Edit tour

Windows Analysis Report
33abb.msi

Overview

General Information

Sample name:	33abb.msi
Analysis ID:	1573632
MD5:	0d4245b805741f0d90e4a964971b0527
SHA1:	0828f6cbe30fc369eb62d9e992162870767489f5
SHA256:	b6c37e3d6c1e61c71f42e005774cae3f722a3273a91d6e29d27e9f76ab4ab934
Tags:	aikmouciiqgecoqi-xyzmsiuser-JAMESWT_MHT
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Found API chain indicative of debugger detection

Performs DNS queries to domains with low reputation

Tries to resolve many domain names, but no domain seems valid

Checks for available system drives (often done to infect USB drives)

Connects to many different domains

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Detected non-DNS traffic on DNS port

Detected potential crypto function

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Executes massive DNS lookups (> 100)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

IP address seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Suspicious MsiExec Embedding Parent

Uses a known web browser user agent for HTTP communication

Uses cacls to modify the permissions of files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

msiexec.exe (PID: 3560 cmdline: "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\33abb.msi" MD5: E5DA170027542E25EDE42FC54C929077)

msiexec.exe (PID: 5060 cmdline: C:\Windows\system32\msiexec.exe /V MD5: E5DA170027542E25EDE42FC54C929077)

msiexec.exe (PID: 3608 cmdline: C:\Windows\syswow64\MsiExec.exe -Embedding A391672FD02B667B0E8D14AD63D14E05 MD5: 9D09DC1EDA745A5F87553048E57620CF)

icacls.exe (PID: 2380 cmdline: "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\." /SETINTEGRITYLEVEL (CI)(OI)HIGH MD5: 2E49585E4E08565F52090B144062F97E)

conhost.exe (PID: 5160 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

expand.exe (PID: 1124 cmdline: "C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files MD5: 544B0DBFF3F393BCE8BB9D815F532D51)

conhost.exe (PID: 5900 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 6516 cmdline: "C:\Windows\System32\cmd.exe" /c start msedge https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 6476 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

msedge.exe (PID: 7164 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 1632 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2100,i,3809971658774042701,17388671140319593064,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

setup.exe (PID: 2412 cmdline: "C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe" /VERYSILENT /VERYSILENT MD5: C474153CAFE60A41858493469CB85EDE)

msedge.exe (PID: 572 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 7252 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2344 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 5736 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6916 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 3480 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=7052 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 3716 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-GB --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=7204 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:6 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8092 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=4644 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

cleanup

Sigma Signatures

Sigma detected: Suspicious MsiExec Embedding Parent

Source: Process started

Author: frack113: Data: Command: "C:\Windows\System32\cmd.exe" /c start msedge https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf, CommandLine: "C:\Windows\System32\cmd.exe" /c start msedge https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\cmd.exe, NewProcessName: C:\Windows\SysWOW64\cmd.exe, OriginalFileName: C:\Windows\SysWOW64\cmd.exe, ParentCommandLine: C:\Windows\syswow64\MsiExec.exe -Embedding A391672FD02B667B0E8D14AD63D14E05, ParentImage: C:\Windows\SysWOW64\msiexec.exe, ParentProcessId: 3608, ParentProcessName: msiexec.exe, ProcessCommandLine: "C:\Windows\System32\cmd.exe" /c start msedge https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf, ProcessId: 6516, ProcessName: cmd.exe

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\d2f91cf38daf49049d9c7808958ddcf4$dpx$.tmp\40d2317c6f0c5d45939b296e37c375db.tmp	ReversingLabs: Detection: 26%
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe (copy)	ReversingLabs: Detection: 26%

Multi AV Scanner detection for submitted file

Source: 33abb.msi

ReversingLabs: Detection: 21%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.2% probability

Source:

Binary string: C:\ss2\Projects\MsiWrapper\MsiCustomActions\Release\MsiCustomActions.pdb source: 33abb.msi, 4ce31b.msi.1.dr, MSIE443.tmp.1.dr

Source: C:\Windows\System32\msiexec.exe	File opened: z:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: x:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: v:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: t:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: r:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: p:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: n:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: l:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: j:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: h:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: f:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: b:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: y:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: w:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: u:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: s:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: q:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: o:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: m:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: k:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: i:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: g:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: e:	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	File opened: c:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: a:	Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\	Jump to behavior

Networking

Performs DNS queries to domains with low reputation

Source:	DNS query: aikmouciiqgecoqi.xyz
Source:	DNS query: koecgqggegimaeya.xyz
Source:	DNS query: aawqwccomcemcysm.xyz
Source:	DNS query: kcyakwisycecaqgw.xyz
Source:	DNS query: uogksceymossmmqc.xyz
Source:	DNS query: qgmyeeguweaukuke.xyz
Source:	DNS query: mywaqkeaawisisky.xyz
Source:	DNS query: yqqsggacauiiugka.xyz
Source:	DNS query: equmqmqwuuuioawa.xyz
Source:	DNS query: wmoamsauiwauoosg.xyz
Source:	DNS query: oqsakkimkesccikc.xyz
Source:	DNS query: mgiwaegaqyyaakwy.xyz
Source:	DNS query: ucmioacycscyeouk.xyz
Source:	DNS query: qumaseqmggyaiauq.xyz
Source:	DNS query: uccyyemqaiiksuwm.xyz
Source:	DNS query: sesyieaiesegeaow.xyz
Source:	DNS query: kccmicaswqmswwak.xyz
Source:	DNS query: mssaogwocegysoow.xyz
Source:	DNS query: wssaqmakumewmaes.xyz
Source:	DNS query: cmukociggiqcouio.xyz
Source:	DNS query: skyqsyyymyacyayc.xyz
Source:	DNS query: uoigsiqmemcscosu.xyz
Source:	DNS query: kuywuskkgqsigqqs.xyz
Source:	DNS query: auayomwkewcomwas.xyz
Source:	DNS query: iyaikmkkowcqemsi.xyz
Source:	DNS query: ggicikyqcaiyguee.xyz
Source:	DNS query: oqyaoykomyoygics.xyz
Source:	DNS query: eqakguiwiqacqiwg.xyz
Source:	DNS query: wgcaouuqqqwucogy.xyz
Source:	DNS query: ewacuagosgqmuocm.xyz
Source:	DNS query: wgqyouayikuyuqmk.xyz
Source:	DNS query: owaaygsacguucaye.xyz
Source:	DNS query: uwgicagyykoommga.xyz
Source:	DNS query: uiggameqqycugsqw.xyz
Source:	DNS query: goguooqkgysueime.xyz
Source:	DNS query: keosqeosukqcooco.xyz
Source:	DNS query: maoeeogmuauywsyu.xyz
Source:	DNS query: ismqaewykmoiguki.xyz
Source:	DNS query: wucwykasawokemaw.xyz
Source:	DNS query: ukmcqucewskcqygg.xyz
Source:	DNS query: qqqmeagkkosgcayo.xyz
Source:	DNS query: ysawassgkwqygmmq.xyz
Source:	DNS query: osaeyoiqoqawauga.xyz
Source:	DNS query: iagisciiyoemgwaa.xyz
Source:	DNS query: ymysimqoykwqeqiq.xyz
Source:	DNS query: ymmcwogyimsuqmcc.xyz
Source:	DNS query: osmoygyawqmmimkq.xyz
Source:	DNS query: immyecuqwkiyscys.xyz
Source:	DNS query: omsqkuiwcwoegooq.xyz
Source:	DNS query: ukaiiiyqoooycyqm.xyz
Source:	DNS query: isemauqkwwiumyky.xyz
Source:	DNS query: keguuyioweymiaws.xyz
Source:	DNS query: kwaywmaequkqccai.xyz
Source:	DNS query: yyimcoiwgckeakcm.xyz
Source:	DNS query: ekcwemuekgqsimae.xyz
Source:	DNS query: imigkomgmqgmakqk.xyz
Source:	DNS query: omasqkwqyskcagwi.xyz
Source:	DNS query: awyomscgweuqmgaw.xyz
Source:	DNS query: eyoyssauceguqwmk.xyz
Source:	DNS query: gwwcqeykmseicgaw.xyz
Source:	DNS query: qwywqgsmgaoiwsga.xyz
Source:	DNS query: ososwckwcqmmwqcy.xyz
Source:	DNS query: osaymwoggqqycmse.xyz
Source:	DNS query: oyewqwkusieeoqey.xyz
Source:	DNS query: ommwaqgaemsmcqwc.xyz
Source:	DNS query: cauewwukyywyqiei.xyz
Source:	DNS query: goeykqccmemkswom.xyz
Source:	DNS query: aksuakswwkiimamq.xyz
Source:	DNS query: isaeicumkcuwqmqq.xyz
Source:	DNS query: qiswokuokugiooky.xyz
Source:	DNS query: qiswcssocuqsaqkq.xyz
Source:	DNS query: qcyksokwumicscaa.xyz
Source:	DNS query: esiaisyasoaoqwki.xyz
Source:	DNS query: giqukkwwcwgqcisg.xyz
Source:	DNS query: ymqaaskiwomkucuy.xyz
Source:	DNS query: akueuaicusaoieiy.xyz
Source:	DNS query: sauygqecsusickcu.xyz
Source:	DNS query: kkwkgmcoawgaoiwg.xyz
Source:	DNS query: saumycuogqsqykes.xyz
Source:	DNS query: ukyokaigmmkumgoa.xyz
Source:	DNS query: eswweuycwwiiykwo.xyz
Source:	DNS query: uksgyqiqaaiaiesi.xyz
Source:	DNS query: smckcsaioceiyasu.xyz
Source:	DNS query: esimsqgcwwwmyoqc.xyz
Source:	DNS query: maiyuocqqiqiiskw.xyz
Source:	DNS query: smaaowemwiwggocu.xyz
Source:	DNS query: kwuuwgemogmuomwq.xyz
Source:	DNS query: ukicsmiwggcwksam.xyz
Source:	DNS query: gwamoggwyegsseao.xyz
Source:	DNS query: immcqsiceooqyaay.xyz
Source:	DNS query: kkcqgowgkcoyokcu.xyz
Source:	DNS query: kecgikusmakuksma.xyz
Source:	DNS query: ymuiggyusggsymoi.xyz
Source:	DNS query: uecouukwkuceyuwg.xyz
Source:	DNS query: eyoaceoookqskqmy.xyz
Source:	DNS query: awwomgcseeqwkkom.xyz
Source:	DNS query: keykoekseemyiewq.xyz
Source:	DNS query: ysiwwoeeaaskykaw.xyz
Source:	DNS query: kwmcuwccqmuecgea.xyz
Source:	DNS query: gwyooeiscmwguqms.xyz
Source:	DNS query: wuokiysmiucoucak.xyz
Source:	DNS query: wuuiumemmigyyauq.xyz
Source:	DNS query: acwomuuukiomgqkm.xyz
Source:	DNS query: muwqwgaaymomgwmi.xyz
Source:	DNS query: omgcoecwsqiuqyug.xyz
Source:	DNS query: kqmsgskwgemyueya.xyz
Source:	DNS query: eyiyueewuaqmmwcm.xyz
Source:	DNS query: gwoyamckoqoaauoq.xyz
Source:	DNS query: qwqsoyoqkymakowm.xyz
Source:	DNS query: gcmiymmqgwuquokm.xyz
Source:	DNS query: ymseciekayuweoww.xyz
Source:	DNS query: oyocwswugeiqqyoo.xyz
Source:	DNS query: omgooecquoweeomo.xyz
Source:	DNS query: imgeoyougkmmeuec.xyz
Source:	DNS query: smoswyoekkccyuga.xyz
Source:	DNS query: suwkomiqcykeyako.xyz
Source:	DNS query: smwsugycuuckemue.xyz
Source:	DNS query: qigcqiaomwieqwka.xyz
Source:	DNS query: oekcyqqggaegsesm.xyz
Source:	DNS query: qcoysaaooaiccqyu.xyz
Source:	DNS query: mismuqiygyeysaoo.xyz
Source:	DNS query: wockoyekyageakcg.xyz
Source:	DNS query: ososokqeakgguwsq.xyz
Source:	DNS query: wcgqccqcugomywua.xyz
Source:	DNS query: aqaqgemescmwsqks.xyz
Source:	DNS query: aqiwocaywcswuwsq.xyz
Source:	DNS query: aqgmgoqcoqqkguyk.xyz
Source:	DNS query: oywgqkusocouysua.xyz
Source:	DNS query: uyygagweoagcuqky.xyz
Source:	DNS query: muiccguyaeaqwweg.xyz
Source:	DNS query: qiqueqokwqqgwwci.xyz
Source:	DNS query: uygmgoymcwcgkios.xyz
Source:	DNS query: qiyggmguowygeooc.xyz
Source:	DNS query: acacoiqgoimayqwm.xyz
Source:	DNS query: smisyqewaummmwoc.xyz
Source:	DNS query: mumuqocoisaucwmq.xyz
Source:	DNS query: qqoawmqqwqcusmee.xyz
Source:	DNS query: qcygacuamqqugcck.xyz
Source:	DNS query: kkiigoymgkmoggoq.xyz
Source:	DNS query: qqmicqemgcgieoau.xyz
Source:	DNS query: sagymwuwgeucsmac.xyz
Source:	DNS query: igmqooiwioymwkcm.xyz
Source:	DNS query: osyqameakgkceeog.xyz
Source:	DNS query: sgigamoeiwksoecq.xyz
Source:	DNS query: keckssemmeoqieqe.xyz
Source:	DNS query: caysswwugsmkeksw.xyz
Source:	DNS query: cgiamwsqgcmqgqse.xyz
Source:	DNS query: uyeqwcuyimescesu.xyz
Source:	DNS query: ekiwqiyewuiqoemo.xyz
Source:	DNS query: oeakuqueisysswcg.xyz
Source:	DNS query: acemcwecgiqcukys.xyz
Source:	DNS query: qcwaiaiqiwcakawa.xyz
Source:	DNS query: esyiocqieemagwmo.xyz
Source:	DNS query: kqsakygykwusqams.xyz
Source:	DNS query: ymygkkggyigeqcqe.xyz
Source:	DNS query: qqqkagyoymmosuyo.xyz
Source:	DNS query: moiimkscmiswaesw.xyz
Source:	DNS query: igkiociagqsacmwa.xyz
Source:	DNS query: ymugwyokyyccykmw.xyz
Source:	DNS query: gieksqwccmmqkemm.xyz
Source:	DNS query: iaueigwgocakgsku.xyz
Source:	DNS query: sgsasqgwayeckgoy.xyz
Source:	DNS query: kwogawueykiiumao.xyz
Source:	DNS query: iagmkeayqmuowswy.xyz
Source:	DNS query: yyyagyakeciucagk.xyz
Source:	DNS query: isukyiwyscosaaqc.xyz
Source:	DNS query: goicqsmskkygkkka.xyz
Source:	DNS query: awacwkqgsoomimye.xyz
Source:	DNS query: iaawaweqwceogamg.xyz
Source:	DNS query: kqueagsoikuyocca.xyz
Source:	DNS query: momoqikcaksewaua.xyz
Source:	DNS query: suagiqkqmkgysmiw.xyz
Source:	DNS query: gcwequgwyimwymsa.xyz
Source:	DNS query: igywsgwooemqiuss.xyz
Source:	DNS query: wikiagqsmeeaeegy.xyz
Source:	DNS query: eeoeukoqgiwsumsu.xyz
Source:	DNS query: ygooiessycewaocg.xyz
Source:	DNS query: qcqgssmagywqcgws.xyz
Source:	DNS query: goiikukwyyauemqc.xyz
Source:	DNS query: comuwmkimocayeeu.xyz
Source:	DNS query: isgasoomksiwqcmg.xyz
Source:	DNS query: qigismmgwsiseyuu.xyz
Source:	DNS query: wuqggcwmoscwykwg.xyz
Source:	DNS query: qceawaaswmsuekmu.xyz
Source:	DNS query: ygucsucmagwqsqcu.xyz
Source:	DNS query: giuccqyqokookyue.xyz
Source:	DNS query: gceesusqmuockkgw.xyz
Source:	DNS query: ygesoycecmkuwayg.xyz
Source:	DNS query: sasqgsyksiccuuws.xyz
Source:	DNS query: qwggykgwkqoceiuo.xyz
Source:	DNS query: wiguisuayimaukgu.xyz
Source:	DNS query: qcwcgegyyieaoqca.xyz
Source:	DNS query: gwcyyawigmwceaqi.xyz
Source:	DNS query: mueuwcqsioowsmce.xyz
Source:	DNS query: qiewcykmuuacuoyk.xyz
Source:	DNS query: coayaokeissieqcc.xyz
Source:	DNS query: oeooiqokqsqcsaig.xyz
Source:	DNS query: masegmsiqgamiugm.xyz
Source:	DNS query: smwywssyyaciqkae.xyz
Source:	DNS query: aweqoooqomueeiwi.xyz
Source:	DNS query: akasikewaomyiwqk.xyz
Source:	DNS query: oyyamqygcecqocmq.xyz
Source:	DNS query: qwikoqqgiayyuakq.xyz
Source:	DNS query: miqcugomwgmygyoq.xyz
Source:	DNS query: wiccyamsgmuqoeoy.xyz
Source:	DNS query: ymeiqyyqqyaaygie.xyz
Source:	DNS query: wiomcwmascsigags.xyz
Source:	DNS query: awgyuqqswicwkqcs.xyz
Source:	DNS query: iacisiamimiiqyeo.xyz
Source:	DNS query: wogawoqysgiockwa.xyz
Source:	DNS query: mayykkuyeuiggyws.xyz
Source:	DNS query: cosaygigqegeyewi.xyz
Source:	DNS query: ekqyosgcumkcecmo.xyz
Source:	DNS query: qimmkmaumumswocw.xyz
Source:	DNS query: acqaagqgmsmeouce.xyz
Source:	DNS query: awasockiaymagmci.xyz
Source:	DNS query: akuyqkmomwqyiyow.xyz
Source:	DNS query: caceukeeygaaqaec.xyz
Source:	DNS query: qwcaikouwwekssco.xyz
Source:	DNS query: qqioykeogcwkowgq.xyz
Source:	DNS query: igeqissugeuswaus.xyz
Source:	DNS query: osoawyeyassgycgy.xyz
Source:	DNS query: cuaumuqcoeegomsq.xyz
Source:	DNS query: oyogquqkmyqwwkuq.xyz
Source:	DNS query: gwyougsgeaaoiumg.xyz
Source:	DNS query: ukeoemaaimqyuais.xyz
Source:	DNS query: oewuwcsmaacckewa.xyz
Source:	DNS query: esykokiigsgwcwsa.xyz
Source:	DNS query: ekgqymkkqiwogqsy.xyz
Source:	DNS query: wueossewygqoakoq.xyz
Source:	DNS query: isceiesauogasmoo.xyz
Source:	DNS query: giscmywoiaqmqcmw.xyz
Source:	DNS query: uyqweoyukcewugsu.xyz
Source:	DNS query: imuscegymggagewg.xyz
Source:	DNS query: wgesgakysuqaewik.xyz
Source:	DNS query: uwoyyqgiwowysqou.xyz
Source:	DNS query: syaouwwyoaemeekm.xyz
Source:	DNS query: aoscugususamokuy.xyz
Source:	DNS query: qucyaygweeasqeoy.xyz
Source:	DNS query: uiwwamyuymycooey.xyz
Source:	DNS query: iygukwyuqwiuoqmi.xyz
Source:	DNS query: koaeaguekwcaousw.xyz
Source:	DNS query: skssioqkemoiieaa.xyz
Source:	DNS query: yewomygmueegmoqi.xyz
Source:	DNS query: kuyoukwwacqkcoyo.xyz
Source:	DNS query: gmcqgmkyguwkskyg.xyz
Source:	DNS query: mygiqcqokowwmgqq.xyz
Source:	DNS query: cymogqmasaiiwmww.xyz
Source:	DNS query: iykumkamcykgicyi.xyz
Source:	DNS query: cyemcqwkasuimkgs.xyz
Source:	DNS query: ieqeeiggkuqcomyo.xyz
Source:	DNS query: ssmkyomikukusksu.xyz
Source:	DNS query: kimakioiwmawksiw.xyz
Source:	DNS query: qumssmeysccykkyo.xyz
Source:	DNS query: ykuoaucocogcwoky.xyz
Source:	DNS query: semyssioekmosauo.xyz
Source:	DNS query: aiiqyyikowqaygwy.xyz
Source:	DNS query: kouumoyqiuckkcau.xyz
Source:	DNS query: qgwkkkyicoqmooqu.xyz
Source:	DNS query: uwwcocucusmeguaw.xyz
Source:	DNS query: cekggiciueyeyoku.xyz
Source:	DNS query: iqqeoamqwiuiyuua.xyz
Source:	DNS query: uokqmokseqqakiui.xyz
Source:	DNS query: cyqqgacqkowwkqqe.xyz
Source:	DNS query: cmqqeimyycgqwsgg.xyz
Source:	DNS query: wmgeoqqiwqcmimwu.xyz
Source:	DNS query: quyckaioggawuois.xyz
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	DNS query: eqciawooemoueyqu.xyz
Source:	DNS query: oqoaumkywacmuwwm.xyz
Source:	DNS query: ewueyekksqksycww.xyz
Source:	DNS query: csmasucykosuwouy.xyz
Source:	DNS query: seeogeqwsqmsoaqe.xyz
Source:	DNS query: gusmkkaiomeeqaiy.xyz
Source:	DNS query: msyecoiqeyqeiquy.xyz
Source:	DNS query: skawoueawceoywsy.xyz
Source:	DNS query: iyuaqococuqcsgii.xyz
Source:	DNS query: kuyaasckcgacyesi.xyz
Source:	DNS query: aaeqiiecqqumcgky.xyz
Source:	DNS query: aawiysageawcoyok.xyz
Source:	DNS query: yqysoaosqewciiww.xyz
Source:	DNS query: yessywkwcwmyewqe.xyz
Source:	DNS query: aueiqscgeicewaoo.xyz
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	DNS query: uccsgcekiwcyucou.xyz
Source:	DNS query: aiumyocycyyikiwc.xyz
Source:	DNS query: aoqayemwgmsyuimi.xyz
Source:	DNS query: mmiowgeswucumqae.xyz
Source:	DNS query: mmiugosumuqmuqoc.xyz
Source:	DNS query: ecqisawmymscauow.xyz
Source:	DNS query: iyoqqeicqoquiqka.xyz
Source:	DNS query: ecoqwiswmwqokmay.xyz
Source:	DNS query: ceckmwoyqkwgeoqg.xyz
Source:	DNS query: kcoiygiwuyqyaoku.xyz
Source:	DNS query: aaeyckqsgmiqsgew.xyz
Source:	DNS query: qgaiosyouwwkgsmm.xyz
Source:	DNS query: ocqseueommkkqcgs.xyz
Source:	DNS query: owmesaosmycoeceq.xyz
Source:	DNS query: qokauaicweuwscac.xyz
Source:	DNS query: sewmmwqeyauowwwo.xyz
Source:	DNS query: mmgowiccqoeomagq.xyz
Source:	DNS query: kcwiywyygywkkysk.xyz
Source:	DNS query: syiysgiqgqggqkoc.xyz
Source:	DNS query: ykuasckuceswseig.xyz
Source:	DNS query: quugmiumsieaiyys.xyz
Source:	DNS query: ikqywgcqaggogqsa.xyz
Source:	DNS query: eqyamamqwsseyoig.xyz
Source:	DNS query: seqkawokggwucsui.xyz
Source:	DNS query: gmqeqkcqackwkgao.xyz
Source:	DNS query: guowewgekuoqacyy.xyz
Source:	DNS query: aaokyscqeecowaci.xyz
Source:	DNS query: ywywwwgwekicgico.xyz
Source:	DNS query: wsisaoaauqwmuomg.xyz
Source:	DNS query: koouumcuucaeakye.xyz
Source:	DNS query: okccisioeycusekg.xyz
Source:	DNS query: cymymsciyaiacwgw.xyz
Source:	DNS query: aoyeoimcuuqakckw.xyz
Source:	DNS query: qoaweokuqggaymks.xyz
Source:	DNS query: ewuyacewswkoueqw.xyz
Source:	DNS query: kiuymkmaomciimcc.xyz
Source:	DNS query: oqaiyaoqwyeswaiy.xyz
Source:	DNS query: koyokggaqsagggym.xyz
Source:	DNS query: cmsuagygagqceocm.xyz
Source:	DNS query: uisgoqaoksgqsqyg.xyz
Source:	DNS query: ocgcqsagaakgkcma.xyz
Source:	DNS query: okgigkmiieweagia.xyz
Source:	DNS query: skiwkmaaeeiqqgee.xyz
Source:	DNS query: aagokgyaswscyaeu.xyz
Source:	DNS query: gmciuwiycsqycggy.xyz
Source:	DNS query: ggeymcaisciikucq.xyz
Source:	DNS query: uwskygguegqkasme.xyz
Source:	DNS query: cyumiiokkswcoeag.xyz
Source:	DNS query: oqisqmesaeoegmyc.xyz
Source:	DNS query: wagasowawsoyycom.xyz
Source:	DNS query: gaguweiwsgouugqe.xyz
Source:	DNS query: syyyweaywowycsia.xyz
Source:	DNS query: mmoycwqiuykiusuy.xyz
Source:	DNS query: ikoycakqiuuascco.xyz
Source:	DNS query: cmuqekokuyuqgige.xyz
Source:	DNS query: cywoimwmsoamqoem.xyz
Source:	DNS query: skyiqyaeoykwcgiw.xyz
Source:	DNS query: ssiooaeoaocuyaow.xyz
Source:	DNS query: ywmgykycywqqewqw.xyz
Source:	DNS query: uosaescwmkiyscay.xyz
Source:	DNS query: eigywisgeoiskekg.xyz
Source:	DNS query: msqsoggkkoiokugk.xyz
Source:	DNS query: cmaaciimeememwao.xyz
Source:	DNS query: uigkauqkumywguig.xyz
Source:	DNS query: wggygeoisauouuoc.xyz
Source:	DNS query: okoykokgycygucya.xyz
Source:	DNS query: ewaoowewmsomgaiw.xyz
Source:	DNS query: ieiegkokewkqmkwe.xyz
Source:	DNS query: gakesieaaickekuo.xyz
Source:	DNS query: ecasigiwguqgguyw.xyz
Source:	DNS query: okwswuciummewsui.xyz
Source:	DNS query: ggaqiymaekkywusy.xyz
Source:	DNS query: ocicimqkgucacyim.xyz
Source:	DNS query: qoyisgoayskswigs.xyz
Source:	DNS query: wsywmuwgsogemomw.xyz
Source:	DNS query: skaeggkkcmoqoywy.xyz
Source:	DNS query: uowicsywgqmgagyc.xyz
Source:	DNS query: yqyqgowkwqiggewq.xyz
Source:	DNS query: aikmggymywuooyqc.xyz
Source:	DNS query: semgkyogsqqwgsmy.xyz
Source:	DNS query: ucmwywoqciswaguc.xyz
Source:	DNS query: qowoagcmkkgqcswk.xyz
Source:	DNS query: mmgusimiaqiweyas.xyz
Source:	DNS query: wgssaogcsscmkswu.xyz
Source:	DNS query: aoeewogkicikusoc.xyz
Source:	DNS query: ikggquqsigykqamc.xyz
Source:	DNS query: waaqccyeaeywuoqu.xyz
Source:	DNS query: ecgiqiiieksaooyc.xyz
Source:	DNS query: iqcogqmwegaqewuu.xyz
Source:	DNS query: aiusammkykucyyso.xyz
Source:	DNS query: qgkswogkcsaeegki.xyz
Source:	DNS query: ywcwqgmikmycwoeu.xyz
Source:	DNS query: eiqogaaggeswoges.xyz
Source:	DNS query: sekqikccsokicgye.xyz
Source:	DNS query: ssqggwwkkaayqkgk.xyz
Source:	DNS query: seiiycgosccmaykm.xyz
Source:	DNS query: aosagqwwquakwceq.xyz
Source:	DNS query: qoiigkweqeiwycuo.xyz
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	DNS query: oqycmugocqsyuaae.xyz
Source:	DNS query: ewwgmiicuyowacum.xyz
Source:	DNS query: mmmoiaecqyuquoya.xyz
Source:	DNS query: auscackumyccuyuk.xyz
Source:	DNS query: okgquokwaassqyyi.xyz
Source:	DNS query: uikciyeoaumwomqo.xyz
Source:	DNS query: gmoguamscceqkamk.xyz
Source:	DNS query: eqgoeemewamgucie.xyz
Source:	DNS query: uoiyoewsiosismow.xyz
Source:	DNS query: cekeeosckoouciwe.xyz
Source:	DNS query: mycgaaaymgowwicw.xyz
Source:	DNS query: ecgmcmqswickqcgi.xyz
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	DNS query: guwwqcuqmkmyyyyi.xyz
Source:	DNS query: cygmqaagqcuusmiq.xyz
Source:	DNS query: wggqoukyeokwgmoy.xyz
Source:	DNS query: okoccmmgswcmakcw.xyz
Source:	DNS query: iesmewkokeqooioo.xyz
Source:	DNS query: mmiccoqwqmssougs.xyz
Source:	DNS query: aoqymkkusuecomsw.xyz
Source:	DNS query: mskmgwkuiamqikce.xyz
Source:	DNS query: waucsgsqqsqkacog.xyz
Source:	DNS query: yqmqwygosgguwqsu.xyz
Source:	DNS query: wsicgeayaoueooom.xyz
Source:	DNS query: uwagocmgakuuykiu.xyz
Source:	DNS query: uowkoqwgqqeweume.xyz
Source:	DNS query: aakowgaeoeuekqyc.xyz
Source:	DNS query: skmmaauasaqywsas.xyz
Source:	DNS query: cygeomikesiegqsk.xyz
Source:	DNS query: okeyuasamkcqqeka.xyz
Source:	DNS query: qagaeyiqsgakegya.xyz
Source:	DNS query: ucoweesewcwiosgw.xyz
Source:	DNS query: sskawiyqmweogyqi.xyz
Source:	DNS query: wgwmaeskqmwumwkk.xyz
Source:	DNS query: quwocusecekwqkaw.xyz
Source:	DNS query: qukyogcwsgswyayo.xyz
Source:	DNS query: uiicikumwwsmaeem.xyz
Source:	DNS query: wagyuykcqmqyygkw.xyz
Source:	DNS query: uiaqcykmqwcwgmeg.xyz
Source:	DNS query: uoeukcckqmmsuwaa.xyz
Source:	DNS query: gugueqckkyuaeqqy.xyz
Source:	DNS query: skqsqowayeqesqqk.xyz
Source:	DNS query: kuscomokgkmaommk.xyz
Source:	DNS query: wsmyawqeqguacwas.xyz
Source:	DNS query: ikuqcsooiucogaww.xyz
Source:	DNS query: iysmukmcmacuomic.xyz
Source:	DNS query: ecqoqckqoaogcesy.xyz
Source:	DNS query: iesmkwqgmkmksgam.xyz
Source:	DNS query: guwououoomacaysu.xyz
Source:	DNS query: ucsoeygscgagowqw.xyz
Source:	DNS query: ykeuawieaequiyag.xyz
Source:	DNS query: cskowwiekeqaakki.xyz
Source:	DNS query: ecogmmaysgwkmwqm.xyz
Source:	DNS query: uwuomysuqkaykwuy.xyz
Source:	DNS query: ikqokmauuissyuce.xyz
Source:	DNS query: oeeoucsuawuqkqoi.xyz
Source:	DNS query: ygquuyekcusgsqqu.xyz
Source:	DNS query: uqsqcgouceqmigcg.xyz
Source:	DNS query: kwoesauawkouiecq.xyz
Source:	DNS query: yywgmuqggsagcmco.xyz
Source:	DNS query: imumkckaqyieaasa.xyz
Source:	DNS query: qqkoemcaocsomwow.xyz
Source:	DNS query: awsigwcaesugycuk.xyz
Source:	DNS query: kkqoqmmcwacsqiiu.xyz
Source:	DNS query: iamowksweuqyssis.xyz
Source:	DNS query: wicwocqcucgaimwe.xyz
Source:	DNS query: wiuyuwqiqkkogmoe.xyz
Source:	DNS query: ueyeeeegieoukoci.xyz
Source:	DNS query: caysuwggmqimaqwq.xyz
Source:	DNS query: kecsceaqksygeamy.xyz
Source:	DNS query: oyyagswauqyckoye.xyz
Source:	DNS query: aciemoayegyggwiq.xyz
Source:	DNS query: micemismikicsccc.xyz
Source:	DNS query: kwieueawsewqigey.xyz
Source:	DNS query: qiwmqykuesscgkac.xyz
Source:	DNS query: issaesuceymoyccq.xyz
Source:	DNS query: sgowwwmqgkeyukwq.xyz
Source:	DNS query: kewweiikaaysqugi.xyz
Source:	DNS query: oywkwakwykimigck.xyz
Source:	DNS query: aqkiemcseioemogk.xyz
Source:	DNS query: omoaicgooscecewq.xyz
Source:	DNS query: gcyciogqguooyici.xyz
Source:	DNS query: qwyikqowekcgesga.xyz
Source:	DNS query: moysoauykmieesas.xyz
Source:	DNS query: ysmmeamaooogyuwa.xyz
Source:	DNS query: qqggiaeuuaskcisa.xyz
Source:	DNS query: ukwgsimcamwqcqus.xyz
Source:	DNS query: makysawqyqkmmkuo.xyz
Source:	DNS query: gwuaqqsyegywuaya.xyz
Source:	DNS query: smwcqasgeqikoqss.xyz
Source:	DNS query: qigaaawumoqgmwck.xyz
Source:	DNS query: kwkiuumqgigawcek.xyz
Source:	DNS query: imcgogsosiogeqgc.xyz
Source:	DNS query: coosumygqywusaaq.xyz
Source:	DNS query: muikisowiqmckiao.xyz
Source:	DNS query: eygeqyioakqgwkws.xyz
Source:	DNS query: wcagmacwieoosqok.xyz
Source:	DNS query: igyccoycggkescsw.xyz
Source:	DNS query: uegmseugcsaymygc.xyz
Source:	DNS query: gcgquesqkuokqoos.xyz
Source:	DNS query: awcmmsyugikucuqg.xyz
Source:	DNS query: awcmmsyugikucuqg.xyz
Source:	DNS query: qqmoakcgiagmaiou.xyz
Source:	DNS query: qcweoeaqygkgoyqw.xyz
Source:	DNS query: kwcqymkoyiusyywg.xyz
Source:	DNS query: kwcqymkoyiusyywg.xyz
Source:	DNS query: uysuukowkciwgmko.xyz
Source:	DNS query: yyqmiikqggkgkcke.xyz
Source:	DNS query: cgwgwmsuyaicegcq.xyz
Source:	DNS query: oesgsmmsyegwkaii.xyz
Source:	DNS query: eeimyyskiwmsmwaw.xyz
Source:	DNS query: akqmmimguqeacqki.xyz
Source:	DNS query: eeuqeoimgoqakquw.xyz
Source:	DNS query: mookqcgowekwsyme.xyz
Source:	DNS query: iaamsmcuweooiums.xyz
Source:	DNS query: qwwkyygoyymumeqa.xyz
Source:	DNS query: qwmqmwoieykcoums.xyz
Source:	DNS query: aqmmgwoeiissyuay.xyz
Source:	DNS query: ukgeakkwimkacgwm.xyz
Source:	DNS query: wcuwikyucakswsgy.xyz
Source:	DNS query: oyqmksygwiuekomo.xyz

Tries to resolve many domain names, but no domain seems valid

Source: unknown	DNS traffic detected: query: ecoqwiswmwqokmay.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwwcqeykmseicgaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuyaasckcgacyesi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awacwkqgsoomimye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukmcqucewskcqygg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqyaoykomyoygics.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqggiaeuuaskcisa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esykokiigsgwcwsa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okeyuasamkcqqeka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wcuwikyucakswsgy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiuyuwqiqkkogmoe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyeqwcuyimescesu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecogmmaysgwkmwqm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgaiosyouwwkgsmm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwamoggwyegsseao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uokqmokseqqakiui.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: miqcugomwgmygyoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skawoueawceoywsy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cgiamwsqgcmqgqse.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: coosumygqywusaaq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cosaygigqegeyewi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ucmwywoqciswaguc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: auayomwkewcomwas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcqgssmagywqcgws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymysimqoykwqeqiq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: micemismikicsccc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cskowwiekeqaakki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sewmmwqeyauowwwo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akasikewaomyiwqk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kcyakwisycecaqgw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mskmgwkuiamqikce.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoyeoimcuuqakckw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gieksqwccmmqkemm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gaguweiwsgouugqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uqsqcgouceqmigcg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqsakygykwusqams.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwuaqqsyegywuaya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyewqwkusieeoqey.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kcoiygiwuyqyaoku.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiswokuokugiooky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qoyisgoayskswigs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikuqcsooiucogaww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcweoeaqygkgoyqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wssaqmakumewmaes.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wagasowawsoyycom.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkiigoymgkmoggoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kouumoyqiuckkcau.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isgasoomksiwqcmg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwggykgwkqoceiuo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ismqaewykmoiguki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skmmaauasaqywsas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqaiyaoqwyeswaiy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aosagqwwquakwceq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymugwyokyyccykmw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cygmqaagqcuusmiq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwyikqowekcgesga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igkiociagqsacmwa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isemauqkwwiumyky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skyiqyaeoykwcgiw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gcgquesqkuokqoos.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgmyeeguweaukuke.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: caceukeeygaaqaec.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oeooiqokqsqcsaig.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uegmseugcsaymygc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekommiasesmcaysg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoqayemwgmsyuimi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wuqggcwmoscwykwg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omsqkuiwcwoegooq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ocgcqsagaakgkcma.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikggquqsigykqamc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yyqmiikqggkgkcke.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iagmkeayqmuowswy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikqokmauuissyuce.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: giscmywoiaqmqcmw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygucsucmagwqsqcu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyocwswugeiqqyoo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aawqwccomcemcysm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eyoyssauceguqwmk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iqqeoamqwiuiyuua.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: quugmiumsieaiyys.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uowkoqwgqqeweume.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmgowiccqoeomagq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ososwckwcqmmwqcy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ueyeeeegieoukoci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwwkyygoyymumeqa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsywmuwgsogemomw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mygiqcqokowwmgqq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqiwocaywcswuwsq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sagymwuwgeucsmac.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwuomysuqkaykwuy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wmgeoqqiwqcmimwu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goicqsmskkygkkka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymygkkggyigeqcqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiswcssocuqsaqkq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwcaikouwwekssco.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esiaisyasoaoqwki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyogquqkmyqwwkuq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: giuccqyqokookyue.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmmoiaecqyuquoya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skyqsyyymyacyayc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyyagswauqyckoye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qceawaaswmsuekmu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukeoemaaimqyuais.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uisgoqaoksgqsqyg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eyoaceoookqskqmy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ocicimqkgucacyim.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aiusammkykucyyso.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgwmaeskqmwumwkk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kecsceaqksygeamy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uikciyeoaumwomqo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wagyuykcqmqyygkw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oesgsmmsyegwkaii.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukicsmiwggcwksam.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qowoagcmkkgqcswk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qucyaygweeasqeoy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eeimyyskiwmsmwaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqumaeswmyusisoi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqkiemcseioemogk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygooiessycewaocg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gugueqckkyuaeqqy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoeewogkicikusoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mssaogwocegysoow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oywgqkusocouysua.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekcwemuekgqsimae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: msyecoiqeyqeiquy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygesoycecmkuwayg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wcagmacwieoosqok.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aciemoayegyggwiq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omgcoecwsqiuqyug.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ggicikyqcaiyguee.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: owaaygsacguucaye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekiwqiyewuiqoemo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqoaumkywacmuwwm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iyaikmkkowcqemsi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgqyouayikuyuqmk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qigaaawumoqgmwck.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yessywkwcwmyewqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmuqekokuyuqgige.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewueyekksqksycww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wikiagqsmeeaeegy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sgsasqgwayeckgoy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqioykeogcwkowgq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: giqukkwwcwgqcisg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: masegmsiqgamiugm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iygukwyuqwiuoqmi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cyumiiokkswcoeag.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eiqogaaggeswoges.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igyccoycggkescsw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smckcsaioceiyasu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isaeicumkcuwqmqq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qoiigkweqeiwycuo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gokuyyiawuwwyeqi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iaueigwgocakgsku.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqakguiwiqacqiwg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iaamsmcuweooiums.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wockoyekyageakcg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isceiesauogasmoo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukaiiiyqoooycyqm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gcwequgwyimwymsa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssmkyomikukusksu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akuyqkmomwqyiyow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iagisciiyoemgwaa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mgiwaegaqyyaakwy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sauygqecsusickcu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osyqameakgkceeog.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: maiyuocqqiqiiskw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mycgaaaymgowwicw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wucwykasawokemaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iyoqqeicqoquiqka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: suagiqkqmkgysmiw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cgwgwmsuyaicegcq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: coayaokeissieqcc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aweqoooqomueeiwi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imcgogsosiogeqgc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qimmkmaumumswocw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smwywssyyaciqkae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: muwqwgaaymomgwmi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imigkomgmqgmakqk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omasqkwqyskcagwi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eyiyueewuaqmmwcm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sekqikccsokicgye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wueossewygqoakoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewacuagosgqmuocm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acqaagqgmsmeouce.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekgqymkkqiwogqsy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qagaeyiqsgakegya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oewuwcsmaacckewa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymmcwogyimsuqmcc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqycmugocqsyuaae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ggaqiymaekkywusy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkqoqmmcwacsqiiu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwcyyawigmwceaqi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkwkgmcoawgaoiwg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmoycwqiuykiusuy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aakowgaeoeuekqyc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sgigamoeiwksoecq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acemcwecgiqcukys.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iesmewkokeqooioo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awyomscgweuqmgaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: moysoauykmieesas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcwcgegyyieaoqca.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekqyosgcumkcecmo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqyqgowkwqiggewq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eygeqyioakqgwkws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqmicqemgcgieoau.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: guwououoomacaysu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqqsggacauiiugka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcyksokwumicscaa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uoeukcckqmmsuwaa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqmoakcgiagmaiou.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isukyiwyscosaaqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: auscackumyccuyuk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eswweuycwwiiykwo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsicgeayaoueooom.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skiwkmaaeeiqqgee.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uosaescwmkiyscay.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okgigkmiieweagia.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uecouukwkuceyuwg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uigkauqkumywguig.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cekggiciueyeyoku.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: immcqsiceooqyaay.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ososokqeakgguwsq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmaaciimeememwao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goguooqkgysueime.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igmqooiwioymwkcm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssiooaeoaocuyaow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wicwocqcucgaimwe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wuuiumemmigyyauq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqmqwygosgguwqsu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwaywmaequkqccai.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iyuaqococuqcsgii.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqysoaosqewciiww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmiowgeswucumqae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iaawaweqwceogamg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwoyamckoqoaauoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqmsgskwgemyueya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smisyqewaummmwoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qumssmeysccykkyo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: seiiycgosccmaykm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smwcqasgeqikoqss.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmcqgmkyguwkskyg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smaaowemwiwggocu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gakesieaaickekuo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygquuyekcusgsqqu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aueiqscgeicewaoo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uysuukowkciwgmko.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okccisioeycusekg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: quyckaioggawuois.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwoesauawkouiecq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecgiqiiieksaooyc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aagokgyaswscyaeu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okwswuciummewsui.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skaeggkkcmoqoywy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ywcwqgmikmycwoeu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osaeyoiqoqawauga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmiugosumuqmuqoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymqaaskiwomkucuy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmqeqkcqackwkgao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwskygguegqkasme.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymseciekayuweoww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwywqgsmgaoiwsga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikqywgcqaggogqsa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmgusimiaqiweyas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmiccoqwqmssougs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acwomuuukiomgqkm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewaoowewmsomgaiw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: waucsgsqqsqkacog.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiyggmguowygeooc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: muikisowiqmckiao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: suwkomiqcykeyako.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keckssemmeoqieqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wuokiysmiucoucak.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ommwaqgaemsmcqwc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: guwwqcuqmkmyyyyi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: koyokggaqsagggym.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyqweoyukcewugsu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqkoemcaocsomwow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgssaogcsscmkswu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gusmkkaiomeeqaiy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: owmesaosmycoeceq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykuasckuceswseig.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qokauaicweuwscac.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awgyuqqswicwkqcs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esyiocqieemagwmo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwoyyqgiwowysqou.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ysmmeamaooogyuwa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewuyacewswkoueqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikoycakqiuuascco.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqqkagyoymmosuyo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwkiuumqgigawcek.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keosqeosukqcooco.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awcmmsyugikucuqg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gcmiymmqgwuquokm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okgquokwaassqyyi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uygmgoymcwcgkios.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sgowwwmqgkeyukwq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: muiccguyaeaqwweg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keykoekseemyiewq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukwgsimcamwqcqus.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqmmgwoeiissyuay.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uiaqcykmqwcwgmeg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgcaouuqqqwucogy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cymymsciyaiacwgw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mookqcgowekwsyme.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: semyssioekmosauo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymuiggyusggsymoi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uoiyoewsiosismow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyygagweoagcuqky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imuscegymggagewg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqisqmesaeoegmyc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sskawiyqmweogyqi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aiiqyyikowqaygwy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imgeoyougkmmeuec.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igywsgwooemqiuss.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cyqqgacqkowwkqqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: immyecuqwkiyscys.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awsigwcaesugycuk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqueagsoikuyocca.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoscugususamokuy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qoaweokuqggaymks.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mumuqocoisaucwmq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiccyamsgmuqoeoy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mayykkuyeuiggyws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ucsoeygscgagowqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukyokaigmmkumgoa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: momoqikcaksewaua.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiguisuayimaukgu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eigywisgeoiskekg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sasqgsyksiccuuws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: issaesuceymoyccq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uogksceymossmmqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wggygeoisauouuoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aksuakswwkiimamq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwogawueykiiumao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qigcqiaomwieqwka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uccsgcekiwcyucou.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skssioqkemoiieaa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmciuwiycsqycggy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewwgmiicuyowacum.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwikoqqgiayyuakq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ceckmwoyqkwgeoqg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcoysaaooaiccqyu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmqqeimyycgqwsgg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: koaeaguekwcaousw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akueuaicusaoieiy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: csmasucykosuwouy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esimsqgcwwwmyoqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: seeogeqwsqmsoaqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecgmcmqswickqcgi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkcqgowgkcoyokcu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ucmioacycscyeouk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwwcocucusmeguaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwyooeiscmwguqms.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ieqeeiggkuqcomyo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: makysawqyqkmmkuo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: comuwmkimocayeeu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osaymwoggqqycmse.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awwomgcseeqwkkom.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmukociggiqcouio.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqgmgoqcoqqkguyk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cymogqmasaiiwmww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qigismmgwsiseyuu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omgooecquoweeomo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keguuyioweymiaws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssqggwwkkaayqkgk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aikmggymywuooyqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cekeeosckoouciwe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcwaiaiqiwcakawa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqgoeemewamgucie.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uiicikumwwsmaeem.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ywywwwgwekicgico.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gceesusqmuockkgw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: equmqmqwuuuioawa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: seqkawokggwucsui.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuywuskkgqsigqqs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iqcogqmwegaqewuu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kimakioiwmawksiw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iacisiamimiiqyeo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ucoweesewcwiosgw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiwmqykuesscgkac.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awasockiaymagmci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yyimcoiwgckeakcm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqsakkimkesccikc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: msqsoggkkoiokugk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aaeyckqsgmiqsgew.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: guowewgekuoqacyy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwgicagyykoommga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmsuagygagqceocm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcygacuamqqugcck.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skqsqowayeqesqqk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yewomygmueegmoqi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykeuawieaequiyag.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyyamqygcecqocmq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oeakuqueisysswcg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ggeymcaisciikucq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wogawoqysgiockwa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smoswyoekkccyuga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cygeomikesiegqsk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: caysuwggmqimaqwq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aaokyscqeecowaci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cywoimwmsoamqoem.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: koecgqggegimaeya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qumaseqmggyaiauq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgwkkkyicoqmooqu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iysmukmcmacuomic.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aaeqiiecqqumcgky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goeykqccmemkswom.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kewweiikaaysqugi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: moiimkscmiswaesw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecqisawmymscauow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwcqymkoyiusyywg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiomcwmascsigags.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: quwocusecekwqkaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iamowksweuqyssis.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gcyciogqguooyici.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ysiwwoeeaaskykaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymeiqyyqqyaaygie.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mismuqiygyeysaoo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yyyagyakeciucagk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osmoygyawqmmimkq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kiuymkmaomciimcc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wmoamsauiwauoosg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmoguamscceqkamk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiewcykmuuacuoyk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: caysswwugsmkeksw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukgeakkwimkacgwm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qukyogcwsgswyayo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okoykokgycygucya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwuuwgemogmuomwq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oywkwakwykimigck.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ywmgykycywqqewqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwmqmwoieykcoums.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: syyyweaywowycsia.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mywaqkeaawisisky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: saumycuogqsqykes.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuyoukwwacqkcoyo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okoccmmgswcmakcw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oekcyqqggaegsesm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwqsoyoqkymakowm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqyamamqwsseyoig.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuscomokgkmaommk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smwsugycuuckemue.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: syaouwwyoaemeekm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aawiysageawcoyok.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: maoeeogmuauywsyu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mueuwcqsioowsmce.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgesgakysuqaewik.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwagocmgakuuykiu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqciawooemoueyqu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqaqgemescmwsqks.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kccmicaswqmswwak.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqoawmqqwqcusmee.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uoigsiqmemcscosu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cauewwukyywyqiei.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uowicsywgqmgagyc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiqueqokwqqgwwci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: waaqccyeaeywuoqu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsmyawqeqguacwas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cyemcqwkasuimkgs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwmcuwccqmuecgea.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ysawassgkwqygmmq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imumkckaqyieaasa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwieueawsewqigey.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uccyyemqaiiksuwm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akqmmimguqeacqki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eeoeukoqgiwsumsu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goiikukwyyauemqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iesmkwqgmkmksgam.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aiumyocycyyikiwc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: syiysgiqgqggqkoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oeeoucsuawuqkqoi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ocqseueommkkqcgs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: semgkyogsqqwgsmy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyqmksygwiuekomo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yywgmuqggsagcmco.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kcwiywyygywkkysk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgkswogkcsaeegki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omoaicgooscecewq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eeuqeoimgoqakquw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: koouumcuucaeakye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoqymkkusuecomsw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sesyieaiesegeaow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecqoqckqoaogcesy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wcgqccqcugomywua.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsisaoaauqwmuomg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ieiegkokewkqmkwe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykuoaucocogcwoky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cuaumuqcoeegomsq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecasigiwguqgguyw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osoawyeyassgycgy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwyougsgeaaoiumg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wggqoukyeokwgmoy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqqmeagkkosgcayo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iykumkamcykgicyi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kecgikusmakuksma.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uksgyqiqaaiaiesi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uiggameqqycugsqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acacoiqgoimayqwm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igeqissugeuswaus.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uiwwamyuymycooey.xyz replaycode: Name error (3)

