... ... .. .... ...... ..... .. .. .....".. },.. "explanationofflineenabled": {.. "message": ".. .. .... ... .... .. ... ... ...... ..... ... ..... .. .... ... .. ... ..... ... .... ....".. },.. "extdesc": {.. "message": ".......... .......... ... ....... . .... ... ....... .. ..... .. .... ...... ..... .... ... ..... .......".. },.. "extname": {.. "message": "Google Docs .. ....".. },.. "learnmore": {..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\vi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1074
Entropy (8bit):	5.062722522759407
Encrypted:	false
SSDEEP:	24:1HAhBBLEBOVUSUfE+eDFmj4BLErQ7e2CIer32KIxqJ/HtNiE5nIGeU+KCVT:qHCDheDFmjDQgX32/S/hI9jh
MD5:	773A3B9E708D052D6CBAA6D55C8A5438
SHA1:	5617235844595D5C73961A2C0A4AC66D8EA5F90F
SHA-256:	597C5F32BC999746BC5C2ED1E5115C523B7EB1D33F81B042203E1C1DF4BBCAFE
SHA-512:	E5F906729E38B23F64D7F146FA48F3ABF6BAED9AAFC0E5F6FA59F369DC47829DBB4BFA94448580BD61A34E844241F590B8D7AEC7091861105D8EBB2590A3BEE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "T.O M.I".. },.. "explanationofflinedisabled": {.. "message": "B.n .ang ngo.i tuy.n. .. s. d.ng Google T.i li.u m. kh.ng c.n k.t n.i Internet, .i ..n c.i ..t tr.n trang ch. c.a Google T.i li.u v. b.t ..ng b. h.a ngo.i tuy.n v.o l.n ti.p theo b.n ...c k.t n.i v.i m.ng Internet.".. },.. "explanationofflineenabled": {.. "message": "B.n .ang ngo.i tuy.n, tuy nhi.n b.n v.n c. th. ch.nh s.a c.c t.p c. s.n ho.c t.o c.c t.p m.i.".. },.. "extdesc": {.. "message": "Ch.nh s.a, t.o v. xem t.i li.u, b.ng t.nh v. b.n tr.nh b.y . t.t c. m. kh.ng c.n truy c.p Internet.".. },.. "extname": {.. "message": "Google T.i li.u ngo.i tuy.n".. },.. "learnmore": {.. "message": "Ti.m hi..u th.m".. },.. "popuphelptext": {.. "message": "Vi.t, ch.nh s.a v. c.ng t.c

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\zh_CN\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	879
Entropy (8bit):	5.7905809868505544
Encrypted:	false
SSDEEP:	12:1HASvgteHCBxNtSBXuetOrgIkA2OrWjMOCBxetSBXK01fg/SOiCSUEQ27e1CBhUj:1HAFsHtrIkA2jqldI/727eggcLk9pf
MD5:	3E76788E17E62FB49FB5ED5F4E7A3DCE
SHA1:	6904FFA0D13D45496F126E58C886C35366EFCC11
SHA-256:	E72D0BB08CC3005556E95A498BD737E7783BB0E56DCC202E7D27A536616F5EE0
SHA-512:	F431E570AB5973C54275C9EEF05E49E6FE2D6C17000F98D672DD31F9A1FAD98E0D50B5B0B9CF85D5BBD3B655B93FD69768C194C8C1688CB962AA75FF1AF9BDB6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ................ Google ....................".. },.. "explanationofflineenabled": {.. "message": ".............................".. },.. "extdesc": {.. "message": "...................... - ........".. },.. "extname": {.. "message": "Google .......".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "...............................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\zh_HK\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1205
Entropy (8bit):	4.50367724745418
Encrypted:	false
SSDEEP:	24:YWvqB0f7Cr591AhI9Ah8U1F4rw4wtB9G976d6BY9scKUrPoAhNehIrI/uIXS1:YWvl7Cr5JHrw7k7u6BY9trW+rHR
MD5:	524E1B2A370D0E71342D05DDE3D3E774
SHA1:	60D1F59714F9E8F90EF34138D33FBFF6DD39E85A
SHA-256:	30F44CFAD052D73D86D12FA20CFC111563A3B2E4523B43F7D66D934BA8DACE91
SHA-512:	D2225CF2FA94B01A7B0F70A933E1FDCF69CDF92F76C424CE4F9FCC86510C481C9A87A7B71F907C836CBB1CA41A8BEBBD08F68DBC90710984CA738D293F905272
Malicious:	false
Preview:	{"createnew":{"message":"\u5efa\u7acb\u65b0\u9805\u76ee"},"explanationofflinedisabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\u3002\u5982\u8981\u5728\u6c92\u6709\u4e92\u806f\u7db2\u9023\u7dda\u7684\u60c5\u6cc1\u4e0b\u4f7f\u7528\u300cGoogle \u6587\u4ef6\u300d\uff0c\u8acb\u524d\u5f80\u300cGoogle \u6587\u4ef6\u300d\u9996\u9801\u7684\u8a2d\u5b9a\uff0c\u4e26\u5728\u4e0b\u6b21\u9023\u63a5\u4e92\u806f\u7db2\u6642\u958b\u555f\u96e2\u7dda\u540c\u6b65\u529f\u80fd\u3002"},"explanationofflineenabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\uff0c\u4f46\u60a8\u4ecd\u53ef\u4ee5\u7de8\u8f2f\u53ef\u7528\u6a94\u6848\u6216\u5efa\u7acb\u65b0\u6a94\u6848\u3002"},"extdesc":{"message":"\u7de8\u8f2f\u3001\u5efa\u7acb\u53ca\u67e5\u770b\u60a8\u7684\u6587\u4ef6\u3001\u8a66\u7b97\u8868\u548c\u7c21\u5831\uff0c\u5b8c\u5168\u4e0d\u9700\u4f7f\u7528\u4e92\u806f\u7db2\u3002"},"extname":{"message":"\u300cGoogle \u6587\u4ef6\u300d\u96e2\u7dda\u7248"},"learnmore":{"message":"\u77ad\u89e3\u8a

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\zh_TW\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	843
Entropy (8bit):	5.76581227215314
Encrypted:	false
SSDEEP:	12:1HASvgmaCBxNtBtA24ZOuAeOEHGOCBxetBtMHQIJECSUnLRNocPNy6CBhU5OGg1O:1HAEfQkekYyLvRmcPGgzcL2kx5U
MD5:	0E60627ACFD18F44D4DF469D8DCE6D30
SHA1:	2BFCB0C3CA6B50D69AD5745FA692BAF0708DB4B5
SHA-256:	F94C6DDEDF067642A1AF18D629778EC65E02B6097A8532B7E794502747AEB008
SHA-512:	6FF517EED4381A61075AC7C8E80C73FAFAE7C0583BA4FA7F4951DD7DBE183C253702DEE44B3276EFC566F295DAC1592271BE5E0AC0C7D2C9F6062054418C7C27
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".....".. },.. "explanationofflinedisabled": {.. "message": ".................. Google ................ Google .................".. },.. "explanationofflineenabled": {.. "message": ".........................".. },.. "extdesc": {.. "message": ".............................".. },.. "extname": {.. "message": "Google .....".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "................................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_locales\zu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	912
Entropy (8bit):	4.65963951143349
Encrypted:	false
SSDEEP:	24:YlMBKqLnI7EgBLWFQbTQIF+j4h3OadMJzLWnCieqgwLeOvKrCRPE:YlMBKqjI7EQOQb0Pj4heOWqeyaBrMPE
MD5:	71F916A64F98B6D1B5D1F62D297FDEC1
SHA1:	9386E8F723C3F42DA5B3F7E0B9970D2664EA0BAA
SHA-256:	EC78DDD4CCF32B5D76EC701A20167C3FBD146D79A505E4FB0421FC1E5CF4AA63
SHA-512:	30FA4E02120AF1BE6E7CC7DBB15FAE5D50825BD6B3CF28EF21D2F2E217B14AF5B76CFCC165685C3EDC1D09536BFCB10CA07E1E2CC0DA891CEC05E19394AD7144
Malicious:	false
Preview:	{"createnew":{"message":"DALA ENTSHA"},"explanationofflinedisabled":{"message":"Awuxhunyiwe ku-inthanethi. Ukuze usebenzise i-Google Amadokhumenti ngaphandle koxhumano lwe-inthanethi, iya kokuthi izilungiselelo ekhasini lasekhaya le-Google Amadokhumenti bese uvula ukuvumelanisa okungaxhunyiwe ku-inthanethi ngesikhathi esilandelayo lapho uxhunywe ku-inthanethi."},"explanationofflineenabled":{"message":"Awuxhunyiwe ku-inthanethi, kodwa usangakwazi ukuhlela amafayela atholakalayo noma udale amasha."},"extdesc":{"message":"Hlela, dala, futhi ubuke amadokhumenti akho, amaspredishithi, namaphrezentheshini \u2014 konke ngaphandle kokufinyelela kwe-inthanethi."},"extname":{"message":"I-Google Amadokhumenti engaxhumekile ku-intanethi"},"learnmore":{"message":"Funda kabanzi"},"popuphelptext":{"message":"Bhala, hlela, futhi hlanganyela noma yikuphi lapho okhona, unalo noma ungenalo uxhumano lwe-inthanethi."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11280
Entropy (8bit):	5.751992630887702
Encrypted:	false
SSDEEP:	192:RBG1G1UPkUj/86Op//Ier/2nsNLJtwg+K8HNnswuHEIIMuuqd7CKqvUpGTcjG:m8IEI4u8Rp
MD5:	250C48F4915DD4C0DFA7E7E021A4F066
SHA1:	092A98BF40D8C18280393BF3811A7DFA9A9FD326
SHA-256:	26D9B129339E2E2EB8E0223E16DB3CF0EA220AC0799480D462C236E6A425665E
SHA-512:	8B18E232992E55E8DA97AC46D7AACA061508341D1EADCEFF1E9D0677734DFA8B892AB44754A3AA100585F5B2F2562BC4F2D7103065050FFCD00F91D5915CE5E6
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\dasherSettingSchema.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	854
Entropy (8bit):	4.284628987131403
Encrypted:	false
SSDEEP:	12:ont+QByTwnnGNcMbyWM+Q9TZldnnnGGxlF/S0WOtUL0M0r:vOrGe4dDCVGOjWJ0nr
MD5:	4EC1DF2DA46182103D2FFC3B92D20CA5
SHA1:	FB9D1BA3710CF31A87165317C6EDC110E98994CE
SHA-256:	6C69CE0FE6FAB14F1990A320D704FEE362C175C00EB6C9224AA6F41108918CA6
SHA-512:	939D81E6A82B10FF73A35C931052D8D53D42D915E526665079EEB4820DF4D70F1C6AEBAB70B59519A0014A48514833FEFD687D5A3ED1B06482223A168292105D
Malicious:	false
Preview:	{. "type": "object",. "properties": {. "allowedDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Allow users to enable Docs offline for the specified managed domains.",. "description": "Users on managed devices will be able to enable docs offline if they are part of the specified managed domains.". },. "autoEnabledDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Auto enable Docs offline for the specified managed domains in certain eligible situations.",. "description": "Users on managed devices, in certain eligible situations, will be able to automatically access and edit recent files offline for the managed domains set in this property. They can still disable it from Drive settings.". }. }.}.

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2525
Entropy (8bit):	5.417833205646285
Encrypted:	false
SSDEEP:	24:1HEZ4WPoolELb/KxktGw3VwELb/4iL2QDkUpvdz1xxy/Atj1K9yiVvQe:WdP5aLTKQGwlTLT4oRvvxs/APKgiVb
MD5:	236D2DD305D64C2B6ABD232ED53270DF
SHA1:	9F6885E95FBC4213631F0B0EA49C803D07D34136
SHA-256:	2A4D526B9D1C8665427FB9E0DA58D16FDDE382DD74C1258941B18701EF7880C3
SHA-512:	B76AF22153F79BCA2429A23746A62A430A521E952E7F94936648ECFD25AFDD9801ACBF6FD16941918A4FEDE39DE747AB6C6336BC86CA74384920AF7E815DB855
Malicious:	false
Preview:	{.. "author": {.. "email": "docs-hosted-app-own@google.com".. },.. "background": {.. "service_worker": "service_worker_bin_prod.js".. },.. "content_capabilities": {.. "matches": [ "https://docs.google.com/", "https://drive.google.com/", "https://drive-autopush.corp.google.com/", "https://drive-daily-0.corp.google.com/", "https://drive-daily-1.corp.google.com/", "https://drive-daily-2.corp.google.com/", "https://drive-daily-3.corp.google.com/", "https://drive-daily-4.corp.google.com/", "https://drive-daily-5.corp.google.com/", "https://drive-daily-6.corp.google.com/", "https://drive-preprod.corp.google.com/", "https://drive-staging.corp.google.com/" ],.. "permissions": [ "clipboardRead", "clipboardWrite", "unlimitedStorage" ].. },.. "content_security_policy": {.. "extension_pages": "script-src 'self'; object-src 'self'".. },.. "default_locale": "en_US",.. "description": "__MSG_extDesc__",.. "externally_connectable": {.. "ma

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\offscreendocument.html

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	97
Entropy (8bit):	4.862433271815736
Encrypted:	false
SSDEEP:	3:PouV7uJL5XL/oGLvLAAJR90bZNGXIL0Hac4NGb:hxuJL5XsOv0EmNV4HX4Qb
MD5:	B747B5922A0BC74BBF0A9BC59DF7685F
SHA1:	7BF124B0BE8EE2CFCD2506C1C6FFC74D1650108C
SHA-256:	B9FA2D52A4FFABB438B56184131B893B04655B01F336066415D4FE839EFE64E7
SHA-512:	7567761BE4054FCB31885E16D119CD4E419A423FFB83C3B3ED80BFBF64E78A73C2E97AAE4E24AB25486CD1E43877842DB0836DB58FBFBCEF495BC53F9B2A20EC
Malicious:	false
Preview:	<!DOCTYPE html>.<html>.<body>. <script src="offscreendocument_main.js"></script>.</body>.</html>

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\offscreendocument_main.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3777)
Category:	dropped
Size (bytes):	98880
Entropy (8bit):	5.414989230634404
Encrypted:	false
SSDEEP:	1536:M+TW9bPq1M3ZOC0pJ/BjXf3Zk/7hry6fq66V3gr9KUw5SXfPxhZhGurH6c/V:WPLZwJJXf3ZvRV3gJKU/fP+urHRV
MD5:	DC93A1045D1AD8D7ADD06B93B2FE79E2
SHA1:	CAFCC8DB7F8E3FD2F8C1EFAC7B385D7616F55EA3
SHA-256:	D5CEB4449384CD2D7898C052B7B99417961880945FC4EAE80EBBAF8E24CC0A3E
SHA-512:	025F7103D1F7D607825BE916D0131C1E04B295EB562974A77F5A16E7BF40250B5608071779B420E4738F86F09A6F7C889469FA898268894FFFEEB7465C589E81
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function ba(){return function(){}}function l(a){return function(){return this[a]}}function ca(a){return function(){return a}}var n;function da(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function fa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var q=fa(this);function r(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new Ty

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\page_embed_script.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	291
Entropy (8bit):	4.65176400421739
Encrypted:	false
SSDEEP:	6:2LGX86tj66rU8j6D3bWq2un/XBtzHrH9Mnj63LK603:2Q8KVqb2u/Rt3Onj1
MD5:	3AB0CD0F493B1B185B42AD38AE2DD572
SHA1:	079B79C2ED6F67B5A5BD9BC8C85801F96B1B0F4B
SHA-256:	73E3888CCBC8E0425C3D2F8D1E6A7211F7910800EEDE7B1E23AD43D3B21173F7
SHA-512:	32F9DB54654F29F39D49F7A24A1FC800DBC0D4A8A1BAB2369C6F9799BC6ADE54962EFF6010EF6D6419AE51D5B53EC4B26B6E2CDD98DEF7CC0D2ADC3A865F37D3
Malicious:	false
Preview:	(function(){window._docs_chrome_extension_exists=!0;window._docs_chrome_extension_features_version=2;window._docs_chrome_extension_permissions="alarms clipboardRead clipboardWrite storage unlimitedStorage offscreen".split(" ");window._docs_chrome_extension_manifest_version=3;}).call(this);.

C:\Users\user\AppData\Local\Temp\scoped_dir3588_2099185708\CRX_INSTALL\service_worker_bin_prod.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3782)
Category:	dropped
Size (bytes):	107677
Entropy (8bit):	5.396220758526552
Encrypted:	false
SSDEEP:	1536:7nwyvB1qCo7mWUgsUopF5Xy4FlAwxdhvHcrdncqAKxwjBnKwIDQgrOChkPIgmrCp:wh6gstXy4FM5ncJKxCnKWgrd0v
MD5:	E8015AC436B33034EDF7DA060E853A04
SHA1:	62D0F6EB0E441158A1F56F6E0C70D3D229B57886
SHA-256:	23C953E989FF4AF6126D4A3B2AD21B33A82512FC8768045C00F05940DE2C9978
SHA-512:	C35AC8692FC22B78365CA202E173A90AE4B5DBA338B7FC9EEB17EDDF5868B52CF1D13DC0EDAF36BE1CC0E0152F41AC4027C51D7ECA27778B483E3FC83F11EA82
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function ba(){return function(){}}function k(a){return function(){return this[a]}}function ca(a){return function(){return a}}var n;function da(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function fa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var q=fa(this);function r(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new Ty

C:\Users\user\AppData\Local\Temp\scoped_dir3588_988123876\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1753
Entropy (8bit):	5.8889033066924155
Encrypted:	false
SSDEEP:	48:Pxpr7Xka2NXDpfsBJODI19Kg1JqcJW9O//JE3ZBDcpu/x:L3XgNSz9/4kIO3u3Xgpq
MD5:	738E757B92939B24CDBBD0EFC2601315
SHA1:	77058CBAFA625AAFBEA867052136C11AD3332143
SHA-256:	D23B2BA94BA22BBB681E6362AE5870ACD8A3280FA9E7241B86A9E12982968947
SHA-512:	DCA3E12DD5A9F1802DB6D11B009FCE2B787E79B9F730094367C9F26D1D87AF1EA072FF5B10888648FB1231DD83475CF45594BB0C9915B655EE363A3127A5FFC2
Malicious:	false
Preview:	[.. {.. "description": "treehash per file",.. "signed_content": {.. "payload": "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",.. "signatures": [.. {.. "header": {.. "kid": "publisher".. },.. "protected": "eyJhbGciOiJSUzI1NiJ9",.. "signature": "UglEEilkOml5P1W0X6wc-_dB87PQB73uMir11923av57zPKujb4IUe_lbGpn7cRZsy6x-8i9eEKxAW7L2TSmYqrcp4XtiON6ppcf27FWACXOUJDax9wlMr-EOtyZhykCnB9vR

C:\Users\user\AppData\Local\Temp\scoped_dir3588_988123876\CRX_INSTALL\content.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8031), with no line terminators
Category:	dropped
Size (bytes):	9815
Entropy (8bit):	6.1716321262973315
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
MD5:	3D20584F7F6C8EAC79E17CCA4207FB79
SHA1:	3C16DCC27AE52431C8CDD92FBAAB0341524D3092
SHA-256:	0D40A5153CB66B5BDE64906CA3AE750494098F68AD0B4D091256939EEA243643
SHA-512:	315D1B4CC2E70C72D7EB7D51E0F304F6E64AC13AE301FD2E46D585243A6C936B2AD35A0964745D291AE9B317C316A29760B9B9782C88CC6A68599DB531F87D59
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir3588_988123876\CRX_INSTALL\content_new.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8604), with no line terminators
Category:	dropped
Size (bytes):	10388
Entropy (8bit):	6.174387413738973
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
MD5:	3DE1E7D989C232FC1B58F4E32DE15D64
SHA1:	42B152EA7E7F31A964914F344543B8BF14B5F558
SHA-256:	D4AA4602A1590A4B8A1BCE8B8D670264C9FB532ADC97A72BC10C43343650385A
SHA-512:	177E5BDF3A1149B0229B6297BAF7B122602F7BD753F96AA41CCF2D15B2BCF6AF368A39BB20336CCCE121645EC097F6BEDB94666C74ACB6174EB728FBFC43BC2A
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir3588_988123876\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	962
Entropy (8bit):	5.698567446030411
Encrypted:	false
SSDEEP:	24:1Hg9+D3DRnbuF2+sUrzUu+Y9VwE+Fg41T1O:NBqY+6E+F7JO
MD5:	E805E9E69FD6ECDCA65136957B1FB3BE
SHA1:	2356F60884130C86A45D4B232A26062C7830E622
SHA-256:	5694C91F7D165C6F25DAF0825C18B373B0A81EA122C89DA60438CD487455FD6A
SHA-512:	049662EF470D2B9E030A06006894041AE6F787449E4AB1FBF4959ADCB88C6BB87A957490212697815BB3627763C01B7B243CF4E3C4620173A95795884D998A75
Malicious:	false
Preview:	{.. "content_scripts": [ {.. "js": [ "content.js" ],.. "matches": [ "https://chrome.google.com/webstore/" ].. }, {.. "js": [ "content_new.js" ],.. "matches": [ "https://chromewebstore.google.com/" ].. } ],.. "description": "Edge relevant text changes on select websites to improve user experience and precisely surfaces the action they want to take.",.. "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu06p2Mjoy6yJDUUjCe8Hnqvtmjll73XqcbylxFZZWe+MCEAEK+1D0Nxrp0+IuWJL02CU3jbuR5KrJYoezA36M1oSGY5lIF/9NhXWEx5GrosxcBjxqEsdWv/eDoOOEbIvIO0ziMv7T1SUnmAA07wwq8DXWYuwlkZU/PA0Mxx0aNZ5+QyMfYqRmMpwxkwPG8gyU7kmacxgCY1v7PmmZo1vSIEOBYrxl064w5Q6s/dpalSJM9qeRnvRMLsszGY/J2bjQ1F0O2JfIlBjCOUg/89+U8ZJ1mObOFrKO4um8QnenXtH0WGmsvb5qBNrvbWNPuFgr2+w5JYlpSQ+O8zUCb8QZwIDAQAB",.. "manifest_version": 3,.. "name": "Edge relevant text changes",.. "update_url": "https://edge.microsoft.com/extensionwebstorebase/v1/crx",.. "version": "1.2.1"..}..

C:\Users\user\AppData\Local\Temp\scoped_dir3588_988123876\b88a03dc-5152-40f1-adc9-a3469e5b7151.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Windows\Installer\3ecd54.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Google Chrome 131.0.6778.86, Subject: Google Chrome, Author: Google LLC, Keywords: Installer, Template: Intel;1033, Revision Number: {37285955-014E-4DC5-AA76-A72CE0CD6FF4}, Create Time/Date: Thu Jan 11 14:59:44 2024, Last Saved Time/Date: Thu Jan 11 14:59:44 2024, Number of Pages: 200, Number of Words: 12, Name of Creating Application: MSI Wrapper (11.0.53.0), Security: 2
Category:	dropped
Size (bytes):	2002944
Entropy (8bit):	5.7921504076764405
Encrypted:	false
SSDEEP:	24576:vt9cpVDhol4Cw4o72KP8MgRhG52dt3JJCyrdEnlBj:4pRho2XN2Q8xhGQP6QdE
MD5:	DC1DACC4A53407AEBFFC38EF512F52E7
SHA1:	737E0C4312552DA152F009BDCE0F9048E368FEE1
SHA-256:	60F172403738997A3E49BA5B7B247854BC45B42DB5895C47D43B0B0ED86588C1
SHA-512:	9685D5C2A48D334814599FC0F8F05DCC9AF441A30D09F034030F01158648A2FFD25FEBFAD1E4237457B1DE8ADB9765F005C3549624DD588F73CC738A2ED62CBA
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSICE5E.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	212992
Entropy (8bit):	6.513409725320959
Encrypted:	false
SSDEEP:	3072:xspAtOdmXwCGjtYNKbYO2gjpcm8rRuqpjCL42loHUvU0yGxr5GqM2a8:jtOdiRQYpgjpjew5DHyGxcqo8
MD5:	0C8921BBCC37C6EFD34FAF44CF3B0CB5
SHA1:	DCFA71246157EDCD09EECAF9D4C5E360B24B3E49
SHA-256:	FD622CF73EA951A6DE631063ABA856487D77745DD1500ADCA61902B8DDE56FE1
SHA-512:	ED55443E20D40CCA90596F0A0542FA5AB83FE0270399ADFAAFD172987FB813DFD44EC0DA0A58C096AF3641003F830341FE259AD5BCE9823F238AE63B7E11E108
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: 510286.msi, Detection: malicious, Browse Filename: 5c322c.msi, Detection: malicious, Browse Filename: 33abb.msi, Detection: malicious, Browse Filename: 57ff67.msi, Detection: malicious, Browse Filename: setup (2).msi, Detection: malicious, Browse Filename: 5c322c.msi, Detection: malicious, Browse Filename: 57ff67.msi, Detection: malicious, Browse Filename: 293944637.dll, Detection: malicious, Browse Filename: setup (2).msi, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............p...p...p.......p.....p..../.p.......p...q.%.p.......p.....p.....p.Rich..p.........................PE..L...Y..e...........!.....h..........K................................................]....@.........................P...]............P.......................`.....................................p...@...............t............................text....f.......h.................. ..`.rdata...............l..............@..@.data....5..........................@....rsrc........P......................@..@.reloc...)...`...*..................@..B........................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\SourceHash{740864D8-D5D4-4230-8D1D-1C2E0E22C8A6}

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.768251115757242
Encrypted:	false
SSDEEP:	12:JSbX72FjNlAGiLIlHVRpth/7777777777777777777777777vDHFnF5bZpSl0i8Q:JhQI5p1F
MD5:	9BF186DBDD089735A3123ABDD63A4136
SHA1:	FC910D7ECE869D009581FDCB99BB9F5054B5563C
SHA-256:	AE78F35BDA182B14D2343171BFA66200F7573C46FE0CD4B54A4CBE06E0080E96
SHA-512:	E3C7684D3384C64619BDB6900B44FAC3F6DB56306615C76AF7F87742C54A046E14D1D5D6637B2CEF3F55675A98AB39A0F2C4C5895BDE70BE8C635C139880D36D
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\inprogressinstallinfo.ipi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.2091896604379064
Encrypted:	false
SSDEEP:	48:dJQuqNveFXJTT5DyiddSPoTrX/ddSB2FrB:fQwrT4gpq
MD5:	98E3EA8F15B4C36E0C100E2AD1CC5061
SHA1:	3D7574C3E94F57C35608DC99C42C97C2B45DF9B5
SHA-256:	87701841BCF20B1EC4697335ECD651C4A1D5FE50F1B1F3400262BF5AB37BAD0C
SHA-512:	EB702AD2D6EA2E005064F628A16D5B26C1A4BE38FE83CB2389D577CEBE8EBE69D1C8FB64C33E9842D2D40A3B4C9CA98E2ED1CD2BFEC53996F1952EB81437E9F9
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	432221
Entropy (8bit):	5.375172990873336
Encrypted:	false
SSDEEP:	1536:6qELG7gK+RaOOp3LCCpfmLgYI66xgFF9Sq8K6MAS2OMUHl6Gin327D22A26Kgauo:zTtbmkExhMJCIpErN
MD5:	4E6673EB8168063A1B4AE3EECF3AC04F
SHA1:	E8F1F4207BCA3E73FB9339A00E27935B4C2D52AE
SHA-256:	29974E129A9285DCC8EE9A9BDCE8FE0625236D728C6C115C8D03290C0DA29DB8
SHA-512:	6EEE9B9BBB657CCAA2FD58DD778F06C0E5576193A29B65B9E42938FCD6720E9C3BFE552211989A66AE8891D48494F3317AA3D4806D0C344C6CEF3A64443C20DD
Malicious:	false
Preview:	.To learn about increasing the verbosity of the NGen log files please see http://go.microsoft.com/fwlink/?linkid=210113..12/07/2019 14:54:22.458 [5488]: Command line: D:\wd\compilerTemp\BMT.200yuild.1bk\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe executeQueuedItems /nologo ..12/07/2019 14:54:22.473 [5488]: Executing command from offline queue: install "System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil" /NoDependencies /queue:1..12/07/2019 14:54:22.490 [5488]: Executing command from offline queue: install "System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil" /NoDependencies /queue:3..12/07/2019 14:54:22.490 [5488]: Exclusion list entry found for System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil; it will not be installed..12/07/2019 14:54:22.490 [

C:\Windows\Temp\~DF4718F2426C1E81CF.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	81920
Entropy (8bit):	0.10345115145058115
Encrypted:	false
SSDEEP:	24:iN0VJfAebfddipV72nddipVdV2BwG3lrkg9Skv+kZdL:+UrfddSB2nddSPoTrXvF
MD5:	8DB5106E7073F91A2782AC2CF1867AEF
SHA1:	77D395D05316B51C35436170BF586F552C981FC9
SHA-256:	ADD483A66B28727617FD99999D53AACD65F4B80B57511A360107F94F0E42DBD6
SHA-512:	C38CED7BE524FF22637A58CB6A8E1190639567EE4095FB58D71E942B1C7E96F75313CC8697937342B68B465137A982582BE032E1384A752843208782BB38324E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF7720AEABA0FBE7BB.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.06945803457925166
Encrypted:	false
SSDEEP:	6:2/9LG7iVCnLG7iVrKOzPLHKOnF5VJVUzvqCZtQVky6lS:2F0i8n0itFzDHFnF5b4S
MD5:	BFED7F358179D3C693901B249409AD3F
SHA1:	94BF252030368A70FF79225066C2D82FC1186239
SHA-256:	3EC4E7D718481D957032C46C398F5AFBB8636DB3626657BD51451A95E38BA84E
SHA-512:	1A3632A0DCC91FC1808CAF45D4DEDF76BB08638A78E2C41233F1FF2FAC0D92BD7BE3F1A03144E0E9311949ABDCF3584A4AE3828B03B141F419B9F86FE6D5176D
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

\Device\ConDrv

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	ASCII text, with very long lines (962), with CRLF, CR, LF line terminators, with overstriking
Category:	dropped
Size (bytes):	1165
Entropy (8bit):	3.54868624834551
Encrypted:	false
SSDEEP:	24:zKcNDPQDdXXXXXXXXXXXXXXXXXXeDYJQn:zKaD45XXXXXXXXXXXXXXXXXXe9
MD5:	744568B8EBACC85A538F3CF9CE9FCC03
SHA1:	4FF8E9F8A57A11B2059981CFA4B9A56190D35D5E
SHA-256:	D8F5D3C43943ACF7D55E9FE989DCE2CED7D0D293DA83CCDAC13FA04FB8793842
SHA-512:	FA8E2CBDBEC75B4060BD8B17AEABBB9419D8D34D6C9163E1231792ABF6BE912000FB19558B54AE9CA8255228BBF386174C19AC0359D1D801AC9525FFA04EC370
Malicious:	false
Preview:	Microsoft (R) File Expansion Utility..Copyright (c) Microsoft Corporation. All rights reserved.....Adding files\install86.exe to Extraction Queue....Expanding Files ......Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files.......................

Static File Info

General

File type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Google Chrome 131.0.6778.86, Subject: Google Chrome, Author: Google LLC, Keywords: Installer, Template: Intel;1033, Revision Number: {37285955-014E-4DC5-AA76-A72CE0CD6FF4}, Create Time/Date: Thu Jan 11 14:59:44 2024, Last Saved Time/Date: Thu Jan 11 14:59:44 2024, Number of Pages: 200, Number of Words: 12, Name of Creating Application: MSI Wrapper (11.0.53.0), Security: 2
Entropy (8bit):	5.7921504076764405
TrID:	Generic OLE2 / Multistream Compound File (8008/1) 100.00%
File name:	56ff7c.msi
File size:	2'002'944 bytes
MD5:	dc1dacc4a53407aebffc38ef512f52e7
SHA1:	737e0c4312552da152f009bdce0f9048e368fee1
SHA256:	60f172403738997a3e49ba5b7b247854bc45b42db5895c47d43b0b0ed86588c1
SHA512:	9685d5c2a48d334814599fc0f8f05dcc9af441a30d09f034030f01158648a2ffd25febfad1e4237457b1de8adb9765f005c3549624dd588f73cc738a2ed62cba
SSDEEP:	24576:vt9cpVDhol4Cw4o72KP8MgRhG52dt3JJCyrdEnlBj:4pRho2XN2Q8xhGQP6QdE
TLSH:	AD9578C13784C127E95B1D324E67C799A729FDA0AE30B0877360BB5E5B3AAD35E64301
File Content Preview:	........................>......................................................................................................................................................................................................................................

File Icon


Icon Hash:	2d2e3797b32b2b99

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 12, 2024 12:39:07.980679035 CET	49724	80	192.168.2.4	199.232.214.172
Dec 12, 2024 12:39:07.980767012 CET	49723	80	192.168.2.4	199.232.214.172
Dec 12, 2024 12:39:08.100800991 CET	80	49724	199.232.214.172	192.168.2.4
Dec 12, 2024 12:39:08.100872993 CET	49724	80	192.168.2.4	199.232.214.172
Dec 12, 2024 12:39:08.101155043 CET	80	49723	199.232.214.172	192.168.2.4
Dec 12, 2024 12:39:08.101293087 CET	49723	80	192.168.2.4	199.232.214.172
Dec 12, 2024 12:39:12.212187052 CET	49672	443	192.168.2.4	173.222.162.32
Dec 12, 2024 12:39:12.212232113 CET	443	49672	173.222.162.32	192.168.2.4
Dec 12, 2024 12:39:31.745749950 CET	49738	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:31.745820999 CET	443	49738	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:31.745997906 CET	49738	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:31.876353979 CET	49738	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:31.876379013 CET	443	49738	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:33.139307022 CET	443	49738	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:33.140075922 CET	49738	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:33.140110970 CET	443	49738	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:33.141721964 CET	443	49738	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:33.141794920 CET	49738	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:33.142998934 CET	49738	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:33.143090963 CET	443	49738	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:33.143244982 CET	49738	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:33.143261909 CET	443	49738	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:33.240761042 CET	49738	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:33.341499090 CET	49747	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:33.341547966 CET	443	49747	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:33.341609001 CET	49747	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:33.342092991 CET	49748	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:33.342118025 CET	443	49748	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:33.342180967 CET	49748	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:33.342449903 CET	49748	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:33.342461109 CET	443	49748	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:33.342631102 CET	49747	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:33.342654943 CET	443	49747	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:33.441061020 CET	49749	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:33.441114902 CET	443	49749	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:33.441365957 CET	49749	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:33.443841934 CET	49749	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:33.443861961 CET	443	49749	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:33.650772095 CET	443	49738	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:33.650798082 CET	443	49738	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:33.650806904 CET	443	49738	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:33.650873899 CET	443	49738	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:33.650895119 CET	49738	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:33.650938034 CET	49738	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:33.873271942 CET	49750	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:33.873330116 CET	443	49750	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:33.873574972 CET	49750	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:33.873698950 CET	49750	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:33.873713017 CET	443	49750	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:33.874053001 CET	49738	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:33.874094009 CET	443	49738	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:34.097176075 CET	49751	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.097246885 CET	443	49751	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.097697973 CET	49751	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.112709999 CET	49751	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.112751007 CET	443	49751	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.155334949 CET	49752	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.155395985 CET	443	49752	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.155461073 CET	49752	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.155698061 CET	49752	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.155715942 CET	443	49752	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.200495005 CET	49753	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.200547934 CET	443	49753	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.200637102 CET	49753	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.437216997 CET	49753	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.437257051 CET	443	49753	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.556549072 CET	443	49748	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.556679010 CET	443	49747	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.574007988 CET	49747	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.574042082 CET	443	49747	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.574636936 CET	49748	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.574666977 CET	443	49748	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.575241089 CET	443	49747	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.575309992 CET	49747	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.575818062 CET	443	49748	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.575880051 CET	49748	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.580434084 CET	49747	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.580544949 CET	443	49747	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.580636978 CET	49748	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.580745935 CET	443	49748	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.581212997 CET	49747	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.581223965 CET	443	49747	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.581412077 CET	49748	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.581428051 CET	443	49748	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.650840044 CET	49747	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.652467012 CET	443	49749	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.653682947 CET	49749	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.653696060 CET	443	49749	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.654855967 CET	443	49749	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.655096054 CET	49749	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.656594038 CET	49749	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.656594038 CET	49749	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.656666994 CET	443	49749	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.666477919 CET	49748	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.851020098 CET	49749	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.851051092 CET	443	49749	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.872006893 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:34.872052908 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:34.872137070 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:34.872322083 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:34.872333050 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:34.987725973 CET	443	49748	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.987816095 CET	443	49748	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.987867117 CET	49748	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.988189936 CET	443	49747	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.988248110 CET	443	49747	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.988291025 CET	49747	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.988545895 CET	49748	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.988573074 CET	443	49748	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:34.989200115 CET	49747	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:34.989223957 CET	443	49747	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.042298079 CET	49749	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.089907885 CET	443	49749	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.089994907 CET	443	49749	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.090157032 CET	49749	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.130007029 CET	443	49750	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:35.249710083 CET	49750	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:35.320895910 CET	443	49751	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.364744902 CET	443	49752	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.372140884 CET	49749	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.372172117 CET	443	49749	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.372762918 CET	49750	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:35.372781038 CET	443	49750	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:35.373292923 CET	443	49750	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:35.373917103 CET	49752	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.373950958 CET	443	49752	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.373953104 CET	49751	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.373961926 CET	443	49751	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.375097990 CET	443	49751	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.375113010 CET	443	49751	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.375173092 CET	49750	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:35.375173092 CET	49750	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:35.375173092 CET	49751	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.375185013 CET	443	49750	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:35.375267982 CET	443	49750	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:35.375715017 CET	443	49752	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.375767946 CET	49752	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.383400917 CET	49752	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.383594990 CET	443	49752	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.383884907 CET	49752	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.383905888 CET	443	49752	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.384025097 CET	49751	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.384025097 CET	49751	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.384109020 CET	443	49751	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.449331045 CET	49750	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:35.449717045 CET	49752	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.473300934 CET	49751	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.473325014 CET	443	49751	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.521702051 CET	49751	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.521811008 CET	443	49751	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.522005081 CET	443	49751	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.522356033 CET	49751	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.522356033 CET	49751	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.580566883 CET	49752	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.580691099 CET	443	49752	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.580735922 CET	49752	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.652004004 CET	443	49753	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.652288914 CET	49753	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.652314901 CET	443	49753	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.653335094 CET	443	49753	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.653386116 CET	49753	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.653733969 CET	49753	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.653781891 CET	443	49753	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.712050915 CET	443	49750	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:35.714519024 CET	443	49750	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:35.714648008 CET	49750	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:35.738007069 CET	49750	443	192.168.2.4	152.19.9.32
Dec 12, 2024 12:39:35.738030910 CET	443	49750	152.19.9.32	192.168.2.4
Dec 12, 2024 12:39:35.814642906 CET	49766	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.814682007 CET	443	49766	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.814739943 CET	49766	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.815139055 CET	49766	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.815155983 CET	443	49766	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.815335035 CET	49767	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.815375090 CET	443	49767	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.815757990 CET	49767	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.815757990 CET	49767	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:35.815788984 CET	443	49767	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.859345913 CET	443	49753	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:35.859407902 CET	49753	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.046780109 CET	49768	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.046822071 CET	443	49768	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:36.046899080 CET	49768	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.047194004 CET	49769	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.047244072 CET	443	49769	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:36.047481060 CET	49769	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.047918081 CET	49770	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.047935009 CET	443	49770	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:36.048131943 CET	49770	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.048294067 CET	49771	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.048304081 CET	443	49771	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:36.048377991 CET	49771	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.050077915 CET	49771	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.050098896 CET	443	49771	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:36.050802946 CET	49770	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.050827026 CET	443	49770	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:36.050960064 CET	49769	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.050986052 CET	443	49769	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:36.051127911 CET	49768	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.051137924 CET	443	49768	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:36.761548996 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:36.761914968 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:36.761924028 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:36.762450933 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:36.762466908 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:36.762622118 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:36.762622118 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:36.762628078 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:36.762686014 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:36.763576984 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:36.764971018 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:36.765059948 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:36.765213013 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:36.765219927 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:36.870244026 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.026607037 CET	443	49767	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.026921034 CET	443	49766	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.028472900 CET	49766	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.028505087 CET	443	49766	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.028768063 CET	49767	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.028795004 CET	443	49767	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.029160976 CET	443	49767	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.030071020 CET	443	49766	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.030159950 CET	49766	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.030792952 CET	49767	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.030867100 CET	443	49767	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.031068087 CET	49766	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.031224966 CET	443	49766	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.073354006 CET	49766	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.073388100 CET	443	49766	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.151556969 CET	49767	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.261004925 CET	49766	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.261487007 CET	443	49771	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.261954069 CET	49771	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.261980057 CET	443	49771	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.262016058 CET	443	49770	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.262018919 CET	443	49768	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.262026072 CET	443	49769	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.262253046 CET	49769	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.262267113 CET	443	49769	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.262391090 CET	49770	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.262418032 CET	443	49770	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.262497902 CET	49768	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.262506008 CET	443	49768	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.262785912 CET	443	49770	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.263062000 CET	443	49771	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.263123035 CET	49771	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.263164997 CET	49770	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.263237953 CET	443	49770	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.263344049 CET	443	49769	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.263387918 CET	49769	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.263581991 CET	443	49768	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.263641119 CET	49768	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.263703108 CET	49771	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.263778925 CET	443	49771	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.264154911 CET	49769	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.264236927 CET	443	49769	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.264627934 CET	49768	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.264693022 CET	443	49768	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.304685116 CET	49770	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.304785967 CET	49769	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.304819107 CET	443	49769	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.370248079 CET	49771	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.370297909 CET	443	49771	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.370330095 CET	49768	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.370357990 CET	443	49768	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.429632902 CET	49769	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.440984964 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.445008993 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.445070028 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.445106983 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.456582069 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.456657887 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.456692934 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.466013908 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.466147900 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.466176987 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.477905035 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.478822947 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.478844881 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.491276979 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.493531942 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.493561983 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.505100965 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.505172014 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.505209923 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.561011076 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.561144114 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.561181068 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.565049887 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.565116882 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.565145016 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.572860003 CET	49768	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.572997093 CET	49771	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.636007071 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.636102915 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.636149883 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.644146919 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.644784927 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.644797087 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.652467966 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.652954102 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.652961969 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.664664030 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.664846897 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.664860964 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.678271055 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.678792953 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.678838968 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.690152884 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.690329075 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.690339088 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.703795910 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.704555035 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.704566956 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.717246056 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.717680931 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.717689991 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.730976105 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.733710051 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.733724117 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.743544102 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.745011091 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.745023012 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.764178038 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.764961004 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.765499115 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.765515089 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.765708923 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.768992901 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.778903961 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.779035091 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.779067039 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.790513039 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.790616035 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.790642977 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.815521955 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.815583944 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.815609932 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.817930937 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.817975998 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.817991972 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.831444025 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.831677914 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.831698895 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.834338903 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.836070061 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.836091042 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.842051983 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.843620062 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.843637943 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.849719048 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.850011110 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.850022078 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.857564926 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.857852936 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.857860088 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.864928007 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.865711927 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.865717888 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.872311115 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.872927904 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.872934103 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.882631063 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.882848978 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.882883072 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.887378931 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.887530088 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.887542963 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.895081043 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.895338058 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.895345926 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.902767897 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.902884960 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.902892113 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.910161018 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.911015987 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.911026955 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.917732000 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.918579102 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.918590069 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.925340891 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.925986052 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.925998926 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.932981968 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.935367107 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.935379982 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.940387964 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.940675020 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.940685034 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.947803974 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.947877884 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.947890997 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.956918001 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.957710981 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.957724094 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.968714952 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.969708920 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.969721079 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.970536947 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.971740007 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.971748114 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.977354050 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.977709055 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.977718115 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.984282017 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.984611034 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.984622955 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.991197109 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:37.991339922 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:37.991352081 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:38.005487919 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:38.005547047 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:38.005702972 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:38.005712032 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:38.008513927 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:38.009141922 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:38.009149075 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:38.009711027 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:38.009875059 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:38.009880066 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:38.009983063 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:38.011230946 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:38.011569023 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:38.011830091 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:38.012329102 CET	49759	443	192.168.2.4	142.250.181.65
Dec 12, 2024 12:39:38.012347937 CET	443	49759	142.250.181.65	192.168.2.4
Dec 12, 2024 12:39:40.111691952 CET	49794	443	192.168.2.4	166.1.160.237
Dec 12, 2024 12:39:40.111736059 CET	443	49794	166.1.160.237	192.168.2.4
Dec 12, 2024 12:39:40.111934900 CET	49794	443	192.168.2.4	166.1.160.237
Dec 12, 2024 12:39:40.120343924 CET	49794	443	192.168.2.4	166.1.160.237
Dec 12, 2024 12:39:40.120358944 CET	443	49794	166.1.160.237	192.168.2.4
Dec 12, 2024 12:39:40.120399952 CET	443	49794	166.1.160.237	192.168.2.4
Dec 12, 2024 12:39:50.452002048 CET	443	49753	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:50.452081919 CET	443	49753	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:50.452143908 CET	49753	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:51.830213070 CET	443	49767	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:51.830286026 CET	443	49767	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:51.830631018 CET	49767	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:51.831088066 CET	443	49766	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:51.831227064 CET	443	49766	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:51.831347942 CET	49766	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:52.065155029 CET	443	49768	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:52.065232038 CET	443	49768	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:52.065350056 CET	49768	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:52.065804005 CET	443	49771	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:52.065871000 CET	443	49771	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:52.065887928 CET	443	49769	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:52.065917015 CET	49771	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:52.066034079 CET	443	49769	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:52.066157103 CET	49769	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:52.066658974 CET	443	49770	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:52.066755056 CET	443	49770	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:52.066792965 CET	49770	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:29.927122116 CET	49770	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:29.927148104 CET	49771	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:29.927160025 CET	443	49770	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:29.927186966 CET	443	49771	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:29.927196980 CET	49769	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:29.927202940 CET	443	49769	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:29.927226067 CET	49768	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:29.927232981 CET	443	49768	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:34.503829002 CET	49767	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:34.503863096 CET	443	49767	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:34.503912926 CET	49766	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:34.503987074 CET	443	49766	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:34.828651905 CET	49939	443	192.168.2.4	23.57.90.162
Dec 12, 2024 12:40:34.828699112 CET	443	49939	23.57.90.162	192.168.2.4
Dec 12, 2024 12:40:34.828773975 CET	49939	443	192.168.2.4	23.57.90.162
Dec 12, 2024 12:40:34.828953981 CET	49939	443	192.168.2.4	23.57.90.162
Dec 12, 2024 12:40:34.828969002 CET	443	49939	23.57.90.162	192.168.2.4
Dec 12, 2024 12:40:35.464823961 CET	49753	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:35.464848995 CET	443	49753	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:36.048612118 CET	443	49939	23.57.90.162	192.168.2.4
Dec 12, 2024 12:40:36.049062967 CET	49939	443	192.168.2.4	23.57.90.162
Dec 12, 2024 12:40:36.049092054 CET	443	49939	23.57.90.162	192.168.2.4
Dec 12, 2024 12:40:36.049458981 CET	443	49939	23.57.90.162	192.168.2.4
Dec 12, 2024 12:40:36.049760103 CET	49939	443	192.168.2.4	23.57.90.162
Dec 12, 2024 12:40:36.049829960 CET	443	49939	23.57.90.162	192.168.2.4
Dec 12, 2024 12:40:36.089756012 CET	49939	443	192.168.2.4	23.57.90.162
Dec 12, 2024 12:40:55.364110947 CET	443	49939	23.57.90.162	192.168.2.4
Dec 12, 2024 12:40:55.364233971 CET	443	49939	23.57.90.162	192.168.2.4
Dec 12, 2024 12:40:55.364351988 CET	49939	443	192.168.2.4	23.57.90.162

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 12, 2024 12:39:30.717015028 CET	59773	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:30.717191935 CET	62484	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:31.213359118 CET	53	59773	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:31.226594925 CET	53	62484	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:33.201775074 CET	65091	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:33.201952934 CET	63608	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:33.202421904 CET	50064	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:33.202574015 CET	54907	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:33.302668095 CET	54578	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:33.302803993 CET	60048	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:33.339274883 CET	53	63608	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:33.339363098 CET	53	54907	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:33.339548111 CET	53	50064	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:33.339663029 CET	53	65091	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:33.440141916 CET	53	54578	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:33.440166950 CET	53	60048	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:34.071419954 CET	62525	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:34.071547985 CET	59934	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:34.733088970 CET	50674	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:34.733283043 CET	63135	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:34.870663881 CET	53	50674	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:34.871366024 CET	53	63135	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:35.814326048 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.045782089 CET	49780	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.120471954 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.355550051 CET	49780	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.720967054 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.899475098 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:36.899543047 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:36.899637938 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:36.899673939 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:36.906397104 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.907249928 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.908859015 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:36.964251041 CET	49780	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.035227060 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.129853010 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.130090952 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.130109072 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.130127907 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.132174015 CET	49780	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.132517099 CET	49780	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.135989904 CET	49780	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.221134901 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.221220016 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.221249104 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.221277952 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.221707106 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.221779108 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.222377062 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.278497934 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.446492910 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.446599007 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.446615934 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.446630955 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.450249910 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.468925953 CET	49780	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.469177008 CET	49780	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.535696030 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.561635017 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:37.782599926 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:37.815969944 CET	49780	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:38.039308071 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:38.039633989 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:38.047908068 CET	49780	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:38.048542023 CET	49780	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:38.321646929 CET	58839	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:38.354258060 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:38.356928110 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:38.362140894 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:38.362312078 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:38.363667965 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:38.384589911 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:38.385077000 CET	49780	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:38.385276079 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:38.419158936 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:38.419493914 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:38.448117971 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:38.459326029 CET	53	58839	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:38.460769892 CET	60907	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:38.480303049 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:38.598618031 CET	53	60907	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:38.599674940 CET	57892	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:38.689532995 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:38.689640999 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:38.732990026 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:38.733004093 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:38.741451025 CET	53	57892	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:38.743623018 CET	53876	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:38.772315025 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:38.883157969 CET	53	53876	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:38.890327930 CET	55079	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:39.004805088 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:39.006247997 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:39.022150993 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:39.028819084 CET	53	55079	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:39.235246897 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:39.248543024 CET	63284	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:39.386487961 CET	53	63284	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:39.387444019 CET	50624	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:39.526590109 CET	53	50624	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:39.527504921 CET	65513	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:39.582324982 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:39.582528114 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:39.667068005 CET	53	65513	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:39.668489933 CET	58370	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:39.805560112 CET	53	58370	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:39.806736946 CET	52203	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:39.897192001 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:39.898129940 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:39.898459911 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:39.899095058 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:40.108597040 CET	53	52203	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:40.121417046 CET	53842	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:40.258939028 CET	53	53842	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:40.260082006 CET	62028	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:40.396560907 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:40.397068024 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:40.397387028 CET	53	62028	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:40.398062944 CET	49780	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:40.398590088 CET	49780	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:40.400568008 CET	56562	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:40.538494110 CET	53	56562	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:40.539489031 CET	57423	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:40.677759886 CET	53	57423	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:40.678868055 CET	59441	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:40.711674929 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:40.712615967 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:40.712626934 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:40.712831974 CET	443	53534	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:40.713203907 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:40.713380098 CET	53534	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:40.713455915 CET	443	49780	162.159.61.3	192.168.2.4
Dec 12, 2024 12:39:40.714816093 CET	49780	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:39:40.817760944 CET	53	59441	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:40.824137926 CET	61366	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:40.962874889 CET	53	61366	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:40.963969946 CET	64835	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:41.107537031 CET	53	64835	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:41.108458042 CET	53047	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:41.248020887 CET	53	53047	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:41.248960972 CET	60749	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:41.388452053 CET	53	60749	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:41.389337063 CET	60207	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:41.527380943 CET	53	60207	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:41.528841972 CET	59413	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:41.667229891 CET	53	59413	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:41.668133020 CET	64228	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:41.806519032 CET	53	64228	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:41.808123112 CET	62295	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:41.946284056 CET	53	62295	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:41.947643995 CET	53515	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:42.087973118 CET	53	53515	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:42.089438915 CET	63288	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:42.227440119 CET	53	63288	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:42.230813980 CET	55073	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:42.369126081 CET	53	55073	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:42.370353937 CET	62929	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:42.507992029 CET	53	62929	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:42.508888960 CET	60505	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:42.652952909 CET	53	60505	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:42.653899908 CET	55760	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:42.793426037 CET	53	55760	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:42.795238972 CET	51363	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:42.932960033 CET	53	51363	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:42.934438944 CET	52536	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:43.072197914 CET	53	52536	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:43.073117018 CET	55073	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:43.215599060 CET	53	55073	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:43.216433048 CET	57943	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:43.354329109 CET	53	57943	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:43.355953932 CET	51554	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:43.494229078 CET	53	51554	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:43.496572018 CET	62294	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:43.634804010 CET	53	62294	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:43.727031946 CET	53098	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:43.865269899 CET	53	53098	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:43.883837938 CET	55189	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:44.023560047 CET	53	55189	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:44.024525881 CET	57731	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:44.162394047 CET	53	57731	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:44.163427114 CET	51009	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:44.303742886 CET	53	51009	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:44.304866076 CET	53822	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:44.446652889 CET	53	53822	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:44.447676897 CET	65459	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:44.587322950 CET	53	65459	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:44.588237047 CET	56348	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:44.725836039 CET	53	56348	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:44.726829052 CET	55348	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:44.864578962 CET	53	55348	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:44.865499973 CET	51556	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:45.003242970 CET	53	51556	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:45.004172087 CET	52735	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:45.146435022 CET	53	52735	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:45.147484064 CET	59928	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:45.286248922 CET	53	59928	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:45.287283897 CET	56148	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:45.425657988 CET	53	56148	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:45.427175045 CET	53517	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:45.565676928 CET	53	53517	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:45.567576885 CET	65518	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:45.709789038 CET	53	65518	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:45.710850954 CET	53508	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:45.851412058 CET	53	53508	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:45.931979895 CET	50068	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:46.071286917 CET	53	50068	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:46.072280884 CET	62038	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:46.210243940 CET	53	62038	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:46.244302988 CET	63548	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:46.382292986 CET	53	63548	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:46.535074949 CET	58637	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:46.673813105 CET	53	58637	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:46.674742937 CET	62786	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:46.814174891 CET	53	62786	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:46.815033913 CET	57226	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:46.953279972 CET	53	57226	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:46.966346025 CET	52006	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:47.104269028 CET	53	52006	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:47.105304003 CET	52463	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:47.243530989 CET	53	52463	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:47.244453907 CET	61508	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:47.382709980 CET	53	61508	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:47.383649111 CET	61674	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:47.521821022 CET	53	61674	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:47.522766113 CET	49274	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:47.660418034 CET	53	49274	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:47.661426067 CET	59165	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:47.804549932 CET	53	59165	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:47.805402040 CET	65406	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:47.944046021 CET	53	65406	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:47.944937944 CET	59423	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:48.086189985 CET	53	59423	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:48.087264061 CET	63161	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:48.225871086 CET	53	63161	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:48.226788998 CET	61656	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:48.364590883 CET	53	61656	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:48.365511894 CET	64351	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:48.505076885 CET	53	64351	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:48.506041050 CET	51693	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:48.646718979 CET	53	51693	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:48.647665977 CET	54294	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:48.785638094 CET	53	54294	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:48.786442041 CET	53919	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:48.928081036 CET	53	53919	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:48.929080963 CET	64666	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:49.066636086 CET	53	64666	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:49.067540884 CET	52099	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:49.207910061 CET	53	52099	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:49.208853960 CET	55669	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:49.346456051 CET	53	55669	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:49.347405910 CET	63308	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:49.486062050 CET	53	63308	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:49.486998081 CET	64242	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:49.633876085 CET	53	64242	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:49.634836912 CET	65135	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:49.775734901 CET	53	65135	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:49.776854038 CET	51491	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:49.914540052 CET	53	51491	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:49.915546894 CET	65471	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:50.054264069 CET	53	65471	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:50.055473089 CET	55715	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:50.194796085 CET	53	55715	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:50.195810080 CET	60214	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:50.334358931 CET	53	60214	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:50.335628986 CET	55270	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:50.473623037 CET	53	55270	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:50.474530935 CET	63773	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:50.611799955 CET	53	63773	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:50.612828016 CET	53150	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:50.751226902 CET	53	53150	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:50.752615929 CET	57687	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:50.890836000 CET	53	57687	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:50.891871929 CET	51108	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:51.029644012 CET	53	51108	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:51.030710936 CET	53593	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:51.168338060 CET	53	53593	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:51.169210911 CET	59848	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:51.307775021 CET	53	59848	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:51.308778048 CET	63614	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:51.446891069 CET	53	63614	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:51.447849035 CET	59641	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:51.585625887 CET	53	59641	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:51.586558104 CET	57702	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:51.723726988 CET	53	57702	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:51.724663973 CET	63780	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:51.864265919 CET	53	63780	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:51.865067959 CET	60769	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:52.003809929 CET	53	60769	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:52.004808903 CET	60984	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:52.144774914 CET	53	60984	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:52.145692110 CET	55828	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:52.284183979 CET	53	55828	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:52.285068989 CET	55028	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:52.424012899 CET	53	55028	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:52.425019026 CET	64295	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:52.566930056 CET	53	64295	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:52.567856073 CET	51967	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:52.706291914 CET	53	51967	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:52.707297087 CET	59120	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:52.846849918 CET	53	59120	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:52.851623058 CET	50843	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:52.989720106 CET	53	50843	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:53.001436949 CET	50748	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:53.149811983 CET	53	50748	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:53.164354086 CET	58488	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:53.301719904 CET	53	58488	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:53.302659988 CET	62391	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:53.442020893 CET	53	62391	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:53.442945004 CET	53723	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:53.582910061 CET	53	53723	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:53.583976984 CET	50854	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:53.726485014 CET	53	50854	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:53.727354050 CET	50889	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:53.866579056 CET	53	50889	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:53.874562025 CET	54103	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:54.012623072 CET	53	54103	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:54.013686895 CET	57515	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:54.153152943 CET	53	57515	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:54.179281950 CET	63555	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:54.317471027 CET	53	63555	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:54.318329096 CET	57089	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:54.456052065 CET	53	57089	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:54.457004070 CET	56616	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:54.595421076 CET	53	56616	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:54.596329927 CET	64519	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:54.734460115 CET	53	64519	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:54.735275030 CET	54286	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:54.873497963 CET	53	54286	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:54.874485970 CET	59648	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:55.013807058 CET	53	59648	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:55.014628887 CET	50955	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:55.153533936 CET	53	50955	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:55.154551029 CET	52213	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:55.293823004 CET	53	52213	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:55.294919968 CET	64329	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:55.434581041 CET	53	64329	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:55.435492039 CET	65117	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:55.573231936 CET	53	65117	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:55.635130882 CET	62660	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:55.772279024 CET	53	62660	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:55.880628109 CET	52516	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:56.020046949 CET	53	52516	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:56.020982027 CET	63493	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:56.161674023 CET	53	63493	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:56.162533998 CET	62045	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:56.301711082 CET	53	62045	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:56.302783966 CET	55512	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:56.440660000 CET	53	55512	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:56.442008972 CET	62290	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:56.579760075 CET	53	62290	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:56.580703020 CET	55941	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:56.718626976 CET	53	55941	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:56.719634056 CET	59044	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:56.857481003 CET	53	59044	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:56.858362913 CET	49387	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:56.996449947 CET	53	49387	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:56.997467041 CET	58151	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:57.135802984 CET	53	58151	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:57.136645079 CET	53732	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:57.275304079 CET	53	53732	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:57.276304960 CET	56923	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:57.414083958 CET	53	56923	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:57.415174007 CET	60498	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:57.562443972 CET	53	60498	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:57.563468933 CET	52709	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:57.700649023 CET	53	52709	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:57.701575041 CET	53114	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:57.839415073 CET	53	53114	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:57.840337992 CET	64151	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:57.978535891 CET	53	64151	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:57.979895115 CET	52229	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:58.121004105 CET	53	52229	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:58.121871948 CET	65531	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:58.259814024 CET	53	65531	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:58.260860920 CET	52604	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:58.400468111 CET	53	52604	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:58.401396990 CET	61306	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:58.541580915 CET	53	61306	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:58.542454958 CET	65190	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:58.680263042 CET	53	65190	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:58.681109905 CET	62809	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:58.819111109 CET	53	62809	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:58.820112944 CET	55331	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:58.958231926 CET	53	55331	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:58.959301949 CET	57584	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:59.096602917 CET	53	57584	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:59.097497940 CET	63944	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:59.236109972 CET	53	63944	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:59.237011909 CET	61631	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:59.374720097 CET	53	61631	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:59.375614882 CET	52266	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:59.516199112 CET	53	52266	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:59.517124891 CET	49488	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:59.656322956 CET	53	49488	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:59.657347918 CET	57413	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:59.795356989 CET	53	57413	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:59.796341896 CET	55695	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:39:59.934830904 CET	53	55695	1.1.1.1	192.168.2.4
Dec 12, 2024 12:39:59.935756922 CET	65396	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:00.074678898 CET	53	65396	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:00.075756073 CET	55711	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:00.216344118 CET	53	55711	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:00.217354059 CET	53120	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:00.355386972 CET	53	53120	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:00.356551886 CET	50188	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:00.496102095 CET	53	50188	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:00.496890068 CET	54212	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:00.634954929 CET	53	54212	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:00.635833979 CET	52422	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:00.776995897 CET	53	52422	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:00.777932882 CET	60047	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:00.917996883 CET	53	60047	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:00.918817043 CET	61464	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:01.057805061 CET	53	61464	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:01.058787107 CET	50609	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:01.200155973 CET	53	50609	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:01.201045990 CET	56913	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:01.340766907 CET	53	56913	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:01.341655970 CET	52671	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:01.481746912 CET	53	52671	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:01.482707977 CET	56217	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:01.633454084 CET	53	56217	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:01.634394884 CET	51318	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:01.773530960 CET	53	51318	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:01.774349928 CET	50758	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:01.912513018 CET	53	50758	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:01.913420916 CET	54728	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:02.053704023 CET	53	54728	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:02.054565907 CET	63118	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:02.193650961 CET	53	63118	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:02.194605112 CET	62663	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:02.334259987 CET	53	62663	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:02.335128069 CET	57374	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:02.474699020 CET	53	57374	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:02.475579023 CET	58237	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:02.616307974 CET	53	58237	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:02.617297888 CET	61522	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:02.755728960 CET	53	61522	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:02.756670952 CET	53784	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:02.896790028 CET	53	53784	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:02.897823095 CET	56551	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:03.039674044 CET	53	56551	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:03.040504932 CET	54157	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:03.182440996 CET	53	54157	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:03.183597088 CET	62546	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:03.327227116 CET	53	62546	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:03.328212023 CET	54744	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:03.466377974 CET	53	54744	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:03.467339993 CET	63615	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:03.606642008 CET	53	63615	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:03.607558966 CET	54016	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:03.746618032 CET	53	54016	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:03.747591972 CET	62487	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:03.888614893 CET	53	62487	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:03.892363071 CET	56015	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:04.033910036 CET	53	56015	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:04.034723997 CET	62722	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:04.174097061 CET	53	62722	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:04.175174952 CET	64878	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:04.313271999 CET	53	64878	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:04.314294100 CET	54400	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:04.454298973 CET	53	54400	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:04.455173016 CET	62393	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:04.595500946 CET	53	62393	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:04.596431971 CET	57251	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:04.736592054 CET	53	57251	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:04.737432957 CET	57671	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:04.876216888 CET	53	57671	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:04.879297018 CET	56075	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:05.017059088 CET	53	56075	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:05.017947912 CET	54957	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:05.155597925 CET	53	54957	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:05.156486034 CET	54947	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:05.294807911 CET	53	54947	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:05.295710087 CET	59314	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:05.436367035 CET	53	59314	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:05.437237978 CET	58826	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:05.575563908 CET	53	58826	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:05.577156067 CET	49156	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:05.714382887 CET	53	49156	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:05.715487957 CET	59876	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:05.853689909 CET	53	59876	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:05.855057001 CET	53739	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:05.993662119 CET	53	53739	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:05.994529009 CET	49924	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:06.133305073 CET	53	49924	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:06.134196997 CET	51377	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:06.273085117 CET	53	51377	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:06.274147034 CET	58252	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:06.414376020 CET	53	58252	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:06.422023058 CET	61727	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:06.560014963 CET	53	61727	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:06.569583893 CET	55742	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:06.707207918 CET	53	55742	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:06.708102942 CET	51161	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:06.846270084 CET	53	51161	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:06.847140074 CET	62181	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:06.986044884 CET	53	62181	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:06.986886024 CET	53773	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:07.125009060 CET	53	53773	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:07.126029968 CET	53314	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:07.267436981 CET	53	53314	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:07.268239975 CET	56614	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:07.407429934 CET	53	56614	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:07.408454895 CET	57492	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:07.547228098 CET	53	57492	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:07.548535109 CET	51322	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:07.686871052 CET	53	51322	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:07.688231945 CET	56383	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:07.829699993 CET	53	56383	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:07.830609083 CET	58209	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:07.968666077 CET	53	58209	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:07.969629049 CET	51289	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:08.108680010 CET	53	51289	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:08.109692097 CET	52323	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:08.248590946 CET	53	52323	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:08.249509096 CET	58139	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:08.387437105 CET	53	58139	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:08.388271093 CET	65444	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:08.529805899 CET	53	65444	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:08.530668974 CET	53303	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:08.669043064 CET	53	53303	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:08.670538902 CET	56624	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:08.810774088 CET	53	56624	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:08.811573982 CET	64044	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:08.950865030 CET	53	64044	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:08.951735020 CET	58345	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:09.089803934 CET	53	58345	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:09.090732098 CET	59991	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:09.229872942 CET	53	59991	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:09.231095076 CET	49988	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:09.470444918 CET	53	49988	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:09.471311092 CET	54370	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:09.611344099 CET	53	54370	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:09.612278938 CET	52101	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:09.750823975 CET	53	52101	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:09.751733065 CET	56083	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:09.890121937 CET	53	56083	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:09.891091108 CET	53628	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:10.028938055 CET	53	53628	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:10.030026913 CET	52786	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:10.167644024 CET	53	52786	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:10.168531895 CET	59629	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:10.309609890 CET	53	59629	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:10.310470104 CET	51403	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:10.448574066 CET	53	51403	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:10.449446917 CET	52174	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:10.587179899 CET	53	52174	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:10.588176966 CET	61232	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:10.726233006 CET	53	61232	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:10.727128983 CET	64697	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:10.867252111 CET	53	64697	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:10.868180037 CET	59182	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:11.006334066 CET	53	59182	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:11.007286072 CET	65228	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:11.147263050 CET	53	65228	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:11.148206949 CET	49960	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:11.285356045 CET	53	49960	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:11.286164045 CET	65344	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:11.423811913 CET	53	65344	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:11.425198078 CET	61702	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:11.563404083 CET	53	61702	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:11.564327955 CET	49679	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:11.704737902 CET	53	49679	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:11.705718994 CET	62199	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:11.843457937 CET	53	62199	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:11.844294071 CET	58326	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:11.982060909 CET	53	58326	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:11.983000040 CET	62574	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:12.122474909 CET	53	62574	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:12.123431921 CET	63821	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:12.261440992 CET	53	63821	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:12.262399912 CET	59682	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:12.399595022 CET	53	59682	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:12.400619030 CET	58625	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:12.539948940 CET	53	58625	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:12.540941954 CET	63292	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:12.685096979 CET	53	63292	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:12.686113119 CET	55293	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:12.833193064 CET	53	55293	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:12.834745884 CET	64319	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:12.974509954 CET	53	64319	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:12.975445032 CET	64284	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:13.113514900 CET	53	64284	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:13.114926100 CET	53606	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:13.254410028 CET	53	53606	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:13.255475998 CET	52566	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:13.394725084 CET	53	52566	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:13.395818949 CET	54420	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:13.534909964 CET	53	54420	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:13.536051989 CET	49604	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:13.674173117 CET	53	49604	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:13.675048113 CET	58256	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:13.813424110 CET	53	58256	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:13.814486027 CET	55157	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:13.953078985 CET	53	55157	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:13.954049110 CET	57544	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:14.091624975 CET	53	57544	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:14.092571974 CET	61120	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:14.230655909 CET	53	61120	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:14.231497049 CET	55203	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:14.372807026 CET	53	55203	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:14.373788118 CET	52229	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:14.511610031 CET	53	52229	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:14.512675047 CET	55422	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:14.650494099 CET	53	55422	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:14.651439905 CET	64368	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:14.790476084 CET	53	64368	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:14.791522026 CET	62062	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:14.929711103 CET	53	62062	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:14.930761099 CET	52973	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:15.069323063 CET	53	52973	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:15.070269108 CET	52106	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:15.208233118 CET	53	52106	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:15.209328890 CET	53530	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:15.347270012 CET	53	53530	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:15.348315954 CET	51653	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:15.487612009 CET	53	51653	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:15.488683939 CET	57145	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:15.627482891 CET	53	57145	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:15.628479958 CET	54977	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:15.766694069 CET	53	54977	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:15.767600060 CET	54394	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:15.906567097 CET	53	54394	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:15.907458067 CET	64207	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:16.046044111 CET	53	64207	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:16.046917915 CET	63669	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:16.185714006 CET	53	63669	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:16.187024117 CET	50706	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:16.328399897 CET	53	50706	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:16.329363108 CET	54239	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:16.469856024 CET	53	54239	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:16.470988035 CET	61205	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:16.608323097 CET	53	61205	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:16.609150887 CET	61371	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:16.748810053 CET	53	61371	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:16.750286102 CET	60103	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:16.888505936 CET	53	60103	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:16.890366077 CET	56562	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:17.028661013 CET	53	56562	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:17.029673100 CET	59462	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:17.170692921 CET	53	59462	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:17.171900034 CET	51772	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:17.310868979 CET	53	51772	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:17.311822891 CET	55356	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:17.449527979 CET	53	55356	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:17.450464010 CET	61343	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:17.588299036 CET	53	61343	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:17.589143991 CET	50278	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:17.727040052 CET	53	50278	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:17.728055954 CET	57474	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:17.866724968 CET	53	57474	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:17.867873907 CET	63686	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:18.007939100 CET	53	63686	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:18.008928061 CET	58929	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:18.147284031 CET	53	58929	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:18.148133039 CET	55202	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:18.286998987 CET	53	55202	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:18.287971020 CET	52091	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:18.425657988 CET	53	52091	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:18.426460028 CET	60159	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:18.565023899 CET	53	60159	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:18.566123962 CET	56917	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:18.704917908 CET	53	56917	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:18.705775976 CET	54319	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:18.843652010 CET	53	54319	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:18.844664097 CET	58272	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:18.981503010 CET	53	58272	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:18.982316017 CET	65144	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:19.120848894 CET	53	65144	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:19.121889114 CET	54870	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:19.259741068 CET	53	54870	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:19.260688066 CET	61776	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:19.399678946 CET	53	61776	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:19.400516987 CET	57885	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:19.537749052 CET	53	57885	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:19.538593054 CET	60871	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:19.676744938 CET	53	60871	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:19.677710056 CET	57784	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:19.816216946 CET	53	57784	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:19.817075968 CET	51787	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:19.955022097 CET	53	51787	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:19.955892086 CET	53591	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:20.092924118 CET	53	53591	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:20.093856096 CET	63387	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:20.231734991 CET	53	63387	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:20.232577085 CET	62010	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:20.370673895 CET	53	62010	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:20.371468067 CET	61757	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:20.509453058 CET	53	61757	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:20.510905027 CET	64296	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:20.648855925 CET	53	64296	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:20.650219917 CET	58639	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:20.791949034 CET	53	58639	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:20.792948961 CET	53818	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:20.930565119 CET	53	53818	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:20.931544065 CET	63099	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:21.069839954 CET	53	63099	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:21.070799112 CET	55239	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:21.211519003 CET	53	55239	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:21.212469101 CET	60725	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:21.349967003 CET	53	60725	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:21.350925922 CET	55496	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:21.488749981 CET	53	55496	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:21.489573956 CET	54406	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:21.629743099 CET	53	54406	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:21.630616903 CET	52165	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:21.769593954 CET	53	52165	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:21.770618916 CET	50774	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:21.909154892 CET	53	50774	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:21.910039902 CET	52823	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:22.048259974 CET	53	52823	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:22.050107956 CET	49913	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:22.190874100 CET	53	49913	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:22.191870928 CET	50144	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:22.330085993 CET	53	50144	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:22.331118107 CET	57057	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:22.561654091 CET	53	57057	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:22.562578917 CET	53760	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:22.805265903 CET	53	53760	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:22.806235075 CET	64276	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:22.943981886 CET	53	64276	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:22.944978952 CET	51002	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:23.083638906 CET	53	51002	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:23.084557056 CET	55197	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:23.223342896 CET	53	55197	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:23.224309921 CET	65503	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:23.368911028 CET	53	65503	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:23.369852066 CET	64996	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:23.507227898 CET	53	64996	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:23.508254051 CET	59161	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:23.646732092 CET	53	59161	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:23.649575949 CET	63830	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:23.788724899 CET	53	63830	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:23.789860964 CET	49538	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:23.927884102 CET	53	49538	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:23.928888083 CET	57964	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:24.066911936 CET	53	57964	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:24.067873955 CET	64760	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:24.206629992 CET	53	64760	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:24.207545996 CET	57433	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:24.344966888 CET	53	57433	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:24.345808983 CET	60118	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:24.484807014 CET	53	60118	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:24.485867023 CET	60944	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:24.625319004 CET	53	60944	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:24.626218081 CET	57541	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:24.764333010 CET	53	57541	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:24.769141912 CET	49257	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:24.907859087 CET	53	49257	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:24.908859968 CET	49751	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:25.047593117 CET	53	49751	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:25.048791885 CET	54886	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:25.186980963 CET	53	54886	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:25.187891006 CET	60294	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:25.326884985 