Source: unknown

Network traffic detected: DNS query count 861

Source: global traffic

TCP traffic: 192.168.2.5:49671 -> 1.1.1.1:53

Source: global traffic

DNS traffic detected: number of DNS queries: 861

Source: Joe Sandbox View	IP Address: 166.1.160.237 166.1.160.237
Source: Joe Sandbox View	IP Address: 162.159.61.3 162.159.61.3

Source: global traffic	HTTP traffic detected: GET /webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf HTTP/1.1Host: www.med.unc.eduConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.med.unc.eduConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /crx/blobs/AW50ZFsLPhJJyx_4ShcDOgcEpJeOc7Vr0kMzfFRoaMfWx4pAgZ0UGF2i9_ei1A7FAHQ-EPFULeBn7F8_SEKhjbpEyKfiidX7GF_6BDOycMeg5w03wjwVQ61hkaEix8WFqmEAxlKa5cmz_tdFr9JtRwdqRu82wmLe2Ghe/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_84_1_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.82.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.82.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.82.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.82.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.82.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.82.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.82.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.82.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.82.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.82.8
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf HTTP/1.1Host: www.med.unc.eduConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.med.unc.eduConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /crx/blobs/AW50ZFsLPhJJyx_4ShcDOgcEpJeOc7Vr0kMzfFRoaMfWx4pAgZ0UGF2i9_ei1A7FAHQ-EPFULeBn7F8_SEKhjbpEyKfiidX7GF_6BDOycMeg5w03wjwVQ61hkaEix8WFqmEAxlKa5cmz_tdFr9JtRwdqRu82wmLe2Ghe/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_84_1_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /api/client_hello HTTP/1.1Accept: /Connection: closeHost: aikmouciiqgecoqi.xyz:443User-Agent: cpp-httplib/0.12.1

Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: "url": "https://www.youtube.com" equals www.youtube.com (Youtube)
Source: 000003.log5.15.dr	String found in binary or memory: "www.facebook.com": "{\"Tier1\": [1103, 6061], \"Tier2\": [5445, 1780, 8220]}", equals www.facebook.com (Facebook)
Source: 000003.log5.15.dr	String found in binary or memory: "www.linkedin.com": "{\"Tier1\": [1103, 214, 6061], \"Tier2\": [2771, 9515, 1780, 1303, 1099, 6081, 5581, 9396]}", equals www.linkedin.com (Linkedin)
Source: 000003.log5.15.dr	String found in binary or memory: "www.youtube.com": "{\"Tier1\": [983, 6061, 1103], \"Tier2\": [2413, 8118, 1720, 5007]}", equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.med.unc.edu
Source: global traffic	DNS traffic detected: DNS query: bzib.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: clients2.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic	DNS traffic detected: DNS query: aikmouciiqgecoqi.xyz
Source: global traffic	DNS traffic detected: DNS query: koecgqggegimaeya.xyz
Source: global traffic	DNS traffic detected: DNS query: aawqwccomcemcysm.xyz
Source: global traffic	DNS traffic detected: DNS query: kcyakwisycecaqgw.xyz
Source: global traffic	DNS traffic detected: DNS query: uogksceymossmmqc.xyz
Source: global traffic	DNS traffic detected: DNS query: qgmyeeguweaukuke.xyz
Source: global traffic	DNS traffic detected: DNS query: mywaqkeaawisisky.xyz
Source: global traffic	DNS traffic detected: DNS query: yqqsggacauiiugka.xyz
Source: global traffic	DNS traffic detected: DNS query: equmqmqwuuuioawa.xyz
Source: global traffic	DNS traffic detected: DNS query: wmoamsauiwauoosg.xyz
Source: global traffic	DNS traffic detected: DNS query: oqsakkimkesccikc.xyz
Source: global traffic	DNS traffic detected: DNS query: mgiwaegaqyyaakwy.xyz
Source: global traffic	DNS traffic detected: DNS query: ucmioacycscyeouk.xyz
Source: global traffic	DNS traffic detected: DNS query: qumaseqmggyaiauq.xyz
Source: global traffic	DNS traffic detected: DNS query: uccyyemqaiiksuwm.xyz
Source: global traffic	DNS traffic detected: DNS query: sesyieaiesegeaow.xyz
Source: global traffic	DNS traffic detected: DNS query: kccmicaswqmswwak.xyz
Source: global traffic	DNS traffic detected: DNS query: mssaogwocegysoow.xyz
Source: global traffic	DNS traffic detected: DNS query: wssaqmakumewmaes.xyz
Source: global traffic	DNS traffic detected: DNS query: cmukociggiqcouio.xyz
Source: global traffic	DNS traffic detected: DNS query: skyqsyyymyacyayc.xyz
Source: global traffic	DNS traffic detected: DNS query: uoigsiqmemcscosu.xyz
Source: global traffic	DNS traffic detected: DNS query: kuywuskkgqsigqqs.xyz
Source: global traffic	DNS traffic detected: DNS query: auayomwkewcomwas.xyz
Source: global traffic	DNS traffic detected: DNS query: iyaikmkkowcqemsi.xyz
Source: global traffic	DNS traffic detected: DNS query: ggicikyqcaiyguee.xyz
Source: global traffic	DNS traffic detected: DNS query: oqyaoykomyoygics.xyz
Source: global traffic	DNS traffic detected: DNS query: eqakguiwiqacqiwg.xyz
Source: global traffic	DNS traffic detected: DNS query: wgcaouuqqqwucogy.xyz
Source: global traffic	DNS traffic detected: DNS query: ewacuagosgqmuocm.xyz
Source: global traffic	DNS traffic detected: DNS query: wgqyouayikuyuqmk.xyz
Source: global traffic	DNS traffic detected: DNS query: owaaygsacguucaye.xyz
Source: global traffic	DNS traffic detected: DNS query: uwgicagyykoommga.xyz
Source: global traffic	DNS traffic detected: DNS query: uiggameqqycugsqw.xyz
Source: global traffic	DNS traffic detected: DNS query: goguooqkgysueime.xyz
Source: global traffic	DNS traffic detected: DNS query: keosqeosukqcooco.xyz
Source: global traffic	DNS traffic detected: DNS query: maoeeogmuauywsyu.xyz
Source: global traffic	DNS traffic detected: DNS query: ismqaewykmoiguki.xyz
Source: global traffic	DNS traffic detected: DNS query: wucwykasawokemaw.xyz
Source: global traffic	DNS traffic detected: DNS query: ukmcqucewskcqygg.xyz
Source: global traffic	DNS traffic detected: DNS query: qqqmeagkkosgcayo.xyz
Source: global traffic	DNS traffic detected: DNS query: ysawassgkwqygmmq.xyz
Source: global traffic	DNS traffic detected: DNS query: osaeyoiqoqawauga.xyz
Source: global traffic	DNS traffic detected: DNS query: iagisciiyoemgwaa.xyz
Source: global traffic	DNS traffic detected: DNS query: ymysimqoykwqeqiq.xyz
Source: global traffic	DNS traffic detected: DNS query: ymmcwogyimsuqmcc.xyz
Source: global traffic	DNS traffic detected: DNS query: osmoygyawqmmimkq.xyz
Source: global traffic	DNS traffic detected: DNS query: immyecuqwkiyscys.xyz
Source: global traffic	DNS traffic detected: DNS query: omsqkuiwcwoegooq.xyz
Source: global traffic	DNS traffic detected: DNS query: ukaiiiyqoooycyqm.xyz
Source: global traffic	DNS traffic detected: DNS query: isemauqkwwiumyky.xyz
Source: global traffic	DNS traffic detected: DNS query: keguuyioweymiaws.xyz
Source: global traffic	DNS traffic detected: DNS query: kwaywmaequkqccai.xyz
Source: global traffic	DNS traffic detected: DNS query: yyimcoiwgckeakcm.xyz
Source: global traffic	DNS traffic detected: DNS query: ekcwemuekgqsimae.xyz
Source: global traffic	DNS traffic detected: DNS query: imigkomgmqgmakqk.xyz
Source: global traffic	DNS traffic detected: DNS query: omasqkwqyskcagwi.xyz
Source: global traffic	DNS traffic detected: DNS query: awyomscgweuqmgaw.xyz
Source: global traffic	DNS traffic detected: DNS query: eyoyssauceguqwmk.xyz
Source: global traffic	DNS traffic detected: DNS query: gwwcqeykmseicgaw.xyz
Source: global traffic	DNS traffic detected: DNS query: qwywqgsmgaoiwsga.xyz
Source: global traffic	DNS traffic detected: DNS query: ososwckwcqmmwqcy.xyz
Source: global traffic	DNS traffic detected: DNS query: osaymwoggqqycmse.xyz
Source: global traffic	DNS traffic detected: DNS query: oyewqwkusieeoqey.xyz
Source: global traffic	DNS traffic detected: DNS query: ommwaqgaemsmcqwc.xyz
Source: global traffic	DNS traffic detected: DNS query: cauewwukyywyqiei.xyz
Source: global traffic	DNS traffic detected: DNS query: goeykqccmemkswom.xyz
Source: global traffic	DNS traffic detected: DNS query: aksuakswwkiimamq.xyz
Source: global traffic	DNS traffic detected: DNS query: isaeicumkcuwqmqq.xyz
Source: global traffic	DNS traffic detected: DNS query: qiswokuokugiooky.xyz
Source: global traffic	DNS traffic detected: DNS query: qiswcssocuqsaqkq.xyz
Source: global traffic	DNS traffic detected: DNS query: qcyksokwumicscaa.xyz
Source: global traffic	DNS traffic detected: DNS query: esiaisyasoaoqwki.xyz
Source: global traffic	DNS traffic detected: DNS query: giqukkwwcwgqcisg.xyz
Source: global traffic	DNS traffic detected: DNS query: ymqaaskiwomkucuy.xyz
Source: global traffic	DNS traffic detected: DNS query: akueuaicusaoieiy.xyz
Source: global traffic	DNS traffic detected: DNS query: sauygqecsusickcu.xyz
Source: global traffic	DNS traffic detected: DNS query: kkwkgmcoawgaoiwg.xyz
Source: global traffic	DNS traffic detected: DNS query: saumycuogqsqykes.xyz
Source: global traffic	DNS traffic detected: DNS query: ukyokaigmmkumgoa.xyz
Source: global traffic	DNS traffic detected: DNS query: eswweuycwwiiykwo.xyz
Source: global traffic	DNS traffic detected: DNS query: uksgyqiqaaiaiesi.xyz
Source: global traffic	DNS traffic detected: DNS query: smckcsaioceiyasu.xyz
Source: global traffic	DNS traffic detected: DNS query: esimsqgcwwwmyoqc.xyz
Source: global traffic	DNS traffic detected: DNS query: maiyuocqqiqiiskw.xyz
Source: global traffic	DNS traffic detected: DNS query: smaaowemwiwggocu.xyz
Source: global traffic	DNS traffic detected: DNS query: kwuuwgemogmuomwq.xyz
Source: global traffic	DNS traffic detected: DNS query: ukicsmiwggcwksam.xyz
Source: global traffic	DNS traffic detected: DNS query: gwamoggwyegsseao.xyz
Source: global traffic	DNS traffic detected: DNS query: immcqsiceooqyaay.xyz
Source: global traffic	DNS traffic detected: DNS query: kkcqgowgkcoyokcu.xyz
Source: global traffic	DNS traffic detected: DNS query: kecgikusmakuksma.xyz
Source: global traffic	DNS traffic detected: DNS query: ymuiggyusggsymoi.xyz
Source: global traffic	DNS traffic detected: DNS query: uecouukwkuceyuwg.xyz
Source: global traffic	DNS traffic detected: DNS query: eyoaceoookqskqmy.xyz
Source: global traffic	DNS traffic detected: DNS query: awwomgcseeqwkkom.xyz

Source: unknown

HTTP traffic detected: POST /dns-query HTTP/1.1Host: chrome.cloudflare-dns.comConnection: keep-aliveContent-Length: 128Accept: application/dns-messageAccept-Language: *User-Agent: ChromeAccept-Encoding: identityContent-Type: application/dns-message

Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://bard.google.com/
Source: Reporting and NEL.16.dr	String found in binary or memory: https://bzib.nelreports.net/api/report?cat=bingbusiness
Source: Web Data.15.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: Web Data.15.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: manifest.json1.15.dr	String found in binary or memory: https://chrome.google.com/webstore/
Source: manifest.json1.15.dr	String found in binary or memory: https://chromewebstore.google.com/
Source: a34c8049-650b-4d13-9ebd-3a34ce6d192e.tmp.16.dr, c27df45b-51a0-4eb2-88e3-24845d8480e3.tmp.16.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json0.15.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: a34c8049-650b-4d13-9ebd-3a34ce6d192e.tmp.16.dr, c27df45b-51a0-4eb2-88e3-24845d8480e3.tmp.16.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: manifest.json0.15.dr	String found in binary or memory: https://docs.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-autopush.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-daily-0.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-daily-1.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-daily-2.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-daily-3.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-daily-4.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-daily-5.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-daily-6.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-preprod.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive-staging.corp.google.com/
Source: manifest.json0.15.dr	String found in binary or memory: https://drive.google.com/
Source: Web Data.15.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: Web Data.15.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: Web Data.15.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: c27df45b-51a0-4eb2-88e3-24845d8480e3.tmp.16.dr	String found in binary or memory: https://edgeassetservice.azureedge.net
Source: 000003.log5.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/addressbar_uu_files.en-gb/1.0.2/asset?sv=2017-07-29&sr
Source: 000003.log5.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?assetgroup=Arbit
Source: 000003.log5.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr
Source: 000003.log1.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtrac
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_163_music.png/1.0.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_dark.png/1.7.32/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_hc.png/1.7.32/asset
Source: HubApps Icons.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_light.png/1.7.32/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_hc.png/1.2.1/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_maximal_dark.png/1.2.1/ass
Source: HubApps Icons.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_maximal_light.png/1.2.1/as
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_amazon_music_light.png/1.4.13/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_apple_music.png/1.4.12/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_bard_light.png/1.0.1/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_dark.png/1.1.17/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_dark.png/1.6.8/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_light.png/1.1.17/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_light.png/1.6.8/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_hc.png/1.1.17/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_hc.png/1.6.8/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_hc.png/1.0.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_maximal_dark.png/1.0.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_maximal_light.png/1.0.3/asse
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_deezer.png/1.4.12/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_demo_dark.png/1.0.6/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_demo_light.png/1.0.6/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_designer_color.png/1.0.14/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_designer_hc.png/1.0.14/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_hc.png/1.1.12/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_maximal_dark.png/1.1.12/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr, HubApps Icons.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_maximal_light.png/1.1.12/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_hc.png/1.2.0/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_maximal_dark.png/1.2.0/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_maximal_light.png/1.2.0/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_excel.png/1.7.32/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_facebook_messenger.png/1.5.14/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_gaana.png/1.0.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc.png/1.7.1/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc_controller.png/1.7.1/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc_joystick.png/1.7.1/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark.png/1.7.1/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark_controller.png/1.7.1/
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark_joystick.png/1.7.1/as
Source: HubApps Icons.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light.png/1.7.1/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light_controller.png/1.7.1
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light_joystick.png/1.7.1/a
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_gmail.png/1.5.4/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_help.png/1.0.0/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_hc.png/0.1.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_maximal_dark.png/0.1.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_maximal_light.png/0.1.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_iHeart.png/1.0.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_hc.png/1.0.14/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_maximal_dark.png/1.0.14/as
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_maximal_light.png/1.0.14/a
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_instagram.png/1.4.13/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_ku_gou.png/1.0.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_last.png/1.0.3/asset
Source: 000003.log5.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_manifest_gz/4.7.107/asset?assetgroup=Sho
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_dark.png/1.1.0/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_hc.png/1.1.0/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_light.png/1.1.0/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_naver_vibe.png/1.0.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_dark.png/1.4.9/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_hc.png/1.4.9/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_light.png/1.4.9/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_dark.png/1.9.10/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_hc.png/1.9.10/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr, HubApps Icons.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_light.png/1.9.10/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_hc.png/1.1.0/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_maximal_dark.png/1.1.0/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_maximal_light.png/1.1.0/asse
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_power_point.png/1.7.32/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_qq.png/1.0.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_dark.png/1.1.12/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_hc.png/1.1.12/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_light.png/1.1.12/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_hc.png/1.1.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_maximal_dark.png/1.1.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_maximal_light.png/1.1.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_hc.png/1.3.6/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_maximal_dark.png/1.3.6/asset
Source: HubApps Icons.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_maximal_light.png/1.3.6/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.1.12/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.4.0/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.5.13/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.1.12/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.4.0/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.5.13/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.1.12/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.4.0/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.5.13/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_hc.png/1.4.0/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_maximal_dark.png/1.4.0/asset
Source: HubApps Icons.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_maximal_light.png/1.4.0/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_dark.png/1.3.20/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_hc.png/1.3.20/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_light.png/1.3.20/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_sound_cloud.png/1.0.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_spotify.png/1.4.12/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_dark.png/1.2.19/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_hc.png/1.2.19/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_light.png/1.2.19/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_telegram.png/1.0.4/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_hc.png/1.0.5/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_maximal_dark.png/1.0.5/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_maximal_light.png/1.0.5/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_tidal.png/1.0.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_tik_tok_light.png/1.0.5/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_hc.png/1.5.13/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_maximal_dark.png/1.5.13/asset
Source: HubApps Icons.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_maximal_light.png/1.5.13/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_twitter_light.png/1.0.9/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_vk.png/1.0.3/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_whats_new.png/1.0.0/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_whatsapp_light.png/1.4.11/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_word.png/1.7.32/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_yandex_music.png/1.0.10/asset
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_youtube.png/1.4.14/asset
Source: 000003.log5.15.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/signal_triggers/1.13.3/asset?sv=2017-07-29&sr=c&sig=Nt
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://excel.new?from=EdgeM365Shoreline
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://gaana.com/
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://i.y.qq.com/n2/m/index.html
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://latest.web.skype.com/?browsername=edge_canary_shoreline
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://m.kugou.com/
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://m.soundcloud.com/
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://m.vk.com/
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://mail.google.com/mail/mu/mp/266/#tl/Inbox
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://manifestdeliveryservice.edgebrowser.microsoft-staging-falcon.io/app/page-context-demo
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://music.amazon.com
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://music.apple.com
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://music.yandex.com
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://open.spotify.com
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://outlook.live.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://outlook.live.com/mail/0/
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://outlook.live.com/mail/compose?isExtension=true
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://outlook.live.com/mail/inbox?isExtension=true&sharedHeader=1&nlp=1&client_flight=outlookedge
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://outlook.office.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://outlook.office.com/mail/0/
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://outlook.office.com/mail/compose?isExtension=true
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://outlook.office.com/mail/inbox?isExtension=true&sharedHeader=1&client_flight=outlookedge
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://powerpoint.new?from=EdgeM365Shoreline
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://tidal.com/
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://twitter.com/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.15.dr	String found in binary or memory: https://unitedstates1.ss.wd.microsoft.us/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.15.dr	String found in binary or memory: https://unitedstates2.ss.wd.microsoft.us/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.15.dr	String found in binary or memory: https://unitedstates4.ss.wd.microsoft.us/
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://vibe.naver.com/today
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://web.skype.com/?browsername=edge_canary_shoreline
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://web.skype.com/?browsername=edge_stable_shoreline
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://web.telegram.org/
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://web.whatsapp.com
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://word.new?from=EdgeM365Shoreline
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.deezer.com/
Source: content.js.15.dr, content_new.js.15.dr	String found in binary or memory: https://www.google.com/chrome
Source: Web Data.15.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: c27df45b-51a0-4eb2-88e3-24845d8480e3.tmp.16.dr	String found in binary or memory: https://www.googleapis.com
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.iheart.com/podcast/
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.instagram.com
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.last.fm/
Source: Session_13378477321642865.15.dr	String found in binary or memory: https://www.med.unc.edu
Source: 000003.log3.15.dr	String found in binary or memory: https://www.med.unc.edu/
Source: Favicons.15.dr	String found in binary or memory: https://www.med.unc.edu/favicon.ico
Source: Session_13378477321642865.15.dr, msiwrapper.ini.3.dr, Favicons.15.dr, History.15.dr	String found in binary or memory: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf
Source: cmd.exe, 00000009.00000002.2261520815.00000000034F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf:
Source: History.15.dr	String found in binary or memory: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfBlank
Source: cmd.exe, 00000009.00000002.2261141455.0000000002FDB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfC
Source: cmd.exe, 00000009.00000002.2261141455.0000000002FD0000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000009.00000002.2261358993.0000000003165000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000009.00000002.2261358993.0000000003160000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfC:
Source: cmd.exe, 00000009.00000002.2261141455.0000000002FFF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfMVg
Source: Session_13378477321642865.15.dr	String found in binary or memory: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfT
Source: cmd.exe, 00000009.00000002.2261141455.0000000002FFF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfaUC
Source: cmd.exe, 00000009.00000002.2261141455.0000000002FFF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfoWY
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.messenger.com
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1&game
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1&item
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1&item=fl
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1&playInS
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.office.com
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.officeplus.cn/?sid=shoreline&endpoint=OPPC&source=OPCNshoreline
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true&auth=1
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true&auth=2
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=1
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=2
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.tiktok.com/
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://www.youtube.com
Source: 4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	String found in binary or memory: https://y.music.163.com/m/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49683
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49682
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49680
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\4ce31b.msi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\SourceHash{837A37B6-C086-4887-960B-B6BB04303EFC}	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\inprogressinstallinfo.ipi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSIE443.tmp	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E3B8E0	12_2_00E3B8E0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E578E0	12_2_00E578E0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E5D830	12_2_00E5D830
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E31000	12_2_00E31000
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E57000	12_2_00E57000
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E4E9C0	12_2_00E4E9C0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E321B0	12_2_00E321B0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E39970	12_2_00E39970
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E40970	12_2_00E40970
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E46100	12_2_00E46100
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E392E0	12_2_00E392E0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E35AF0	12_2_00E35AF0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E533F0	12_2_00E533F0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E3B3D0	12_2_00E3B3D0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E373A0	12_2_00E373A0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E3EBA0	12_2_00E3EBA0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E53BA0	12_2_00E53BA0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E573B0	12_2_00E573B0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E55370	12_2_00E55370
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E62B50	12_2_00E62B50
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E41300	12_2_00E41300
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E59300	12_2_00E59300
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E59B00	12_2_00E59B00
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E384F0	12_2_00E384F0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E3F480	12_2_00E3F480
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E52460	12_2_00E52460
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E36C20	12_2_00E36C20
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E3BC10	12_2_00E3BC10
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E43C10	12_2_00E43C10
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E55DE0	12_2_00E55DE0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E545F4	12_2_00E545F4
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E565A0	12_2_00E565A0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E31D20	12_2_00E31D20
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E42D30	12_2_00E42D30
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E43530	12_2_00E43530
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00F87D20	12_2_00F87D20
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E4FED0	12_2_00E4FED0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E60E90	12_2_00E60E90
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E53FF0	12_2_00E53FF0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E5F7F0	12_2_00E5F7F0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E3A7D0	12_2_00E3A7D0
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E3FF6E	12_2_00E3FF6E
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E6C740	12_2_00E6C740
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E58700	12_2_00E58700
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E58F00	12_2_00E58F00

Source: Joe Sandbox View

Dropped File: C:\Windows\Installer\MSIE443.tmp FD622CF73EA951A6DE631063ABA856487D77745DD1500ADCA61902B8DDE56FE1

Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe

Code function: String function: 00F86740 appears 38 times

Source: classification engine

Classification label: mal72.troj.evad.winMSI@67/320@1184/8

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

File created: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\lockfile

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6476:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5160:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5900:120:WilError_03

Source: C:\Windows\System32\msiexec.exe

File created: C:\Windows\TEMP\~DF0A54318868D63B44.TMP

Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe

File read: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\msiwrapper.ini

Jump to behavior

Source: C:\Windows\SysWOW64\icacls.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 33abb.msi

ReversingLabs: Detection: 21%

Source: unknown	Process created: C:\Windows\System32\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\33abb.msi"
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding A391672FD02B667B0E8D14AD63D14E05
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\icacls.exe "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\." /SETINTEGRITYLEVEL (CI)(OI)HIGH
Source: C:\Windows\SysWOW64\icacls.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\expand.exe "C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files
Source: C:\Windows\SysWOW64\expand.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c start msedge https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe "C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe" /VERYSILENT /VERYSILENT
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2100,i,3809971658774042701,17388671140319593064,262144 /prefetch:3
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2344 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6916 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=7052 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-GB --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=7204 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:6
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=4644 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:8
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding A391672FD02B667B0E8D14AD63D14E05	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\icacls.exe "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\." /SETINTEGRITYLEVEL (CI)(OI)HIGH	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\expand.exe "C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c start msedge https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe "C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe" /VERYSILENT /VERYSILENT	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2100,i,3809971658774042701,17388671140319593064,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2344 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6916 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=7052 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-GB --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=7204 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:6	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=4644 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msihnd.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srclient.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: spp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\icacls.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: dpx.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: wdscore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: dbgcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: acgenral.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Section loaded: fwpuclnt.dll	Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe

File written: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\msiwrapper.ini

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: 33abb.msi

Static file information: File size 1855488 > 1048576

Source:

Binary string: C:\ss2\Projects\MsiWrapper\MsiCustomActions\Release\MsiCustomActions.pdb source: 33abb.msi, 4ce31b.msi.1.dr, MSIE443.tmp.1.dr

Source: 40d2317c6f0c5d45939b296e37c375db.tmp.6.dr	Static PE information: section name: .00cfg
Source: 40d2317c6f0c5d45939b296e37c375db.tmp.6.dr	Static PE information: section name: .voltbl

Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00F868FA push ecx; ret	12_2_00F8690D
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E44DB0 push eax; mov dword ptr [esp], ecx	12_2_00E44DB3
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E3A503 push eax; mov dword ptr [esp], ecx	12_2_00E3A523
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E5D6F0 push eax; mov dword ptr [esp], ecx	12_2_00E5D6F5
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00E3A760 push eax; mov dword ptr [esp], ecx	12_2_00E3A763

Source: 40d2317c6f0c5d45939b296e37c375db.tmp.6.dr

Static PE information: section name: .text entropy: 6.997970207672927

Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe (copy)	Jump to dropped file
Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\d2f91cf38daf49049d9c7808958ddcf4$dpx$.tmp\40d2317c6f0c5d45939b296e37c375db.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSIE443.tmp	Jump to dropped file

Source: C:\Windows\System32\msiexec.exe

File created: C:\Windows\Installer\MSIE443.tmp

Jump to dropped file

Source: C:\Windows\SysWOW64\msiexec.exe

Process created: C:\Windows\SysWOW64\icacls.exe "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\." /SETINTEGRITYLEVEL (CI)(OI)HIGH

Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Thread delayed: delay time: 600000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Thread delayed: delay time: 599998			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Window / User API: threadDelayed 704	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Window / User API: threadDelayed 6847	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Window / User API: threadDelayed 1207	Jump to behavior

Source: C:\Windows\System32\msiexec.exe

Dropped PE file which has not been started: C:\Windows\Installer\MSIE443.tmp

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe

API coverage: 8.0 %

Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe TID: 6716	Thread sleep count: 313 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe TID: 6716	Thread sleep time: -187800000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe TID: 6716	Thread sleep count: 237 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe TID: 6716	Thread sleep count: 704 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe TID: 6716	Thread sleep time: -599998s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe TID: 6716	Thread sleep count: 87 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe TID: 6716	Thread sleep count: 6847 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe TID: 6716	Thread sleep count: 1207 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe TID: 6716	Thread sleep count: 183 > 30	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Last function: Thread delayed

Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Thread delayed: delay time: 600000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Thread delayed: delay time: 599998			Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\	Jump to behavior

Source: Web Data.15.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: Web Data.15.dr	Binary or memory string: discord.comVMware20,11696428655f
Source: Web Data.15.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: Web Data.15.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: global block list test formVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: Web Data.15.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: Web Data.15.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: Web Data.15.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: Web Data.15.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: setup.exe, 0000000C.00000002.3922465721.00000000011A9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll!
Source: Web Data.15.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: Web Data.15.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: Web Data.15.dr	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: Web Data.15.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: Web Data.15.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: Web Data.15.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: Web Data.15.dr	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: AMC password management pageVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: Web Data.15.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: Web Data.15.dr	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: Web Data.15.dr	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: Web Data.15.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: Web Data.15.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: Web Data.15.dr	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: Web Data.15.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: Web Data.15.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Windows\System32\msiexec.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Found API chain indicative of debugger detection

Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe

Debugger detection routine: QueryPerformanceCounter, DebugActiveProcess, DecisionNodes, ExitProcess or Sleep

graph_12-17635

Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe

Code function: 12_2_00F8E34A IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

12_2_00F8E34A

Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00F9A126 mov eax, dword ptr fs:[00000030h]	12_2_00F9A126
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00F9A0F5 mov eax, dword ptr fs:[00000030h]	12_2_00F9A0F5
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00F8BB38 mov eax, dword ptr fs:[00000030h]	12_2_00F8BB38

Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00F8E34A IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		12_2_00F8E34A
Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe	Code function: 12_2_00F8632B SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		12_2_00F8632B

Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\icacls.exe "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\." /SETINTEGRITYLEVEL (CI)(OI)HIGH	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\expand.exe "C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c start msedge https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe "C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe" /VERYSILENT /VERYSILENT	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe

Code function: 12_2_00F8722A GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

12_2_00F8722A

Source: C:\Windows\SysWOW64\expand.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Replication Through Removable Media	Windows Management Instrumentation	1 Services File Permissions Weakness	11 Process Injection	21 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Services File Permissions Weakness	121 Virtualization/Sandbox Evasion	LSASS Memory	211 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	11 Process Injection	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	121 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	14 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	3 Obfuscated Files or Information	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Services File Permissions Weakness	Cached Domain Credentials	11 Peripheral Device Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Software Packing	DCSync	3 File and Directory Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	14 System Information Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
33abb.msi	21%	ReversingLabs	Win32.Trojan.Generic

Dropped Files

Source	Detection	Scanner
C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\d2f91cf38daf49049d9c7808958ddcf4$dpx$.tmp\40d2317c6f0c5d45939b296e37c375db.tmp	26%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe (copy)	26%	ReversingLabs
C:\Windows\Installer\MSIE443.tmp	0%	ReversingLabs

Source	Detection	Scanner	Label
https://latest.web.skype.com/?browsername=edge_canary_shoreline	0%	Avira URL Cloud	safe
https://manifestdeliveryservice.edgebrowser.microsoft-staging-falcon.io/app/page-context-demo	0%	Avira URL Cloud	safe
https://powerpoint.new?from=EdgeM365Shoreline	0%	Avira URL Cloud	safe
https://excel.new?from=EdgeM365Shoreline	0%	Avira URL Cloud	safe
https://word.new?from=EdgeM365Shoreline	0%	Avira URL Cloud	safe
https://vibe.naver.com/today	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
chrome.cloudflare-dns.com	172.64.41.3	true	false	high
www.med.unc.edu	152.19.9.32	true	false	high
ssl.bingadsedgeextension-prod-europe.azurewebsites.net	94.245.104.56	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
aikmouciiqgecoqi.xyz	166.1.160.237	true	false	high
googlehosted.l.googleusercontent.com	172.217.19.193	true	false	high
ggeymcaisciikucq.xyz	unknown	unknown	false	high
maoeeogmuauywsyu.xyz	unknown	unknown	false	high
yqyqgowkwqiggewq.xyz	unknown	unknown	false	high
kkoguuoieqeogeic.xyz	unknown	unknown	false	high
seqeuqomcuuuuaea.xyz	unknown	unknown	false	high
qiyggmguowygeooc.xyz	unknown	unknown	false	high
caysswwugsmkeksw.xyz	unknown	unknown	false	high
oyogquqkmyqwwkuq.xyz	unknown	unknown	false	high
oqmyqqwuiuaiigci.xyz	unknown	unknown	false	high
ywmgykycywqqewqw.xyz	unknown	unknown	false	high
qqeuqoguwmyeoyyy.xyz	unknown	unknown	false	high
ecgmcmqswickqcgi.xyz	unknown	unknown	false	high
ggusoyqqicokiysm.xyz	unknown	unknown	false	high
wssaqmakumewmaes.xyz	unknown	unknown	false	high
kimakioiwmawksiw.xyz	unknown	unknown	false	high
ekqyosgcumkcecmo.xyz	unknown	unknown	false	high
uoeukcckqmmsuwaa.xyz	unknown	unknown	false	high
goicqsmskkygkkka.xyz	unknown	unknown	false	high
iaamggceyqysmkmg.xyz	unknown	unknown	false	high
ucmwywoqciswaguc.xyz	unknown	unknown	false	high
kcwiywyygywkkysk.xyz	unknown	unknown	false	high
kiwaggoqgowsiiqa.xyz	unknown	unknown	false	high
aikuqasyeiugeiio.xyz	unknown	unknown	false	high
cygmqaagqcuusmiq.xyz	unknown	unknown	false	high
eigywisgeoiskekg.xyz	unknown	unknown	false	high
wggqoukyeokwgmoy.xyz	unknown	unknown	false	high
iyqsawyqkmesuqei.xyz	unknown	unknown	false	high
mywaqkeaawisisky.xyz	unknown	unknown	false	high
smckcsaioceiyasu.xyz	unknown	unknown	false	high
wsmyawqeqguacwas.xyz	unknown	unknown	false	high
aqwacqooyiwygyoc.xyz	unknown	unknown	false	high
kekmcgakqcicegie.xyz	unknown	unknown	false	high
guqkcceaoeyoqoyq.xyz	unknown	unknown	false	high
owaeqqogcksoyges.xyz	unknown	unknown	false	high
mssaogwocegysoow.xyz	unknown	unknown	false	high
gmqeqkcqackwkgao.xyz	unknown	unknown	false	high
qigcqiaomwieqwka.xyz	unknown	unknown	false	high
oywgqkusocouysua.xyz	unknown	unknown	false	high
wgcaouuqqqwucogy.xyz	unknown	unknown	false	high
uwagocmgakuuykiu.xyz	unknown	unknown	false	high
ieqeeiggkuqcomyo.xyz	unknown	unknown	false	high
wgssaogcsscmkswu.xyz	unknown	unknown	false	high
kwecsqeywykucesq.xyz	unknown	unknown	false	high
aiiqyyikowqaygwy.xyz	unknown	unknown	false	high
skawoueawceoywsy.xyz	unknown	unknown	false	high
yyaqueaqcsokisee.xyz	unknown	unknown	false	high
mskmgwkuiamqikce.xyz	unknown	unknown	false	high
cukeocigwcwkgyoi.xyz	unknown	unknown	false	high
mueuwcqsioowsmce.xyz	unknown	unknown	false	high
magwucmkkmykkess.xyz	unknown	unknown	false	high
aoeewogkicikusoc.xyz	unknown	unknown	false	high
qcwaiaiqiwcakawa.xyz	unknown	unknown	false	high
sekowasmqguwsuyo.xyz	unknown	unknown	false	high
ywcwqgmikmycwoeu.xyz	unknown	unknown	false	high
waucsgsqqsqkacog.xyz	unknown	unknown	false	high
yksmsewamgkcawsk.xyz	unknown	unknown	false	high
keosqeosukqcooco.xyz	unknown	unknown	false	high
maoykykcuaykkkgi.xyz	unknown	unknown	false	high
ekwimeeskgocsuui.xyz	unknown	unknown	false	high
qiqueqokwqqgwwci.xyz	unknown	unknown	false	high
sksesqgoiqkgueoa.xyz	unknown	unknown	false	high
uiaqcykmqwcwgmeg.xyz	unknown	unknown	false	high
uowkoqwgqqeweume.xyz	unknown	unknown	false	high
qwgogmasssoceeqi.xyz	unknown	unknown	false	high
guowewgekuoqacyy.xyz	unknown	unknown	false	high
okwwqyssguiiiuyq.xyz	unknown	unknown	false	high
oyyagswauqyckoye.xyz	unknown	unknown	false	high
wmgoyusqoacscaym.xyz	unknown	unknown	false	high
coyikkwmyomyykmo.xyz	unknown	unknown	false	high
qiswokuokugiooky.xyz	unknown	unknown	false	high
keqgamuiascccwou.xyz	unknown	unknown	false	high
gmeqccaiocakquuk.xyz	unknown	unknown	false	high
keckssemmeoqieqe.xyz	unknown	unknown	false	high
kewgquswkewgaweo.xyz	unknown	unknown	false	high
eiqqkwekkoqucugk.xyz	unknown	unknown	false	high
ocewmkymckokmugk.xyz	unknown	unknown	false	high
uoaogmkwgsausoye.xyz	unknown	unknown	false	high
mayykkuyeuiggyws.xyz	unknown	unknown	false	high
oqqaakemigkwogcs.xyz	unknown	unknown	false	high
uwskygguegqkasme.xyz	unknown	unknown	false	high
akasikewaomyiwqk.xyz	unknown	unknown	false	high
aweqoooqomueeiwi.xyz	unknown	unknown	false	high
iycyekwmcqmygiwc.xyz	unknown	unknown	false	high
wmiiaeyooekwqkya.xyz	unknown	unknown	false	high
skqsqowayeqesqqk.xyz	unknown	unknown	false	high
igeqissugeuswaus.xyz	unknown	unknown	false	high
msyecoiqeyqeiquy.xyz	unknown	unknown	false	high
ieiegkokewkqmkwe.xyz	unknown	unknown	false	high
igkiociagqsacmwa.xyz	unknown	unknown	false	high
iysmukmcmacuomic.xyz	unknown	unknown	false	high
wueiymqkmeqoaeoa.xyz	unknown	unknown	false	high
uomsosocoaqawqsa.xyz	unknown	unknown	false	high
ommwaqgaemsmcqwc.xyz	unknown	unknown	false	high
qoaweokuqggaymks.xyz	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://clients2.googleusercontent.com/crx/blobs/AW50ZFsLPhJJyx_4ShcDOgcEpJeOc7Vr0kMzfFRoaMfWx4pAgZ0UGF2i9_ei1A7FAHQ-EPFULeBn7F8_SEKhjbpEyKfiidX7GF_6BDOycMeg5w03wjwVQ61hkaEix8WFqmEAxlKa5cmz_tdFr9JtRwdqRu82wmLe2Ghe/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_84_1_0.crx	false	high
https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf	false	high
https://aikmouciiqgecoqi.xyz:443/api/client_hello	false	high
https://chrome.cloudflare-dns.com/dns-query	false	high
https://www.med.unc.edu/favicon.ico	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	Web Data.15.dr	false		high
https://web.whatsapp.com	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://duckduckgo.com/ac/?q=	Web Data.15.dr	false		high
https://www.officeplus.cn/?sid=shoreline&endpoint=OPPC&source=OPCNshoreline	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://m.kugou.com/	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://www.office.com	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://outlook.live.com/mail/0/	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://www.last.fm/	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://powerpoint.new?from=EdgeM365Shoreline	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	Web Data.15.dr	false		high
https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfC:	cmd.exe, 00000009.00000002.2261141455.0000000002FD0000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000009.00000002.2261358993.0000000003165000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000009.00000002.2261358993.0000000003160000.00000004.00000020.00020000.00000000.sdmp	false		high
https://tidal.com/	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://docs.google.com/	manifest.json0.15.dr	false		high
https://www.youtube.com	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfaUC	cmd.exe, 00000009.00000002.2261141455.0000000002FFF000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.instagram.com	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfoWY	cmd.exe, 00000009.00000002.2261141455.0000000002FFF000.00000004.00000020.00020000.00000000.sdmp	false		high
https://web.skype.com/?browsername=edge_canary_shoreline	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://gaana.com/	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://drive-staging.corp.google.com/	manifest.json0.15.dr	false		high
https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfBlank	History.15.dr	false		high
https://drive.google.com/	manifest.json0.15.dr	false		high
https://outlook.live.com/mail/compose?isExtension=true	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=1	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	Web Data.15.dr	false		high
https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=2	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfC	cmd.exe, 00000009.00000002.2261141455.0000000002FDB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.messenger.com	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://outlook.live.com/mail/inbox?isExtension=true&sharedHeader=1&nlp=1&client_flight=outlookedge	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://outlook.office.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://outlook.office.com/mail/compose?isExtension=true	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://unitedstates4.ss.wd.microsoft.us/	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.15.dr	false		high
https://i.y.qq.com/n2/m/index.html	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://www.deezer.com/	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://latest.web.skype.com/?browsername=edge_canary_shoreline	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false	Avira URL Cloud: safe	unknown
https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfT	Session_13378477321642865.15.dr	false		high
https://word.new?from=EdgeM365Shoreline	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false	Avira URL Cloud: safe	unknown
https://web.telegram.org/	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://outlook.live.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://outlook.office.com/mail/0/	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://manifestdeliveryservice.edgebrowser.microsoft-staging-falcon.io/app/page-context-demo	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	Web Data.15.dr	false		high
https://m.soundcloud.com/	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://mail.google.com/mail/mu/mp/266/#tl/Inbox	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://www.med.unc.edu/	000003.log3.15.dr	false		high
https://drive-daily-2.corp.google.com/	manifest.json0.15.dr	false		high
https://drive-autopush.corp.google.com/	manifest.json0.15.dr	false		high
https://music.amazon.com	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://drive-daily-4.corp.google.com/	manifest.json0.15.dr	false		high
https://vibe.naver.com/today	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false	Avira URL Cloud: safe	unknown
https://unitedstates1.ss.wd.microsoft.us/	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.15.dr	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	Web Data.15.dr	false		high
https://outlook.office.com/mail/inbox?isExtension=true&sharedHeader=1&client_flight=outlookedge	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://open.spotify.com	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://www.med.unc.edu	Session_13378477321642865.15.dr	false		high
https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf:	cmd.exe, 00000009.00000002.2261520815.00000000034F0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://twitter.com/	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://drive-daily-1.corp.google.com/	manifest.json0.15.dr	false		high
https://excel.new?from=EdgeM365Shoreline	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false	Avira URL Cloud: safe	unknown
https://web.skype.com/?browsername=edge_stable_shoreline	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://www.onenote.com/stickynotesstaging?isEdgeHub=true	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://drive-daily-5.corp.google.com/	manifest.json0.15.dr	false		high
https://m.vk.com/	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://bzib.nelreports.net/api/report?cat=bingbusiness	Reporting and NEL.16.dr	false		high
https://www.google.com/chrome	content.js.15.dr, content_new.js.15.dr	false		high
https://www.tiktok.com/	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://drive-daily-6.corp.google.com/	manifest.json0.15.dr	false		high
https://drive-daily-0.corp.google.com/	manifest.json0.15.dr	false		high
https://www.onenote.com/stickynotes?isEdgeHub=true	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdfMVg	cmd.exe, 00000009.00000002.2261141455.0000000002FFF000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.iheart.com/podcast/	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://music.yandex.com	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://chromewebstore.google.com/	manifest.json1.15.dr	false		high
https://drive-preprod.corp.google.com/	manifest.json0.15.dr	false		high
https://clients2.googleusercontent.com	a34c8049-650b-4d13-9ebd-3a34ce6d192e.tmp.16.dr, c27df45b-51a0-4eb2-88e3-24845d8480e3.tmp.16.dr	false		high
https://www.onenote.com/stickynotes?isEdgeHub=true&auth=2	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://www.onenote.com/stickynotes?isEdgeHub=true&auth=1	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://chrome.google.com/webstore/	manifest.json1.15.dr	false		high
https://y.music.163.com/m/	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://unitedstates2.ss.wd.microsoft.us/	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.15.dr	false		high
https://bard.google.com/	4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp.15.dr	false		high
https://drive-daily-3.corp.google.com/	manifest.json0.15.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
166.1.160.237	aikmouciiqgecoqi.xyz	United States	11798	ACEDATACENTERS-AS-1US	false
23.219.82.8	unknown	United States	20940	AKAMAI-ASN1EU	false
162.159.61.3	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.19.193	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
152.19.9.32	www.med.unc.edu	United States	36850	UNC-CHUS	false
172.64.41.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1573632
Start date and time:	2024-12-12 12:40:43 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	26
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	33abb.msi
Detection:	MAL
Classification:	mal72.troj.evad.winMSI@67/320@1184/8
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .msi Close Viewer Override analysis time to 119997.101 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 217.20.58.98, 192.229.221.95, 13.107.42.16, 13.107.21.239, 204.79.197.239, 172.217.17.78, 13.107.6.158, 172.165.69.228, 23.32.238.138, 2.19.198.56, 2.16.158.192, 2.16.158.179, 2.16.158.185, 2.16.158.169, 2.16.158.176, 2.16.158.186, 2.16.158.187, 2.16.158.170, 2.16.158.26, 23.32.238.163, 199.232.210.172, 142.250.65.195, 142.251.40.99, 13.107.246.63, 20.12.23.50, 94.245.104.56, 20.190.181.0, 23.218.208.109, 65.52.241.40, 13.107.246.40, 23.200.0.6
Excluded domains from analysis (whitelisted): cdp-f-ssl-tlu-net.trafficmanager.net, nav-edge.smartscreen.microsoft.com, config.edge.skype.com.trafficmanager.net, slscr.update.microsoft.com, a416.dscd.akamai.net, data-edge.smartscreen.microsoft.com, edgeassetservice.afd.azureedge.net, star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com, prod-agic-us-2.uksouth.cloudapp.azure.com, clients2.google.com, e86303.dscx.akamaiedge.net, ocsp.digicert.com, www.bing.com.edgekey.net, login.live.com, config-edge-skype.l-0007.l-msedge.net, msedge.b.tlu.dl.delivery.mp.microsoft.com, www.gstatic.com, l-0007.l-msedge.net, config.edge.skype.com, www.bing.com, edge-microsoft-com.dual-a-0036.a-msedge.net, fs.microsoft.com, bingadsedgeextension-prod.trafficmanager.net, bzib.nelreports.net.akamaized.net, otelrules.azureedge.net, api.edgeoffer.microsoft.com, star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net, ctldl.windowsupdate.com, b-0005.b-msedge.net, prod-atm-wds-edge.trafficmanager.net, www-www.bing.com.trafficma
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: 33abb.msi

Simulations

Behavior and APIs

Time	Type	Description
06:42:05	API Interceptor	2060352x Sleep call for process: setup.exe modified
12:41:28	Task Scheduler	Run new task: {D727E058-65B8-48BD-9E74-9CCED70726A4} path: .