CET	53	60294	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:25.328008890 CET	49858	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:25.466444016 CET	53	49858	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:25.467283964 CET	61721	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:25.606134892 CET	53	61721	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:25.607585907 CET	57376	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:25.747456074 CET	53	57376	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:25.748483896 CET	61894	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:25.886337996 CET	53	61894	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:25.887397051 CET	54487	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:26.026355028 CET	53	54487	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:26.027591944 CET	54902	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:26.165481091 CET	53	54902	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:26.166331053 CET	52800	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:26.304265976 CET	53	52800	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:26.305217981 CET	64959	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:26.444134951 CET	53	64959	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:26.445159912 CET	63292	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:26.585232973 CET	53	63292	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:26.586266994 CET	53352	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:26.723717928 CET	53	53352	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:26.725019932 CET	59762	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:26.866918087 CET	53	59762	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:26.868139029 CET	63762	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:27.011168003 CET	53	63762	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:27.012073994 CET	59255	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:27.150264025 CET	53	59255	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:27.151328087 CET	59769	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:27.289371967 CET	53	59769	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:27.290342093 CET	54657	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:27.428045034 CET	53	54657	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:27.429007053 CET	55660	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:27.569535017 CET	53	55660	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:27.570677996 CET	57399	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:27.707997084 CET	53	57399	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:27.708981037 CET	62730	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:27.847235918 CET	53	62730	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:27.848144054 CET	55861	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:27.985867023 CET	53	55861	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:27.986835003 CET	60553	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:28.125940084 CET	53	60553	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:28.127170086 CET	61827	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:28.265052080 CET	53	61827	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:28.267501116 CET	53404	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:28.406131029 CET	53	53404	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:28.407428980 CET	54568	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:28.546235085 CET	53	54568	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:28.547127008 CET	54603	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:28.685004950 CET	53	54603	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:28.686032057 CET	54702	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:28.824062109 CET	53	54702	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:28.825078011 CET	55037	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:28.963453054 CET	53	55037	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:28.964570045 CET	57172	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:29.102755070 CET	53	57172	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:29.103749990 CET	64339	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:29.243140936 CET	53	64339	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:29.244179010 CET	49794	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:29.381978989 CET	53	49794	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:29.382853031 CET	55260	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:29.523128986 CET	53	55260	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:29.524154902 CET	62846	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:29.662738085 CET	53	62846	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:29.663762093 CET	52719	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:29.803415060 CET	53	52719	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:29.804266930 CET	49907	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:29.943797112 CET	53	49907	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:29.944830894 CET	58870	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:30.083329916 CET	53	58870	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:30.084352016 CET	57104	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:30.223035097 CET	53	57104	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:30.224000931 CET	54075	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:30.362081051 CET	53	54075	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:30.363003969 CET	65118	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:30.502520084 CET	53	65118	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:30.503482103 CET	56375	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:30.641361952 CET	53	56375	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:30.642405033 CET	52718	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:30.780987024 CET	53	52718	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:30.781968117 CET	53175	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:30.919996977 CET	53	53175	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:30.921075106 CET	50297	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:31.061239958 CET	53	50297	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:31.062247038 CET	49902	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:31.199678898 CET	53	49902	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:31.201191902 CET	56565	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:31.338558912 CET	53	56565	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:31.339624882 CET	52806	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:31.479067087 CET	53	52806	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:31.480123043 CET	49916	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:31.618882895 CET	53	49916	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:31.620127916 CET	50766	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:31.760432005 CET	53	50766	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:31.761465073 CET	59014	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:31.899796963 CET	53	59014	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:31.900794029 CET	59700	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:32.039700985 CET	53	59700	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:32.040924072 CET	64544	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:32.179822922 CET	53	64544	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:32.180701017 CET	52713	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:32.319077969 CET	53	52713	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:32.320074081 CET	62693	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:32.459153891 CET	53	62693	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:32.460138083 CET	60474	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:32.598628998 CET	53	60474	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:32.599690914 CET	50762	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:32.736792088 CET	53	50762	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:32.737742901 CET	49948	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:32.875602007 CET	53	49948	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:32.876492977 CET	64642	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:32.981532097 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:32.981661081 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:32.981910944 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:32.982024908 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:33.014410973 CET	53	64642	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:33.023685932 CET	50311	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:33.168608904 CET	53	50311	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:33.169502020 CET	53765	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:33.307229042 CET	53	53765	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:33.309427977 CET	60599	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:33.447204113 CET	53	60599	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:33.448205948 CET	50875	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:33.593308926 CET	53	50875	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:33.594480991 CET	65431	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:33.733083963 CET	53	65431	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:33.734365940 CET	52317	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:34.000703096 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:34.000754118 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:34.001279116 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:34.001316071 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:34.067087889 CET	443	55989	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:34.067692041 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:34.093872070 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:34.501171112 CET	53	52317	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:34.502217054 CET	55500	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:34.504757881 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:34.504846096 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:34.649068117 CET	53	55500	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:34.650187969 CET	57887	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:34.677803040 CET	443	55989	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:34.677819014 CET	443	55989	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:34.677826881 CET	443	55989	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:34.677831888 CET	443	55989	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:34.678247929 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:34.678335905 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:34.678369045 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:34.706094980 CET	443	55989	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:34.706118107 CET	443	55989	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:34.706520081 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:34.790333986 CET	53	57887	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:34.791301012 CET	62960	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:34.826761007 CET	443	55989	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:34.827651978 CET	443	55989	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:34.827662945 CET	443	55989	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:34.828191042 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:34.929666996 CET	53	62960	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:34.930738926 CET	55638	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:34.992295980 CET	443	55989	162.159.61.3	192.168.2.4
Dec 12, 2024 12:40:35.028074980 CET	55989	443	192.168.2.4	162.159.61.3
Dec 12, 2024 12:40:35.068492889 CET	53	55638	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:35.069307089 CET	60216	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:35.208312988 CET	53	60216	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:35.209467888 CET	58024	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:35.348998070 CET	53	58024	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:35.349982023 CET	53226	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:35.489814043 CET	53	53226	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:35.490729094 CET	64696	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:35.628926992 CET	53	64696	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:35.629936934 CET	59109	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:35.769023895 CET	53	59109	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:35.770131111 CET	59996	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:35.908073902 CET	53	59996	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:35.909035921 CET	55395	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:36.051439047 CET	53	55395	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:36.052401066 CET	52305	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:36.191255093 CET	53	52305	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:36.192358971 CET	63273	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:36.329689026 CET	53	63273	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:36.330540895 CET	55449	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:36.468743086 CET	53	55449	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:36.469686985 CET	64194	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:36.611115932 CET	53	64194	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:36.612077951 CET	53383	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:36.751492023 CET	53	53383	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:36.752465010 CET	59074	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:36.890825033 CET	53	59074	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:36.891658068 CET	59406	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:37.029700994 CET	53	59406	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:37.030572891 CET	59190	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:37.168344021 CET	53	59190	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:37.169189930 CET	51912	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:37.307066917 CET	53	51912	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:37.308262110 CET	58522	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:37.446177006 CET	53	58522	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:37.447189093 CET	53856	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:37.585937977 CET	53	53856	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:37.586986065 CET	50373	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:37.724870920 CET	53	50373	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:37.725898027 CET	50590	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:37.863481998 CET	53	50590	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:37.864593029 CET	54923	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:38.002224922 CET	53	54923	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:38.003102064 CET	57986	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:38.141669989 CET	53	57986	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:38.142667055 CET	65180	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:38.281311989 CET	53	65180	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:38.282377005 CET	54419	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:38.420061111 CET	53	54419	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:38.421067953 CET	61240	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:38.559119940 CET	53	61240	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:38.560003042 CET	55358	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:38.697702885 CET	53	55358	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:38.699059963 CET	53924	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:38.837445021 CET	53	53924	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:38.838326931 CET	52079	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:38.979048014 CET	53	52079	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:38.980324984 CET	56728	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:39.118499041 CET	53	56728	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:39.119379997 CET	57109	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:39.257278919 CET	53	57109	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:39.258338928 CET	63778	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:39.397475958 CET	53	63778	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:39.398650885 CET	58352	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:39.536083937 CET	53	58352	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:39.537085056 CET	56439	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:39.675501108 CET	53	56439	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:39.676501036 CET	55775	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:39.815778971 CET	53	55775	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:39.816737890 CET	54280	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:39.955409050 CET	53	54280	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:39.956262112 CET	65532	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:40.094316959 CET	53	65532	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:40.095424891 CET	51603	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:40.235852003 CET	53	51603	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:40.238980055 CET	50494	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:40.377216101 CET	53	50494	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:40.378535032 CET	56117	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:40.516390085 CET	53	56117	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:40.517236948 CET	62568	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:40.657104969 CET	53	62568	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:40.658077955 CET	55184	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:40.796086073 CET	53	55184	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:40.797198057 CET	49189	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:40.936116934 CET	53	49189	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:40.937072992 CET	56731	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:41.074522972 CET	53	56731	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:41.075583935 CET	59207	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:41.213685989 CET	53	59207	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:41.214581013 CET	57846	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:41.352590084 CET	53	57846	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:41.353579998 CET	55254	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:41.495095968 CET	53	55254	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:41.496038914 CET	50968	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:41.634274006 CET	53	50968	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:41.635385990 CET	65097	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:41.773171902 CET	53	65097	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:41.774295092 CET	50354	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:41.912395000 CET	53	50354	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:41.913372040 CET	54661	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:42.052824974 CET	53	54661	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:42.053770065 CET	50293	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:42.194329023 CET	53	50293	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:42.195277929 CET	57944	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:42.339226961 CET	53	57944	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:42.340224028 CET	61871	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:42.561146975 CET	53	61871	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:42.562129974 CET	64154	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:42.779859066 CET	53	64154	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:42.780745983 CET	61196	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:43.095302105 CET	53	61196	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:43.096173048 CET	54765	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:43.320029020 CET	53	54765	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:43.320945978 CET	61463	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:43.545092106 CET	53	61463	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:43.545983076 CET	60335	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:43.765753984 CET	53	60335	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:43.766747952 CET	64461	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:43.990215063 CET	53	64461	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:43.991193056 CET	58000	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:44.214428902 CET	53	58000	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:44.215430975 CET	62083	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:44.440306902 CET	53	62083	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:44.441231012 CET	50792	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:44.659754038 CET	53	50792	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:44.660624981 CET	53173	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:44.894233942 CET	53	53173	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:44.895175934 CET	55241	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:45.057976007 CET	55241	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:45.120012045 CET	53	55241	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:45.121175051 CET	63282	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:45.195164919 CET	53	55241	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:45.276735067 CET	63282	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:45.341625929 CET	53	63282	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:45.342686892 CET	63532	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:45.414223909 CET	53	63282	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:45.511149883 CET	63532	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:45.567322016 CET	53	63532	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:45.568119049 CET	60794	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:45.730990887 CET	60794	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:45.839505911 CET	53	63532	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:46.011648893 CET	53	60794	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:46.011665106 CET	53	60794	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:46.012550116 CET	59621	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:46.167412996 CET	59621	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:46.233128071 CET	53	59621	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:46.233867884 CET	57255	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:46.310405016 CET	53	59621	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:46.417093992 CET	57255	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:46.451884985 CET	53	57255	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:46.452903032 CET	60632	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:46.555432081 CET	53	57255	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:46.605225086 CET	60632	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:46.674559116 CET	53	60632	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:46.675491095 CET	52460	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:46.742867947 CET	53	60632	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:46.823299885 CET	52460	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:46.896384001 CET	53	52460	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:46.897604942 CET	52009	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:46.960333109 CET	53	52460	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:47.042016029 CET	52009	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:47.122308969 CET	53	52009	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:47.123470068 CET	64880	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:47.181288958 CET	53	52009	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:47.276612043 CET	64880	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:47.351644039 CET	53	64880	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:47.352755070 CET	56447	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:47.413954020 CET	53	64880	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:47.495301008 CET	56447	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:47.577178001 CET	53	56447	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:47.578331947 CET	53827	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:47.633697033 CET	53	56447	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:47.729702950 CET	53827	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:47.803168058 CET	53	53827	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:47.804353952 CET	62937	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:47.866679907 CET	53	53827	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:47.948493004 CET	62937	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:48.021205902 CET	53	62937	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:48.022510052 CET	56582	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:48.086682081 CET	53	62937	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:48.171530962 CET	56582	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:48.242093086 CET	53	56582	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:48.246735096 CET	58102	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:48.308984995 CET	53	56582	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:48.405528069 CET	58102	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:48.466517925 CET	53	58102	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:48.467571020 CET	62544	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:48.543515921 CET	53	58102	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:48.636188030 CET	62544	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:48.781291008 CET	53	62544	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:48.781303883 CET	53	62544	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:48.782289982 CET	57820	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:48.933377981 CET	57820	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:49.005829096 CET	53	57820	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:49.007009029 CET	49358	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:49.070853949 CET	53	57820	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:49.152493954 CET	49358	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:49.225773096 CET	53	49358	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:49.226810932 CET	64156	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:49.290213108 CET	53	49358	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:49.370878935 CET	64156	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:49.444696903 CET	53	64156	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:49.445734024 CET	62130	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:49.508300066 CET	53	64156	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:49.589315891 CET	62130	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:49.759414911 CET	53	62130	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:49.759452105 CET	53	62130	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:49.760421991 CET	64802	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:49.901842117 CET	64802	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:49.982146978 CET	53	64802	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:49.983109951 CET	51322	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:50.039429903 CET	53	64802	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:50.141782045 CET	51322	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:50.267559052 CET	53	51322	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:50.270812988 CET	51976	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:50.387836933 CET	53	51322	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:50.432961941 CET	51976	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:50.499265909 CET	53	51976	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:50.505486965 CET	53411	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:50.570178986 CET	53	51976	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:50.651959896 CET	53411	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:50.730995893 CET	53	53411	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:50.731945038 CET	56756	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:50.789844036 CET	53	53411	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:50.890425920 CET	56756	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:50.949321032 CET	53	56756	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:50.950491905 CET	58241	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:51.028157949 CET	53	56756	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:51.107742071 CET	58241	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:51.168597937 CET	53	58241	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:51.169718981 CET	59061	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:51.245646000 CET	53	58241	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:51.339488983 CET	59061	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:51.390099049 CET	53	59061	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:51.391350985 CET	52298	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:51.477226973 CET	53	59061	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:51.542686939 CET	52298	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:51.610959053 CET	53	52298	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:51.611865997 CET	64959	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:51.680131912 CET	53	52298	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:51.776216984 CET	64959	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:51.837594032 CET	53	64959	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:51.838521957 CET	64074	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:51.914937973 CET	53	64959	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:51.979506016 CET	64074	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:52.149333954 CET	53	64074	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:52.149355888 CET	53	64074	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:52.150448084 CET	55257	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:52.291934967 CET	55257	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:52.458268881 CET	53	55257	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:52.458386898 CET	53	55257	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:52.459379911 CET	64420	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:52.605484962 CET	64420	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:52.676897049 CET	53	64420	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:52.678025961 CET	58908	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:52.742965937 CET	53	64420	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:52.823156118 CET	58908	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:52.895627975 CET	53	58908	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:52.896967888 CET	64048	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:52.960901022 CET	53	58908	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:53.041960955 CET	64048	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:53.114124060 CET	53	64048	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:53.115159988 CET	64974	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:53.179594040 CET	53	64048	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:53.260647058 CET	64974	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:53.429649115 CET	53	64974	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:53.429760933 CET	53	64974	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:53.430736065 CET	65232	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:53.594845057 CET	65232	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:53.740422010 CET	53	65232	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:53.740457058 CET	53	65232	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:53.741311073 CET	64636	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:53.904939890 CET	64636	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:53.958349943 CET	53	64636	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:53.959445953 CET	56705	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:54.042996883 CET	53	64636	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:54.110929966 CET	56705	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:54.185683966 CET	53	56705	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:54.186562061 CET	61194	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:54.249171972 CET	53	56705	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:54.339303017 CET	61194	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:54.406563997 CET	53	61194	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:54.407769918 CET	56252	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:54.476712942 CET	53	61194	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:54.560009003 CET	56252	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:54.723354101 CET	53	56252	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:54.723376036 CET	53	56252	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:54.724349022 CET	49381	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:54.870942116 CET	49381	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:54.944084883 CET	53	49381	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:54.945101023 CET	64636	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:55.008760929 CET	53	49381	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:55.089401007 CET	64636	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:55.168231964 CET	53	64636	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:55.169217110 CET	54308	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:55.226914883 CET	53	64636	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:55.323761940 CET	54308	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:55.389137983 CET	53	54308	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:55.390111923 CET	52965	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:55.461618900 CET	53	54308	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:55.546771049 CET	52965	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:55.613471985 CET	53	52965	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:55.618846893 CET	56573	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:55.684582949 CET	53	52965	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:55.776777029 CET	56573	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:55.926477909 CET	53	56573	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:55.926496029 CET	53	56573	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:55.927548885 CET	63536	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:56.089131117 CET	63536	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:56.151570082 CET	53	63536	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:56.152893066 CET	59822	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:56.226715088 CET	53	63536	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:56.307909012 CET	59822	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:56.374299049 CET	53	59822	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:56.375364065 CET	50866	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:56.445318937 CET	53	59822	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:56.527436972 CET	50866	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:56.683257103 CET	53	50866	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:56.683280945 CET	53	50866	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:56.684238911 CET	62500	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:56.854806900 CET	62500	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:56.904742956 CET	53	62500	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:56.906761885 CET	62732	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:56.992517948 CET	53	62500	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:57.073836088 CET	62732	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:57.215555906 CET	53	62732	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:57.215594053 CET	53	62732	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:57.216855049 CET	55513	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:57.385848045 CET	55513	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:57.528251886 CET	53	55513	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:57.528641939 CET	53	55513	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:57.529350996 CET	64759	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:57.682698011 CET	64759	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:57.840576887 CET	53	64759	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:57.840594053 CET	53	64759	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:57.841624022 CET	57666	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:57.995023012 CET	57666	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:58.058716059 CET	53	57666	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:58.059638977 CET	49732	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:58.132756948 CET	53	57666	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:58.214298010 CET	49732	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:58.287995100 CET	53	49732	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:58.288897038 CET	58401	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:58.352499008 CET	53	49732	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:58.432455063 CET	58401	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:58.603944063 CET	53	58401	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:58.603982925 CET	53	58401	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:58.604952097 CET	54789	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:58.760672092 CET	54789	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:58.827286959 CET	53	54789	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:58.828531981 CET	53999	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:58.898380041 CET	53	54789	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:58.979389906 CET	53999	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:59.143666983 CET	53	53999	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:59.143696070 CET	53	53999	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:59.145867109 CET	56320	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:59.309870005 CET	56320	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:59.365216970 CET	53	56320	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:59.366756916 CET	54021	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:59.447280884 CET	53	56320	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:59.533942938 CET	54021	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:59.585164070 CET	53	54021	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:59.586328030 CET	50396	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:59.674609900 CET	53	54021	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:59.745888948 CET	50396	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:59.803380966 CET	53	50396	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:59.805815935 CET	54553	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:40:59.883286953 CET	53	50396	1.1.1.1	192.168.2.4
Dec 12, 2024 12:40:59.948023081 CET	54553	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:00.024219036 CET	53	54553	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:00.026382923 CET	63860	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:00.085387945 CET	53	54553	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:00.182441950 CET	63860	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:00.246079922 CET	53	63860	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:00.247055054 CET	59744	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:00.320354939 CET	53	63860	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:00.401230097 CET	59744	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:00.478558064 CET	53	59744	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:00.479760885 CET	58743	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:00.582319975 CET	53	59744	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:00.711791992 CET	53	58743	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:00.723653078 CET	60798	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:00.876013994 CET	60798	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:01.040132046 CET	53	60798	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:01.040146112 CET	53	60798	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:01.040985107 CET	62570	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:01.189493895 CET	62570	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:01.261585951 CET	53	62570	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:01.262598038 CET	57452	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:01.328489065 CET	53	62570	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:01.421330929 CET	57452	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:01.488574982 CET	53	57452	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:01.489456892 CET	50748	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:01.558582067 CET	53	57452	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:01.654335022 CET	50748	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:01.715368032 CET	53	50748	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:01.716394901 CET	62146	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:01.792808056 CET	53	50748	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:01.886477947 CET	62146	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:01.949002028 CET	53	62146	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:01.949897051 CET	55359	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:02.023972034 CET	53	62146	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:02.104558945 CET	55359	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:02.258860111 CET	53	55359	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:02.258877039 CET	53	55359	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:02.261874914 CET	60952	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:02.408865929 CET	60952	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:02.492377043 CET	53	60952	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:02.493879080 CET	58326	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:02.545973063 CET	53	60952	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:02.660815001 CET	58326	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:02.809582949 CET	53	58326	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:02.809663057 CET	53	58326	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:02.810676098 CET	64414	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:02.979746103 CET	64414	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:03.031974077 CET	53	64414	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:03.033018112 CET	56576	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:03.119570971 CET	53	64414	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:03.263748884 CET	56576	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:03.350498915 CET	53	56576	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:03.402414083 CET	53	56576	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:03.441009045 CET	57839	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:03.588815928 CET	57839	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:03.658762932 CET	53	57839	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:03.659831047 CET	58310	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:03.725833893 CET	53	57839	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:03.807967901 CET	58310	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:03.879471064 CET	53	58310	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:03.880650997 CET	57201	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:03.945555925 CET	53	58310	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:04.026839018 CET	57201	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:04.100620985 CET	53	57201	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:04.101759911 CET	54143	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:04.164737940 CET	53	57201	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:04.245202065 CET	54143	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:04.327394009 CET	53	54143	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:04.328448057 CET	50886	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:04.385620117 CET	53	54143	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:04.479485035 CET	50886	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:04.639121056 CET	53	50886	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:04.639134884 CET	53	50886	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:04.643445015 CET	65089	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:04.792174101 CET	65089	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:04.869266987 CET	53	65089	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:04.870738029 CET	56760	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:04.930708885 CET	53	65089	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:05.026624918 CET	56760	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:05.095181942 CET	53	56760	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:05.096139908 CET	56829	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:05.165093899 CET	53	56760	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:05.252722979 CET	56829	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:05.426606894 CET	53	56829	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:05.426626921 CET	53	56829	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:05.427694082 CET	60805	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:05.594990015 CET	60805	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:05.740427017 CET	53	60805	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:05.740516901 CET	53	60805	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:05.741302013 CET	49663	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:05.901884079 CET	49663	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:05.959141970 CET	53	49663	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:05.959959030 CET	58860	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:06.039417028 CET	53	49663	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:06.105091095 CET	58860	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:06.183808088 CET	53	58860	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:06.184752941 CET	65456	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:06.243604898 CET	53	58860	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:06.339479923 CET	65456	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:06.404746056 CET	53	65456	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:06.405597925 CET	54537	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:06.477186918 CET	53	65456	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:06.558124065 CET	54537	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:06.628849983 CET	53	54537	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:06.629935026 CET	59738	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:06.696228981 CET	53	54537	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:06.776907921 CET	59738	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:06.847533941 CET	53	59738	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:06.848545074 CET	63949	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:06.914467096 CET	53	59738	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:06.995641947 CET	63949	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:07.160304070 CET	53	63949	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:07.160341978 CET	53	63949	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:07.161369085 CET	52920	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:07.312839031 CET	52920	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:07.384651899 CET	53	52920	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:07.385715961 CET	54870	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:07.449750900 CET	53	52920	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:07.544065952 CET	54870	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:07.603450060 CET	53	54870	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:07.605994940 CET	59268	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:07.681093931 CET	53	54870	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:07.776328087 CET	59268	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:07.917819023 CET	53	59268	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:07.917865992 CET	53	59268	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:07.984766006 CET	63800	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:08.135826111 CET	63800	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:08.212327957 CET	53	63800	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:08.213190079 CET	50362	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:08.273556948 CET	53	63800	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:08.360414982 CET	50362	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:08.441515923 CET	53	50362	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:08.442346096 CET	63486	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:08.500607014 CET	53	50362	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:08.605882883 CET	63486	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:08.664551020 CET	53	63486	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:08.665348053 CET	63357	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:08.744292974 CET	53	63486	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:08.824132919 CET	63357	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:08.889915943 CET	53	63357	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:08.890722990 CET	56992	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:08.963063002 CET	53	63357	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:09.042897940 CET	56992	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:09.180350065 CET	53	56992	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:09.180641890 CET	53	56992	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:09.181090117 CET	52619	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:09.340060949 CET	52619	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:09.405533075 CET	53	52619	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:09.406352997 CET	65456	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:09.480079889 CET	53	52619	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:09.558588982 CET	65456	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:09.714709044 CET	53	65456	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:09.714747906 CET	53	65456	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:09.715784073 CET	51750	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:09.870873928 CET	51750	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:09.933367968 CET	53	51750	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:09.934343100 CET	64622	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:10.008069992 CET	53	51750	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:10.089660883 CET	64622	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:10.155447006 CET	53	64622	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:10.156311989 CET	65141	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:10.227530956 CET	53	64622	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:10.308391094 CET	65141	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:10.471657991 CET	53	65141	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:10.471704006 CET	53	65141	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:10.472593069 CET	59219	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:10.621062040 CET	59219	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:10.781531096 CET	53	59219	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:10.781548023 CET	53	59219	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:10.782354116 CET	56262	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:10.936727047 CET	56262	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:11.005315065 CET	53	56262	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:11.006742954 CET	62450	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:11.074359894 CET	53	56262	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:11.169198036 CET	62450	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:11.236574888 CET	53	62450	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:11.238738060 CET	59336	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:11.307385921 CET	53	62450	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:11.401869059 CET	59336	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:41:11.881839991 CET	53	59336	1.1.1.1	192.168.2.4
Dec 12, 2024 12:41:11.900001049 CET	53	59336	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 12, 2024 12:40:45.195245981 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:40:45.839598894 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:40:46.960467100 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:40:47.866758108 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:40:49.071008921 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:40:50.039516926 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:40:51.029926062 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:40:51.915056944 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:40:52.961082935 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:40:54.043159962 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:40:55.009023905 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:40:56.226861954 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:40:56.992643118 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:40:58.132833958 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:40:58.898611069 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:40:59.883440971 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:41:01.328562021 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:41:02.024053097 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:41:03.119635105 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:41:03.945627928 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:41:04.930959940 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:41:06.039494991 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:41:06.914552927 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:41:08.273675919 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:41:08.963175058 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:41:10.008163929 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:41:11.076867104 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:41:11.900079012 CET	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 12, 2024 12:39:30.717015028 CET	192.168.2.4	1.1.1.1	0xce68	Standard query (0)	www.med.unc.edu	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:30.717191935 CET	192.168.2.4	1.1.1.1	0x8a2e	Standard query (0)	www.med.unc.edu	65	IN (0x0001)	false
Dec 12, 2024 12:39:33.201775074 CET	192.168.2.4	1.1.1.1	0xf7b4	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:33.201952934 CET	192.168.2.4	1.1.1.1	0x462d	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Dec 12, 2024 12:39:33.202421904 CET	192.168.2.4	1.1.1.1	0xae40	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:33.202574015 CET	192.168.2.4	1.1.1.1	0x3a3e	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Dec 12, 2024 12:39:33.302668095 CET	192.168.2.4	1.1.1.1	0x2a84	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:33.302803993 CET	192.168.2.4	1.1.1.1	0xcf1e	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Dec 12, 2024 12:39:34.071419954 CET	192.168.2.4	1.1.1.1	0x66f2	Standard query (0)	bzib.nelreports.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:34.071547985 CET	192.168.2.4	1.1.1.1	0xc4a	Standard query (0)	bzib.nelreports.net	65	IN (0x0001)	false