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
162.159.61.3	56ff7c.msi	Get hash	malicious	Unknown	Browse
	57ff67.msi	Get hash	malicious	Unknown	Browse
	427c7bdc-ea02-97de-e5ef-a2c58c2d0a48.eml	Get hash	malicious	Unknown	Browse
	setup (2).msi	Get hash	malicious	Unknown	Browse
	setup.msi	Get hash	malicious	Unknown	Browse
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse
	Nieuwebestellingen10122024.exe	Get hash	malicious	FormBook	Browse
	751ietQPnX.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	l92fYljXWF.lnk	Get hash	malicious	RHADAMANTHYS	Browse
166.1.160.237	56ff7c.msi	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	5c322c.msi	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	57ff67.msi	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	systemtask (2).exe	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	setup (2).msi	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	systemtask.exe	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	HvASs4SYK9.exe	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	293944637.dll	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	systemtask (2).exe	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
	systemtask.exe	Get hash	malicious	Unknown	Browse	aikmouciiqgecoqi.xyz:443/api/client_hello
23.219.82.8	file.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Unknown	Browse
	https://ergv54ergrz.s3.amazonaws.com/uhdigth1.html	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
chrome.cloudflare-dns.com	56ff7c.msi	Get hash	malicious	Unknown	Browse	162.159.61.3
	57ff67.msi	Get hash	malicious	Unknown	Browse	162.159.61.3
	setup (2).msi	Get hash	malicious	Unknown	Browse	162.159.61.3
	setup.msi	Get hash	malicious	Unknown	Browse	162.159.61.3
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse	172.64.41.3
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse	172.64.41.3
	Nieuwebestellingen10122024.exe	Get hash	malicious	FormBook	Browse	172.64.41.3
	751ietQPnX.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.159.61.3
	l92fYljXWF.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.159.61.3
	qxjDerXRGR.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.159.61.3
www.med.unc.edu	56ff7c.msi	Get hash	malicious	Unknown	Browse	152.19.9.32
ssl.bingadsedgeextension-prod-europe.azurewebsites.net	57ff67.msi	Get hash	malicious	Unknown	Browse	94.245.104.56
	setup (2).msi	Get hash	malicious	Unknown	Browse	94.245.104.56
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse	94.245.104.56
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse	94.245.104.56
	l92fYljXWF.lnk	Get hash	malicious	RHADAMANTHYS	Browse	94.245.104.56
	qxjDerXRGR.lnk	Get hash	malicious	RHADAMANTHYS	Browse	94.245.104.56
	taCCGTk8n1.lnk	Get hash	malicious	RHADAMANTHYS	Browse	94.245.104.56
	1733845413a1d8742853c308d6ac4d050f80c4b91bf14f4919c2728222ecef14ce82d51adb973.dat-decoded.exe	Get hash	malicious	Remcos	Browse	94.245.104.56
	Setup.exe	Get hash	malicious	Vidar	Browse	94.245.104.56
	17333253674c71ac3d5875ca830e11f4630bf65d3b8b7e2686361e216df980d330c80afb30623.dat-decoded.exe	Get hash	malicious	Remcos	Browse	94.245.104.56
s-part-0035.t-0009.t-msedge.net	OR8Ti8rf8h.exe	Get hash	malicious	AveMaria, DcRat, StormKitty, VenomRAT	Browse	13.107.246.63
	https://www.google.cv/url?duf=FbLLcAJXWZoeUZJIjST2&lfg=uVQGQao2QJuMH6TEkmpq&sa=t&fmc=XCKeeJBBTaVsgNFTQcDe&url=amp%2Fshairmylife.com%2Fkam%2FOATWMWQPC27P047EIPR32X/YWxpc29ub0B0aG9ydWsuY29t	Get hash	malicious	Unknown	Browse	13.107.246.63
	setup (2).msi	Get hash	malicious	Unknown	Browse	13.107.246.63
	DocScan_20242175.js	Get hash	malicious	Unknown	Browse	13.107.246.63
	setup.msi	Get hash	malicious	Unknown	Browse	13.107.246.63
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse	13.107.246.63
	Rockwool-Msg-S9039587897.pdf	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	13.107.246.63
	http://get-derila.com	Get hash	malicious	Unknown	Browse	13.107.246.63
	Event Schedule.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.63
	DHL AWB Document_pdf.vbs	Get hash	malicious	Unknown	Browse	13.107.246.63

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
UNC-CHUS	56ff7c.msi	Get hash	malicious	Unknown	Browse	152.19.9.32
	https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/archive-virtio/virtio-win-0.1.190-1/virtio-win-guest-tools.exe	Get hash	malicious	Unknown	Browse	152.19.134.196
	botnet.spc.elf	Get hash	malicious	Mirai, Moobot	Browse	152.19.86.242
	m68k.elf	Get hash	malicious	Mirai, Moobot	Browse	152.23.211.5
	pjyhwsdgkl.elf	Get hash	malicious	Unknown	Browse	152.23.139.159
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	152.23.236.115
	w18Ys8qKuX.elf	Get hash	malicious	Unknown	Browse	152.2.60.13
	la.bot.mips.elf	Get hash	malicious	Unknown	Browse	152.2.11.89
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	152.2.11.1
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	152.23.24.144
CLOUDFLARENETUS	56ff7c.msi	Get hash	malicious	Unknown	Browse	162.159.61.3
	https://www.google.cv/url?duf=FbLLcAJXWZoeUZJIjST2&lfg=uVQGQao2QJuMH6TEkmpq&sa=t&fmc=XCKeeJBBTaVsgNFTQcDe&url=amp%2Fshairmylife.com%2Fkam%2FOATWMWQPC27P047EIPR32X/YWxpc29ub0B0aG9ydWsuY29t	Get hash	malicious	Unknown	Browse	104.17.25.14
	57ff67.msi	Get hash	malicious	Unknown	Browse	172.64.41.3
	http://productfocus.com	Get hash	malicious	Unknown	Browse	104.26.0.186
	427c7bdc-ea02-97de-e5ef-a2c58c2d0a48.eml	Get hash	malicious	Unknown	Browse	1.1.1.1
	setup (2).msi	Get hash	malicious	Unknown	Browse	162.159.61.3
	setup.msi	Get hash	malicious	Unknown	Browse	172.64.41.3
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse	104.18.86.42
	https://feji.us/m266he	Get hash	malicious	Unknown	Browse	104.20.3.69
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse	172.64.41.3
ACEDATACENTERS-AS-1US	56ff7c.msi	Get hash	malicious	Unknown	Browse	166.1.160.237
	5c322c.msi	Get hash	malicious	Unknown	Browse	166.1.160.237
	57ff67.msi	Get hash	malicious	Unknown	Browse	166.1.160.237
	systemtask (2).exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	setup (2).msi	Get hash	malicious	Unknown	Browse	166.1.160.237
	systemtask.exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	HvASs4SYK9.exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	293944637.dll	Get hash	malicious	Unknown	Browse	166.1.160.237
	systemtask (2).exe	Get hash	malicious	Unknown	Browse	166.1.160.237
	systemtask.exe	Get hash	malicious	Unknown	Browse	166.1.160.237
AKAMAI-ASN1EU	setup.msi	Get hash	malicious	Unknown	Browse	104.126.116.17
	Non_disclosure_agreement.lnk.download.lnk	Get hash	malicious	Unknown	Browse	23.44.133.182
	Document.lnk.download.lnk	Get hash	malicious	Unknown	Browse	23.44.201.5
	phish_alert_iocp_v1.4.48 - 2024-12-11T151927.331.eml	Get hash	malicious	Unknown	Browse	95.101.143.226
	LicEPbnX.txt	Get hash	malicious	Unknown	Browse	2.18.109.164
	[EXTERNAL] Doug Lenon shared _GARY LEIMER INC SIGNED CONTRACT & PAY APPLICATIONS.paper_ with you.eml	Get hash	malicious	Unknown	Browse	104.109.143.151
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse	2.16.238.137
	https://download-695-18811-018-webdav-logicaldoc.cdn-serveri4731-ns.shop/Documents/Instruction_695-18014-012_Rev.PDF.lnk	Get hash	malicious	Unknown	Browse	23.195.39.65
	Employee_Letter.pdf	Get hash	malicious	HTMLPhisher	Browse	23.195.39.65
	Atualizador_Fiscal_NFe_37882912.msi	Get hash	malicious	AteraAgent	Browse	2.22.50.144

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Windows\Installer\MSIE443.tmp	56ff7c.msi	Get hash	malicious	Unknown	Browse
	510286.msi	Get hash	malicious	Unknown	Browse
	5c322c.msi	Get hash	malicious	Unknown	Browse
	57ff67.msi	Get hash	malicious	Unknown	Browse
	56ff7c.msi	Get hash	malicious	Unknown	Browse
	setup (2).msi	Get hash	malicious	Unknown	Browse
	5c322c.msi	Get hash	malicious	Unknown	Browse
	57ff67.msi	Get hash	malicious	Unknown	Browse
	293944637.dll	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\46fa476e-2a6d-4138-8cf5-64dde92cd8ca.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45810
Entropy (8bit):	6.089511577733506
Encrypted:	false
SSDEEP:	768:mMkbJrT8IeQc5d9/SEnhDO6vP6OTtofF3CEgYNxoZ20+WCAouGoup1Xl3jVzXr4e:mMk1rT8H19/+61YNGU0XRouhu3VlXr4e
MD5:	8554C214634A8264FD5CDB76CF3D0C17
SHA1:	787A46E0F43B61E310B3C1E7D2B9D49069394619
SHA-256:	82AFB854F521D7B421262EF93F42C6058F51142194816614E382F91A838EE987
SHA-512:	DA971A4EBF553913BE931025DFFF027B7A138B98936AA5F6FBE353DCBFC29BEF92DFBC3ACF0025F27A704B94BCEA269983DDE7B331E0EFB1496DA6C7AF997DCB
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\470d7abf-fbf4-4633-8e7e-7d429108f1e8.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45888
Entropy (8bit):	6.089346775976924
Encrypted:	false
SSDEEP:	768:mMkbJrT8IeQc53o/SEnhDO6vP6WsrtofF3CEgYNxoZ20+WCAouGoup1Xl3jVzXr5:mMk1rT8HPo/+6MYNGU0XRouhu3VlXr4e
MD5:	140CC46D9AB1EA92A2C5C588F8DBCDE7
SHA1:	B54761C8BBEB163D7D6FD627B8745564109A5F36
SHA-256:	518A3FE78E9BECA0CA26B0B7D0473C6D6AD141E18B22A6E4FBE806D349E3197E
SHA-512:	55CA74A4C14CBF578FB8CB46FE25CF3BE8F4699EA2FC55ADDB5A7BC4B32C092659359BC67F72A9602B8CA1966A7F4F1B7DD7359B95247C4E82C8F2A40878AE82
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\7e1c804b-7d35-44f7-b555-929b1fade5bd.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44652
Entropy (8bit):	6.096747652393833
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4xkBswuehDO6vP6OTtofF3CEgcGoup1Xl3jVzXr4CCAg:z/Ps+wsI7yOEW61chu3VlXr4CRo1
MD5:	C51B12730A1FBBAFEC965C79620ECF21
SHA1:	FF289CB19E279BDABCDFA0857957C7F97FBDA67A
SHA-256:	6EAAE64675E0761EB53E871A27839424F0C5931FC477F0EB800C946992A20B83
SHA-512:	53D4675F58CBB04893151DADA5470A20F3E8B78250D52317E0E60FDF381F4E2ED7E99B797E5BE4EAD0A6F4E8B32EC20C35B5018BF3DC94BB4876FA1C9E9C2344
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\894a43c0-a5c1-4135-8c9e-9b8115999da9.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	45888
Entropy (8bit):	6.08937972365127
Encrypted:	false
SSDEEP:	768:mMkbJrT8IeQc53o/SEnhDO6hP6WsrtofF3CEgYNxoZ20+WCAouGoup1Xl3jVzXr5:mMk1rT8HPo/+6WYNGU0XRouhu3VlXr4e
MD5:	A43B304C614739B8E9B5B16781088FC3
SHA1:	61B3DEB645CA3F67351E5AE6678A9C93EA4811F2
SHA-256:	9FD623667480CD0A350C2FF4A694E677E61C37BDDDD8F8A3E2D1C4220EF09BE6
SHA-512:	64ACB53703AE006693BF7F14EA9C129D4A4D5D2399E796620794292BE7B3807EB60F30585B59BCDB8DA848EFC78D5AD258E0CD02AA2E8FC54C5B71C53154972F
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\90a6ab4b-1484-4445-8a7b-22dc10a00eaf.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44596
Entropy (8bit):	6.096618887642298
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBrwuehDO6vP6O/qoQDvcGoup1Xl3jVzXr4CCAo1:z/Ps+wsI7ynEH6gchu3VlXr4CRo1
MD5:	15E57A31CDB9E4C7D3672F1C4BFCD990
SHA1:	647667D571F6EBC6398C4401881377F7B3DBEED5
SHA-256:	41F014A2F27E902D1078348882C06A48F6E551A56B9E8AE69CEFB6C020848195
SHA-512:	92546764B92C62A4D09F9F1EBBA6D4B567379FFE2C23384503FE49F486ACA2E166AA43A336D46F6999A97A053F041AC80D5903654A25C3EB7B19774D2A611289
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\68523d79-538b-4328-96d6-95e37135c194.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	107893
Entropy (8bit):	4.640132669903667
Encrypted:	false
SSDEEP:	1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
MD5:	18D8F6617A5020376CEDA06FB42C24D5
SHA1:	F921FF53D8E1A065550AD835D89E550FDF448795
SHA-256:	C0E1D05E90044F0F5810E83826BE6449D44234CD601668E5E041FE7F3B2CAB32
SHA-512:	4FC6D77BDE79EB4EA56D8CFAEE5908C6D9233E65AD199C52A7425B76ECE9869466D3BE52E2A20B85FE50ABD712C57D8591DEBDDB9F3CBA45070E3233CC185DA4
Malicious:	false
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	107893
Entropy (8bit):	4.640132669903667
Encrypted:	false
SSDEEP:	1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
MD5:	18D8F6617A5020376CEDA06FB42C24D5
SHA1:	F921FF53D8E1A065550AD835D89E550FDF448795
SHA-256:	C0E1D05E90044F0F5810E83826BE6449D44234CD601668E5E041FE7F3B2CAB32
SHA-512:	4FC6D77BDE79EB4EA56D8CFAEE5908C6D9233E65AD199C52A7425B76ECE9869466D3BE52E2A20B85FE50ABD712C57D8591DEBDDB9F3CBA45070E3233CC185DA4
Malicious:	false
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-675ACC06-23C.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.44662469430782437
Encrypted:	false
SSDEEP:	3072:865h7zGQ/gz+/cJSOFnSg1HFRqwOWUXJ1GJkqUT+qpW/g1HFRimK:Bh7XG+/yNFnSaHxOH7SkqUT+qYaHTim
MD5:	8E555C3057C2C072CFEF240B95AEF8B2
SHA1:	9D0D2A37CDC78CFC9DBFBB2D6C7A182A493F374C
SHA-256:	0C76A5A83810C5D535590F3F26ADE1AA004511A740969B3ED7B753C1110BD868
SHA-512:	FBD19A01C44F5D4099A8E24D31C9D92F3EA709163D712E18545EB2BE64549485119CC76B33913E241788B7CE61E1715018A7CEE13C8815D6ACE8179B40E9DBBF
Malicious:	false
Preview:	...@..@...@.....C.].....@...............`...................`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30..............117.0.2045.47-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".ktkhqg20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@..............(......................w..U?:K..>.........."....."...24.."."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA=".:............B)..1.3.177.11.. .*.RegKeyNotFound2.windowsR...Z...u...V.S@..$...SF@.......Y@.......4@.......Y@........?........?.........................Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......4@.......Y@................Y@.......Y@.......Y@........?........?2.........m...... .2.........5......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	4.132041621771752
Encrypted:	false
SSDEEP:	3:FiWWltlApdeXKeQwFMYLAfJrAazlYBVP/Sh/JzvPWVcRVEVg3WWD5x1:o1ApdeaEqYsMazlYBVsJDu2ziy5
MD5:	845CFA59D6B52BD2E8C24AC83A335C66
SHA1:	6882BB1CE71EB14CEF73413EFC591ACF84C63C75
SHA-256:	29645C274865D963D30413284B36CC13D7472E3CD2250152DEE468EC9DA3586F
SHA-512:	8E0E7E8CCDC8340F68DB31F519E1006FA7B99593A0C1A2425571DAF71807FBBD4527A211030162C9CE9E0584C8C418B5346C2888BEDC43950BF651FD1D40575E
Malicious:	false
Preview:	sdPC......................X..<EE..r/y..."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA="..................................................................................47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=....................fdb35e9f-12f5-40d5-8d50-87a9333d43a4............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\2f1eb5b7-710e-4485-9fbb-70c4371638a2.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	38627
Entropy (8bit):	5.554835031736952
Encrypted:	false
SSDEEP:	768:UxBMfE7pLGLPFfWPv3fqm8F1+UoAYDCx9Tuqh0VfUC9xbog/OVxroGGrwksbVSya:UxBMfIcPFfWPv3fqmu1jaoMGDRZhqutS
MD5:	661ECF661D2B95F70FEA618ED24E911B
SHA1:	4D6BD51854ED6602B3AC5E6ED89FB4CFBAF778A1
SHA-256:	3F7D5A941B5C5AD2DFAC841258A6B4E360070D31B885456235888DD629BED1F9
SHA-512:	0C8DE40C7E5BB886098A83DA335ED5C9BF8BE111CF770167F543805DA0FEB233617E39C10AB85BCCAFFED1866D3E85E14EBE3F9A8B468ED9E38B8DBD609298DF
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378477319134059","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378477319134059","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\35576e81-3b67-462a-933c-7e3dda8179c4.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	28366
Entropy (8bit):	5.557752462759402
Encrypted:	false
SSDEEP:	768:UYbMRE7pLGLPefWPv3fvm8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCrodGrweCHSpXM:UYbMRIcPefWPv3fvmu1jafMdDkty
MD5:	E584353D2B09994743109AA4F39D4C8E
SHA1:	2C4DD9D4AF1341D94489FA19541F908D84AC09EF
SHA-256:	0ACB41D3F3408B1B760E8AF15F9D3BEE53BC9CCD893CEDD8D21C29A1BA2B3EB4
SHA-512:	3B8DDDD6538EA0DBB21FDB03378DCE2ED1AE10EF4BFA4EA76D4D63B56ED7CF1E72FCA9D19456B45C8801AF62EC4E073005F1B8F67AC3494FA0124DCBF055AC0E
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378477319134059","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378477319134059","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\6054d1d6-afdb-48a9-84ef-06c61614dad6.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13302
Entropy (8bit):	5.267441634193673
Encrypted:	false
SSDEEP:	384:stWPGKSu2sfrfhQbLTX6fbG8Qx6WbOJlaTY6:sYOxudrf/bG7xoaTY6
MD5:	0A077600D363BB4450B32F039FAA8B90
SHA1:	31BD32D334F8C3CE65841A04A45B90ED08EC035C
SHA-256:	80B411CC71AAD5407708213B16B259366683D84FB91FD779BC10664E02C38C7F
SHA-512:	45E1C6EA78DEDE55C1CFC05D1795C2021AEAC3F5FCD233B5AD179CFB3AC457910866D0914C41ADC69F713FE529E8EFBC3AC50F64DCDF03A73FD24A93E6250C90
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378477319709916","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	3.5394429593752084
Encrypted:	false
SSDEEP:	3:iWstvhYNrkUn:iptAd
MD5:	F27314DD366903BBC6141EAE524B0FDE
SHA1:	4714D4A11C53CF4258C3A0246B98E5F5A01FBC12
SHA-256:	68C7AD234755B9EDB06832A084D092660970C89A7305E0C47D327B6AC50DD898
SHA-512:	07A0D529D9458DE5E46385F2A9D77E0987567BA908B53DDB1F83D40D99A72E6B2E3586B9F79C2264A83422C4E7FC6559CAC029A6F969F793F7407212BB3ECD51
Malicious:	false
Preview:	...m.................DB_VERSION.1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	307
Entropy (8bit):	5.258012726402443
Encrypted:	false
SSDEEP:	6:7ga+q1923oH+Tcwtp3hBtB2KLlpJ1L+q2P923oH+Tcwtp3hBWsIFUv:7EYebp3dFLTJ1yv4Yebp3eFUv
MD5:	2FAA8F37064589C77CC79664890AD1A8
SHA1:	62BF3625A100D41647B94558F3779468D91760DB
SHA-256:	E38BFB259F7795687F594FACED2C7C2C9EC3C42AD3CF4F8B455467D65D453832
SHA-512:	F4D7F6BC3DB059435BA783B083B14F78192E601D07BB5670814BC0DC7BC555E7791EBD05AF66860C26EA3B555E22C2E9A86B3CA5FC70A03E6B5F7E200AEE3256
Malicious:	false
Preview:	2024/12/12-06:42:05.363 c38 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform/auto_show_data.db since it was missing..2024/12/12-06:42:05.419 c38 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform/auto_show_data.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	modified
Size (bytes):	2163821
Entropy (8bit):	5.222870585620558
Encrypted:	false
SSDEEP:	24576:v+/PN8FXfI/MXhZSihQgCmnVAEpENU2iOYcafbE2n:v+/PN8tfx2mjF
MD5:	B291F4E94B4E83FCD08D2762F3599AA4
SHA1:	67BD36A74F2A9D2272AC997598F78CD4F741EE32
SHA-256:	9197D5F8D2B5A1C23E1B510AA4707E08BBFE00E45FC52F79EE69741F714C64FA
SHA-512:	269FA61FBD2AA8DA023B65B5420F2628268259355C77A505AF83C62BA8E44216F2EC23577A9F0449900B8A1588F26A08E03EC93FFC2C683A433CB28CC6747BB0
Malicious:	false
Preview:	...m.................DB_VERSION.1.l.i.................QUERY_TIMESTAMP:arbitration_priority_list4...13340900604462938.$QUERY:arbitration_priority_list4....[{"name":"arbitration_priority_list","url":"https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr=c&sig=NtPyTqjbjPElpw2mWa%2FwOk1no4JFJEK8%2BwO4xQdDJO4%3D&st=2021-01-01T00%3A00%3A00Z&se=2023-12-30T00%3A00%3A00Z&sp=r&assetgroup=ArbitrationService","version":{"major":4,"minor":0,"patch":5},"hash":"N0MkrPHaUyfTgQSPaiVpHemLMcVgqoPh/xUYLZyXayg=","size":11749}]...................'ASSET_VERSION:arbitration_priority_list.4.0.5..ASSET:arbitration_priority_list.[{. "configVersion": 32,. "PrivilegedExperiences": [. "ShorelinePrivilegedExperienceID",. "SHOPPING_AUTO_SHOW_COUPONS_CHECKOUT",. "SHOPPING_AUTO_SHOW_LOWER_PRICE_FOUND",. "SHOPPING_AUTO_SHOW_BING_SEARCH",. "SHOPPING_AUTO_SHOW_REBATES",. "SHOPPING_AUTO_SHOW_REBATES_CONFIRMATION",. "SHOPPING_AUTO_SHOW_REBATES_DEACTI

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.092355137587197
Encrypted:	false
SSDEEP:	6:7qI+q2P923oH+Tcwt9Eh1tIFUt8OA/XWZmw+OEkNVkwO923oH+Tcwt9Eh15LJ:7p+v4Yeb9Eh16FUt8Oj/+OjNV5LYeb9O
MD5:	84071688AB6F9815856B809A27597CDF
SHA1:	C48B762854BDDE4E8D4CE60732DC805BE5B430AB
SHA-256:	FB4606CFABD93B86A4B5B70DFC508EC037E8953B3FDF03946650F4FE7287D217
SHA-512:	5045B894CA27379BCBB2537AC1D24072DC26A16F00C3C969FF74880810A4EA04355B7A0C5096B9CD238EA6D969C606D27F60EAA18B93A5AD69DB893862FD5FB1
Malicious:	false
Preview:	2024/12/12-06:42:04.837 200c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2024/12/12-06:42:04.839 200c Recovering log #3.2024/12/12-06:42:05.421 200c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.092355137587197
Encrypted:	false
SSDEEP:	6:7qI+q2P923oH+Tcwt9Eh1tIFUt8OA/XWZmw+OEkNVkwO923oH+Tcwt9Eh15LJ:7p+v4Yeb9Eh16FUt8Oj/+OjNV5LYeb9O
MD5:	84071688AB6F9815856B809A27597CDF
SHA1:	C48B762854BDDE4E8D4CE60732DC805BE5B430AB
SHA-256:	FB4606CFABD93B86A4B5B70DFC508EC037E8953B3FDF03946650F4FE7287D217
SHA-512:	5045B894CA27379BCBB2537AC1D24072DC26A16F00C3C969FF74880810A4EA04355B7A0C5096B9CD238EA6D969C606D27F60EAA18B93A5AD69DB893862FD5FB1
Malicious:	false
Preview:	2024/12/12-06:42:04.837 200c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2024/12/12-06:42:04.839 200c Recovering log #3.2024/12/12-06:42:05.421 200c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DIPS

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.4625798205286203
Encrypted:	false
SSDEEP:	24:TLi5YFQq3qh7z3WMYziciNW9WkZ96UwOfBubt:TouQq3qh7z3bY2LNW9WMcUvBup
MD5:	E4A2A5EB1A11FF4860400A22C709B12F
SHA1:	9ECF99E413D10C3353D4160364B6E982B724FA3E
SHA-256:	C8FABBDD0523321C48E750B724B5F51CEE386A1C93085B9058C03C1BDD116FA7
SHA-512:	5F686616693AD3CA3E40057B0FD38B2BCCC432B21E4C67115DD56BD850404872278FAC19BD081D9AA119B1D631CCAB1691A15EB1C6B3DDBE577AD740E91DBA4F
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....8...n................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DashTrackerDatabase

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 5, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	10240
Entropy (8bit):	0.8708334089814068
Encrypted:	false
SSDEEP:	12:LBtW4mqsmvEFUU30dZV3lY7+YNbr1dj3BzA2ycFUxOUDaazMvbKGxiTUwZ79GV:LLaqEt30J2NbDjfy6UOYMvbKGxjgm
MD5:	92F9F7F28AB4823C874D79EDF2F582DE
SHA1:	2D4F1B04C314C79D76B7FF3F50056ECA517C338B
SHA-256:	6318FCD9A092D1F5B30EBD9FB6AEC30B1AEBD241DC15FE1EEED3B501571DA3C7
SHA-512:	86FEF0E05F871A166C3FAB123B0A4B95870DCCECBE20B767AF4BDFD99653184BBBFE4CE1EDF17208B7700C969B65B8166EE264287B613641E7FDD55A6C09E6D4
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...v... .. .....M....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	345
Entropy (8bit):	5.20782795698852
Encrypted:	false
SSDEEP:	6:7idOq2P923oH+TcwtnG2tMsIFUt8OidXZmw+OidFkwO923oH+TcwtnG2tMsLJ:7iov4Yebn9GFUt8Oi5/+OiT5LYebn95J
MD5:	8DB36C718E0AAD4BF262A3D571A2E0BF
SHA1:	FEEDECE98AE873E38074E127237D09653209CBDE
SHA-256:	9BB951330BB9524A73F0F44EFDFBDC0D6C3D016B60453E9F596E7710FBB39422
SHA-512:	E5B8E59EBE7C402D68CF29DC450935FB4CB4D83180F9C9B8AC39F712141569D5EBA5417404FBB63D3D37CE878E8332851872A48EDE90453C9F2AEB095DDA2D3C
Malicious:	false
Preview:	2024/12/12-06:41:59.135 460 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2024/12/12-06:41:59.135 460 Recovering log #3.2024/12/12-06:41:59.135 460 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	345
Entropy (8bit):	5.20782795698852
Encrypted:	false
SSDEEP:	6:7idOq2P923oH+TcwtnG2tMsIFUt8OidXZmw+OidFkwO923oH+TcwtnG2tMsLJ:7iov4Yebn9GFUt8Oi5/+OiT5LYebn95J
MD5:	8DB36C718E0AAD4BF262A3D571A2E0BF
SHA1:	FEEDECE98AE873E38074E127237D09653209CBDE
SHA-256:	9BB951330BB9524A73F0F44EFDFBDC0D6C3D016B60453E9F596E7710FBB39422
SHA-512:	E5B8E59EBE7C402D68CF29DC450935FB4CB4D83180F9C9B8AC39F712141569D5EBA5417404FBB63D3D37CE878E8332851872A48EDE90453C9F2AEB095DDA2D3C
Malicious:	false
Preview:	2024/12/12-06:41:59.135 460 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2024/12/12-06:41:59.135 460 Recovering log #3.2024/12/12-06:41:59.135 460 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6130526512608825
Encrypted:	false
SSDEEP:	12:TLs9pRSJDBJuqJSEDNvrWjJQ9Dl9np59yDLgHFUxOUDaaTXubHa7mWvKKDMAq1Ke:TLapR+DDNzWjJ0npnyXKUO8+jaDprmL
MD5:	D9A427279E11636CCC16938C0C60DD9B
SHA1:	7929FAC64BDFACE3569A7F167DAC72CA5CF99BF9
SHA-256:	D398A61E36A3F1A02DA5A0931EFB68005E6A886F1C88A97B69CE4512D8BDF07B
SHA-512:	C192F2107D8BB5E152C57C91FA434FF7624DEFFD21D46C6CD671D6091C65E9BC8541C0B83C2EB4D701CBD0A683EC03CB74414A079AEB26C30A1DC8F64216B009
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...%.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	375520
Entropy (8bit):	5.354102295610956
Encrypted:	false
SSDEEP:	6144:/A/imBpx6WdPSxKWcHu5MURacq49QxxPnyEndBuHltBfdK5WNbsVEziP/CfXtLPz:/FdMyq49tEndBuHltBfdK5WNbsVEziPU
MD5:	D2DB314957A3DDE891F396B21F743553
SHA1:	EA260A916E72A876744C9B826127354B98763EC8
SHA-256:	0090B8DF9963E831325D85E0DE63C9765FEB14A66B74E59F4BF3A4703D6CD8EA
SHA-512:	151A92DEA7E9FB4E6E165F73887ECE78048FD1DBC5A9EA7C8D9AC3A75A5A1035C1B3EC2C0040ED85B627674D972D1899D584F268A2B24FD06D09C2C69A4103A0
Malicious:	false
Preview:	...m.................DB_VERSION.1B.Y$q...............&QUERY_TIMESTAMP:domains_config_gz2...13378477327174288..QUERY:domains_config_gz2....[{"name":"domains_config_gz","url":"https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtractionDomainsConfig","version":{"major":2,"minor":8,"patch":76},"hash":"78Xsq/1H+MXv88uuTT1Rx79Nu2ryKVXh2J6ZzLZd38w=","size":374872}]..*.`~...............ASSET_VERSION:domains_config_gz.2.8.76..ASSET:domains_config_gz...{"config": {"token_limit": 1600, "page_cutoff": 4320, "default_locale_map": {"bg": "bg-bg", "bs": "bs-ba", "el": "el-gr", "en": "en-us", "es": "es-mx", "et": "et-ee", "cs": "cs-cz", "da": "da-dk", "de": "de-de", "fa": "fa-ir", "fi": "fi-fi", "fr": "fr-fr", "he": "he-il", "hr": "hr-hr", "hu": "hu-hu", "id": "id-id", "is": "is-is", "it": "it-it", "ja": "ja-jp", "ko": "ko-kr", "lv": "lv-lv", "lt": "lt-lt", "mk": "mk-mk", "nl": "nl-nl", "nb": "nb-no", "no": "no-no", "pl": "pl-pl", "pt": "pt-pt", "ro": "

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	311
Entropy (8bit):	5.165892091399883
Encrypted:	false
SSDEEP:	6:7Jo1923oH+Tcwtk2WwnvB2KLlpg261L+q2P923oH+Tcwtk2WwnvIFUv:77YebkxwnvFLTKyv4YebkxwnQFUv
MD5:	80314841F93B645E6DA9494CDE4671A1
SHA1:	D7EBCAF14F5FCEA520D510A82A729D837C7E3F26
SHA-256:	9BACBB43CFE33AEB2A1CF5B7E3328E0C82C2B7049650B1811B44ABBBE7D2027C
SHA-512:	FF96F83F9017DE19654494D2B9708B08A463F9A8E082E37CCA93A47B5B71E7CF11BA825AA6EAA3E82B04A7786668A88B0839E9649E0D28E7FD567C3766C11170
Malicious:	false
Preview:	2024/12/12-06:42:04.832 2058 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db since it was missing..2024/12/12-06:42:05.309 2058 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\domains_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	358860
Entropy (8bit):	5.324601167171238
Encrypted:	false
SSDEEP:	6144:CgimBVvUrsc6rRA81b/18jyJNjfvrfM6RL:C1gAg1zfvD
MD5:	3F6715A0A14C69CF3E910BD038AC97AC
SHA1:	F66E3A06D323EA3DD5275324AAF69E25E0ED6722
SHA-256:	7940E4E94DAD62617FF364376963934BBE0F85B5B3EC94829F1CC0DA330DB57C
SHA-512:	497CB2852314CC1B7B4ECBF6B0CBF5B0367EF7EFCB5CCD77EF31EED2F5C80DC957BAC2FE9211ABC1A4306B66D53D7B313A8319B7C488CC8F30318E5ABCEF7E36
Malicious:	false
Preview:	{"aee_config":{"ar":{"price_regex":{"ae":"(((ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)))","dz":"(((dzd\|da\|\\x{062F}\\x{062C})\\s\\d{1,3})\|(\\d{1,3}\\s(dzd\|da\|\\x{062F}\\x{062C})))","eg":"(((e\\x{00a3}\|egp)\\s\\d{1,3})\|(\\d{1,3}\\s(e\\x{00a3}\|egp)))","ma":"(((mad\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(mad\|dhs\|dh)))","sa":"((\\d{1,3}\\s(sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633}))\|((sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633})\\s\\d{1,3}))"},"product_terms":"((\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{0639}\\x{0631}\\x{0628}\\x{0629})\|(\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{062D}\\x{0642}\\x{064A}\\x{0628}\\x{0629})\|(\\x{0627}\\x{0634}\\x{062A}\\x{0631}\\x{064A}\\s*\\x{0627}\\x{0644}\\x{0622}\\x{0646})\|(\\x{062E}\\x{064A}\\x{0627}\\x{0631}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.1510396466824675
Encrypted:	false
SSDEEP:	6:7iTIq2P923oH+Tcwt8aPrqIFUt8OirBZmw+OirbkwO923oH+Tcwt8amLJ:7i8v4YebL3FUt8OirB/+Oirb5LYebQJ
MD5:	CB7F94226082BF3C5341D5D773D6ECB5
SHA1:	6A5509EE184254B3500BAF9C0987194997C53CFB
SHA-256:	A8348F11EB2E67965BC5B9FF32E217277B642307B4ABB2DF4F66AFAC321C4589
SHA-512:	890630E3C50E1A22378EA86FB8B82DF9988136C968CB607AC29F4EA737DA5DB4E8B7C98A93BA3D330E6B33D1BC2FFDC262B99C4D9D326D64124671FACD939DBC
Malicious:	false
Preview:	2024/12/12-06:41:59.139 460 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2024/12/12-06:41:59.140 460 Recovering log #3.2024/12/12-06:41:59.140 460 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.1510396466824675
Encrypted:	false
SSDEEP:	6:7iTIq2P923oH+Tcwt8aPrqIFUt8OirBZmw+OirbkwO923oH+Tcwt8amLJ:7i8v4YebL3FUt8OirB/+Oirb5LYebQJ
MD5:	CB7F94226082BF3C5341D5D773D6ECB5
SHA1:	6A5509EE184254B3500BAF9C0987194997C53CFB
SHA-256:	A8348F11EB2E67965BC5B9FF32E217277B642307B4ABB2DF4F66AFAC321C4589
SHA-512:	890630E3C50E1A22378EA86FB8B82DF9988136C968CB607AC29F4EA737DA5DB4E8B7C98A93BA3D330E6B33D1BC2FFDC262B99C4D9D326D64124671FACD939DBC
Malicious:	false
Preview:	2024/12/12-06:41:59.139 460 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2024/12/12-06:41:59.140 460 Recovering log #3.2024/12/12-06:41:59.140 460 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.164711352866757
Encrypted:	false
SSDEEP:	6:7i3R4q2P923oH+Tcwt865IFUt8OipAvJZmw+OitXDkwO923oH+Tcwt86+ULJ:7i3R4v4Yeb/WFUt8OiMJ/+OitXD5LYev
MD5:	61C385CB273C62166A456B26F63FC579
SHA1:	5498531838A6A85EB29717A155376B2F6BA79DD6
SHA-256:	4EDA2B287B3F2F7A61128FEC20D11DDE74BAC39ADE184C94F5E51D13A19077EE
SHA-512:	6D7FECA0CD6EEB897DF9EFA3687CA37334BE8C066128FA21802117E5486E57ABE6033DE2EC2AA503D2FCCE0078A994C262A58FB5838EE1E460E0C9B5A8A906E5
Malicious:	false
Preview:	2024/12/12-06:41:59.166 1c20 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2024/12/12-06:41:59.169 1c20 Recovering log #3.2024/12/12-06:41:59.171 1c20 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.164711352866757
Encrypted:	false
SSDEEP:	6:7i3R4q2P923oH+Tcwt865IFUt8OipAvJZmw+OitXDkwO923oH+Tcwt86+ULJ:7i3R4v4Yeb/WFUt8OiMJ/+OitXD5LYev
MD5:	61C385CB273C62166A456B26F63FC579
SHA1:	5498531838A6A85EB29717A155376B2F6BA79DD6
SHA-256:	4EDA2B287B3F2F7A61128FEC20D11DDE74BAC39ADE184C94F5E51D13A19077EE
SHA-512:	6D7FECA0CD6EEB897DF9EFA3687CA37334BE8C066128FA21802117E5486E57ABE6033DE2EC2AA503D2FCCE0078A994C262A58FB5838EE1E460E0C9B5A8A906E5
Malicious:	false
Preview:	2024/12/12-06:41:59.166 1c20 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2024/12/12-06:41:59.169 1c20 Recovering log #3.2024/12/12-06:41:59.171 1c20 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1254
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	12:qWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWA:
MD5:	826B4C0003ABB7604485322423C5212A
SHA1:	6B8EF07391CD0301C58BB06E8DEDCA502D59BCB4
SHA-256:	C56783C3A6F28D9F7043D2FB31B8A956369F25E6CE6441EB7C03480334341A63
SHA-512:	0474165157921EA84062102743EE5A6AFE500F1F87DE2E87DBFE36C32CFE2636A0AE43D8946342740A843D5C2502EA4932623C609B930FE8511FE7356D4BAA9C
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.118832821153685
Encrypted:	false
SSDEEP:	6:7d+q2P923oH+Tcwt8NIFUt8OpZmw+OdVkwO923oH+Tcwt8+eLJ:7Yv4YebpFUt8Op/+Oj5LYebqJ
MD5:	723C478BDABA729422D599483DD78A79
SHA1:	438CF9D1036586DD3F7CE8F1A982DFD429C03A0C
SHA-256:	BD50B444A3347708E36E3E118AFFE25A4A53AF24ED7C6095534F540D3A2AEC29
SHA-512:	D137E2E4816F83EC63856C4408ADEB4E94AB7E410F2CF0749BDBB875E03614679C05757F9AD5F6D1090A4A0F552FFBC09984BE6CC2391A98D7D2A8BC92694992
Malicious:	false
Preview:	2024/12/12-06:42:00.267 448 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/12/12-06:42:00.267 448 Recovering log #3.2024/12/12-06:42:00.267 448 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.118832821153685
Encrypted:	false
SSDEEP:	6:7d+q2P923oH+Tcwt8NIFUt8OpZmw+OdVkwO923oH+Tcwt8+eLJ:7Yv4YebpFUt8Op/+Oj5LYebqJ
MD5:	723C478BDABA729422D599483DD78A79
SHA1:	438CF9D1036586DD3F7CE8F1A982DFD429C03A0C
SHA-256:	BD50B444A3347708E36E3E118AFFE25A4A53AF24ED7C6095534F540D3A2AEC29
SHA-512:	D137E2E4816F83EC63856C4408ADEB4E94AB7E410F2CF0749BDBB875E03614679C05757F9AD5F6D1090A4A0F552FFBC09984BE6CC2391A98D7D2A8BC92694992
Malicious:	false
Preview:	2024/12/12-06:42:00.267 448 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/12/12-06:42:00.267 448 Recovering log #3.2024/12/12-06:42:00.267 448 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	429
Entropy (8bit):	5.809210454117189
Encrypted:	false
SSDEEP:	6:Y8U0vEjrAWT0VAUD9lpMXO4SrqiweVHUSENjrAWT0HQQ9/LZyVMQ3xqiweVHlrSQ:Y8U5j0pqCjJA7tNj0pHx/LZ4hcdQ
MD5:	5D1D9020CCEFD76CA661902E0C229087
SHA1:	DCF2AA4A1C626EC7FFD9ABD284D29B269D78FCB6
SHA-256:	B829B0DF7E3F2391BFBA70090EB4CE2BA6A978CCD665EEBF1073849BDD4B8FB9
SHA-512:	5F6E72720E64A7AC19F191F0179992745D5136D41DCDC13C5C3C2E35A71EB227570BD47C7B376658EF670B75929ABEEBD8EF470D1E24B595A11D320EC1479E3C
Malicious:	false
Preview:	{"file_hashes":[{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","6RbL+qKART8FehO4s7U0u67iEI8/jaN+8Kg3kII+uy4=","CuN6+RcZAysZCfrzCZ8KdWDkQqyaIstSrcmsZ/c2MVs="],"block_size":4096,"path":"content.js"},{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","UL53sQ5hOhAmII/Yx6muXikzahxM+k5gEmVOh7xJ3Rw=","u6MdmVNzBUfDzMwv2LEJ6pXR8k0nnvpYRwOL8aApwP8="],"block_size":4096,"path":"content_new.js"}],"version":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Favicons

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 10, cookie 0x8, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.109424219543922
Encrypted:	false
SSDEEP:	24:LLWxh0GY/l1rWR1PmCx9fZjsBX+T6UwcE85fBh7n8C19ocOI9IgeOoeXc39pd743:0Bmw6fU1zBhLfXiIqgeOJctbE3
MD5:	01676E28FB36BE84AA66B2E9AFCC42D5
SHA1:	9947E5B33AF8765ABB69A36CB0039FA9B875D37B
SHA-256:	AF040641A6B852AF6256BF9CA58D457E50EFC87D6BEAF3EC5EF2E8CFF3D2DD47
SHA-512:	F645461123BF06A719FFC200BE0D21B9ACFA2E4162A6B9BEC983DB513BE19BA44DE4F23880A79A4C14B1DA4B7C5E05B8CBBF207F4F382AA4F59AC901C5225113
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g....._.c...~.2.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................s...;+...indexfavicon_bitmaps_icon_idfavico

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.5706718548072408
Encrypted:	false
SSDEEP:	96:+SRHWyejzH+bDoYysX0IxQzZkHtpVJNlYDLjGQLBE3CeE0kE8iR:+lhH+bDo3iN0Z2TVJkXBBE3ybU
MD5:	B98193A9B219573BB9C8A9EA666156A7
SHA1:	30F123364574A87BFC5DF445DDB588B871538924
SHA-256:	5F62E9C55FE8ADA56482E03BB9D02B6C2E3D53FD622B2819DBC59C3263A9CE99
SHA-512:	6C78355F4351EA2DF08AB61A9D90C1F8C8CB9AECE425A83B372E969B8EB2AFA53D54B41B67451DB00BC957358198DE0F2CD94010BDF6BF4FB8142C87F77BC144
Malicious:	false
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	0.21880421027789762
Encrypted:	false
SSDEEP:	3:qRtFlljq7A/mhWJFuQ3yy7IOWUOJwdweytllrE9SFcTp4AGbNCV9RUIz9:975fOsqd0Xi99pEYZ9
MD5:	5F13085FB68906AFDBF046ACDE7060B0
SHA1:	672FCA7C09A2332807398D89EC4C773F625CD0D2
SHA-256:	84DE483C1333220EC4CB453DCF8205BAA4FC9FB4E152F3DDC40690495956AA09
SHA-512:	039CBA1C75F721AF7A93D72E1421832D1B5F0D60E9665C22CE07BB2DD0608B996133D493B2DC6707BECF2BA455579A84D73208072DB37BF6B34F370E4AD5EDD2
Malicious:	false
Preview:	............@..X...&....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps Icons