Dec 12, 2024 12:39:34.733088970 CET	192.168.2.4	1.1.1.1	0xf608	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:34.733283043 CET	192.168.2.4	1.1.1.1	0x1dc6	Standard query (0)	clients2.googleusercontent.com	65	IN (0x0001)	false
Dec 12, 2024 12:39:38.321646929 CET	192.168.2.4	1.1.1.1	0xd439	Standard query (0)	yqceweqmaumwwywy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:38.460769892 CET	192.168.2.4	1.1.1.1	0x2073	Standard query (0)	eqmycgagykgkqwsu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:38.599674940 CET	192.168.2.4	1.1.1.1	0x9790	Standard query (0)	seuuicaewuoaumes.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:38.743623018 CET	192.168.2.4	1.1.1.1	0x89ec	Standard query (0)	aomaeyokqgsuomii.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:38.890327930 CET	192.168.2.4	1.1.1.1	0x409d	Standard query (0)	waqucgoeeeeymeii.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:39.248543024 CET	192.168.2.4	1.1.1.1	0xe254	Standard query (0)	oqacqgmiaaewmmey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:39.387444019 CET	192.168.2.4	1.1.1.1	0xcbdf	Standard query (0)	ykeaoyaycoiamqey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:39.527504921 CET	192.168.2.4	1.1.1.1	0x2a4b	Standard query (0)	csmgwcogqqcwseka.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:39.668489933 CET	192.168.2.4	1.1.1.1	0xc9f7	Standard query (0)	auowmussgaesgwas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:39.806736946 CET	192.168.2.4	1.1.1.1	0xd75b	Standard query (0)	aikmouciiqgecoqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:40.121417046 CET	192.168.2.4	1.1.1.1	0xdba5	Standard query (0)	koecgqggegimaeya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:40.260082006 CET	192.168.2.4	1.1.1.1	0x1470	Standard query (0)	aawqwccomcemcysm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:40.400568008 CET	192.168.2.4	1.1.1.1	0x696e	Standard query (0)	kcyakwisycecaqgw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:40.539489031 CET	192.168.2.4	1.1.1.1	0x7aca	Standard query (0)	uogksceymossmmqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:40.678868055 CET	192.168.2.4	1.1.1.1	0xbf0e	Standard query (0)	qgmyeeguweaukuke.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:40.824137926 CET	192.168.2.4	1.1.1.1	0xf364	Standard query (0)	mywaqkeaawisisky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:40.963969946 CET	192.168.2.4	1.1.1.1	0x8f2a	Standard query (0)	yqqsggacauiiugka.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:41.108458042 CET	192.168.2.4	1.1.1.1	0x662a	Standard query (0)	equmqmqwuuuioawa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:41.248960972 CET	192.168.2.4	1.1.1.1	0x8b5e	Standard query (0)	wmoamsauiwauoosg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:41.389337063 CET	192.168.2.4	1.1.1.1	0xb439	Standard query (0)	oqsakkimkesccikc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:41.528841972 CET	192.168.2.4	1.1.1.1	0xdda9	Standard query (0)	mgiwaegaqyyaakwy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:41.668133020 CET	192.168.2.4	1.1.1.1	0xcb4	Standard query (0)	ucmioacycscyeouk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:41.808123112 CET	192.168.2.4	1.1.1.1	0x94e4	Standard query (0)	qumaseqmggyaiauq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:41.947643995 CET	192.168.2.4	1.1.1.1	0xbe7b	Standard query (0)	uccyyemqaiiksuwm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:42.089438915 CET	192.168.2.4	1.1.1.1	0x8474	Standard query (0)	sesyieaiesegeaow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:42.230813980 CET	192.168.2.4	1.1.1.1	0x68cf	Standard query (0)	kccmicaswqmswwak.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:42.370353937 CET	192.168.2.4	1.1.1.1	0x9dee	Standard query (0)	mssaogwocegysoow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:42.508888960 CET	192.168.2.4	1.1.1.1	0x9e88	Standard query (0)	wssaqmakumewmaes.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:42.653899908 CET	192.168.2.4	1.1.1.1	0xfe05	Standard query (0)	cmukociggiqcouio.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:42.795238972 CET	192.168.2.4	1.1.1.1	0x435b	Standard query (0)	skyqsyyymyacyayc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:42.934438944 CET	192.168.2.4	1.1.1.1	0xaba8	Standard query (0)	uoigsiqmemcscosu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:43.073117018 CET	192.168.2.4	1.1.1.1	0x7ae3	Standard query (0)	kuywuskkgqsigqqs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:43.216433048 CET	192.168.2.4	1.1.1.1	0x926c	Standard query (0)	auayomwkewcomwas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:43.355953932 CET	192.168.2.4	1.1.1.1	0xbea4	Standard query (0)	iyaikmkkowcqemsi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:43.496572018 CET	192.168.2.4	1.1.1.1	0x2804	Standard query (0)	ggicikyqcaiyguee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:43.727031946 CET	192.168.2.4	1.1.1.1	0x4ecc	Standard query (0)	oqyaoykomyoygics.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:43.883837938 CET	192.168.2.4	1.1.1.1	0x114e	Standard query (0)	eqakguiwiqacqiwg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:44.024525881 CET	192.168.2.4	1.1.1.1	0xb78d	Standard query (0)	wgcaouuqqqwucogy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:44.163427114 CET	192.168.2.4	1.1.1.1	0x8b50	Standard query (0)	ewacuagosgqmuocm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:44.304866076 CET	192.168.2.4	1.1.1.1	0x10b0	Standard query (0)	wgqyouayikuyuqmk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:44.447676897 CET	192.168.2.4	1.1.1.1	0x16e5	Standard query (0)	owaaygsacguucaye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:44.588237047 CET	192.168.2.4	1.1.1.1	0x4c37	Standard query (0)	uwgicagyykoommga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:44.726829052 CET	192.168.2.4	1.1.1.1	0xa7fe	Standard query (0)	uiggameqqycugsqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:44.865499973 CET	192.168.2.4	1.1.1.1	0xa669	Standard query (0)	goguooqkgysueime.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:45.004172087 CET	192.168.2.4	1.1.1.1	0x9c00	Standard query (0)	keosqeosukqcooco.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:45.147484064 CET	192.168.2.4	1.1.1.1	0x7a6a	Standard query (0)	maoeeogmuauywsyu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:45.287283897 CET	192.168.2.4	1.1.1.1	0x7030	Standard query (0)	ismqaewykmoiguki.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:45.427175045 CET	192.168.2.4	1.1.1.1	0xe48	Standard query (0)	wucwykasawokemaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:45.567576885 CET	192.168.2.4	1.1.1.1	0xcfa8	Standard query (0)	ukmcqucewskcqygg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:45.710850954 CET	192.168.2.4	1.1.1.1	0xcd2d	Standard query (0)	qqqmeagkkosgcayo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:45.931979895 CET	192.168.2.4	1.1.1.1	0xccbc	Standard query (0)	ysawassgkwqygmmq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:46.072280884 CET	192.168.2.4	1.1.1.1	0x1be2	Standard query (0)	osaeyoiqoqawauga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:46.244302988 CET	192.168.2.4	1.1.1.1	0x18c7	Standard query (0)	iagisciiyoemgwaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:46.535074949 CET	192.168.2.4	1.1.1.1	0x39f7	Standard query (0)	ymysimqoykwqeqiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:46.674742937 CET	192.168.2.4	1.1.1.1	0x2340	Standard query (0)	ymmcwogyimsuqmcc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:46.815033913 CET	192.168.2.4	1.1.1.1	0x6bf5	Standard query (0)	osmoygyawqmmimkq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:46.966346025 CET	192.168.2.4	1.1.1.1	0x6ca8	Standard query (0)	immyecuqwkiyscys.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:47.105304003 CET	192.168.2.4	1.1.1.1	0x922c	Standard query (0)	omsqkuiwcwoegooq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:47.244453907 CET	192.168.2.4	1.1.1.1	0xb962	Standard query (0)	ukaiiiyqoooycyqm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:47.383649111 CET	192.168.2.4	1.1.1.1	0xa540	Standard query (0)	isemauqkwwiumyky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:47.522766113 CET	192.168.2.4	1.1.1.1	0x6dfa	Standard query (0)	keguuyioweymiaws.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:47.661426067 CET	192.168.2.4	1.1.1.1	0x53a4	Standard query (0)	kwaywmaequkqccai.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:47.805402040 CET	192.168.2.4	1.1.1.1	0xd8be	Standard query (0)	yyimcoiwgckeakcm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:47.944937944 CET	192.168.2.4	1.1.1.1	0x7f71	Standard query (0)	ekcwemuekgqsimae.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:48.087264061 CET	192.168.2.4	1.1.1.1	0x55d0	Standard query (0)	imigkomgmqgmakqk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:48.226788998 CET	192.168.2.4	1.1.1.1	0x293e	Standard query (0)	omasqkwqyskcagwi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:48.365511894 CET	192.168.2.4	1.1.1.1	0x85fb	Standard query (0)	awyomscgweuqmgaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:48.506041050 CET	192.168.2.4	1.1.1.1	0xed4f	Standard query (0)	eyoyssauceguqwmk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:48.647665977 CET	192.168.2.4	1.1.1.1	0xfff7	Standard query (0)	gwwcqeykmseicgaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:48.786442041 CET	192.168.2.4	1.1.1.1	0xc416	Standard query (0)	qwywqgsmgaoiwsga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:48.929080963 CET	192.168.2.4	1.1.1.1	0x7733	Standard query (0)	ososwckwcqmmwqcy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:49.067540884 CET	192.168.2.4	1.1.1.1	0x4f4d	Standard query (0)	osaymwoggqqycmse.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:49.208853960 CET	192.168.2.4	1.1.1.1	0x1ea9	Standard query (0)	oyewqwkusieeoqey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:49.347405910 CET	192.168.2.4	1.1.1.1	0x58c8	Standard query (0)	ommwaqgaemsmcqwc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:49.486998081 CET	192.168.2.4	1.1.1.1	0x4a12	Standard query (0)	cauewwukyywyqiei.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:49.634836912 CET	192.168.2.4	1.1.1.1	0x1352	Standard query (0)	goeykqccmemkswom.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:49.776854038 CET	192.168.2.4	1.1.1.1	0xb069	Standard query (0)	aksuakswwkiimamq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:49.915546894 CET	192.168.2.4	1.1.1.1	0x63c7	Standard query (0)	isaeicumkcuwqmqq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:50.055473089 CET	192.168.2.4	1.1.1.1	0x661c	Standard query (0)	qiswokuokugiooky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:50.195810080 CET	192.168.2.4	1.1.1.1	0xaf07	Standard query (0)	qiswcssocuqsaqkq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:50.335628986 CET	192.168.2.4	1.1.1.1	0x3d49	Standard query (0)	qcyksokwumicscaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:50.474530935 CET	192.168.2.4	1.1.1.1	0xeda5	Standard query (0)	esiaisyasoaoqwki.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:50.612828016 CET	192.168.2.4	1.1.1.1	0x65b7	Standard query (0)	giqukkwwcwgqcisg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:50.752615929 CET	192.168.2.4	1.1.1.1	0x803f	Standard query (0)	ymqaaskiwomkucuy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:50.891871929 CET	192.168.2.4	1.1.1.1	0x8d30	Standard query (0)	akueuaicusaoieiy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:51.030710936 CET	192.168.2.4	1.1.1.1	0xb36b	Standard query (0)	sauygqecsusickcu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:51.169210911 CET	192.168.2.4	1.1.1.1	0xb8ae	Standard query (0)	kkwkgmcoawgaoiwg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:51.308778048 CET	192.168.2.4	1.1.1.1	0x77ff	Standard query (0)	saumycuogqsqykes.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:51.447849035 CET	192.168.2.4	1.1.1.1	0x941	Standard query (0)	ukyokaigmmkumgoa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:51.586558104 CET	192.168.2.4	1.1.1.1	0x1254	Standard query (0)	eswweuycwwiiykwo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:51.724663973 CET	192.168.2.4	1.1.1.1	0xae6a	Standard query (0)	uksgyqiqaaiaiesi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:51.865067959 CET	192.168.2.4	1.1.1.1	0x80aa	Standard query (0)	smckcsaioceiyasu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:52.004808903 CET	192.168.2.4	1.1.1.1	0xc56	Standard query (0)	esimsqgcwwwmyoqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:52.145692110 CET	192.168.2.4	1.1.1.1	0x1aa8	Standard query (0)	maiyuocqqiqiiskw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:52.285068989 CET	192.168.2.4	1.1.1.1	0x8d3	Standard query (0)	smaaowemwiwggocu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:52.425019026 CET	192.168.2.4	1.1.1.1	0x4234	Standard query (0)	kwuuwgemogmuomwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:52.567856073 CET	192.168.2.4	1.1.1.1	0x7033	Standard query (0)	ukicsmiwggcwksam.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:52.707297087 CET	192.168.2.4	1.1.1.1	0x1e50	Standard query (0)	gwamoggwyegsseao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:52.851623058 CET	192.168.2.4	1.1.1.1	0xd982	Standard query (0)	immcqsiceooqyaay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:53.001436949 CET	192.168.2.4	1.1.1.1	0xa1dc	Standard query (0)	kkcqgowgkcoyokcu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:53.164354086 CET	192.168.2.4	1.1.1.1	0xda17	Standard query (0)	kecgikusmakuksma.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:53.302659988 CET	192.168.2.4	1.1.1.1	0xbf24	Standard query (0)	ymuiggyusggsymoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:53.442945004 CET	192.168.2.4	1.1.1.1	0x8c94	Standard query (0)	uecouukwkuceyuwg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:53.583976984 CET	192.168.2.4	1.1.1.1	0x1401	Standard query (0)	eyoaceoookqskqmy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:53.727354050 CET	192.168.2.4	1.1.1.1	0x5a6c	Standard query (0)	awwomgcseeqwkkom.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:53.874562025 CET	192.168.2.4	1.1.1.1	0x8c27	Standard query (0)	keykoekseemyiewq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:54.013686895 CET	192.168.2.4	1.1.1.1	0x9391	Standard query (0)	ysiwwoeeaaskykaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:54.179281950 CET	192.168.2.4	1.1.1.1	0x3981	Standard query (0)	kwmcuwccqmuecgea.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:54.318329096 CET	192.168.2.4	1.1.1.1	0x1705	Standard query (0)	gwyooeiscmwguqms.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:54.457004070 CET	192.168.2.4	1.1.1.1	0x2126	Standard query (0)	wuokiysmiucoucak.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:54.596329927 CET	192.168.2.4	1.1.1.1	0xafb2	Standard query (0)	wuuiumemmigyyauq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:54.735275030 CET	192.168.2.4	1.1.1.1	0x2064	Standard query (0)	acwomuuukiomgqkm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:54.874485970 CET	192.168.2.4	1.1.1.1	0xc411	Standard query (0)	muwqwgaaymomgwmi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:55.014628887 CET	192.168.2.4	1.1.1.1	0x37c2	Standard query (0)	omgcoecwsqiuqyug.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:55.154551029 CET	192.168.2.4	1.1.1.1	0x506c	Standard query (0)	kqmsgskwgemyueya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:55.294919968 CET	192.168.2.4	1.1.1.1	0x2b17	Standard query (0)	eyiyueewuaqmmwcm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:55.435492039 CET	192.168.2.4	1.1.1.1	0xe367	Standard query (0)	gwoyamckoqoaauoq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:55.635130882 CET	192.168.2.4	1.1.1.1	0xd189	Standard query (0)	qwqsoyoqkymakowm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:55.880628109 CET	192.168.2.4	1.1.1.1	0xf6a5	Standard query (0)	gcmiymmqgwuquokm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:56.020982027 CET	192.168.2.4	1.1.1.1	0x65e5	Standard query (0)	ymseciekayuweoww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:56.162533998 CET	192.168.2.4	1.1.1.1	0x1018	Standard query (0)	oyocwswugeiqqyoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:56.302783966 CET	192.168.2.4	1.1.1.1	0x96b5	Standard query (0)	omgooecquoweeomo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:56.442008972 CET	192.168.2.4	1.1.1.1	0xb49	Standard query (0)	imgeoyougkmmeuec.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:56.580703020 CET	192.168.2.4	1.1.1.1	0xb706	Standard query (0)	smoswyoekkccyuga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:56.719634056 CET	192.168.2.4	1.1.1.1	0x74b2	Standard query (0)	suwkomiqcykeyako.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:56.858362913 CET	192.168.2.4	1.1.1.1	0x2305	Standard query (0)	smwsugycuuckemue.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:56.997467041 CET	192.168.2.4	1.1.1.1	0x400	Standard query (0)	qigcqiaomwieqwka.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:57.136645079 CET	192.168.2.4	1.1.1.1	0xef24	Standard query (0)	oekcyqqggaegsesm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:57.276304960 CET	192.168.2.4	1.1.1.1	0xb53a	Standard query (0)	qcoysaaooaiccqyu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:57.415174007 CET	192.168.2.4	1.1.1.1	0xf39c	Standard query (0)	mismuqiygyeysaoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:57.563468933 CET	192.168.2.4	1.1.1.1	0xff9a	Standard query (0)	wockoyekyageakcg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:57.701575041 CET	192.168.2.4	1.1.1.1	0x9551	Standard query (0)	ososokqeakgguwsq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:57.840337992 CET	192.168.2.4	1.1.1.1	0xe320	Standard query (0)	wcgqccqcugomywua.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:57.979895115 CET	192.168.2.4	1.1.1.1	0xc89	Standard query (0)	aqaqgemescmwsqks.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:58.121871948 CET	192.168.2.4	1.1.1.1	0x894	Standard query (0)	aqiwocaywcswuwsq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:58.260860920 CET	192.168.2.4	1.1.1.1	0x4951	Standard query (0)	aqgmgoqcoqqkguyk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:58.401396990 CET	192.168.2.4	1.1.1.1	0xc1a7	Standard query (0)	oywgqkusocouysua.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:58.542454958 CET	192.168.2.4	1.1.1.1	0xb635	Standard query (0)	uyygagweoagcuqky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:58.681109905 CET	192.168.2.4	1.1.1.1	0xd759	Standard query (0)	muiccguyaeaqwweg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:58.820112944 CET	192.168.2.4	1.1.1.1	0x5fb2	Standard query (0)	qiqueqokwqqgwwci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:58.959301949 CET	192.168.2.4	1.1.1.1	0x3311	Standard query (0)	uygmgoymcwcgkios.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:59.097497940 CET	192.168.2.4	1.1.1.1	0x794	Standard query (0)	qiyggmguowygeooc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:59.237011909 CET	192.168.2.4	1.1.1.1	0xe12c	Standard query (0)	acacoiqgoimayqwm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:59.375614882 CET	192.168.2.4	1.1.1.1	0x2b91	Standard query (0)	smisyqewaummmwoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:59.517124891 CET	192.168.2.4	1.1.1.1	0x7eef	Standard query (0)	mumuqocoisaucwmq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:59.657347918 CET	192.168.2.4	1.1.1.1	0x2b8a	Standard query (0)	qqoawmqqwqcusmee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:59.796341896 CET	192.168.2.4	1.1.1.1	0xfad8	Standard query (0)	qcygacuamqqugcck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:59.935756922 CET	192.168.2.4	1.1.1.1	0xc728	Standard query (0)	kkiigoymgkmoggoq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:00.075756073 CET	192.168.2.4	1.1.1.1	0x3395	Standard query (0)	qqmicqemgcgieoau.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:00.217354059 CET	192.168.2.4	1.1.1.1	0x3e55	Standard query (0)	sagymwuwgeucsmac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:00.356551886 CET	192.168.2.4	1.1.1.1	0xf1d3	Standard query (0)	igmqooiwioymwkcm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:00.496890068 CET	192.168.2.4	1.1.1.1	0x5d50	Standard query (0)	osyqameakgkceeog.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:00.635833979 CET	192.168.2.4	1.1.1.1	0xea15	Standard query (0)	sgigamoeiwksoecq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:00.777932882 CET	192.168.2.4	1.1.1.1	0x200	Standard query (0)	keckssemmeoqieqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:00.918817043 CET	192.168.2.4	1.1.1.1	0xc8e7	Standard query (0)	caysswwugsmkeksw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:01.058787107 CET	192.168.2.4	1.1.1.1	0xcf87	Standard query (0)	cgiamwsqgcmqgqse.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:01.201045990 CET	192.168.2.4	1.1.1.1	0xe3fc	Standard query (0)	uyeqwcuyimescesu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:01.341655970 CET	192.168.2.4	1.1.1.1	0xf1df	Standard query (0)	ekiwqiyewuiqoemo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:01.482707977 CET	192.168.2.4	1.1.1.1	0x4649	Standard query (0)	oeakuqueisysswcg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:01.634394884 CET	192.168.2.4	1.1.1.1	0x60e4	Standard query (0)	acemcwecgiqcukys.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:01.774349928 CET	192.168.2.4	1.1.1.1	0x93c8	Standard query (0)	qcwaiaiqiwcakawa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:01.913420916 CET	192.168.2.4	1.1.1.1	0x429d	Standard query (0)	esyiocqieemagwmo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:02.054565907 CET	192.168.2.4	1.1.1.1	0xeb1d	Standard query (0)	kqsakygykwusqams.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:02.194605112 CET	192.168.2.4	1.1.1.1	0x39cb	Standard query (0)	ymygkkggyigeqcqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:02.335128069 CET	192.168.2.4	1.1.1.1	0x2b6f	Standard query (0)	qqqkagyoymmosuyo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:02.475579023 CET	192.168.2.4	1.1.1.1	0xdc60	Standard query (0)	moiimkscmiswaesw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:02.617297888 CET	192.168.2.4	1.1.1.1	0xa392	Standard query (0)	igkiociagqsacmwa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:02.756670952 CET	192.168.2.4	1.1.1.1	0x9b3e	Standard query (0)	ymugwyokyyccykmw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:02.897823095 CET	192.168.2.4	1.1.1.1	0x1d6c	Standard query (0)	gieksqwccmmqkemm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:03.040504932 CET	192.168.2.4	1.1.1.1	0x3cc1	Standard query (0)	iaueigwgocakgsku.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:03.183597088 CET	192.168.2.4	1.1.1.1	0xec88	Standard query (0)	sgsasqgwayeckgoy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:03.328212023 CET	192.168.2.4	1.1.1.1	0x5507	Standard query (0)	kwogawueykiiumao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:03.467339993 CET	192.168.2.4	1.1.1.1	0x4df4	Standard query (0)	iagmkeayqmuowswy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:03.607558966 CET	192.168.2.4	1.1.1.1	0xc15a	Standard query (0)	yyyagyakeciucagk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:03.747591972 CET	192.168.2.4	1.1.1.1	0x94e5	Standard query (0)	isukyiwyscosaaqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:03.892363071 CET	192.168.2.4	1.1.1.1	0x6d67	Standard query (0)	goicqsmskkygkkka.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:04.034723997 CET	192.168.2.4	1.1.1.1	0x2613	Standard query (0)	awacwkqgsoomimye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:04.175174952 CET	192.168.2.4	1.1.1.1	0x9fef	Standard query (0)	iaawaweqwceogamg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:04.314294100 CET	192.168.2.4	1.1.1.1	0x7f97	Standard query (0)	kqueagsoikuyocca.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:04.455173016 CET	192.168.2.4	1.1.1.1	0xf8cb	Standard query (0)	momoqikcaksewaua.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:04.596431971 CET	192.168.2.4	1.1.1.1	0x5a01	Standard query (0)	suagiqkqmkgysmiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:04.737432957 CET	192.168.2.4	1.1.1.1	0xf110	Standard query (0)	gcwequgwyimwymsa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:04.879297018 CET	192.168.2.4	1.1.1.1	0x4982	Standard query (0)	igywsgwooemqiuss.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:05.017947912 CET	192.168.2.4	1.1.1.1	0x8306	Standard query (0)	wikiagqsmeeaeegy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:05.156486034 CET	192.168.2.4	1.1.1.1	0x52fa	Standard query (0)	eeoeukoqgiwsumsu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:05.295710087 CET	192.168.2.4	1.1.1.1	0x7124	Standard query (0)	ygooiessycewaocg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:05.437237978 CET	192.168.2.4	1.1.1.1	0xb242	Standard query (0)	qcqgssmagywqcgws.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:05.577156067 CET	192.168.2.4	1.1.1.1	0x82f7	Standard query (0)	goiikukwyyauemqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:05.715487957 CET	192.168.2.4	1.1.1.1	0xf22b	Standard query (0)	comuwmkimocayeeu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:05.855057001 CET	192.168.2.4	1.1.1.1	0xe44f	Standard query (0)	isgasoomksiwqcmg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:05.994529009 CET	192.168.2.4	1.1.1.1	0x1494	Standard query (0)	qigismmgwsiseyuu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:06.134196997 CET	192.168.2.4	1.1.1.1	0xf30f	Standard query (0)	wuqggcwmoscwykwg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:06.274147034 CET	192.168.2.4	1.1.1.1	0x33b9	Standard query (0)	qceawaaswmsuekmu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:06.422023058 CET	192.168.2.4	1.1.1.1	0x797c	Standard query (0)	ygucsucmagwqsqcu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:06.569583893 CET	192.168.2.4	1.1.1.1	0x4193	Standard query (0)	giuccqyqokookyue.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:06.708102942 CET	192.168.2.4	1.1.1.1	0x2224	Standard query (0)	gceesusqmuockkgw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:06.847140074 CET	192.168.2.4	1.1.1.1	0xd7f7	Standard query (0)	ygesoycecmkuwayg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:06.986886024 CET	192.168.2.4	1.1.1.1	0xc751	Standard query (0)	sasqgsyksiccuuws.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:07.126029968 CET	192.168.2.4	1.1.1.1	0xcbc4	Standard query (0)	qwggykgwkqoceiuo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:07.268239975 CET	192.168.2.4	1.1.1.1	0x4fbb	Standard query (0)	wiguisuayimaukgu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:07.408454895 CET	192.168.2.4	1.1.1.1	0x1916	Standard query (0)	qcwcgegyyieaoqca.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:07.548535109 CET	192.168.2.4	1.1.1.1	0x1a2f	Standard query (0)	gwcyyawigmwceaqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:07.688231945 CET	192.168.2.4	1.1.1.1	0x2bcb	Standard query (0)	mueuwcqsioowsmce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:07.830609083 CET	192.168.2.4	1.1.1.1	0xf9d3	Standard query (0)	qiewcykmuuacuoyk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:07.969629049 CET	192.168.2.4	1.1.1.1	0x1463	Standard query (0)	coayaokeissieqcc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:08.109692097 CET	192.168.2.4	1.1.1.1	0xddbe	Standard query (0)	oeooiqokqsqcsaig.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:08.249509096 CET	192.168.2.4	1.1.1.1	0xf366	Standard query (0)	masegmsiqgamiugm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:08.388271093 CET	192.168.2.4	1.1.1.1	0xcfab	Standard query (0)	smwywssyyaciqkae.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:08.530668974 CET	192.168.2.4	1.1.1.1	0x30e9	Standard query (0)	aweqoooqomueeiwi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:08.670538902 CET	192.168.2.4	1.1.1.1	0x1b92	Standard query (0)	akasikewaomyiwqk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:08.811573982 CET	192.168.2.4	1.1.1.1	0x65b1	Standard query (0)	oyyamqygcecqocmq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:08.951735020 CET	192.168.2.4	1.1.1.1	0x81e6	Standard query (0)	qwikoqqgiayyuakq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:09.090732098 CET	192.168.2.4	1.1.1.1	0xbaa	Standard query (0)	miqcugomwgmygyoq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:09.231095076 CET	192.168.2.4	1.1.1.1	0xe1ba	Standard query (0)	wiccyamsgmuqoeoy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:09.471311092 CET	192.168.2.4	1.1.1.1	0x601f	Standard query (0)	ymeiqyyqqyaaygie.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:09.612278938 CET	192.168.2.4	1.1.1.1	0x4ea	Standard query (0)	wiomcwmascsigags.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:09.751733065 CET	192.168.2.4	1.1.1.1	0x1d82	Standard query (0)	awgyuqqswicwkqcs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:09.891091108 CET	192.168.2.4	1.1.1.1	0xcb5c	Standard query (0)	iacisiamimiiqyeo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:10.030026913 CET	192.168.2.4	1.1.1.1	0x55fb	Standard query (0)	wogawoqysgiockwa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:10.168531895 CET	192.168.2.4	1.1.1.1	0xe34a	Standard query (0)	mayykkuyeuiggyws.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:10.310470104 CET	192.168.2.4	1.1.1.1	0xf706	Standard query (0)	cosaygigqegeyewi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:10.449446917 CET	192.168.2.4	1.1.1.1	0x89c0	Standard query (0)	ekqyosgcumkcecmo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:10.588176966 CET	192.168.2.4	1.1.1.1	0xa413	Standard query (0)	qimmkmaumumswocw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:10.727128983 CET	192.168.2.4	1.1.1.1	0x316b	Standard query (0)	acqaagqgmsmeouce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:10.868180037 CET	192.168.2.4	1.1.1.1	0xd838	Standard query (0)	awasockiaymagmci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:11.007286072 CET	192.168.2.4	1.1.1.1	0x5b89	Standard query (0)	akuyqkmomwqyiyow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:11.148206949 CET	192.168.2.4	1.1.1.1	0xeac9	Standard query (0)	caceukeeygaaqaec.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:11.286164045 CET	192.168.2.4	1.1.1.1	0x8d0c	Standard query (0)	qwcaikouwwekssco.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:11.425198078 CET	192.168.2.4	1.1.1.1	0x7233	Standard query (0)	qqioykeogcwkowgq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:11.564327955 CET	192.168.2.4	1.1.1.1	0xe39e	Standard query (0)	igeqissugeuswaus.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:11.705718994 CET	192.168.2.4	1.1.1.1	0xde50	Standard query (0)	osoawyeyassgycgy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:11.844294071 CET	192.168.2.4	1.1.1.1	0xe78b	Standard query (0)	cuaumuqcoeegomsq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:11.983000040 CET	192.168.2.4	1.1.1.1	0x903	Standard query (0)	oyogquqkmyqwwkuq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:12.123431921 CET	192.168.2.4	1.1.1.1	0x76f2	Standard query (0)	gwyougsgeaaoiumg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:12.262399912 CET	192.168.2.4	1.1.1.1	0xf775	Standard query (0)	ukeoemaaimqyuais.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:12.400619030 CET	192.168.2.4	1.1.1.1	0xa09e	Standard query (0)	oewuwcsmaacckewa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:12.540941954 CET	192.168.2.4	1.1.1.1	0x53b	Standard query (0)	esykokiigsgwcwsa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:12.686113119 CET	192.168.2.4	1.1.1.1	0xcc49	Standard query (0)	ekgqymkkqiwogqsy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:12.834745884 CET	192.168.2.4	1.1.1.1	0xf51b	Standard query (0)	wueossewygqoakoq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:12.975445032 CET	192.168.2.4	1.1.1.1	0x1090	Standard query (0)	isceiesauogasmoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:13.114926100 CET	192.168.2.4	1.1.1.1	0xeaad	Standard query (0)	giscmywoiaqmqcmw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:13.255475998 CET	192.168.2.4	1.1.1.1	0x663f	Standard query (0)	uyqweoyukcewugsu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:13.395818949 CET	192.168.2.4	1.1.1.1	0xf1dd	Standard query (0)	imuscegymggagewg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:13.536051989 CET	192.168.2.4	1.1.1.1	0xa3c8	Standard query (0)	wgesgakysuqaewik.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:13.675048113 CET	192.168.2.4	1.1.1.1	0xe91d	Standard query (0)	uwoyyqgiwowysqou.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:13.814486027 CET	192.168.2.4	1.1.1.1	0x3e71	Standard query (0)	syaouwwyoaemeekm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:13.954049110 CET	192.168.2.4	1.1.1.1	0x3cb6	Standard query (0)	aoscugususamokuy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:14.092571974 CET	192.168.2.4	1.1.1.1	0x9819	Standard query (0)	qucyaygweeasqeoy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:14.231497049 CET	192.168.2.4	1.1.1.1	0x6e11	Standard query (0)	uiwwamyuymycooey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:14.373788118 CET	192.168.2.4	1.1.1.1	0xa501	Standard query (0)	iygukwyuqwiuoqmi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:14.512675047 CET	192.168.2.4	1.1.1.1	0xf0fb	Standard query (0)	koaeaguekwcaousw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:14.651439905 CET	192.168.2.4	1.1.1.1	0xa992	Standard query (0)	skssioqkemoiieaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:14.791522026 CET	192.168.2.4	1.1.1.1	0x250e	Standard query (0)	yewomygmueegmoqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:14.930761099 CET	192.168.2.4	1.1.1.1	0x93ce	Standard query (0)	kuyoukwwacqkcoyo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:15.070269108 CET	192.168.2.4	1.1.1.1	0x21d9	Standard query (0)	gmcqgmkyguwkskyg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:15.209328890 CET	192.168.2.4	1.1.1.1	0xe0b3	Standard query (0)	mygiqcqokowwmgqq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:15.348315954 CET	192.168.2.4	1.1.1.1	0x66ef	Standard query (0)	cymogqmasaiiwmww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:15.488683939 CET	192.168.2.4	1.1.1.1	0xeb1d	Standard query (0)	iykumkamcykgicyi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:15.628479958 CET	192.168.2.4	1.1.1.1	0x62aa	Standard query (0)	cyemcqwkasuimkgs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:15.767600060 CET	192.168.2.4	1.1.1.1	0xb8b8	Standard query (0)	ieqeeiggkuqcomyo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:15.907458067 CET	192.168.2.4	1.1.1.1	0x3bfd	Standard query (0)	ssmkyomikukusksu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:16.046917915 CET	192.168.2.4	1.1.1.1	0xb278	Standard query (0)	kimakioiwmawksiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:16.187024117 CET	192.168.2.4	1.1.1.1	0xa2a	Standard query (0)	qumssmeysccykkyo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:16.329363108 CET	192.168.2.4	1.1.1.1	0x4b06	Standard query (0)	ykuoaucocogcwoky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:16.470988035 CET	192.168.2.4	1.1.1.1	0x72f6	Standard query (0)	semyssioekmosauo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:16.609150887 CET	192.168.2.4	1.1.1.1	0x9061	Standard query (0)	aiiqyyikowqaygwy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:16.750286102 CET	192.168.2.4	1.1.1.1	0xa66a	Standard query (0)	kouumoyqiuckkcau.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:16.890366077 CET	192.168.2.4	1.1.1.1	0x8c2e	Standard query (0)	qgwkkkyicoqmooqu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:17.029673100 CET	192.168.2.4	1.1.1.1	0xbc75	Standard query (0)	uwwcocucusmeguaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:17.171900034 CET	192.168.2.4	1.1.1.1	0x9200	Standard query (0)	cekggiciueyeyoku.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:17.311822891 CET	192.168.2.4	1.1.1.1	0x3134	Standard query (0)	iqqeoamqwiuiyuua.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:17.450464010 CET	192.168.2.4	1.1.1.1	0x8761	Standard query (0)	uokqmokseqqakiui.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:17.589143991 CET	192.168.2.4	1.1.1.1	0x5587	Standard query (0)	cyqqgacqkowwkqqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:17.728055954 CET	192.168.2.4	1.1.1.1	0x65ee	Standard query (0)	cmqqeimyycgqwsgg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:17.867873907 CET	192.168.2.4	1.1.1.1	0x4de1	Standard query (0)	wmgeoqqiwqcmimwu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:18.008928061 CET	192.168.2.4	1.1.1.1	0x3190	Standard query (0)	quyckaioggawuois.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:18.148133039 CET	192.168.2.4	1.1.1.1	0xfab9	Standard query (0)	eqciawooemoueyqu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:18.287971020 CET	192.168.2.4	1.1.1.1	0x9731	Standard query (0)	oqoaumkywacmuwwm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:18.426460028 CET	192.168.2.4	1.1.1.1	0x8d5e	Standard query (0)	ewueyekksqksycww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:18.566123962 CET	192.168.2.4	1.1.1.1	0x6b9	Standard query (0)	csmasucykosuwouy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:18.705775976 CET	192.168.2.4	1.1.1.1	0x58c5	Standard query (0)	seeogeqwsqmsoaqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:18.844664097 CET	192.168.2.4	1.1.1.1	0xcd6a	Standard query (0)	gusmkkaiomeeqaiy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:18.982316017 CET	192.168.2.4	1.1.1.1	0x9904	Standard query (0)	msyecoiqeyqeiquy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:19.121889114 CET	192.168.2.4	1.1.1.1	0x7741	Standard query (0)	skawoueawceoywsy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:19.260688066 CET	192.168.2.4	1.1.1.1	0xac2d	Standard query (0)	iyuaqococuqcsgii.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:19.400516987 CET	192.168.2.4	1.1.1.1	0x8ad2	Standard query (0)	kuyaasckcgacyesi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:19.538593054 CET	192.168.2.4	1.1.1.1	0x84f2	Standard query (0)	aaeqiiecqqumcgky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:19.677710056 CET	192.168.2.4	1.1.1.1	0x45bc	Standard query (0)	aawiysageawcoyok.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:19.817075968 CET	192.168.2.4	1.1.1.1	0xa0dc	Standard query (0)	yqysoaosqewciiww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:19.955892086 CET	192.168.2.4	1.1.1.1	0xbfe1	Standard query (0)	yessywkwcwmyewqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:20.093856096 CET	192.168.2.4	1.1.1.1	0x8bb5	Standard query (0)	aueiqscgeicewaoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:20.232577085 CET	192.168.2.4	1.1.1.1	0x285e	Standard query (0)	uccsgcekiwcyucou.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:20.371468067 CET	192.168.2.4	1.1.1.1	0x5bd1	Standard query (0)	aiumyocycyyikiwc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:20.510905027 CET	192.168.2.4	1.1.1.1	0xe67	Standard query (0)	aoqayemwgmsyuimi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:20.650219917 CET	192.168.2.4	1.1.1.1	0xcd7f	Standard query (0)	mmiowgeswucumqae.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:20.792948961 CET	192.168.2.4	1.1.1.1	0x294b	Standard query (0)	mmiugosumuqmuqoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:20.931544065 CET	192.168.2.4	1.1.1.1	0xef0b	Standard query (0)	ecqisawmymscauow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:21.070799112 CET	192.168.2.4	1.1.1.1	0xe6f7	Standard query (0)	iyoqqeicqoquiqka.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:21.212469101 CET	192.168.2.4	1.1.1.1	0x8295	Standard query (0)	ecoqwiswmwqokmay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:21.350925922 CET	192.168.2.4	1.1.1.1	0x7f44	Standard query (0)	ceckmwoyqkwgeoqg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:21.489573956 CET	192.168.2.4	1.1.1.1	0xd942	Standard query (0)	kcoiygiwuyqyaoku.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:21.630616903 CET	192.168.2.4	1.1.1.1	0x5747	Standard query (0)	aaeyckqsgmiqsgew.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:21.770618916 CET	192.168.2.4	1.1.1.1	0x18c9	Standard query (0)	qgaiosyouwwkgsmm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:21.910039902 CET	192.168.2.4	1.1.1.1	0x5626	Standard query (0)	ocqseueommkkqcgs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:22.050107956 CET	192.168.2.4	1.1.1.1	0x8b60	Standard query (0)	owmesaosmycoeceq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:22.191870928 CET	192.168.2.4	1.1.1.1	0x3757	Standard query (0)	qokauaicweuwscac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:22.331118107 CET	192.168.2.4	1.1.1.1	0x830e	Standard query (0)	sewmmwqeyauowwwo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:22.562578917 CET	192.168.2.4	1.1.1.1	0x959c	Standard query (0)	mmgowiccqoeomagq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:22.806235075 CET	192.168.2.4	1.1.1.1	0xe365	Standard query (0)	kcwiywyygywkkysk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:22.944978952 CET	192.168.2.4	1.1.1.1	0x7fcf	Standard query (0)	syiysgiqgqggqkoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:23.084557056 CET	192.168.2.4	1.1.1.1	0xe5d4	Standard query (0)	ykuasckuceswseig.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:23.224309921 CET	192.168.2.4	1.1.1.1	0xdb95	Standard query (0)	quugmiumsieaiyys.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:23.369852066 CET	192.168.2.4	1.1.1.1	0xca1a	Standard query (0)	ikqywgcqaggogqsa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:23.508254051 CET	192.168.2.4	1.1.1.1	0x61a9	Standard query (0)	eqyamamqwsseyoig.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:23.649575949 CET	192.168.2.4	1.1.1.1	0xbcc5	Standard query (0)	seqkawokggwucsui.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:23.789860964 CET	192.168.2.4	1.1.1.1	0xb118	Standard query (0)	gmqeqkcqackwkgao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:23.928888083 CET	192.168.2.4	1.1.1.1	0xbffd	Standard query (0)	guowewgekuoqacyy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:24.067873955 CET	192.168.2.4	1.1.1.1	0x82b9	Standard query (0)	aaokyscqeecowaci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:24.207545996 CET	192.168.2.4	1.1.1.1	0x28c1	Standard query (0)	ywywwwgwekicgico.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:24.345808983 CET	192.168.2.4	1.1.1.1	0xd9ad	Standard query (0)	wsisaoaauqwmuomg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:24.485867023 CET	192.168.2.4	1.1.1.1	0xa06a	Standard query (0)	koouumcuucaeakye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:24.626218081 CET	192.168.2.4	1.1.1.1	0x2ee0	Standard query (0)	okccisioeycusekg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:24.769141912 CET	192.168.2.4	1.1.1.1	0xbb78	Standard query (0)	cymymsciyaiacwgw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:24.908859968 CET	192.168.2.4	1.1.1.1	0x28b9	Standard query (0)	aoyeoimcuuqakckw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:25.048791885 CET	192.168.2.4	1.1.1.1	0x93e8	Standard query (0)	qoaweokuqggaymks.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:25.187891006 CET	192.168.2.4	1.1.1.1	0xcf2b	Standard query (0)	ewuyacewswkoueqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:25.328008890 CET	192.168.2.4	1.1.1.1	0xb5f7	Standard query (0)	kiuymkmaomciimcc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:25.467283964 CET	192.168.2.4	1.1.1.1	0xf8b	Standard query (0)	oqaiyaoqwyeswaiy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:25.607585907 CET	192.168.2.4	1.1.1.1	0xdb21	Standard query (0)	koyokggaqsagggym.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:25.748483896 CET	192.168.2.4	1.1.1.1	0xd84a	Standard query (0)	cmsuagygagqceocm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:25.887397051 CET	192.168.2.4	1.1.1.1	0xdc9c	Standard query (0)	uisgoqaoksgqsqyg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:26.027591944 CET	192.168.2.4	1.1.1.1	0x4e3c	Standard query (0)	ocgcqsagaakgkcma.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:26.166331053 CET	192.168.2.4	1.1.1.1	0xc999	Standard query (0)	okgigkmiieweagia.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:26.305217981 CET	192.168.2.4	1.1.1.1	0x58f1	Standard query (0)	skiwkmaaeeiqqgee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:26.445159912 CET	192.168.2.4	1.1.1.1	0x87a8	Standard query (0)	aagokgyaswscyaeu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:26.586266994 CET	192.168.2.4	1.1.1.1	0x1bc0	Standard query (0)	gmciuwiycsqycggy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:26.725019932 CET	192.168.2.4	1.1.1.1	0xd353	Standard query (0)	ggeymcaisciikucq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:26.868139029 CET	192.168.2.4	1.1.1.1	0x4b1b	Standard query (0)	uwskygguegqkasme.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:27.012073994 CET	192.168.2.4	1.1.1.1	0x6075	Standard query (0)	cyumiiokkswcoeag.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:27.151328087 CET	192.168.2.4	1.1.1.1	0xaeaa	Standard query (0)	oqisqmesaeoegmyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:27.290342093 CET	192.168.2.4	1.1.1.1	0xe5ca	Standard query (0)	wagasowawsoyycom.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:27.429007053 CET	192.168.2.4	1.1.1.1	0xa4b7	Standard query (0)	gaguweiwsgouugqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:27.570677996 CET	192.168.2.4	1.1.1.1	0xc8c0	Standard query (0)	syyyweaywowycsia.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:27.708981037 CET	192.168.2.4	1.1.1.1	0x20e6	Standard query (0)	mmoycwqiuykiusuy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:27.848144054 CET	192.168.2.4	1.1.1.1	0x786	Standard query (0)	ikoycakqiuuascco.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:27.986835003 CET	192.168.2.4	1.1.1.1	0x17b	Standard query (0)	cmuqekokuyuqgige.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:28.127170086 CET	192.168.2.4	1.1.1.1	0x17ea	Standard query (0)	cywoimwmsoamqoem.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:28.267501116 CET	192.168.2.4	1.1.1.1	0xfd9c	Standard query (0)	skyiqyaeoykwcgiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:28.407428980 CET	192.168.2.4	1.1.1.1	0xa772	Standard query (0)	ssiooaeoaocuyaow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:28.547127008 CET	192.168.2.4	1.1.1.1	0xc69e	Standard query (0)	ywmgykycywqqewqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:28.686032057 CET	192.168.2.4	1.1.1.1	0xa8bc	Standard query (0)	uosaescwmkiyscay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:28.825078011 CET	192.168.2.4	1.1.1.1	0xe565	Standard query (0)	eigywisgeoiskekg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:28.964570045 CET	192.168.2.4	1.1.1.1	0x6511	Standard query (0)	msqsoggkkoiokugk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:29.103749990 CET	192.168.2.4	1.1.1.1	0x399f	Standard query (0)	cmaaciimeememwao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:29.244179010 CET	192.168.2.4	1.1.1.1	0xf8f	Standard query (0)	uigkauqkumywguig.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:29.382853031 CET	192.168.2.4	1.1.1.1	0x11e4	Standard query (0)	wggygeoisauouuoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:29.524154902 CET	192.168.2.4	1.1.1.1	0xef66	Standard query (0)	okoykokgycygucya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:29.663762093 CET	192.168.2.4	1.1.1.1	0xfcc	Standard query (0)	ewaoowewmsomgaiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:29.804266930 CET	192.168.2.4	1.1.1.1	0xf7d0	Standard query (0)	ieiegkokewkqmkwe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:29.944830894 CET	192.168.2.4	1.1.1.1	0xcb82	Standard query (0)	gakesieaaickekuo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:30.084352016 CET	192.168.2.4	1.1.1.1	0x8658	Standard query (0)	ecasigiwguqgguyw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:30.224000931 CET	192.168.2.4	1.1.1.1	0xf5c3	Standard query (0)	okwswuciummewsui.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:30.363003969 CET	192.168.2.4	1.1.1.1	0x741f	Standard query (0)	ggaqiymaekkywusy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:30.503482103 CET	192.168.2.4	1.1.1.1	0x6ca0	Standard query (0)	ocicimqkgucacyim.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:30.642405033 CET	192.168.2.4	1.1.1.1	0x21b4	Standard query (0)	qoyisgoayskswigs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:30.781968117 CET	192.168.2.4	1.1.1.1	0xd02c	Standard query (0)	wsywmuwgsogemomw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:30.921075106 CET	192.168.2.4	1.1.1.1	0xd3e5	Standard query (0)	skaeggkkcmoqoywy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:31.062247038 CET	192.168.2.4	1.1.1.1	0x5641	Standard query (0)	uowicsywgqmgagyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:31.201191902 CET	192.168.2.4	1.1.1.1	0xb873	Standard query (0)	yqyqgowkwqiggewq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:31.339624882 CET	192.168.2.4	1.1.1.1	0x442c	Standard query (0)	aikmggymywuooyqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:31.480123043 CET	192.168.2.4	1.1.1.1	0xc741	Standard query (0)	semgkyogsqqwgsmy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:31.620127916 CET	192.168.2.4	1.1.1.1	0xa7a0	Standard query (0)	ucmwywoqciswaguc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:31.761465073 CET	192.168.2.4	1.1.1.1	0x4ca2	Standard query (0)	qowoagcmkkgqcswk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:31.900794029 CET	192.168.2.4	1.1.1.1	0xd175	Standard query (0)	mmgusimiaqiweyas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:32.040924072 CET	192.168.2.4	1.1.1.1	0xc77e	Standard query (0)	wgssaogcsscmkswu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:32.180701017 CET	192.168.2.4	1.1.1.1	0xdc9	Standard query (0)	aoeewogkicikusoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:32.320074081 CET	192.168.2.4	1.1.1.1	0xf25b	Standard query (0)	ikggquqsigykqamc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:32.460138083 CET	192.168.2.4	1.1.1.1	0xb73b	Standard query (0)	waaqccyeaeywuoqu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:32.599690914 CET	192.168.2.4	1.1.1.1	0x9ebd	Standard query (0)	ecgiqiiieksaooyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:32.737742901 CET	192.168.2.4	1.1.1.1	0xe03b	Standard query (0)	iqcogqmwegaqewuu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:32.876492977 CET	192.168.2.4	1.1.1.1	0xa0ab	Standard query (0)	aiusammkykucyyso.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:33.023685932 CET	192.168.2.4	1.1.1.1	0xe212	Standard query (0)	qgkswogkcsaeegki.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:33.169502020 CET	192.168.2.4	1.1.1.1	0xb509	Standard query (0)	ywcwqgmikmycwoeu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:33.309427977 CET	192.168.2.4	1.1.1.1	0xb146	Standard query (0)	eiqogaaggeswoges.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:33.448205948 CET	192.168.2.4	1.1.1.1	0x36e	Standard query (0)	sekqikccsokicgye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:33.594480991 CET	192.168.2.4	1.1.1.1	0x5d08	Standard query (0)	ssqggwwkkaayqkgk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:33.734365940 CET	192.168.2.4	1.1.1.1	0xf4a8	Standard query (0)	seiiycgosccmaykm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:34.502217054 CET	192.168.2.4	1.1.1.1	0xe622	Standard query (0)	aosagqwwquakwceq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:34.650187969 CET	192.168.2.4	1.1.1.1	0x5dd7	Standard query (0)	qoiigkweqeiwycuo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:34.791301012 CET	192.168.2.4	1.1.1.1	0xa1c	Standard query (0)	oqycmugocqsyuaae.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:34.930738926 CET	192.168.2.4	1.1.1.1	0x85bb	Standard query (0)	ewwgmiicuyowacum.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:35.069307089 CET	192.168.2.4	1.1.1.1	0x576f	Standard query (0)	mmmoiaecqyuquoya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:35.209467888 CET	192.168.2.4	1.1.1.1	0x9c63	Standard query (0)	auscackumyccuyuk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:35.349982023 CET	192.168.2.4	1.1.1.1	0xa58c	Standard query (0)	okgquokwaassqyyi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:35.490729094 CET	192.168.2.4	1.1.1.1	0x42e6	Standard query (0)	uikciyeoaumwomqo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:35.629936934 CET	192.168.2.4	1.1.1.1	0xa0ff	Standard query (0)	gmoguamscceqkamk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:35.770131111 CET	192.168.2.4	1.1.1.1	0xcf9d	Standard query (0)	eqgoeemewamgucie.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:35.909035921 CET	192.168.2.4	1.1.1.1	0x7cb6	Standard query (0)	uoiyoewsiosismow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:36.052401066 CET	192.168.2.4	1.1.1.1	0x649c	Standard query (0)	cekeeosckoouciwe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:36.192358971 CET	192.168.2.4	1.1.1.1	0xadf5	Standard query (0)	mycgaaaymgowwicw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:36.330540895 CET	192.168.2.4	1.1.1.1	0x4fd7	Standard query (0)	ecgmcmqswickqcgi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:36.469686985 CET	192.168.2.4	1.1.1.1	0x1990	Standard query (0)	guwwqcuqmkmyyyyi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:36.612077951 CET	192.168.2.4	1.1.1.1	0x52b1	Standard query (0)	cygmqaagqcuusmiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:36.752465010 CET	192.168.2.4	1.1.1.1	0x40ac	Standard query (0)	wggqoukyeokwgmoy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:36.891658068 CET	192.168.2.4	1.1.1.1	0x6a9	Standard query (0)	okoccmmgswcmakcw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:37.030572891 CET	192.168.2.4	1.1.1.1	0xb97a	Standard query (0)	iesmewkokeqooioo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:37.169189930 CET	192.168.2.4	1.1.1.1	0xf259	Standard query (0)	mmiccoqwqmssougs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:37.308262110 CET	192.168.2.4	1.1.1.1	0xe1c5	Standard query (0)	aoqymkkusuecomsw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:37.447189093 CET	192.168.2.4	1.1.1.1	0xf22a	Standard query (0)	mskmgwkuiamqikce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:37.586986065 CET	192.168.2.4	1.1.1.1	0xaafc	Standard query (0)	waucsgsqqsqkacog.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:37.725898027 CET	192.168.2.4	1.1.1.1	0x2925	Standard query (0)	yqmqwygosgguwqsu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:37.864593029 CET	192.168.2.4	1.1.1.1	0x8606	Standard query (0)	wsicgeayaoueooom.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:38.003102064 CET	192.168.2.4	1.1.1.1	0x4b68	Standard query (0)	uwagocmgakuuykiu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:38.142667055 CET	192.168.2.4	1.1.1.1	0xaae	Standard query (0)	uowkoqwgqqeweume.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:38.282377005 CET	192.168.2.4	1.1.1.1	0x1ce7	Standard query (0)	aakowgaeoeuekqyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:38.421067953 CET	192.168.2.4	1.1.1.1	0x1040	Standard query (0)	skmmaauasaqywsas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:38.560003042 CET	192.168.2.4	1.1.1.1	0x41a2	Standard query (0)	cygeomikesiegqsk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:38.699059963 CET	192.168.2.4	1.1.1.1	0xcf0e	Standard query (0)	okeyuasamkcqqeka.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:38.838326931 CET	192.168.2.4	1.1.1.1	0x2769	Standard query (0)	qagaeyiqsgakegya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:38.980324984 CET	192.168.2.4	1.1.1.1	0xbf34	Standard query (0)	ucoweesewcwiosgw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:39.119379997 CET	192.168.2.4	1.1.1.1	0x4f65	Standard query (0)	sskawiyqmweogyqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:39.258338928 CET	192.168.2.4	1.1.1.1	0x4159	Standard query (0)	wgwmaeskqmwumwkk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:39.398650885 CET	192.168.2.4	1.1.1.1	0x7de6	Standard query (0)	quwocusecekwqkaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:39.537085056 CET	192.168.2.4	1.1.1.1	0x3a39	Standard query (0)	qukyogcwsgswyayo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:39.676501036 CET	192.168.2.4	1.1.1.1	0x986d	Standard query (0)	uiicikumwwsmaeem.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:39.816737890 CET	192.168.2.4	1.1.1.1	0xef49	Standard query (0)	wagyuykcqmqyygkw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:39.956262112 CET	192.168.2.4	1.1.1.1	0x19bd	Standard query (0)	uiaqcykmqwcwgmeg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:40.095424891 CET	192.168.2.4	1.1.1.1	0x91c4	Standard query (0)	uoeukcckqmmsuwaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:40.238980055 CET	192.168.2.4	1.1.1.1	0x736b	Standard query (0)	gugueqckkyuaeqqy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:40.378535032 CET	192.168.2.4	1.1.1.1	0xe5ad	Standard query (0)	skqsqowayeqesqqk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:40.517236948 CET	192.168.2.4	1.1.1.1	0xefe7	Standard query (0)	kuscomokgkmaommk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:40.658077955 CET	192.168.2.4	1.1.1.1	0x520f	Standard query (0)	wsmyawqeqguacwas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:40.797198057 CET	192.168.2.4	1.1.1.1	0x6706	Standard query (0)	ikuqcsooiucogaww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:40.937072992 CET	192.168.2.4	1.1.1.1	0xaa45	Standard query (0)	iysmukmcmacuomic.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:41.075583935 CET	192.168.2.4	1.1.1.1	0xebc6	Standard query (0)	ecqoqckqoaogcesy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:41.214581013 CET	192.168.2.4	1.1.1.1	0xd319	Standard query (0)	iesmkwqgmkmksgam.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:41.353579998 CET	192.168.2.4	1.1.1.1	0x8033	Standard query (0)	guwououoomacaysu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:41.496038914 CET	192.168.2.4	1.1.1.1	0xf086	Standard query (0)	ucsoeygscgagowqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:41.635385990 CET	192.168.2.4	1.1.1.1	0x8778	Standard query (0)	ykeuawieaequiyag.