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 12, cookie 0x3, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	3.6481491983412413
Encrypted:	false
SSDEEP:	384:aj9P0acAjlxQkQerPP/KbtIgam6IThj773pLLRKToaAu:adkKlxe2PP/SjF7NRKcC
MD5:	BFC796D91447B65CFFE9C1CBF0F76602
SHA1:	AC8E2D2B5FA5F7236388439A564DB617D50992C7
SHA-256:	6B48E190D354E780A68643808BB86D5CC430F6C175D9C3F5D66965862FD6FB1A
SHA-512:	8ED7612BCC0E9FD38AA009510B64AC27C9BF00ECDEFF7B65927E7EF62725ABD90664F90D0B23A6BF72B196CE334EF3BAD13549C93108B6F34D993E4A2C255C26
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...:.8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	408
Entropy (8bit):	5.270696806592947
Encrypted:	false
SSDEEP:	12:7Gv4Yeb8rcHEZrELFUt8OI/+O05LYeb8rcHEZrEZSJ:7E4Yeb8nZrExg8Oo+LYeb8nZrEZe
MD5:	3439C03EEB7E8966A604616179D73C9A
SHA1:	9B1603AE18816042AD7730F3E8B402104729AB16
SHA-256:	B8C227965E04BB120C421042F3B98062E6F6B5B46DD0D00B39C13B84FEE11A86
SHA-512:	1110FC1A826BDCA9345ED1E8226455083A8AB9E08C14A0007743863F7ECF70F5B9E1E5DAABFF928E1B7C6BB657771888EE05AB5FE3156BE798D4D7BE6743E079
Malicious:	false
Preview:	2024/12/12-06:42:03.138 17d8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/12/12-06:42:03.139 17d8 Recovering log #3.2024/12/12-06:42:03.140 17d8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	408
Entropy (8bit):	5.270696806592947
Encrypted:	false
SSDEEP:	12:7Gv4Yeb8rcHEZrELFUt8OI/+O05LYeb8rcHEZrEZSJ:7E4Yeb8nZrExg8Oo+LYeb8nZrEZe
MD5:	3439C03EEB7E8966A604616179D73C9A
SHA1:	9B1603AE18816042AD7730F3E8B402104729AB16
SHA-256:	B8C227965E04BB120C421042F3B98062E6F6B5B46DD0D00B39C13B84FEE11A86
SHA-512:	1110FC1A826BDCA9345ED1E8226455083A8AB9E08C14A0007743863F7ECF70F5B9E1E5DAABFF928E1B7C6BB657771888EE05AB5FE3156BE798D4D7BE6743E079
Malicious:	false
Preview:	2024/12/12-06:42:03.138 17d8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/12/12-06:42:03.139 17d8 Recovering log #3.2024/12/12-06:42:03.140 17d8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.173961554998426
Encrypted:	false
SSDEEP:	6:7isSlyq2P923oH+Tcwt8a2jMGIFUt8Oit/1Zmw+Oi++RkwO923oH+Tcwt8a2jMmd:7is+yv4Yeb8EFUt8OiD/+OirR5LYeb8N
MD5:	E7EAC47C8AE87C2CA4F4F5A3D2C61A53
SHA1:	7903857786579D988A6CD9DDEA258DE5D8966D1A
SHA-256:	F71AE88ECAB0C7F68F35F3E04932B3509553A361B01ADA5C74BDBF815F789F04
SHA-512:	0D128153EF3A062F9607D6A1F2C4FFDA9468224BF8085FC63C9237B76798434F3C9DBA10E988C2A2A5DEC35023C66B05967BA34C3BA34588C03A0D1C8D229DFC
Malicious:	false
Preview:	2024/12/12-06:41:59.532 1cc4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/12/12-06:41:59.534 1cc4 Recovering log #3.2024/12/12-06:41:59.538 1cc4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.173961554998426
Encrypted:	false
SSDEEP:	6:7isSlyq2P923oH+Tcwt8a2jMGIFUt8Oit/1Zmw+Oi++RkwO923oH+Tcwt8a2jMmd:7is+yv4Yeb8EFUt8OiD/+OirR5LYeb8N
MD5:	E7EAC47C8AE87C2CA4F4F5A3D2C61A53
SHA1:	7903857786579D988A6CD9DDEA258DE5D8966D1A
SHA-256:	F71AE88ECAB0C7F68F35F3E04932B3509553A361B01ADA5C74BDBF815F789F04
SHA-512:	0D128153EF3A062F9607D6A1F2C4FFDA9468224BF8085FC63C9237B76798434F3C9DBA10E988C2A2A5DEC35023C66B05967BA34C3BA34588C03A0D1C8D229DFC
Malicious:	false
Preview:	2024/12/12-06:41:59.532 1cc4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/12/12-06:41:59.534 1cc4 Recovering log #3.2024/12/12-06:41:59.538 1cc4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\16137cb8-4390-4a23-a88d-9926f37cda49.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\82798861-c418-40b1-9205-88f2fcb60aed.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\985fea03-a1fb-4f6e-b65b-d66a33ad5b7f.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1419
Entropy (8bit):	5.336110615415376
Encrypted:	false
SSDEEP:	24:YXsJZVMdmRdsBjZFRudFGRw6ma3yeesRds1yZFGJ/I3w6C1E6maPsQYhbxP7np+:YXs/tsbfc7leeEscgCgakhYhbx9+
MD5:	7D870539B6C4EE40FA5CFD87A3D4BFEC
SHA1:	F45BE07A3A05615856688219AFE6713EBABBAC2C
SHA-256:	73513F7A38830E47624257EF04A4F73BF174FD1FEBAC172AA416BF6470930F90
SHA-512:	90EABCE74F8CBB5FF1F96566E1293887BB3DB36C9E32F6C619D1EC7C9AAE504221CDEC2DD1468915A0A06A65E472C5446731838C89E665EBD9FA114F12261327
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492604479295","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492605127283","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"anonymization":["HAAAABUAAABodHRwczovL21pY3Jvc29mdC5jb20AAAA=",false],"server":"https://msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492606741506","port":443,"protocol_str":"quic"}],"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"anonymizatio

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State~RF4a034.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1419
Entropy (8bit):	5.336110615415376
Encrypted:	false
SSDEEP:	24:YXsJZVMdmRdsBjZFRudFGRw6ma3yeesRds1yZFGJ/I3w6C1E6maPsQYhbxP7np+:YXs/tsbfc7leeEscgCgakhYhbx9+
MD5:	7D870539B6C4EE40FA5CFD87A3D4BFEC
SHA1:	F45BE07A3A05615856688219AFE6713EBABBAC2C
SHA-256:	73513F7A38830E47624257EF04A4F73BF174FD1FEBAC172AA416BF6470930F90
SHA-512:	90EABCE74F8CBB5FF1F96566E1293887BB3DB36C9E32F6C619D1EC7C9AAE504221CDEC2DD1468915A0A06A65E472C5446731838C89E665EBD9FA114F12261327
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492604479295","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492605127283","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"anonymization":["HAAAABUAAABodHRwczovL21pY3Jvc29mdC5jb20AAAA=",false],"server":"https://msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492606741506","port":443,"protocol_str":"quic"}],"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"anonymizatio

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.7604022801966188
Encrypted:	false
SSDEEP:	48:TFkIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBk0:JkIEumQv8m1ccnvS6l
MD5:	47977F14B64086459C77E2A5C2301585
SHA1:	5EE4B8D69BBC9E2AA859E7CD3AB0A2902004C8D8
SHA-256:	EEECA386592F303B707127A69C3D725D26B90F540609216134AC5C7CF3F88F04
SHA-512:	12F3D3924B9C81AD6B6CE0D6042A5DC496556D4D0AF2933CEFAF3C73D6673BE4F4C407624C01C3E9465B62A307F8445AAECF40840FFCEF0F17F35C7CCE311800
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...D.........7............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF39432.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF3a0e4.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\a34c8049-650b-4d13-9ebd-3a34ce6d192e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1419
Entropy (8bit):	5.336110615415376
Encrypted:	false
SSDEEP:	24:YXsJZVMdmRdsBjZFRudFGRw6ma3yeesRds1yZFGJ/I3w6C1E6maPsQYhbxP7np+:YXs/tsbfc7leeEscgCgakhYhbx9+
MD5:	7D870539B6C4EE40FA5CFD87A3D4BFEC
SHA1:	F45BE07A3A05615856688219AFE6713EBABBAC2C
SHA-256:	73513F7A38830E47624257EF04A4F73BF174FD1FEBAC172AA416BF6470930F90
SHA-512:	90EABCE74F8CBB5FF1F96566E1293887BB3DB36C9E32F6C619D1EC7C9AAE504221CDEC2DD1468915A0A06A65E472C5446731838C89E665EBD9FA114F12261327
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492604479295","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492605127283","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"anonymization":["HAAAABUAAABodHRwczovL21pY3Jvc29mdC5jb20AAAA=",false],"server":"https://msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492606741506","port":443,"protocol_str":"quic"}],"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"anonymizatio

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\ba7cad97-cd96-4dbc-9fcd-93c4994f9eca.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\c27df45b-51a0-4eb2-88e3-24845d8480e3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1419
Entropy (8bit):	5.342219173845172
Encrypted:	false
SSDEEP:	24:YcFGJ/I3RdsW7ZVMdmRdsVpyZFRudFGRw6C1VdstiZ6ma3yeesw6maPsQYhbxP7c:YcgCzsW1tsVwfc7RstWleeBkhYhbx9+
MD5:	EE20595CB24D3D86BEB293F79141FC63
SHA1:	A4179A7405B67FCB85522AC5BB65E9A3529FCA99
SHA-256:	67F6D9715F0F92D48A3E22BE697FD11F1E7D6E2A94D9E3E35D4037A51D57312D
SHA-512:	85A72A27018E6718E0A8FDBEF4E2066695070D04754157E30400DE311619C7C2ADB7C942FFE1107AACB2E6A2C6648E8952D697D0D76F35377E11A033330E8D0B
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381069323691773","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381069326563156","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"anonymization":["HAAAABUAAABodHRwczovL2F6dXJlZWRnZS5uZXQAAAA=",false],"server":"https://edgeassetservice.azureedge.net","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13378570947163464","port":443,"protocol_str":"quic"}],"anonymization":["HAAAABUAAABodHRwc

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Nurturing\campaign_history

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8307038620100359
Encrypted:	false
SSDEEP:	24:TLSOUOq0afDdWec9sJlAz7Nm2z8ZI7J5fc:T+OUzDbg3eAzA2ztc
MD5:	B18967139991D9CA13DF7E493540A358
SHA1:	97411C14A8503C11248BE7404C9A79BA5146D40C
SHA-256:	CCC36F21951B4CB357C57DA0CCA1FFF3B4C7027230C10FD8BCB72C0AFF66141F
SHA-512:	473AE1B215B181785EA65F87E34155D5976C7AD1FA487B025E1C8711BFD127E99066990105CDA8D6F4804459118361217455AB1644803D22E6ECB164EEEFD630
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Pdf\pdfSQLite

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	6144
Entropy (8bit):	0.7760505461101054
Encrypted:	false
SSDEEP:	12:LBtiuWkKcwF11DM/FAf4ADO+sO7L0rqquSPY:LLiuW9LFPY/Wf4ADSo0rqquh
MD5:	7E2895005ED7CD5758533677884B0F86
SHA1:	701D63B7C29DBBAFD71A6687166FDC97A1D0C88A
SHA-256:	6649958C3624921F60AC5FC7A30E2E7FF5A3948D721FEB14CEE779EB0A27744A
SHA-512:	D0CC4B6FCF2B6B1BCCBDB168D0073BD4F2BF7A4E673F3A5C8E04574CF6B586A3FF246DE0A096AE69AC96980E09573C2225B9707F20847FB13C46E4F8A5BC944D
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9726
Entropy (8bit):	5.102944702127521
Encrypted:	false
SSDEEP:	192:stWkdRs5rsZihUkL23q82bV+FOxQA66W9OsaFIMYdPrYJ:stWOs5rfhTfbG8Qx6W9OsaTY6
MD5:	0EB32F4B94BBDBCD48E6809A02F7BCE3
SHA1:	0B7E0E5E1315C7A9F891CBDF67072107DF593F41
SHA-256:	434EB89A0F8DAD03051791B6272AF32C87B1CBE3DA2D1B6D96D501831E1A9252
SHA-512:	9A978E62F5B01D2482738B94E74AFA9E3385BB0F3CAC293EEF4F420D4F8F5A3840417A35EDA84756A4112BB22775C34933EC465CDEEB4152A0BB8682CFE4C0FD
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378477319709916","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":914,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":70,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"li

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF3de1c.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9726
Entropy (8bit):	5.102944702127521
Encrypted:	false
SSDEEP:	192:stWkdRs5rsZihUkL23q82bV+FOxQA66W9OsaFIMYdPrYJ:stWOs5rfhTfbG8Qx6W9OsaTY6
MD5:	0EB32F4B94BBDBCD48E6809A02F7BCE3
SHA1:	0B7E0E5E1315C7A9F891CBDF67072107DF593F41
SHA-256:	434EB89A0F8DAD03051791B6272AF32C87B1CBE3DA2D1B6D96D501831E1A9252
SHA-512:	9A978E62F5B01D2482738B94E74AFA9E3385BB0F3CAC293EEF4F420D4F8F5A3840417A35EDA84756A4112BB22775C34933EC465CDEEB4152A0BB8682CFE4C0FD
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378477319709916","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":914,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":70,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"li

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF41941.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9726
Entropy (8bit):	5.102944702127521
Encrypted:	false
SSDEEP:	192:stWkdRs5rsZihUkL23q82bV+FOxQA66W9OsaFIMYdPrYJ:stWOs5rfhTfbG8Qx6W9OsaTY6
MD5:	0EB32F4B94BBDBCD48E6809A02F7BCE3
SHA1:	0B7E0E5E1315C7A9F891CBDF67072107DF593F41
SHA-256:	434EB89A0F8DAD03051791B6272AF32C87B1CBE3DA2D1B6D96D501831E1A9252
SHA-512:	9A978E62F5B01D2482738B94E74AFA9E3385BB0F3CAC293EEF4F420D4F8F5A3840417A35EDA84756A4112BB22775C34933EC465CDEEB4152A0BB8682CFE4C0FD
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378477319709916","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":914,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":70,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"li

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF48e61.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9726
Entropy (8bit):	5.102944702127521
Encrypted:	false
SSDEEP:	192:stWkdRs5rsZihUkL23q82bV+FOxQA66W9OsaFIMYdPrYJ:stWOs5rfhTfbG8Qx6W9OsaTY6
MD5:	0EB32F4B94BBDBCD48E6809A02F7BCE3
SHA1:	0B7E0E5E1315C7A9F891CBDF67072107DF593F41
SHA-256:	434EB89A0F8DAD03051791B6272AF32C87B1CBE3DA2D1B6D96D501831E1A9252
SHA-512:	9A978E62F5B01D2482738B94E74AFA9E3385BB0F3CAC293EEF4F420D4F8F5A3840417A35EDA84756A4112BB22775C34933EC465CDEEB4152A0BB8682CFE4C0FD
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378477319709916","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":914,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":70,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"li

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF57d46.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9726
Entropy (8bit):	5.102944702127521
Encrypted:	false
SSDEEP:	192:stWkdRs5rsZihUkL23q82bV+FOxQA66W9OsaFIMYdPrYJ:stWOs5rfhTfbG8Qx6W9OsaTY6
MD5:	0EB32F4B94BBDBCD48E6809A02F7BCE3
SHA1:	0B7E0E5E1315C7A9F891CBDF67072107DF593F41
SHA-256:	434EB89A0F8DAD03051791B6272AF32C87B1CBE3DA2D1B6D96D501831E1A9252
SHA-512:	9A978E62F5B01D2482738B94E74AFA9E3385BB0F3CAC293EEF4F420D4F8F5A3840417A35EDA84756A4112BB22775C34933EC465CDEEB4152A0BB8682CFE4C0FD
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378477319709916","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":914,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":70,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"li

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	28366
Entropy (8bit):	5.557752462759402
Encrypted:	false
SSDEEP:	768:UYbMRE7pLGLPefWPv3fvm8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCrodGrweCHSpXM:UYbMRIcPefWPv3fvmu1jafMdDkty
MD5:	E584353D2B09994743109AA4F39D4C8E
SHA1:	2C4DD9D4AF1341D94489FA19541F908D84AC09EF
SHA-256:	0ACB41D3F3408B1B760E8AF15F9D3BEE53BC9CCD893CEDD8D21C29A1BA2B3EB4
SHA-512:	3B8DDDD6538EA0DBB21FDB03378DCE2ED1AE10EF4BFA4EA76D4D63B56ED7CF1E72FCA9D19456B45C8801AF62EC4E073005F1B8F67AC3494FA0124DCBF055AC0E
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378477319134059","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378477319134059","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF3de2c.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	28366
Entropy (8bit):	5.557752462759402
Encrypted:	false
SSDEEP:	768:UYbMRE7pLGLPefWPv3fvm8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCrodGrweCHSpXM:UYbMRIcPefWPv3fvmu1jafMdDkty
MD5:	E584353D2B09994743109AA4F39D4C8E
SHA1:	2C4DD9D4AF1341D94489FA19541F908D84AC09EF
SHA-256:	0ACB41D3F3408B1B760E8AF15F9D3BEE53BC9CCD893CEDD8D21C29A1BA2B3EB4
SHA-512:	3B8DDDD6538EA0DBB21FDB03378DCE2ED1AE10EF4BFA4EA76D4D63B56ED7CF1E72FCA9D19456B45C8801AF62EC4E073005F1B8F67AC3494FA0124DCBF055AC0E
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378477319134059","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378477319134059","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF4129a.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	28366
Entropy (8bit):	5.557752462759402
Encrypted:	false
SSDEEP:	768:UYbMRE7pLGLPefWPv3fvm8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCrodGrweCHSpXM:UYbMRIcPefWPv3fvmu1jafMdDkty
MD5:	E584353D2B09994743109AA4F39D4C8E
SHA1:	2C4DD9D4AF1341D94489FA19541F908D84AC09EF
SHA-256:	0ACB41D3F3408B1B760E8AF15F9D3BEE53BC9CCD893CEDD8D21C29A1BA2B3EB4
SHA-512:	3B8DDDD6538EA0DBB21FDB03378DCE2ED1AE10EF4BFA4EA76D4D63B56ED7CF1E72FCA9D19456B45C8801AF62EC4E073005F1B8F67AC3494FA0124DCBF055AC0E
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378477319134059","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378477319134059","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	322
Entropy (8bit):	4.127223682599505
Encrypted:	false
SSDEEP:	6:S85aEFljljljljlz/la3wWN3SY/BLaCSAUEEE:S+a8ljljljljlrow
MD5:	50585EFEFF16A18537861B09CCC68E85
SHA1:	5FAC19AC6655A0E38771CCF832DF37F4BC38CC5D
SHA-256:	218C575808BCB9F89770EDEC8D0D66731A0E3840005778DE13B5822C8DDF9574
SHA-512:	19F425797DBA2ED2C66D276A8B8D82BE4076EEB8367F2E65843DB6A41C89D2B6B99D88A660BC91C79639BCC9938B896885EA949625F07D4B6E8C3244C383865B
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f.................&f.................&f.................&f...............V..6f................next-map-id.1.Gnamespace-e68a36e4_a8eb_4d56_9300_dbb1f15d5209-https://www.med.unc.edu/.0V.e................V.e................V.e................V.e................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.03012185701879
Encrypted:	false
SSDEEP:	6:77yq2P923oH+TcwtrQMxIFUt8Ofu1z1Zmw+OslRkwO923oH+TcwtrQMFLJ:77yv4YebCFUt8OfkZ/+OwR5LYebtJ
MD5:	14639E9ED347EB00381CAAD203C1EBD4
SHA1:	EAA401BCDED31A9398780AF0F829099A65D3A708
SHA-256:	48E26F4675D20B00E54669D03DE2C9A590B927041D15632D9EEF1B5DA6E31DDA
SHA-512:	175B886ECE7FBD15D84C975271C2791D0C6FC256FF5FC2FE08689B230E002AA60E3B932B5F9ED5A98874AEF79F7F35F2A16025F02DD60B8E93D2A19B79171A0A
Malicious:	false
Preview:	2024/12/12-06:42:00.004 1cc4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/12/12-06:42:00.005 1cc4 Recovering log #3.2024/12/12-06:42:00.012 1cc4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.03012185701879
Encrypted:	false
SSDEEP:	6:77yq2P923oH+TcwtrQMxIFUt8Ofu1z1Zmw+OslRkwO923oH+TcwtrQMFLJ:77yv4YebCFUt8OfkZ/+OwR5LYebtJ
MD5:	14639E9ED347EB00381CAAD203C1EBD4
SHA1:	EAA401BCDED31A9398780AF0F829099A65D3A708
SHA-256:	48E26F4675D20B00E54669D03DE2C9A590B927041D15632D9EEF1B5DA6E31DDA
SHA-512:	175B886ECE7FBD15D84C975271C2791D0C6FC256FF5FC2FE08689B230E002AA60E3B932B5F9ED5A98874AEF79F7F35F2A16025F02DD60B8E93D2A19B79171A0A
Malicious:	false
Preview:	2024/12/12-06:42:00.004 1cc4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/12/12-06:42:00.005 1cc4 Recovering log #3.2024/12/12-06:42:00.012 1cc4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13378477321642865

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2287
Entropy (8bit):	3.494281780272058
Encrypted:	false
SSDEEP:	24:3bvKasye+2Il7R+ZFJxPVxMoE5YFJxPVxcki7+TshAfJlFSNjz4l7:3+asq2M2FvtxDFvtxni7nAfJlFt
MD5:	3BE2A4F657DD51D6EC6906E51BD03E62
SHA1:	1FFC77D6B3E7AA8D4B02CC49C205DBEA08B61EB4
SHA-256:	EFBE49B8D40DFD7FA3CA60C5BE441FB10410986EEFEF2DF79AED103F2C53F379
SHA-512:	DE1C2D8AA38889C18CBD175A44907D48232FB8A5BC97FE57312FE932DC17F4F49C9F48D4CD96262CE99839D56F20D5B5A7BE84CE799D6FF6BA869B2FACCBB822
Malicious:	false
Preview:	SNSS.......... .............. ......"... .............. .......... .......... .......... ....!..... .................................. ... 1..,...... $...e68a36e4_a8eb_4d56_9300_dbb1f15d5209...... .......... .....V............ ...... .......................... ....................5..0...... &...{98952893-68FF-4A5D-A164-705C709ED3DB}........ .......... ............................. ....i..d...... ....R...https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf......T...P...!...H...........................................................8...............@...............8..........3.).....3.)..x...............................X...................................................R...h.t.t.p.s.:././.w.w.w...m.e.d...u.n.c...e.d.u./.w.e.b.g.u.i.d.e./.w.p.-.c.o.n.t.e.n.t./.u.p.l.o.a.d.s./.s.i.t.e.s./.4.1.9./.2.0.1.9./.0.7./.A.d.o.b.e.P.D.F...p.d.f.....................................8.......0.......8.......................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Shortcuts

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.44194574462308833
Encrypted:	false
SSDEEP:	12:TLiNCcUMskMVcIWGhWxBzEXx7AAQlvsdFxOUwa5qgufTJpbZ75fOS:TLisVMnYPhIY5Qlvsd6UwccNp15fB
MD5:	B35F740AA7FFEA282E525838EABFE0A6
SHA1:	A67822C17670CCE0BA72D3E9C8DA0CE755A3421A
SHA-256:	5D599596D116802BAD422497CF68BE59EEB7A9135E3ED1C6BEACC48F73827161
SHA-512:	05C0D33516B2C1AB6928FB34957AD3E03CB0A8B7EEC0FD627DD263589655A16DEA79100B6CC29095C3660C95FD2AFB2E4DD023F0597BD586DD664769CABB67F8
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g....."....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	352
Entropy (8bit):	5.145014614903383
Encrypted:	false
SSDEEP:	6:7iAq2P923oH+Tcwt7Uh2ghZIFUt8OiqZmw+OiWkwO923oH+Tcwt7Uh2gnLJ:7iAv4YebIhHh2FUt8Oiq/+OiW5LYebIT
MD5:	1CBB99E20574F5BFE8441669B5E858A0
SHA1:	F141EC534FF8B235C77B7A7763FED2097320748D
SHA-256:	A57DCF5888D18961969F5904C6D08FA6DBEF5354127043B0CED78BBD97C9878D
SHA-512:	2B7280EB8F62BBADE42D82285EA34D0747A53CC7718EECE54C47A71A1D59FD848D0679EEBD892B0CA0BCE6A74834EC905EB6C7BBCD24E6EA32C058F05A6E8F1B
Malicious:	false
Preview:	2024/12/12-06:41:59.130 1804 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/12/12-06:41:59.131 1804 Recovering log #3.2024/12/12-06:41:59.131 1804 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	352
Entropy (8bit):	5.145014614903383
Encrypted:	false
SSDEEP:	6:7iAq2P923oH+Tcwt7Uh2ghZIFUt8OiqZmw+OiWkwO923oH+Tcwt7Uh2gnLJ:7iAv4YebIhHh2FUt8Oiq/+OiW5LYebIT
MD5:	1CBB99E20574F5BFE8441669B5E858A0
SHA1:	F141EC534FF8B235C77B7A7763FED2097320748D
SHA-256:	A57DCF5888D18961969F5904C6D08FA6DBEF5354127043B0CED78BBD97C9878D
SHA-512:	2B7280EB8F62BBADE42D82285EA34D0747A53CC7718EECE54C47A71A1D59FD848D0679EEBD892B0CA0BCE6A74834EC905EB6C7BBCD24E6EA32C058F05A6E8F1B
Malicious:	false
Preview:	2024/12/12-06:41:59.130 1804 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/12/12-06:41:59.131 1804 Recovering log #3.2024/12/12-06:41:59.131 1804 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Cache\Cache_Data\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	modified
Size (bytes):	270336
Entropy (8bit):	0.0018238520723782249
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zEfl3Kllt:/M/xT02z+K/t
MD5:	EE409C3087DF961A889E3DCEB4FFEAED
SHA1:	A23076058721D7FB5B79CC6EE3805B78F948C5C5
SHA-256:	FB471BD2AE874867387932039DE72E6CD271BDDA04C28D97CFFD4109C80997D4
SHA-512:	1C610A6E3C1B25F5CB53B637BB680B1DFDBB204294F0C9FCDB0583FDBCD6A5AAD52A19D29B4099810FFDD52A7B1A1DECE478D24972953BA568626297B7F640F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	434
Entropy (8bit):	5.153404472499709
Encrypted:	false
SSDEEP:	12:7xv4YebvqBQFUt8OD/+O3uFFz5LYebvqBvJ:794YebvZg8OneFFlLYebvk
MD5:	22DBD1386B57C7F5881FBB2E82A5E906
SHA1:	F808F80DF0BDD8F196FE0EABF5F84603359FD173
SHA-256:	4696AB83B27838E297C79149C87BC6E2847B376CD6009F0909FFEBC1EAC73F97
SHA-512:	3F1E6283D87AAA09DE5A7A913C6C8D2EFC373841F7F2867FA7ED6CEEBA249BB04C5D91AB0AD42417913030216AB379BBCD41DD40B404CF50C39DD80B659D1CEE
Malicious:	false
Preview:	2024/12/12-06:42:00.018 1ce0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/12/12-06:42:00.019 1ce0 Recovering log #3.2024/12/12-06:42:00.023 1ce0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	434
Entropy (8bit):	5.153404472499709
Encrypted:	false
SSDEEP:	12:7xv4YebvqBQFUt8OD/+O3uFFz5LYebvqBvJ:794YebvZg8OneFFlLYebvk
MD5:	22DBD1386B57C7F5881FBB2E82A5E906
SHA1:	F808F80DF0BDD8F196FE0EABF5F84603359FD173
SHA-256:	4696AB83B27838E297C79149C87BC6E2847B376CD6009F0909FFEBC1EAC73F97
SHA-512:	3F1E6283D87AAA09DE5A7A913C6C8D2EFC373841F7F2867FA7ED6CEEBA249BB04C5D91AB0AD42417913030216AB379BBCD41DD40B404CF50C39DD80B659D1CEE
Malicious:	false
Preview:	2024/12/12-06:42:00.018 1ce0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/12/12-06:42:00.019 1ce0 Recovering log #3.2024/12/12-06:42:00.023 1ce0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\0053901a-db2a-4c62-8799-316f78fd725a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\05e7fa65-92d7-44bd-a420-0b7c8017dded.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.842082263530856
Encrypted:	false
SSDEEP:	3:YLb9N+eAXRfHDH2LS7PMVKJq0nMb1KKqkomn1KKyRY:YHpoeS7PMVKJTnMRKXkh1KF+
MD5:	ABE81C38891A875B52127ACE9C314105
SHA1:	8EDEBDDAD493CF02D3986A664A4AD1C71CCEBB5F
SHA-256:	6D398F9EB5969D487B57E1C3E1EDDE58660545A7CE404F6DA40C8738B56B6177
SHA-512:	B90DC0E50262ECB05FE1989FA3797C51DF92C83BE94F28FE020994ED6F0E1365EB5B9A0ADA68FCFD46DADEDB6F08FA0E57FF91AA12ED88C3D9AE112FF74329F2
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\5a2c113a-a6a3-410e-bf50-780bf29d5321.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\8493b38e-00a6-4c13-bd26-32bbf0625856.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.842082263530856
Encrypted:	false
SSDEEP:	3:YLb9N+eAXRfHDH2LS7PMVKJq0nMb1KKqkomn1KKyRY:YHpoeS7PMVKJTnMRKXkh1KF+
MD5:	ABE81C38891A875B52127ACE9C314105
SHA1:	8EDEBDDAD493CF02D3986A664A4AD1C71CCEBB5F
SHA-256:	6D398F9EB5969D487B57E1C3E1EDDE58660545A7CE404F6DA40C8738B56B6177
SHA-512:	B90DC0E50262ECB05FE1989FA3797C51DF92C83BE94F28FE020994ED6F0E1365EB5B9A0ADA68FCFD46DADEDB6F08FA0E57FF91AA12ED88C3D9AE112FF74329F2
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF3a0e4.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Trust Tokens

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 9, cookie 0x7, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.3886039372934488
Encrypted:	false
SSDEEP:	24:TLqEeWOT/kIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:T2EeWOT/nDtX5nDOvyKDhU1cSB
MD5:	DEA619BA33775B1BAEEC7B32110CB3BD
SHA1:	949B8246021D004B2E772742D34B2FC8863E1AAA
SHA-256:	3669D76771207A121594B439280A67E3A6B1CBAE8CE67A42C8312D33BA18854B
SHA-512:	7B9741E0339B30D73FACD4670A9898147BE62B8F063A59736AFDDC83D3F03B61349828F2AE88F682D42C177AE37E18349FD41654AEBA50DDF10CD6DC70FA5879
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...}.....$.X..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	3.4921535629071894
Encrypted:	false
SSDEEP:	3:S8ltHlS+QUl1ASEGhTFljl:S85aEFljl
MD5:	69449520FD9C139C534E2970342C6BD8
SHA1:	230FE369A09DEF748F8CC23AD70FD19ED8D1B885
SHA-256:	3F2E9648DFDB2DDB8E9D607E8802FEF05AFA447E17733DD3FD6D933E7CA49277
SHA-512:	EA34C39AEA13B281A6067DE20AD0CDA84135E70C97DB3CDD59E25E6536B19F7781E5FC0CA4A11C3618D43FC3BD3FBC120DD5C1C47821A248B8AD351F9F4E6367
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	422
Entropy (8bit):	5.235460404579633
Encrypted:	false
SSDEEP:	12:7QYyv4YebvqBZFUt8OyFZ/+OcuzR5LYebvqBaJ:7QB4Yebvyg8OCtHLYebvL
MD5:	5129951A4333A5781058CA0333F5AF03
SHA1:	99ED972C6BFA19D1BEDDA9D79DA110EC92EF34BB
SHA-256:	F3514C1452DD4304D4165A5C85105DE70F24065652837A67B3B2663302B22A24
SHA-512:	F807F213F9DF3AA0AF4D31E3487833FDC904E5931848F4DD337AD011AED7A3B5F1DA87C7A775365F3EF7E4E06F2C2F91842A8ECFCA04DB1C89BD08007E7FEC6C
Malicious:	false
Preview:	2024/12/12-06:42:17.864 1cc4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/12/12-06:42:17.865 1cc4 Recovering log #3.2024/12/12-06:42:17.868 1cc4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	422
Entropy (8bit):	5.235460404579633
Encrypted:	false
SSDEEP:	12:7QYyv4YebvqBZFUt8OyFZ/+OcuzR5LYebvqBaJ:7QB4Yebvyg8OCtHLYebvL
MD5:	5129951A4333A5781058CA0333F5AF03
SHA1:	99ED972C6BFA19D1BEDDA9D79DA110EC92EF34BB
SHA-256:	F3514C1452DD4304D4165A5C85105DE70F24065652837A67B3B2663302B22A24
SHA-512:	F807F213F9DF3AA0AF4D31E3487833FDC904E5931848F4DD337AD011AED7A3B5F1DA87C7A775365F3EF7E4E06F2C2F91842A8ECFCA04DB1C89BD08007E7FEC6C
Malicious:	false
Preview:	2024/12/12-06:42:17.864 1cc4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/12/12-06:42:17.865 1cc4 Recovering log #3.2024/12/12-06:42:17.868 1cc4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.232313349002846
Encrypted:	false
SSDEEP:	6:7iETu83+q2P923oH+TcwtpIFUt8OiEgZZmw+OiEd7VkwO923oH+Tcwta/WLJ:7iETiv4YebmFUt8OiEgZ/+OiEz5LYeb7
MD5:	D105DBE018B936E2750BA2F15F6EE6B1
SHA1:	3A0F9700477FF7923B517694283B116B83FD0597
SHA-256:	9879457600FEF08A3AB72887A06BFE38951A3C1922AB63101288AA806CC40875
SHA-512:	BD5BDF382053B9C71B74FCA85D3CDFFE1FF5B7099DA9AC4F74D0864B28075E0313EABF8358C84F8CBAA05452ADA687C6625AFAC04BFEA31400B30EC247D15391
Malicious:	false
Preview:	2024/12/12-06:41:59.206 1988 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/12/12-06:41:59.207 1988 Recovering log #3.2024/12/12-06:41:59.208 1988 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.232313349002846
Encrypted:	false
SSDEEP:	6:7iETu83+q2P923oH+TcwtpIFUt8OiEgZZmw+OiEd7VkwO923oH+Tcwta/WLJ:7iETiv4YebmFUt8OiEgZ/+OiEz5LYeb7
MD5:	D105DBE018B936E2750BA2F15F6EE6B1
SHA1:	3A0F9700477FF7923B517694283B116B83FD0597
SHA-256:	9879457600FEF08A3AB72887A06BFE38951A3C1922AB63101288AA806CC40875
SHA-512:	BD5BDF382053B9C71B74FCA85D3CDFFE1FF5B7099DA9AC4F74D0864B28075E0313EABF8358C84F8CBAA05452ADA687C6625AFAC04BFEA31400B30EC247D15391
Malicious:	false
Preview:	2024/12/12-06:41:59.206 1988 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/12/12-06:41:59.207 1988 Recovering log #3.2024/12/12-06:41:59.208 1988 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	0.0033616753448762224
Encrypted:	false
SSDEEP:	3:ImtVuAZ+R0te:IiVuAAKte
MD5:	730C82C6ED286748FE6432869AC250B4
SHA1:	25873EB47A650471B142514965DCD5364DB878FB
SHA-256:	342852CA24380721B12E0AC00E9D50A87785B387ABF3B56A7B911EA8E1F99877
SHA-512:	0BB4683737424E7B381291C16D0AA3476770455E26C4AB22D5AA23BE2BFFE357A0E0B3BEF64C7DF96AE7DDDCB793AC30631282C539B3472E13200213C54CB0A7
Malicious:	false
Preview:	VLnk.....?......?......+................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 10, database pages 91, cookie 0x36, schema 4, UTF-8, version-valid-for 10
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.2651128148148352
Encrypted:	false
SSDEEP:	384:8/2qOB1nxCkMOSAELyKOMq+8yC8F/YfU5m+OlTLVumi:Bq+n0JO9ELyKOMq+8y9/Ow5
MD5:	1AAE3248B18A9A1872F01ECA5200B2B3
SHA1:	04FA632F3767442AAE2C0329DA0A244B37306945
SHA-256:	3DEFEF47012747984702052302DEC431D1B4FE0A543899E8BD7AEE9505B31F2C
SHA-512:	29DB66F63A9E1FF183456D7404A9FA737ADE69663B7A2D4ED353D54ACE6B069E4C8C9989832EE36B41F8E677115F842837A338BFBB4BD8AAF9CC801AB79D656C
Malicious:	false
Preview:	SQLite format 3......@ .......[...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 10, cookie 0x7, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.41235120905181716
Encrypted:	false
SSDEEP:	48:Tnj7dojKsKmjKZKAsjZNOjAhts3N8g1j3UcB:v7doKsKuKZKlZNmu46yjx
MD5:	981F351994975A68A0DD3ECE5E889FD0
SHA1:	080D3386290A14A68FCE07709A572AF98097C52D
SHA-256:	3F0C0B2460E0AA2A94E0BF79C8944F2F4835D2701249B34A13FD200F7E5316D7
SHA-512:	C5930797C46EEC25D356BAEB6CFE37E9F462DEE2AE8866343B2C382DBAD45C1544EF720D520C4407F56874596B31EFD6822B58A9D3DAE6F85E47FF802DBAA20B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......w..g...........M...w..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\a4c3bfcb-9592-49cc-a482-2869548602dc.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	12500
Entropy (8bit):	5.1986397637166775
Encrypted:	false
SSDEEP:	192:stWJ99QTryDigabatSuyRs5rsZihUkL23q82bV+FOxQA66W9OsaFIMYdPrYJ:stWPGKSu2s5rfhTfbG8Qx6W9OsaTY6
MD5:	6B3D472E56971CE11079B6B007274612
SHA1:	053F16FF70D42A24A26F9AD9AA9847E62F05E343
SHA-256:	6F8605D7417AB28122D2CE9363CD61DAEF0443DB458BE4E447C40B9B1D9FBBBD
SHA-512:	A2C0B13D1C3E4029FA428CF03CF878B13F0ED575F0C7E812077AC0FFC32955E5D32945C443B36D7B1846641E17A4D85E1FF3B716B3557095265AF42CB9A99463
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378477319709916","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3951), with CRLF line terminators
Category:	dropped
Size (bytes):	11755
Entropy (8bit):	5.190465908239046
Encrypted:	false
SSDEEP:	192:hH4vrmqRBB4W4PoiUDNaxvR5FCHFcoaSbqGEDI:hH4vrmUB6W4jR3GaSbqGEDI
MD5:	07301A857C41B5854E6F84CA00B81EA0
SHA1:	7441FC1018508FF4F3DBAA139A21634C08ED979C
SHA-256:	2343C541E095E1D5F202E8D2A0807113E69E1969AF8E15E3644C51DB0BF33FBF
SHA-512:	00ADE38E9D2F07C64648202F1D5F18A2DFB2781C0517EAEBCD567D8A77DBB7CB40A58B7C7D4EC03336A63A20D2E11DD64448F020C6FF72F06CA870AA2B4765E0
Malicious:	false
Preview:	{.. "DefaultCohort": {.. "21f3388b-c2a5-4791-8f6e-a4cad6d17f4f.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.BingHomePage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Covid.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Finance.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Jobs.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.KnowledgeCard.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Local.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NTP3PCLICK.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NotifySearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Recipe.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.SearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Sports.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Travel.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Weather.Bubble": 1,.. "2cb2db96-3bd0-403e-abe2-9269b3761041.Bubble": 1,.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\c1a41f3a-f954-411c-8270-05e2ed2d3412.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40470
Entropy (8bit):	5.561238757917022
Encrypted:	false
SSDEEP:	768:UxBMfE7pLGLPFfWPv3fqm8F1+UoAYDCx9Tuqh0VfUC9xbog/OV7W0roGGrwksbV6:UxBMfIcPFfWPv3fqmu1jaSW0MGDRZhv4
MD5:	D5A634DA33B759E27948223E8E00CAF9
SHA1:	31D83DA004CB5F68C82B47A1E1412D7C721B208D
SHA-256:	7BEBCFE80AD357E5F6011D1C37567172589DBFBCD6BE5CA1E7223830F3FFA7F5
SHA-512:	F0FBFAEAEAF3191A95F50551F98FF9FCB45F9F16C653EE06360F4D72A7971F0E092009BE891785D0E3DDD8C94E7626B8F8F8EFF013660E0EE54FDFD678369737
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378477319134059","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378477319134059","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\c653d9cd-9395-43a4-8519-7b6d05d576a0.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9726
Entropy (8bit):	5.102944702127521
Encrypted:	false
SSDEEP:	192:stWkdRs5rsZihUkL23q82bV+FOxQA66W9OsaFIMYdPrYJ:stWOs5rfhTfbG8Qx6W9OsaTY6
MD5:	0EB32F4B94BBDBCD48E6809A02F7BCE3
SHA1:	0B7E0E5E1315C7A9F891CBDF67072107DF593F41
SHA-256:	434EB89A0F8DAD03051791B6272AF32C87B1CBE3DA2D1B6D96D501831E1A9252
SHA-512:	9A978E62F5B01D2482738B94E74AFA9E3385BB0F3CAC293EEF4F420D4F8F5A3840417A35EDA84756A4112BB22775C34933EC465CDEEB4152A0BB8682CFE4C0FD
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378477319709916","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":914,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":70,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"li

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\d5f3c1d4-693c-464d-adcd-ac4c3fb13eb7.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\databases\Databases.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x4, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.3410017321959524
Encrypted:	false
SSDEEP:	12:TLiqi/nGb0EiDFIlTSFbyrKZb9YwFOqAyl+FxOUwa5qgufTJpbZ75fOSG:TLiMNiD+lZk/Fj+6UwccNp15fBG
MD5:	98643AF1CA5C0FE03CE8C687189CE56B
SHA1:	ECADBA79A364D72354C658FD6EA3D5CF938F686B
SHA-256:	4DC3BF7A36AB5DA80C0995FAF61ED0F96C4DE572F2D6FF9F120F9BC44B69E444
SHA-512:	68B69FCE8EF5AB1DDA2994BA4DB111136BD441BC3EFC0251F57DC20A3095B8420669E646E2347EAB7BAF30CACA4BCF74BD88E049378D8DE57DE72E4B8A5FF74B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....P....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\f8d70578-557d-42e6-a110-29c5eb149602.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13258
Entropy (8bit):	5.269283447019631
Encrypted:	false
SSDEEP:	384:stWPGKSu2s5rfhQbLTX6fbG8Qx6WbOJlaTY6:sYOxu3rf/bG7xoaTY6
MD5:	40324277047E25DE3328021D4B037B91
SHA1:	BE88F2C0BA2D65588E7052C9274CC23A804824D0
SHA-256:	172956C6894ABB29AA415C42217EB3A39FE4782245D7E6B8C6DE67720E3B188A
SHA-512:	684E0134DE96A2BB50352A8A7F4E4B33A78EC1892D18CF15AE1E32A75AAD1CC745962CD719DF5D38DD8C33C5EC08641A58E6DCBFD8A168FF9BF9B7012AB0E718
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378477319709916","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\fac15806-4025-4be3-b408-5ae45f6a890d.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\fad98307-70f7-4f96-8126-455605f718de.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13258
Entropy (8bit):	5.269621811176907
Encrypted:	false
SSDEEP:	384:stWPGKSu2s5rfhQbLTX6fbG8Qx6WmOJlaTY6:sYOxu3rf/bG7xjaTY6
MD5:	6DFD844214183E7BB4A22B7516CDE8F6
SHA1:	EFA9C46159149B6392958C70C7975849B2A616C7
SHA-256:	73442A2BF1236F4F2D6C97EEF58D417EF23ABC8516579204F671B3C4C0889A6A
SHA-512:	23A601C92A568FD05F39C73231D558930A0379D01F65A47ED05045CB4BB842B493D749041E6B9C598FB7C80D9C5EBB974E23A23B0F09764CF4EC829CBEB46902
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378477319709916","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.05351835670094611
Encrypted:	false
SSDEEP:	6:GtStut5nkYStut5nOKR9XCChslotGLNl0ml/Vl/XoQXEl:MtFkmtFfLpEjVl/PvoQ
MD5:	DCDF9BDFFFC8E81D726EC91142601794
SHA1:	4D5EE08D6A31EC440413C3413DFE7C8E7784BBCF
SHA-256:	E7774303576BB560A5FBF15AEBBC6E8319B08A45AD9BA7770CC05ECF2C9A9922
SHA-512:	745FD5359791789F8FF584DF8BCCB2266B6ED75FBCD92EA3694F88CC5662343D3E7CC5A964A3C7CFB1A7CD9C1A45009A07275697BA05EF2F95B037C41CA44B0E
Malicious:	false
Preview:	..-..............................4..}..)...R...-..............................4..}..)...R.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	86552
Entropy (8bit):	0.8722913111483762
Encrypted:	false
SSDEEP:	48:ywXzx8I/02TlO+scbX+on9VAKAFXX+hV2VAKAFXX+n8xOqVAKAFXX+vqnUYVAKA2:jjx7/02b2dNshTNsOO5NsvlNsEO6ggu
MD5:	24DE076C3276A9141673D66AB0C7378B
SHA1:	C4453EC476F0A08F67CF7C7814E14B18313284F3
SHA-256:	5E3799930C475D88DF1EAD494A72D5602A135E93AB71BC28FF3B1D860EA02938
SHA-512:	7169AFF5EABAD45C8672B8D3C775181CDB566E91B922D6F2F892B8456C0751C3EDBDAF14A3728607F92D7B641A823F9F8C06880652FA38FB80B6976ABC524194
Malicious:	false
Preview:	7....-...........4..}...8.?L.0.........4..}........C.SQLite format 3......@ ..........................................................................j.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	723
Entropy (8bit):	3.2126747356168392
Encrypted:	false
SSDEEP:	12:Wlc8NOuuuuuuuuuuuuuuuuuuuuuuuIkJU86cl:iDgo
MD5:	F7C87F8601E387809216AACD8AAF91F7
SHA1:	29BF665CA4927A0B8B318BDEBDDEB4604EC9E4AB
SHA-256:	AE1E427C5EA379D1498D158A2BAC229F4C5001DF6D90D1B48C8A0A75A917ADD8
SHA-512:	62F5F77BA4CAC64BCEBDDED8E15BE2AEC87F5D659D5EBC523E9B8450F994B88A573770164BE50F6E1C84A1708739DD60DA84E6D4A51C1821C72E060364E6F42C
Malicious:	false
Preview:	A..r.................20_1_1...1.,U.................20_1_1...1..}0................39_config..........6.....n ....1u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...................0................39_config..........6.....n ...1V.e................V.e................V.e................V.e................V.e................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.252277388105254
Encrypted:	false
SSDEEP:	6:7iwL+q2P923oH+TcwtfrK+IFUt8Oiw7Zmw+OiwLVkwO923oH+TcwtfrUeLJ:7iVv4Yeb23FUt8Oig/+OiI5LYeb3J
MD5:	67D06D06AFC415E2AE7A766B3E4EF226
SHA1:	94743A55D3ED48A5C758AD1D7720D7C64E172D72
SHA-256:	C72E77D0A64C4F8F5F7A4E541323540BF4C165BD5559E2E73BD8D667DAB766EA
SHA-512:	CC19BF3D51058D987325AE6A0B1C84508B58781D3C66B0451902C84AD3C0018617065B1694F4AF80976F6C6BD62A95AD9D6DDB4C690D782EDB02D95BDC9E5CD1
Malicious:	false
Preview:	2024/12/12-06:41:59.712 17d8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2024/12/12-06:41:59.712 17d8 Recovering log #3.2024/12/12-06:41:59.712 17d8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.252277388105254
Encrypted:	false
SSDEEP:	6:7iwL+q2P923oH+TcwtfrK+IFUt8Oiw7Zmw+OiwLVkwO923oH+TcwtfrUeLJ:7iVv4Yeb23FUt8Oig/+OiI5LYeb3J
MD5:	67D06D06AFC415E2AE7A766B3E4EF226
SHA1:	94743A55D3ED48A5C758AD1D7720D7C64E172D72
SHA-256:	C72E77D0A64C4F8F5F7A4E541323540BF4C165BD5559E2E73BD8D667DAB766EA
SHA-512:	CC19BF3D51058D987325AE6A0B1C84508B58781D3C66B0451902C84AD3C0018617065B1694F4AF80976F6C6BD62A95AD9D6DDB4C690D782EDB02D95BDC9E5CD1
Malicious:	false
Preview:	2024/12/12-06:41:59.712 17d8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2024/12/12-06:41:59.712 17d8 Recovering log #3.2024/12/12-06:41:59.712 17d8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	787
Entropy (8bit):	4.059252238767438
Encrypted:	false
SSDEEP:	12:G0nYUtTNop//z3p/Uz0RuWlJhC+lvBavRtin01zvZDEtlkyBrgxvB1ys:G0nYUtypD3RUovhC+lvBOL+t3IvB8s
MD5:	D8D8899761F621B63AD5ED6DF46D22FE
SHA1:	23E6A39058AB3C1DEADC0AF2E0FFD0D84BB7F1BE
SHA-256:	A5E0A78EE981FB767509F26021E1FA3C506F4E86860946CAC1DC4107EB3B3813
SHA-512:	4F89F556138C0CF24D3D890717EB82067C5269063C84229E93F203A22028782902FA48FB0154F53E06339F2FDBE35A985CE728235EA429D8D157090D25F15A4E
Malicious:	false
Preview:	.h.6.................__global... .t...................__global... .9..b.................33_..........................33_........v.................21_.....vuNX.................21_.....<...................20_.....,.1..................19_.....QL.s.................18_.....<.J\|.................37_...... .A.................38_..........................39_........].................20_.....Owa..................20_.....`..N.................19_.....D8.X.................18_......`...................37_..........................38_......\e..................39_.....dz.\|.................9_.....'\c..................9_.......f-.................__global... .\|.&R.................__global... ./....................__global... ..T...................__global... ...G..................__global... .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	342
Entropy (8bit):	5.243213747364665
Encrypted:	false
SSDEEP:	6:7i5yHN+q2P923oH+TcwtfrzAdIFUt8Oi5yHZZmw+OiSVkwO923oH+TcwtfrzILJ:7i57v4Yeb9FUt8Oi5e/+Oiq5LYeb2J
MD5:	CFC5A047350202803CB303A62E44F773
SHA1:	5A5360D9F17A0D14E783FD4BC99662CD354E76BC
SHA-256:	2894F6970EF3C59DFC8C12EB05AF0EC802FE82612583E514A65C8BC0F68F2B04
SHA-512:	B4AD1462EBD83D16646ED6478B447CD389438017C2051B8FE680A37232D7FBFCA2CF3EAEA2A0227AA4B6D12877B120F5563C60A71D84AEA8B3374A7E7468FA12
Malicious:	false
Preview:	2024/12/12-06:41:59.709 17d8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2024/12/12-06:41:59.709 17d8 Recovering log #3.2024/12/12-06:41:59.710 17d8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	342
Entropy (8bit):	5.243213747364665
Encrypted:	false
SSDEEP:	6:7i5yHN+q2P923oH+TcwtfrzAdIFUt8Oi5yHZZmw+OiSVkwO923oH+TcwtfrzILJ:7i57v4Yeb9FUt8Oi5e/+Oiq5LYeb2J
MD5:	CFC5A047350202803CB303A62E44F773
SHA1:	5A5360D9F17A0D14E783FD4BC99662CD354E76BC
SHA-256:	2894F6970EF3C59DFC8C12EB05AF0EC802FE82612583E514A65C8BC0F68F2B04
SHA-512:	B4AD1462EBD83D16646ED6478B447CD389438017C2051B8FE680A37232D7FBFCA2CF3EAEA2A0227AA4B6D12877B120F5563C60A71D84AEA8B3374A7E7468FA12
Malicious:	false
Preview:	2024/12/12-06:41:59.709 17d8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2024/12/12-06:41:59.709 17d8 Recovering log #3.2024/12/12-06:41:59.710 17d8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	120
Entropy (8bit):	3.32524464792714
Encrypted:	false
SSDEEP:	3:tbloIlrJFlXnpQoWcNylRjlgbYnPdJiG6R7lZAUAl:tbdlrYoWcV0n1IGi7kBl
MD5:	A397E5983D4A1619E36143B4D804B870
SHA1:	AA135A8CC2469CFD1EF2D7955F027D95BE5DFBD4
SHA-256:	9C70F766D3B84FC2BB298EFA37CC9191F28BEC336329CC11468CFADBC3B137F4
SHA-512:	4159EA654152D2810C95648694DD71957C84EA825FCCA87B36F7E3282A72B30EF741805C610C5FA847CA186E34BDE9C289AAA7B6931C5B257F1D11255CD2A816
Malicious:	false
Preview:	C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t.\.E.d.g.e.\.A.p.p.l.i.c.a.t.i.o.n.\.m.s.e.d.g.e...e.x.e.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.7192945256669794
Encrypted:	false
SSDEEP:	3:NYLFRQI:ap2I
MD5:	BF16C04B916ACE92DB941EBB1AF3CB18
SHA1:	FA8DAEAE881F91F61EE0EE21BE5156255429AA8A
SHA-256:	7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
SHA-512:	F0B7DF5517596B38D57C57B5777E008D6229AB5B1841BBE74602C77EEA2252BF644B8650C7642BD466213F62E15CC7AB5A95B28E26D3907260ED1B96A74B65FB
Malicious:	false
Preview:	117.0.2045.47