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:41.774295092 CET	192.168.2.4	1.1.1.1	0x30f1	Standard query (0)	cskowwiekeqaakki.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:41.913372040 CET	192.168.2.4	1.1.1.1	0xd1ec	Standard query (0)	ecogmmaysgwkmwqm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:42.053770065 CET	192.168.2.4	1.1.1.1	0xe261	Standard query (0)	uwuomysuqkaykwuy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:42.195277929 CET	192.168.2.4	1.1.1.1	0x1da	Standard query (0)	ikqokmauuissyuce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:42.340224028 CET	192.168.2.4	1.1.1.1	0xbe45	Standard query (0)	oeeoucsuawuqkqoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:42.562129974 CET	192.168.2.4	1.1.1.1	0x537e	Standard query (0)	ygquuyekcusgsqqu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:42.780745983 CET	192.168.2.4	1.1.1.1	0xfa6f	Standard query (0)	uqsqcgouceqmigcg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:43.096173048 CET	192.168.2.4	1.1.1.1	0x3ed6	Standard query (0)	kwoesauawkouiecq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:43.320945978 CET	192.168.2.4	1.1.1.1	0x4a47	Standard query (0)	yywgmuqggsagcmco.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:43.545983076 CET	192.168.2.4	1.1.1.1	0xfb4f	Standard query (0)	imumkckaqyieaasa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:43.766747952 CET	192.168.2.4	1.1.1.1	0x5861	Standard query (0)	qqkoemcaocsomwow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:43.991193056 CET	192.168.2.4	1.1.1.1	0xa445	Standard query (0)	awsigwcaesugycuk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:44.215430975 CET	192.168.2.4	1.1.1.1	0xc3c3	Standard query (0)	kkqoqmmcwacsqiiu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:44.441231012 CET	192.168.2.4	1.1.1.1	0x73e4	Standard query (0)	iamowksweuqyssis.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:44.660624981 CET	192.168.2.4	1.1.1.1	0x7a57	Standard query (0)	wicwocqcucgaimwe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:44.895175934 CET	192.168.2.4	1.1.1.1	0x1554	Standard query (0)	wiuyuwqiqkkogmoe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:45.057976007 CET	192.168.2.4	1.1.1.1	0x1554	Standard query (0)	wiuyuwqiqkkogmoe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:45.121175051 CET	192.168.2.4	1.1.1.1	0xc8ac	Standard query (0)	ueyeeeegieoukoci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:45.276735067 CET	192.168.2.4	1.1.1.1	0xc8ac	Standard query (0)	ueyeeeegieoukoci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:45.342686892 CET	192.168.2.4	1.1.1.1	0x626	Standard query (0)	caysuwggmqimaqwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:45.511149883 CET	192.168.2.4	1.1.1.1	0x626	Standard query (0)	caysuwggmqimaqwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:45.568119049 CET	192.168.2.4	1.1.1.1	0xd5c7	Standard query (0)	kecsceaqksygeamy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:45.730990887 CET	192.168.2.4	1.1.1.1	0xd5c7	Standard query (0)	kecsceaqksygeamy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.012550116 CET	192.168.2.4	1.1.1.1	0xa5bc	Standard query (0)	oyyagswauqyckoye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.167412996 CET	192.168.2.4	1.1.1.1	0xa5bc	Standard query (0)	oyyagswauqyckoye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.233867884 CET	192.168.2.4	1.1.1.1	0xa0c9	Standard query (0)	aciemoayegyggwiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.417093992 CET	192.168.2.4	1.1.1.1	0xa0c9	Standard query (0)	aciemoayegyggwiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.452903032 CET	192.168.2.4	1.1.1.1	0xb352	Standard query (0)	micemismikicsccc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.605225086 CET	192.168.2.4	1.1.1.1	0xb352	Standard query (0)	micemismikicsccc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.675491095 CET	192.168.2.4	1.1.1.1	0xb46d	Standard query (0)	kwieueawsewqigey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.823299885 CET	192.168.2.4	1.1.1.1	0xb46d	Standard query (0)	kwieueawsewqigey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.897604942 CET	192.168.2.4	1.1.1.1	0xffb9	Standard query (0)	qiwmqykuesscgkac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.042016029 CET	192.168.2.4	1.1.1.1	0xffb9	Standard query (0)	qiwmqykuesscgkac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.123470068 CET	192.168.2.4	1.1.1.1	0x8ae5	Standard query (0)	issaesuceymoyccq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.276612043 CET	192.168.2.4	1.1.1.1	0x8ae5	Standard query (0)	issaesuceymoyccq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.352755070 CET	192.168.2.4	1.1.1.1	0x12ad	Standard query (0)	sgowwwmqgkeyukwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.495301008 CET	192.168.2.4	1.1.1.1	0x12ad	Standard query (0)	sgowwwmqgkeyukwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.578331947 CET	192.168.2.4	1.1.1.1	0x879a	Standard query (0)	kewweiikaaysqugi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.729702950 CET	192.168.2.4	1.1.1.1	0x879a	Standard query (0)	kewweiikaaysqugi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.804353952 CET	192.168.2.4	1.1.1.1	0xd487	Standard query (0)	oywkwakwykimigck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.948493004 CET	192.168.2.4	1.1.1.1	0xd487	Standard query (0)	oywkwakwykimigck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:48.022510052 CET	192.168.2.4	1.1.1.1	0x4866	Standard query (0)	aqkiemcseioemogk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:48.171530962 CET	192.168.2.4	1.1.1.1	0x4866	Standard query (0)	aqkiemcseioemogk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:48.246735096 CET	192.168.2.4	1.1.1.1	0xf533	Standard query (0)	omoaicgooscecewq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:48.405528069 CET	192.168.2.4	1.1.1.1	0xf533	Standard query (0)	omoaicgooscecewq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:48.467571020 CET	192.168.2.4	1.1.1.1	0x2b	Standard query (0)	gcyciogqguooyici.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:48.636188030 CET	192.168.2.4	1.1.1.1	0x2b	Standard query (0)	gcyciogqguooyici.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:48.782289982 CET	192.168.2.4	1.1.1.1	0xc6e	Standard query (0)	qwyikqowekcgesga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:48.933377981 CET	192.168.2.4	1.1.1.1	0xc6e	Standard query (0)	qwyikqowekcgesga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.007009029 CET	192.168.2.4	1.1.1.1	0x71f8	Standard query (0)	moysoauykmieesas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.152493954 CET	192.168.2.4	1.1.1.1	0x71f8	Standard query (0)	moysoauykmieesas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.226810932 CET	192.168.2.4	1.1.1.1	0xf386	Standard query (0)	ysmmeamaooogyuwa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.370878935 CET	192.168.2.4	1.1.1.1	0xf386	Standard query (0)	ysmmeamaooogyuwa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.445734024 CET	192.168.2.4	1.1.1.1	0xd788	Standard query (0)	qqggiaeuuaskcisa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.589315891 CET	192.168.2.4	1.1.1.1	0xd788	Standard query (0)	qqggiaeuuaskcisa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.760421991 CET	192.168.2.4	1.1.1.1	0xc812	Standard query (0)	ukwgsimcamwqcqus.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.901842117 CET	192.168.2.4	1.1.1.1	0xc812	Standard query (0)	ukwgsimcamwqcqus.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.983109951 CET	192.168.2.4	1.1.1.1	0x6256	Standard query (0)	makysawqyqkmmkuo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:50.141782045 CET	192.168.2.4	1.1.1.1	0x6256	Standard query (0)	makysawqyqkmmkuo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:50.270812988 CET	192.168.2.4	1.1.1.1	0x3f9a	Standard query (0)	gwuaqqsyegywuaya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:50.432961941 CET	192.168.2.4	1.1.1.1	0x3f9a	Standard query (0)	gwuaqqsyegywuaya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:50.505486965 CET	192.168.2.4	1.1.1.1	0xb396	Standard query (0)	smwcqasgeqikoqss.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:50.651959896 CET	192.168.2.4	1.1.1.1	0xb396	Standard query (0)	smwcqasgeqikoqss.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:50.731945038 CET	192.168.2.4	1.1.1.1	0x3427	Standard query (0)	qigaaawumoqgmwck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:50.890425920 CET	192.168.2.4	1.1.1.1	0x3427	Standard query (0)	qigaaawumoqgmwck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:50.950491905 CET	192.168.2.4	1.1.1.1	0xcc5f	Standard query (0)	kwkiuumqgigawcek.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.107742071 CET	192.168.2.4	1.1.1.1	0xcc5f	Standard query (0)	kwkiuumqgigawcek.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.169718981 CET	192.168.2.4	1.1.1.1	0x6c47	Standard query (0)	imcgogsosiogeqgc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.339488983 CET	192.168.2.4	1.1.1.1	0x6c47	Standard query (0)	imcgogsosiogeqgc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.391350985 CET	192.168.2.4	1.1.1.1	0xac56	Standard query (0)	coosumygqywusaaq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.542686939 CET	192.168.2.4	1.1.1.1	0xac56	Standard query (0)	coosumygqywusaaq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.611865997 CET	192.168.2.4	1.1.1.1	0x8088	Standard query (0)	muikisowiqmckiao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.776216984 CET	192.168.2.4	1.1.1.1	0x8088	Standard query (0)	muikisowiqmckiao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.838521957 CET	192.168.2.4	1.1.1.1	0x4a16	Standard query (0)	eygeqyioakqgwkws.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.979506016 CET	192.168.2.4	1.1.1.1	0x4a16	Standard query (0)	eygeqyioakqgwkws.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:52.150448084 CET	192.168.2.4	1.1.1.1	0x78db	Standard query (0)	wcagmacwieoosqok.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:52.291934967 CET	192.168.2.4	1.1.1.1	0x78db	Standard query (0)	wcagmacwieoosqok.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:52.459379911 CET	192.168.2.4	1.1.1.1	0x5d85	Standard query (0)	igyccoycggkescsw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:52.605484962 CET	192.168.2.4	1.1.1.1	0x5d85	Standard query (0)	igyccoycggkescsw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:52.678025961 CET	192.168.2.4	1.1.1.1	0x2a83	Standard query (0)	uegmseugcsaymygc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:52.823156118 CET	192.168.2.4	1.1.1.1	0x2a83	Standard query (0)	uegmseugcsaymygc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:52.896967888 CET	192.168.2.4	1.1.1.1	0x3413	Standard query (0)	gcgquesqkuokqoos.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:53.041960955 CET	192.168.2.4	1.1.1.1	0x3413	Standard query (0)	gcgquesqkuokqoos.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:53.115159988 CET	192.168.2.4	1.1.1.1	0x713c	Standard query (0)	awcmmsyugikucuqg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:53.260647058 CET	192.168.2.4	1.1.1.1	0x713c	Standard query (0)	awcmmsyugikucuqg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:53.430736065 CET	192.168.2.4	1.1.1.1	0x1c6	Standard query (0)	qqmoakcgiagmaiou.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:53.594845057 CET	192.168.2.4	1.1.1.1	0x1c6	Standard query (0)	qqmoakcgiagmaiou.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:53.741311073 CET	192.168.2.4	1.1.1.1	0x876b	Standard query (0)	qcweoeaqygkgoyqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:53.904939890 CET	192.168.2.4	1.1.1.1	0x876b	Standard query (0)	qcweoeaqygkgoyqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:53.959445953 CET	192.168.2.4	1.1.1.1	0x6217	Standard query (0)	kwcqymkoyiusyywg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:54.110929966 CET	192.168.2.4	1.1.1.1	0x6217	Standard query (0)	kwcqymkoyiusyywg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:54.186562061 CET	192.168.2.4	1.1.1.1	0x89aa	Standard query (0)	uysuukowkciwgmko.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:54.339303017 CET	192.168.2.4	1.1.1.1	0x89aa	Standard query (0)	uysuukowkciwgmko.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:54.407769918 CET	192.168.2.4	1.1.1.1	0xe3fc	Standard query (0)	yyqmiikqggkgkcke.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:54.560009003 CET	192.168.2.4	1.1.1.1	0xe3fc	Standard query (0)	yyqmiikqggkgkcke.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:54.724349022 CET	192.168.2.4	1.1.1.1	0x20ca	Standard query (0)	cgwgwmsuyaicegcq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:54.870942116 CET	192.168.2.4	1.1.1.1	0x20ca	Standard query (0)	cgwgwmsuyaicegcq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:54.945101023 CET	192.168.2.4	1.1.1.1	0xf3ac	Standard query (0)	oesgsmmsyegwkaii.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.089401007 CET	192.168.2.4	1.1.1.1	0xf3ac	Standard query (0)	oesgsmmsyegwkaii.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.169217110 CET	192.168.2.4	1.1.1.1	0x4274	Standard query (0)	eeimyyskiwmsmwaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.323761940 CET	192.168.2.4	1.1.1.1	0x4274	Standard query (0)	eeimyyskiwmsmwaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.390111923 CET	192.168.2.4	1.1.1.1	0x54c0	Standard query (0)	akqmmimguqeacqki.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.546771049 CET	192.168.2.4	1.1.1.1	0x54c0	Standard query (0)	akqmmimguqeacqki.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.618846893 CET	192.168.2.4	1.1.1.1	0x20ba	Standard query (0)	eeuqeoimgoqakquw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.776777029 CET	192.168.2.4	1.1.1.1	0x20ba	Standard query (0)	eeuqeoimgoqakquw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.927548885 CET	192.168.2.4	1.1.1.1	0x4b1f	Standard query (0)	mookqcgowekwsyme.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:56.089131117 CET	192.168.2.4	1.1.1.1	0x4b1f	Standard query (0)	mookqcgowekwsyme.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:56.152893066 CET	192.168.2.4	1.1.1.1	0x2061	Standard query (0)	iaamsmcuweooiums.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:56.307909012 CET	192.168.2.4	1.1.1.1	0x2061	Standard query (0)	iaamsmcuweooiums.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:56.375364065 CET	192.168.2.4	1.1.1.1	0xd791	Standard query (0)	qwwkyygoyymumeqa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:56.527436972 CET	192.168.2.4	1.1.1.1	0xd791	Standard query (0)	qwwkyygoyymumeqa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:56.684238911 CET	192.168.2.4	1.1.1.1	0x3442	Standard query (0)	qwmqmwoieykcoums.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:56.854806900 CET	192.168.2.4	1.1.1.1	0x3442	Standard query (0)	qwmqmwoieykcoums.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:56.906761885 CET	192.168.2.4	1.1.1.1	0x86e3	Standard query (0)	aqmmgwoeiissyuay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:57.073836088 CET	192.168.2.4	1.1.1.1	0x86e3	Standard query (0)	aqmmgwoeiissyuay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:57.216855049 CET	192.168.2.4	1.1.1.1	0x4316	Standard query (0)	ukgeakkwimkacgwm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:57.385848045 CET	192.168.2.4	1.1.1.1	0x4316	Standard query (0)	ukgeakkwimkacgwm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:57.529350996 CET	192.168.2.4	1.1.1.1	0x8b4d	Standard query (0)	wcuwikyucakswsgy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:57.682698011 CET	192.168.2.4	1.1.1.1	0x8b4d	Standard query (0)	wcuwikyucakswsgy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:57.841624022 CET	192.168.2.4	1.1.1.1	0x5722	Standard query (0)	oyqmksygwiuekomo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:57.995023012 CET	192.168.2.4	1.1.1.1	0x5722	Standard query (0)	oyqmksygwiuekomo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:58.059638977 CET	192.168.2.4	1.1.1.1	0xe970	Standard query (0)	gokuyyiawuwwyeqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:58.214298010 CET	192.168.2.4	1.1.1.1	0xe970	Standard query (0)	gokuyyiawuwwyeqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:58.288897038 CET	192.168.2.4	1.1.1.1	0xf1c0	Standard query (0)	qqumaeswmyusisoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:58.432455063 CET	192.168.2.4	1.1.1.1	0xf1c0	Standard query (0)	qqumaeswmyusisoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:58.604952097 CET	192.168.2.4	1.1.1.1	0xbd44	Standard query (0)	ekommiasesmcaysg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:58.760672092 CET	192.168.2.4	1.1.1.1	0xbd44	Standard query (0)	ekommiasesmcaysg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:58.828531981 CET	192.168.2.4	1.1.1.1	0x660e	Standard query (0)	kwokcgwecseqcsck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:58.979389906 CET	192.168.2.4	1.1.1.1	0x660e	Standard query (0)	kwokcgwecseqcsck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:59.145867109 CET	192.168.2.4	1.1.1.1	0x9398	Standard query (0)	cgcukekaacucqesm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:59.309870005 CET	192.168.2.4	1.1.1.1	0x9398	Standard query (0)	cgcukekaacucqesm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:59.366756916 CET	192.168.2.4	1.1.1.1	0x967	Standard query (0)	sgiwoemuskksgmem.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:59.533942938 CET	192.168.2.4	1.1.1.1	0x967	Standard query (0)	sgiwoemuskksgmem.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:59.586328030 CET	192.168.2.4	1.1.1.1	0x8ab7	Standard query (0)	miyuaaeqyewssisg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:59.745888948 CET	192.168.2.4	1.1.1.1	0x8ab7	Standard query (0)	miyuaaeqyewssisg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:59.805815935 CET	192.168.2.4	1.1.1.1	0x18e8	Standard query (0)	awquimmiceucqika.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:59.948023081 CET	192.168.2.4	1.1.1.1	0x18e8	Standard query (0)	awquimmiceucqika.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:00.026382923 CET	192.168.2.4	1.1.1.1	0x3e1a	Standard query (0)	qwsgiwukuaoocqgw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:00.182441950 CET	192.168.2.4	1.1.1.1	0x3e1a	Standard query (0)	qwsgiwukuaoocqgw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:00.247055054 CET	192.168.2.4	1.1.1.1	0x575	Standard query (0)	coyikkwmyomyykmo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:00.401230097 CET	192.168.2.4	1.1.1.1	0x575	Standard query (0)	coyikkwmyomyykmo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:00.479760885 CET	192.168.2.4	1.1.1.1	0x97e0	Standard query (0)	osyawgmkggwwaise.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:00.723653078 CET	192.168.2.4	1.1.1.1	0xf6c1	Standard query (0)	gcuasoickeyqugwe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:00.876013994 CET	192.168.2.4	1.1.1.1	0xf6c1	Standard query (0)	gcuasoickeyqugwe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.040985107 CET	192.168.2.4	1.1.1.1	0x11bf	Standard query (0)	oscegykuecgmiioq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.189493895 CET	192.168.2.4	1.1.1.1	0x11bf	Standard query (0)	oscegykuecgmiioq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.262598038 CET	192.168.2.4	1.1.1.1	0xf5bf	Standard query (0)	camkaaeqmmemkeqo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.421330929 CET	192.168.2.4	1.1.1.1	0xf5bf	Standard query (0)	camkaaeqmmemkeqo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.489456892 CET	192.168.2.4	1.1.1.1	0x91a2	Standard query (0)	gwswakimuyyacece.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.654335022 CET	192.168.2.4	1.1.1.1	0x91a2	Standard query (0)	gwswakimuyyacece.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.716394901 CET	192.168.2.4	1.1.1.1	0x2a1	Standard query (0)	giqagqyuwgskokgg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.886477947 CET	192.168.2.4	1.1.1.1	0x2a1	Standard query (0)	giqagqyuwgskokgg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.949897051 CET	192.168.2.4	1.1.1.1	0xad6e	Standard query (0)	uqswoygsykiwckyk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:02.104558945 CET	192.168.2.4	1.1.1.1	0xad6e	Standard query (0)	uqswoygsykiwckyk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:02.261874914 CET	192.168.2.4	1.1.1.1	0xe2aa	Standard query (0)	wccgukagisyugimy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:02.408865929 CET	192.168.2.4	1.1.1.1	0xe2aa	Standard query (0)	wccgukagisyugimy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:02.493879080 CET	192.168.2.4	1.1.1.1	0x7d79	Standard query (0)	qieoqgsomueyeass.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:02.660815001 CET	192.168.2.4	1.1.1.1	0x7d79	Standard query (0)	qieoqgsomueyeass.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:02.810676098 CET	192.168.2.4	1.1.1.1	0xc81c	Standard query (0)	uqumusgyyygmiicq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:02.979746103 CET	192.168.2.4	1.1.1.1	0xc81c	Standard query (0)	uqumusgyyygmiicq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:03.033018112 CET	192.168.2.4	1.1.1.1	0x863a	Standard query (0)	wuowyewqgeeycsio.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:03.263748884 CET	192.168.2.4	1.1.1.1	0x863a	Standard query (0)	wuowyewqgeeycsio.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:03.441009045 CET	192.168.2.4	1.1.1.1	0x1601	Standard query (0)	sgckugycwoyyoeow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:03.588815928 CET	192.168.2.4	1.1.1.1	0x1601	Standard query (0)	sgckugycwoyyoeow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:03.659831047 CET	192.168.2.4	1.1.1.1	0xce0b	Standard query (0)	keyqaymgcyswowqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:03.807967901 CET	192.168.2.4	1.1.1.1	0xce0b	Standard query (0)	keyqaymgcyswowqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:03.880650997 CET	192.168.2.4	1.1.1.1	0x7640	Standard query (0)	yskeokkusmkcyosa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:04.026839018 CET	192.168.2.4	1.1.1.1	0x7640	Standard query (0)	yskeokkusmkcyosa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:04.101759911 CET	192.168.2.4	1.1.1.1	0xd3fb	Standard query (0)	ymmoqwiyeomigemu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:04.245202065 CET	192.168.2.4	1.1.1.1	0xd3fb	Standard query (0)	ymmoqwiyeomigemu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:04.328448057 CET	192.168.2.4	1.1.1.1	0x3159	Standard query (0)	iaiyeiseoyssykuu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:04.479485035 CET	192.168.2.4	1.1.1.1	0x3159	Standard query (0)	iaiyeiseoyssykuu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:04.643445015 CET	192.168.2.4	1.1.1.1	0x1c27	Standard query (0)	gcsgyeomwaaiuwmg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:04.792174101 CET	192.168.2.4	1.1.1.1	0x1c27	Standard query (0)	gcsgyeomwaaiuwmg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:04.870738029 CET	192.168.2.4	1.1.1.1	0xea72	Standard query (0)	cuccscimmuweokoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:05.026624918 CET	192.168.2.4	1.1.1.1	0xea72	Standard query (0)	cuccscimmuweokoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:05.096139908 CET	192.168.2.4	1.1.1.1	0x4a16	Standard query (0)	wigeqewyusckikqk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:05.252722979 CET	192.168.2.4	1.1.1.1	0x4a16	Standard query (0)	wigeqewyusckikqk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:05.427694082 CET	192.168.2.4	1.1.1.1	0xcbf2	Standard query (0)	wowsuycqmmumwayq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:05.594990015 CET	192.168.2.4	1.1.1.1	0xcbf2	Standard query (0)	wowsuycqmmumwayq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:05.741302013 CET	192.168.2.4	1.1.1.1	0xa949	Standard query (0)	keqgamuiascccwou.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:05.901884079 CET	192.168.2.4	1.1.1.1	0xa949	Standard query (0)	keqgamuiascccwou.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:05.959959030 CET	192.168.2.4	1.1.1.1	0xe4cd	Standard query (0)	awyogsywqmeoaemc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.105091095 CET	192.168.2.4	1.1.1.1	0xe4cd	Standard query (0)	awyogsywqmeoaemc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.184752941 CET	192.168.2.4	1.1.1.1	0xeb61	Standard query (0)	gogceqqcygywqquk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.339479923 CET	192.168.2.4	1.1.1.1	0xeb61	Standard query (0)	gogceqqcygywqquk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.405597925 CET	192.168.2.4	1.1.1.1	0x2798	Standard query (0)	akewqoewkigoyqgk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.558124065 CET	192.168.2.4	1.1.1.1	0x2798	Standard query (0)	akewqoewkigoyqgk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.629935026 CET	192.168.2.4	1.1.1.1	0x403d	Standard query (0)	smgomgmggmimcecy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.776907921 CET	192.168.2.4	1.1.1.1	0x403d	Standard query (0)	smgomgmggmimcecy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.848545074 CET	192.168.2.4	1.1.1.1	0x7851	Standard query (0)	uqemqeoguyciagkm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.995641947 CET	192.168.2.4	1.1.1.1	0x7851	Standard query (0)	uqemqeoguyciagkm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:07.161369085 CET	192.168.2.4	1.1.1.1	0x54df	Standard query (0)	oekuaqgwaqowmqwa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:07.312839031 CET	192.168.2.4	1.1.1.1	0x54df	Standard query (0)	oekuaqgwaqowmqwa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:07.385715961 CET	192.168.2.4	1.1.1.1	0x3bc6	Standard query (0)	sgqwuwmskisykocm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:07.544065952 CET	192.168.2.4	1.1.1.1	0x3bc6	Standard query (0)	sgqwuwmskisykocm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:07.605994940 CET	192.168.2.4	1.1.1.1	0x5b46	Standard query (0)	kewgquswkewgaweo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:07.776328087 CET	192.168.2.4	1.1.1.1	0x5b46	Standard query (0)	kewgquswkewgaweo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:07.984766006 CET	192.168.2.4	1.1.1.1	0x6eca	Standard query (0)	eekokuwaauqiuoci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:08.135826111 CET	192.168.2.4	1.1.1.1	0x6eca	Standard query (0)	eekokuwaauqiuoci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:08.213190079 CET	192.168.2.4	1.1.1.1	0xbc79	Standard query (0)	qweaumwmomesioio.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:08.360414982 CET	192.168.2.4	1.1.1.1	0xbc79	Standard query (0)	qweaumwmomesioio.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:08.442346096 CET	192.168.2.4	1.1.1.1	0x990	Standard query (0)	couuuksyuscyykke.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:08.605882883 CET	192.168.2.4	1.1.1.1	0x990	Standard query (0)	couuuksyuscyykke.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:08.665348053 CET	192.168.2.4	1.1.1.1	0x4da	Standard query (0)	moygyoakyaoosocs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:08.824132919 CET	192.168.2.4	1.1.1.1	0x4da	Standard query (0)	moygyoakyaoosocs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:08.890722990 CET	192.168.2.4	1.1.1.1	0x46db	Standard query (0)	qwikeawwkykgymoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:09.042897940 CET	192.168.2.4	1.1.1.1	0x46db	Standard query (0)	qwikeawwkykgymoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:09.181090117 CET	192.168.2.4	1.1.1.1	0xb220	Standard query (0)	aqcyeeuumekyigiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:09.340060949 CET	192.168.2.4	1.1.1.1	0xb220	Standard query (0)	aqcyeeuumekyigiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:09.406352997 CET	192.168.2.4	1.1.1.1	0x2642	Standard query (0)	mugimcuecsqusuec.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:09.558588982 CET	192.168.2.4	1.1.1.1	0x2642	Standard query (0)	mugimcuecsqusuec.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:09.715784073 CET	192.168.2.4	1.1.1.1	0x703c	Standard query (0)	suogmuweyqgoqkgk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:09.870873928 CET	192.168.2.4	1.1.1.1	0x703c	Standard query (0)	suogmuweyqgoqkgk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:09.934343100 CET	192.168.2.4	1.1.1.1	0xe775	Standard query (0)	ukgmmiakkgwgssak.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:10.089660883 CET	192.168.2.4	1.1.1.1	0xe775	Standard query (0)	ukgmmiakkgwgssak.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:10.156311989 CET	192.168.2.4	1.1.1.1	0x1ea8	Standard query (0)	yyuewgegwqqkccay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:10.308391094 CET	192.168.2.4	1.1.1.1	0x1ea8	Standard query (0)	yyuewgegwqqkccay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:10.472593069 CET	192.168.2.4	1.1.1.1	0xb5f0	Standard query (0)	qqmoqouykmakcwwo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:10.621062040 CET	192.168.2.4	1.1.1.1	0xb5f0	Standard query (0)	qqmoqouykmakcwwo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:10.782354116 CET	192.168.2.4	1.1.1.1	0x6077	Standard query (0)	ekucgqkwyqioewgm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:10.936727047 CET	192.168.2.4	1.1.1.1	0x6077	Standard query (0)	ekucgqkwyqioewgm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:11.006742954 CET	192.168.2.4	1.1.1.1	0x9272	Standard query (0)	cgmocwqyagacokyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:11.169198036 CET	192.168.2.4	1.1.1.1	0x9272	Standard query (0)	cgmocwqyagacokyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:11.238738060 CET	192.168.2.4	1.1.1.1	0xbebd	Standard query (0)	ekuisswoiwwasmug.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:11.401869059 CET	192.168.2.4	1.1.1.1	0xbebd	Standard query (0)	ekuisswoiwwasmug.xyz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 12, 2024 12:39:31.213359118 CET	1.1.1.1	192.168.2.4	0xce68	No error (0)	www.med.unc.edu		152.19.9.32	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:33.339274883 CET	1.1.1.1	192.168.2.4	0x462d	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Dec 12, 2024 12:39:33.339363098 CET	1.1.1.1	192.168.2.4	0x3a3e	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Dec 12, 2024 12:39:33.339548111 CET	1.1.1.1	192.168.2.4	0xae40	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:33.339548111 CET	1.1.1.1	192.168.2.4	0xae40	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:33.339663029 CET	1.1.1.1	192.168.2.4	0xf7b4	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:33.339663029 CET	1.1.1.1	192.168.2.4	0xf7b4	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:33.440141916 CET	1.1.1.1	192.168.2.4	0x2a84	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:33.440141916 CET	1.1.1.1	192.168.2.4	0x2a84	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:33.440166950 CET	1.1.1.1	192.168.2.4	0xcf1e	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Dec 12, 2024 12:39:34.211293936 CET	1.1.1.1	192.168.2.4	0xc4a	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:39:34.296035051 CET	1.1.1.1	192.168.2.4	0x66f2	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:39:34.870663881 CET	1.1.1.1	192.168.2.4	0xf608	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:39:34.870663881 CET	1.1.1.1	192.168.2.4	0xf608	No error (0)	googlehosted.l.googleusercontent.com		142.250.181.65	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:34.871366024 CET	1.1.1.1	192.168.2.4	0x1dc6	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:39:38.459326029 CET	1.1.1.1	192.168.2.4	0xd439	Name error (3)	yqceweqmaumwwywy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:38.598618031 CET	1.1.1.1	192.168.2.4	0x2073	Name error (3)	eqmycgagykgkqwsu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:38.741451025 CET	1.1.1.1	192.168.2.4	0x9790	Name error (3)	seuuicaewuoaumes.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:38.883157969 CET	1.1.1.1	192.168.2.4	0x89ec	Name error (3)	aomaeyokqgsuomii.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:39.028819084 CET	1.1.1.1	192.168.2.4	0x409d	Name error (3)	waqucgoeeeeymeii.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:39.386487961 CET	1.1.1.1	192.168.2.4	0xe254	Name error (3)	oqacqgmiaaewmmey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:39.526590109 CET	1.1.1.1	192.168.2.4	0xcbdf	Name error (3)	ykeaoyaycoiamqey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:40.108597040 CET	1.1.1.1	192.168.2.4	0xd75b	No error (0)	aikmouciiqgecoqi.xyz		166.1.160.237	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:40.258939028 CET	1.1.1.1	192.168.2.4	0xdba5	Name error (3)	koecgqggegimaeya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:40.397387028 CET	1.1.1.1	192.168.2.4	0x1470	Name error (3)	aawqwccomcemcysm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:40.538494110 CET	1.1.1.1	192.168.2.4	0x696e	Name error (3)	kcyakwisycecaqgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:40.677759886 CET	1.1.1.1	192.168.2.4	0x7aca	Name error (3)	uogksceymossmmqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:40.817760944 CET	1.1.1.1	192.168.2.4	0xbf0e	Name error (3)	qgmyeeguweaukuke.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:40.962874889 CET	1.1.1.1	192.168.2.4	0xf364	Name error (3)	mywaqkeaawisisky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:41.107537031 CET	1.1.1.1	192.168.2.4	0x8f2a	Name error (3)	yqqsggacauiiugka.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:41.248020887 CET	1.1.1.1	192.168.2.4	0x662a	Name error (3)	equmqmqwuuuioawa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:41.388452053 CET	1.1.1.1	192.168.2.4	0x8b5e	Name error (3)	wmoamsauiwauoosg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:41.527380943 CET	1.1.1.1	192.168.2.4	0xb439	Name error (3)	oqsakkimkesccikc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:41.667229891 CET	1.1.1.1	192.168.2.4	0xdda9	Name error (3)	mgiwaegaqyyaakwy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:41.806519032 CET	1.1.1.1	192.168.2.4	0xcb4	Name error (3)	ucmioacycscyeouk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:41.946284056 CET	1.1.1.1	192.168.2.4	0x94e4	Name error (3)	qumaseqmggyaiauq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:42.087973118 CET	1.1.1.1	192.168.2.4	0xbe7b	Name error (3)	uccyyemqaiiksuwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:42.227440119 CET	1.1.1.1	192.168.2.4	0x8474	Name error (3)	sesyieaiesegeaow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:42.369126081 CET	1.1.1.1	192.168.2.4	0x68cf	Name error (3)	kccmicaswqmswwak.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:42.507992029 CET	1.1.1.1	192.168.2.4	0x9dee	Name error (3)	mssaogwocegysoow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:42.652952909 CET	1.1.1.1	192.168.2.4	0x9e88	Name error (3)	wssaqmakumewmaes.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:42.793426037 CET	1.1.1.1	192.168.2.4	0xfe05	Name error (3)	cmukociggiqcouio.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:42.932960033 CET	1.1.1.1	192.168.2.4	0x435b	Name error (3)	skyqsyyymyacyayc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:43.072197914 CET	1.1.1.1	192.168.2.4	0xaba8	Name error (3)	uoigsiqmemcscosu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:43.215599060 CET	1.1.1.1	192.168.2.4	0x7ae3	Name error (3)	kuywuskkgqsigqqs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:43.354329109 CET	1.1.1.1	192.168.2.4	0x926c	Name error (3)	auayomwkewcomwas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:43.494229078 CET	1.1.1.1	192.168.2.4	0xbea4	Name error (3)	iyaikmkkowcqemsi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:43.634804010 CET	1.1.1.1	192.168.2.4	0x2804	Name error (3)	ggicikyqcaiyguee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:43.865269899 CET	1.1.1.1	192.168.2.4	0x4ecc	Name error (3)	oqyaoykomyoygics.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:44.023560047 CET	1.1.1.1	192.168.2.4	0x114e	Name error (3)	eqakguiwiqacqiwg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:44.162394047 CET	1.1.1.1	192.168.2.4	0xb78d	Name error (3)	wgcaouuqqqwucogy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:44.303742886 CET	1.1.1.1	192.168.2.4	0x8b50	Name error (3)	ewacuagosgqmuocm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:44.446652889 CET	1.1.1.1	192.168.2.4	0x10b0	Name error (3)	wgqyouayikuyuqmk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:44.587322950 CET	1.1.1.1	192.168.2.4	0x16e5	Name error (3)	owaaygsacguucaye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:44.725836039 CET	1.1.1.1	192.168.2.4	0x4c37	Name error (3)	uwgicagyykoommga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:44.864578962 CET	1.1.1.1	192.168.2.4	0xa7fe	Name error (3)	uiggameqqycugsqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:45.003242970 CET	1.1.1.1	192.168.2.4	0xa669	Name error (3)	goguooqkgysueime.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:45.146435022 CET	1.1.1.1	192.168.2.4	0x9c00	Name error (3)	keosqeosukqcooco.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:45.286248922 CET	1.1.1.1	192.168.2.4	0x7a6a	Name error (3)	maoeeogmuauywsyu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:45.425657988 CET	1.1.1.1	192.168.2.4	0x7030	Name error (3)	ismqaewykmoiguki.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:45.565676928 CET	1.1.1.1	192.168.2.4	0xe48	Name error (3)	wucwykasawokemaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:45.709789038 CET	1.1.1.1	192.168.2.4	0xcfa8	Name error (3)	ukmcqucewskcqygg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:45.851412058 CET	1.1.1.1	192.168.2.4	0xcd2d	Name error (3)	qqqmeagkkosgcayo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:46.071286917 CET	1.1.1.1	192.168.2.4	0xccbc	Name error (3)	ysawassgkwqygmmq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:46.210243940 CET	1.1.1.1	192.168.2.4	0x1be2	Name error (3)	osaeyoiqoqawauga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:46.382292986 CET	1.1.1.1	192.168.2.4	0x18c7	Name error (3)	iagisciiyoemgwaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:46.673813105 CET	1.1.1.1	192.168.2.4	0x39f7	Name error (3)	ymysimqoykwqeqiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:46.814174891 CET	1.1.1.1	192.168.2.4	0x2340	Name error (3)	ymmcwogyimsuqmcc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:46.953279972 CET	1.1.1.1	192.168.2.4	0x6bf5	Name error (3)	osmoygyawqmmimkq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:47.104269028 CET	1.1.1.1	192.168.2.4	0x6ca8	Name error (3)	immyecuqwkiyscys.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:47.243530989 CET	1.1.1.1	192.168.2.4	0x922c	Name error (3)	omsqkuiwcwoegooq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:47.382709980 CET	1.1.1.1	192.168.2.4	0xb962	Name error (3)	ukaiiiyqoooycyqm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:47.521821022 CET	1.1.1.1	192.168.2.4	0xa540	Name error (3)	isemauqkwwiumyky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:47.660418034 CET	1.1.1.1	192.168.2.4	0x6dfa	Name error (3)	keguuyioweymiaws.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:47.804549932 CET	1.1.1.1	192.168.2.4	0x53a4	Name error (3)	kwaywmaequkqccai.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:47.944046021 CET	1.1.1.1	192.168.2.4	0xd8be	Name error (3)	yyimcoiwgckeakcm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:48.086189985 CET	1.1.1.1	192.168.2.4	0x7f71	Name error (3)	ekcwemuekgqsimae.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:48.225871086 CET	1.1.1.1	192.168.2.4	0x55d0	Name error (3)	imigkomgmqgmakqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:48.364590883 CET	1.1.1.1	192.168.2.4	0x293e	Name error (3)	omasqkwqyskcagwi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:48.505076885 CET	1.1.1.1	192.168.2.4	0x85fb	Name error (3)	awyomscgweuqmgaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:48.646718979 CET	1.1.1.1	192.168.2.4	0xed4f	Name error (3)	eyoyssauceguqwmk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:48.785638094 CET	1.1.1.1	192.168.2.4	0xfff7	Name error (3)	gwwcqeykmseicgaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:48.928081036 CET	1.1.1.1	192.168.2.4	0xc416	Name error (3)	qwywqgsmgaoiwsga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:49.066636086 CET	1.1.1.1	192.168.2.4	0x7733	Name error (3)	ososwckwcqmmwqcy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:49.207910061 CET	1.1.1.1	192.168.2.4	0x4f4d	Name error (3)	osaymwoggqqycmse.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:49.346456051 CET	1.1.1.1	192.168.2.4	0x1ea9	Name error (3)	oyewqwkusieeoqey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:49.486062050 CET	1.1.1.1	192.168.2.4	0x58c8	Name error (3)	ommwaqgaemsmcqwc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:49.633876085 CET	1.1.1.1	192.168.2.4	0x4a12	Name error (3)	cauewwukyywyqiei.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:49.775734901 CET	1.1.1.1	192.168.2.4	0x1352	Name error (3)	goeykqccmemkswom.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:49.914540052 CET	1.1.1.1	192.168.2.4	0xb069	Name error (3)	aksuakswwkiimamq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:50.054264069 CET	1.1.1.1	192.168.2.4	0x63c7	Name error (3)	isaeicumkcuwqmqq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:50.194796085 CET	1.1.1.1	192.168.2.4	0x661c	Name error (3)	qiswokuokugiooky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:50.334358931 CET	1.1.1.1	192.168.2.4	0xaf07	Name error (3)	qiswcssocuqsaqkq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:50.473623037 CET	1.1.1.1	192.168.2.4	0x3d49	Name error (3)	qcyksokwumicscaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:50.611799955 CET	1.1.1.1	192.168.2.4	0xeda5	Name error (3)	esiaisyasoaoqwki.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:50.751226902 CET	1.1.1.1	192.168.2.4	0x65b7	Name error (3)	giqukkwwcwgqcisg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:50.890836000 CET	1.1.1.1	192.168.2.4	0x803f	Name error (3)	ymqaaskiwomkucuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:51.029644012 CET	1.1.1.1	192.168.2.4	0x8d30	Name error (3)	akueuaicusaoieiy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:51.168338060 CET	1.1.1.1	192.168.2.4	0xb36b	Name error (3)	sauygqecsusickcu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:51.307775021 CET	1.1.1.1	192.168.2.4	0xb8ae	Name error (3)	kkwkgmcoawgaoiwg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:51.446891069 CET	1.1.1.1	192.168.2.4	0x77ff	Name error (3)	saumycuogqsqykes.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:51.585625887 CET	1.1.1.1	192.168.2.4	0x941	Name error (3)	ukyokaigmmkumgoa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:51.723726988 CET	1.1.1.1	192.168.2.4	0x1254	Name error (3)	eswweuycwwiiykwo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:51.864265919 CET	1.1.1.1	192.168.2.4	0xae6a	Name error (3)	uksgyqiqaaiaiesi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:52.003809929 CET	1.1.1.1	192.168.2.4	0x80aa	Name error (3)	smckcsaioceiyasu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:52.144774914 CET	1.1.1.1	192.168.2.4	0xc56	Name error (3)	esimsqgcwwwmyoqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:52.284183979 CET	1.1.1.1	192.168.2.4	0x1aa8	Name error (3)	maiyuocqqiqiiskw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:52.424012899 CET	1.1.1.1	192.168.2.4	0x8d3	Name error (3)	smaaowemwiwggocu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:52.566930056 CET	1.1.1.1	192.168.2.4	0x4234	Name error (3)	kwuuwgemogmuomwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:52.706291914 CET	1.1.1.1	192.168.2.4	0x7033	Name error (3)	ukicsmiwggcwksam.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:52.846849918 CET	1.1.1.1	192.168.2.4	0x1e50	Name error (3)	gwamoggwyegsseao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:52.989720106 CET	1.1.1.1	192.168.2.4	0xd982	Name error (3)	immcqsiceooqyaay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:53.149811983 CET	1.1.1.1	192.168.2.4	0xa1dc	Name error (3)	kkcqgowgkcoyokcu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:53.301719904 CET	1.1.1.1	192.168.2.4	0xda17	Name error (3)	kecgikusmakuksma.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:53.442020893 CET	1.1.1.1	192.168.2.4	0xbf24	Name error (3)	ymuiggyusggsymoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:53.582910061 CET	1.1.1.1	192.168.2.4	0x8c94	Name error (3)	uecouukwkuceyuwg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:53.726485014 CET	1.1.1.1	192.168.2.4	0x1401	Name error (3)	eyoaceoookqskqmy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:53.866579056 CET	1.1.1.1	192.168.2.4	0x5a6c	Name error (3)	awwomgcseeqwkkom.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:54.012623072 CET	1.1.1.1	192.168.2.4	0x8c27	Name error (3)	keykoekseemyiewq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:54.153152943 CET	1.1.1.1	192.168.2.4	0x9391	Name error (3)	ysiwwoeeaaskykaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:54.317471027 CET	1.1.1.1	192.168.2.4	0x3981	Name error (3)	kwmcuwccqmuecgea.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:54.456052065 CET	1.1.1.1	192.168.2.4	0x1705	Name error (3)	gwyooeiscmwguqms.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:54.595421076 CET	1.1.1.1	192.168.2.4	0x2126	Name error (3)	wuokiysmiucoucak.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:54.734460115 CET	1.1.1.1	192.168.2.4	0xafb2	Name error (3)	wuuiumemmigyyauq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:54.873497963 CET	1.1.1.1	192.168.2.4	0x2064	Name error (3)	acwomuuukiomgqkm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:55.013807058 CET	1.1.1.1	192.168.2.4	0xc411	Name error (3)	muwqwgaaymomgwmi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:55.153533936 CET	1.1.1.1	192.168.2.4	0x37c2	Name error (3)	omgcoecwsqiuqyug.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:55.293823004 CET	1.1.1.1	192.168.2.4	0x506c	Name error (3)	kqmsgskwgemyueya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:55.434581041 CET	1.1.1.1	192.168.2.4	0x2b17	Name error (3)	eyiyueewuaqmmwcm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:55.573231936 CET	1.1.1.1	192.168.2.4	0xe367	Name error (3)	gwoyamckoqoaauoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:55.772279024 CET	1.1.1.1	192.168.2.4	0xd189	Name error (3)	qwqsoyoqkymakowm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:56.020046949 CET	1.1.1.1	192.168.2.4	0xf6a5	Name error (3)	gcmiymmqgwuquokm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:56.161674023 CET	1.1.1.1	192.168.2.4	0x65e5	Name error (3)	ymseciekayuweoww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:56.301711082 CET	1.1.1.1	192.168.2.4	0x1018	Name error (3)	oyocwswugeiqqyoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:56.440660000 CET	1.1.1.1	192.168.2.4	0x96b5	Name error (3)	omgooecquoweeomo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:56.579760075 CET	1.1.1.1	192.168.2.4	0xb49	Name error (3)	imgeoyougkmmeuec.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:56.718626976 CET	1.1.1.1	192.168.2.4	0xb706	Name error (3)	smoswyoekkccyuga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:56.857481003 CET	1.1.1.1	192.168.2.4	0x74b2	Name error (3)	suwkomiqcykeyako.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:56.996449947 CET	1.1.1.1	192.168.2.4	0x2305	Name error (3)	smwsugycuuckemue.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:57.135802984 CET	1.1.1.1	192.168.2.4	0x400	Name error (3)	qigcqiaomwieqwka.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:57.275304079 CET	1.1.1.1	192.168.2.4	0xef24	Name error (3)	oekcyqqggaegsesm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:57.414083958 CET	1.1.1.1	192.168.2.4	0xb53a	Name error (3)	qcoysaaooaiccqyu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:57.562443972 CET	1.1.1.1	192.168.2.4	0xf39c	Name error (3)	mismuqiygyeysaoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:57.700649023 CET	1.1.1.1	192.168.2.4	0xff9a	Name error (3)	wockoyekyageakcg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:57.839415073 CET	1.1.1.1	192.168.2.4	0x9551	Name error (3)	ososokqeakgguwsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:57.978535891 CET	1.1.1.1	192.168.2.4	0xe320	Name error (3)	wcgqccqcugomywua.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:58.121004105 CET	1.1.1.1	192.168.2.4	0xc89	Name error (3)	aqaqgemescmwsqks.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:58.259814024 CET	1.1.1.1	192.168.2.4	0x894	Name error (3)	aqiwocaywcswuwsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:58.400468111 CET	1.1.1.1	192.168.2.4	0x4951	Name error (3)	aqgmgoqcoqqkguyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:58.541580915 CET	1.1.1.1	192.168.2.4	0xc1a7	Name error (3)	oywgqkusocouysua.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:58.680263042 CET	1.1.1.1	192.168.2.4	0xb635	Name error (3)	uyygagweoagcuqky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:58.819111109 CET	1.1.1.1	192.168.2.4	0xd759	Name error (3)	muiccguyaeaqwweg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:58.958231926 CET	1.1.1.1	192.168.2.4	0x5fb2	Name error (3)	qiqueqokwqqgwwci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:59.096602917 CET	1.1.1.1	192.168.2.4	0x3311	Name error (3)	uygmgoymcwcgkios.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:59.236109972 CET	1.1.1.1	192.168.2.4	0x794	Name error (3)	qiyggmguowygeooc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:59.374720097 CET	1.1.1.1	192.168.2.4	0xe12c	Name error (3)	acacoiqgoimayqwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:59.516199112 CET	1.1.1.1	192.168.2.4	0x2b91	Name error (3)	smisyqewaummmwoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:59.656322956 CET	1.1.1.1	192.168.2.4	0x7eef	Name error (3)	mumuqocoisaucwmq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:59.795356989 CET	1.1.1.1	192.168.2.4	0x2b8a	Name error (3)	qqoawmqqwqcusmee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:39:59.934830904 CET	1.1.1.1	192.168.2.4	0xfad8	Name error (3)	qcygacuamqqugcck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:00.074678898 CET	1.1.1.1	192.168.2.4	0xc728	Name error (3)	kkiigoymgkmoggoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:00.216344118 CET	1.1.1.1	192.168.2.4	0x3395	Name error (3)	qqmicqemgcgieoau.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:00.355386972 CET	1.1.1.1	192.168.2.4	0x3e55	Name error (3)	sagymwuwgeucsmac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:00.496102095 CET	1.1.1.1	192.168.2.4	0xf1d3	Name error (3)	igmqooiwioymwkcm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:00.634954929 CET	1.1.1.1	192.168.2.4	0x5d50	Name error (3)	osyqameakgkceeog.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:00.776995897 CET	1.1.1.1	192.168.2.4	0xea15	Name error (3)	sgigamoeiwksoecq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:00.917996883 CET	1.1.1.1	192.168.2.4	0x200	Name error (3)	keckssemmeoqieqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:01.057805061 CET	1.1.1.1	192.168.2.4	0xc8e7	Name error (3)	caysswwugsmkeksw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:01.200155973 CET	1.1.1.1	192.168.2.4	0xcf87	Name error (3)	cgiamwsqgcmqgqse.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:01.340766907 CET	1.1.1.1	192.168.2.4	0xe3fc	Name error (3)	uyeqwcuyimescesu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:01.481746912 CET	1.1.1.1	192.168.2.4	0xf1df	Name error (3)	ekiwqiyewuiqoemo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:01.633454084 CET	1.1.1.1	192.168.2.4	0x4649	Name error (3)	oeakuqueisysswcg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:01.773530960 CET	1.1.1.1	192.168.2.4	0x60e4	Name error (3)	acemcwecgiqcukys.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:01.912513018 CET	1.1.1.1	192.168.2.4	0x93c8	Name error (3)	qcwaiaiqiwcakawa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:02.053704023 CET	1.1.1.1	192.168.2.4	0x429d	Name error (3)	esyiocqieemagwmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:02.193650961 CET	1.1.1.1	192.168.2.4	0xeb1d	Name error (3)	kqsakygykwusqams.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:02.334259987 CET	1.1.1.1	192.168.2.4	0x39cb	Name error (3)	ymygkkggyigeqcqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:02.474699020 CET	1.1.1.1	192.168.2.4	0x2b6f	Name error (3)	qqqkagyoymmosuyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:02.616307974 CET	1.1.1.1	192.168.2.4	0xdc60	Name error (3)	moiimkscmiswaesw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:02.755728960 CET	1.1.1.1	192.168.2.4	0xa392	Name error (3)	igkiociagqsacmwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:02.896790028 CET	1.1.1.1	192.168.2.4	0x9b3e	Name error (3)	ymugwyokyyccykmw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:03.039674044 CET	1.1.1.1	192.168.2.4	0x1d6c	Name error (3)	gieksqwccmmqkemm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:03.182440996 CET	1.1.1.1	192.168.2.4	0x3cc1	Name error (3)	iaueigwgocakgsku.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:03.327227116 CET	1.1.1.1	192.168.2.4	0xec88	Name error (3)	sgsasqgwayeckgoy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:03.466377974 CET	1.1.1.1	192.168.2.4	0x5507	Name error (3)	kwogawueykiiumao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:03.606642008 CET	1.1.1.1	192.168.2.4	0x4df4	Name error (3)	iagmkeayqmuowswy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:03.746618032 CET	1.1.1.1	192.168.2.4	0xc15a	Name error (3)	yyyagyakeciucagk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:03.888614893 CET	1.1.1.1	192.168.2.4	0x94e5	Name error (3)	isukyiwyscosaaqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:04.033910036 CET	1.1.1.1	192.168.2.4	0x6d67	Name error (3)	goicqsmskkygkkka.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:04.174097061 CET	1.1.1.1	192.168.2.4	0x2613	Name error (3)	awacwkqgsoomimye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:04.313271999 CET	1.1.1.1	192.168.2.4	0x9fef	Name error (3)	iaawaweqwceogamg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:04.454298973 CET	1.1.1.1	192.168.2.4	0x7f97	Name error (3)	kqueagsoikuyocca.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:04.595500946 CET	1.1.1.1	192.168.2.4	0xf8cb	Name error (3)	momoqikcaksewaua.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:04.736592054 CET	1.1.1.1	192.168.2.4	0x5a01	Name error (3)	suagiqkqmkgysmiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:04.876216888 CET	1.1.1.1	192.168.2.4	0xf110	Name error (3)	gcwequgwyimwymsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:05.017059088 CET	1.1.1.1	192.168.2.4	0x4982	Name error (3)	igywsgwooemqiuss.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:05.155597925 CET	1.1.1.1	192.168.2.4	0x8306	Name error (3)	wikiagqsmeeaeegy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:05.294807911 CET	1.1.1.1	192.168.2.4	0x52fa	Name error (3)	eeoeukoqgiwsumsu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:05.436367035 CET	1.1.1.1	192.168.2.4	0x7124	Name error (3)	ygooiessycewaocg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:05.575563908 CET	1.1.1.1	192.168.2.4	0xb242	Name error (3)	qcqgssmagywqcgws.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:05.714382887 CET	1.1.1.1	192.168.2.4	0x82f7	Name error (3)	goiikukwyyauemqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:05.853689909 CET	1.1.1.1	192.168.2.4	0xf22b	Name error (3)	comuwmkimocayeeu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:05.993662119 CET	1.1.1.1	192.168.2.4	0xe44f	Name error (3)	isgasoomksiwqcmg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:06.133305073 CET	1.1.1.1	192.168.2.4	0x1494	Name error (3)	qigismmgwsiseyuu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:06.273085117 CET	1.1.1.1	192.168.2.4	0xf30f	Name error (3)	wuqggcwmoscwykwg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:06.414376020 CET	1.1.1.1	192.168.2.4	0x33b9	Name error (3)	qceawaaswmsuekmu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:06.560014963 CET	1.1.1.1	192.168.2.4	0x797c	Name error (3)	ygucsucmagwqsqcu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:06.707207918 CET	1.1.1.1	192.168.2.4	0x4193	Name error (3)	giuccqyqokookyue.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:06.846270084 CET	1.1.1.1	192.168.2.4	0x2224	Name error (3)	gceesusqmuockkgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:06.986044884 CET	1.1.1.1	192.168.2.4	0xd7f7	Name error (3)	ygesoycecmkuwayg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:07.125009060 CET	1.1.1.1	192.168.2.4	0xc751	Name error (3)	sasqgsyksiccuuws.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:07.267436981 CET	1.1.1.1	192.168.2.4	0xcbc4	Name error (3)	qwggykgwkqoceiuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:07.407429934 CET	1.1.1.1	192.168.2.4	0x4fbb	Name error (3)	wiguisuayimaukgu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:07.547228098 CET	1.1.1.1	192.168.2.4	0x1916	Name error (3)	qcwcgegyyieaoqca.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:07.686871052 CET	1.1.1.1	192.168.2.4	0x1a2f	Name error (3)	gwcyyawigmwceaqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:07.829699993 CET	1.1.1.1	192.168.2.4	0x2bcb	Name error (3)	mueuwcqsioowsmce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:07.968666077 CET	1.1.1.1	192.168.2.4	0xf9d3	Name error (3)	qiewcykmuuacuoyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:08.108680010 CET	1.1.1.1	192.168.2.4	0x1463	Name error (3)	coayaokeissieqcc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:08.248590946 CET	1.1.1.1	192.168.2.4	0xddbe	Name error (3)	oeooiqokqsqcsaig.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:08.387437105 CET	1.1.1.1	192.168.2.4	0xf366	Name error (3)	masegmsiqgamiugm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:08.529805899 CET	1.1.1.1	192.168.2.4	0xcfab	Name error (3)	smwywssyyaciqkae.