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090763654726597
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMPwuF9hDO6vP6O+Otbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEL6vtbz8hu3VlXr4CRo1
MD5:	6F7C2401A8E39B5236DBCFE9E784785A
SHA1:	3A023B64F8562F2D958E5B7F11C9617D884187D4
SHA-256:	6219F90D8D3DDC61C0E32083D239152C089D5265BA85B6672C11A237D4A23AFC
SHA-512:	FA281CE658CB3EC2A4000F50C7DFD74B1B9CE59474F10CEACB9B29A9F0C97EC0521E3A989D1FC0D24115912D9C4AFF50274BE89E101A4991495A6E8E4FBEBAC7
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF37a23.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090763654726597
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMPwuF9hDO6vP6O+Otbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEL6vtbz8hu3VlXr4CRo1
MD5:	6F7C2401A8E39B5236DBCFE9E784785A
SHA1:	3A023B64F8562F2D958E5B7F11C9617D884187D4
SHA-256:	6219F90D8D3DDC61C0E32083D239152C089D5265BA85B6672C11A237D4A23AFC
SHA-512:	FA281CE658CB3EC2A4000F50C7DFD74B1B9CE59474F10CEACB9B29A9F0C97EC0521E3A989D1FC0D24115912D9C4AFF50274BE89E101A4991495A6E8E4FBEBAC7
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF37a32.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090763654726597
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMPwuF9hDO6vP6O+Otbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEL6vtbz8hu3VlXr4CRo1
MD5:	6F7C2401A8E39B5236DBCFE9E784785A
SHA1:	3A023B64F8562F2D958E5B7F11C9617D884187D4
SHA-256:	6219F90D8D3DDC61C0E32083D239152C089D5265BA85B6672C11A237D4A23AFC
SHA-512:	FA281CE658CB3EC2A4000F50C7DFD74B1B9CE59474F10CEACB9B29A9F0C97EC0521E3A989D1FC0D24115912D9C4AFF50274BE89E101A4991495A6E8E4FBEBAC7
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF37d3f.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090763654726597
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMPwuF9hDO6vP6O+Otbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEL6vtbz8hu3VlXr4CRo1
MD5:	6F7C2401A8E39B5236DBCFE9E784785A
SHA1:	3A023B64F8562F2D958E5B7F11C9617D884187D4
SHA-256:	6219F90D8D3DDC61C0E32083D239152C089D5265BA85B6672C11A237D4A23AFC
SHA-512:	FA281CE658CB3EC2A4000F50C7DFD74B1B9CE59474F10CEACB9B29A9F0C97EC0521E3A989D1FC0D24115912D9C4AFF50274BE89E101A4991495A6E8E4FBEBAC7
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3a401.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090763654726597
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMPwuF9hDO6vP6O+Otbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEL6vtbz8hu3VlXr4CRo1
MD5:	6F7C2401A8E39B5236DBCFE9E784785A
SHA1:	3A023B64F8562F2D958E5B7F11C9617D884187D4
SHA-256:	6219F90D8D3DDC61C0E32083D239152C089D5265BA85B6672C11A237D4A23AFC
SHA-512:	FA281CE658CB3EC2A4000F50C7DFD74B1B9CE59474F10CEACB9B29A9F0C97EC0521E3A989D1FC0D24115912D9C4AFF50274BE89E101A4991495A6E8E4FBEBAC7
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF48d29.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090763654726597
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMPwuF9hDO6vP6O+Otbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEL6vtbz8hu3VlXr4CRo1
MD5:	6F7C2401A8E39B5236DBCFE9E784785A
SHA1:	3A023B64F8562F2D958E5B7F11C9617D884187D4
SHA-256:	6219F90D8D3DDC61C0E32083D239152C089D5265BA85B6672C11A237D4A23AFC
SHA-512:	FA281CE658CB3EC2A4000F50C7DFD74B1B9CE59474F10CEACB9B29A9F0C97EC0521E3A989D1FC0D24115912D9C4AFF50274BE89E101A4991495A6E8E4FBEBAC7
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF4f029.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090763654726597
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMPwuF9hDO6vP6O+Otbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEL6vtbz8hu3VlXr4CRo1
MD5:	6F7C2401A8E39B5236DBCFE9E784785A
SHA1:	3A023B64F8562F2D958E5B7F11C9617D884187D4
SHA-256:	6219F90D8D3DDC61C0E32083D239152C089D5265BA85B6672C11A237D4A23AFC
SHA-512:	FA281CE658CB3EC2A4000F50C7DFD74B1B9CE59474F10CEACB9B29A9F0C97EC0521E3A989D1FC0D24115912D9C4AFF50274BE89E101A4991495A6E8E4FBEBAC7
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF58eda.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090763654726597
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMPwuF9hDO6vP6O+Otbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEL6vtbz8hu3VlXr4CRo1
MD5:	6F7C2401A8E39B5236DBCFE9E784785A
SHA1:	3A023B64F8562F2D958E5B7F11C9617D884187D4
SHA-256:	6219F90D8D3DDC61C0E32083D239152C089D5265BA85B6672C11A237D4A23AFC
SHA-512:	FA281CE658CB3EC2A4000F50C7DFD74B1B9CE59474F10CEACB9B29A9F0C97EC0521E3A989D1FC0D24115912D9C4AFF50274BE89E101A4991495A6E8E4FBEBAC7
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Safe Browsing\ChromeExtMalware.store (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2036433
Entropy (8bit):	4.001520025732182
Encrypted:	false
SSDEEP:	49152:arr7WfjZRD6FFiWnUO5bdgUS4AueTVd0KdKn46wwBvQvhZ8pkyBjJuIgwYKaZaD6:5
MD5:	136D46A45635E8CD29885338CA7CFA3D
SHA1:	19426AD84D3BD1AB2A62F036B9A57979F3A7384A
SHA-256:	15815DE5F8FF6FCE887B2657AF96610383C248AC9F836A0685CE5A3D901C49A3
SHA-512:	CADAA76D93CA34FCCF993D68E16D1EBDE538B4FB3AC988D9FFD65BD400A5758A4E6B3394284F8A67DFE90552D2D5FE69DA5F4D99BBCDDE96DC3C22AA030E4134
Malicious:	false
Preview:	........\| .*..\|.....\|. ...\|aaaaagfgdnjcdkncmfkfinnjaiapdblgaaaaaogokkamlflcoccdihncmbgcmflnaaaaaoipnhppjgickhnmdbgfbicakiamaaaaapdcjfaomkafnbpoclmfakjianjdaaaaapiecopgelmleoolpjapkgpglkcbaaaabcdhikdcpainmmjceakmkacogdkoaaaabdgnnajpalbdkkdnknbbbmndbilaaaaabfkbnfjnjldicllofdmjchdancccaaaabgphkbebbdbcibgbppdidkelfoigaaaabibhgjnbdelbcijfciclijhdkgohaaaabmldebjdieoplgdecloipkabiibcaaaaboojhahjgdjeknnemneiajjhhddiaaaabpccljmmhilhhndnjkobdedbpkjpaaaacmnkhlfjgehagffhnhdjfankefglaaaacnnimempmlomnnhdkimkfahjplfpaaaadbhonifkcheeddllhmpapnhcpgiaaaaadbkccgigjdmfmdhgikcckicldhjbaaaadbolalgmogecpogmlebfkpigmpdjaaaaehbfjkafkfgppkjageehakfakfbmaaaaehbppmedegafehiimempeifadcinaaaageoepbmnopkkfeadndbijdghellgaaaagfdmgcibcnlmgiipapnfocaocfneaaaagjojmcedjoignaljgmnihajfhhlpaaaaglldojfgdeaijnfefaggkfjekomeaaaaiihjniipljfegaknmbkneamnoajdaaaainjigbjlofcjekbnjnpiegecbnbaaaaaiognmpgbjoffachmpnnppfnokcbeaaaajcpbcbckoiafnblkdhnldokclbhiaaaajfoihhopfmnlhlnlhogjonmllocoaaaajhoimomebpcfopjpgkbbjdnldoihaaaakdafje

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Safe Browsing\ChromeExtMalware.store_new

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2036433
Entropy (8bit):	4.001520025732182
Encrypted:	false
SSDEEP:	49152:arr7WfjZRD6FFiWnUO5bdgUS4AueTVd0KdKn46wwBvQvhZ8pkyBjJuIgwYKaZaD6:5
MD5:	136D46A45635E8CD29885338CA7CFA3D
SHA1:	19426AD84D3BD1AB2A62F036B9A57979F3A7384A
SHA-256:	15815DE5F8FF6FCE887B2657AF96610383C248AC9F836A0685CE5A3D901C49A3
SHA-512:	CADAA76D93CA34FCCF993D68E16D1EBDE538B4FB3AC988D9FFD65BD400A5758A4E6B3394284F8A67DFE90552D2D5FE69DA5F4D99BBCDDE96DC3C22AA030E4134
Malicious:	false
Preview:	........\| .*..\|.....\|. ...\|aaaaagfgdnjcdkncmfkfinnjaiapdblgaaaaaogokkamlflcoccdihncmbgcmflnaaaaaoipnhppjgickhnmdbgfbicakiamaaaaapdcjfaomkafnbpoclmfakjianjdaaaaapiecopgelmleoolpjapkgpglkcbaaaabcdhikdcpainmmjceakmkacogdkoaaaabdgnnajpalbdkkdnknbbbmndbilaaaaabfkbnfjnjldicllofdmjchdancccaaaabgphkbebbdbcibgbppdidkelfoigaaaabibhgjnbdelbcijfciclijhdkgohaaaabmldebjdieoplgdecloipkabiibcaaaaboojhahjgdjeknnemneiajjhhddiaaaabpccljmmhilhhndnjkobdedbpkjpaaaacmnkhlfjgehagffhnhdjfankefglaaaacnnimempmlomnnhdkimkfahjplfpaaaadbhonifkcheeddllhmpapnhcpgiaaaaadbkccgigjdmfmdhgikcckicldhjbaaaadbolalgmogecpogmlebfkpigmpdjaaaaehbfjkafkfgppkjageehakfakfbmaaaaehbppmedegafehiimempeifadcinaaaageoepbmnopkkfeadndbijdghellgaaaagfdmgcibcnlmgiipapnfocaocfneaaaagjojmcedjoignaljgmnihajfhhlpaaaaglldojfgdeaijnfefaggkfjekomeaaaaiihjniipljfegaknmbkneamnoajdaaaainjigbjlofcjekbnjnpiegecbnbaaaaaiognmpgbjoffachmpnnppfnokcbeaaaajcpbcbckoiafnblkdhnldokclbhiaaaajfoihhopfmnlhlnlhogjonmllocoaaaajhoimomebpcfopjpgkbbjdnldoihaaaakdafje

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.3818353308528755
Encrypted:	false
SSDEEP:	3:2jRo6jhM6ceYcUtS2djIn:5I2uxUt5Mn
MD5:	48324111147DECC23AC222A361873FC5
SHA1:	0DF8B2267ABBDBD11C422D23338262E3131A4223
SHA-256:	D8D672F953E823063955BD9981532FC3453800C2E74C0CC3653D091088ABD3B3
SHA-512:	E3B5DB7BA5E4E3DE3741F53D91B6B61D6EB9ECC8F4C07B6AE1C2293517F331B716114BAB41D7935888A266F7EBDA6FABA90023EFFEC850A929986053853F1E02
Malicious:	false
Preview:	customSettings_F95BA787499AB4FA9EFFF472CE383A14

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings_F95BA787499AB4FA9EFFF472CE383A14

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.014438730983427
Encrypted:	false
SSDEEP:	3:YDMGA2ADH/AYKEqsYq:YQXT/bKE1F
MD5:	BB57A76019EADEDC27F04EB2FB1F1841
SHA1:	8B41A1B995D45B7A74A365B6B1F1F21F72F86760
SHA-256:	2BAE8302F9BD2D87AE26ACF692663DF1639B8E2068157451DA4773BD8BD30A2B
SHA-512:	A455D7F8E0BE9A27CFB7BE8FE0B0E722B35B4C8F206CAD99064473F15700023D5995CC2C4FAFDB8FBB50F0BAB3EC8B241E9A512C0766AAAE1A86C3472C589FFD
Malicious:	false
Preview:	{"forceServiceDetermination":false}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	81
Entropy (8bit):	4.3439888556902035
Encrypted:	false
SSDEEP:	3:kDnaV6bVsFUIMf1HDOWg3djTHXoSWDSQ97P:kDYaoUIe1HDM3oskP
MD5:	177F4D75F4FEE84EF08C507C3476C0D2
SHA1:	08E17AEB4D4066AC034207420F1F73DD8BE3FAA0
SHA-256:	21EE7A30C2409E0041CDA6C04EEE72688EB92FE995DC94487FF93AD32BD8F849
SHA-512:	94FC142B3CC4844BF2C0A72BCE57363C554356C799F6E581AA3012E48375F02ABD820076A8C2902A3C6BE6AC4D8FA8D4F010D4FF261327E878AF5E5EE31038FB
Malicious:	false
Preview:	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	130439
Entropy (8bit):	3.80180718117079
Encrypted:	false
SSDEEP:	1536:RlIyFAMrwvaGbyLWzDr6PDofI8vsUnPRLz+PMh:weWGP7Eh
MD5:	EB75CEFFE37E6DF9C171EE8380439EDA
SHA1:	F00119BA869133D64E4F7F0181161BD47968FA23
SHA-256:	48B11410DC937A1723BF4C5AD33ECDB286D8EC69544241BC373F753E64B396C1
SHA-512:	044C5113D877CE2E3B42CF07670620937ED7BE2D8B3BF2BAB085C43EF4F64598A7AC56328DDBBE7F0F3CFB9EA49D38CA332BB4ECBFEDBE24AE53B14334A30C8E
Malicious:	false
Preview:	{.. "geoidMaps": {.. "au": "https://australia.smartscreen.microsoft.com/",.. "ch": "https://switzerland.smartscreen.microsoft.com/",.. "eu": "https://europe.smartscreen.microsoft.com/",.. "ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "in": "https://india.smartscreen.microsoft.com/",.. "test": "https://eu-9.smartscreen.microsoft.com/",.. "uk": "https://unitedkingdom.smartscreen.microsoft.com/",.. "us": "https://unitedstates.smartscreen.microsoft.com/",.. "gw_au": "https://australia.smartscreen.microsoft.com/",.. "gw_ch": "https://switzerland.smartscreen.microsoft.com/",.. "gw_eu": "https://europe.smartscreen.microsoft.com/",.. "gw_ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "gw_ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "gw_ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "gw_in": "https

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.346439344671015
Encrypted:	false
SSDEEP:	3:kfKbUPVXXMVQX:kygV5
MD5:	6A3A60A3F78299444AACAA89710A64B6
SHA1:	2A052BF5CF54F980475085EEF459D94C3CE5EF55
SHA-256:	61597278D681774EFD8EB92F5836EB6362975A74CEF807CE548E50A7EC38E11F
SHA-512:	C5D0419869A43D712B29A5A11DC590690B5876D1D95C1F1380C2F773CA0CB07B173474EE16FE66A6AF633B04CC84E58924A62F00DCC171B2656D554864BF57A4
Malicious:	false
Preview:	synchronousLookupUris_638343870221005468

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris_638343870221005468

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.556488479039065
Encrypted:	false
SSDEEP:	3:GSCIPPlzYxi21goD:bCWBYx99D
MD5:	3A05EAEA94307F8C57BAC69C3DF64E59
SHA1:	9B852B902B72B9D5F7B9158E306E1A2C5F6112C8
SHA-256:	A8EF112DF7DAD4B09AAA48C3E53272A2EEC139E86590FD80E2B7CBD23D14C09E
SHA-512:	6080AEF2339031FAFDCFB00D3179285E09B707A846FD2EA03921467DF5930B3F9C629D37400D625A8571B900BC46021047770BAC238F6BAC544B48FB3D522FB0
Malicious:	false
Preview:	9.......murmur3.............,M.h...Z...8.\..<&Li.H..[.?m

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.030394788231021
Encrypted:	false
SSDEEP:	3:0xXeZUSXkcVn:0Re5kcV
MD5:	52E2839549E67CE774547C9F07740500
SHA1:	B172E16D7756483DF0CA0A8D4F7640DD5D557201
SHA-256:	F81B7B9CE24F5A2B94182E817037B5F1089DC764BC7E55A9B0A6227A7E121F32
SHA-512:	D80E7351E4D83463255C002D3FDCE7E5274177C24C4C728D7B7932D0BE3EBCFEB68E1E65697ED5E162E1B423BB8CDFA0864981C4B466D6AD8B5E724D84B4203B
Malicious:	false
Preview:	topTraffic_638004170464094982

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_170540185939602997400506234197983529371

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	575056
Entropy (8bit):	7.999649474060713
Encrypted:	true
SSDEEP:	12288:fXdhUG0PlM/EXEBQlbk19RrH76Im4u8C1jJodha:Ji80e9Rb7Tm4u8CnR
MD5:	BE5D1A12C1644421F877787F8E76642D
SHA1:	06C46A95B4BD5E145E015FA7E358A2D1AC52C809
SHA-256:	C1CE928FBEF4EF5A4207ABAFD9AB6382CC29D11DDECC215314B0522749EF6A5A
SHA-512:	FD5B100E2F192164B77F4140ADF6DE0322F34D7B6F0CF14AED91BACAB18BB8F195F161F7CF8FB10651122A598CE474AC4DC39EDF47B6A85C90C854C2A3170960
Malicious:	false
Preview:	...._+jE.`..}....S..1....G}s..E....y".Wh.^.W.H...-...#.A...KR...9b........>k......bU.IVo...D......Y..[l.yx.......'c=..I0.....E.d...-...1 ....m../C...OQ.........qW..<:N.....38.u..X-..s....<..U.,Mi..._.......`.Y/.........^..,.E..........j@..G8..N.... ..Ea...4.+.79k.!T.-5W..!..@+..!.P..LDG.....V."....L.... .(#..$..&......C.....%A.T}....K_.S..'Q.".d....s....(j.D!......Ov..)d0)."(..%..-..G..L.}....i.....m9;.....t.w..0....f?..-..M.c.3.....N7K.T..D>.3.x...z..u$5!..4..T.....U.O^L{.5..=E..'..;.}(\|.6.:..f!.>...?M.8......P.D.J.I4.<....y.E....>....i%.6..Y.@..n.....M..r..C.f.;..<..0.H...F....h.......HB1]1....u..:...H..k....B.Q..J...@}j~.#...'Y.J~....I...ub.&..L[z..1.W/.Ck....M.......[.......N.F..z.{nZ~d.V.4.u.K.V.......X.<p..cz..>....X...W..da3(..g..Z$.L4.j=~.p.l.\.[e.&&.Y ...U)..._.^r0.,.{_......`S..[....(.\..p.bt.g..%.$+....f.....d....Im..f...W ......G..i_8a..ae..7....pS.....z-H..A.s.4.3..O.r.....u.S......a.}..v.-/..... ...a.x#./:...sS&U.().xL...pg

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_638004170464094982

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	raw G3 (Group 3) FAX, byte-padded
Category:	dropped
Size (bytes):	460992
Entropy (8bit):	7.999625908035124
Encrypted:	true
SSDEEP:	12288:KaRwcD8XXTZGZJHXBjOVX3xFttENr4+3eGPnKvJWXrydqb:KaR5oZ2MBFt8r4+3eG/URdqb
MD5:	E9C502DB957CDB977E7F5745B34C32E6
SHA1:	DBD72B0D3F46FA35A9FE2527C25271AEC08E3933
SHA-256:	5A6B49358772DB0B5C682575F02E8630083568542B984D6D00727740506569D4
SHA-512:	B846E682427CF144A440619258F5AA5C94CAEE7612127A60E4BD3C712F8FF614DA232D9A488E27FC2B0D53FD6ACF05409958AEA3B21EA2C1127821BD8E87A5CA
Malicious:	false
Preview:	...2lI.5.<C.;.{....._+jE.`..}....-...#.A...KR...l.M0,s...).9..........x.......F.b......jU....y.h'....L<.....Z..%...._...g.4yu...........'c=..I0..........qW..<:N....<..U.,Mi..._......'(..U.9.!........u....7...4. ..Ea...4.+.79k.!T.-5W..!..@+..$..t\|1.E..7F...+..xf....z&_Q...-.B...)8R.c....0.......B.M.Z...0....&v..<..H...3.....N7K.T..D>.8......P.D.J.I4.B.H.VHy...@.Wc.Cl..6aD..j.....E..4..mI..X]2.GH.G.L...E.F.=.J...@}j~.#...'Y.L[z..1.W/.Ck....L..X........J.NYd........>...N.F..z.{nZ~d.N..../..6.\L...Q...+.w..p...>.S.iG...0]..8....S..)`B#.v..^..T.?...Z.rz.D'.!.T.w....S..8....V.4.u.K.V.......W.6s...Y.).[.c.X.S..........5.X7F...tQ....z.L.X..(3#j...8...i.[..j$.Q....0...]"W.c.H..n..2Te.ak...c..-F(..W2.b....3.]......c.d\|.../....._...f.....d....Im..g.b..R.q.<xx...i2..r.I()Iat..b.j.r@K.+5..C.....nJ.>P,.V@.....s.4.3..O.r.....smd7...L.....].u&1../t.*.......uXb...=@.....wv......]....#.{$.w......i.....\|.....?....E7...}$+..t).E.U..Q..~.`.)..Y@.6.h.......%(

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	3.169925001442312
Encrypted:	false
SSDEEP:	3:CMzOn:CM6
MD5:	B6F7A6B03164D4BF8E3531A5CF721D30
SHA1:	A2134120D4712C7C629CDCEEF9DE6D6E48CA13FA
SHA-256:	3D6F3F8F1456D7CE78DD9DFA8187318B38E731A658E513F561EE178766E74D39
SHA-512:	4B473F45A5D45D420483EA1D9E93047794884F26781BBFE5370A554D260E80AD462E7EEB74D16025774935C3A80CBB2FD1293941EE3D7B64045B791B365F2B63
Malicious:	false
Preview:	uriCache_

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache_

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	180
Entropy (8bit):	4.9623385875950285
Encrypted:	false
SSDEEP:	3:YTyLSmafBoTfvSVACWXWKc4AozROWtm5EQnqdbRWE/QNAo2AvHfjg9PIAclR4TTM:YWLSGTvSVAVXWHpo9w5/nmbRL/ov/EMT
MD5:	6642BA4CE04FC3AB28B33C249BBB20EE
SHA1:	7D7F88E2EB22270B50A6F250B1A80A988E59A156
SHA-256:	41F9C76B0C2055C6169C00CE6E93AF7C3FEC54AAEAF9E45E63BBFDE85E3A77E0
SHA-512:	74031D833FA98C38A8FC76B455A578FBD1304775A438DD5986B48A0448B245D877379996D17D433769940C41D16DEDE96D48809E8CA29A92884680BC8C7B670C
Malicious:	false
Preview:	{"version":1,"cache_data":[{"file_hash":"317570e5238036c9","server_context":"1;c5faad59-a2e3-31f2-b86e-aaf958e12824;phsh:005;7e-05","result":0,"expiration_time":1734104524254660}]}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.3751917412896075
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ2rjozQw:YQ3Kq9X0dMgAEwj2
MD5:	16B7586B9EBA5296EA04B791FC3D675E
SHA1:	8890767DD7EB4D1BEAB829324BA8B9599051F0B0
SHA-256:	474D668707F1CB929FEF1E3798B71B632E50675BD1A9DCEAAB90C9587F72F680
SHA-512:	58668D0C28B63548A1F13D2C2DFA19BCC14C0B7406833AD8E72DFC07F46D8DF6DED46265D74A042D07FBC88F78A59CB32389EF384EC78A55976DFC2737868771
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":false,"variations_crash_streak":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\b4c3fe70-74b2-4f38-a892-c7cd7c09eb60.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090763654726597
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMPwuF9hDO6vP6O+Otbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEL6vtbz8hu3VlXr4CRo1
MD5:	6F7C2401A8E39B5236DBCFE9E784785A
SHA1:	3A023B64F8562F2D958E5B7F11C9617D884187D4
SHA-256:	6219F90D8D3DDC61C0E32083D239152C089D5265BA85B6672C11A237D4A23AFC
SHA-512:	FA281CE658CB3EC2A4000F50C7DFD74B1B9CE59474F10CEACB9B29A9F0C97EC0521E3A989D1FC0D24115912D9C4AFF50274BE89E101A4991495A6E8E4FBEBAC7
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\be0cb024-3171-4c73-94a0-2ebe44ca3685.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45887
Entropy (8bit):	6.089468734195308
Encrypted:	false
SSDEEP:	768:mMkbJrT8IeQc539/SEnhDO6vP6OrtofF3CEgYNxoZ20+WCAouGoup1Xl3jVzXr4e:mMk1rT8HP9/+69YNGU0XRouhu3VlXr4e
MD5:	3E2AD547EF17B57033CE1DE8EAF048B5
SHA1:	725CB978B7430D6EDC21A18D61E12B00E76817AF
SHA-256:	420A7F808A466650D7511E568857CD14AC45A8487BE7338367139A1D5F9B7CE6
SHA-512:	A95ACA524723DDDA2F8ABA50CB85E507EE03783E03C535D9F682E331F145D3C36844BADED4C477A660B665936358CEE30AF77414C81775AF718F8A45CE0F1BDE
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\c3b61fa2-bbf8-45ae-81b0-ff40dc170729.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	44596
Entropy (8bit):	6.096618887642298
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBrwuehDO6vP6O/qoQDvcGoup1Xl3jVzXr4CCAo1:z/Ps+wsI7ynEH6gchu3VlXr4CRo1
MD5:	15E57A31CDB9E4C7D3672F1C4BFCD990
SHA1:	647667D571F6EBC6398C4401881377F7B3DBEED5
SHA-256:	41F014A2F27E902D1078348882C06A48F6E551A56B9E8AE69CEFB6C020848195
SHA-512:	92546764B92C62A4D09F9F1EBBA6D4B567379FFE2C23384503FE49F486ACA2E166AA43A336D46F6999A97A053F041AC80D5903654A25C3EB7B19774D2A611289
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2278
Entropy (8bit):	3.8302174363336796
Encrypted:	false
SSDEEP:	48:uiTrlKxrgxmxl9Il8uH1J0rj6mJ6OBFjJFBaVMd1rc:mXYTJ0f6mUkFBa5
MD5:	25ED9ACAF55D9479964AF31B75A4DC9D
SHA1:	D92A83877C115B6B49A77D3217D993DB402B0579
SHA-256:	5BCB9DF53CA4D901418E2749C9CFEAA6B98F1CCFC842C940D3A3B70CC203F813
SHA-512:	C8D9F3E67AA6A266CF76AB8B0B31F694D8A8E0CFC8679B7A6BB7A26ED4A5761129D3F626F9940975CC00CE1B04FE26FA0A7AA982C35A39709AE9ECAE2E4753BB
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".W.i.p.w.W.M.+.N.H.l.b.C.D.m.s.Z.p.8.S.O.s.j.h.t.F.B.s.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".g.F.9./.P.p.N.M.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.D.r.a.S.H.g.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4622
Entropy (8bit):	4.002059867392512
Encrypted:	false
SSDEEP:	96:JYsHx8ZbBiSJmDJWnMV31jkMjx7/JrQMyW9U/C7:J7Hx8uSIfljRTb9U/m
MD5:	FBC923C92DF3504BA5C9323A07C73302
SHA1:	7A377734C4AA58B2445334EC7194B824CF47CE93
SHA-256:	67A45B6A26C5A0F85E7DD876A44E57840BE082940468E0EC6682BC9411B1DED4
SHA-512:	34B60D21A43980DCE7EF3BCC45F07005B8AE08300F33C72969B5C6C9622E66B171AE4755A5B5B6DE3995AD35A3D7ABFA376073D863456D84575962FD5497CA97
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".z.3.U.T.q.T.b.3.7./.u.z.h.i.f.l.b.4.0.f.z.h.D.r.E.s.w.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".7.r.j.p.I.4.t.M.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.w.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.D.r.a.S.H.g.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2684
Entropy (8bit):	3.8953816486554835
Encrypted:	false
SSDEEP:	48:uiTrlKx68Wa7xjxl9Il8uHlPQX0kme98yMwBN8pyZBY66x1hlHsuQd/vc:adYEn8HwB2aBh6nHsup
MD5:	3BD99CF4A67DD0E83EA0D8F7E496ECA8
SHA1:	7F6C3E916D38FE15730D03680D133A52C859D319
SHA-256:	318B554B1FC0058A5AEBACA1F1E43C6ACBB9A400F9A4A4A7FFEE6E89A53B6BA9
SHA-512:	F4FC220602C44C8B201C6D21E7AA70FABF1A42A1558F223B85AA8AA2DBED36B33818203F9E964AAC82579744BB9F4672A19D9E056F8D30C27014829BF0E06FE6
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".6.N.3.U.y.9.n.A.U.E.q.s.5.u.9.6.E./.o.g.0.E./.V.J.A.g.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".5.c.C.7.V.F.x.r.3.A.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.D.r.a.S.H.g.

C:\Users\user\AppData\Local\Temp\03e4f78a-2665-4076-9dfe-1e128c5c670b.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Local\Temp\13844f78-58b5-4ac1-ab29-717a42ced018.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\2f5340bd-90e4-45a6-a4bd-52c247804b4d.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 276634
Category:	dropped
Size (bytes):	410885
Entropy (8bit):	7.998889045816899
Encrypted:	true
SSDEEP:	12288:uTi9JPNfgBTIxXL2v6YRl5JCqqpRFW0X2yk:Is1IBTI9LkhSqqQ0Xq
MD5:	A2C02BDC5C337CDAE04E5C53DC3F3B91
SHA1:	5FF56CE9A2B671693947F7A210636367F698A781
SHA-256:	367B7B1BBCADB1562C37558BDF6464CEB990D5811620321D71D8AB926337C97A
SHA-512:	7E41F65356D38B01884892A5256146331BE9D9BFB3E18553DB292D6C4C07FF76C08D5D49A3E73E65B463CF50DED70A298D5759A468824E17197306DC38F48650
Malicious:	false
Preview:	...........W.H.8.....q..v.y...1..o.fm..ds..n@.#y%9...._U.%.d...s.{.N..Q].]]]U]]].:.."..q.......6(I.OB..w/_.i.lVY.....jB....X.....}.IN..G..=.qNn...]:.h......vv'a.'... .{7l}...... ...MN...H$.._...~.d...W.w.5...oTB...r...._...o...0>8...'.ak...../..v..Ds{..u.......I.-{...Ion..L5....~M.[.5........7..../...3....w.^k...U~..5..#.N.=n......5...;.K^sg.0D....'...!..u.e..kns.%9....?..Y.U6.....B.s.:;.oH..pv...n#R..A....i..U.n..F....?..m..D..F..r[.f.#.../...v.;...`.k}..m.\|U..\|........`\|.;U...M:...t..l......v..\|PFGg'..V.x....$!.f.l.j......%..j.0.j\|O..x0.v.....W/W.k.zEZ............7.}8><;>...:.....j.b.m....._.g.0.._.f.5_7X..Qk.Iu..v6..z..`@....u..k.~.$1.)..&3w.\./..}E&.k2..KH_@...!...]@...:..A.d...1?......{..a....:m$.....k..'@=C`w...H.....h.m...kw....#....Y.s..;.t..6..{....C\V0=g2y[........t...^..V.?n.@l.....>4.C.T..Z_.!....v..8 ...4. .Q.x......?h.`..a..`....md._:..U.....w.w!\|..J6.~....&.....:..v.}....n..3B&vz68=. ...v.9.R.....k....K.\..%;..o...

C:\Users\user\AppData\Local\Temp\4d969417-8537-45ce-aae6-b6950175a91c.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\71df8787-afba-45ff-a3ec-c0ad811618f0.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	138356
Entropy (8bit):	7.809609231921042
Encrypted:	false
SSDEEP:	3072:AQ++ZdS5+fnwcxO+XwquyeNnmraugZ/1DOoncWD/5q:AQ++/PZmlyeNnh/1SmRq
MD5:	3F6F93C3DCCD4A91C4EB25C7F6FEB1C1
SHA1:	9B73F46ADFA1F4464929B408407E73D4535C6827
SHA-256:	19F05352CB4C6E231C1C000B6C8B7E9EDCC1E8082CAF46FFF16B239D32AA7C9E
SHA-512:	D488FA67E3A29D0147E9EAF2EABC74D9A255F8470CF79A4AEA60E3B3B5E48A3FCBC4FC3E9CE58DFF8D7D0CAA8AE749295F221E1FE1BA5D20DEB2D97544A12BA4
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[........q.a.....E..i.t,..7C..7!...`l.-.......T.vH...~.....'..aH..C.oJOE..d..2..$J......I..;.(9l.(..+.N.6.@...].a.n.S.6..=.b.W.\....o...#.~J.W.1..E...2H....S.g0....../.H...y.O8...kE.,..m!..F.D.p......H..s.W ...#.L........Ij.........-..n..\..vD.d.V.....!......[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. ?Eq.M...[6^...+.].G..Y]...7..o.. U...v....P.J...@.E!...B.d..p..i".%............oo.<....~=..!t.+...`....h..LK....0....h...,.R%.....u...._..V_.q:_._..5}.uS\.....x?...~]..C-....S=L...._c.P.B....-M...62.i*.Q.....9.....+S=...../6:...W..ql/g..&j.y..{.."....\|..F....\|....V....w.%t.y..?..&..a..<.n....S+\|..=.ra.....

C:\Users\user\AppData\Local\Temp\7c4216d9-a948-4db0-8572-30a4fe9bf60f.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1366x720, components 3
Category:	dropped
Size (bytes):	206855
Entropy (8bit):	7.983996634657522
Encrypted:	false
SSDEEP:	3072:5WcDW3D2an0GM0GqJCj+1ZxdmdopHjHTFYPQyairiVoo4XSWrPoiXvJddppWmEIO:l81Ltl7E6lEMVo/S01fDpWmEgs
MD5:	FE412FA3A2B510A55FE8496C5490BB2F
SHA1:	499667BC9FE43344D037FB95A6563AD30D3DB3D5
SHA-256:	DE6110AFBA31DC638DE84FD6D255D78C2125CEFADCE3774B310149B4EBE5EE1D
SHA-512:	3E8821A1249AA4DC88629C9D6BF6BAD0AE9074CFCACB22B3E856F05DB9DCB54A5B4A3F03D9BE94F06C79F28313C95F5E77A66543ADA180ACBE71BC824AEB47B5
Malicious:	false
Preview:	......Exif..II.................Ducky.......2......Adobe.d...........................................................#"""#''''''''''..................................................!! !!''''''''''........V.."....................................................................................!1..AQ..aq."2....R..T....Br.#S.U..b..3Cs...t6.c.$D.5uV...4d.E&....%F......................!1..AQaq....."2......BRbr3CS....#..4.............?......1f.n..T......TP....E...........P.....@.........E..@......E.P........@........E.....P.P..A@@.E..@.P.P..AP.P..AP..@....T..AP.E..P.Z .. ....."... .....7.H...w.....t.....T....M.."... P..n.n..t5..B.P..(......................................( .................... .".... .".......(.. ."....... ....o......E.6... ....."........."J......Ah......@.@@....:@{6..wCp..3...((.(.........................@..(...."............................ ........T.......@.@@........AP.P..@.E@....E@.d.E@.@@..@.P.T..@..@..P.D...@M........EO..."...=.wCp.....R......P.@......

C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files.cab

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 1545736 bytes, 1 file, at 0x2c +A "setup.exe", ID 49166, number 1, 21013 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	1545736
Entropy (8bit):	5.151566053093365
Encrypted:	false
SSDEEP:	12288:COGe7gvi5l2d2ZXpZ0pg3Clk6ih9CtJWwa/2QbQ7eUCWajFrpDs5JXQot+:COG6gviWd2ZXY3kJh8b1sd7ptsn5t+
MD5:	0EB1DAB24D3DA5ED8B7C5EA63F6BA5A5
SHA1:	13384E702C3DD018D5E553676639167F6F351174
SHA-256:	D88F05A410A655E23D498BDFA307084F5D3771E29A51417AA5CE42044EF4FB56
SHA-512:	6C07AA50CC944AC3BE3A74C0BB3AA57B57DF3E15BA3BF2A74EB4A5D7D4E3A2D4B055B0C5DEC51E174C164B75465824037D1230B9E4375F54C18DA568E3F94680
Malicious:	false
Preview:	MSCF............,...................F....R...P.).......Ym2 .setup.exe.(....A..[...4 F.m.....5!.P..lN.0..U..V..B`...nTB...J+...Sai...r.o.p{t.n...[..6.u53DW#..x......K..I.p..K.y.$Kb..]..EPWnz.s..=0n57..1....r..=...v....X..=.)b..p..E.u..7..P...l.A@...F.R.6.....F..\.....@....h.........}.........{W..\|.[.Q.TJ.-.TUd.b..1...(....p.... . ..........$.......Wp....v..r....bN>.'99.ID'O..\|..q.?<.!"r8Q).....q"....h...%#..[tI..Hc..o..S......_./g/..y..3S''....@L;.u/..(....`../1+......A....0..K...;.......2H...(....Gu_.....R.!.{u&.aWm.._........AnN....0.2.#S..z.S.n......&..w.dt&n.L..........Tr.....Z.v.r...O.(..8.....X...ON....ns\..n#..R.F3.(..)...6...?....n..?.ga.A.(..u.iq.h.G.c.V.&.....Zj.Umr..g.."...@@.?..6C..n..U......3..>..?...R..v..(9......xD....bc/.e,L&..&..J.&;.../.aA..J...Z...S2*.......Z.f..K.....6pU.. ..k.....K....#...Pb`..c....Y..7...!.."&"......(.#I.....#.x.&.y6.C....U.G...............h.....@..'....'.e...4...#...SG(.$Ug..&..l...i.......T...2

C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\d2f91cf38daf49049d9c7808958ddcf4$dpx$.tmp\40d2317c6f0c5d45939b296e37c375db.tmp

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	688541696
Entropy (8bit):	0.048461089697694165
Encrypted:	false
SSDEEP:
MD5:	C474153CAFE60A41858493469CB85EDE
SHA1:	C4B76DFB84CD144CB310E226AA78A08DCAEFBB36
SHA-256:	374DDFD3DFADFC83BC4647A576F2DBA942F2E0BB3B265707E5A15799737F7CC9
SHA-512:	14CFE559A92A6D9C9C8BE6F409A5CBD0F6A696F9D5D89767AF7B0BA4446F5856390E6428628A4D2349BBE70DDF3197FC870DB20295C933DF5F4C56C31384857B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 26%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...;.Yg.................J...r.......q............@...........................$...........@.................................@#..x........P....................$.H...........................H.......`................%...............................text....I.......J.................. ..`.rdata...#...`...$...N..............@..@.data...(........>...r..............@....00cfg.......p......................@..@.tls................................@....voltbl.,................................rsrc....P.......R..................@..@.reloc..H.....$.......#.............@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe (copy)

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	688541696
Entropy (8bit):	0.048461089697694165
Encrypted:	false
SSDEEP:
MD5:	C474153CAFE60A41858493469CB85EDE
SHA1:	C4B76DFB84CD144CB310E226AA78A08DCAEFBB36
SHA-256:	374DDFD3DFADFC83BC4647A576F2DBA942F2E0BB3B265707E5A15799737F7CC9
SHA-512:	14CFE559A92A6D9C9C8BE6F409A5CBD0F6A696F9D5D89767AF7B0BA4446F5856390E6428628A4D2349BBE70DDF3197FC870DB20295C933DF5F4C56C31384857B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 26%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...;.Yg.................J...r.......q............@...........................$...........@.................................@#..x........P....................$.H...........................H.......`................%...............................text....I.......J.................. ..`.rdata...#...`...$...N..............@..@.data...(........>...r..............@....00cfg.......p......................@..@.tls................................@....voltbl.,................................rsrc....P.......R..................@..@.reloc..H.....$.......#.............@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\msiwrapper.ini

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	1808
Entropy (8bit):	3.717418462231116
Encrypted:	false
SSDEEP:	48:LKAe/npvZpZJFhlZnlZ3byFvtxf5SblZGdKU9:knpBphZlZ3bOtpohZEKa
MD5:	16399D5F4057F13110727EE2D202C50B
SHA1:	9FF9E30E10C97770EE51C03A83D42DFBC59DD283
SHA-256:	0665E4A743E92E6F0CCAB5ED81F617D34F11506E6B0CBBEAF9C391DC0249B4A0
SHA-512:	189B7EB45259ACAB2F5733C5397048B0A13E1A32D598AAAFA2BA07B0ED128B96CEBE28BEA733850AC9546C72DD7600F39A01D7A5DFDEBB104C2042387381655E
Malicious:	false
Preview:	W.r.a.p.p.e.d.A.p.p.l.i.c.a.t.i.o.n.I.d.=.G.o.o.g.l.e. .C.h.r.o.m.e...W.r.a.p.p.e.d.R.e.g.i.s.t.r.a.t.i.o.n.=.N.o.n.e...I.n.s.t.a.l.l.S.u.c.c.e.s.s.C.o.d.e.s.=.0...E.l.e.v.a.t.i.o.n.M.o.d.e.=.n.e.v.e.r...B.a.s.e.N.a.m.e.=.s.e.t.u.p...e.x.e...C.a.b.H.a.s.h.=.d.8.8.f.0.5.a.4.1.0.a.6.5.5.e.2.3.d.4.9.8.b.d.f.a.3.0.7.0.8.4.f.5.d.3.7.7.1.e.2.9.a.5.1.4.1.7.a.a.5.c.e.4.2.0.4.4.e.f.4.f.b.5.6...S.e.t.u.p.P.a.r.a.m.e.t.e.r.s.=./.V.E.R.Y.S.I.L.E.N.T. . ./.V.E.R.Y.S.I.L.E.N.T. ...W.o.r.k.i.n.g.D.i.r.=...C.u.r.r.e.n.t.D.i.r.=..S.O.U.R.C.E.D.I.R....U.I.L.e.v.e.l.=.5...F.o.c.u.s.=.y.e.s...S.e.s.s.i.o.n.D.i.r.=.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.M.W.-.2.f.3.c.f.e.d.f.-.4.a.1.7.-.4.0.5.c.-.9.4.8.9.-.9.1.c.e.8.6.a.d.3.6.6.6.\...F.i.l.e.s.D.i.r.=.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.M.W.-.2.f.3.c.f.e.d.f.-.4.a.1.7.-.4.0.5.c.-.9.4.8.9.-.9.1.c.e.8.6.a.d.3.6.6.6.\.f.i.l.e.s.\...R.u.n.B.e.f.o.r.e.I.n.s.t.a.l.l.F.i.l.e.=.c.m.d...e.x.e...R.u.