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:08.669043064 CET	1.1.1.1	192.168.2.4	0x30e9	Name error (3)	aweqoooqomueeiwi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:08.810774088 CET	1.1.1.1	192.168.2.4	0x1b92	Name error (3)	akasikewaomyiwqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:08.950865030 CET	1.1.1.1	192.168.2.4	0x65b1	Name error (3)	oyyamqygcecqocmq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:09.089803934 CET	1.1.1.1	192.168.2.4	0x81e6	Name error (3)	qwikoqqgiayyuakq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:09.229872942 CET	1.1.1.1	192.168.2.4	0xbaa	Name error (3)	miqcugomwgmygyoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:09.470444918 CET	1.1.1.1	192.168.2.4	0xe1ba	Name error (3)	wiccyamsgmuqoeoy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:09.611344099 CET	1.1.1.1	192.168.2.4	0x601f	Name error (3)	ymeiqyyqqyaaygie.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:09.750823975 CET	1.1.1.1	192.168.2.4	0x4ea	Name error (3)	wiomcwmascsigags.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:09.890121937 CET	1.1.1.1	192.168.2.4	0x1d82	Name error (3)	awgyuqqswicwkqcs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:10.028938055 CET	1.1.1.1	192.168.2.4	0xcb5c	Name error (3)	iacisiamimiiqyeo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:10.167644024 CET	1.1.1.1	192.168.2.4	0x55fb	Name error (3)	wogawoqysgiockwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:10.309609890 CET	1.1.1.1	192.168.2.4	0xe34a	Name error (3)	mayykkuyeuiggyws.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:10.448574066 CET	1.1.1.1	192.168.2.4	0xf706	Name error (3)	cosaygigqegeyewi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:10.587179899 CET	1.1.1.1	192.168.2.4	0x89c0	Name error (3)	ekqyosgcumkcecmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:10.726233006 CET	1.1.1.1	192.168.2.4	0xa413	Name error (3)	qimmkmaumumswocw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:10.867252111 CET	1.1.1.1	192.168.2.4	0x316b	Name error (3)	acqaagqgmsmeouce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:11.006334066 CET	1.1.1.1	192.168.2.4	0xd838	Name error (3)	awasockiaymagmci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:11.147263050 CET	1.1.1.1	192.168.2.4	0x5b89	Name error (3)	akuyqkmomwqyiyow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:11.285356045 CET	1.1.1.1	192.168.2.4	0xeac9	Name error (3)	caceukeeygaaqaec.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:11.423811913 CET	1.1.1.1	192.168.2.4	0x8d0c	Name error (3)	qwcaikouwwekssco.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:11.563404083 CET	1.1.1.1	192.168.2.4	0x7233	Name error (3)	qqioykeogcwkowgq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:11.704737902 CET	1.1.1.1	192.168.2.4	0xe39e	Name error (3)	igeqissugeuswaus.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:11.843457937 CET	1.1.1.1	192.168.2.4	0xde50	Name error (3)	osoawyeyassgycgy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:11.982060909 CET	1.1.1.1	192.168.2.4	0xe78b	Name error (3)	cuaumuqcoeegomsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:12.122474909 CET	1.1.1.1	192.168.2.4	0x903	Name error (3)	oyogquqkmyqwwkuq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:12.261440992 CET	1.1.1.1	192.168.2.4	0x76f2	Name error (3)	gwyougsgeaaoiumg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:12.399595022 CET	1.1.1.1	192.168.2.4	0xf775	Name error (3)	ukeoemaaimqyuais.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:12.539948940 CET	1.1.1.1	192.168.2.4	0xa09e	Name error (3)	oewuwcsmaacckewa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:12.685096979 CET	1.1.1.1	192.168.2.4	0x53b	Name error (3)	esykokiigsgwcwsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:12.833193064 CET	1.1.1.1	192.168.2.4	0xcc49	Name error (3)	ekgqymkkqiwogqsy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:12.974509954 CET	1.1.1.1	192.168.2.4	0xf51b	Name error (3)	wueossewygqoakoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:13.113514900 CET	1.1.1.1	192.168.2.4	0x1090	Name error (3)	isceiesauogasmoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:13.254410028 CET	1.1.1.1	192.168.2.4	0xeaad	Name error (3)	giscmywoiaqmqcmw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:13.394725084 CET	1.1.1.1	192.168.2.4	0x663f	Name error (3)	uyqweoyukcewugsu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:13.534909964 CET	1.1.1.1	192.168.2.4	0xf1dd	Name error (3)	imuscegymggagewg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:13.674173117 CET	1.1.1.1	192.168.2.4	0xa3c8	Name error (3)	wgesgakysuqaewik.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:13.813424110 CET	1.1.1.1	192.168.2.4	0xe91d	Name error (3)	uwoyyqgiwowysqou.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:13.953078985 CET	1.1.1.1	192.168.2.4	0x3e71	Name error (3)	syaouwwyoaemeekm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:14.091624975 CET	1.1.1.1	192.168.2.4	0x3cb6	Name error (3)	aoscugususamokuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:14.230655909 CET	1.1.1.1	192.168.2.4	0x9819	Name error (3)	qucyaygweeasqeoy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:14.372807026 CET	1.1.1.1	192.168.2.4	0x6e11	Name error (3)	uiwwamyuymycooey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:14.511610031 CET	1.1.1.1	192.168.2.4	0xa501	Name error (3)	iygukwyuqwiuoqmi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:14.650494099 CET	1.1.1.1	192.168.2.4	0xf0fb	Name error (3)	koaeaguekwcaousw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:14.790476084 CET	1.1.1.1	192.168.2.4	0xa992	Name error (3)	skssioqkemoiieaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:14.929711103 CET	1.1.1.1	192.168.2.4	0x250e	Name error (3)	yewomygmueegmoqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:15.069323063 CET	1.1.1.1	192.168.2.4	0x93ce	Name error (3)	kuyoukwwacqkcoyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:15.208233118 CET	1.1.1.1	192.168.2.4	0x21d9	Name error (3)	gmcqgmkyguwkskyg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:15.347270012 CET	1.1.1.1	192.168.2.4	0xe0b3	Name error (3)	mygiqcqokowwmgqq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:15.487612009 CET	1.1.1.1	192.168.2.4	0x66ef	Name error (3)	cymogqmasaiiwmww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:15.627482891 CET	1.1.1.1	192.168.2.4	0xeb1d	Name error (3)	iykumkamcykgicyi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:15.766694069 CET	1.1.1.1	192.168.2.4	0x62aa	Name error (3)	cyemcqwkasuimkgs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:15.906567097 CET	1.1.1.1	192.168.2.4	0xb8b8	Name error (3)	ieqeeiggkuqcomyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:16.046044111 CET	1.1.1.1	192.168.2.4	0x3bfd	Name error (3)	ssmkyomikukusksu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:16.185714006 CET	1.1.1.1	192.168.2.4	0xb278	Name error (3)	kimakioiwmawksiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:16.328399897 CET	1.1.1.1	192.168.2.4	0xa2a	Name error (3)	qumssmeysccykkyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:16.469856024 CET	1.1.1.1	192.168.2.4	0x4b06	Name error (3)	ykuoaucocogcwoky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:16.608323097 CET	1.1.1.1	192.168.2.4	0x72f6	Name error (3)	semyssioekmosauo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:16.748810053 CET	1.1.1.1	192.168.2.4	0x9061	Name error (3)	aiiqyyikowqaygwy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:16.888505936 CET	1.1.1.1	192.168.2.4	0xa66a	Name error (3)	kouumoyqiuckkcau.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:17.028661013 CET	1.1.1.1	192.168.2.4	0x8c2e	Name error (3)	qgwkkkyicoqmooqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:17.170692921 CET	1.1.1.1	192.168.2.4	0xbc75	Name error (3)	uwwcocucusmeguaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:17.310868979 CET	1.1.1.1	192.168.2.4	0x9200	Name error (3)	cekggiciueyeyoku.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:17.449527979 CET	1.1.1.1	192.168.2.4	0x3134	Name error (3)	iqqeoamqwiuiyuua.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:17.588299036 CET	1.1.1.1	192.168.2.4	0x8761	Name error (3)	uokqmokseqqakiui.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:17.727040052 CET	1.1.1.1	192.168.2.4	0x5587	Name error (3)	cyqqgacqkowwkqqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:17.866724968 CET	1.1.1.1	192.168.2.4	0x65ee	Name error (3)	cmqqeimyycgqwsgg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:18.007939100 CET	1.1.1.1	192.168.2.4	0x4de1	Name error (3)	wmgeoqqiwqcmimwu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:18.147284031 CET	1.1.1.1	192.168.2.4	0x3190	Name error (3)	quyckaioggawuois.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:18.286998987 CET	1.1.1.1	192.168.2.4	0xfab9	Name error (3)	eqciawooemoueyqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:18.425657988 CET	1.1.1.1	192.168.2.4	0x9731	Name error (3)	oqoaumkywacmuwwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:18.565023899 CET	1.1.1.1	192.168.2.4	0x8d5e	Name error (3)	ewueyekksqksycww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:18.704917908 CET	1.1.1.1	192.168.2.4	0x6b9	Name error (3)	csmasucykosuwouy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:18.843652010 CET	1.1.1.1	192.168.2.4	0x58c5	Name error (3)	seeogeqwsqmsoaqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:18.981503010 CET	1.1.1.1	192.168.2.4	0xcd6a	Name error (3)	gusmkkaiomeeqaiy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:19.120848894 CET	1.1.1.1	192.168.2.4	0x9904	Name error (3)	msyecoiqeyqeiquy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:19.259741068 CET	1.1.1.1	192.168.2.4	0x7741	Name error (3)	skawoueawceoywsy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:19.399678946 CET	1.1.1.1	192.168.2.4	0xac2d	Name error (3)	iyuaqococuqcsgii.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:19.537749052 CET	1.1.1.1	192.168.2.4	0x8ad2	Name error (3)	kuyaasckcgacyesi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:19.676744938 CET	1.1.1.1	192.168.2.4	0x84f2	Name error (3)	aaeqiiecqqumcgky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:19.816216946 CET	1.1.1.1	192.168.2.4	0x45bc	Name error (3)	aawiysageawcoyok.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:19.955022097 CET	1.1.1.1	192.168.2.4	0xa0dc	Name error (3)	yqysoaosqewciiww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:20.092924118 CET	1.1.1.1	192.168.2.4	0xbfe1	Name error (3)	yessywkwcwmyewqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:20.231734991 CET	1.1.1.1	192.168.2.4	0x8bb5	Name error (3)	aueiqscgeicewaoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:20.370673895 CET	1.1.1.1	192.168.2.4	0x285e	Name error (3)	uccsgcekiwcyucou.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:20.509453058 CET	1.1.1.1	192.168.2.4	0x5bd1	Name error (3)	aiumyocycyyikiwc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:20.648855925 CET	1.1.1.1	192.168.2.4	0xe67	Name error (3)	aoqayemwgmsyuimi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:20.791949034 CET	1.1.1.1	192.168.2.4	0xcd7f	Name error (3)	mmiowgeswucumqae.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:20.930565119 CET	1.1.1.1	192.168.2.4	0x294b	Name error (3)	mmiugosumuqmuqoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:21.069839954 CET	1.1.1.1	192.168.2.4	0xef0b	Name error (3)	ecqisawmymscauow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:21.211519003 CET	1.1.1.1	192.168.2.4	0xe6f7	Name error (3)	iyoqqeicqoquiqka.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:21.349967003 CET	1.1.1.1	192.168.2.4	0x8295	Name error (3)	ecoqwiswmwqokmay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:21.488749981 CET	1.1.1.1	192.168.2.4	0x7f44	Name error (3)	ceckmwoyqkwgeoqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:21.629743099 CET	1.1.1.1	192.168.2.4	0xd942	Name error (3)	kcoiygiwuyqyaoku.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:21.769593954 CET	1.1.1.1	192.168.2.4	0x5747	Name error (3)	aaeyckqsgmiqsgew.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:21.909154892 CET	1.1.1.1	192.168.2.4	0x18c9	Name error (3)	qgaiosyouwwkgsmm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:22.048259974 CET	1.1.1.1	192.168.2.4	0x5626	Name error (3)	ocqseueommkkqcgs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:22.190874100 CET	1.1.1.1	192.168.2.4	0x8b60	Name error (3)	owmesaosmycoeceq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:22.330085993 CET	1.1.1.1	192.168.2.4	0x3757	Name error (3)	qokauaicweuwscac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:22.561654091 CET	1.1.1.1	192.168.2.4	0x830e	Name error (3)	sewmmwqeyauowwwo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:22.805265903 CET	1.1.1.1	192.168.2.4	0x959c	Name error (3)	mmgowiccqoeomagq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:22.943981886 CET	1.1.1.1	192.168.2.4	0xe365	Name error (3)	kcwiywyygywkkysk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:23.083638906 CET	1.1.1.1	192.168.2.4	0x7fcf	Name error (3)	syiysgiqgqggqkoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:23.223342896 CET	1.1.1.1	192.168.2.4	0xe5d4	Name error (3)	ykuasckuceswseig.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:23.368911028 CET	1.1.1.1	192.168.2.4	0xdb95	Name error (3)	quugmiumsieaiyys.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:23.507227898 CET	1.1.1.1	192.168.2.4	0xca1a	Name error (3)	ikqywgcqaggogqsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:23.646732092 CET	1.1.1.1	192.168.2.4	0x61a9	Name error (3)	eqyamamqwsseyoig.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:23.788724899 CET	1.1.1.1	192.168.2.4	0xbcc5	Name error (3)	seqkawokggwucsui.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:23.927884102 CET	1.1.1.1	192.168.2.4	0xb118	Name error (3)	gmqeqkcqackwkgao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:24.066911936 CET	1.1.1.1	192.168.2.4	0xbffd	Name error (3)	guowewgekuoqacyy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:24.206629992 CET	1.1.1.1	192.168.2.4	0x82b9	Name error (3)	aaokyscqeecowaci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:24.344966888 CET	1.1.1.1	192.168.2.4	0x28c1	Name error (3)	ywywwwgwekicgico.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:24.484807014 CET	1.1.1.1	192.168.2.4	0xd9ad	Name error (3)	wsisaoaauqwmuomg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:24.625319004 CET	1.1.1.1	192.168.2.4	0xa06a	Name error (3)	koouumcuucaeakye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:24.764333010 CET	1.1.1.1	192.168.2.4	0x2ee0	Name error (3)	okccisioeycusekg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:24.907859087 CET	1.1.1.1	192.168.2.4	0xbb78	Name error (3)	cymymsciyaiacwgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:25.047593117 CET	1.1.1.1	192.168.2.4	0x28b9	Name error (3)	aoyeoimcuuqakckw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:25.186980963 CET	1.1.1.1	192.168.2.4	0x93e8	Name error (3)	qoaweokuqggaymks.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:25.326884985 CET	1.1.1.1	192.168.2.4	0xcf2b	Name error (3)	ewuyacewswkoueqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:25.466444016 CET	1.1.1.1	192.168.2.4	0xb5f7	Name error (3)	kiuymkmaomciimcc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:25.606134892 CET	1.1.1.1	192.168.2.4	0xf8b	Name error (3)	oqaiyaoqwyeswaiy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:25.747456074 CET	1.1.1.1	192.168.2.4	0xdb21	Name error (3)	koyokggaqsagggym.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:25.886337996 CET	1.1.1.1	192.168.2.4	0xd84a	Name error (3)	cmsuagygagqceocm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:26.026355028 CET	1.1.1.1	192.168.2.4	0xdc9c	Name error (3)	uisgoqaoksgqsqyg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:26.165481091 CET	1.1.1.1	192.168.2.4	0x4e3c	Name error (3)	ocgcqsagaakgkcma.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:26.304265976 CET	1.1.1.1	192.168.2.4	0xc999	Name error (3)	okgigkmiieweagia.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:26.444134951 CET	1.1.1.1	192.168.2.4	0x58f1	Name error (3)	skiwkmaaeeiqqgee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:26.585232973 CET	1.1.1.1	192.168.2.4	0x87a8	Name error (3)	aagokgyaswscyaeu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:26.723717928 CET	1.1.1.1	192.168.2.4	0x1bc0	Name error (3)	gmciuwiycsqycggy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:26.866918087 CET	1.1.1.1	192.168.2.4	0xd353	Name error (3)	ggeymcaisciikucq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:27.011168003 CET	1.1.1.1	192.168.2.4	0x4b1b	Name error (3)	uwskygguegqkasme.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:27.150264025 CET	1.1.1.1	192.168.2.4	0x6075	Name error (3)	cyumiiokkswcoeag.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:27.289371967 CET	1.1.1.1	192.168.2.4	0xaeaa	Name error (3)	oqisqmesaeoegmyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:27.428045034 CET	1.1.1.1	192.168.2.4	0xe5ca	Name error (3)	wagasowawsoyycom.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:27.569535017 CET	1.1.1.1	192.168.2.4	0xa4b7	Name error (3)	gaguweiwsgouugqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:27.707997084 CET	1.1.1.1	192.168.2.4	0xc8c0	Name error (3)	syyyweaywowycsia.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:27.847235918 CET	1.1.1.1	192.168.2.4	0x20e6	Name error (3)	mmoycwqiuykiusuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:27.985867023 CET	1.1.1.1	192.168.2.4	0x786	Name error (3)	ikoycakqiuuascco.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:28.125940084 CET	1.1.1.1	192.168.2.4	0x17b	Name error (3)	cmuqekokuyuqgige.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:28.265052080 CET	1.1.1.1	192.168.2.4	0x17ea	Name error (3)	cywoimwmsoamqoem.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:28.406131029 CET	1.1.1.1	192.168.2.4	0xfd9c	Name error (3)	skyiqyaeoykwcgiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:28.546235085 CET	1.1.1.1	192.168.2.4	0xa772	Name error (3)	ssiooaeoaocuyaow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:28.685004950 CET	1.1.1.1	192.168.2.4	0xc69e	Name error (3)	ywmgykycywqqewqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:28.824062109 CET	1.1.1.1	192.168.2.4	0xa8bc	Name error (3)	uosaescwmkiyscay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:28.963453054 CET	1.1.1.1	192.168.2.4	0xe565	Name error (3)	eigywisgeoiskekg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:29.102755070 CET	1.1.1.1	192.168.2.4	0x6511	Name error (3)	msqsoggkkoiokugk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:29.243140936 CET	1.1.1.1	192.168.2.4	0x399f	Name error (3)	cmaaciimeememwao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:29.381978989 CET	1.1.1.1	192.168.2.4	0xf8f	Name error (3)	uigkauqkumywguig.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:29.523128986 CET	1.1.1.1	192.168.2.4	0x11e4	Name error (3)	wggygeoisauouuoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:29.662738085 CET	1.1.1.1	192.168.2.4	0xef66	Name error (3)	okoykokgycygucya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:29.803415060 CET	1.1.1.1	192.168.2.4	0xfcc	Name error (3)	ewaoowewmsomgaiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:29.943797112 CET	1.1.1.1	192.168.2.4	0xf7d0	Name error (3)	ieiegkokewkqmkwe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:30.083329916 CET	1.1.1.1	192.168.2.4	0xcb82	Name error (3)	gakesieaaickekuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:30.223035097 CET	1.1.1.1	192.168.2.4	0x8658	Name error (3)	ecasigiwguqgguyw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:30.362081051 CET	1.1.1.1	192.168.2.4	0xf5c3	Name error (3)	okwswuciummewsui.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:30.502520084 CET	1.1.1.1	192.168.2.4	0x741f	Name error (3)	ggaqiymaekkywusy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:30.641361952 CET	1.1.1.1	192.168.2.4	0x6ca0	Name error (3)	ocicimqkgucacyim.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:30.780987024 CET	1.1.1.1	192.168.2.4	0x21b4	Name error (3)	qoyisgoayskswigs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:30.919996977 CET	1.1.1.1	192.168.2.4	0xd02c	Name error (3)	wsywmuwgsogemomw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:31.061239958 CET	1.1.1.1	192.168.2.4	0xd3e5	Name error (3)	skaeggkkcmoqoywy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:31.199678898 CET	1.1.1.1	192.168.2.4	0x5641	Name error (3)	uowicsywgqmgagyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:31.338558912 CET	1.1.1.1	192.168.2.4	0xb873	Name error (3)	yqyqgowkwqiggewq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:31.479067087 CET	1.1.1.1	192.168.2.4	0x442c	Name error (3)	aikmggymywuooyqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:31.618882895 CET	1.1.1.1	192.168.2.4	0xc741	Name error (3)	semgkyogsqqwgsmy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:31.760432005 CET	1.1.1.1	192.168.2.4	0xa7a0	Name error (3)	ucmwywoqciswaguc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:31.899796963 CET	1.1.1.1	192.168.2.4	0x4ca2	Name error (3)	qowoagcmkkgqcswk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:32.039700985 CET	1.1.1.1	192.168.2.4	0xd175	Name error (3)	mmgusimiaqiweyas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:32.179822922 CET	1.1.1.1	192.168.2.4	0xc77e	Name error (3)	wgssaogcsscmkswu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:32.319077969 CET	1.1.1.1	192.168.2.4	0xdc9	Name error (3)	aoeewogkicikusoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:32.459153891 CET	1.1.1.1	192.168.2.4	0xf25b	Name error (3)	ikggquqsigykqamc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:32.598628998 CET	1.1.1.1	192.168.2.4	0xb73b	Name error (3)	waaqccyeaeywuoqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:32.736792088 CET	1.1.1.1	192.168.2.4	0x9ebd	Name error (3)	ecgiqiiieksaooyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:32.875602007 CET	1.1.1.1	192.168.2.4	0xe03b	Name error (3)	iqcogqmwegaqewuu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:33.014410973 CET	1.1.1.1	192.168.2.4	0xa0ab	Name error (3)	aiusammkykucyyso.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:33.168608904 CET	1.1.1.1	192.168.2.4	0xe212	Name error (3)	qgkswogkcsaeegki.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:33.307229042 CET	1.1.1.1	192.168.2.4	0xb509	Name error (3)	ywcwqgmikmycwoeu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:33.447204113 CET	1.1.1.1	192.168.2.4	0xb146	Name error (3)	eiqogaaggeswoges.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:33.593308926 CET	1.1.1.1	192.168.2.4	0x36e	Name error (3)	sekqikccsokicgye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:33.733083963 CET	1.1.1.1	192.168.2.4	0x5d08	Name error (3)	ssqggwwkkaayqkgk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:34.501171112 CET	1.1.1.1	192.168.2.4	0xf4a8	Name error (3)	seiiycgosccmaykm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:34.649068117 CET	1.1.1.1	192.168.2.4	0xe622	Name error (3)	aosagqwwquakwceq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:34.790333986 CET	1.1.1.1	192.168.2.4	0x5dd7	Name error (3)	qoiigkweqeiwycuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:34.929666996 CET	1.1.1.1	192.168.2.4	0xa1c	Name error (3)	oqycmugocqsyuaae.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:35.068492889 CET	1.1.1.1	192.168.2.4	0x85bb	Name error (3)	ewwgmiicuyowacum.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:35.208312988 CET	1.1.1.1	192.168.2.4	0x576f	Name error (3)	mmmoiaecqyuquoya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:35.348998070 CET	1.1.1.1	192.168.2.4	0x9c63	Name error (3)	auscackumyccuyuk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:35.489814043 CET	1.1.1.1	192.168.2.4	0xa58c	Name error (3)	okgquokwaassqyyi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:35.628926992 CET	1.1.1.1	192.168.2.4	0x42e6	Name error (3)	uikciyeoaumwomqo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:35.769023895 CET	1.1.1.1	192.168.2.4	0xa0ff	Name error (3)	gmoguamscceqkamk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:35.908073902 CET	1.1.1.1	192.168.2.4	0xcf9d	Name error (3)	eqgoeemewamgucie.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:36.051439047 CET	1.1.1.1	192.168.2.4	0x7cb6	Name error (3)	uoiyoewsiosismow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:36.191255093 CET	1.1.1.1	192.168.2.4	0x649c	Name error (3)	cekeeosckoouciwe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:36.329689026 CET	1.1.1.1	192.168.2.4	0xadf5	Name error (3)	mycgaaaymgowwicw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:36.468743086 CET	1.1.1.1	192.168.2.4	0x4fd7	Name error (3)	ecgmcmqswickqcgi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:36.611115932 CET	1.1.1.1	192.168.2.4	0x1990	Name error (3)	guwwqcuqmkmyyyyi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:36.751492023 CET	1.1.1.1	192.168.2.4	0x52b1	Name error (3)	cygmqaagqcuusmiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:36.890825033 CET	1.1.1.1	192.168.2.4	0x40ac	Name error (3)	wggqoukyeokwgmoy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:37.029700994 CET	1.1.1.1	192.168.2.4	0x6a9	Name error (3)	okoccmmgswcmakcw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:37.168344021 CET	1.1.1.1	192.168.2.4	0xb97a	Name error (3)	iesmewkokeqooioo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:37.307066917 CET	1.1.1.1	192.168.2.4	0xf259	Name error (3)	mmiccoqwqmssougs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:37.446177006 CET	1.1.1.1	192.168.2.4	0xe1c5	Name error (3)	aoqymkkusuecomsw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:37.585937977 CET	1.1.1.1	192.168.2.4	0xf22a	Name error (3)	mskmgwkuiamqikce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:37.724870920 CET	1.1.1.1	192.168.2.4	0xaafc	Name error (3)	waucsgsqqsqkacog.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:37.863481998 CET	1.1.1.1	192.168.2.4	0x2925	Name error (3)	yqmqwygosgguwqsu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:38.002224922 CET	1.1.1.1	192.168.2.4	0x8606	Name error (3)	wsicgeayaoueooom.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:38.141669989 CET	1.1.1.1	192.168.2.4	0x4b68	Name error (3)	uwagocmgakuuykiu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:38.281311989 CET	1.1.1.1	192.168.2.4	0xaae	Name error (3)	uowkoqwgqqeweume.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:38.420061111 CET	1.1.1.1	192.168.2.4	0x1ce7	Name error (3)	aakowgaeoeuekqyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:38.559119940 CET	1.1.1.1	192.168.2.4	0x1040	Name error (3)	skmmaauasaqywsas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:38.697702885 CET	1.1.1.1	192.168.2.4	0x41a2	Name error (3)	cygeomikesiegqsk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:38.837445021 CET	1.1.1.1	192.168.2.4	0xcf0e	Name error (3)	okeyuasamkcqqeka.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:38.979048014 CET	1.1.1.1	192.168.2.4	0x2769	Name error (3)	qagaeyiqsgakegya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:39.118499041 CET	1.1.1.1	192.168.2.4	0xbf34	Name error (3)	ucoweesewcwiosgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:39.257278919 CET	1.1.1.1	192.168.2.4	0x4f65	Name error (3)	sskawiyqmweogyqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:39.397475958 CET	1.1.1.1	192.168.2.4	0x4159	Name error (3)	wgwmaeskqmwumwkk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:39.536083937 CET	1.1.1.1	192.168.2.4	0x7de6	Name error (3)	quwocusecekwqkaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:39.675501108 CET	1.1.1.1	192.168.2.4	0x3a39	Name error (3)	qukyogcwsgswyayo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:39.815778971 CET	1.1.1.1	192.168.2.4	0x986d	Name error (3)	uiicikumwwsmaeem.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:39.955409050 CET	1.1.1.1	192.168.2.4	0xef49	Name error (3)	wagyuykcqmqyygkw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:40.094316959 CET	1.1.1.1	192.168.2.4	0x19bd	Name error (3)	uiaqcykmqwcwgmeg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:40.235852003 CET	1.1.1.1	192.168.2.4	0x91c4	Name error (3)	uoeukcckqmmsuwaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:40.377216101 CET	1.1.1.1	192.168.2.4	0x736b	Name error (3)	gugueqckkyuaeqqy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:40.516390085 CET	1.1.1.1	192.168.2.4	0xe5ad	Name error (3)	skqsqowayeqesqqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:40.657104969 CET	1.1.1.1	192.168.2.4	0xefe7	Name error (3)	kuscomokgkmaommk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:40.796086073 CET	1.1.1.1	192.168.2.4	0x520f	Name error (3)	wsmyawqeqguacwas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:40.936116934 CET	1.1.1.1	192.168.2.4	0x6706	Name error (3)	ikuqcsooiucogaww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:41.074522972 CET	1.1.1.1	192.168.2.4	0xaa45	Name error (3)	iysmukmcmacuomic.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:41.213685989 CET	1.1.1.1	192.168.2.4	0xebc6	Name error (3)	ecqoqckqoaogcesy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:41.352590084 CET	1.1.1.1	192.168.2.4	0xd319	Name error (3)	iesmkwqgmkmksgam.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:41.495095968 CET	1.1.1.1	192.168.2.4	0x8033	Name error (3)	guwououoomacaysu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:41.634274006 CET	1.1.1.1	192.168.2.4	0xf086	Name error (3)	ucsoeygscgagowqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:41.773171902 CET	1.1.1.1	192.168.2.4	0x8778	Name error (3)	ykeuawieaequiyag.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:41.912395000 CET	1.1.1.1	192.168.2.4	0x30f1	Name error (3)	cskowwiekeqaakki.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:42.052824974 CET	1.1.1.1	192.168.2.4	0xd1ec	Name error (3)	ecogmmaysgwkmwqm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:42.194329023 CET	1.1.1.1	192.168.2.4	0xe261	Name error (3)	uwuomysuqkaykwuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:42.339226961 CET	1.1.1.1	192.168.2.4	0x1da	Name error (3)	ikqokmauuissyuce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:42.561146975 CET	1.1.1.1	192.168.2.4	0xbe45	Name error (3)	oeeoucsuawuqkqoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:42.779859066 CET	1.1.1.1	192.168.2.4	0x537e	Name error (3)	ygquuyekcusgsqqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:43.095302105 CET	1.1.1.1	192.168.2.4	0xfa6f	Name error (3)	uqsqcgouceqmigcg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:43.320029020 CET	1.1.1.1	192.168.2.4	0x3ed6	Name error (3)	kwoesauawkouiecq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:43.545092106 CET	1.1.1.1	192.168.2.4	0x4a47	Name error (3)	yywgmuqggsagcmco.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:43.765753984 CET	1.1.1.1	192.168.2.4	0xfb4f	Name error (3)	imumkckaqyieaasa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:43.990215063 CET	1.1.1.1	192.168.2.4	0x5861	Name error (3)	qqkoemcaocsomwow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:44.214428902 CET	1.1.1.1	192.168.2.4	0xa445	Name error (3)	awsigwcaesugycuk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:44.440306902 CET	1.1.1.1	192.168.2.4	0xc3c3	Name error (3)	kkqoqmmcwacsqiiu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:44.659754038 CET	1.1.1.1	192.168.2.4	0x73e4	Name error (3)	iamowksweuqyssis.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:44.894233942 CET	1.1.1.1	192.168.2.4	0x7a57	Name error (3)	wicwocqcucgaimwe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:45.120012045 CET	1.1.1.1	192.168.2.4	0x1554	Name error (3)	wiuyuwqiqkkogmoe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:45.195164919 CET	1.1.1.1	192.168.2.4	0x1554	Name error (3)	wiuyuwqiqkkogmoe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:45.341625929 CET	1.1.1.1	192.168.2.4	0xc8ac	Name error (3)	ueyeeeegieoukoci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:45.414223909 CET	1.1.1.1	192.168.2.4	0xc8ac	Name error (3)	ueyeeeegieoukoci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:45.567322016 CET	1.1.1.1	192.168.2.4	0x626	Name error (3)	caysuwggmqimaqwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:45.839505911 CET	1.1.1.1	192.168.2.4	0x626	Name error (3)	caysuwggmqimaqwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.011648893 CET	1.1.1.1	192.168.2.4	0xd5c7	Name error (3)	kecsceaqksygeamy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.011665106 CET	1.1.1.1	192.168.2.4	0xd5c7	Name error (3)	kecsceaqksygeamy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.233128071 CET	1.1.1.1	192.168.2.4	0xa5bc	Name error (3)	oyyagswauqyckoye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.310405016 CET	1.1.1.1	192.168.2.4	0xa5bc	Name error (3)	oyyagswauqyckoye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.451884985 CET	1.1.1.1	192.168.2.4	0xa0c9	Name error (3)	aciemoayegyggwiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.555432081 CET	1.1.1.1	192.168.2.4	0xa0c9	Name error (3)	aciemoayegyggwiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.674559116 CET	1.1.1.1	192.168.2.4	0xb352	Name error (3)	micemismikicsccc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.742867947 CET	1.1.1.1	192.168.2.4	0xb352	Name error (3)	micemismikicsccc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.896384001 CET	1.1.1.1	192.168.2.4	0xb46d	Name error (3)	kwieueawsewqigey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:46.960333109 CET	1.1.1.1	192.168.2.4	0xb46d	Name error (3)	kwieueawsewqigey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.122308969 CET	1.1.1.1	192.168.2.4	0xffb9	Name error (3)	qiwmqykuesscgkac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.181288958 CET	1.1.1.1	192.168.2.4	0xffb9	Name error (3)	qiwmqykuesscgkac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.351644039 CET	1.1.1.1	192.168.2.4	0x8ae5	Name error (3)	issaesuceymoyccq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.413954020 CET	1.1.1.1	192.168.2.4	0x8ae5	Name error (3)	issaesuceymoyccq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.577178001 CET	1.1.1.1	192.168.2.4	0x12ad	Name error (3)	sgowwwmqgkeyukwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.633697033 CET	1.1.1.1	192.168.2.4	0x12ad	Name error (3)	sgowwwmqgkeyukwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.803168058 CET	1.1.1.1	192.168.2.4	0x879a	Name error (3)	kewweiikaaysqugi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:47.866679907 CET	1.1.1.1	192.168.2.4	0x879a	Name error (3)	kewweiikaaysqugi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:48.021205902 CET	1.1.1.1	192.168.2.4	0xd487	Name error (3)	oywkwakwykimigck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:48.086682081 CET	1.1.1.1	192.168.2.4	0xd487	Name error (3)	oywkwakwykimigck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:48.242093086 CET	1.1.1.1	192.168.2.4	0x4866	Name error (3)	aqkiemcseioemogk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:48.308984995 CET	1.1.1.1	192.168.2.4	0x4866	Name error (3)	aqkiemcseioemogk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:48.466517925 CET	1.1.1.1	192.168.2.4	0xf533	Name error (3)	omoaicgooscecewq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:48.543515921 CET	1.1.1.1	192.168.2.4	0xf533	Name error (3)	omoaicgooscecewq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:48.781291008 CET	1.1.1.1	192.168.2.4	0x2b	Name error (3)	gcyciogqguooyici.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:48.781303883 CET	1.1.1.1	192.168.2.4	0x2b	Name error (3)	gcyciogqguooyici.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.005829096 CET	1.1.1.1	192.168.2.4	0xc6e	Name error (3)	qwyikqowekcgesga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.070853949 CET	1.1.1.1	192.168.2.4	0xc6e	Name error (3)	qwyikqowekcgesga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.225773096 CET	1.1.1.1	192.168.2.4	0x71f8	Name error (3)	moysoauykmieesas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.290213108 CET	1.1.1.1	192.168.2.4	0x71f8	Name error (3)	moysoauykmieesas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.444696903 CET	1.1.1.1	192.168.2.4	0xf386	Name error (3)	ysmmeamaooogyuwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.508300066 CET	1.1.1.1	192.168.2.4	0xf386	Name error (3)	ysmmeamaooogyuwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.759414911 CET	1.1.1.1	192.168.2.4	0xd788	Name error (3)	qqggiaeuuaskcisa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.759452105 CET	1.1.1.1	192.168.2.4	0xd788	Name error (3)	qqggiaeuuaskcisa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:49.982146978 CET	1.1.1.1	192.168.2.4	0xc812	Name error (3)	ukwgsimcamwqcqus.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:50.039429903 CET	1.1.1.1	192.168.2.4	0xc812	Name error (3)	ukwgsimcamwqcqus.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:50.267559052 CET	1.1.1.1	192.168.2.4	0x6256	Name error (3)	makysawqyqkmmkuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:50.387836933 CET	1.1.1.1	192.168.2.4	0x6256	Name error (3)	makysawqyqkmmkuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:50.499265909 CET	1.1.1.1	192.168.2.4	0x3f9a	Name error (3)	gwuaqqsyegywuaya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:50.570178986 CET	1.1.1.1	192.168.2.4	0x3f9a	Name error (3)	gwuaqqsyegywuaya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:50.730995893 CET	1.1.1.1	192.168.2.4	0xb396	Name error (3)	smwcqasgeqikoqss.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:50.789844036 CET	1.1.1.1	192.168.2.4	0xb396	Name error (3)	smwcqasgeqikoqss.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:50.949321032 CET	1.1.1.1	192.168.2.4	0x3427	Name error (3)	qigaaawumoqgmwck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.028157949 CET	1.1.1.1	192.168.2.4	0x3427	Name error (3)	qigaaawumoqgmwck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.168597937 CET	1.1.1.1	192.168.2.4	0xcc5f	Name error (3)	kwkiuumqgigawcek.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.245646000 CET	1.1.1.1	192.168.2.4	0xcc5f	Name error (3)	kwkiuumqgigawcek.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.390099049 CET	1.1.1.1	192.168.2.4	0x6c47	Name error (3)	imcgogsosiogeqgc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.477226973 CET	1.1.1.1	192.168.2.4	0x6c47	Name error (3)	imcgogsosiogeqgc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.610959053 CET	1.1.1.1	192.168.2.4	0xac56	Name error (3)	coosumygqywusaaq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.680131912 CET	1.1.1.1	192.168.2.4	0xac56	Name error (3)	coosumygqywusaaq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.837594032 CET	1.1.1.1	192.168.2.4	0x8088	Name error (3)	muikisowiqmckiao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:51.914937973 CET	1.1.1.1	192.168.2.4	0x8088	Name error (3)	muikisowiqmckiao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:52.149333954 CET	1.1.1.1	192.168.2.4	0x4a16	Name error (3)	eygeqyioakqgwkws.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:52.149355888 CET	1.1.1.1	192.168.2.4	0x4a16	Name error (3)	eygeqyioakqgwkws.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:52.458268881 CET	1.1.1.1	192.168.2.4	0x78db	Name error (3)	wcagmacwieoosqok.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:52.458386898 CET	1.1.1.1	192.168.2.4	0x78db	Name error (3)	wcagmacwieoosqok.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:52.676897049 CET	1.1.1.1	192.168.2.4	0x5d85	Name error (3)	igyccoycggkescsw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:52.742965937 CET	1.1.1.1	192.168.2.4	0x5d85	Name error (3)	igyccoycggkescsw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:52.895627975 CET	1.1.1.1	192.168.2.4	0x2a83	Name error (3)	uegmseugcsaymygc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:52.960901022 CET	1.1.1.1	192.168.2.4	0x2a83	Name error (3)	uegmseugcsaymygc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:53.114124060 CET	1.1.1.1	192.168.2.4	0x3413	Name error (3)	gcgquesqkuokqoos.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:53.179594040 CET	1.1.1.1	192.168.2.4	0x3413	Name error (3)	gcgquesqkuokqoos.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:53.429649115 CET	1.1.1.1	192.168.2.4	0x713c	Name error (3)	awcmmsyugikucuqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:53.429760933 CET	1.1.1.1	192.168.2.4	0x713c	Name error (3)	awcmmsyugikucuqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:53.740422010 CET	1.1.1.1	192.168.2.4	0x1c6	Name error (3)	qqmoakcgiagmaiou.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:53.740457058 CET	1.1.1.1	192.168.2.4	0x1c6	Name error (3)	qqmoakcgiagmaiou.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:53.958349943 CET	1.1.1.1	192.168.2.4	0x876b	Name error (3)	qcweoeaqygkgoyqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:54.042996883 CET	1.1.1.1	192.168.2.4	0x876b	Name error (3)	qcweoeaqygkgoyqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:54.185683966 CET	1.1.1.1	192.168.2.4	0x6217	Name error (3)	kwcqymkoyiusyywg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:54.249171972 CET	1.1.1.1	192.168.2.4	0x6217	Name error (3)	kwcqymkoyiusyywg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:54.406563997 CET	1.1.1.1	192.168.2.4	0x89aa	Name error (3)	uysuukowkciwgmko.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:54.476712942 CET	1.1.1.1	192.168.2.4	0x89aa	Name error (3)	uysuukowkciwgmko.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:54.723354101 CET	1.1.1.1	192.168.2.4	0xe3fc	Name error (3)	yyqmiikqggkgkcke.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:54.723376036 CET	1.1.1.1	192.168.2.4	0xe3fc	Name error (3)	yyqmiikqggkgkcke.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:54.944084883 CET	1.1.1.1	192.168.2.4	0x20ca	Name error (3)	cgwgwmsuyaicegcq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.008760929 CET	1.1.1.1	192.168.2.4	0x20ca	Name error (3)	cgwgwmsuyaicegcq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.168231964 CET	1.1.1.1	192.168.2.4	0xf3ac	Name error (3)	oesgsmmsyegwkaii.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.226914883 CET	1.1.1.1	192.168.2.4	0xf3ac	Name error (3)	oesgsmmsyegwkaii.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.389137983 CET	1.1.1.1	192.168.2.4	0x4274	Name error (3)	eeimyyskiwmsmwaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.461618900 CET	1.1.1.1	192.168.2.4	0x4274	Name error (3)	eeimyyskiwmsmwaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.613471985 CET	1.1.1.1	192.168.2.4	0x54c0	Name error (3)	akqmmimguqeacqki.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.684582949 CET	1.1.1.1	192.168.2.4	0x54c0	Name error (3)	akqmmimguqeacqki.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.926477909 CET	1.1.1.1	192.168.2.4	0x20ba	Name error (3)	eeuqeoimgoqakquw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:55.926496029 CET	1.1.1.1	192.168.2.4	0x20ba	Name error (3)	eeuqeoimgoqakquw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:56.151570082 CET	1.1.1.1	192.168.2.4	0x4b1f	Name error (3)	mookqcgowekwsyme.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:56.226715088 CET	1.1.1.1	192.168.2.4	0x4b1f	Name error (3)	mookqcgowekwsyme.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:56.374299049 CET	1.1.1.1	192.168.2.4	0x2061	Name error (3)	iaamsmcuweooiums.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:56.445318937 CET	1.1.1.1	192.168.2.4	0x2061	Name error (3)	iaamsmcuweooiums.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:56.683257103 CET	1.1.1.1	192.168.2.4	0xd791	Name error (3)	qwwkyygoyymumeqa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:56.683280945 CET	1.1.1.1	192.168.2.4	0xd791	Name error (3)	qwwkyygoyymumeqa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:56.904742956 CET	1.1.1.1	192.168.2.4	0x3442	Name error (3)	qwmqmwoieykcoums.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:56.992517948 CET	1.1.1.1	192.168.2.4	0x3442	Name error (3)	qwmqmwoieykcoums.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:57.215555906 CET	1.1.1.1	192.168.2.4	0x86e3	Name error (3)	aqmmgwoeiissyuay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:57.215594053 CET	1.1.1.1	192.168.2.4	0x86e3	Name error (3)	aqmmgwoeiissyuay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:57.528251886 CET	1.1.1.1	192.168.2.4	0x4316	Name error (3)	ukgeakkwimkacgwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:57.528641939 CET	1.1.1.1	192.168.2.4	0x4316	Name error (3)	ukgeakkwimkacgwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:57.840576887 CET	1.1.1.1	192.168.2.4	0x8b4d	Name error (3)	wcuwikyucakswsgy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:57.840594053 CET	1.1.1.1	192.168.2.4	0x8b4d	Name error (3)	wcuwikyucakswsgy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:58.058716059 CET	1.1.1.1	192.168.2.4	0x5722	Name error (3)	oyqmksygwiuekomo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:58.132756948 CET	1.1.1.1	192.168.2.4	0x5722	Name error (3)	oyqmksygwiuekomo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:58.287995100 CET	1.1.1.1	192.168.2.4	0xe970	Name error (3)	gokuyyiawuwwyeqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:58.352499008 CET	1.1.1.1	192.168.2.4	0xe970	Name error (3)	gokuyyiawuwwyeqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:58.603944063 CET	1.1.1.1	192.168.2.4	0xf1c0	Name error (3)	qqumaeswmyusisoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:58.603982925 CET	1.1.1.1	192.168.2.4	0xf1c0	Name error (3)	qqumaeswmyusisoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:58.827286959 CET	1.1.1.1	192.168.2.4	0xbd44	Name error (3)	ekommiasesmcaysg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:58.898380041 CET	1.1.1.1	192.168.2.4	0xbd44	Name error (3)	ekommiasesmcaysg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:59.143666983 CET	1.1.1.1	192.168.2.4	0x660e	Name error (3)	kwokcgwecseqcsck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:59.143696070 CET	1.1.1.1	192.168.2.4	0x660e	Name error (3)	kwokcgwecseqcsck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:59.365216970 CET	1.1.1.1	192.168.2.4	0x9398	Name error (3)	cgcukekaacucqesm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:59.447280884 CET	1.1.1.1	192.168.2.4	0x9398	Name error (3)	cgcukekaacucqesm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:59.585164070 CET	1.1.1.1	192.168.2.4	0x967	Name error (3)	sgiwoemuskksgmem.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:59.674609900 CET	1.1.1.1	192.168.2.4	0x967	Name error (3)	sgiwoemuskksgmem.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:59.803380966 CET	1.1.1.1	192.168.2.4	0x8ab7	Name error (3)	miyuaaeqyewssisg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:40:59.883286953 CET	1.1.1.1	192.168.2.4	0x8ab7	Name error (3)	miyuaaeqyewssisg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:00.024219036 CET	1.1.1.1	192.168.2.4	0x18e8	Name error (3)	awquimmiceucqika.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:00.085387945 CET	1.1.1.1	192.168.2.4	0x18e8	Name error (3)	awquimmiceucqika.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:00.246079922 CET	1.1.1.1	192.168.2.4	0x3e1a	Name error (3)	qwsgiwukuaoocqgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:00.320354939 CET	1.1.1.1	192.168.2.4	0x3e1a	Name error (3)	qwsgiwukuaoocqgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:00.478558064 CET	1.1.1.1	192.168.2.4	0x575	Name error (3)	coyikkwmyomyykmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:00.582319975 CET	1.1.1.1	192.168.2.4	0x575	Name error (3)	coyikkwmyomyykmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:00.711791992 CET	1.1.1.1	192.168.2.4	0x97e0	Name error (3)	osyawgmkggwwaise.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.040132046 CET	1.1.1.1	192.168.2.4	0xf6c1	Name error (3)	gcuasoickeyqugwe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.040146112 CET	1.1.1.1	192.168.2.4	0xf6c1	Name error (3)	gcuasoickeyqugwe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.261585951 CET	1.1.1.1	192.168.2.4	0x11bf	Name error (3)	oscegykuecgmiioq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.328489065 CET	1.1.1.1	192.168.2.4	0x11bf	Name error (3)	oscegykuecgmiioq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.488574982 CET	1.1.1.1	192.168.2.4	0xf5bf	Name error (3)	camkaaeqmmemkeqo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.558582067 CET	1.1.1.1	192.168.2.4	0xf5bf	Name error (3)	camkaaeqmmemkeqo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.715368032 CET	1.1.1.1	192.168.2.4	0x91a2	Name error (3)	gwswakimuyyacece.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.792808056 CET	1.1.1.1	192.168.2.4	0x91a2	Name error (3)	gwswakimuyyacece.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:01.949002028 CET	1.1.1.1	192.168.2.4	0x2a1	Name error (3)	giqagqyuwgskokgg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:02.023972034 CET	1.1.1.1	192.168.2.4	0x2a1	Name error (3)	giqagqyuwgskokgg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:02.258860111 CET	1.1.1.1	192.168.2.4	0xad6e	Name error (3)	uqswoygsykiwckyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:02.258877039 CET	1.1.1.1	192.168.2.4	0xad6e	Name error (3)	uqswoygsykiwckyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:02.492377043 CET	1.1.1.1	192.168.2.4	0xe2aa	Name error (3)	wccgukagisyugimy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:02.545973063 CET	1.1.1.1	192.168.2.4	0xe2aa	Name error (3)	wccgukagisyugimy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:02.809582949 CET	1.1.1.1	192.168.2.4	0x7d79	Name error (3)	qieoqgsomueyeass.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:02.809663057 CET	1.1.1.1	192.168.2.4	0x7d79	Name error (3)	qieoqgsomueyeass.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:03.031974077 CET	1.1.1.1	192.168.2.4	0xc81c	Name error (3)	uqumusgyyygmiicq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:03.119570971 CET	1.1.1.1	192.168.2.4	0xc81c	Name error (3)	uqumusgyyygmiicq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:03.350498915 CET	1.1.1.1	192.168.2.4	0x863a	Name error (3)	wuowyewqgeeycsio.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:03.402414083 CET	1.1.1.1	192.168.2.4	0x863a	Name error (3)	wuowyewqgeeycsio.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:03.658762932 CET	1.1.1.1	192.168.2.4	0x1601	Name error (3)	sgckugycwoyyoeow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:03.725833893 CET	1.1.1.1	192.168.2.4	0x1601	Name error (3)	sgckugycwoyyoeow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:03.879471064 CET	1.1.1.1	192.168.2.4	0xce0b	Name error (3)	keyqaymgcyswowqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:03.945555925 CET	1.1.1.1	192.168.2.4	0xce0b	Name error (3)	keyqaymgcyswowqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:04.100620985 CET	1.1.1.1	192.168.2.4	0x7640	Name error (3)	yskeokkusmkcyosa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:04.164737940 CET	1.1.1.1	192.168.2.4	0x7640	Name error (3)	yskeokkusmkcyosa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:04.327394009 CET	1.1.1.1	192.168.2.4	0xd3fb	Name error (3)	ymmoqwiyeomigemu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:04.385620117 CET	1.1.1.1	192.168.2.4	0xd3fb	Name error (3)	ymmoqwiyeomigemu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:04.639121056 CET	1.1.1.1	192.168.2.4	0x3159	Name error (3)	iaiyeiseoyssykuu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:04.639134884 CET	1.1.1.1	192.168.2.4	0x3159	Name error (3)	iaiyeiseoyssykuu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:04.869266987 CET	1.1.1.1	192.168.2.4	0x1c27	Name error (3)	gcsgyeomwaaiuwmg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:04.930708885 CET	1.1.1.1	192.168.2.4	0x1c27	Name error (3)	gcsgyeomwaaiuwmg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:05.095181942 CET	1.1.1.1	192.168.2.4	0xea72	Name error (3)	cuccscimmuweokoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:05.165093899 CET	1.1.1.1	192.168.2.4	0xea72	Name error (3)	cuccscimmuweokoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:05.426606894 CET	1.1.1.1	192.168.2.4	0x4a16	Name error (3)	wigeqewyusckikqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:05.426626921 CET	1.1.1.1	192.168.2.4	0x4a16	Name error (3)	wigeqewyusckikqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:05.740427017 CET	1.1.1.1	192.168.2.4	0xcbf2	Name error (3)	wowsuycqmmumwayq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:05.740516901 CET	1.1.1.1	192.168.2.4	0xcbf2	Name error (3)	wowsuycqmmumwayq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:05.959141970 CET	1.1.1.1	192.168.2.4	0xa949	Name error (3)	keqgamuiascccwou.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.039417028 CET	1.1.1.1	192.168.2.4	0xa949	Name error (3)	keqgamuiascccwou.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.183808088 CET	1.1.1.1	192.168.2.4	0xe4cd	Name error (3)	awyogsywqmeoaemc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.243604898 CET	1.1.1.1	192.168.2.4	0xe4cd	Name error (3)	awyogsywqmeoaemc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.404746056 CET	1.1.1.1	192.168.2.4	0xeb61	Name error (3)	gogceqqcygywqquk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.477186918 CET	1.1.1.1	192.168.2.4	0xeb61	Name error (3)	gogceqqcygywqquk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.628849983 CET	1.1.1.1	192.168.2.4	0x2798	Name error (3)	akewqoewkigoyqgk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.696228981 CET	1.1.1.1	192.168.2.4	0x2798	Name error (3)	akewqoewkigoyqgk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.847533941 CET	1.1.1.1	192.168.2.4	0x403d	Name error (3)	smgomgmggmimcecy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:06.914467096 CET	1.1.1.1	192.168.2.4	0x403d	Name error (3)	smgomgmggmimcecy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:07.160304070 CET	1.1.1.1	192.168.2.4	0x7851	Name error (3)	uqemqeoguyciagkm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:07.160341978 CET	1.1.1.1	192.168.2.4	0x7851	Name error (3)	uqemqeoguyciagkm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:07.384651899 CET	1.1.1.1	192.168.2.4	0x54df	Name error (3)	oekuaqgwaqowmqwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:07.449750900 CET	1.1.1.1	192.168.2.4	0x54df	Name error (3)	oekuaqgwaqowmqwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:07.603450060 CET	1.1.1.1	192.168.2.4	0x3bc6	Name error (3)	sgqwuwmskisykocm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:07.681093931 CET	1.1.1.1	192.168.2.4	0x3bc6	Name error (3)	sgqwuwmskisykocm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:07.917819023 CET	1.1.1.1	192.168.2.4	0x5b46	Name error (3)	kewgquswkewgaweo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:07.917865992 CET	1.1.1.1	192.168.2.4	0x5b46	Name error (3)	kewgquswkewgaweo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:08.212327957 CET	1.1.1.1	192.168.2.4	0x6eca	Name error (3)	eekokuwaauqiuoci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:08.273556948 CET	1.1.1.1	192.168.2.4	0x6eca	Name error (3)	eekokuwaauqiuoci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:08.441515923 CET	1.1.1.1	192.168.2.4	0xbc79	Name error (3)	qweaumwmomesioio.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:08.500607014 CET	1.1.1.1	192.168.2.4	0xbc79	Name error (3)	qweaumwmomesioio.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:08.664551020 CET	1.1.1.1	192.168.2.4	0x990	Name error (3)	couuuksyuscyykke.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:08.744292974 CET	1.1.1.1	192.168.2.4	0x990	Name error (3)	couuuksyuscyykke.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:08.889915943 CET	1.1.1.1	192.168.2.4	0x4da	Name error (3)	moygyoakyaoosocs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:08.963063002 CET	1.1.1.1	192.168.2.4	0x4da	Name error (3)	moygyoakyaoosocs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:09.180350065 CET	1.1.1.1	192.168.2.4	0x46db	Name error (3)	qwikeawwkykgymoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:09.180641890 CET	1.1.1.1	192.168.2.4	0x46db	Name error (3)	qwikeawwkykgymoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:09.405533075 CET	1.1.1.1	192.168.2.4	0xb220	Name error (3)	aqcyeeuumekyigiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:09.480079889 CET	1.1.1.1	192.168.2.4	0xb220	Name error (3)	aqcyeeuumekyigiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:09.714709044 CET	1.1.1.1	192.168.2.4	0x2642	Name error (3)	mugimcuecsqusuec.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:09.714747906 CET	1.1.1.1	192.168.2.4	0x2642	Name error (3)	mugimcuecsqusuec.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:09.933367968 CET	1.1.1.1	192.168.2.4	0x703c	Name error (3)	suogmuweyqgoqkgk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:10.008069992 CET	1.1.1.1	192.168.2.4	0x703c	Name error (3)	suogmuweyqgoqkgk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:10.155447006 CET	1.1.1.1	192.168.2.4	0xe775	Name error (3)	ukgmmiakkgwgssak.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:10.227530956 CET	1.1.1.1	192.168.2.4	0xe775	Name error (3)	ukgmmiakkgwgssak.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:10.471657991 CET	1.1.1.1	192.168.2.4	0x1ea8	Name error (3)	yyuewgegwqqkccay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:10.471704006 CET	1.1.1.1	192.168.2.4	0x1ea8	Name error (3)	yyuewgegwqqkccay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:10.781531096 CET	1.1.1.1	192.168.2.4	0xb5f0	Name error (3)	qqmoqouykmakcwwo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:10.781548023 CET	1.1.1.1	192.168.2.4	0xb5f0	Name error (3)	qqmoqouykmakcwwo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:11.005315065 CET	1.1.1.1	192.168.2.4	0x6077	Name error (3)	ekucgqkwyqioewgm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:11.074359894 CET	1.1.1.1	192.168.2.4	0x6077	Name error (3)	ekucgqkwyqioewgm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:11.236574888 CET	1.1.1.1	192.168.2.4	0x9272	Name error (3)	cgmocwqyagacokyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:11.307385921 CET	1.1.1.1	192.168.2.4	0x9272	Name error (3)	cgmocwqyagacokyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:11.881839991 CET	1.1.1.1	192.168.2.4	0xbebd	Name error (3)	ekuisswoiwwasmug.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:41:11.900001049 CET	1.1.1.1	192.168.2.4	0xbebd	Name error (3)	ekuisswoiwwasmug.xyz	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.med.unc.edu