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7328
Entropy (8bit):	5.860441824879722
Encrypted:	false
SSDEEP:	96:RhZIpt7VgtFD3F8CMXuuzaRFJrb7ghNglFjPu3ljl7arVSQi6E/swokYglZ:Ryt7VgtFD3FaeTrgCtP0dyCDsoYgn
MD5:	117D173E82B282DECA740475E35C8ECD
SHA1:	912B12B993507EBD9AF6BDC937559B4D4B58A0D8
SHA-256:	65491B21947D60C87C6358DCF69DF9ACA2B99E8F3B611BD3D559699BBC25000B
SHA-512:	E455C0BB68E9056C6242058FCBA954BC1D5EA4A864E99BE008B2745C51209B477BD7BDBA57006BE4A02A09BDA49C0CDC17E8F870C81C7771864640950F5F9A93
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-af.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72640
Entropy (8bit):	5.813503646473953
Encrypted:	false
SSDEEP:	1536:dH4Yzf/r1T2bhKC+wQ/MJ4tpBMfWDMxFaye3yrGZ3vGV9YODhX3yKfhGt:dxLr1qFKpNpufWIqye3KgGVnDxe
MD5:	FFA9DB945F0F0C15B8BBA75A6E064880
SHA1:	49217A9D5BB7A868464403B4E3C82E80DF53456C
SHA-256:	5487EE44A4CD706D0086522E90C59C76CDF2AC68CE506FD3EAE6054B9220C0CF
SHA-512:	CC67B2DFBBB009DD3FDB999FE86410425455613C12DAC755A3CDED435CD25CA4363782D70F3B7BB7C0FDD63E2EB649AE6A4053D929F463B646B43D7DBFDA79C0
Malicious:	false
Preview:	hy.b........L...............K....8...h............... ...(...0...8...@...H...P...X...`...h...p...x........................................................... ...(...0...8...@...H...P...X...`...h...p...x............................................... ...@.. P..!X.."p..#x..$...%...&...'.... ...@.. P..!X.."p..#x..$...%...&...'...........?................C............ ... ...@.E...."`..'...-@.I6...=...C`..J...P...V..O]...e .Qm`..t..S\| ...@...`.......@........Z..... ...`...`.......... `......A.....$...e.......g..... ...@...@.G..... .I. ....K..... ...............................U...........XA..Y..... ......! ..4@.............K...K*..U.f......i...c........ ..5"../...3............`.EO........ .....I...J.A..3......./........a.......a..........;B.U%...+A.W0...2...Q ..\...........9 ..........f.......7C......5a.H.@.GD...8...........a..L<!.M........>a.U....!..RB.......f..........C...E...C .Z............M....b.D7. .........a.H!..OSA...A.KJ...".."..N.......R.`...A.R^...........JB.........'`.

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-as.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	703
Entropy (8bit):	4.3052979773855045
Encrypted:	false
SSDEEP:	12:A1/6kZQ0FLwE792NGl5D/0l3gebslEVkGsOoiEbM0TbvZE8h:QnFR0NGlN/0l3g8qfOMbNTbZE8h
MD5:	8961FDD3DB036DD43002659A4E4A7365
SHA1:	7B2FA321D50D5417E6C8D48145E86D15B7FF8321
SHA-256:	C2784E33158A807135850F7125A7EAABE472B3CFC7AFB82C74F02DA69EA250FE
SHA-512:	531ECEC11D296A1AB3FAEB2C7AC619DA9D80C1054A2CCEE8A5A0CD996346FEA2A2FEE159AC5A8D79B46A764A2AA8E542D6A79D86B3D7DDA461E41B19C9BEBE92
Malicious:	false
Preview:	hy.b........@...............H.....L...L...L..(L..0L..8L..@L..HL..PL..XL..`L..xL...L...L...L...L...L...L...L...L...L...L...L...L...L...L...M...M...M...M.. M. (M.!0M."8M.#@M.$PM.%XM.&`M.'hM.(pM.)xM..M.+.M.,.M.-.M...M./.M.0.M.1.M.2.M.3.M.4.N.5.N.6.N.7.N.8 N.98N.:@N.;XN.<`N.=hN.>pN.?.N.@.N.A.N.B.N.C.O.D.O.E.O.F.O.G`..Hh...............?......N........@...............A.......................................................................................................... ...!..."...#...$...%...&...'...(...)......+...,...-......./...................................................................@...A...B...................G...................................(......................................

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-be.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	6098
Entropy (8bit):	3.681934272069777
Encrypted:	false
SSDEEP:	96:mmfvnESaDPq1iYM7N8gyurprJr/P5FwBlh/RT95vtEUnbpwROaQPP/KV2L+HCdYV:XfYPq1iYyNk5p50OwQPP/KV2L+HCinCO
MD5:	087DE134F3B23A9944AFD711A9667A0B
SHA1:	1B67D0A65EF91295207D66E62B682803AA74EF00
SHA-256:	25B7CFA039F82AC92990E1789DE40988D490DB9B613852FB24036B38FF87893C
SHA-512:	42C0B51E0E28109A7058D3FC03FA7BEF8B25C9B3C8BB74933574FAD06C061FD1636B53EEEACF652E438D4DF08002DB449681BE9E6E6821EC23D32A8BE1778998
Malicious:	false
Preview:	hy.b........4...(...........E....8...h..!. ."0 .#p ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ...!...!...!...!.. !..(!..0!..8!..@!..X!..`!..h!..p!. x!...!...!...!...!...!...!...!...!...!...!...!...!...!...!...!..."..."..."...".. "..("..0"..8"..@"..X"..`"..h"..p". x".!.".".".#.".$.$.$.$.........?...............w...@........................!...+...3.... ..;..KD&.. ..ML4.NT8.O\6..e....$..m...v2..~<..,..."..:..0....(........S2.......... ...!...".... ......".........................................................S............$..............Z............9.......................$.......".........................................................S............$..............Z............O.......................$..........A...B........P..E[..FK..GK..HK......JK..KK......MK...c..OK..PK...X..RK..SK...2..UK..H:..WK..XK..YK..ZK..[K.......V..MX..........A...B.......dK..EK..F[..GK..HK..E0..JK..KK..H..MK..NK..OK..PK......RK..SK..TK..UK..K0..WK..XK..YK..ZK..[K..S^...V...]..T0..

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-bg.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	3467
Entropy (8bit):	2.7535319237657605
Encrypted:	false
SSDEEP:	96:Op0nEURURUxURURU/ajyRUK0x0x0x0xGURURURURURUMO+L:y08D8+L
MD5:	E8A4F8F5238F9A0FF6968AD8DBA2755F
SHA1:	ABF002FF28B3AA2A59948225E5E600096348CAA7
SHA-256:	7593F0395081E3EEB2D8516D10746608AFD826CFFD4E7E37D53936993D200A13
SHA-512:	B54811E1BE6E63BF19E408AC4AE9DA86E1473E4E8F1E9D517D907E025BE20FA6979517339EC6DEFD0EC30613ED42A97D88111D39297214AFA7606597CBA5EA86
Malicious:	false
Preview:	hy.b........d...H...............P.......................................................................................3........U......c...$..............h....U..*.... ...$..m(...,...U.../...3..r7..3;...U...>...B..wF..8....M...Q...U..\|U.......U..#....U.......U..g...h...$T..ET...V..H....U...U..sV...V.......Y..rV..sV..PT......RU...U..Y.......b...C...D...E.......G...H.......J...K...L...M...N.......P...Q...R...S.......U...V...W...X...Y...Z......................B...c...D...E.......G...H.......J...K...L...M...N.......P...Q...R...S.......U...V...W...X...Y...Z......................B...C...d...E.......G...H.......J...K...L...M...N.......P...Q...R...S.......U...V...W...X...Y...Z......................B...C...D...e.......'...H.......J...K...L...M...N.......P...Q...R...S.......U...V...W...X...Y...Z......................B...C...D...E.......g...H.......J...K...L...M...N.......P...Q...R...S.......U...V...W...X...Y...Z......................B...C...D...E.......G...h.......J...K...L...M...N.......

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-bn.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	703
Entropy (8bit):	4.3052979773855045
Encrypted:	false
SSDEEP:	12:A1/6kZQ0FLwE792NGl5D/0l3gebslEVkGsOoiEbM0TbvZE8h:QnFR0NGlN/0l3g8qfOMbNTbZE8h
MD5:	8961FDD3DB036DD43002659A4E4A7365
SHA1:	7B2FA321D50D5417E6C8D48145E86D15B7FF8321
SHA-256:	C2784E33158A807135850F7125A7EAABE472B3CFC7AFB82C74F02DA69EA250FE
SHA-512:	531ECEC11D296A1AB3FAEB2C7AC619DA9D80C1054A2CCEE8A5A0CD996346FEA2A2FEE159AC5A8D79B46A764A2AA8E542D6A79D86B3D7DDA461E41B19C9BEBE92
Malicious:	false
Preview:	hy.b........@...............H.....L...L...L..(L..0L..8L..@L..HL..PL..XL..`L..xL...L...L...L...L...L...L...L...L...L...L...L...L...L...L...M...M...M...M.. M. (M.!0M."8M.#@M.$PM.%XM.&`M.'hM.(pM.)xM..M.+.M.,.M.-.M...M./.M.0.M.1.M.2.M.3.M.4.N.5.N.6.N.7.N.8 N.98N.:@N.;XN.<`N.=hN.>pN.?.N.@.N.A.N.B.N.C.O.D.O.E.O.F.O.G`..Hh...............?......N........@...............A.......................................................................................................... ...!..."...#...$...%...&...'...(...)......+...,...-......./...................................................................@...A...B...................G...................................(......................................

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-cs.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	64245
Entropy (8bit):	5.814241893442265
Encrypted:	false
SSDEEP:	1536:sonSvAX9Cf306OFe4Q/irU+bvWDdF3EeFWPA:rSvEchf41oKv4dBEbY
MD5:	E8B1509F86508E807D61216614B3DD58
SHA1:	B2334509E9D1589AD2E8B80C187018EADB15872B
SHA-256:	97A4755FE9E653A08969F1933E3DB19C712078B227BD5AA6799093ABC5A0EDC3
SHA-512:	FB340FEF9D0DBA342FD85B8B18C0090391AED717FE92A8DA7C5D939DC9C0AA5235D4423B590E52B0DECDDD4F4AD8BD4652361161C193617601FF490DD1BE97FE
Malicious:	false
Preview:	hy.b........................i....8...h............... ...(...0...8...@...H...P...X...`...h...p...x..................!...#...&...'...(...)...+................ ...(...0...8...@...H...P...X...`...h...p...x..................!...#...&...'...(...)...+.......- ../@...H...P..0X...h..1p..2x......4...3...$...5...6..........- ../@...H...P..0X...h..1p..2x......4...3...$...5...6.......`...h...p...x...........8...@.......... ... ..." .."(..%p..%x..,...,...........?...............q=........p...p.C.....P..(...$...-.......2.......;......(...G...Q...W...`.... .S....l...up...........Y.....1.......`.....U.......].`.!.....q..........>..fd..'.....i....Cq..D...5..m.0.n.`... .0....O..r P.........u...6......]......gp..........1..K.`.U..............P$P..<..._R.....T...........W...."B.....a.......Y.!.].q.\<B...a.]...!........+@..&......f...'.a.h...i.......k,0.)n...D..T....#...'C......W..D...........G. ..bR..%........0.!.0._R...*...0......QTp..t+.+...T5...;...@...C......Y.`... .[G.......L.... ..Qq.....

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-cu.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	52842
Entropy (8bit):	5.38329333122688
Encrypted:	false
SSDEEP:	1536:a5OMYzUXoeoZA7SmEUbxucj5DTKZ2oVXEyb:a5JYzUXoeCA7SmEU9ucjBKZxJEyb
MD5:	B4E5921B1DF85BA9F2EBE6CE578915F6
SHA1:	B5F2E813667AAE32E65CAB9C9A0DD291421ADA0B
SHA-256:	2BAEE19D5024FF87DCF3A1B9D0DA1B3AC5A1E506ADEEAD3B96A4DE5395D0290E
SHA-512:	41696A9E25CA004ACDC8DEF265766392CE3568747560FF73CD08AC9FA4A99E4C4654FB84DC602845B3E444A8312FB099C72932471F7E830874CD7CFA184B63B7
Malicious:	false
Preview:	hy.b............4...j....................0...8...@...x..........(. .). .* .+( .,0 .-8 ..h ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ...!...!...!...!.. !..(!..0!. 8!.!@!."H!.#P!.$X!.%`!.&h!.'p!...!...!...!...!...!...!...!...!...!...!...!...!...!...!...!...!..."..."..."...".. "..("..0". 8".!@"."H".#P".$X".%`".&h".'p".(.".)."..".+.".,.".-."..."./.#./.#.0.#.0.#.10#.18#.2p#.2x#.3.#.3.#.4.#.4.#.5.#.5.#.6.#.6.#.7.#.7.#.8.#.8.#.9.#.9.#.:.#.:.#.;.$.<0$.=8$.>.&.>.&.? '.?('.@0'.@8'.A`'.Ah'.B.'.B.'.C.'.C.'.D...E0..F.o.G.o.H.o.I.o.J o.K(o.L0o.M8o.N@o.OHo.PPo.QXo.R`o.Sho.Tpo.Uxo.V.o.W.o.X.o.Y.o.Z.o.[.o.\.o.].o.^.o._.o.`.o.a.o.b.o.c.o.d.o.e.o.fxq.gP2.gX2.h`2.hh2.i.2.i.2.j.3.k.3.l.3.m.3.n.3.o.3.p.3.q.3.r.3.s.3.t.3.u.3.v0..wp..xx.......................2...8...U...h...........B........ ..................A..:...i........a..........H..._b..}b..."..."......"...BC..Z.......q...$....C...c.!.....C.#D`.$.c.%U..&..'-..(S..)S..g$.+L..,...-.D..[....d...E..L...QA.3e .4...5.e.....7...8...

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-cy.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	35913
Entropy (8bit):	5.348760037769152
Encrypted:	false
SSDEEP:	768:s022NAK9/8ei2v0BJlYZqNCII2vfP+DzEKd8mPBFDpvH5aWg6:c25X/MBPjNCIISkTPB3RN
MD5:	B0F32ED7B4B8A068A962D820627B7229
SHA1:	76734E58BD33C4D1450228BF05E53CFE169A02E6
SHA-256:	4D0569FE2F4B41B3164CF610310E1D996FD2C553CC39DE6062E50F4E033CC207
SHA-512:	8F20253985C217401627E0C7D31AA1BF213FA220BB498869E11E1E532C3C82DBC2ABE6FFA27C69243913243AF1AEB35806175511D77D730C914B1CADD71AA7A0
Malicious:	false
Preview:	hy.b............(...I.......A...................................................................................................................................................................................................................."..@.......".....H.D...e.................... .. 0.,#...&...)...+....0.11..R4...6..T9............[.....y........; ..<...=H..>..E@..&A...A..HC(.).@..C`.+Ex.LF..MG0...../?8.0H8.QH....p..H..TJ......bK...L...N...Oh..Q...S....@.i.H.JVp..X..L[P.M.X..]8./`...b..QeX.2.x.Sh...j........{...h..l.......x.C3...n...Hh.....O. ..pp...@.o\(.p....\|8.rq..sr...t...v....X.!.....X.%eh.........Hx@.IT...t.......'`..z...../{..0.(.Q\|....H..^p..~......!.......!.d.$........@.'Np..% .I.X.j}..+R.....M.......o.x.........2.0.....T...0.....P.s/..E8.........b.......$.P.%...F...G.`.H(.....J. .....,.h...(...8./.H...0.q..............a........1....X................i......'....................X.1)..Rd..s.......1...4.[..;..e/..........B........-......&3....[.............t.......

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-da.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	6967
Entropy (8bit):	4.538486676934439
Encrypted:	false
SSDEEP:	96:op8RuPmWKvTES4MDmKQS3mAdi1flBiLwHR08fiCkUNGrvYe4KiGn1BUBkQH:op8ImWKEGS87diLBiLUfoUNGrln1BUBL
MD5:	D0E160DCA547EDA390D6CC7C4A1F7AC6
SHA1:	7EB71819675E82B1BB92428E07FA6B05CD1854D8
SHA-256:	86FDFC8DB62CDAA11F615DAD3712DA1F4708294E029A4AAD0FC285D4EA16C4BD
SHA-512:	9BE5F673962C6049ED1C796A81AA7BE72A1C7715FC2D4610CF6565541C7BB145D068B94B5FDADD30BDB5F5287CCC2055EC1DC9E11E4C5B8965D59EF73AB145C4
Malicious:	false
Preview:	hy.b................7.......A...................................................................................................................................................................................................................A.......!.<.......-.....e.3...:.........i...* ..+!&..$...(2..+".O/..P25.Q.9..54.s9;..=/..?..VB%......i)..D....*.[G...I,..K..a...".....0.D.1...6.E...E...............................o..... .e.....#.3.......)}............'.y.(...............7.B.......$............L$...!...+.....k@..lN..M.......o...0-..e...RH...O..TQ..!................!..z......6.................................l...R....E..t...U...3...w.......................D....2..............................................=....M...R...T..u..............Y.......s...\...]....U...........V.......(..g%..............kW..LY...$..NP...X..........2[......T]...R..6_......x...........{........2......!.......%...........................L..........o.......l.......S...._..........U.......Y.......E...\...]...

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-de-1901.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	121393
Entropy (8bit):	5.614356663048744
Encrypted:	false
SSDEEP:	1536:4S0havr6N41g38Gnzvueua0+Az+u3tnQrI9LKyQh9HzSWwwwKYf+wBuLxfrHmu:5cae4TyzvqaQzjQMuSWwwU+RpT
MD5:	DD9D0A81D897F88F76C1F6D69FB7483E
SHA1:	520BF6111F902196591EA358FA8AB4AE89EE0ACC
SHA-256:	8C5FA4B29519D17593E923BC6A9A284DF7A6D07FAC42F897110B8FB2E0BAEEF5
SHA-512:	8C0A339D353CAC1C66542BCFB7D41E7241A59A1886FE8A189AA155AAFDF3BD23274F956D3D8A49BE5B23CCEAFB516648A0E0B44F67E6F5CA60E216FB3F362CCC
Malicious:	false
Preview:	hy.b........p...P...1.......T................ ...(...0...8...@...H...P...X...`...h...p...x........................................................... ...(...0...8...@...H...P...X...`...h...p...x........................................................... .. 8..!@.."H..#P..$X..%h..&...'...(...)....................... .. 8..!@.."H..#P..$X..%h..&...'...(...)..............?...............rs............@.....2@..=.#.G.$.R...\@'.g.(.m.-.r /.}@(.../...0...... .. 7.......8.....@...`9...... .Y..=..a<..!=......@8......3.O..!. .......%.....%...f...g....O@..!..j(....A..4A...`.D4...8a!..#.=.$H%.%.@..J..%.D...>.'M8`)NI...J...Na&...).QA .S...V..Y.....,.\a%.........^...O...O.-.'..OP.......O@/.a/.....e...../B([0...HO@..w.2...0j....a...f...oA3Dt.4.ya4.}!5.A.H.A.I..6...7...7..!8.....!:.V.-.....:.2...:S.A....2...:.........&.;.n!.Za.[,......m...c=.O...O..A..&.."...x......m..O\..E.....9...@..U.........C. .........9...&@.... I. J.. K..!L.."..@#.&.#..!$.....U....!....'..!...!(.U`(.Y.....(.$..

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-de-1996.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	120412
Entropy (8bit):	5.625930999317145
Encrypted:	false
SSDEEP:	3072:+GQAdd4u8VlGiVdYQvi792ovhcxX9iEaAGGceTUjnnfxXElEg:7Q+UfN3RiEaZGceTUjnJXih
MD5:	E7A9906B316D478B55BF8EBCBBB1D1C5
SHA1:	5688453DE9AFB7405960980DC93ADF9296AA2F4A
SHA-256:	D673805547A0228D2F57A5AD551B8760CFCC521F38C49284ED3976E3515BCA49
SHA-512:	36E6BEABA33A16203F996D6E8FD987347028D590A4B4BCD4D2A129876C486E03B9BA13F279F301E91AEC1E0F8E91BF109A27F2B464F15A3E1A2B56D03473B69C
Malicious:	false
Preview:	hy.b........p...L...\.......T................ ...(...0...8...@...H...P...X...`...h...p...x........................................................... ...(...0...8...@...H...P...X...`...h...p...x........................................................... .. 8..!@.."H..#P..$X..%h..&...'...(...)....................... .. 8..!@.."H..#P..$X..%h..&...'...(...)..............?...............qr................'.4`;.>.#.I.'.S...^.,.h`..n...t.0.~.3..`9..@..../.. +.. <......`....... >..@>..>..`.Y.@....4..A..............A.NT..!.`.........$...%.....-.....TT...%..j,...2!..8. ..` ..!.;.#...$.Aa%H%@%.B.%..`&.6A.LCa'.G...I...M.(PJ..CT@).O...Sa..V...Y....*.\..X...Y.`$.^.,MT.(NT@.PT..LT %....RT@/.p./.H!.....A.....[0B..0E%...].0.%`......bA2BgA..pa/.t...z...~..G....!5.a5J..5..A6..!.M..$.....8.6...).p.7..A.S.8....U..9. A$..@;./..Yo.,Z.a3....AD.).."...x<_T.;`T@.Mr =..B=......`...83.#.;.hB..A...V.=jZ..A..>B..>CZ.../ ...a.F....&..H.@...!...@.K......MZ. .&. O.!.. "QZ....A"..."..!!....VZ.#W]..A..$.#..

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-de-ch-1901.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	120218
Entropy (8bit):	5.59374839547232
Encrypted:	false
SSDEEP:	3072:iDCOweCoHgtKmiQaf6ZCM1BKstDcqZnSmEBQBkXmhHB71:CCZeLHgtlG6dzhcqZnSmjkXmJ
MD5:	C6773229845710633D3A4D6DD9800FC5
SHA1:	1D4C2E5F3DDF5627164EDB471E8A8177993449F4
SHA-256:	8223A912160354E05735522FDB339DC59B353AD5D1E4F4CFA94898DC348E748F
SHA-512:	EA69926520429CD934D52D84A7FCAD6BC9BB654085D8D1DE813E73F191EBD7B310E2E68B4BB43FECBD88CFD15EAD7FE295405C01B7FDC225914B0477C08D4E01
Malicious:	false
Preview:	hy.b........p...(...........T................ ...(...0...8...@...H...P...X...`...h...p...x........................................................... ...(...0...8...@...H...P...X...`...h...p...x........................................................... .. 8..!@.."H..#P..$X..%h..&...'...(...)....................... .. 8..!@.."H..#P..$X..%h..&...'...(...)..............?...............hr...............`8.2...=.".G.&.R...\ (.g.,.m...r.'.}........ &..@...@)...6.......6..........-......:Y..;...7..!......@2..h.....NM..!.....A..,E.d...%. .f...g.@.LM`..!..j(.......4. ..."D4A$.8.%.. %.=.&H%.(.@.%J..).D...>a.M8..G..OI..PMA....+.P.$SR...T...YA....,.[.-.........^!.MM@.NM`.R0a..M /..`.RM.-........A>..L.0..z....0.L..........j....a.2.f...o!3Dt.3.y...}...a5H.a6I..6...6..A8...+.....a1.V.8....O<.....1..!8......#.........& ..Ga.ZA;[,@...B&.j.._s.._M..`M .A.8.R.B......K..E.....B...8.Oh.... .S..........C.......... F.. .. !...!I.A"...#K. #L.a#.S ..&........'.S.'..a(........U....S.(.U..A+...$ .

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-el.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4219
Entropy (8bit):	2.980575544490941
Encrypted:	false
SSDEEP:	96:mMgP7nbvtENatA/JKab1QaRAwdRsCaRANaM2ahrvmG7VnaxEaP3/SJADfY:Wjpk+O5b1zRAcRshRA0KhrvZ7QJPvSJd
MD5:	746A59E9F9DDA15C0F17C1B72921C85F
SHA1:	EB7F671AF76EAC40787D9227D41453B5117889BF
SHA-256:	76AE3454FB0045ADB83094832578AA4749CE4DC694C4EDCF85B419C1E2D9BCD3
SHA-512:	8894B754377285E2F3071FA5BCD714F249F3DC85BF3690641C6576B070113C1E72CAA61E7E2C97D35A7F79B08C2969BC4A2FE46BC4BFFC4ED58069387DFA7834
Malicious:	false
Preview:	hy.b................{.......Z...%8..&....0...@.. H...P...`.."p..#x..1...................................,...................................1.... ...(...0...8...@...H...P..-X...`...h.. p...x../...................................,...................................0........ ...(...0...8...@...H...P..-X...`.."h..#p..................!..........$...+.......)...'....H..!X.....$X......+...(.......?...........................B....%.../..E1......G7...@...K..JU..._...i...t......O~............S................... ...!............... ...!...&..`.......b...........e...f...g...S...S...............................................l...................................l.......................................T.......R...........E...S...........................L...........K...................................................@..."...,...$...@..."...@...$..............,...-..........,...................................................................................G...................G...............

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-en-gb.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	46607
Entropy (8bit):	5.538023038233528
Encrypted:	false
SSDEEP:	768:8CPGXSlQXvRVYVL0xpPuB5YBBaEiQD6m8eft0Sr+uh0d3TPwHh8fJVVoxUb:8bXQMZQ0xwB5Y7aEiQD6mPf2S6uoTPwg
MD5:	FA3DCB77293A058277CB148A0FF491FA
SHA1:	3335315B13CD82075DA2ADBEBE32759C01833E8D
SHA-256:	AE4B78009D18E849D87458677151EE3AAD1608AD72EC050DFD2421D22E7D031F
SHA-512:	C83A8C4EB29C3171FEFE983C3E342B6AF1BC1ADD7288C75C5A782DC14F12D2AF83043C2B43C9AB3E5DB61C91DE6D7CB473746517DEBCFF7AC2C0F05BB8B0971C
Malicious:	false
Preview:	hy.b........`..............A...{....................................................................................,..@.....`...p.........%.h.f.H...h.H...i.@.."X.K%X.l(H..+....`..2..P5......r8P..;...>...B...D(..G..8K..YN..:Q..AT8..Wh.CW...J...Y...\X......\...Q........(..]p.-_..._..Ob...e..i.(.."8.sgH..h@..Cp.."..W.......U...........Bk(..k0.$n...oH..`X..q...c...s..J.......,v0..x..Ny......0\|@......~ .....4...5.P..#...e(.x...Ys`.:W...............+..e...&......h.X.i.p.....+...,F...E....@.O....C....... ..h...........h.W.....@..i..cK...vE.e.0..R........P..`..C..KQ....!.@...e./........P...h...X.4...U...u.(........9.........x.....C....H.........Ga....`...H.................N..........y.......D.... ......%8...H..R..Y................X.$....x... .....h[P.I.`...x..i..............8....q...R...........U...6.0.wp...g..9. .:L..!.@."......$.8.%...{P....(........Q.hv.......L.....O.......o.(.r...s.h..U..U................p...(... .Gv0....i.....b.of....H.......P.......8...(.....$@.

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-en-us.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	59802
Entropy (8bit):	5.854267250388292
Encrypted:	false
SSDEEP:	1536:h5tXyt+U07SAFarfxlLXSwk1cI3P05j23Kqo74TKAqs:JCtYuPrfxZE1c0o26aT9qs
MD5:	B2693233D14890C81D322BEC948549E7
SHA1:	7EA8E42E319305010D3E6568FB4983171583DD06
SHA-256:	03727CD6F4AA71B203C4C74CA6987AC7D87F13037337AC6F4B6996C2A0DC5F8C
SHA-512:	1BCB5A9C3DB408FBA6A6D02162A294C5C7264D4B202EB332DA8D02C0C662CB070CF1534D5AA0754788D35ABC88273F3337CA5F302ADA95BCAD077EAA52804915
Malicious:	false
Preview:	hy.b........`...............A...{....................................................................................3..@...a.8...............h...h.......x.....J"X.."...%`..(...+.../..02..q....5..38..T;p..>..VA...B..xE@.yHH..J..!MX..P..CP...R..EU...X ..X...ZP.)[h..Ep..]...]p.M_...`...a...d.......d@.SgP..i..U@...j..7l..X.......:....mP..Th.do........`.Gq..(P...L..J.......,s...m...t....(..v.......y ..\|..4}......V[......8...."..Z...!. .b10.U\|....8............(.@.....J............x...8...........@..........'H...`.V...7...a.....8..!`......`.........H.......r.q.....l...E...N.x......F..Q.......3.@..^P..H..\1.EA..ob..........a...B...C.X...........(.G.x.......0.J..... .Lv..M...n.../...P.0.).h..8..Hh.T.i....V...W...ebs.y........R..#. .d........j....@.(........P.+B...H....N....x... .....2.X..0.................X.(..L..!.P."..............WH.I.(...8...p...)..0...O...........Dx.0.....@.2jh.S...t<..U...S...a...".........@....z....oP..]..i... ....`..l...........O.p.0....U....0.s...4tC...P.

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-es.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	14995
Entropy (8bit):	5.189941208174841
Encrypted:	false
SSDEEP:	192:j6aP1LZOFTlMa6Xb05w4rsv6SHyg8jNIcG3VTCkde7QpCKBz1iBOJGPJ3IDIHmz:hP9er5wKGhSfhIc4yyC+z1iM0PtIDIHQ
MD5:	F6BD0377237FCA3C4B7C6A6CB244298B
SHA1:	B8DF975889CFB06FC97DB3D63A7820B7CF621F40
SHA-256:	137461792537A2E56A6475E81E2B9AD7A2BDABF1F4738FAE186DCA3022357349
SHA-512:	0A36860580E295122F5E49091127386EDC762EEDBA80A2D7AD958AB33307AABCD420173E08AE797A19664BC830800D92C548F3E434BF19BFD7791E50E0C45C2A
Malicious:	false
Preview:	hy.b............T7...:......A................................................................................................................................................................ ............................... ......?.............................$.C...."8..((../,..6d.H=...C@.JH,..OD..U0..\,.Nc...j...o0..u<..\|..S.....L..........\.X.T...@..l..........8..........0..........(...'..F...G.....\.I.D.J.X.K.4.L.4..8.N.......PBp.Q.h...p.. H..E..N'm.V...W...X...Y...Z.<.....A-L......E....4.E...Fh....m../....x..:....`.LE...I....<..\|.....N8........ ..}X......@...........)....t...T.......$...D.G...H.....\|.......H...Q.M.(.....U.@...e...........p.T.........................x.....A.....P....... ..j....(.G.T......R............Y.M.....H..#..........R.........x.......`...P.................S...............E......G...H...O.....L....... .M........+........t...i.....T.../....d........................E.%.....D....)...........8......./....a..M.....NO\......t.I.h.........2.................

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-et.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	21421
Entropy (8bit):	5.229662639498423
Encrypted:	false
SSDEEP:	384:1HSUqMAZs9xsrscHJvMC0rWxMabdxhDPWSZuVyVm44/DasJVwLf3:1YanasivMaMaZxFPWSZ+EaZVwT3
MD5:	2AE42AB807286F6EC0FF1876D9536B0B
SHA1:	CF3BBE7348EAF2CB3D93C5CC10964BB8D1BA07C1
SHA-256:	10079C66014DD2E6ABFEF5A018E6553FD5A036AFB96BD2A235440A188F88B15E
SHA-512:	13C193571A7374BB169F6F0F06A9AF7F8251CFCBF60825A85396C907D40F7837C8EFD0A7BC8B6C4DEED2BFCA7B8508F132932D7860C2C9A4FB568D8BA2ACAEA9
Malicious:	false
Preview:	hy.b........d...dQ...S......A...............................................................................................................................................................................................................................................................................................................................................................`...........c...........f...............j ...#...& .MP..-t..0..04\|..7...:l.S>...A.......DT.7G...J..9M..zO...Q...S..N.......D....p..f.....$...8...`.JU<..MH.l.T.mP....`...<..Sx..V...W..S...40..A...v.4..........U..aY...[...[...^t.e.@..\@.gW...aX..^...b..keh..f,.-i...j...l$..n..qqH..r..std..@..6.\|...,.......d...P.:........vD..........xh...\.8. ......y........D..Dx...0.......p...0...(.1........`.......{4."........}............X...\.....j...KI..LP......n\....L.PL8.."..r....a......A........%..d....E...)......A..."......d...%....P...h..h...........K....f..-z.......+......q.......3...T0......................:....O......

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-eu.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	665
Entropy (8bit):	2.439677624130323
Encrypted:	false
SSDEEP:	6:k/8uq10tX2q10tXFtXe8lLLmfllGjpLtwaISjQFytGtq5AlNytFl/r8IYMVnnn:Wq1092q109nuf/GgaISDGE6wfj/Nn
MD5:	E90EA97070CFCFA795FBD807AC300D34
SHA1:	8C83B4CD54D394AEFF31B14A219F2A3562132908
SHA-256:	E2778A4FC7B8F064A32B6A44BC29F10E264D9D6214B8EDB8EBD1F5F6D68E2EB2
SHA-512:	210DD857F7799F1A926C7AA73F26912AD60723E099ACF1566BC39EFD445A1B194BE4DC557D5DA6874E7D75A37115AEAD9389B8009EEC1422764E6648FE4CF8F1
Malicious:	false
Preview:	hy.b............t...........A...............................................................................................................................................................................................................a...........b#..C....3......f...g.......I...j...K...L...M.......o...P...........3.......U...V...W...X...Y...Z...!...!...!.......%...%...%...(...(...(.......................................4...4...4...!...!...!.......%...%...%...(...(...(.......................................t...4...4...A...............E...........H.......................N.......................T................................... ............. ... ..........

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-fr.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8165
Entropy (8bit):	5.160239303629025
Encrypted:	false
SSDEEP:	192:Yq67m0o5PsoVQ5rT1+Eqy2G0Xy7i6uccc/J66POIY2:YHmkeQ/1v2Gay7Bupcx3vh
MD5:	092E0A95D6DADA26CA56D2ED558749A3
SHA1:	40BD8296E5E852FE725C7119083A8D5614037CF9
SHA-256:	00BD8B2D398D77575DA2BFBBC5EC641AAD7F2A87D4A31186EC169E85A27DE5B7
SHA-512:	C04BA62F4A0336E9B25BD2F6A8C3CB82C8B6127C1C04FC173ABC9BF03767A9FFE18C9241B301D6F71F79F3377BC990F25F099D7660880C097A9CF4BB1E4BD48F
Malicious:	false
Preview:	hy.b........P...`...........L....8............... ...(...0...8...@...H...P...X...`...h...p...x........................................................... ...(...0...8...@...H...P...X...`...h...p...x.......................................................8.. @..!H.."P..#p..$x..%...&............8.. @..!H.."P..#p..$x..%...&...'...'...........?...............>.........@...&.......Z..'2.F10......9...A...Jz.KPB.....MTV..\...d...m...v...{$...`...b.....V.....:...*..'....H.[.......Wh...1...6. ...a...G.......u..%.K.........E.x..$~.G.<...}.......\...f..r........D.O8.......,>...d.Ur........X...N.....O\|..J..... ...^.....P..... .........!............0...T.........G.j..8...L..IR..........=P..x...........,....n.......t.P..... ..."..p.Q.....r...,...(...5...8...F.................V...........D3.....................C........p...z...!.......1......................C.......X&..W...............E&..K....f...S...q.........Q............X .Pl......W........@..U"..[.......X&..^.......`...a...b...c...K...e...

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-ga.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	35824
Entropy (8bit):	5.524309158837039
Encrypted:	false
SSDEEP:	768:eZAG7bymjpz7qBZWBHn7xbeGhs0fCJRc3uQz3sfLsCPI2th4k/:iAGfJjpn2UbxbHhJaLc3pcfLFP/4S
MD5:	768032A419E0AE3BD870D591E2173715
SHA1:	58FD709A1DC40176FB72189C20567AC1950B9DB7
SHA-256:	1E3043F395BFB2A4C43D0480BA2F168ED622881CC3482359CA6E99821E983BE8
SHA-512:	4A4CA1F735B82F625002B0292F623179F2A6CE736F633CBFD6868E3DB0709EB06EB462BD9DA3FFA8365C3C38FDACBA735AD32266CB3EC33D3E583ED073D0E3AA
Malicious:	false
Preview:	hy.b.......................A.......................................................................................................................................................................................................................y!............P.c.0.....e.0...P...x......"(..%H..)...,.../ .N2...5@.P9...<..R@...B...s..u.8.h.....8..E@.YI...K...O...R...U...W8...p.dWx.%....Y...D..HZX..]..j_...Y@..[@.._h......`...c..Qe...e8.j. ...0.O.P...X.8.`.x#h.........[...\|J...gp..h..dlX..A8.&m..'p...+...s..uP..w..L{...~..............Q.P.....S...!.....I.....k...............c.X.dB...PH......P...h.........A.!.,.H..c...F..O.....h..4h..p..)d ...(..<a.......q..L.......S...k..\|....P...{..3...P...y.......P+.(.0.i...........L.....@...x.O.....H..G`...X.....a.a.)........&............(.;....M..!...............e.....................(.......x.....A.........Q...r....q..;q.......\|......8...Y(.:...{....g..a....P..........!.....8.....9...i.p..mp..20...X.-....x)...p.pr....h.(.p......)..h....\....x.8...

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-gl.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	9289
Entropy (8bit):	4.767648169663165
Encrypted:	false
SSDEEP:	192:ivHsKFShtcb9Gn03kfkyrU3N3k65tk5kX9yI:GSh+xGn0UfkLNF5tikXt
MD5:	1B08FB098D29C30488B8FC3F19DCF8B9
SHA1:	DF6E03DA66A7A5AE4927334808C8C20752733667
SHA-256:	89D98EFF14E2CF1C2314EFDF392339E62D7E786F100202A7377BF7B22095A0C5
SHA-512:	DE1DE90BD44D8977A4A69D6C64BC90F421F5E099396D06FC2466DE6EE62A59F5A59AC1BA0EA96E69DFCF744F12165A8A9E9FDA73AFE5D38704A7B3B0488A369B
Malicious:	false
Preview:	hy.b............."..I$......A.......................................................................................................................................................................................................................y...........B...#...........&.......H.4.) .j"..K&d.,>......10./4X.p.&..8...;...?p.T....B,..F.T.r.xIz...~.......h...".=...!...........D...$6...Oj.'.L..E8.i...-,....b.....m.(.e8$...2..U..Q.F...N.....!.......C....-\...l....e<P..4...0..$6:.K$@...f.....!<H..;6.-Yn..P..2...3.R.t.B..........\T.r6x.9.J.......t..@D.C5`..7\|...V..0...,..15Z...^.N<..K/...,<..?.......<..%>..Q/......s/......NB.......C..(M..................F..........a....u..C5......%....0...,..H/...... ...K/...,..M...NL...<.. ....!..............E....J..2...X...................................a..C5......E....0...,...M..I....C..K/...,...........<..2b..Q/......s/.......R...... ....P...............C.."W...........S..M.......d....&...J..r6.......).......*.......H...... ...aK...M..R...........

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-gu.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	655
Entropy (8bit):	4.207284085511268
Encrypted:	false
SSDEEP:	12:Kphl9dsn8tHcgWQZXiJhUmN+tRktU9t80dtcUdH0TME8h:yhl/3HRWQZXifU6+EtU88yJTt8h
MD5:	F6DC4E0FB974869D3D9457C582A38690
SHA1:	E6708AFA342639EB96CB97D1F541A421B2626D00
SHA-256:	AF0EDB67C2219B803C3EB6C1DEE6F2D41A3FE00468A9DA8BE8EF5056D701ABF3
SHA-512:	A778236FA8C5F28E747214D0BA0417ACA1C9A95E4C013FBC21E6DEFE39D0421A2B27CCB27E6F248404A9F6B5CD1014574D0478078F36AF2A0181872AC8173D72
Malicious:	false
Preview:	hy.b........(...`...........B.....T...T...T..(T..0T..8T..@T..HT..PT..XT..xT...T...T...T...T...T...T...T...T...T...T...T...T...T...T...U...U...U...U.. U..(U. 0U.!8U."@U.#PU.$XU.%`U.&hU.'pU.(xU.).U.*.U.+.U.,.U.-.U...U./.U.0.U.1.U.2.U.3.U.4.V.5.V.6.V.7.V.8 V.98V.:@V.;XV.<`V.=hV.>.W.?.W.@.W.A`..Bh...............?......H............B...........A..............................................................................................................................................................................1...............................................................A...................................(......................................

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-hi.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	687
Entropy (8bit):	4.239578871898771
Encrypted:	false
SSDEEP:	12:abdtltF8MN32m0c2SSYuNuA4vltG9qXLgskIU9t80dtcUe0EZA8h:aptKEGC3F4IU88yMUA8h
MD5:	0807CF29FC4C5D7D87C1689EB2E0BAAA
SHA1:	D0914FB069469D47A36D339CA70164253FCCF022
SHA-256:	F4DF224D459FD111698DD5A13613C5BBF0ED11F04278D60230D028010EAC0C42
SHA-512:	5324FD47C94F5804BFA1AA6DF952949915896A3FC77DCCAED0EEFFEAFE995CE087FAEF035AECEA6B4C864A16AD32DE00055F55260AF974F2C41AFFF14DCE00F3
Malicious:	false
Preview:	hy.b........8...............F.....H...H...H..(H..0H..8H..@H..HH..PH..XH..`H..xH...H...H...H...H...H...H...H...H...H...H...H...H...H...H...I...I...I...I.. I. (I.!0I."8I.#@I.$PI.%XI.&`I.'hI.(pI.)xI.*.I.+.I.,.I.-.I...I./.I.0.I.1.I.2.I.3.I.4.I.5.J.6.J.7.J.8.J.9 J.:8J.;@J.<XJ.=`J.>hJ.?.J.@.J.A.K.B.K.C.K.D.K.E`..Fh...............?......L............A...........A..................................................................................................................................................................................2...................................................?...@...................E...................................(......................................

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-hr.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	3031
Entropy (8bit):	3.198992736743913
Encrypted:	false
SSDEEP:	48:d2CEMwYhky3FiH3wJVNkSghtchN/LPbmqfjUdesNmw:uUDdk7wXYEw
MD5:	1864E47E724BB7F9C052A2840EEE21D9
SHA1:	9749136107913D6570C0C46AE2B52E66D8284C38
SHA-256:	D5F066A5657F1D7C39D053956DF204B7926F40D2FE4F69573AF09D909066E26C
SHA-512:	2D6E76AED93652510F5864DDE1E1923C67E7413E895ABFA8FC7E8C9177E228E4D153AFB7099B86697D1662CA3124FF2173F4AAB2C978D52583A8E2DBC70C0842
Malicious:	false
Preview:	hy.b........d...p...........A...........................................................................................................................................................................................................................................................................................................................................................}...@............2.......%...2...........%.....k................%..p..........3"...%...(...,..W/...2...2...5...9..........R...............V.......E...g................................................................"... ...........:...........;.......................=..................................................."..%...........2;......................................................................................."..............r........................................................................@..............."..-..................;-.........................................................-..........

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-hu.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	317251
Entropy (8bit):	5.519807782240349
Encrypted:	false
SSDEEP:	6144:wxOMr0dBjIg2U0RT7c25PkvQoc6yzRcOmpTeIrDh2ky5khBh13kwTbqgT3Gfhh4D:wvkufNkzFtuWlAh36
MD5:	37B1F197E8DFBAFDAC4597EDCF673E63
SHA1:	E672C6870417C71ACDCDA6C16A7185D7A868EB68
SHA-256:	8B3A16268CC932B226C17FF405B3CFB6EB38A9511A2043D653DC03729EFCEAC1
SHA-512:	69EE820439633B348BF8EFDD3C498A30270753E53FF78D022BD1B295C6C95E0501955009F610A12FC55C786A563B0AF40D2B69A7584B47662B943ACBAC2D3634
Malicious:	false
Preview:	hy.b........X...D...C.......A...r........................................................................................................................................................ ...!."......................... ...!."...................................................................................##..............................$$.......?...............u4......A../...6.$.A...FE7.3.@.O.I.P.S.SI\.R.e...n.S.x.TM..<...4..X...YQ..1...F..-...>U.. .....C...Y..M...N.......1...5^..;...D.'."!1."b:.E.C.E.L...U...X.....G.Y.G.].I.b.B.c.@.e.J.j.K.].N.n.J.r...v.).i.U...T.z.U./.6...Z...L...ZU..WV..+./.../.>./.?.{.D...%...7]..K...._.I`f.Y!T.M...@#..,........A.....(...5D......9...C.......H...&J..)K..P..3...R...V...V...#R.....O...9.&..U/.V4.+.'...9..Y.-.?..[G.<E\.2.K...O.._T./.Y...H.Y.$c...$7......A`...g.B.R...V.,.p.?.Y...-..Yy...y................7S..=....P&.0.....L.....%.B.8...#V...Td...........L......c..]..A.Z....Q`....r.(...&.A.=.$.......:.;.2.....O.....:.?........!........

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-hy.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	605
Entropy (8bit):	2.7480544370803566
Encrypted:	false
SSDEEP:	12:6q103+54v4Oq103+54v4At/tJBb3ANmWLYC926DXXc:B+Omvo+Omvn/tJJ89248
MD5:	70EA4451C3A26FD7197A3D2188BE4152
SHA1:	E0C1390D94876BF2A3CBDECAABB0E335BD86355D
SHA-256:	9B34DFCA85CB27546829F104F137757EFB274934C1E9D4991F55AD564962A76A
SHA-512:	AC957947C51EA23A9B7CA482DB08F0CA3332B8048025A96ACB01A4486C1A87C3F3D08898E94CC8E0B20721C56CE708FB37E1BD81BEE1FEDBA60A7F370D5DDAA4
Malicious:	false
Preview:	hy.b........\|...@...].......1...................................... !."#$.......................................... !."#$.%.....?...............k.......A'...@..........E.......G...H...........K...................................................X...........................B...C...D.......F...d...%...I...J.......L...M...N...O...P...Q...R...S...T...U...V...W.......Y...Z...[...\...]...^..._...`...a...b...c...A...............E.......G...H...........K...................................................X...............................................d..................................................... ..

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-it.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2512
Entropy (8bit):	3.836869209179978
Encrypted:	false
SSDEEP:	48:970ZuhZFTQ/VVpGBPrOwm0Q3/aZRAp9FX68n+BoZIugUTa:pyPdX0KWRUFXsagD
MD5:	A4D5EC24D4C5EE745CDCDC019018074F
SHA1:	15DCD0305508AFE357EEE16A543F4CE547ED500C
SHA-256:	F9C027D7FD44B01CD5E1CDF802E20C63560673098AF18BEA0930BA9AF334E0F7
SHA-512:	E9022473816F2ECF4B5B06BD6B28D75EC64FDFF974A991AA522EB105E3AA8D23DDA0A45E11040AF4DB32E1F2E8CFFFC058BF29FEA1403AF5A724831C730719FE
Malicious:	false
Preview:	hy.b........................6....8............... ...(...0...8...@...H...P...X...`...h...p...x........................................................... ...(...0...8...@...H...P...X...`...h...p...x..........................................................................@...!..."......D...e...F...........i...........l...-............"..............4...............3..y-..z4..........c...D..........g...........J.......L...M...................8..K/..........v.......K...............\...........;...............................K...................'.... ......................./..............j ..........................................t....6... .........................6.............................../...............!..0..................................U.......g...............c..............................+.................... ......`...a.......`.......b.......o...................................5........"...............................................................#..............