chrome.cloudflare-dns.com

https:

clients2.googleusercontent.com

aikmouciiqgecoqi.xyz:443

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49794	166.1.160.237	443	2024	C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe

Timestamp	Bytes transferred	Direction	Data
Dec 12, 2024 12:39:40.120343924 CET	130	OUT	GET /api/client_hello HTTP/1.1 Accept: / Connection: close Host: aikmouciiqgecoqi.xyz:443 User-Agent: cpp-httplib/0.12.1

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	152.19.9.32	443	7008	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:39:33 UTC	736	OUT	GET /webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf HTTP/1.1 Host: www.med.unc.edu Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-12-12 11:39:33 UTC	821	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:39:33 GMT Server: nginx X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 4911 Cache-Control: max-age=31622400 Content-Type: application/pdf Expires: Fri, 12 Dec 2025 18:43:41 GMT Strict-Transport-Security: max-age=300 X-Pantheon-Styx-Hostname: styx-fe1-b-677b7fd77f-7xgcw X-Styx-Req-Id: d7771620-b7ef-11ef-a04c-0644842cdc67 Age: 60951 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish, 1.1 varnish, 1.1 varnish X-Served-By: cache-chi-klot8100154-CHI, cache-iad-kiad7000080-IAD, cache-iad-kiad7000030-IAD, cache-iad-kiad7000030-IAD X-Cache: MISS, HIT, MISS, MISS X-Cache-Hits: 0, 2244, 0, 0 X-Timer: S1734003573.462958,VS0,VE4 Vary: orig-host Connection: close
2024-12-12 11:39:33 UTC	4911	IN	Data Raw: 25 50 44 46 2d 31 2e 36 0d 25 e2 e3 cf d3 0d 0a 32 34 20 30 20 6f 62 6a 0d 3c 3c 2f 46 69 6c 74 65 72 2f 46 6c 61 74 65 44 65 63 6f 64 65 2f 46 69 72 73 74 20 34 2f 4c 65 6e 67 74 68 20 32 31 36 2f 4e 20 31 2f 54 79 70 65 2f 4f 62 6a 53 74 6d 3e 3e 73 74 72 65 61 6d 0d 0a 68 de 3c 8f 51 4b c3 30 14 85 ff ca 7d 5b 8b d8 de a4 24 3a 19 83 69 14 14 c4 32 c5 bd ec 25 4b 6e 35 98 36 92 26 9b 3f df 56 c5 d7 73 0f df fd ce 12 10 56 ab 7a 93 d3 7b 88 85 a2 4f 1d 53 4f 43 82 d0 c1 43 1e 93 33 04 fb e2 f6 8b 4c 4e ee 48 f0 d4 75 73 34 5d ef fb de bd 45 9d 5c 18 60 4b 47 47 a7 7d 59 d6 37 91 7e 22 a5 13 15 ea 8a 23 4a 6c 50 32 81 b2 69 ce 51 2c 10 17 7f ad e9 df c6 86 03 b5 cf a2 b2 de c3 2b c5 71 86 89 8a 57 bc ac 1f 83 fd 87 30 89 17 4c 30 64 9c b3 33 bc fc 85 b4 Data Ascii: %PDF-1.6%24 0 obj<</Filter/FlateDecode/First 4/Length 216/N 1/Type/ObjStm>>streamh<QK0}[$:i2%Kn56&?VsVz{OSOCC3LNHus4]E\`KGG}Y7~"#JlP2iQ,+qW0L0d3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49747	162.159.61.3	443	7008	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:39:34 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-12 11:39:34 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-12-12 11:39:34 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 12 Dec 2024 11:39:34 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f0d6f46b9527280-EWR alt-svc: h3=":443"; ma=86400
2024-12-12 11:39:34 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 12 00 04 8e fa 48 63 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcomHc)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49748	162.159.61.3	443	7008	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:39:34 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-12 11:39:34 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-12-12 11:39:34 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 12 Dec 2024 11:39:34 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f0d6f46b80943c7-EWR alt-svc: h3=":443"; ma=86400
2024-12-12 11:39:34 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 19 00 04 8e fb 28 c3 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49749	162.159.61.3	443	7008	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:39:34 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-12 11:39:34 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-12-12 11:39:35 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 12 Dec 2024 11:39:34 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f0d6f475bdb7ce4-EWR alt-svc: h3=":443"; ma=86400
2024-12-12 11:39:35 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 29 00 04 8e fa 48 63 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)Hc)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49750	152.19.9.32	443	7008	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:39:35 UTC	664	OUT	GET /favicon.ico HTTP/1.1 Host: www.med.unc.edu Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-12-12 11:39:35 UTC	399	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:39:35 GMT Server: Apache/2.4.62 (Red Hat Enterprise Linux) OpenSSL/3.2.2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Mon, 15 Jul 2024 16:02:31 GMT Accept-Ranges: bytes Content-Length: 1150 Connection: close Content-Type: image/vnd.microsoft.icon
2024-12-12 11:39:35 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff e1 ff ff ff f0 ff ff ff f0 ff ff ff f0 ff ff ff f0 ff ff ff f0 d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff ff ff ff f0 ff ff ff f0 ff ff ff f0 ff ff ff f0 ff ff ff e1 ff ff ff f4 ff ff ff ff ff ff ff ff ff ff ff ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff ff ff ff ff ff ff ff ff ff ff ff f4 ff ff ff f0 ff ff ff ff ff ff ff ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff ff ff ff ff ff ff ff f0 ff Data Ascii: h( {{{{{{{{{{{{{{{{{{{{{{{{{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49752	162.159.61.3	443	7008	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:39:35 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-12 11:39:35 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49751	162.159.61.3	443	7008	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:39:35 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-12 11:39:35 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49759	142.250.181.65	443	7008	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:39:36 UTC	594	OUT	GET /crx/blobs/AW50ZFsLPhJJyx_4ShcDOgcEpJeOc7Vr0kMzfFRoaMfWx4pAgZ0UGF2i9_ei1A7FAHQ-EPFULeBn7F8_SEKhjbpEyKfiidX7GF_6BDOycMeg5w03wjwVQ61hkaEix8WFqmEAxlKa5cmz_tdFr9JtRwdqRu82wmLe2Ghe/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_84_1_0.crx HTTP/1.1 Host: clients2.googleusercontent.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-12-12 11:39:37 UTC	566	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 138356 X-GUploader-UploadID: AFiumC4IQxV4q3j7O5WaAop-zN-nbICjYs5JCDxYQQTJdLHwfq1yHey8LncGkDjHls6iyR7xt5E X-Goog-Hash: crc32c=ld9IFg== Server: UploadServer Date: Wed, 11 Dec 2024 16:45:00 GMT Expires: Thu, 11 Dec 2025 16:45:00 GMT Cache-Control: public, max-age=31536000 Age: 68077 Last-Modified: Tue, 19 Nov 2024 16:44:49 GMT ETag: 2373c8b9_cba0b209_e851cacf_d4df989e_81c52a41 Content-Type: application/x-chrome-extension Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-12 11:39:37 UTC	824	IN	Data Raw: 43 72 32 34 03 00 00 00 e0 15 00 00 12 ac 04 0a a6 02 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 9c 5e d1 18 b0 31 22 89 f4 fd 77 8d 67 83 0b 74 fd c3 32 4a 0e 47 31 00 29 58 34 b1 bf 3d 26 90 3f 5b 6a 2c 4c 7a fd d5 6a b0 75 cf 65 5b 49 85 71 2a 42 61 2f 58 dd ee dc 50 c1 68 fc cd 84 4c 04 88 b9 99 dc 32 25 33 5f 6f f4 ae b5 ad 19 0d d4 b8 48 f7 29 27 b9 3d d6 95 65 f8 ac c8 9c 3f 15 e6 ef 1f 08 ab 11 6a e1 a9 c8 33 55 48 fd 7c bf 58 8c 4d 06 e3 97 75 cc c2 9c 73 5b a6 2a f2 ea 3f 24 f3 9c db 8a 05 9f 46 25 11 1d 18 b4 49 08 19 94 80 29 08 f2 2c 2d c0 2f 90 65 35 29 a6 66 83 e7 4f e4 b2 71 14 5e ff 90 92 01 8d d3 bf ca a0 d0 39 a0 08 28 e3 d2 5f d5 70 68 32 fe 10 5e d5 59 42 50 58 66 5f 38 cc 0b 08 Data Ascii: Cr240"0H0^1"wgt2JG1)X4=&?[j,Lzjue[IqBa/XPhL2%3_oH)'=e?j3UH\|XMus[*?$F%I),-/e5)fOq^9(_ph2^YBPXf_8
2024-12-12 11:39:37 UTC	1390	IN	Data Raw: 3a 5f 86 5f 7f f9 35 7d d5 75 53 5c 9b ff 18 eb af ff 78 3f ab fa d7 9f 7e 5d cf 1f 43 2d ff b3 ba 0c 53 3d 4c bf fe f2 f7 5f 63 f1 50 97 42 ea cf d7 8f b0 2d 4d db 10 dc 36 32 b3 69 2a b3 51 d5 e3 f8 c4 ad eb 39 ef e7 ef dc 9c de 2b 53 3d 89 f4 f8 84 0e 2f 36 3a df cf c2 57 83 c8 90 71 6c 2f 67 fd f9 26 6a a9 79 fc f9 7b af ae 22 8b ce b1 9a fe 7c 1c dc 46 fa 1f e7 f8 7c 9c a3 f6 e3 56 f9 f6 f0 f3 99 aa 77 be 25 74 2e 79 86 2e 3f df 17 26 e2 e2 61 cc 9c 7f 3c d2 6e c2 88 c1 89 f6 53 2b 7c d4 17 3d 05 72 61 c7 0a 84 08 01 b1 27 7d f8 28 82 70 57 fb c2 16 8f d0 39 05 d7 73 e5 43 a3 d8 1f 9f 8e ca b9 96 26 6a 4a 9f 2d 27 13 f6 27 13 a8 ca 42 8d 30 f5 75 3f 2e a5 b9 3b 9f f6 e1 a3 34 9d 7f cf f3 e7 d9 c2 b9 f0 d4 c0 ac e6 90 42 86 4e 5c 7c a7 3d 83 9c c3 33 Data Ascii: :__5}uS\x?~]C-S=L_cPB-M62i*Q9+S=/6:Wql/g&jy{"\|F\|Vw%t.y.?&a<nS+\|=ra'}(pW9sC&jJ-''B0u?.;4BN\\|=3
2024-12-12 11:39:37 UTC	1390	IN	Data Raw: 60 65 eb 98 45 ab ec b5 f7 df 38 3e ce 17 36 8b 4c d7 7b 85 4d 64 18 16 65 b0 90 1e f2 cb 03 4c 8a 00 e1 48 79 96 ec 9b 3d f6 a0 d6 80 10 57 0f 10 60 43 7e af 8e 3f 1c b7 7a ee 1d 59 c2 29 1a 94 12 c6 ec 9e 28 ba 47 74 ea a9 92 fb f2 20 bd f4 20 c3 8a 8a 04 03 ec 56 83 d6 68 aa f5 88 d1 39 0a d6 d7 be fa 7f 68 70 d5 e2 31 37 1a 25 03 f1 55 98 2a 4b bd 68 22 81 eb 25 ad 18 84 19 e6 b8 d7 a1 60 b9 67 e1 89 9c f6 e2 ad 52 d0 c5 a6 dc ad e7 9e dc ca 7f d2 3e 77 87 7d e1 a1 a5 e9 a4 17 9a 04 c0 1e 05 42 14 c6 78 22 8b d6 00 1f f3 28 78 31 13 f3 7e 67 01 4e 72 8a 0f 75 ff 71 5f e5 6f 6d cd bd d1 43 0a 76 99 35 be 4a e5 2d 31 6c 3a 02 10 c5 56 13 ea 1e 23 15 1d 58 74 af 43 75 3d f0 13 03 bc 22 a2 fc ca 82 66 b9 ee fd 2e c5 46 f6 b8 53 d7 bc 55 5e 3d b8 46 34 c8 Data Ascii: `eE8>6L{MdeLHy=W`C~?zY)(Gt Vh9hp17%U*Kh"%`gR>w}Bx"(x1~gNruq_omCv5J-1l:V#XtCu="f.FSU^=F4
2024-12-12 11:39:37 UTC	1390	IN	Data Raw: 7d dd cf 6f 71 6a 3c aa 40 7e 15 06 ce 18 81 87 14 8e b0 58 44 27 7a dd 77 ac b1 b7 dc 66 ab cf 89 e9 ce a6 3c ec 05 3f 02 02 d8 27 ea 46 4f 70 bb e1 2d 44 84 4e 09 f6 ed 1b e9 1b c5 3d 68 a6 0c d9 75 0f 3f b1 8e cd 35 f6 95 bf 91 bd 1a 69 d1 42 51 b5 ee b9 e2 ce 89 50 6c 26 16 de 89 5e bc e6 c4 fd 26 da f5 e3 ce 69 10 77 1e cc c8 01 e9 9e 41 6a 55 a0 38 bc ac b1 bf 6b be 7b ba 51 77 aa c0 9b 05 fc b0 44 37 6a e6 e1 c0 0e 78 4a 7b 14 13 4f eb 10 ed ee 3f fb 8d c4 1f af b9 25 7e f2 af cb 87 f0 11 f9 c7 c7 ff c1 df c8 80 4b b7 c6 3f 03 ce 51 66 ae c1 bd e9 35 31 9c a0 54 88 27 0b eb 52 98 2c 14 76 36 e7 d3 53 74 70 f3 94 48 50 51 74 c1 6a 6c c5 02 57 75 bf ea 37 d6 5c 85 75 ff 1a de 92 f6 c3 8e 3c db 2b f4 fc 0a bf 49 4b a8 ce 14 7e 00 ce c6 ac 26 ca 94 9e Data Ascii: }oqj<@~XD'zwf<?'FOp-DN=hu?5iBQPl&^&iwAjU8k{QwD7jxJ{O?%~K?Qf51T'R,v6StpHPQtjlWu7\u<+IK~&
2024-12-12 11:39:37 UTC	1390	IN	Data Raw: ae e7 0e 9d 1f 06 63 15 24 ff cb b8 61 7b a2 4e 58 74 c0 4c 09 86 ba 97 48 e8 03 c4 a9 0f ee 35 65 bd 60 e1 21 a1 18 44 a6 bd 68 e1 33 23 9a dc 91 a1 d2 1c 38 bf d3 98 ca 64 0f d9 ab 56 8f 6d 95 56 f8 a5 e3 ec 3d ef d5 2d b3 5c 3d e6 ff 3a fe 0d 19 c0 60 d4 b8 23 8f b9 88 da a3 ee df 88 f6 ec a7 9c 21 9f 2e 21 cc 81 f2 75 fd ed 12 f6 f3 fe 52 6a 9f db f0 a2 fb e9 a7 81 d4 f7 eb f5 58 53 9e 25 3f f7 32 7e 98 ff 3b 96 ae c7 fe 9f e7 2d df ff f0 9c e5 bf be 3b 4a 9f 4d 99 a9 ba 7f 9d 95 6c 74 8c da b7 42 c7 85 e0 d3 bd e4 8e ca 4d fb 56 f6 ea 5a f6 b6 f6 9f f3 77 e9 37 5f 85 df 9d ff fb bb 96 8e e7 01 8d 3f b9 f3 73 16 f3 d4 7e 18 a7 d6 fb f9 ff 5d c7 97 a1 e3 ee bb 84 8e a9 59 2c 05 d7 fa d6 5e e6 f7 e4 df 87 46 8b e9 f6 55 5f 7f fd e5 af 7f ff d5 d4 85 ac Data Ascii: c$a{NXtLH5e`!Dh3#8dVmV=-\=:`#!.!uRjXS%?2~;-;JMltBMVZw7_?s~]Y,^FU_
2024-12-12 11:39:37 UTC	1390	IN	Data Raw: c2 43 a0 f0 9c cf 84 2c dc 6f 77 dd ff 5e 04 27 23 01 db 3b d0 22 fa fd ca c2 00 94 91 17 e4 5e bb e4 28 b3 f2 09 87 4b 75 14 8e e0 c2 6f 3a 13 0a 28 96 4a ee 0a 6a 2c 09 f3 2c c2 e9 23 6a 8c ec 09 a0 e8 96 87 84 d2 68 a5 cd ca f5 ec 0a 46 60 f9 be 7b e8 5e a6 f5 2e a5 46 6e c8 a6 db bc 01 50 4b 07 08 1d fb 12 3a a0 00 00 00 23 01 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 19 00 2d 00 5f 6c 6f 63 61 6c 65 73 2f 72 6f 2f 6d 65 73 73 61 67 65 73 2e 6a 73 6f 6e 55 54 05 00 01 ca 36 2a 67 0a 00 20 00 00 00 00 00 01 00 18 00 00 41 64 ae 95 2f db 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8d 52 c1 4e 1c 31 0c bd f3 15 d6 9c 8a 34 a0 65 7b 82 1b 82 55 4f 85 aa 2d 97 aa 17 6f c6 b3 58 ca 38 51 e2 00 5a c4 bf e3 99 Data Ascii: C,ow^'#;"^(Kuo:(Jj,,#jhF`{^.FnPK:#PK!-_locales/ro/messages.jsonUT6*g Ad/RN14e{UO-oX8QZ
2024-12-12 11:39:37 UTC	1390	IN	Data Raw: 0f 6e 3d 2c 91 9f b7 f2 c2 8f 9e 81 ed 64 91 89 5f c8 93 db ec d7 38 3e f4 ec 97 19 5a 11 ad f3 b8 82 28 3a 6c b3 ee 24 e1 50 fb 79 09 cf f1 ad 57 e9 76 70 aa 85 35 32 aa 0a 0f 41 0d 1c 63 cf 15 51 0d 8c 44 97 9c 43 b8 94 04 8f 60 5f 09 e2 4b c0 6e a2 3a 29 12 e1 86 4f 49 97 b9 92 11 e2 5a d6 16 fc 60 20 03 a5 d7 f5 68 06 5f 65 93 9a dd ad 65 97 51 8b ac 05 b4 69 a5 64 30 17 f8 1c 4a 1d 10 6c a0 02 36 20 1b 29 c2 cd 6a e6 f5 e9 55 66 60 81 a8 0e 0c 0c 22 4a e0 41 05 8c 7f 9c 57 46 cf 54 ff 32 7c 7d 9b 6e 4b 1e be a1 2b 8b 2c ea 96 fa 5c 18 5d 04 b1 51 7c 89 a2 45 6d 3a 0b 61 c3 6f a2 78 04 e6 19 c0 10 c1 b2 2f e8 63 ec 0d 6c f9 20 a0 26 d6 8b ea b0 75 64 be 5d fd c4 70 d9 3b b5 ed d4 f1 bc 8d 4d 4a b4 8e 05 bc 1a 18 57 05 34 4d 40 13 b4 28 e5 ea ff 64 31 Data Ascii: n=,d_8>Z(:l$PyWvp52AcQDC`_Kn:)OIZ` h_eeQid0Jl6 )jUf`"JAWFT2\|}nK+,\]Q\|Em:aox/cl &ud]p;MJW4M@(d1
2024-12-12 11:39:37 UTC	1390	IN	Data Raw: 80 ac 82 c5 04 63 89 63 38 bd 2a 36 1c e9 9a 44 2a 3c 4e 2d ee 92 46 8e 50 dc e3 94 bb f5 61 c2 1d cf 5c 48 24 42 49 6c 12 12 d7 49 d9 ae b5 78 32 3e ee bd 6d 14 36 10 04 42 78 75 49 e8 56 12 9a c0 f8 4e 5b 9e a8 18 48 07 60 fa c4 f3 b8 1c e9 66 42 8d 56 0a 4d 3a 20 57 32 60 3d 87 5b 12 2d 22 e5 44 56 25 e1 21 a6 58 0d e8 46 f5 04 83 06 0e 87 28 fb a4 f0 19 18 b8 02 88 01 7c 80 61 ef 0c 9c e0 24 d3 07 48 c9 09 3f e2 9c 5e e9 89 97 4b 26 3f f6 66 0d 22 cf 03 86 52 31 81 e4 3a 97 fa 54 dc fb b0 49 d9 ef a1 7d 1a 46 e5 77 f4 02 a7 fd a6 7b 35 4f fa 61 2c 0d 6e 07 7a 72 4d 94 18 5d f3 fe 4e 2c 30 9b 6d f6 54 60 d0 58 d4 81 d8 05 43 89 9b 2d 91 75 b1 84 72 e5 82 16 5a a8 d1 8f 71 28 22 a2 ed 69 03 7e 0f 3a 87 3c 26 69 4c 4d 0a 36 d7 c7 a7 16 96 fa 98 fd 47 dc Data Ascii: cc86D<N-FPa\H$BIlIx2>m6BxuIVN[H`fBVM: W2`=[-"DV%!XF(\|a$H?^K&?f"R1:TI}Fw{5Oa,nzrM]N,0mT`XC-urZq("i~:<&iLM6G
2024-12-12 11:39:37 UTC	1390	IN	Data Raw: 92 6f 30 19 61 42 16 3c c5 8e d8 b3 84 2e 10 d8 71 39 f8 5c 22 7b 60 27 ee 3a 3f 1a 26 6a f5 a8 f2 1f 13 ad 85 fc dd 51 24 58 d5 3c 25 19 9d fa 2b 81 d6 c7 4d 37 fd 9a e2 f2 53 ad 5f c1 c9 b9 41 f8 0f 77 84 84 39 d5 5c 7f 74 b0 dd bb 43 ac e6 be ce d5 bf df bb 77 82 1b a6 ff 9c 05 67 3a 77 fe 7a f2 5d 9a 09 4d 66 b5 8d f8 e6 d8 2d cb 4e 6d ee a3 82 48 7b c6 a8 5d b2 e8 52 97 3d e5 a5 b8 ef 36 ad cf 46 de f8 e7 8e 98 46 5f 0f 08 b5 d5 be 41 c5 77 eb e3 54 28 7a 31 07 87 c9 e3 1b f0 13 22 9f 73 e2 40 ce 5e e0 09 2d 54 01 dc 63 06 df 9b 0e c1 43 bf 5c bc 02 50 4b 07 08 c0 47 8a 9f 88 01 00 00 46 03 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 19 00 2d 00 5f 6c 6f 63 61 6c 65 73 2f 6b 6d 2f 6d 65 73 73 61 67 65 73 2e 6a Data Ascii: o0aB<.q9\"{`':?&jQ$X<%+M7S_Aw9\tCwg:wz]Mf-NmH{]R=6FF_AwT(z1"s@^-TcC\PKGFPK!-_locales/km/messages.j
2024-12-12 11:39:37 UTC	1390	IN	Data Raw: 46 69 27 57 e6 ee 9e df fa e6 7c 6c 22 ff dc fc cd 83 bf 84 75 53 df fb 95 fb e0 a6 5b e2 f7 c1 5f 87 cb 78 0d a9 ac a4 0c 68 8e 44 f1 68 52 0e 42 cf 48 31 70 61 e4 4c d1 69 c5 a7 46 2f 04 a6 71 7a 9a be 86 7e 9a df 4a 91 d1 b6 e2 f0 34 96 a4 11 21 a4 4d e9 67 b4 5d b3 aa 52 cd 51 3d 41 bb 66 f2 ab fd 2b c2 fc 18 cf 78 47 7c 50 e9 5f 0e f0 9b c4 43 6a 2a f2 42 35 42 84 04 d7 70 02 ab 0d b5 b1 89 32 98 e2 55 e6 4f d6 3f 1c 81 d7 4f df 01 50 4b 07 08 80 81 20 9b 32 02 00 00 f3 0a 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 19 00 2d 00 5f 6c 6f 63 61 6c 65 73 2f 73 6b 2f 6d 65 73 73 61 67 65 73 2e 6a 73 6f 6e 55 54 05 00 01 ca 36 2a 67 0a 00 20 00 00 00 00 00 01 00 18 00 00 41 64 ae 95 2f db 01 00 00 00 00 00 00 00 00 Data Ascii: Fi'W\|l"uS[_xhDhRBH1paLiF/qz~J4!Mg]RQ=Af+xG\|P_CjB5Bp2UO?OPK 2PK!-_locales/sk/messages.jsonUT6g Ad/

Target ID:	0
Start time:	06:39:00
Start date:	12/12/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\56ff7c.msi"
Imagebase:	0x7ff6a1c80000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	06:39:00
Start date:	12/12/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\msiexec.exe /V
Imagebase:	0x7ff6a1c80000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	06:39:01
Start date:	12/12/2024
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\syswow64\MsiExec.exe -Embedding E03893F7B7963782D846F8C5ED735E6C
Imagebase:	0x60000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	06:39:01
Start date:	12/12/2024
Path:	C:\Windows\SysWOW64\icacls.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\." /SETINTEGRITYLEVEL (CI)(OI)HIGH
Imagebase:	0x1e0000
File size:	29'696 bytes
MD5 hash:	2E49585E4E08565F52090B144062F97E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	06:39:01
Start date:	12/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	06:39:01
Start date:	12/12/2024
Path:	C:\Windows\SysWOW64\expand.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files
Imagebase:	0xa70000
File size:	53'248 bytes
MD5 hash:	544B0DBFF3F393BCE8BB9D815F532D51
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	06:39:01
Start date:	12/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	06:39:23
Start date:	12/12/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\cmd.exe" /c start msedge https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf
Imagebase:	0x240000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	06:39:24
Start date:	12/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	06:39:24
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf
Imagebase:	0x7ff67dcd0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	06:39:24
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=2088,i,17776723198320850394,9006600051924449842,262144 /prefetch:3
Imagebase:	0x7ff67dcd0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	06:39:31
Start date:	12/12/2024
Path:	C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\MW-813f77a1-a69c-4831-9515-889e144df73c\files\install86.exe" /VERYSILENT /VERYSILENT
Imagebase:	0xa00000
File size:	686'285'824 bytes
MD5 hash:	07638426F75532B5D8E82A85D7DA7716
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	06:39:24
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf
Imagebase:	0x7ff67dcd0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	06:39:25
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:3
Imagebase:	0x7ff67dcd0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	18
Start time:	06:39:32
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6404 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8
Imagebase:	0x7ff67dcd0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	06:39:32
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6544 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8
Imagebase:	0x7ff67dcd0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	06:39:33
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-GB --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=7184 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:6
Imagebase:	0x7ff67dcd0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	21
Start time:	06:39:34
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7504 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8
Imagebase:	0x7ff6d4ab0000
File size:	1'255'976 bytes
MD5 hash:	76C58E5BABFE4ACF0308AA646FC0F416
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	06:39:34
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7504 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8
Imagebase:	0x7ff6d4ab0000
File size:	1'255'976 bytes
MD5 hash:	76C58E5BABFE4ACF0308AA646FC0F416
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	06:39:44
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
Imagebase:	0x7ff67dcd0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	06:39:44
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=2116,i,4999531332581732132,5899536460662317104,262144 /prefetch:3
Imagebase:	0x7ff67dcd0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	06:39:52
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
Imagebase:	0x7ff67dcd0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	06:39:53
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2044,i,11800589099561053754,12146886287635931717,262144 /prefetch:3
Imagebase:	0x7ff67dcd0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	06:40:26
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6432 --field-trial-handle=2004,i,8613202027559056329,9371247902443604515,262144 /prefetch:8
Imagebase:	0x7ff67dcd0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	1.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	9.4%
Total number of Nodes:	1678
Total number of Limit Nodes:	16

Executed Functions

Function 00A1E490 Relevance: .6, Instructions: 616
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 594fed77d9f7d9da5791f6f6429d63036c82d7175556f7a1a049851d4fe72a30
Instruction ID: 227d06c2fa030977ccb07a0ebbbc994c3292949a0e249ec21588fae8a2cda957
Opcode Fuzzy Hash: 594fed77d9f7d9da5791f6f6429d63036c82d7175556f7a1a049851d4fe72a30
Instruction Fuzzy Hash: EC32D7756083058FC724CF18C8806AAB7E2BFD4318F198A6DEC959B356E735DC85CB82

Function 00B6BE26 Relevance: .0, Instructions: 29
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 700fc133b13061e782f77838ea20ebb1eaf1dd83534fcc8cfe7b983f77a8435f
Instruction ID: 50940d4bb2e05f11c4cf6d66116acc8b1e924506ff42bc9e0208104913a315ee
Opcode Fuzzy Hash: 700fc133b13061e782f77838ea20ebb1eaf1dd83534fcc8cfe7b983f77a8435f
Instruction Fuzzy Hash: 6AF03932A65324AFCB26DB48D805E99B3FCEB45B61F1144A6E601EB251CBB9DE40C7D0

Function 00B69669 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 77
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

ext-ms-, xrefs: 00B696D4
api-ms-, xrefs: 00B696C0

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID: api-ms-$ext-ms-
API String ID: 0-537541572
Opcode ID: e941fd55044aba8be9199eafcb3e68198212217c48cceb3b5d096243033021b4
Instruction ID: aaaa8c9606eada6976751458f45deca795e71cc075b771f9829c20413ffa57af
Opcode Fuzzy Hash: e941fd55044aba8be9199eafcb3e68198212217c48cceb3b5d096243033021b4
Instruction Fuzzy Hash: 1721BE31A15316ABDB215F65EC85A7E37DCEF11BA0F190194EC0AE72A1EB74DD00C6D0

Function 00B566EA Relevance: 3.1, APIs: 2, Instructions: 72
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 00B57E61
___raise_securityfailure.LIBCMT ref: 00B57F1E

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: FeaturePresentProcessor___raise_securityfailure
String ID:
API String ID: 3761405300-0
Opcode ID: 4b30e669c999604eab1d62b68542696f4a1816bb6659fa6ca9095b92a30a3a5c
Instruction ID: 18ed77f1088d5096a7fe2d05e90ba30ca88995f374ff43b602eceae2a5ffa053
Opcode Fuzzy Hash: 4b30e669c999604eab1d62b68542696f4a1816bb6659fa6ca9095b92a30a3a5c
Instruction Fuzzy Hash: 362107B8500309EBC705EF25FA55B897FF8BB08350F1041ABE818876B1EFB19949CB95

Function 00B5D64E Relevance: 3.0, APIs: 2, Instructions: 38
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLastError.KERNEL32(00B89798,0000000C), ref: 00B5D661
ExitThread.KERNEL32 ref: 00B5D668

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: ErrorExitLastThread
String ID:
API String ID: 1611280651-0
Opcode ID: 85c70b4bd2904cea71f99fd7e6eab6a54513dacaa6d78dfb621196b2899e2b0f
Instruction ID: e86005c0c13cac118d596962b853403c5bc86341ef39ef934abd7ace323cfd74
Opcode Fuzzy Hash: 85c70b4bd2904cea71f99fd7e6eab6a54513dacaa6d78dfb621196b2899e2b0f
Instruction Fuzzy Hash: FDF03C71940205AFDB10AFB0D84ABAE3BF4EF55711F1006D9F90A972A2CF399906CB91

Function 00B69730 Relevance: 1.6, APIs: 1, Instructions: 57
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 24d94fc5dca9706c485f226eabe219e576d25fbc17feb5bc731b305df47a8d62
Instruction ID: 61b45c22fbc04ada60d2687b211032a85fc8cecfbde6cec91f437d548c469680
Opcode Fuzzy Hash: 24d94fc5dca9706c485f226eabe219e576d25fbc17feb5bc731b305df47a8d62
Instruction Fuzzy Hash: F80124333242259F9B169E6AEC8496A37DEEFC57207284161F908DB194EF3ADC00C780

Function 00B68991 Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,4D88C033,4D88C033,?,00B6A64A,00000220,00B709E1,4D88C033,?,?,?,?,00000000,00000000,?,00B709E1), ref: 00B689C3

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 04f9d1286c4260827a89ef77446aa799fe1ccdf77f226294f9de6550f26c791c
Instruction ID: 85b0356e5f9bac84328c43321929cc44b53f58ea8dd596266a82ccf15e67b037
Opcode Fuzzy Hash: 04f9d1286c4260827a89ef77446aa799fe1ccdf77f226294f9de6550f26c791c
Instruction Fuzzy Hash: 5CE0E531101221ABD7223A659C00B7B36C8DF417A0F1413E1AC08A70D0DF98CC0086E3

Non-executed Functions

Function 00A110F0 Relevance: 51.3, Strings: 40, Instructions: 1283COMMON

Download Yara Rule

Strings

ovf, xrefs: 00A11C8C
Sh, xrefs: 00A11DA8
&uq, xrefs: 00A121B8
Sh, xrefs: 00A11656
Sh, xrefs: 00A11987
PEGh, xrefs: 00A1213F
PEGh, xrefs: 00A12045
Sh, xrefs: 00A11957
ovf, xrefs: 00A116E8
ovf, xrefs: 00A11CD0
Sh, xrefs: 00A114D0
ovf, xrefs: 00A11740
Sh, xrefs: 00A118A3
PEGh, xrefs: 00A12067
ovf, xrefs: 00A11592
ovf, xrefs: 00A11E09
&uq, xrefs: 00A11FD7
ovf, xrefs: 00A11CB2
ovf, xrefs: 00A1156C
Sh, xrefs: 00A118E8
-p\2, xrefs: 00A112D8
&uq, xrefs: 00A1213A
PEGh, xrefs: 00A121F8
ovf, xrefs: 00A11E26
Sh, xrefs: 00A11D79
-p\2, xrefs: 00A11388
PEGh, xrefs: 00A11FDC
Sh, xrefs: 00A11508
ovf, xrefs: 00A11E60
Sh, xrefs: 00A11688
J@, xrefs: 00A11ADE
PEGh, xrefs: 00A121D4
ovf, xrefs: 00A115B0
PEGh, xrefs: 00A1214D
-p\2, xrefs: 00A11297
J@, xrefs: 00A11A08
&uq, xrefs: 00A12027
Sh, xrefs: 00A11BF5
Sh, xrefs: 00A11C28
-p\2, xrefs: 00A11354

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID: &uq$&uq$&uq$&uq$-p\2$-p\2$-p\2$-p\2$J@$J@$PEGh$PEGh$PEGh$PEGh$PEGh$PEGh$PEGh$ovf$ovf$ovf$ovf$ovf$ovf$ovf$ovf$ovf$ovf$ovf$Sh$Sh$Sh$Sh$Sh$Sh$Sh$Sh$Sh$Sh$Sh$Sh
API String ID: 0-2975983368
Opcode ID: ca3e6bae78e71e319c818f58e6c37e5e41dce1f643bfafc74b83353efeb0bd96
Instruction ID: 81d5fed0352f5086c6a29465ece1a048f81b8477e8119898ca7a2f2e84fe21dd
Opcode Fuzzy Hash: ca3e6bae78e71e319c818f58e6c37e5e41dce1f643bfafc74b83353efeb0bd96
Instruction Fuzzy Hash: 3CB2C576704B408FC724CF29C5D06A6BBE2BBC9350B29CA1DD9AA8B751D735EC46CB40

Function 00A0DA50 Relevance: 16.6, Strings: 13, Instructions: 328COMMON

Download Yara Rule

Strings

i>g, xrefs: 00A0DC0C
}, xrefs: 00A0DD44
=<n3, xrefs: 00A0DC6A
i>g, xrefs: 00A0DD0E
i>g, xrefs: 00A0DC16
}, xrefs: 00A0DB31
=<n3, xrefs: 00A0DAEB
i>g, xrefs: 00A0DDE8
}, xrefs: 00A0DE25
=<n3, xrefs: 00A0DEEA
}, xrefs: 00A0DE1B
<<n3, xrefs: 00A0DB1B
=<n3, xrefs: 00A0DB00