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-ka.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	9996
Entropy (8bit):	4.691575073974727
Encrypted:	false
SSDEEP:	192:BykbapajL7tio65gkERH0b4/HXQDPPCOqyKrQhuqDr5fpMEgKh:BBNjSgk4H0kHX0XrKrQXrv/g4
MD5:	AA6C771083158380B2631F01E3F64F20
SHA1:	1B41CD8E7585DCDE57FC0B40502328845E524457
SHA-256:	2472271C7955C67E9FDB86D0CD3C5D88F5E598DA4F44B6741284B2BBCB2E4D52
SHA-512:	F8CD93862CA2F76D769721BBF858955FC007BCF2E1892AE3E50846E28C6027208869F580479D3888610820AD5348A21A8709984AED844669FCAAA3F14199ADDC
Malicious:	false
Preview:	hy.b........(...H&...'......B................................................................................ ...(...0...8...@...H...P...X...`...h...p.. x..!.................................................................................... ...(...0...8...@...H...P...X...`...h...p.. x..!.......?...............B...@.....X...p...x.D%H..-D..5..G=...C...K ..S...[$..d(..k\..sh.O{<......@.R...S...T.....L.....W.......Y.....8...P...`...........\|.....a........P...B..QF....t..G5.QFe.Eym...0..2>..H-..8...~.......2..QV...o..H#...2.......H...............G......F...G...H...............................P.... ...'..S........@...>.../..XW..........[.<..(...\|..^>...1...R..!.........F.C...D.......F...G.T.H........#..K...L...M...N....S..P...Q...R..............V...........Y...Z...[.<.....E...^.......`...B...C...D...L}..F...G...H.......J...........M.......O...P...Q...R...S..........Q...W...X.......Z...[...\...]...^..._...`...B...C...D....Q..F.......H.......J...K...L........k..O...P...Q...R...F2......

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-kn.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	711
Entropy (8bit):	4.3179288692537705
Encrypted:	false
SSDEEP:	12:uYYcrpn9wlpnJca6CUARLvXCqngHkGsOoiE9j00uE8h:uYDrp9wDnJca6CUcLvyqNfOM9IA8h
MD5:	D986AC2E7C75CF3EF929A7A269AE0D5A
SHA1:	DE8BF2EE2B8A77102337C45E5FEC924C6C02355B
SHA-256:	2B999D0A152F804601AA8F38FF0D3A6E5949977BF1DAA76FA888ACAE21526287
SHA-512:	5475C82FD5074334BC5F0F89EDAB62E94BC5865DA0432C6F830B50DB3045AFDA12BB698659951F6D0F76C55A43E1ADD8D47AD7FD03597BBE92D8178AD4783C71
Malicious:	false
Preview:	hy.b........D...............I.....d...d..(d..0d..8d..@d..Hd..Pd..Xd..`d..pd..xd...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...e...e...e...e. e.!(e."0e.#8e.$@e.%Pe.&Xe.'`e.(he.)pe.xe.+.e.,.e.-.e...e./.e.0.e.1.e.2.e.3.e.4.e.5.e.6.e.7.f.8.f.9.f.:.f.; f.<0f.=8f.>@f.?Pf.@Xf.A`f.Bhf.C.f.D.f.E.f.F.g.G.g.H`..Ih...............?......O........@...............A.......................................................................................................... ...!..."...#...$...%...&...'...(...)......+...,...-......./...0...1...2...3.......................................................................E...........H...................................(......................................

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-la.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1839
Entropy (8bit):	3.12543324723605
Encrypted:	false
SSDEEP:	24:aPF+sH+sNIemluNLFrqCvmEkzR7PfHcQJk8pAhYx1yRzlF6mi9JgJMppZ+ss:uFt87uNLFr1uh78BSLv4z3icgZjs
MD5:	9AAA47272099A013A4389BC314B7D2ED
SHA1:	20B5BF65FA2023E67EA0687F643B52EAB3FC68E9
SHA-256:	FD4B6F36135CD3B932E350EC2017DFD89D2E36AC226F54E4C8F2E4BC6DB0593D
SHA-512:	318B17B2E2B16EC73F231455D633C69FD44B32868C215053B3CCCA54472E775D4589CBB4DAAD2FE37A40F79B6CDE497F654654BE009D485A84327E0F560FC843
Malicious:	false
Preview:	hy.b........8......./.......A...T....................................................................................................................................................................................................................................................................................................?......Z...@...A.......c...................(...iP.......C...........X...........@..r.......Ta..................9...:.......u...C...........H.......................w.........../...................l...m...n.......".......r............'..............................................................T.......................q...........4%..........H.......U...u...................E.......................................)...........l...m...n.......(.......r.......5....'......................U.......R............................'..............................a...0...........e...4.......l...m...n.../......."...r...o........'..............u...f...................................

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-lt.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	7774
Entropy (8bit):	4.633413885132318
Encrypted:	false
SSDEEP:	192:EzpJxnGZRt2XF1iG2TPY89i3k4OikTky2mKx:E5ORsmLjH4OikTk2Kx
MD5:	970C2671EAC4FFF6D840DC122E43B7C6
SHA1:	D849F8B0950DEA8C45E60296F6C8A7AE2E0F3F95
SHA-256:	6FE2DA26A96834FB9AECBE586D40F728DF0EF676A4F235450054E66841B9E2CA
SHA-512:	C6B799AAAA714650CA39F8728BEF6989E7E801508366CAF1B384F021EE443BF21B3F59D28C2D9123A1F59B4ABD3A27522CBA830E431940E6EF9DCCB5A319D581
Malicious:	false
Preview:	hy.b........d.......^.......A........................................................................................................................................................................................................................................................................................................................ .........!!......?...................@.....<...j.C ...(...0...8T..A...I..IQ...Y`..aZ..jr.Mr...z>..H...R.Q.....b..d.....U.....p...4...P...................x...v._.....h.....A....y;.K.......E...^Y...X..TU).I....e....,..yC...X.N....}....n..l..R.E...0...l..iK..n...m{..x3...+.L.\|..x................L.....C-^.D.8...........".......\....... .......t.....O...P.7...&.......A..;$...f.................Z................J...... ...........B...C........"..F.<.G...H...........K.......M...N.......P.......R...........U...V...L...X....n..Z...G...^....~..^...........a.......B...C...D....d..F...G....!..........K...L...M...N.......P...Q...R...S...T#..U...V.....0.X.......

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-lv.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	38602
Entropy (8bit):	4.079352790938085
Encrypted:	false
SSDEEP:	768:91xhOugI3cO0VLN2o2zmetRffK359CG02:9FtM9c/D4x02
MD5:	05DFDB7F1EE5744573CCD62AE565B2C7
SHA1:	754991BDB092E363B8D884246F4CA780CC9AB2F3
SHA-256:	65962CCB5055E4C693E5AC493D6AFFDC810EC168EB2942F5705B7F4E464F9993
SHA-512:	11675BC30F19161666F0D7B5AE001CD2682989465DD3F4973C455BA50EB1250E56FD1782D9589AF2F8B3D6843A611D75D38E4CCC03A529A7B42CF403C482F2E8
Malicious:	false
Preview:	hy.b........d..............A................................................................................................................................................................................................................................................................................................................ .................!!......?................%..@...A........1`...P...0..10..#@..10.I)P..1p.K0...1...0...1..O8...@...1 ..Ap.SC@..I...Pp..1..WW...1..Y_...1..[g ..1...1...1...1..`o`..1..A........!..K".... ...T..D.E..... ......(...*...A`.....E,...u..O...R........!..U...By.........V.......G.......I......K...L...........$......Q........................D......A...Z!..NR..\................................ ..............P'... ...b......-...-...6..A...P...."..."..S.......GH..........R................-...%...%..a............%...E..F-...1...7..I....<...B...J...R...[..S...Pc...k...s...{..T.................Ar...1.............^..._..........A.................V...

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-ml.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	776
Entropy (8bit):	4.382199613837181
Encrypted:	false
SSDEEP:	12:CJJUUXPF9sMd3MpLuNMaYGakZyqmiK/XwEHsz2ky4NO9xZI02nk9KpJ:CJJ9CHpLnF9H/LsSyNOn2nnpJ
MD5:	84A0A36EA2C5B3209A3CD40D1043230F
SHA1:	A98436B640A8CFB9CFFA26E89FEE768DCE6F0747
SHA-256:	90572DB8F49B01EC6A102732CDF14FC3F07D363CBE0D261103E583043164E888
SHA-512:	845AB7B075D3EC490C477AF3B1F6D28CDC83289D206D079730F69FFD32A0FADB04EB3C9539E4DEE6DAC080489AEA9F3365A20810B4BBB229C2AEA3558BCFA1F5
Malicious:	false
Preview:	hy.b........P...............L.....h...h..(h..0h..8h..@h..Hh..Ph..Xh..`h..ph..xh...h...h...h...h...h...h...h...h...h...h...h...h...h...h...h...i...i...i...i. i.!(i."0i.#8i.$@i.%Pi.&Xi.'`i.(hi.)pi.xi.+.i.,.i.-.i...i./.i.0.i.1.i.2.i.3.i.4.i.5.i.6.i.7.j.8.j.9.j.:.j.;0j.<8j.=@j.>Pj.?Xj.@`j.Ahj.B.j.C.k.D.k.E.k.F.k.G.k.H.k.I.k.J.k.K`..Lh...............?......Y........@...................B...................................................................................................... ...!..."...#...$...%...&...'...(...)......+...,...-......./...0...1...2...3...4...................................................A...............E...F...G...H...I...J.......L...........................L...............................4.....................................0.............

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-mn-cyrl.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	5142
Entropy (8bit):	4.03246540989063
Encrypted:	false
SSDEEP:	96:l/PxIafuSv0YHQYYrJ8XFY+qT4uPnjHcMymaH0:lnu7SorJ0FaT4Onjc1pU
MD5:	07CDA8332B62726883B29290CA35FC89
SHA1:	2E3E1A7E4484225D8E25A59695E86EEA9F516EC6
SHA-256:	0D2731F16AA2C90FAEC8E63260358CBCCEDE403FAF95E3AF8C66BC2DB0729CA0
SHA-512:	A55A5A7AD3E6B084BB15D360A732F344EEB59E0ECDB8A431DC9379653D3CD828131DAF18DD91B6B45001AAEECBAA87E1AFD6EAB4A795373DCA1C4E68C7E0CC85
Malicious:	false
Preview:	hy.b............d...................!............................................. ............................... .!............................................................................................""........................................................##.......?.......................A....+...+.......+...;...@...+..I...J........?...?"..+2...4.P....? ..#(..+*.T.,..4$.V66..?0..@...I...$...$&..A.......H.......Y......"........-...........L..............LI..I...F....&.......R..N.......P).......:......F...............F.......F...M...N ..A........L..........F........!..I.......................O.......Q........Y..T..._...`...a...`...a...`....P..\....'..^....,..`...a...b...c...A...QJ..............F.......A...I....S...Q..L...F.......O...I...Q!......`...T...A...O....=...#...L...O..T...AS...T..^..._...`...a...b...\....'..^....,..`...a...b...c...A...I...........A...F....S...U..I...F...K3......I....V..O...P&...Y...]..S#..T...U(..V(..IA..T...LZ...C..F...\...OT..^....,..`...a...b...c...

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-mr.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	687
Entropy (8bit):	4.239578871898771
Encrypted:	false
SSDEEP:	12:abdtltF8MN32m0c2SSYuNuA4vltG9qXLgskIU9t80dtcUe0EZA8h:aptKEGC3F4IU88yMUA8h
MD5:	0807CF29FC4C5D7D87C1689EB2E0BAAA
SHA1:	D0914FB069469D47A36D339CA70164253FCCF022
SHA-256:	F4DF224D459FD111698DD5A13613C5BBF0ED11F04278D60230D028010EAC0C42
SHA-512:	5324FD47C94F5804BFA1AA6DF952949915896A3FC77DCCAED0EEFFEAFE995CE087FAEF035AECEA6B4C864A16AD32DE00055F55260AF974F2C41AFFF14DCE00F3
Malicious:	false
Preview:	hy.b........8...............F.....H...H...H..(H..0H..8H..@H..HH..PH..XH..`H..xH...H...H...H...H...H...H...H...H...H...H...H...H...H...H...I...I...I...I.. I. (I.!0I."8I.#@I.$PI.%XI.&`I.'hI.(pI.)xI.*.I.+.I.,.I.-.I...I./.I.0.I.1.I.2.I.3.I.4.I.5.J.6.J.7.J.8.J.9 J.:8J.;@J.<XJ.=`J.>hJ.?.J.@.J.A.K.B.K.C.K.D.K.E`..Fh...............?......L............A...........A..................................................................................................................................................................................2...................................................?...@...................E...................................(......................................

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-mul-ethi.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	3740
Entropy (8bit):	5.292396416301549
Encrypted:	false
SSDEEP:	96:VOy5VNB9XrbDHKYKZHpY2Mx5fxhPf7O0Oa:VOiVh76ejP5h7Oa
MD5:	B42317960E5DA868A8120CB79A440ABF
SHA1:	5BC583FE2BCF8D9EF971C66A5F57821AAD1458CC
SHA-256:	F2FAC1BD069FFE5CD1112D94CC31137ED38A1B161093ECD74C9C1688428B688B
SHA-512:	C26C686F7A1AE785A6D5B5856670CF9B7BC48E4A388D2E2922B21FD6C0124357ACFEB73B370AB617C5ED4B033D945FB3C7CC235A661BAAA7FB976DD6EDEC66C0
Malicious:	false
Preview:	hy.b........<...\|................................ ...(...0...8...@...H...P...X...`...h...p...x......................................................... ...!..."...#...$...% ..&(..'0..(8..)@..*H..+P..,X..-`...h../p..0x..1...2...3...4...5...6...7...8...9...:..;..<..=...>..?..@...A...B...C...D...E ..F(..G0..H8..I@..JP..KX..L`..Mh..N...O...P...Q...R...S...T...U...V..W..X...Y..Z...[...\...]...^ .._(..`0..a8..b@..cH..dP..eX..f`..gh..hp..ix..j...k...l...m...n...o...p...q...r...s..t..u..v...w..x..y...z...{...\|...}...~ ...(...0...8...@...P...X...`...h.............................................................................. ...(...0...8...@...H...P...X...`...h...p...x.......................................................... ...(...@...H...P...X...`...h...p...x..................................................................... ...(...0...8...@...H...P...X...`...h...p...x................................................................

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-nb.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	145263
Entropy (8bit):	5.817435539709432
Encrypted:	false
SSDEEP:	3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
MD5:	677EDD1A17D50F0BD11783F58725D0E7
SHA1:	98FEDC5862C78F3B03DAED1FF9EFBE5E31C205EE
SHA-256:	C2771FBB1BFFF7DB5E267DC7A4505A9675C6B98CFE7A8F7AE5686D7A5A2B3DD0
SHA-512:	C368F6687FA8A2EF110FCB2B65DF13F6A67FEAC7106014BD9EA9315F16E4D7F5CBC8B4A67BA2169C6909D49642D88AE2A0A9CD3F1EB889AF326F29B379CFD3FF
Malicious:	false
Preview:	hy.b.............%..o7......A........................................................................................................................................................ !"...#......................... !"...#....?.........?...............@DB.@N.#@c..y.2.2.:@4.C.8HK.<.T@?.\.D.d@Q.m.bMv@q...q..t...}....R.....@...........@...e.........v...q.....@.^............("...c......%...C%@%...0E..7..A8G.A....9...9...#K....%A:M&A=.,.B.2.C.6.DJ.@F.:.F.A.A.H.S.P.T.T.T.Q@U.2.X.U.+...?.Z.\...^..a..c.2....@d...d...g#^..AbAg.gAj...mDmAh.r.d.wARG}.pH..s.....H.t...u.....bN......P..w...y..Ay..z..~..A~..~.Y......Y.N."....@Z...Q....P....Z.B.R.......A....A......U.........:.>.....H..5...u.(..K...L......N0@......\_........?S..4..@.U..=....@l..B.Y..a...[p..\..8...9...oIB....o..C..........+.p......@..!...;.......@1H..I.@.....K...L:..M .....5..B....(...+....S..[.:.A.....\|..A....A.Y.@.....g..........i..C..G..Bb...eF'..G........$..J1AW.IA.L.MO.#.>@..1....@...@O.6B8S=.<.C.

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-nl.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	77080
Entropy (8bit):	6.2368503477710115
Encrypted:	false
SSDEEP:	1536:2jJm3BkOrDrNWS+9cyF85YT0Bl3aGmsRlSq7wb/lFFQ6B:29m3DXgpeFl3ssRJ7m/lFlB
MD5:	D3BB05944DE3D0D7186E7E9383805E2C
SHA1:	1B1EA734D900F8D766E7226FEE09EE14FE606A7B
SHA-256:	5EBDE398944B461CF940F0520C5A49C0882B6F36F9AC5CDA0538C8C8B44FB7CA
SHA-512:	5FD9C6E5E4F060D1B37B7E80F162AB10C1EFB24258A5BB26C89469004191EC5517E4CF4C1C7724C838C62B5358D3C95D515C1EE4A5B001C42C3325CE1D11A928
Malicious:	false
Preview:	hy.b............\....-......A................................................................................................................................................. ..!".#....$....&%.............. ..!".#....$....&%....?...............YC......A.@U..@..!`4D) ..0 ..9..GB.G.J.?.P.O.X.Q._.ZLi.M.p._.x.a..@y..@\|..`{...\|.....`T..@..........``.........#`...........@...@.`...Zk.b..... .....ec..f......#B,.'.<.)...+E. +F..-....H.-.....@/..`0..`1...1N. ....1.....gA8...:...;.. ;Ud.=..`>.> ....@.R@@.G@#..F.aLO..N.R ..,.....O..`6C.AQ...)..!U...UG..U...=...N..`V.....%.V..WN/!W..aW.2.XQ\...8.XS=a..AA[.F....@]WY.......$.]Z%.].s.$........AJ.^.5A%.# ..._.J.`..ab...c%.!c.,...KAcB'`c..@;.. d.P.6F. GY@dH.5.S.e..7..f.V..MY.7...f.Y.... g.D.hR_!h.aah.=.LUc.5V#.bW.i.."....i...j.,...h!6BY@jC7.f.% I.m.j..al...%.o...s....T.v..L...A\.\NY`..z....D.. .R.am.c`%...m...m.e.S..`.I...YQ.m.,.m.. nE-c?.DA.^Q@o.,.....oBE.oC1aZ..AT..!pFY@p...pHU.q...,JY ...`qL...MY.F.V.q..rP3 ...ArR..r..a..H.'U...V..r

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-nn.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	145263
Entropy (8bit):	5.817435539709432
Encrypted:	false
SSDEEP:	3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgY:p73HEUP8dsiinTThjy90VKY
MD5:	F2D8FE158D5361FC1D4B794A7255835A
SHA1:	6C8744FA70651F629ED887CB76B6BC1BED304AF9
SHA-256:	5BCBB58EAF65F13F6D039244D942F37C127344E3A0A2E6C32D08236945132809
SHA-512:	946F4E41BE624458B5E842A6241D43CD40369B2E0ABC2CACF67D892B5F3D8A863A0E37E8120E11375B0BACB4651EEDB8D324271D9A0C37527D4D54DD4905AFAB
Malicious:	false
Preview:	hy.b.............%..o7......A........................................................................................................................................................ !"...#......................... !"...#....?.........?...............@DB.@N.#@c..y.2.2.:@4.C.8HK.<.T@?.\.D.d@Q.m.bMv@q...q..t...}....R.....@...........@...e.........v...q.....@.^............("...c......%...C%@%...0E..7..A8G.A....9...9...#K....%A:M&A=.,.B.2.C.6.DJ.@F.:.F.A.A.H.S.P.T.T.T.Q@U.2.X.U.+...?.Z.\...^..a..c.2....@d...d...g#^..AbAg.gAj...mDmAh.r.d.wARG}.pH..s.....H.t...u.....bN......P..w...y..Ay..z..~..A~..~.Y......Y.N."....@Z...Q....P....Z.B.R.......A....A......U.........:.>.....H..5...u.(..K...L......N0@......\_........?S..4..@.U..=....@l..B.Y..a...[p..\..8...9...oIB....o..C..........+.p......@..!...;.......@1H..I.@.....K...L:..M .....5..B....(...+....S..[.:.A.....\|..A....A.Y.@.....g..........i..C..G..Bb...eF'..G........$..J1AW.IA.L.MO.#.>@..1....@...@O.6B8S=.<.C.

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-or.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	647
Entropy (8bit):	4.1580884891492484
Encrypted:	false
SSDEEP:	12:vke/qU1skFHsUbhiZmltXz4Nw2GVlHthkIU9t80dtcUe0jum08h:82qHkqEEoUIU88yMc8h
MD5:	7E265A294303F69AA66C243F5F474463
SHA1:	4D382AB4BED3DBE481710F0C651CA87B2394661D
SHA-256:	4E9CD302BAFFC4EA3E9652327EA24072EBF37B5C4FC0719292BDAC10AAAD665B
SHA-512:	D347D422249945C9A664BE3C48E1EC07BECAF03BD3525869F06C9AA328B4FE2884AC963CB97949D97E5AB41617B0FC6F2A2171F06007BF94CCE88D55A15DA922
Malicious:	false
Preview:	hy.b........$...X...........A.....X...X...X..(X..0X..8X..@X..HX..PX..XX..`X..xX...X...X...X...X...X...X...X...X...X...X...X...X...X...X...Y...Y...Y...Y.. Y. (Y.!0Y."8Y.#@Y.$PY.%XY.&`Y.'hY.(pY.)xY.*.Y.+.Y.,.Y.-.Y...Y./.Y.0.Y.1.Y.2.Y.3.Y.4.Z.5.Z.6.Z.7.Z.88Z.9@Z.:XZ.;`Z.<hZ.=.Z.>.[.?.[.@`..Ah...............?......G............A...........A..............................................................................................................................................................................................................................=...........@...................................(......................................

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-pa.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	607
Entropy (8bit):	4.0169087789595075
Encrypted:	false
SSDEEP:	12:MV9cE9PvVFvf1EEPHflMijlt7zvnG43fcN8Udtcct8U9t80dtcU/8Ub8h:MsENVdt/tNXX3fU80ccSU88ynu8h
MD5:	0F27E5BCCC1CD9DDF3EAC020DA27DA57
SHA1:	BD3C83300AAD3E79287C1E806E864F7644240911
SHA-256:	470329D28FAA484F945D78FFEFB176DCB6F2032C753E25BC014106AD24B2C68A
SHA-512:	141DA09A4A1A3B9E581751A1B2C70CBE981E1A915EA538A8015C7614D11BE059CD3A03B4F2420F963E5657A4417B3CC5C3A22E0028132A21363219E27751CCFB
Malicious:	false
Preview:	hy.b............0..._.......<.....P...P...P..(P..0P..8P..@P..HP..PP..xP...P...P...P...P...P...P...P...P...P...P...P...P...P...P...Q...Q...Q...Q.. Q..(Q..0Q. 8Q.!@Q."PQ.#XQ.$`Q.%hQ.&pQ.'xQ.(.Q.).Q.*.Q.+.Q.,.Q.-.Q...Q./.Q.0.Q.1.R.2.R.3.R.48R.5@R.6XR.7`R.8hR.9.S.:.S.;`..<h......?...............B.......A...B...C`...@... ..........................................................................................................................................................................................................x...y...z...;...\|...............................(......................................

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-pt.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1414
Entropy (8bit):	2.57311219135147
Encrypted:	false
SSDEEP:	24:TF+k+Mo1Mo1gL82mvD2VE+hJBBSZ6s8ADrsh:RlNo1Mo1lx7+hJy8sdQh
MD5:	564FF32DED64C6BFC693F2758A53D68E
SHA1:	3965F963D36BEE1598683E72C857A3BFF196B295
SHA-256:	F6FBF1BCB260CC86256FC494F388F7B27D10865FBF8F61517DEE25AF4D58D6E8
SHA-512:	E9E574BA07703295AA8B7FD4603EF079816EA44394BD62750E08E523B9A7B408FD979552D90D04F825242CCADA7AD66003FBA76C9C8469541B5C6D2FB85C41E8
Malicious:	false
Preview:	hy.b............L...........-.................................................................................................................................................................... ..!....."#$....%............... ..!....."#$....%......?.......................A.......C.......E.......G2......B...J....:..L2.......:..........Q2.......!...*..U2......W2.......:...:...............:...............#..........................................G...........X...........B.......F....................... ...!...".......$...%...........B...............F...............J.......................P...V....................................... ...!...".......$...%................................................................................................................................................... ...!...".......$...%...........B...............F...............J.......................P........................................... ...!...".......$...%...........................................

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-ru.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	19886
Entropy (8bit):	5.101274087578558
Encrypted:	false
SSDEEP:	384:hRsmaIUzHCX1GgFJwKSw4foB7zM1xnXg3JIcDn4VOzfr7K8lxf4:hR8IUzIRQw4foPM1xn6lDn1TFA
MD5:	4D132AB42E0C8ABD3BA93D8B34BDBEB3
SHA1:	F3CE82F2DBDEAD517D5FAA4490E1975EF8FAFA6E
SHA-256:	336CE2048FFD31B7BCAF435E53BADFAF0579E405042D49ADBC0823F6BE5F9614
SHA-512:	EB8E27AB070DB7407F1EDE29751AAB4A88F4182E878E956CC51D0ED9EF2C9AFDEC208F2F4700551374C5A7F69C176ED7D6CB771AC17C3EAE77323A5709A85FCC
Malicious:	false
Preview:	hy.b............,K...M......v..."...#...$...% ..&(..'0..(8..)@..H..+P..,X..-`...h../p..0x..1...2...3...4...5...6...7...8...9...:...;..."...#...$...% ..&(..'0..(8..)@..H..+P..,X..-`...h../p..0x..1...2...3...4...5...6...7...8...9...:...;..... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ...!...!...!...!.. !..(!..0!..8!..@!..H!..P!..X!..`!..h!. p!.!x!...!...!...!...!...!...!...!...!...!...!...!...!...!...!...!...!..."..."..."...".. "..("..0"..8"..@"..H"..P"..X"..`"..h". p".!x"...".....?...............G...@.....0......! ..).../H.F7P...\..?...E...M..KS...Y..._...g..Oo...w`..~....p.....T.................Y..... .['...<....p....._...............B)...x...0...(.......A...............(...@.....N.........`.Q...RKx.......8.U.......+.......Bh..4..Q.....8.....F...........]....X...(.C.........i...x.P...H.a.I....C................... ...;.......&Y.S,...1y...i..6...uc..u.......7.......!0.T.(.F.....8.....!.....@.....Cf....... ...V..P........H..1..S.......M<....P.. ...@..F....~..

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-sk.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	64103
Entropy (8bit):	5.820830603564126
Encrypted:	false
SSDEEP:	1536:tIAzVJ7EgiDEY0ZcznEDEo5JWJ4pgY5AW/N+:dhJRiDEfMaEw24auAv
MD5:	CEA295E8B4B99F95738727905A9184E2
SHA1:	31DB6C826FD7830BC76F0AC1B9D21C2EF67F8B1F
SHA-256:	138C5990961DA21993653F54A413DDACB8921D6D70B892B7CA154D6E8AD2028C
SHA-512:	B20F651C74A070A4D26B58BD8462E553077B7333A2C854F7974A7E67BC442C3A6FEBA52C3A537FD9F1579D5DE0126BBE1DA4BE99AABEE79B7987B2EDFDD8ED67
Malicious:	false
Preview:	hy.b............H...g.......i....8...h............... ...(...0...8...@...H...P...X...`...h...p...x..................!...#...&...'...(...)...+................ ...(...0...8...@...H...P...X...`...h...p...x..................!...#...&...'...(...)...+.......- ../@...H...P..0X...h..1p..2x......4...3...$...5...6..........- ../@...H...P..0X...h..1p..2x......4...3...$...5...6.......`...h...p...x...........8...@.......... ... ..." .."(..%p..%x..,...,...........?...............[=........p...p.C.....P.....$...-.......2.......;.......$...G...Q...W...` .Q~..S....l...up........%..Y...Yv1.......`.............]...!.`..5....p..z..#F..fd..'.....p.i..]d...D...B..m.0.n.`... .0.......r P.3.......5...6..............g...;....p.U...K......!.i........P$...<...R.....T.P.....V.........B......M..[.........q..'#...A...i..........+..]q......f]@.....h...i.....`..........m..T.0..-........@.U\..............G.....".I"Q.........!.0..m2..'...-......QT....t......1!..7..V=...?......Y.....`..C!._....H......_Nq.....

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-sl.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	6631
Entropy (8bit):	4.666183419763895
Encrypted:	false
SSDEEP:	96:LbHqR1cAky2TFP+HQ1QpHPZtCjUtKapFxx8mLJO/5n0PatE08YyM9eW3svUaf5lk:P21cPFPAHPGjpEr85/NVtEjoeW88af5m
MD5:	A21358DD4506643486F72F7D80D60A5B
SHA1:	FB7EE02ADC970F4D71C84D18777A59508FA1A46C
SHA-256:	AD746C68562603AC3B15E89DA03C76E081C08E7D9C8D4C9F64763E53D696C77C
SHA-512:	7DC9E18050B3DF4288AACAAFFDB17668F0B5D8B5E103305070D2EF83DAB2F5DBE3B071B05CA69340D86A53D47D4CF8197ECC1BDD086A320BF81F9DF8C0D3CCB8
Malicious:	false
Preview:	hy.b........d...............A...................................................................................................................................................................................................................................................................................................................................................................A.D...#.....d.)...E...&.g.........7..... ..l#8..&...?./....1@.Q....5...8..T;2..>...B..w...X....C...E...H...J..}K................+.....c...A.,..x/.....iw1.H :......y-..P!.....0...n.$...<...0..yC.....V...t....\| ...%.:.'.;...<.*.=.....4.".....5..0..e...F.....9.....I6...L........".....n7(.....0....}=..N..........U!....>.g.3.3}.......O..........]`...F..%{..c...d...E....z..................k...L'......n...o)..........RL..s...t.......v....z..............{...\|.......b...c........$......g...h....1..j...k...lJ..M....R...M..p...\|}...4..s...................}...t.......{...\|........(.......R..%....:...................+..

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-sq.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2013
Entropy (8bit):	4.405419184822226
Encrypted:	false
SSDEEP:	24:Q2nTjgiQesp28MNwcPsBPAKeJjlg6uO8FmdR+w1NdpbYBUYxqt68b40DBz/mUfpg:VHErckB4Z6O8F691r6Bdnl0Nz/f7+
MD5:	A22D0F39CD83F3A8E251F95C5B12DD31
SHA1:	24915151B31525A0A9EA0EF7FAF8DDB8B3FAF11E
SHA-256:	BC29C9401CE952414CBAEBC5C8EE1D27C1706C6F77807B5FF713E2124438B3CA
SHA-512:	AD319FC85AA612BEDAD8289A20FCF42D4336C4B3ED704CE74C6C0ED68E3E18D62C18549F8A5EFE5BD481D8DEF514F2C6B083803485E04BD5919BC600501C0E00
Malicious:	false
Preview:	hy.b........................8....8............... ...(...0...8...@...H...P...X...`...h...p...x....................................................... ...(...0...8...@...H...P...X...`...h...p...x...........................................8...X...8...X...................?......v...`...!@.."@..............&.......H.......*........J.........o...PP......2....E..4...uV..VY......X.......:.......\@..]........@.......................@......................................4...............x...0...............]...........................+................ ................../................&......w...........0...n...................6....................................................................C..m...,........L...........!...(...............@...A..........L(..........................K.......................................6............C......$........C......."...C...............C...................b..L$...$.......(......lb......7........C..z............C..4...........L'..n............g......

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-sv.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72119
Entropy (8bit):	6.043656444032453
Encrypted:	false
SSDEEP:	1536:KC2kHtGIlaNlgMMjmhkFQ0+9FRGv8L38CNf7k2k1rJ:KCDcIlt5mhweMEX42k1l
MD5:	892598DC59CE71E68ED337ED9FF3ABC1
SHA1:	C89AF0D28B8B769150981539EC2318E34DF29CCE
SHA-256:	56642AA5A37625FF9D034761D16B034D4BA5BE74090CBD825956BBCE2775ECD1
SHA-512:	EB13A68FF5CDD0EDD73CE4C109984B3E58763812C31755BD55C0A324048873F610E36D1C41B3F642A64F7FE0945EE872A02FDE744D5821AAB03A2288851D984D
Malicious:	false
Preview:	hy.b............D...........A.................................................................................................................................................................. ............................... ....?...............SA.........2...... GD'..E/.WF7.OG?.\.G.5.O ^.W``._...g...o ..w.... .......`... #..@$...%...&..@'..'. )..@...`+..`... -.. .^.........`1B..1..`2..@3..`3.. 4..........@6...7..!.L.A...A9..`:O..:..!<.......<S..=.".>U&.6V+.>..@?..`?.+.?...:....\.@8...(R.`..0!A@....3.CB6.D. ...:!.E......F.?.F..`G..H.2...B...I!I.P.K.V.KO...[.!.. L.b!..j.L.qa .u.#Vz.MW..N.#.NY..9.......O.r.:S..;..&P.{@P@. ...aP...R.C@Q..`T.a.FI..G:.T.r@....TE.AU.r`UL#..M..%.r.U...<..`V..#W...:SO.T...TU.aD.. (.r.X...#.1.X..a.[g.Y.E..].`.A"Y_.@Y@.......EY.-..@.. .YE..O.A.... Z..Z...[..[K..[O/B\..`\...\..A...C....\.M.\. B.).]..]...^..`...C^...ZZ.`^L.C....^...^@......_.8@.C*._..=..a-.# `.Z`....I....8!...@..Q`... ..r....a..&.........S.!.TF ...!.VI........@....Z.L... .b. .6. .. !

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-ta.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	554
Entropy (8bit):	4.097315344818262
Encrypted:	false
SSDEEP:	12:qOkVbj778oso/8kbX7MTADiZM3kTxPUKtcUUymPr:qdVv77yo/8AX7MTHLGKynyOr
MD5:	AB2F6F9696FC7D699356244725E7C778
SHA1:	2026841DA77DD77715B521EC73BF819D1D098B60
SHA-256:	40FDA94856A86F065DE8BAA6184EA63DCDB011EE4CA498A7C1FEE44C99314C67
SHA-512:	88A4C2117102BDB60D482448C36DD79A8DA1130A4636513C8ED56EB282DA6C638D27EABC9799EAB8BC1A7234A0AA6690C55408500608387912FE283F13BCC328
Malicious:	false
Preview:	hy.b.......................3.....\...\..(\..0\..8\..@\..H\..P\..p\..x\...\...\...\...\...\...\...\...\...\...\...].. ]..@]..H]..P]..p]..x]...]...]...]...]. .].!.].".].#.].$.].%.].&.].'.^.(.^.).^.0^.+8^.,@^.-P^..X^./`^.0h^.1.^.2`..3h......?...............<........@...0...a.......A...!.......Q..........................O...P...Q...R...S...T...U...V...W.......Y...Z...[...\...]...^..._...`...a...b...c...d...............................................................0...0...................................,.............................................

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-te.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	703
Entropy (8bit):	4.223695084085508
Encrypted:	false
SSDEEP:	12:A1l1ltFUcfE8Uceyqw2ttN6rOODQlESkP9t80dtcU9tFj0osZE8h:A1icE8UcZPH88yUFIbZE8h
MD5:	BF9DF63B3C97DE3BFF99E24EE4BC5F2E
SHA1:	774659CF1D58BCFC69900315281E99E038CD2A97
SHA-256:	516FA9654FA3AEAAB480D40EAF6AD78FC039086BD8EDC144BE3D59525EDCAC29
SHA-512:	52F40A2C38CC62AA6B0E081C90B9DFCD6D3ED03A4A90E596E11AC85BFDA96EAA74D465CD7168B803C0D59A53DF878B0EA1CA657C5CAF3DE49C8758CBD527BEE2
Malicious:	false
Preview:	hy.b........@...............H.....`...`...`..(`..0`..8`..@`..H`..P`..X`..``..p`..x`...`...`...`...`...`...`...`...`...`...`...`...`...`...`...`...a...a...a. .a.! a."(a.#0a.$8a.%@a.&Pa.'Xa.(`a.)ha.*pa.+xa.,.a.-.a...a./.a.0.a.1.a.2.a.3.a.4.a.5.a.6.a.7.b.8.b.9.b.:.b.; b.<0b.=8b.>@b.?Pb.@Xb.A`b.Bhb.C.b.D.b.E.c.F.c.G`..Hh...............?......N............A...........A......................................................................................................................................................................................................................................................C...D...........G...................................(......................................

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-tk.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2712
Entropy (8bit):	2.634842338757876
Encrypted:	false
SSDEEP:	48:pOWZMS0jrjvFgj3PgjY8jKHjgj5D+SlRAd5+UjbxgjUKdHyM:l0fzODok8+jg9D+eRA6UnxgTdHyM
MD5:	ED60185B6F455B6F8ED27EAEB73334A9
SHA1:	11E53BDA5E2A0ACD000692AD8AF45611B57277AD
SHA-256:	77FDAED29BD842AAA976AB7EF81B617A15C0A2D1EBD1161C1BF26B79A108B5CD
SHA-512:	3EF211A330EFE9E34468C9C460DFCDA1B8DA80D113317A177205C76FFCB916FF25FFCB4485703FD01EE248D356A67E5BB18DF8E5EA40B2AAB3999121083B7E30
Malicious:	false
Preview:	hy.b........x...d...........-...............................................................................................................................................................................................................................................................................................................................................................................5.......!...b....2...2..E$.....G....2..I$...2..K........2......o....2..1........2..t........ ...2..X$...2...'...+..</...2......2..c...d6......f6..g6..h6......j6..k6..l6..m6..n6.....p6..q6..r6..s6......u6......w6......y6..........\|6..}6..~6...6..C...D.......F...G...H.......J...K...L...M...N.......P...Q...R....B......U.......W.......Y...........\...]...^..._...C...D.......F...G...H.......J....B..L....B..N........B..Q........B......U.......W.......Y...........\...]...^..._...C...D.......F.......H.......J...K...L...M...N.......P...Q....B...B......U.......W.......Y...........\...]...^..._...C...D...

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-uk.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	19417
Entropy (8bit):	5.328804005178715
Encrypted:	false
SSDEEP:	384:+uuckg5iXANOMyv3qTtbfRhn8da+dzk29L5zA:1FviXA4MuofRhn81zk291A
MD5:	0EC028755F0CD9EBBA41FB7273DE8BAF
SHA1:	A8A784454269A2769710FB3725730F06CDD7B242
SHA-256:	1C626ABE40D43F6D56A01B5B40305D7C7D6481F616EAC00A3F3AAAACA8388786
SHA-512:	024C611EBABB0A84B5A887D808E24884CCBB4550F222E651728451CDDB9A941D7D9A39786DDFE4A57D049DC82780C6BCF376D3E98547ECC4808FC7ED32ED47A9
Malicious:	false
Preview:	hy.b........4...pI...K......E....8...h..! ."0 .#8 ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ...!...!...!...!.. !..(!..0!..8!..@!..H!..`!..p!. x!...!...!...!...!...!...!...!...!...!...!...!...!...!...!...!...!..."..."..."...".. "..("..0"..8"..@"..H"..`"..p". x".!.".".".#.".$.$.$.$.........?.........................x...p..#...,h..5x..>H..G(..P...Y0..b...k...t...}P...........0........@...8....................................1..(1..1a..:...C)..L..........K?.......U...X.......^....X.....Kc.......VI..e..Ob...h...n...W...oq..l9..qA..rY..\...g..Y^)..^...`...y....(... ...H...P...............h..........9....Q.......I.......i...a...9...................Q...........9...Y...A...........q...y...a...........!...i...y...........i......{i...........................y...!...q...........A..........................................................................................{.........................................................y...................

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\hyph-und-ethi.hyb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	3484
Entropy (8bit):	5.253138005413701
Encrypted:	false
SSDEEP:	48:KEn0vz7f+IXVNBMWXma7WWDrOEKYa3FZxU6b7JXkB5/Xh5f3B5PBhPPhhvPK0OEl:Fy5VNB9XrbDHKYKZHpEx5fxhPf7O0V
MD5:	4AA9B2C0C9CCDE5140D01DC6502242BB
SHA1:	D1759E8A62A42A72529ADF9BC73820BF32F2A37B
SHA-256:	1DE83CB787DFAF53FB7E6E8DB3AAE5008AD24EBDD28BE02031306EA9E9F3E285
SHA-512:	1B456301D814810E857E8A0C426E703A802FEBB5C3DFD8D0E5C58AEEFC6C2D6F55C95830024C243D2BFBB8322EF72E9FF959CDC7F92AE51BEBE8B053D9CDA1E5
Malicious:	false
Preview:	hy.b............\|................................ ...(...0...8...@...H...P...X...`...h...p...x......................................................... ...!..."...#...$...% ..&(..'0..(8..)@..*H..+P..,X..-`...h../p..0x..1...2...3...4...5...6...7...8...9...:..;..<..=...>..?..@...A...B...C...D...E ..F(..G0..H8..I@..JP..KX..L`..Mh..N...O...P...Q...R...S...T...U...V..W..X...Y..Z...[...\...]...^ .._(..`0..a8..b@..cH..dP..eX..f`..gh..hp..ix..j...k...l...m...n...o...p...q...r...s..t..u..v...w..x..y...z...{...\|...}...~ ...(...0...8...@...P...X...`...h.............................................................................. ...(...0...8...@...H...P...X...`...h...p...x.......................................................... ...(...@...H...P...X...`...h...p...x..................................................................... ...(...0...8...@...H...P...X...`...h...p...x................................................................

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\manifest.fingerprint

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.8435095592647968
Encrypted:	false
SSDEEP:	3:SVXj4nxIGXjkXXjcLUTkrXRH:SV8nLeXgGwR
MD5:	1D09A9A5E62B846125CD7B929CCCBE44
SHA1:	5271237C4D13F7735689A5ACC52E48C491669AA3
SHA-256:	1703E4E777B285ABA435E71256890A5FE92D24CB01E0EEFD03BADDCA228EEE2F
SHA-512:	CD2A2ACC126AC6A7DCC81088047C894A427A44C5CAA96003C1F3521BEAC3B46C117F0794E564838DE14A18A3F65CB7988BA86B404E690EC77A57518247C03FBB
Malicious:	false
Preview:	1.00AF3F07B5ABB71F6D30337E1EEF62FA280F06EF19485C0CF6B72171F92CCC0A

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_14872269\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	82
Entropy (8bit):	4.518013103500336
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFbykJvFgS1Q+LVHA:F6VlMhyk0S1bhg
MD5:	2617C38BED67A4190FC499142B6F2867
SHA1:	A37F0251CD6BE0A6983D9A04193B773F86D31DA1
SHA-256:	D571EF33B0E707571F10BB37B99A607D6F43AFE33F53D15B4395B16EF3FDA665
SHA-512:	B08053050692765F172142BAD7AFBCD038235275C923F3CD089D556251482B1081E53C4AD7367A1FB11CA927F2AD183DC63D31CCFBF85B0160CF76A31343A6D0
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "hyphens-data",. "version": "120.0.6050.0".}

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_329637101\crl-set

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	22512
Entropy (8bit):	7.7925552321905265
Encrypted:	false
SSDEEP:	384:qt71+UBzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1pA:a4GBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
MD5:	846FEB52BD6829102A780EC0DA74AB04
SHA1:	DD98409B49F0CD1F9D0028962D7276860579FB54
SHA-256:	124B7EEBA31F0E3D9B842A62F3441204BEB13FADE81DA38B854AECBA0E03A5B4
SHA-512:	C8759E675506CCC6AA9807798252C7E7C48A0AB31674609738617DC105CEE38BCE69D4D41D6B95E16731466880B386D35483CBEEA6275773F7041BA6E305FAE9
Malicious:	false
Preview:	..{"Version":0,"ContentType":"CRLSet","Sequence":183,"DeltaFrom":0,"NumParents":202,"BlockedSPKIs":["Jdoa1Yu/z7In2HI7GFfUwY57qnQXtPnv+TZrXoafizk=","j1kfeqTcPv6UkMOKRpLJAR7RKPHeWVVpQG13tvofa0w=","BN3pqpp59hSYaCMl+ghwJ2cH+5ypU4QSC0aJMmhJT8k=","DEPqi83p/DvKFlZkrIIVVn40idU5OgyB4aeRQZkuGVM=","eBpM8ukkUvPuAdDDgaQhTzkEFlw5CtvWH80RJE4Jstw=","/NdsyiNH5c1bOTR/Uc9DZUtpor/JBzZwpr5H2HAebg4=","wO0gU0a7veButWD1zuAqNjTiR0p+ds+PvvVjuxF90OM=","fNKVt1VEgIq9lAlGbwg3xarcAuM7YVDGZE3goJZZ8jw=","lo26afv/Fb83YgiUMa3lp+rUt+rxvnACaBC8V9HGT24=","0x7DkoW3pTGdAVfbQg7YfHQ+Mzu8d/h3H3BGT0NqYEk=","h7/Yr6OvW0KdCamqVO5hNk9a4REx5Dj8QQlTQ80WsTU=","li5LVLuYp+5dX+uWM/mR08MwDpUU2t57DU+CjHlPjoc=","6EnHF2yT32X2S2FpgjZuVmMReBK2+ivAyPqK6u5Bgcw=","oM9T9CJlHjkxeuMa9kV3vkUPo3biie2DQrf8EzxpdBk=","r1kVGOLmxg67/AkHr6pJvEBR1F5/IUq/7nUS7gD2Ye0=","LcTLWR9+8GY0QWRrz1wOnbze13ygKUUZPO/G7bF0BhQ=","TNsGDzz+TD0/XjHDAP1oqR4NHl9Gtk5IlfIOG1z4Jp8=","qbVam1Uxu/fHGh5JIO/nlsK2eWj1Wmzly2IXLtmUW8o=","NuqWEoyJg5+2IfitDh7gucIgb2Kre02ixnZYk8m3ztI=","nFmjzK

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_329637101\manifest.fingerprint

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9320289247029807
Encrypted:	false
SSDEEP:	3:SUutfo6dTkKzV7hk3Mghu:SUutfo2TkKzV7yxA
MD5:	DEE9D3BDD016C697D11E370A995E7332
SHA1:	EF13D667EFD507E160DE165F4F1FE918FC728CA2
SHA-256:	A84789942C4436967DBA5D0CE45A3F6767BCFEBF67B951FBEF75CCA32E9ACD96
SHA-512:	1C798ED77FCACCC5EC237CB6618E6425FB7DBBE5F22B2A969B915987FDA4BE8ECADC265871832F0B7F9B5656433C27F8495ECEB16598294FAB80E709B2CB3D68
Malicious:	false
Preview:	1.1AB07E887ACCA305058EEAB9053C96DC531C2C5C067AB4F30AFA2B31F1EDD966

C:\Users\user\AppData\Local\Temp\chrome_PuffinComponentUnpacker_BeginUnzipping572_329637101\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	114
Entropy (8bit):	4.584576854960822
Encrypted:	false
SSDEEP:	3:3FFhAWAUNXxAujmZ2+mvbhifFXAuArmvD2S3zsFXmXYvn:3FFWe9TK37ArdS34mXYvn
MD5:	E6CD92AD3B3AB9CB3D325F3C4B7559AA
SHA1:	0704D57B52CF55674524A5278ED4F7BA1E19CA0C
SHA-256:	63DFB8D99CE83B3CA282EB697DC76B17B4A48E4065FC7EFAFB77724739074A9D
SHA-512:	172D5DC107757BB591B9A8ED7F2B48F22B5184D6537572D375801113E294FEBFBE39077C408E3A04C44E6072427CBE443C6614D205A5A4AA290101722E18F5E8
Malicious:	false
Preview:	{.. "description": "Microsoft CRLSet",.. "name": "MicrosoftCRLSet",.. "version": "6498.2024.12.2"..}..