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID: }$}$}$}$<<n3$=<n3$=<n3$=<n3$=<n3$i>g$i>g$i>g$i>g
API String ID: 0-3399682643
Opcode ID: 6f900523a2304de48f089da41ae3bfa9ad0b3a693e30d727dfdf0803961b5e29
Instruction ID: cc0ebb3c8952bc7e087c1e96cc80b9b3dfb54110a4404b528acc5eaf36a29197
Opcode Fuzzy Hash: 6f900523a2304de48f089da41ae3bfa9ad0b3a693e30d727dfdf0803961b5e29
Instruction Fuzzy Hash: 51B1F63730D2495FCB249BB8B48422A77D29FD13A4F29CA16E46ACF3E5DA31CC459346

Function 00A071C0 Relevance: 15.7, Strings: 12, Instructions: 741COMMON

Download Yara Rule

Strings

<5P, xrefs: 00A074AE
;5P, xrefs: 00A07268
mr1I, xrefs: 00A07A5A
mr1I, xrefs: 00A07637
.rdata, xrefs: 00A07838
TZ, xrefs: 00A079E8
TZ, xrefs: 00A07935
.pdata, xrefs: 00A0731B, 00A07B6C
TZ, xrefs: 00A07543
wgWU, xrefs: 00A074C6
wgWU, xrefs: 00A0784E
<5P, xrefs: 00A07BA5

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID: .pdata$.rdata$;5P$<5P$<5P$TZ$TZ$TZ$mr1I$mr1I$wgWU$wgWU
API String ID: 0-1786878105
Opcode ID: 773cd7d409dd463399743777fde651a5b1571f4fe0c0f27fd2eb99a95774a5ac
Instruction ID: dcb3918acc16e927ccc0f1c268fa5c7ba41736ffca34b1e8b66f432009940abc
Opcode Fuzzy Hash: 773cd7d409dd463399743777fde651a5b1571f4fe0c0f27fd2eb99a95774a5ac
Instruction Fuzzy Hash: E0526D75B092098FCF2C8B68E5E09BD77E1AF6D320B24411EE8179B7E0CA35AD41DB51

Function 00A29950 Relevance: 15.7, Strings: 12, Instructions: 724COMMON

Download Yara Rule

Strings

VY9, xrefs: 00A29DD1
([, xrefs: 00A29B10
VY9, xrefs: 00A29998
MDiv, xrefs: 00A2A0E3
MDiv, xrefs: 00A2A17D
([, xrefs: 00A29B26
([, xrefs: 00A29FE5
{*PC, xrefs: 00A29F01
([, xrefs: 00A29F41
VY9, xrefs: 00A29E67
{*PC, xrefs: 00A29C35
MDiv, xrefs: 00A2A0FC

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID: MDiv$MDiv$MDiv$VY9$VY9$VY9${*PC${*PC$([$([$([$([
API String ID: 0-1546310308
Opcode ID: 32f2550766b7507b53dfa6119ab488ad52d47ef32f9b6a8322e26a1d510cc6ae
Instruction ID: 30af62dcecd71dde41b23e4a869249a6556b84995cafb5acc370ec40c7dabf1c
Opcode Fuzzy Hash: 32f2550766b7507b53dfa6119ab488ad52d47ef32f9b6a8322e26a1d510cc6ae
Instruction Fuzzy Hash: 7E42EA353096618FCB188B2CF9D456A77E29B98720F294A2EE466DB2F0D731DC85C743

Function 00AAF260 Relevance: 14.3, Strings: 11, Instructions: 587COMMON

Download Yara Rule

Strings

C7s, xrefs: 00AAF5F9
hmP, xrefs: 00AAFAD8
WAk), xrefs: 00AAF86D
hmP, xrefs: 00AAF92F
hmP, xrefs: 00AAF727
Yc), xrefs: 00AAF38B
C7s, xrefs: 00AAF696
Zc), xrefs: 00AAF90C
C7s, xrefs: 00AAF868
WAk), xrefs: 00AAF67F
Zc), xrefs: 00AAF55C

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID: C7s$C7s$C7s$WAk)$WAk)$Yc)$Zc)$Zc)$hmP$hmP$hmP
API String ID: 0-1505274873
Opcode ID: fbbb46eb11b7c0c2e810d582d5970906f2ce4c74ef6e31b45f546f960ebb1eb4
Instruction ID: 00dc4a0b4ac6b6168d91bf18f4c2a7f2de9becf5e954d1484c8d70c07899d6b1
Opcode Fuzzy Hash: fbbb46eb11b7c0c2e810d582d5970906f2ce4c74ef6e31b45f546f960ebb1eb4
Instruction Fuzzy Hash: 9922A539614241CFCB1CCFACC5D46A9B7E1AB56320B39896AE815CB3E2C731DC459B52

Function 00A15250 Relevance: 12.8, Strings: 10, Instructions: 349COMMON

Download Yara Rule

Strings

qw<, xrefs: 00A154A3
qw<, xrefs: 00A15420
qw<, xrefs: 00A153E3
)+dF, xrefs: 00A15348
qw<, xrefs: 00A155D0
qw<, xrefs: 00A1558A
qw<, xrefs: 00A15690
)+dF, xrefs: 00A15336
qw<, xrefs: 00A154E0
qw<, xrefs: 00A1564F

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID: )+dF$)+dF$qw<$qw<$qw<$qw<$qw<$qw<$qw<$qw<
API String ID: 0-3488286461
Opcode ID: 8d22e5bc0f4610856e3dd7576d83348cd7820e28626d1cd65ab91fa5fbf35da6
Instruction ID: 2d36f15e2d73a5585dac7358029c04cea8113f7920386fa1adc33deba9762c00
Opcode Fuzzy Hash: 8d22e5bc0f4610856e3dd7576d83348cd7820e28626d1cd65ab91fa5fbf35da6
Instruction Fuzzy Hash: 13C14536E00A20CFCB14CB3495D45EEB7F39BC5360F698655C8227B6A4D6329E85CBD1

Function 00A02010 Relevance: 9.3, Strings: 7, Instructions: 524COMMON

Download Yara Rule

Strings

$v8, xrefs: 00A027AF
$tT+, xrefs: 00A02287
#v8, xrefs: 00A02098
$tT+, xrefs: 00A022A9
$tT+, xrefs: 00A022FA
$v8, xrefs: 00A02222
$v8, xrefs: 00A02327

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID: #v8$$tT+$$tT+$$tT+$$v8$$v8$$v8
API String ID: 0-3298945804
Opcode ID: b79e25472599d57786a4af249a5a09b5a303c70315f27f2d89268931e87345c6
Instruction ID: 83fa0e3e028a7943252aaccbfeaa28728b22036f240c5d871a0a7c833cfd78a6
Opcode Fuzzy Hash: b79e25472599d57786a4af249a5a09b5a303c70315f27f2d89268931e87345c6
Instruction Fuzzy Hash: B412417AB003098FCF14CF2CE5946ADB3F3ABC9360B264556D815AB3E1D635AC46CB91

Function 00A21EC0 Relevance: 8.0, Strings: 6, Instructions: 511COMMON

Download Yara Rule

Strings

?d, xrefs: 00A2249B
?d, xrefs: 00A224D8
?d, xrefs: 00A2227B
&, xrefs: 00A21FD4
?d, xrefs: 00A224CC
&, xrefs: 00A22517

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID: ?d$?d$?d$?d$&$&
API String ID: 0-596106360
Opcode ID: a2840a2c31ed78fdd16edd46012affe50d5305ec6f8540870bfe01e253107f60
Instruction ID: 286de5f7f4dc6f7789a1825440cb6e46b42cb84395f120a906b18fb69d45d3ef
Opcode Fuzzy Hash: a2840a2c31ed78fdd16edd46012affe50d5305ec6f8540870bfe01e253107f60
Instruction Fuzzy Hash: 8B12E775B011149FCF18CB6CE5A09BDB7F2EF99324B24426AE9269B7E4C7319C41CB50

Function 00A095D0 Relevance: 7.9, Strings: 6, Instructions: 362COMMON

Download Yara Rule

Strings

^<8, xrefs: 00A09970
]<8, xrefs: 00A09868
^<8, xrefs: 00A09945
^<8, xrefs: 00A09870
]<8, xrefs: 00A09968
^<8, xrefs: 00A0983C

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID: ]<8$]<8$^<8$^<8$^<8$^<8
API String ID: 0-301821828
Opcode ID: dc92ee281e71e49eed2160a0cac37abe6d2aeb03be40992d0e89444d4f2f130f
Instruction ID: 3e4017c3e0c7a70dff1e47b6832a1bdff683940cec6be7da2c8b96e063f442c4
Opcode Fuzzy Hash: dc92ee281e71e49eed2160a0cac37abe6d2aeb03be40992d0e89444d4f2f130f
Instruction Fuzzy Hash: F5D1C2B6A0521D9BCF18CF68E8D05AFB7F5AB49360F24425AE811E73E2D6318D44CF91

Function 00A203F0 Relevance: 7.7, Strings: 6, Instructions: 217COMMON

Download Yara Rule

Strings

!~nB, xrefs: 00A20687
!~nB, xrefs: 00A20675
!~nB, xrefs: 00A206A7
h3A8, xrefs: 00A2062D
h3A8, xrefs: 00A20680
g3A8, xrefs: 00A20660

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID: !~nB$!~nB$!~nB$g3A8$h3A8$h3A8
API String ID: 0-183159032
Opcode ID: 1e36b569fb818f0eac306674252d51402af480887e33916c633804d91b89c641
Instruction ID: 7a4481e8ae531a12bda200737b8ce8f293bb25344af86ef924b65f8c109fa4ce
Opcode Fuzzy Hash: 1e36b569fb818f0eac306674252d51402af480887e33916c633804d91b89c641
Instruction Fuzzy Hash: 837138363043518BCF1C9A2CA4E097A77D29BD1355F19853ED94B8B7A1D630CC4ACB81

Function 00A0B650 Relevance: 7.0, Strings: 5, Instructions: 769COMMON

Download Yara Rule

Strings

o<B, xrefs: 00A0B746
2bz, xrefs: 00A0B98C
2bz, xrefs: 00A0B9A0
o<B, xrefs: 00A0B6A8
2bz, xrefs: 00A0C150

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID: 2bz$2bz$2bz$o<B$o<B
API String ID: 0-3761655142
Opcode ID: 370927ff5c6dd816b4a1bf5120b97d4a6005ab1121833393774a68e9fd49c509
Instruction ID: 39b5e375a06ca2ff166acb10461e8578c01d7fcb1e35c61f180e1fbf5c5e7d9e
Opcode Fuzzy Hash: 370927ff5c6dd816b4a1bf5120b97d4a6005ab1121833393774a68e9fd49c509
Instruction Fuzzy Hash: E7524C362182499FC7148F34A9D056ABBE2AFD5360F288A1EF866973F1C731CC45DB52

Function 00A142A0 Relevance: 5.5, Strings: 4, Instructions: 468COMMON

Download Yara Rule

Strings

"'^, xrefs: 00A142F7
#'^, xrefs: 00A14963
#'^, xrefs: 00A14420
#'^, xrefs: 00A14959

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID: "'^$#'^$#'^$#'^
API String ID: 0-1012757040
Opcode ID: 0a648ac7891e0b950b0d2253e9d6bdab158b27aed27bc8fa3809f2b91c9a3640
Instruction ID: 8858bfa3d024a1ea3716c9c8cfae7db980736f5e503168e5cc56d2f4b48206ca
Opcode Fuzzy Hash: 0a648ac7891e0b950b0d2253e9d6bdab158b27aed27bc8fa3809f2b91c9a3640
Instruction Fuzzy Hash: 4CF14E767082509BCA188B2C64E05BF77D2AFCD350F694919F866CB3E1C635CC85DB82

Function 00A9D300 Relevance: 5.2, Strings: 4, Instructions: 250COMMON

Download Yara Rule

Strings

|LC", xrefs: 00A9D50C
|LC", xrefs: 00A9D502
|LC", xrefs: 00A9D558
|LC", xrefs: 00A9D4D8

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID: |LC"$|LC"$|LC"$|LC"
API String ID: 0-1974018975
Opcode ID: a3eee44b82228906c8fc955ff62e9dab6eede846279d47d84a2cbba94f60dbc2
Instruction ID: 5c14b9d9a93815621eda5346efe5cb1adf2838c578c25458c8e5bf24896915f5
Opcode Fuzzy Hash: a3eee44b82228906c8fc955ff62e9dab6eede846279d47d84a2cbba94f60dbc2
Instruction Fuzzy Hash: 478168767043059FCF148F2CD9D02AFBBE2ABCA361F2A451AE8558B390CB359C45CB51

Function 00B6004A Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,00000000), ref: 00B60142
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 00B6014C
UnhandledExceptionFilter.KERNEL32(00B706B9,?,?,?,?,?,00000000), ref: 00B60159

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: a7ea6d019276db74c6b4988468628cc6360a3dd67b562d74af62dc5a7b488e09
Instruction ID: 293852536aa269f686969a22e3fc10a5ccddbcfdcf37c12b8580c6637cf65e05
Opcode Fuzzy Hash: a7ea6d019276db74c6b4988468628cc6360a3dd67b562d74af62dc5a7b488e09
Instruction Fuzzy Hash: 4F31C47491122D9BCB21DF25D889B8DBBF8BF18310F5041EAE81CA7260EB749F858F44

Function 00B5D838 Relevance: 4.5, APIs: 3, Instructions: 20COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,00B5D8F0,?,?,?,?), ref: 00B5D85A
TerminateProcess.KERNEL32(00000000,?,00B5D8F0,?,?,?,?), ref: 00B5D861
ExitProcess.KERNEL32 ref: 00B5D873

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: ddba9280c0786a932482aa6cf98fa2cd261cac75d9fb254b67f2a80d06eac123
Instruction ID: 94e61862c7b3d3f9a75a21885cdb48e386f1caf0a6f520f5299ec9bd0be1e763
Opcode Fuzzy Hash: ddba9280c0786a932482aa6cf98fa2cd261cac75d9fb254b67f2a80d06eac123
Instruction Fuzzy Hash: E2E0B631000549ABCB226FA5ED49A5C3BB9FB58752F0045A4F9158B931EB35DD86CB80

Function 00A05270 Relevance: 4.2, Strings: 3, Instructions: 452COMMON

Download Yara Rule

Strings

RU|=, xrefs: 00A05472
RU|=, xrefs: 00A05547
QU|=, xrefs: 00A052C4

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID: QU|=$RU|=$RU|=
API String ID: 0-3448528041
Opcode ID: cafcfb21a713b90fc73ffda0c8e5c27ea543d96300e2b7ce53f6f11dd74340f9
Instruction ID: b3675328a702ff6c428f78141d10076ed71ce0ef7ad8fb478c2546ab36212d60
Opcode Fuzzy Hash: cafcfb21a713b90fc73ffda0c8e5c27ea543d96300e2b7ce53f6f11dd74340f9
Instruction Fuzzy Hash: EEF14037D05F298BDB248B78A5C44BFB6A1AB98320F56891ADD61273E0C6318C45DFC3

Function 00A15970 Relevance: 3.3, APIs: 2, Instructions: 298COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 42f3b51a87fac45a55c71295f572592200f2a7810565b4acbe821b9338e64308
Instruction ID: 4e3d2f3a737d8399f0581c94752fe0cc748becda84143bfb4783fe1f5ef1ec0d
Opcode Fuzzy Hash: 42f3b51a87fac45a55c71295f572592200f2a7810565b4acbe821b9338e64308
Instruction Fuzzy Hash: 51A15C36B49704DB8E184B3455F05BF7AD39EC2764F69851EF89B4B2E1D6308C89CB82

Function 00A088D0 Relevance: 3.2, Strings: 2, Instructions: 718COMMON

Download Yara Rule

Strings

>PA(, xrefs: 00A08AD8
>PA(, xrefs: 00A08916

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID: >PA($>PA(
API String ID: 0-3363961830
Opcode ID: 6cff29373ffb1e73b90ab479269f2e84f198f688e3fdb628663edcc347e1f5b7
Instruction ID: d4f324e0d5b64711eb6ae7240e4692442f7d9679fb6a60adebbcbc06336407c0
Opcode Fuzzy Hash: 6cff29373ffb1e73b90ab479269f2e84f198f688e3fdb628663edcc347e1f5b7
Instruction Fuzzy Hash: 14424A313086068FCB188B3864E053A77E36FD9364F288A1EE497877E2DA35CD45DB46

Function 00A01625 Relevance: .8, Instructions: 779COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90385fe5b93f889ef4688da592c28b6441624123b40b3237fc9a42db14cd9467
Instruction ID: b40cdac3aacb09b70246f6efe84805dfbbdc9ac0bddfc3e88156f3f1aa911a8c
Opcode Fuzzy Hash: 90385fe5b93f889ef4688da592c28b6441624123b40b3237fc9a42db14cd9467
Instruction Fuzzy Hash: A942BB377092498BCF188F28E4D46AD72E3D7D43A0F26461BE4968B7F4D635DC898782

Function 00A10140 Relevance: .6, Instructions: 580COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b60387a8151ba9e0997081f3c5ccb257919638e6b4e042027baf148033704b97
Instruction ID: 01135fcb108cd4e5b4c873d691c7aa1b6335ab992bb180eb41a9a8c11156f18d
Opcode Fuzzy Hash: b60387a8151ba9e0997081f3c5ccb257919638e6b4e042027baf148033704b97
Instruction Fuzzy Hash: 7122B6353083018F8A1C8A2895E48FEB7E2AFD4314F29861EF5674B7A1D675DCC5CB86

Function 00A238A0 Relevance: .4, Instructions: 401COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f127a574c4ff227c96b3e36f45c8f04c99265b829506dcfac792ec51f932f4a7
Instruction ID: 641b0fcf3638d7372e27743097f02c1dcf882c04f2fb751e4d8bc23cd7ae2b05
Opcode Fuzzy Hash: f127a574c4ff227c96b3e36f45c8f04c99265b829506dcfac792ec51f932f4a7
Instruction Fuzzy Hash: 59E1187B3083118B8E148F2DA5D051EB7E39FC6360B29C96AE859473A4CA39DD4ACB41

Function 00AB06D0 Relevance: .4, Instructions: 375COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 290c912b606dc2a37ffc62a1b833718f2becc819372cc55475e560b839589a1f
Instruction ID: 39f7f79e71f8012367120977741dfd2eb01905fb698ab15a6546a321c12da615
Opcode Fuzzy Hash: 290c912b606dc2a37ffc62a1b833718f2becc819372cc55475e560b839589a1f
Instruction Fuzzy Hash: 44E1897AB045058F8B18CF58D5D08BEB7B7ABC9320B2A8759C5155B3E5CA31AC86CF81

Function 00A06870 Relevance: .4, Instructions: 366COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a6c8f6a107e4662957e05b11e29b957005a7b290d038db3de2d0edcfe72ee50
Instruction ID: afd916107fca009ed490c1637cc473a18551a4dec3a57051db0ac0217aec0c7f
Opcode Fuzzy Hash: 6a6c8f6a107e4662957e05b11e29b957005a7b290d038db3de2d0edcfe72ee50
Instruction Fuzzy Hash: 60D18E75B001198FCF14CF78E890AAEB7F2AF59315B24455AE811EB7E0CA31DD51CBA1

Function 00AAF030 Relevance: .3, Instructions: 317COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f06da4cc3ec9a673c65e4a82ef2eb7ff5f13235ff916e25e553cb51ba91bb25
Instruction ID: 5ebe0397bba4dc5022fc66014d78267533d53b2192209eca6635b842cc3b9702
Opcode Fuzzy Hash: 6f06da4cc3ec9a673c65e4a82ef2eb7ff5f13235ff916e25e553cb51ba91bb25
Instruction Fuzzy Hash: 99A18B363052059FCA1C8BA8AD9476A77E19F93325F298A3AEC59C73D2D725CC06C781

Function 00A0F310 Relevance: .3, Instructions: 301COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2348988e4ae64e66cf1e51088fce8b958c1d86da733c1d00633f74809530360b
Instruction ID: e61857942d3f7270cdfa584abf2cb36d3193cd458754c95fefee90d2df4d2a08
Opcode Fuzzy Hash: 2348988e4ae64e66cf1e51088fce8b958c1d86da733c1d00633f74809530360b
Instruction Fuzzy Hash: 64B103357083459FCB308B2875C425FB6D36BD5314F29C92ADC946B6E9C632DC4ADB82

Function 00A0F7A0 Relevance: .3, Instructions: 263COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8273e642c4e2bd4169279c4ad39df55f76df5b478df2f475d930d4fa396ae4c6
Instruction ID: 3153d148310e0a23a20ef310fb3c9b4c00e7bfa9e1254cd9ef7d9237735cfb57
Opcode Fuzzy Hash: 8273e642c4e2bd4169279c4ad39df55f76df5b478df2f475d930d4fa396ae4c6
Instruction Fuzzy Hash: C5A1E7357083458FC724CB28A4D056AB7E2AFD8350F29896EE895DB7F1C631CD49DB82

Function 00A0AA20 Relevance: .2, Instructions: 209COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13adba0115403456afb658643c4554b5dc9c20d11cadb76df1d315b3077b7863
Instruction ID: 48cc82757096cd2a1adffef3d23bdbffcd09de1a0667b341ea3cc3b0f8f6d728
Opcode Fuzzy Hash: 13adba0115403456afb658643c4554b5dc9c20d11cadb76df1d315b3077b7863
Instruction Fuzzy Hash: 8881B4363083088FC7108F24EA8465BBBE2AFD5364F5AC55AD9584B3E5C731DC0ADB82

Function 00A228D0 Relevance: .2, Instructions: 194COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b12aab4585aa449a5f18a27d0958e3f4f9d9b753872a550ccc41b3b3aebc6df3
Instruction ID: e8212e180d8df932850e5dcf9dd5cd7081604f7310a3062d3eecbfb4cfe9bb25
Opcode Fuzzy Hash: b12aab4585aa449a5f18a27d0958e3f4f9d9b753872a550ccc41b3b3aebc6df3
Instruction Fuzzy Hash: 695139367042216B8728DB2CA5E472E77D29BD8320F258D7DE85ADB3E4DA308C458786

Function 00B59A20 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: e74951a54e16f0ea739ff6a58b976449435b3080f691cf407e4e6deb9ac3fede
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: D6112BB7240181C3D604C73DC8F47B6A7DAEBC5323B2D83FAD9528B758D122D94D9620

Function 00B6BDF5 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8002cddf0912a3c4a4c14f9dabde380401963fb4ceedbd51d2a293b40520d5e8
Instruction ID: e6a52601104d2d6c46c22191ed2353c71fd18cfad9166c85883360ec51505dae
Opcode Fuzzy Hash: 8002cddf0912a3c4a4c14f9dabde380401963fb4ceedbd51d2a293b40520d5e8
Instruction Fuzzy Hash: 7BE0B672911228EBCB15DBD8C945D9AF3FCEB49B50B154496B601D3111C675DE40D7D0

Function 00B6CDC4 Relevance: 19.6, APIs: 13, Instructions: 113
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___free_lconv_mon.LIBCMT ref: 00B6CE08

Part of subcall function 00B6C220: _free.LIBCMT ref: 00B6C23D
Part of subcall function 00B6C220: _free.LIBCMT ref: 00B6C24F
Part of subcall function 00B6C220: _free.LIBCMT ref: 00B6C261
Part of subcall function 00B6C220: _free.LIBCMT ref: 00B6C273
Part of subcall function 00B6C220: _free.LIBCMT ref: 00B6C285
Part of subcall function 00B6C220: _free.LIBCMT ref: 00B6C297
Part of subcall function 00B6C220: _free.LIBCMT ref: 00B6C2A9
Part of subcall function 00B6C220: _free.LIBCMT ref: 00B6C2BB
Part of subcall function 00B6C220: _free.LIBCMT ref: 00B6C2CD
Part of subcall function 00B6C220: _free.LIBCMT ref: 00B6C2DF
Part of subcall function 00B6C220: _free.LIBCMT ref: 00B6C2F1
Part of subcall function 00B6C220: _free.LIBCMT ref: 00B6C303
Part of subcall function 00B6C220: _free.LIBCMT ref: 00B6C315

_free.LIBCMT ref: 00B6CDFD

Part of subcall function 00B68957: HeapFree.KERNEL32(00000000,00000000,?,00B5F7BB), ref: 00B6896D
Part of subcall function 00B68957: GetLastError.KERNEL32(?,?,00B5F7BB), ref: 00B6897F

_free.LIBCMT ref: 00B6CE1F
_free.LIBCMT ref: 00B6CE34
_free.LIBCMT ref: 00B6CE3F
_free.LIBCMT ref: 00B6CE61
_free.LIBCMT ref: 00B6CE74
_free.LIBCMT ref: 00B6CE82
_free.LIBCMT ref: 00B6CE8D
_free.LIBCMT ref: 00B6CEC5
_free.LIBCMT ref: 00B6CECC
_free.LIBCMT ref: 00B6CEE9
_free.LIBCMT ref: 00B6CF01

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID:
API String ID: 161543041-0
Opcode ID: d9ecc39b72309ee9314aafa327dfb0f4431b15db97b3e3a88c1116cd0ac6c284
Instruction ID: a0be362f2631a132b65b32db24e9206eba1032290efb0510d35585213def6f91
Opcode Fuzzy Hash: d9ecc39b72309ee9314aafa327dfb0f4431b15db97b3e3a88c1116cd0ac6c284
Instruction Fuzzy Hash: 2F313D32600201AFEB21AA79D849B7A7BF9EF00310F149999E099D7191DF3AFD40CB16

Function 00A17830 Relevance: 14.5, APIs: 2, Strings: 6, Instructions: 495COMMON

Download Yara Rule

APIs

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A17924

Strings

~s, xrefs: 00A179E9
~s, xrefs: 00A17B69
~s, xrefs: 00A17B50
~s, xrefs: 00A179D0
F~&, xrefs: 00A17DEA
#)&, xrefs: 00A17E32

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@
String ID: #)&$F~&$~s$~s$~s$~s
API String ID: 885266447-1142046723
Opcode ID: 3def5b0a843217a762ee452e4c6e5f62f51a04c3bb4ae424ea6b994e57bf8090
Instruction ID: 6682c5d03a332838c26783b00ae131c9f9160b5d147a06d12ce9f38dc8727975
Opcode Fuzzy Hash: 3def5b0a843217a762ee452e4c6e5f62f51a04c3bb4ae424ea6b994e57bf8090
Instruction Fuzzy Hash: CF221A75604B008FC724CF29C590AA6BBF5BF88310F148A2DD59B87B91E731F845CB90

Function 00A1FD10 Relevance: 14.2, APIs: 2, Strings: 6, Instructions: 204COMMON

Download Yara Rule

APIs

std::ios_base::_Ios_base_dtor.LIBCPMT ref: 00A1FECF

Strings

eK2, xrefs: 00A1FDD0
eK2, xrefs: 00A1FF1E
eK2, xrefs: 00A1FDA3
dK2, xrefs: 00A1FD80
eK2, xrefs: 00A1FDB2
eK2, xrefs: 00A1FF32

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: Ios_base_dtorstd::ios_base::_
String ID: dK2$eK2$eK2$eK2$eK2$eK2
API String ID: 323602529-3583698771
Opcode ID: 08b691c2c52ec6dad756e4f8b7f304d582c40ebce0120d2aa325ee85d85cfee5
Instruction ID: 9a61587fe747bc586ab123b3a191f89fe63c5c531c10eb52ba383ad1438a5bcf
Opcode Fuzzy Hash: 08b691c2c52ec6dad756e4f8b7f304d582c40ebce0120d2aa325ee85d85cfee5
Instruction Fuzzy Hash: D07135766002568FCB08CF28E9986E9B7F1FB45310F298669D4259F2F1DB319D8ACB40

Function 00B679D4 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 303COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 00B67AF3
CatchIt.LIBVCRUNTIME ref: 00B67C52
_UnwindNestedFrames.LIBCMT ref: 00B67D53
CallUnexpected.LIBVCRUNTIME ref: 00B67D6E

Strings

csm, xrefs: 00B67A7E
csm, xrefs: 00B67A11
csm, xrefs: 00B67B2A

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: CallCatchFramesNestedUnexpectedUnwindtype_info::operator==
String ID: csm$csm$csm
API String ID: 2332921423-393685449
Opcode ID: 9b631096fce5238bc6a05016b8a7bc64229c3139420cd24759a4f54bad4acd6d
Instruction ID: 57b4d771fee52a82fbce96dd5034d8c2d0ac386d36d42e383f71c0e526f24ab3
Opcode Fuzzy Hash: 9b631096fce5238bc6a05016b8a7bc64229c3139420cd24759a4f54bad4acd6d
Instruction Fuzzy Hash: F1B1BF71848209DFCF25DFA4C8819AEB7F5FF04318B1445E9E8156B212DB39EA51CFA1

Function 00B59890 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 130COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00B598C7
___except_validate_context_record.LIBVCRUNTIME ref: 00B598CF
_ValidateLocalCookies.LIBCMT ref: 00B59958
__IsNonwritableInCurrentImage.LIBCMT ref: 00B59983
_ValidateLocalCookies.LIBCMT ref: 00B599D8

Strings

csm, xrefs: 00B5996D

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: d37a695e68a9de3cd28eeab985ddf5d09ab9bcbc19a8814cbf5c655fa89276cc
Instruction ID: 1f2d85f40c4de16ee67caadee632edaaeceb519b2ada0d0a47848c1685714dc1
Opcode Fuzzy Hash: d37a695e68a9de3cd28eeab985ddf5d09ab9bcbc19a8814cbf5c655fa89276cc
Instruction Fuzzy Hash: 7A419334A00218DBCF10EF69C895BAEBBE5EF45315F1481D9EC186B392DB359D09CB91

Function 00B6C610 Relevance: 10.6, APIs: 7, Instructions: 65COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00B6C970: _free.LIBCMT ref: 00B6C995

_free.LIBCMT ref: 00B6C65E

Part of subcall function 00B68957: HeapFree.KERNEL32(00000000,00000000,?,00B5F7BB), ref: 00B6896D
Part of subcall function 00B68957: GetLastError.KERNEL32(?,?,00B5F7BB), ref: 00B6897F

_free.LIBCMT ref: 00B6C669
_free.LIBCMT ref: 00B6C674
_free.LIBCMT ref: 00B6C6C8
_free.LIBCMT ref: 00B6C6D3
_free.LIBCMT ref: 00B6C6DE
_free.LIBCMT ref: 00B6C6E9

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 10f89baa2e0e33ddf7736a6c1844a4c53b43da7e62d178f93e44d7a4bdad20d8
Instruction ID: 4f0953d7ff6e50dce08053066da87616766341f6286d112c5c52ddaacbfaff9f
Opcode Fuzzy Hash: 10f89baa2e0e33ddf7736a6c1844a4c53b43da7e62d178f93e44d7a4bdad20d8
Instruction Fuzzy Hash: 55115171541B44BADB21B7B0CC0BFEB7BEC9F01700F805D55B2D9A60D2DA6EB50486A2

Function 00B68B58 Relevance: 9.1, APIs: 6, Instructions: 128COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,00B5D673,00B89798,0000000C), ref: 00B68B5D
_free.LIBCMT ref: 00B68BBA
_free.LIBCMT ref: 00B68BF0
SetLastError.KERNEL32(00000000,00000005,000000FF,?,?,00B5D673,00B89798,0000000C), ref: 00B68BFB
_free.LIBCMT ref: 00B68C65
_free.LIBCMT ref: 00B68C99

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: _free$ErrorLast
String ID:
API String ID: 3291180501-0
Opcode ID: 5ca1ba20e2e87982e92e929a8f66233dd27878d3cebf1ac929b0a2ef9e5e53a8
Instruction ID: 02cf8974de116e4788f58dbf070c12ab54c1fa5155c7ef1ea7b8e39c41781467
Opcode Fuzzy Hash: 5ca1ba20e2e87982e92e929a8f66233dd27878d3cebf1ac929b0a2ef9e5e53a8
Instruction Fuzzy Hash: 9731E8F16465117BDA113378ACE6D2F32DDDB813B0B2803E9F524A75F2DE2E8C418265

Function 00B6710D Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,00B67104,00B678E6,?,?,?,?,00B5937D,?,?,?,?,?,00000000,00000000), ref: 00B6711B
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 00B67129
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 00B67142
SetLastError.KERNEL32(00000000,?,00B67104,00B678E6,?,?,?,?,00B5937D,?,?,?,?,?,00000000,00000000), ref: 00B67194

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 74c3e8f5d0403691fa35530dfe9afd60500d83ad746ba446655f27021fedc28f
Instruction ID: dacb1a4d7aba316a5aa72191cb59c181040ae9376a328aaf1f0275ec1d2849a9
Opcode Fuzzy Hash: 74c3e8f5d0403691fa35530dfe9afd60500d83ad746ba446655f27021fedc28f
Instruction Fuzzy Hash: 2B01AC3224D712AEA61527F4BC8AD5A27D5EB0377872003BBF528661F1EF154C02A655

Function 00A0AD70 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 88COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 00A0AD88

Strings

)ht-, xrefs: 00A0ADF4
)ht-, xrefs: 00A0AE17
)ht-, xrefs: 00A0AE63
)ht-, xrefs: 00A0ADE5

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: )ht-$)ht-$)ht-$)ht-
API String ID: 4194217158-3983533196
Opcode ID: 17a16203a81957f51d4cfd5d3c25b86c7be8cdde5a0354f2c4cdbde559e4803b
Instruction ID: 516dcf091fd18c74d55018ae4fecb5c4e3c9e43b370aca61cf4656be382751b0
Opcode Fuzzy Hash: 17a16203a81957f51d4cfd5d3c25b86c7be8cdde5a0354f2c4cdbde559e4803b
Instruction Fuzzy Hash: BC21F7B67042148BEE488A2CBCC562E37E6CFB0365F698939E506C73E1D621CC49D643

Function 00B5D7E5 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 30libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,00B5D86F,?,?,00B5D8F0,?,?,?), ref: 00B5D7FA
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00B5D80D
FreeLibrary.KERNEL32(00000000,?,?,00B5D86F,?,?,00B5D8F0,?,?,?), ref: 00B5D830

Strings

CorExitProcess, xrefs: 00B5D805
mscoree.dll, xrefs: 00B5D7F3

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: e204057b25ccede28c0d01d596a9fbf6864c332121d6dc6c28b41b542c9bf0ae
Instruction ID: 5ff5eedac4cdc790a6f438bff6635fafa4b030e48f6cd73312b14de689b38848
Opcode Fuzzy Hash: e204057b25ccede28c0d01d596a9fbf6864c332121d6dc6c28b41b542c9bf0ae
Instruction Fuzzy Hash: C9F03031A50619FBDB31AF91DD1ABDE7AB8EB45796F1401E0F805A21B0DF748E08DB90

Function 00B6C52C Relevance: 7.5, APIs: 5, Instructions: 40COMMONLIBRARYCODE

Download Yara Rule

APIs

_free.LIBCMT ref: 00B6C544

Part of subcall function 00B68957: HeapFree.KERNEL32(00000000,00000000,?,00B5F7BB), ref: 00B6896D
Part of subcall function 00B68957: GetLastError.KERNEL32(?,?,00B5F7BB), ref: 00B6897F

_free.LIBCMT ref: 00B6C556
_free.LIBCMT ref: 00B6C568
_free.LIBCMT ref: 00B6C57A
_free.LIBCMT ref: 00B6C58C

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 19a43eece7fd1419bc171cf8d7331a1ee1339b175b55ae06e693bff28f40a9fa
Instruction ID: 796bbef61fea9cdddfb50b49e176a4bc627e8711dc1d4f3ab8c751e2fec4ea69
Opcode Fuzzy Hash: 19a43eece7fd1419bc171cf8d7331a1ee1339b175b55ae06e693bff28f40a9fa
Instruction Fuzzy Hash: F7F0FF32505250B78A20EB58FD8BC2A7BE9FA147107545D8AF09ED7591CF38FD808A5A

Function 00B67DF9 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,00000000,00000000,?,?,?,?,?,?,00B67CFF,?,?,00000000,00000000,00000000,?), ref: 00B67E1E
CatchIt.LIBVCRUNTIME ref: 00B67F04

Strings

RCC, xrefs: 00B67E38
MOC, xrefs: 00B67E30

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: CatchEncodePointer
String ID: MOC$RCC
API String ID: 1435073870-2084237596
Opcode ID: edd7e6d3593c3b0e790732787fd85e9aa9383e2813a4d80dc8b4ad7aefe5d6a8
Instruction ID: e8b2fa80e1e5d812b2c081b758b03c28013a6ed977c170727704cc3fb81d0950
Opcode Fuzzy Hash: edd7e6d3593c3b0e790732787fd85e9aa9383e2813a4d80dc8b4ad7aefe5d6a8
Instruction Fuzzy Hash: B0414771944249AFCF16DF98C881EAE7BF5FF48308F184099F90466261DB39A950DB50

Function 00B7336F Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,00000000,00000800,?,00B7340B,?,?,00000000,?,?,?,00B732C9,00000002,FlsGetValue,00B7D2C4,00B7D2CC), ref: 00B7337C
GetLastError.KERNEL32(?,00B7340B,?,?,00000000,?,?,?,00B732C9,00000002,FlsGetValue,00B7D2C4,00B7D2CC,?,?,00B6712E), ref: 00B73386
LoadLibraryExW.KERNEL32(?,00000000,00000000), ref: 00B733AE

Strings

api-ms-, xrefs: 00B73393

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 29516263d2fb01a1234fdd991d1535dd319b383d10aa9b13cdb8c47fefc11246
Instruction ID: e4a855fb44707132265be98e8ce6b7e0e99dcd7313ee8d58206126d211e3401d
Opcode Fuzzy Hash: 29516263d2fb01a1234fdd991d1535dd319b383d10aa9b13cdb8c47fefc11246
Instruction Fuzzy Hash: 71E09230644206B7DB211F61EC06B593EE5EB10F90F148060FD0DE94B2EF659954D689

Function 00B676FB Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00B677C2
___AdjustPointer.LIBCMT ref: 00B677E5
___AdjustPointer.LIBCMT ref: 00B67881

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 6c74321ec5adec26f1c0f067e13684e6b7e5d39f65cf0bbd2c45f74114bb34c9
Instruction ID: 45f597dc15892c7476feda427f1675d8236b47e6574fb51302b58c841630d87d
Opcode Fuzzy Hash: 6c74321ec5adec26f1c0f067e13684e6b7e5d39f65cf0bbd2c45f74114bb34c9
Instruction Fuzzy Hash: CE51D171A892029FDB299F96D885B7A73E5FF04318F2440EDEC0547690EF39AD40CB90

Function 00B68CAF Relevance: 6.1, APIs: 4, Instructions: 69COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,00B5F8FC,00B6897D,?,?,00B5F7BB), ref: 00B68CB4
_free.LIBCMT ref: 00B68D11
_free.LIBCMT ref: 00B68D47
SetLastError.KERNEL32(00000000,00000005,000000FF,?,?,00B5F8FC,00B6897D,?,?,00B5F7BB), ref: 00B68D52

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: ErrorLast_free
String ID:
API String ID: 2283115069-0
Opcode ID: 9c4d32564273bec81c18f14363df6215b57ab1844786e654985cd2620e3395b9
Instruction ID: 452690b41f11bee6f4f414f622eacf7e17e6667cad3b0d6d67c892acb1c86e2c
Opcode Fuzzy Hash: 9c4d32564273bec81c18f14363df6215b57ab1844786e654985cd2620e3395b9
Instruction Fuzzy Hash: 2711A5B22015017BDA1126B99CD5D2B32DEEBD17B4B2503BDF528935F2DE398C019235

Function 00B7658D Relevance: 6.0, APIs: 4, Instructions: 29COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(?,0DFDFCAF,00000000,00000000,?,?,00B75D85,?,00000001,?,?,?,00B71477,?,?,?), ref: 00B765A4
GetLastError.KERNEL32(?,00B75D85,?,00000001,?,?,?,00B71477,?,?,?,?,?,?,00B70F0B,?), ref: 00B765B0

Part of subcall function 00B76601: CloseHandle.KERNEL32(FFFFFFFE,00B765C0,?,00B75D85,?,00000001,?,?,?,00B71477,?,?,?,?,?), ref: 00B76611

___initconout.LIBCMT ref: 00B765C0

Part of subcall function 00B765E2: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,00B7657E,00B75D72,?,?,00B71477,?,?,?,?), ref: 00B765F5

WriteConsoleW.KERNEL32(?,0DFDFCAF,00000000,00000000,?,00B75D85,?,00000001,?,?,?,00B71477,?,?,?,?), ref: 00B765D5

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 8c0a4c77a4be8ba1f394b1577da98921cc7c6dcc49cbc5fca13148f971a3ad73
Instruction ID: b92f72114f47817e7d4883a436b3f2172cc6d0c0b16b3a3c9ccb84b85a28d3e9
Opcode Fuzzy Hash: 8c0a4c77a4be8ba1f394b1577da98921cc7c6dcc49cbc5fca13148f971a3ad73
Instruction Fuzzy Hash: E9F01C36401629BBCF221FE1DC04D893F66FB5A3A0B418150FA1896170DF32CC60EB90

Function 00B67664 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

___except_validate_context_record.LIBVCRUNTIME ref: 00B678DB

Strings

csm, xrefs: 00B6796E
csm, xrefs: 00B678FD

Memory Dump Source

Source File: 0000000D.00000002.3232391789.0000000000A01000.00000020.00000001.01000000.00000008.sdmp, Offset: 00A00000, based on PE: true

Associated: 0000000D.00000002.3232368564.0000000000A00000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232560790.0000000000B78000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232592212.0000000000B8A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B8D000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232613073.0000000000B97000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000B9B000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000D.00000002.3232666774.0000000000C17000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_a00000_install86.jbxd

Similarity

API ID: ___except_validate_context_record
String ID: csm$csm
API String ID: 3493665558-3733052814
Opcode ID: 145e7b46fc70a19d37b739aefdbe1fed8e92c731823964f1c9feb49f469033b4
Instruction ID: 003df6d3ece753a6e69ad54c051c69e5f859df27f3fd6b56e24b791e8b1f9808
Opcode Fuzzy Hash: 145e7b46fc70a19d37b739aefdbe1fed8e92c731823964f1c9feb49f469033b4
Instruction Fuzzy Hash: 3A31F932498209BBCF229F54CC4496A7BE6FF0971CB1446D9FD444A2A1CB3ACC61DF91

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the binaries used by services. Adversaries may use flaws in the permissions of Windows services to replace the binary that is executed upon service start. These service processes may automatically execute specific binaries as part of their functionality or to perform other actions. If the permissions on the file system directory containing a target binary, or permissions on the binary itself are improperly set, then the target binary may be overwritten with another binary using user-level permissions and executed by the original process. If the original process and thread are running under a higher permissions level, then the replaced binary will also execute under higher-level permissions, which could include SYSTEM.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Process: Process Creation, Service: Service Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 56ff7c.msi

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\0859c576-fcdf-4037-9e1f-0f994e41ee87.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\0c829e4b-54c7-419b-b4dd-9deaa087e0ef.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\0dbda9d5-2a07-422c-afcf-2c0f1f561cea.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\25964c73-37ee-4312-9aea-eaca39770ae3.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\32370cff-ab55-4f86-9039-5618ecbb52ce.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\3248c6fd-b02e-445c-8bc7-08361c211c64.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\33028ba0-20bc-487d-a142-cd2933b12f2d.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\357c1d78-d170-44cf-b942-e587685f01e1.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\6976db17-0c5c-48a0-bf0f-b8a0314293fb.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\9e5bde85-cbeb-403f-a76c-887e0a6e87be.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\7a1d7f09-4ae7-4696-83b7-47141e94ecda.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma (copy)

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-675ACB6C-101C.pma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-675ACB6D-E04.pma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-675ACB80-1FD8.pma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-675ACB88-20C4.pma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma

Windows Analysis Report
56ff7c.msi