C:\Users\user\AppData\Local\Temp\cv_debug.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2110
Entropy (8bit):	5.405402060926562
Encrypted:	false
SSDEEP:	48:Yzj57SnaJ57H57Uv5W1Sj5W175zuR5z+5zn071eDJk5c1903bj5jJp0gcU854Rrn:8e2Fa116uCntc5toYb4M
MD5:	90AF92289B0D21D1D06D0BD97650840D
SHA1:	609C247BCE5AD8FFFCD35FA679E6DA725A28B576
SHA-256:	8E24C62F200C2252D68804160CE9BA0719791CDEB6DD1C35B204B32B20383DFE
SHA-512:	46CC1A9669312B86BE82AD73F18BD8226CC78B3BFE4077AC93627371983795AEC7259F2D98052165A255F6042B51F855518BA2CB61F103CBD55970BB6F34B367
Malicious:	false
Preview:	{"logTime": "1004/133448", "correlationVector":"vYS73lRT+EoO2Owh9jsc+Y","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133448", "correlationVector":"n/KhuHPhHmYXokB31+JZz7","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133448", "correlationVector":"fclQx26bUZO07waFEDe6Fn","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133448", "correlationVector":"0757l0tkKt37vNrdCKAm8w","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133449", "correlationVector":"uTRRkmbbqkgK/wPBCS4fct","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133449", "correlationVector":"2DrXipL1ngF91RN7IemK0e","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/134324", "correlationVector":"d0GyjEgnW85fvDIojHVIXI","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/134324", "correlationVector":"PvfzGWRutB/kmuXUK+c8XA","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/134324", "correlationVector":"29CB75FBC4C942E0817A1F7A0E2CF647

C:\Users\user\AppData\Local\Temp\eedebd11-b75f-442d-8d1a-641a0d0dff1e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 41900
Category:	dropped
Size (bytes):	76321
Entropy (8bit):	7.996057445951542
Encrypted:	true
SSDEEP:	1536:hS5Vvm808scZeEzFrSpzBUl4MZIGM/iys3BBrYunau6wpGzxue:GdS8scZNzFrMa4M+lK5/nXexue
MD5:	D7A1AC56ED4F4D17DD0524C88892C56D
SHA1:	4153CA1A9A4FD0F781ECD5BA9D2A1E68C760ECD4
SHA-256:	0A29576C4002D863B0C5AE7A0B36C0BBEB0FB9AFD16B008451D4142C07E1FF2B
SHA-512:	31503F2F6831070E887EA104296E17EE755BB6BBFB1EF2A15371534BFA2D3F0CD53862389625CF498754B071885A53E1A7F82A3546275DB1F4588E0E80BF7BEE
Malicious:	false
Preview:	...........m{..(.}...7.\...N.D.w..m..q....%XfL.I.ql..;/.....s...E...0....`..A..[o^.^Y...F_.'..."L...^.......Y..W..l...E0..YY...:.&.u?....J..U<.q."...p.ib:.g..^.q.mr.....^&.{.E.....,EAp.q.......=.=.....z^.,d.^..J.R..zI4..2b?.-D5/.^...+.G..Y..?5..k........i.,.T#........_DV....P..d2......b\..L....o....Z.}../....CU.$.-..D9`..~......=....._.2O..?....b.{...7IY.L..q....K....T..5m.d.s.4.^... ..~<..7~6OS..b...^>.......s..n....k."..G.....L...z.U...... ... .ZY...,...kU1..N...(..V.r\$..s...X.It...x.mr..W....g........9DQR....*d......;L.S.....G... .._D.{.=.zI.g.Y~...`T..p.yO..4......8$..v.J..I.%..._.d.[..du5._._...?\..8.c.....U...fy.t....q.t....T@.......:zu..\,.!.I..AN_.....FeX..h.c.i.W.......(.....Y..F...R%.\..@.. 2(e,&.76..F+...l.t.$..`...........Wi.{.U.&(.b}...}.i..,...k....!..%...&.c..D-."..SQ.......q9....)j....7.".N....AX...).d./giR....uk.....s.....^...........:...~......(hP..K.@.&..?.E0:+D\|9...U.q.cu..)t{.e...X...{.....z......LL&I6.=.

C:\Users\user\AppData\Local\Temp\scoped_dir572_1478966589\03e4f78a-2665-4076-9dfe-1e128c5c670b.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Local\Temp\scoped_dir572_1478966589\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1753
Entropy (8bit):	5.8889033066924155
Encrypted:	false
SSDEEP:	48:Pxpr7Xka2NXDpfsBJODI19Kg1JqcJW9O//JE3ZBDcpu/x:L3XgNSz9/4kIO3u3Xgpq
MD5:	738E757B92939B24CDBBD0EFC2601315
SHA1:	77058CBAFA625AAFBEA867052136C11AD3332143
SHA-256:	D23B2BA94BA22BBB681E6362AE5870ACD8A3280FA9E7241B86A9E12982968947
SHA-512:	DCA3E12DD5A9F1802DB6D11B009FCE2B787E79B9F730094367C9F26D1D87AF1EA072FF5B10888648FB1231DD83475CF45594BB0C9915B655EE363A3127A5FFC2
Malicious:	false
Preview:	[.. {.. "description": "treehash per file",.. "signed_content": {.. "payload": "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",.. "signatures": [.. {.. "header": {.. "kid": "publisher".. },.. "protected": "eyJhbGciOiJSUzI1NiJ9",.. "signature": "UglEEilkOml5P1W0X6wc-_dB87PQB73uMir11923av57zPKujb4IUe_lbGpn7cRZsy6x-8i9eEKxAW7L2TSmYqrcp4XtiON6ppcf27FWACXOUJDax9wlMr-EOtyZhykCnB9vR

C:\Users\user\AppData\Local\Temp\scoped_dir572_1478966589\CRX_INSTALL\content.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8031), with no line terminators
Category:	dropped
Size (bytes):	9815
Entropy (8bit):	6.1716321262973315
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
MD5:	3D20584F7F6C8EAC79E17CCA4207FB79
SHA1:	3C16DCC27AE52431C8CDD92FBAAB0341524D3092
SHA-256:	0D40A5153CB66B5BDE64906CA3AE750494098F68AD0B4D091256939EEA243643
SHA-512:	315D1B4CC2E70C72D7EB7D51E0F304F6E64AC13AE301FD2E46D585243A6C936B2AD35A0964745D291AE9B317C316A29760B9B9782C88CC6A68599DB531F87D59
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir572_1478966589\CRX_INSTALL\content_new.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8604), with no line terminators
Category:	dropped
Size (bytes):	10388
Entropy (8bit):	6.174387413738973
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
MD5:	3DE1E7D989C232FC1B58F4E32DE15D64
SHA1:	42B152EA7E7F31A964914F344543B8BF14B5F558
SHA-256:	D4AA4602A1590A4B8A1BCE8B8D670264C9FB532ADC97A72BC10C43343650385A
SHA-512:	177E5BDF3A1149B0229B6297BAF7B122602F7BD753F96AA41CCF2D15B2BCF6AF368A39BB20336CCCE121645EC097F6BEDB94666C74ACB6174EB728FBFC43BC2A
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir572_1478966589\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	962
Entropy (8bit):	5.698567446030411
Encrypted:	false
SSDEEP:	24:1Hg9+D3DRnbuF2+sUrzUu+Y9VwE+Fg41T1O:NBqY+6E+F7JO
MD5:	E805E9E69FD6ECDCA65136957B1FB3BE
SHA1:	2356F60884130C86A45D4B232A26062C7830E622
SHA-256:	5694C91F7D165C6F25DAF0825C18B373B0A81EA122C89DA60438CD487455FD6A
SHA-512:	049662EF470D2B9E030A06006894041AE6F787449E4AB1FBF4959ADCB88C6BB87A957490212697815BB3627763C01B7B243CF4E3C4620173A95795884D998A75
Malicious:	false
Preview:	{.. "content_scripts": [ {.. "js": [ "content.js" ],.. "matches": [ "https://chrome.google.com/webstore/" ].. }, {.. "js": [ "content_new.js" ],.. "matches": [ "https://chromewebstore.google.com/" ].. } ],.. "description": "Edge relevant text changes on select websites to improve user experience and precisely surfaces the action they want to take.",.. "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu06p2Mjoy6yJDUUjCe8Hnqvtmjll73XqcbylxFZZWe+MCEAEK+1D0Nxrp0+IuWJL02CU3jbuR5KrJYoezA36M1oSGY5lIF/9NhXWEx5GrosxcBjxqEsdWv/eDoOOEbIvIO0ziMv7T1SUnmAA07wwq8DXWYuwlkZU/PA0Mxx0aNZ5+QyMfYqRmMpwxkwPG8gyU7kmacxgCY1v7PmmZo1vSIEOBYrxl064w5Q6s/dpalSJM9qeRnvRMLsszGY/J2bjQ1F0O2JfIlBjCOUg/89+U8ZJ1mObOFrKO4um8QnenXtH0WGmsvb5qBNrvbWNPuFgr2+w5JYlpSQ+O8zUCb8QZwIDAQAB",.. "manifest_version": 3,.. "name": "Edge relevant text changes",.. "update_url": "https://edge.microsoft.com/extensionwebstorebase/v1/crx",.. "version": "1.2.1"..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\71df8787-afba-45ff-a3ec-c0ad811618f0.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	138356
Entropy (8bit):	7.809609231921042
Encrypted:	false
SSDEEP:	3072:AQ++ZdS5+fnwcxO+XwquyeNnmraugZ/1DOoncWD/5q:AQ++/PZmlyeNnh/1SmRq
MD5:	3F6F93C3DCCD4A91C4EB25C7F6FEB1C1
SHA1:	9B73F46ADFA1F4464929B408407E73D4535C6827
SHA-256:	19F05352CB4C6E231C1C000B6C8B7E9EDCC1E8082CAF46FFF16B239D32AA7C9E
SHA-512:	D488FA67E3A29D0147E9EAF2EABC74D9A255F8470CF79A4AEA60E3B3B5E48A3FCBC4FC3E9CE58DFF8D7D0CAA8AE749295F221E1FE1BA5D20DEB2D97544A12BA4
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[........q.a.....E..i.t,..7C..7!...`l.-.......T.vH...~.....'..aH..C.oJOE..d..2..$J......I..;.(9l.(..+.N.6.@...].a.n.S.6..=.b.W.\....o...#.~J.W.1..E...2H....S.g0....../.H...y.O8...kE.,..m!..F.D.p......H..s.W ...#.L........Ij.........-..n..\..vD.d.V.....!......[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. ?Eq.M...[6^...+.].G..Y]...7..o.. U...v....P.J...@.E!...B.d..p..i".%............oo.<....~=..!t.+...`....h..LK....0....h...,.R%.....u...._..V_.q:_._..5}.uS\.....x?...~]..C-....S=L...._c.P.B....-M...62.i*.Q.....9.....+S=...../6:...W..ql/g..&j.y..{.."....\|..F....\|....V....w.%t.y..?..&..a..<.n....S+\|..=.ra.....

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\128.png

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4982
Entropy (8bit):	7.929761711048726
Encrypted:	false
SSDEEP:	96:L7Rf7U1ylWb3KfyEfOXE+PIcvBirQFiAql1ZwKREkXCSAk:pTvWqfD+gl0sAql1u7kySAk
MD5:	913064ADAAA4C4FA2A9D011B66B33183
SHA1:	99EA751AC2597A080706C690612AEEEE43161FC1
SHA-256:	AFB4CE8882EF7AE80976EBA7D87F6E07FCDDC8E9E84747E8D747D1E996DEA8EB
SHA-512:	162BF69B1AD5122C6154C111816E4B87A8222E6994A72743ED5382D571D293E1467A2ED2FC6CC27789B644943CF617A56DA530B6A6142680C5B2497579A632B5
Malicious:	false
Preview:	.PNG........IHDR..............>a....=IDATx..]}...U..;...O.Q..QH.I(....v..E....GUb..R[.4@%..hK..B..(.B..". ....&)U#.%...jZ...JC.8.....{.cfvgf.3;.....}ow.....{...P.B...T.P.B...*Tx...=.Q..wv.w.....\|.e.1.$.P.?..l_\.n.}...~.g.....Q...A.f....m.....{,...C2 %..X.......FE.1.N..f...Q..D.K87.....:g..Q.{............3@$.8.....{.....q....G.. .....5..y......)XK..F...D.......... ."8...J#.eM.i....H.E.....a.RIP.`......)..T.....! .[p`X.`..L.a....e. .T..2.....H..p$..02...j....\..........s{...Ymm~.a........f.$./.[.{..C.2:.0..6..]....`....NW.....0..o.T..$;k.2......_...k..{,.+........{..6...L..... .dw...l$..}...K...EV....0......P...e....k....+Go....qw.9.1...X2\..qfw0v.....N...{...l.."....f.A..I..+#.v....'..~E.N-k.........{...l.$..ga..1...$......x$X=}.N..S..B$p..`..`.ZG:c..RA.(.0......Gg.A.I..>...3u.u........_..KO.m.........C...,..c.......0...@_..m...-..7.......4LZ......j@.......\..'....u. QJ.:G..I`.w'B0..w.H..'b.0- ......\|..}./.....e..,.K.1........W.u.v. ...\.o

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\af\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	908
Entropy (8bit):	4.512512697156616
Encrypted:	false
SSDEEP:	12:1HASvgMTCBxNB+kCIww3v+BBJ/wjsV8lCBxeBeRiGTCSU8biHULaBg/4srCBhUJJ:1HAkkJ+kCIwEg/wwbw0PXa22QLWmSDg
MD5:	12403EBCCE3AE8287A9E823C0256D205
SHA1:	C82D43C501FAE24BFE05DB8B8F95ED1C9AC54037
SHA-256:	B40BDE5B612CFFF936370B32FB0C58CC205FC89937729504C6C0B527B60E2CBA
SHA-512:	153401ECDB13086D2F65F9B9F20ACB3CEFE5E2AEFF1C31BA021BE35BF08AB0634812C33D1D34DA270E5693A8048FC5E2085E30974F6A703F75EA1622A0CA0FFD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKEP NUWE".. },.. "explanationofflinedisabled": {.. "message": "Jy is vanlyn. As jy Google Dokumente sonder 'n internetverbinding wil gebruik, moet jy die volgende keer as jy aan die internet gekoppel is na instellings op die Google Dokumente-tuisblad gaan en vanlynsinkronisering aanskakel.".. },.. "explanationofflineenabled": {.. "message": "Jy is vanlyn, maar jy kan nog steeds beskikbare l.ers redigeer of nuwes skep.".. },.. "extdesc": {.. "message": "Skep, wysig en bekyk jou dokumente, sigblaaie en aanbiedings . alles sonder toegang tot die internet.".. },.. "extname": {.. "message": "Google Vanlyn Dokumente".. },.. "learnmore": {.. "message": "Kom meer te wete".. },.. "popuphelptext": {.. "message": "Skryf, redigeer en werk saam, waar jy ook al is, met of sonder 'n internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\am\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1285
Entropy (8bit):	4.702209356847184
Encrypted:	false
SSDEEP:	24:1HAn6bfEpxtmqMI91ivWjm/6GcCIoToCZzlgkX/Mj:W6bMt3MITFjm/Pcd4oCZhg6k
MD5:	9721EBCE89EC51EB2BAEB4159E2E4D8C
SHA1:	58979859B28513608626B563138097DC19236F1F
SHA-256:	3D0361A85ADFCD35D0DE74135723A75B646965E775188F7DCDD35E3E42DB788E
SHA-512:	FA3689E8663565D3C1C923C81A620B006EA69C99FB1EB15D07F8F45192ED9175A6A92315FA424159C1163382A3707B25B5FC23E590300C62CBE2DACE79D84871
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ...".. },.. "explanationofflinedisabled": {.. "message": "..... .. .... Google ..... ........ ..... ..... .Google .... ... .. .. .. ..... .... ....... .. ....... ... .. .. ..... .. ..... ....".. },.. "explanationofflineenabled": {.. "message": "..... .. .... ... .. .... .... ..... .... ... ..... .... .....".. },.. "extdesc": {.. "message": "...... ..... .... ... .. ..... ...... ..... .... .. ..... . .... .. ...... .....".. },.. "extname": {.. "message": "..... .. Goog

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\ar\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1244
Entropy (8bit):	4.5533961615623735
Encrypted:	false
SSDEEP:	12:1HASvgPCBxNhieFTr9ogjIxurIyJCCBxeh6wAZKn7uCSUhStuysUm+WCBhSueW1Y:1HAgJzoaC6VEn7Css8yoXzzd
MD5:	3EC93EA8F8422FDA079F8E5B3F386A73
SHA1:	24640131CCFB21D9BC3373C0661DA02D50350C15
SHA-256:	ABD0919121956AB535E6A235DE67764F46CFC944071FCF2302148F5FB0E8C65A
SHA-512:	F40E879F85BC9B8120A9B7357ED44C22C075BF065F45BEA42BD5316AF929CBD035D5D6C35734E454AEF5B79D378E51A77A71FA23F9EBD0B3754159718FCEB95C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....".. },.. "explanationofflinedisabled": {.. "message": "... ... ...... ........ ....... Google ... ..... .......... ..... ... ......... .. ...... ........ ........ Google ..... ........ ... ..... .. ..... ....... .... .... .... ..........".. },.. "explanationofflineenabled": {.. "message": "... ... ...... .... .. .... ....... ..... ....... ....... .. ..... ..... ......".. },.. "extdesc": {.. "message": "..... ......... ...... ........ ....... ......... ........ ....... .. ... ... ..... .........".. },.. "extname": {.. "message": "....... Google ... ......".. },.. "learnmore": {.. "messa

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\az\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.867640976960053
Encrypted:	false
SSDEEP:	24:1HAWNjbwlmyuAoW32Md+80cVLdUSERHtRo3SjX:J3wlzs42m+8TV+S4H0CjX
MD5:	9A798FD298008074E59ECC253E2F2933
SHA1:	1E93DA985E880F3D3350FC94F5CCC498EFC8C813
SHA-256:	628145F4281FA825D75F1E332998904466ABD050E8B0DC8BB9B6A20488D78A66
SHA-512:	9094480379F5AB711B3C32C55FD162290CB0031644EA09A145E2EF315DA12F2E55369D824AF218C3A7C37DD9A276AEEC127D8B3627D3AB45A14B0191ED2BBE70
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN.S.N. YARADIN".. },.. "explanationofflinedisabled": {.. "message": "Oflayns.n.z. Google S.n.di internet ba.lant.s. olmadan istifad. etm.k ist.yirsinizs., Google S.n.din .sas s.hif.sind. ayarlara gedin v. n.vb.ti d.f. internet. qo.ulanda oflayn sinxronizasiyan. aktiv edin.".. },.. "explanationofflineenabled": {.. "message": "Oflayns.n.z, amma m.vcud fayllar. redakt. ed. v. yenil.rini yarada bil.rsiniz.".. },.. "extdesc": {.. "message": "S.n.d, c.dv.l v. t.qdimatlar.n ham.s.n. internet olmadan redakt. edin, yarad.n v. bax.n.".. },.. "extname": {.. "message": "Google S.n.d Oflayn".. },.. "learnmore": {.. "message": ".trafl. M.lumat".. },.. "popuphelptext": {.. "message": "Harda olma..n.zdan v. internet. qo.ulu olub-olmad...n.zdan as.l. olmayaraq, yaz.n, redakt. edin v. .m.kda.l.q edin.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\be\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3107
Entropy (8bit):	3.535189746470889
Encrypted:	false
SSDEEP:	48:YOWdTQ0QRk+QyJQAy6Qg4QWSe+QECTQLHQlQIfyQ0fnWQjQDrTQik+QvkZTQ+89b:GdTbyRvwgbCTEHQhyVues9oOT3rOCkV
MD5:	68884DFDA320B85F9FC5244C2DD00568
SHA1:	FD9C01E03320560CBBB91DC3D1917C96D792A549
SHA-256:	DDF16859A15F3EB3334D6241975CA3988AC3EAFC3D96452AC3A4AFD3644C8550
SHA-512:	7FF0FBD555B1F9A9A4E36B745CBFCAD47B33024664F0D99E8C080BE541420D1955D35D04B5E973C07725573E592CD0DD84FDBB867C63482BAFF6929ADA27CCDE
Malicious:	false
Preview:	{"createnew":{"message":"\u0421\u0422\u0412\u0410\u0420\u042b\u0426\u042c \u041d\u041e\u0412\u042b"},"explanationofflinedisabled":{"message":"\u0412\u044b \u045e \u043f\u0430\u0437\u0430\u0441\u0435\u0442\u043a\u0430\u0432\u044b\u043c \u0440\u044d\u0436\u044b\u043c\u0435. \u041a\u0430\u0431 \u043a\u0430\u0440\u044b\u0441\u0442\u0430\u0446\u0446\u0430 \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0456 Google \u0431\u0435\u0437 \u043f\u0430\u0434\u043a\u043b\u044e\u0447\u044d\u043d\u043d\u044f \u0434\u0430 \u0456\u043d\u0442\u044d\u0440\u043d\u044d\u0442\u0443, \u043f\u0435\u0440\u0430\u0439\u0434\u0437\u0456\u0446\u0435 \u0434\u0430 \u043d\u0430\u043b\u0430\u0434 \u043d\u0430 \u0433\u0430\u043b\u043e\u045e\u043d\u0430\u0439 \u0441\u0442\u0430\u0440\u043e\u043d\u0446\u044b \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u045e Google \u0456 \u045e\u043a\u043b\u044e\u0447\u044b\u0446\u0435 \u0441\u0456\u043d\u0445\u0440\u0430\u043d\u0456\u0437\u0430\u0446\u044b\u044e

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\bg\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1389
Entropy (8bit):	4.561317517930672
Encrypted:	false
SSDEEP:	24:1HAp1DQqUfZ+Yann08VOeadclUZbyMzZzsYvwUNn7nOyRK8/nn08V7:g1UTfZ+Ya08Uey3tflCRE08h
MD5:	2E6423F38E148AC5A5A041B1D5989CC0
SHA1:	88966FFE39510C06CD9F710DFAC8545672FFDCEB
SHA-256:	AC4A8B5B7C0B0DD1C07910F30DCFBDF1BCB701CFCFD182B6153FD3911D566C0E
SHA-512:	891FCDC6F07337970518322C69C6026896DD3588F41F1E6C8A1D91204412CAE01808F87F9F2DEA1754458D70F51C3CEF5F12A9E3FC011165A42B0844C75EC683
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. .. .......... Google ......... ... ........ ......, ........ ........... . ......... ........ .. Google ......... . ........ ...... .............. ......... ..., ...... ..... ...... . .........".. },.. "explanationofflineenabled": {.. "message": "...... ..., .. ... ...... .. ........... ......... ....... ... .. ......... .....".. },.. "extdesc": {.. "message": "............, .......... . ............ ...... ........., .......... ....... . ........... . ...... .... ... ...... .. .........".. },..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\bn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1763
Entropy (8bit):	4.25392954144533
Encrypted:	false
SSDEEP:	24:1HABGtNOtIyHmVd+q+3X2AFl2DhrR7FAWS9+SMzI8QVAEq8yB0XtfOyvU7D:oshmm/+H2Ml2DrFPS9+S99EzBd7D
MD5:	651375C6AF22E2BCD228347A45E3C2C9
SHA1:	109AC3A912326171D77869854D7300385F6E628C
SHA-256:	1DBF38E425C5C7FC39E8077A837DF0443692463BA1FBE94E288AB5A93242C46E
SHA-512:	958AA7CF645FAB991F2ECA0937BA734861B373FB1C8BCC001599BE57C65E0917F7833A971D93A7A6423C5F54A4839D3A4D5F100C26EFA0D2A068516953989F9D
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ....".. },.. "explanationofflinedisabled": {.. "message": ".... ....... ....... .... ......... ..... ..... Google ........ ....... ...., Google .......... ........ ....... ... ... .... ... .... ... ........... .... ....... .... ... ...... ..... .... .....".. },.. "explanationofflineenabled": {.. "message": ".... ....... ......, ...... .... .... ...... .......... ........ .... .. .... .... .... .... .......".. },.. "extdesc":

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\ca\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	930
Entropy (8bit):	4.569672473374877
Encrypted:	false
SSDEEP:	12:1HASvggoSCBxNFT0sXuqgEHQ2fTq9blUJYUJaw9CBxejZFPLOjCSUuE44pMiiDat:1HAtqs+BEHGpURxSp1iUPWCAXtRKe
MD5:	D177261FFE5F8AB4B3796D26835F8331
SHA1:	4BE708E2FFE0F018AC183003B74353AD646C1657
SHA-256:	D6E65238187A430FF29D4C10CF1C46B3F0FA4B91A5900A17C5DFD16E67FFC9BD
SHA-512:	E7D730304AED78C0F4A78DADBF835A22B3D8114FB41D67B2B26F4FE938B572763D3E127B7C1C81EBE7D538DA976A7A1E7ADC40F918F88AFADEA2201AE8AB47D0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA'N UN DE NOU".. },.. "explanationofflinedisabled": {.. "message": "No tens connexi.. Per utilitzar Documents de Google sense connexi. a Internet, ves a la configuraci. de la p.gina d'inici d'aquest servei i activa l'opci. per sincronitzar-se sense connexi. la propera vegada que estiguis connectat a la xarxa.".. },.. "explanationofflineenabled": {.. "message": "Tot i que no tens connexi., pots editar o crear fitxers.".. },.. "extdesc": {.. "message": "Edita, crea i consulta documents, fulls de c.lcul i presentacions, tot sense acc.s a Internet.".. },.. "extname": {.. "message": "Documents de Google sense connexi.".. },.. "learnmore": {.. "message": "M.s informaci.".. },.. "popuphelptext": {.. "message": "Escriu text, edita fitxers i col.labora-hi siguis on siguis, amb o sense connexi. a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\cs\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	913
Entropy (8bit):	4.947221919047
Encrypted:	false
SSDEEP:	12:1HASvgdsbCBxNBmobXP15Dxoo60n40h6qCBxeBeGG/9jZCSUKFPDLZ2B2hCBhPLm:1HApJmoZ5e50nzQhwAd7dvYB2kDSGGKs
MD5:	CCB00C63E4814F7C46B06E4A142F2DE9
SHA1:	860936B2A500CE09498B07A457E0CCA6B69C5C23
SHA-256:	21AE66CE537095408D21670585AD12599B0F575FF2CB3EE34E3A48F8CC71CFAB
SHA-512:	35839DAC6C985A6CA11C1BFF5B8B5E59DB501FCB91298E2C41CB0816B6101BF322445B249EAEA0CEF38F76D73A4E198F2B6E25EEA8D8A94EA6007D386D4F1055
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVO.IT".. },.. "explanationofflinedisabled": {.. "message": "Jste offline. Pokud chcete Dokumenty Google pou..vat bez p.ipojen. k.internetu, a. budete p...t. online, p.ejd.te do nastaven. na domovsk. str.nce Dokument. Google a.zapn.te offline synchronizaci.".. },.. "explanationofflineenabled": {.. "message": "Jste offline, ale st.le m..ete upravovat dostupn. soubory nebo vytv..et nov..".. },.. "extdesc": {.. "message": "Upravujte, vytv..ejte a.zobrazujte sv. dokumenty, tabulky a.prezentace . v.e bez p..stupu k.internetu.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Dal.. informace".. },.. "popuphelptext": {.. "message": "Pi.te, upravujte a.spolupracujte kdekoli, s.p.ipojen.m k.internetu i.bez n.j.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\cy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	806
Entropy (8bit):	4.815663786215102
Encrypted:	false
SSDEEP:	12:YGo35xMxy6gLr4Dn1eBVa1xzxyn1VFQB6FDVgdAJex9QH7uy+XJEjENK32J21j:Y735+yoeeRG54uDmdXx9Q7u3r83Xj
MD5:	A86407C6F20818972B80B9384ACFBBED
SHA1:	D1531CD0701371E95D2A6BB5EDCB79B949D65E7C
SHA-256:	A482663292A913B02A9CDE4635C7C92270BF3C8726FD274475DC2C490019A7C9
SHA-512:	D9FBF675514A890E9656F83572208830C6D977E34D5744C298A012515BC7EB5A17726ADD0D9078501393BABD65387C4F4D3AC0CC0F7C60C72E09F336DCA88DE7
Malicious:	false
Preview:	{"createnew":{"message":"CREU NEWYDD"},"explanationofflinedisabled":{"message":"Rydych chi all-lein. I ddefnyddio Dogfennau Google heb gysylltiad \u00e2'r rhyngrwyd, ewch i'r gosodiadau ar dudalen hafan Dogfennau Google a throi 'offine sync' ymlaen y tro nesaf y byddwch wedi'ch cysylltu \u00e2'r rhyngrwyd."},"explanationofflineenabled":{"message":"Rydych chi all-lein, ond gallwch barhau i olygu'r ffeiliau sydd ar gael neu greu rhai newydd."},"extdesc":{"message":"Gallwch olygu, creu a gweld eich dogfennau, taenlenni a chyflwyniadau \u2013 i gyd heb fynediad i'r rhyngrwyd."},"extname":{"message":"Dogfennau Google All-lein"},"learnmore":{"message":"DYSGU MWY"},"popuphelptext":{"message":"Ysgrifennwch, golygwch a chydweithiwch lle bynnag yr ydych, gyda chysylltiad \u00e2'r rhyngrwyd neu hebddo."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\da\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	883
Entropy (8bit):	4.5096240460083905
Encrypted:	false
SSDEEP:	24:1HA4EFkQdUULMnf1yo+9qgpukAXW9bGJTvDyqdr:zEFkegfw9qwAXWNs/yu
MD5:	B922F7FD0E8CCAC31B411FC26542C5BA
SHA1:	2D25E153983E311E44A3A348B7D97AF9AAD21A30
SHA-256:	48847D57C75AF51A44CBF8F7EF1A4496C2007E58ED56D340724FDA1604FF9195
SHA-512:	AD0954DEEB17AF04858DD5EC3D3B3DA12DFF7A666AF4061DEB6FD492992D95DB3BAF751AB6A59BEC7AB22117103A93496E07632C2FC724623BB3ACF2CA6093F3
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPRET NYT".. },.. "explanationofflinedisabled": {.. "message": "Du er offline. Hvis du vil bruge Google Docs uden en internetforbindelse, kan du g. til indstillinger p. startsiden for Google Docs og aktivere offlinesynkronisering, n.ste gang du har internetforbindelse.".. },.. "explanationofflineenabled": {.. "message": "Du er offline, men du kan stadig redigere tilg.ngelige filer eller oprette nye.".. },.. "extdesc": {.. "message": "Rediger, opret og se dine dokumenter, regneark og pr.sentationer helt uden internetadgang.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "F. flere oplysninger".. },.. "popuphelptext": {.. "message": "Skriv, rediger og samarbejd, uanset hvor du er, og uanset om du har internetforbindelse.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\de\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1031
Entropy (8bit):	4.621865814402898
Encrypted:	false
SSDEEP:	24:1HA6sZnqWd77ykJzCkhRhoe1HMNaAJPwG/p98HKpy2kX/R:WZqWxykJzthRhoQma+tpyHX2O/R
MD5:	D116453277CC860D196887CEC6432FFE
SHA1:	0AE00288FDE696795CC62FD36EABC507AB6F4EA4
SHA-256:	36AC525FA6E28F18572D71D75293970E0E1EAD68F358C20DA4FDC643EEA2C1C5
SHA-512:	C788C3202A27EC220E3232AE25E3C855F3FDB8F124848F46A3D89510C564641A2DFEA86D5014CEA20D3D2D3C1405C96DBEB7CCAD910D65C55A32FDCA8A33FDD4
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NEU ERSTELLEN".. },.. "explanationofflinedisabled": {.. "message": "Sie sind offline. Um Google Docs ohne Internetverbindung zu verwenden, gehen Sie auf der Google Docs-Startseite auf \"Einstellungen\" und schalten die Offlinesynchronisierung ein, wenn Sie das n.chste Mal mit dem Internet verbunden sind.".. },.. "explanationofflineenabled": {.. "message": "Sie sind offline, aber k.nnen weiterhin verf.gbare Dateien bearbeiten oder neue Dateien erstellen.".. },.. "extdesc": {.. "message": "Mit der Erweiterung k.nnen Sie Dokumente, Tabellen und Pr.sentationen bearbeiten, erstellen und aufrufen.. ganz ohne Internetverbindung.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Weitere Informationen".. },.. "popuphelptext": {.. "message": "Mit oder ohne Internetverbindung: Sie k.nnen von .berall Dokumente erstellen, .ndern und zusammen mit anderen

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\el\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1613
Entropy (8bit):	4.618182455684241
Encrypted:	false
SSDEEP:	24:1HAJKan4EITDZGoziRAc2Z8eEfkTJfLhGX7b0UBNoAcGpVyhxefSmuq:SKzTD0IK85JlwsGOUyaSk
MD5:	9ABA4337C670C6349BA38FDDC27C2106
SHA1:	1FC33BE9AB4AD99216629BC89FBB30E7AA42B812
SHA-256:	37CA6AB271D6E7C9B00B846FDB969811C9CE7864A85B5714027050795EA24F00
SHA-512:	8564F93AD8485C06034A89421CE74A4E719BBAC865E33A7ED0B87BAA80B7F7E54B240266F2EDB595DF4E6816144428DB8BE18A4252CBDCC1E37B9ECC9F9D7897
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......... ....".. },.. "explanationofflinedisabled": {.. "message": "..... ..... ......... ... .. ............... .. ....... Google ..... ....... ... ........., ......... .... ......... .... ...... ...... ... ........ Google ... ............. ... ........... ..... ........ ... ....... .... ... .. ..... ............ ... ..........".. },.. "explanationofflineenabled": {.. "message": "..... ..... ........ .... ........ .. .............. .. ......... ...... . .. ............. ... .......".. },.. "extdesc": {.. "message": ".............., ............ ... ..... .. ......., .

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\en\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\en_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\en_GB\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	848
Entropy (8bit):	4.494568170878587
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3vRyc1NzXW6iFrSCBxesJGceKCSUuvlvOgwCBhUufz1tnaXrQ:1HA3djfR3NzXviFrJj4sJXJ+bA6RM
MD5:	3734D498FB377CF5E4E2508B8131C0FA
SHA1:	AA23E39BFE526B5E3379DE04E00EACBA89C55ADE
SHA-256:	AB5CDA04013DCE0195E80AF714FBF3A67675283768FFD062CF3CF16EDB49F5D4
SHA-512:	56D9C792954214B0DE56558983F7EB7805AC330AF00E944E734340BE41C68E5DD03EDDB17A63BC2AB99BDD9BE1F2E2DA5BE8BA7C43D938A67151082A9041C7BA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an Internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the Internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create and view your documents, spreadsheets and presentations . all without Internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn more".. },.. "popuphelptext": {.. "message": "Write, edit and collaborate wherever you are, with or without an Internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\en_US\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1425
Entropy (8bit):	4.461560329690825
Encrypted:	false
SSDEEP:	24:1HA6Krbbds5Kna/BNzXviFrpsCxKU4irpNQ0+qWK5yOJAaCB7MAa6:BKrbBs5Kna/BNzXvi3sCxKZirA0jWK5m
MD5:	578215FBB8C12CB7E6CD73FBD16EC994
SHA1:	9471D71FA6D82CE1863B74E24237AD4FD9477187
SHA-256:	102B586B197EA7D6EDFEB874B97F95B05D229EA6A92780EA8544C4FF1E6BC5B1
SHA-512:	E698B1A6A6ED6963182F7D25AC12C6DE06C45D14499DDC91E81BDB35474E7EC9071CFEBD869B7D129CB2CD127BC1442C75E408E21EB8E5E6906A607A3982B212
Malicious:	false
Preview:	{.. "createNew": {.. "description": "Text shown in the extension pop up for creating a new document",.. "message": "CREATE NEW".. },.. "explanationOfflineDisabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is disabled.",.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationOfflineEnabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is enabled.",.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extDesc": {.. "description": "Extension description",.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extName": {.. "description": "Extension name",..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\es\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	961
Entropy (8bit):	4.537633413451255
Encrypted:	false
SSDEEP:	12:1HASvggeCBxNFxcw2CVcfamedatqWCCBxeFxCF/m+rWAaFQbCSUuExqIQdO06stp:1HAqn0gcfa9dc/5mCpmIWck02USfWmk
MD5:	F61916A206AC0E971CDCB63B29E580E3
SHA1:	994B8C985DC1E161655D6E553146FB84D0030619
SHA-256:	2008F4FAAB71AB8C76A5D8811AD40102C380B6B929CE0BCE9C378A7CADFC05EB
SHA-512:	D9C63B2F99015355ACA04D74A27FD6B81170750C4B4BE7293390DC81EF4CD920EE9184B05C61DC8979B6C2783528949A4AE7180DBF460A2620DBB0D3FD7A05CF
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a Configuraci.n en la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que te conectes a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n. Aun as., puedes crear archivos o editar los que est.n disponibles.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones; todo ello, sin acceso a Internet.".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe o edita contenido y colabora con otras personas desde cualquier lugar, con o sin conexi.n a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\es_419\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	959
Entropy (8bit):	4.570019855018913
Encrypted:	false
SSDEEP:	24:1HARn05cfa9dcDmQOTtSprj0zaGUSjSGZ:+n0CfMcDmQOTQprj4qpC
MD5:	535331F8FB98894877811B14994FEA9D
SHA1:	42475E6AFB6A8AE41E2FC2B9949189EF9BBE09FB
SHA-256:	90A560FF82605DB7EDA26C90331650FF9E42C0B596CEDB79B23598DEC1B4988F
SHA-512:	2CE9C69E901AB5F766E6CFC1E592E1AF5A07AA78D154CCBB7898519A12E6B42A21C5052A86783ABE3E7A05043D4BD41B28960FEDDB30169FF7F7FE7208C8CFE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NUEVO".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a la configuraci.n de la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que est.s conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n, pero a.n puedes modificar los archivos disponibles o crear otros nuevos.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones aunque no tengas acceso a Internet".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, modifica y colabora dondequiera que est.s, con conexi.n a Internet o sin ella.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\et\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	968
Entropy (8bit):	4.633956349931516
Encrypted:	false
SSDEEP:	24:1HA5WG6t306+9sihHvMfdJLjUk4NJPNczGr:mWGY0cOUdJODPmzs
MD5:	64204786E7A7C1ED9C241F1C59B81007
SHA1:	586528E87CD670249A44FB9C54B1796E40CDB794
SHA-256:	CC31B877238DA6C1D51D9A6155FDE565727A1956572F466C387B7E41C4923A29
SHA-512:	44FCF93F3FB10A3DB68D74F9453995995AB2D16863EC89779DB451A4D90F19743B8F51095EEC3ECEF5BD0C5C60D1BF3DFB0D64DF288DCCFBE70C129AE350B2C6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LOO UUS".. },.. "explanationofflinedisabled": {.. "message": "Teil ei ole v.rgu.hendust. Teenuse Google.i dokumendid kasutamiseks ilma Interneti-.henduseta avage j.rgmine kord, kui olete Internetiga .hendatud, teenuse Google.i dokumendid avalehel seaded ja l.litage sisse v.rgu.henduseta s.nkroonimine.".. },.. "explanationofflineenabled": {.. "message": "Teil ei ole v.rgu.hendust, kuid saate endiselt saadaolevaid faile muuta v.i uusi luua.".. },.. "extdesc": {.. "message": "Saate luua, muuta ja vaadata oma dokumente, arvustustabeleid ning esitlusi ilma Interneti-.henduseta.".. },.. "extname": {.. "message": "V.rgu.henduseta Google.i dokumendid".. },.. "learnmore": {.. "message": "Lisateave".. },.. "popuphelptext": {.. "message": "Kirjutage, muutke ja tehke koost..d .ksk.ik kus olenemata sellest, kas teil on Interneti-.hendus.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\eu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	838
Entropy (8bit):	4.4975520913636595
Encrypted:	false
SSDEEP:	24:YnmjggqTWngosqYQqE1kjO39m7OddC0vjWQMmWgqwgQ8KLcxOb:Ynmsgqyngosq9qxTOs0vjWQMbgqchb
MD5:	29A1DA4ACB4C9D04F080BB101E204E93
SHA1:	2D0E4587DDD4BAC1C90E79A88AF3BD2C140B53B1
SHA-256:	A41670D52423BA69C7A65E7E153E7B9994E8DD0370C584BDA0714BD61C49C578
SHA-512:	B7B7A5A0AA8F6724B0FA15D65F25286D9C66873F03080CBABA037BDEEA6AADC678AC4F083BC52C2DB01BEB1B41A755ED67BBDDB9C0FE4E35A004537A3F7FC458
Malicious:	false
Preview:	{"createnew":{"message":"SORTU"},"explanationofflinedisabled":{"message":"Ez zaude konektatuta Internetera. Google Dokumentuak konexiorik gabe erabiltzeko, joan Google Dokumentuak zerbitzuaren orri nagusiko ezarpenetara eta aktibatu konexiorik gabeko sinkronizazioa Internetera konektatzen zaren hurrengoan."},"explanationofflineenabled":{"message":"Ez zaude konektatuta Internetera, baina erabilgarri dauden fitxategiak edita ditzakezu, baita beste batzuk sortu ere."},"extdesc":{"message":"Editatu, sortu eta ikusi dokumentuak, kalkulu-orriak eta aurkezpenak Interneteko konexiorik gabe."},"extname":{"message":"Google Dokumentuak konexiorik gabe"},"learnmore":{"message":"Lortu informazio gehiago"},"popuphelptext":{"message":"Edonon zaudela ere, ez duzu zertan konektatuta egon idatzi, editatu eta lankidetzan jardun ahal izateko."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\fa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1305
Entropy (8bit):	4.673517697192589
Encrypted:	false
SSDEEP:	24:1HAX9yM7oiI99Rwx4xyQakJbfAEJhmq/RlBu92P7FbNcgYVJ0:JM7ovex4xyQaKjAEyq/p7taX0
MD5:	097F3BA8DE41A0AAF436C783DCFE7EF3
SHA1:	986B8CABD794E08C7AD41F0F35C93E4824AC84DF
SHA-256:	7C4C09D19AC4DA30CC0F7F521825F44C4DFBC19482A127FBFB2B74B3468F48F1
SHA-512:	8114EA7422E3B20AE3F08A3A64A6FFE1517A7579A3243919B8F789EB52C68D6F5A591F7B4D16CEE4BD337FF4DAF4057D81695732E5F7D9E761D04F859359FADB
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ... ....".. },.. "explanationofflinedisabled": {.. "message": "...... ...... .... ....... .. ....... Google .... ..... ........ .... ... .. .. ....... ... ..... .. ....... .. .... .... ....... Google ..... . .......... ...... .. .... .....".. },.. "explanationofflineenabled": {.. "message": "...... ..... ... ...... ......... ......... .. .. .. ..... ..... ...... .... .. ........ ..... ..... .....".. },.. "extdesc": {.. "message": "...... ............ . ........ .. ....... ..... . ...... .... . ... ... ..... .... ...... .. ........".. },.. "extname": {.. "message": "....... Google .

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\fi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	911
Entropy (8bit):	4.6294343834070935
Encrypted:	false
SSDEEP:	12:1HASvguCBxNMME2BESA7gPQk36xCBxeMMcXYBt+CSU1pfazCBhUunV1tLaX5GI2N:1HAVioESAsPf36O3Xst/p3J8JeEY
MD5:	B38CBD6C2C5BFAA6EE252D573A0B12A1
SHA1:	2E490D5A4942D2455C3E751F96BD9960F93C4B60
SHA-256:	2D752A5DBE80E34EA9A18C958B4C754F3BC10D63279484E4DF5880B8FD1894D2
SHA-512:	6E65207F4D8212736059CC802C6A7104E71A9CC0935E07BD13D17EC46EA26D10BC87AD923CD84D78781E4F93231A11CB9ED8D3558877B6B0D52C07CB005F1C0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LUO UUSI".. },.. "explanationofflinedisabled": {.. "message": "Olet offline-tilassa. Jos haluat k.ytt.. Google Docsia ilman internetyhteytt., siirry Google Docsin etusivulle ja ota asetuksissa k.ytt..n offline-synkronointi, kun seuraavan kerran olet yhteydess. internetiin.".. },.. "explanationofflineenabled": {.. "message": "Olet offline-tilassa. Voit kuitenkin muokata k.ytett.viss. olevia tiedostoja tai luoda uusia.".. },.. "extdesc": {.. "message": "Muokkaa, luo ja katso dokumentteja, laskentataulukoita ja esityksi. ilman internetyhteytt..".. },.. "extname": {.. "message": "Google Docsin offline-tila".. },.. "learnmore": {.. "message": "Lis.tietoja".. },.. "popuphelptext": {.. "message": "Kirjoita, muokkaa ja tee yhteisty.t. paikasta riippumatta, my.s ilman internetyhteytt..".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\fil\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	939
Entropy (8bit):	4.451724169062555
Encrypted:	false
SSDEEP:	24:1HAXbH2eZXn6sjLITdRSJpGL/gWFJ3sqixO:ubHfZqsHIT/FLL3qO
MD5:	FCEA43D62605860FFF41BE26BAD80169
SHA1:	F25C2CE893D65666CC46EA267E3D1AA080A25F5B
SHA-256:	F51EEB7AAF5F2103C1043D520E5A4DE0FA75E4DC375E23A2C2C4AFD4D9293A72
SHA-512:	F66F113A26E5BCF54B9AAFA69DAE3C02C9C59BD5B9A05F829C92AF208C06DC8CCC7A1875CBB7B7CE425899E4BA27BFE8CE2CDAF43A00A1B9F95149E855989EE0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "GUMAWA NG BAGO".. },.. "explanationofflinedisabled": {.. "message": "Naka-offline ka. Upang magamit ang Google Docs nang walang koneksyon sa internet, pumunta sa mga setting sa homepage ng Google Docs at i-on ang offline na pag-sync sa susunod na nakakonekta ka sa internet.".. },.. "explanationofflineenabled": {.. "message": "Naka-offline ka, ngunit maaari mo pa ring i-edit ang mga available na file o gumawa ng mga bago.".. },.. "extdesc": {.. "message": "I-edit, gawin, at tingnan ang iyong mga dokumento, spreadsheet, at presentation . lahat ng ito nang walang access sa internet.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Matuto Pa".. },.. "popuphelptext": {.. "message": "Magsulat, mag-edit at makipag-collaborate nasaan ka man, nang mayroon o walang koneksyon sa internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\fr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.622066056638277
Encrypted:	false
SSDEEP:	24:1HAdy42ArMdsH50Jd6Z1PCBolXAJ+GgNHp0X16M1J1:EyfArMS2Jd6Z1PCBolX2+vNmX16Y1
MD5:	A58C0EEBD5DC6BB5D91DAF923BD3A2AA
SHA1:	F169870EEED333363950D0BCD5A46D712231E2AE
SHA-256:	0518287950A8B010FFC8D52554EB82E5D93B6C3571823B7CECA898906C11ABCC
SHA-512:	B04AFD61DE490BC838354E8DC6C22BE5C7AC6E55386FFF78489031ACBE2DBF1EAA2652366F7A1E62CE87CFCCB75576DA3B2645FEA1645B0ECEB38B1FA3A409E8
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour pouvoir utiliser Google.Docs sans connexion Internet, acc.dez aux param.tres de la page d'accueil de Google.Docs et activez la synchronisation hors connexion lors de votre prochaine connexion . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez quand m.me modifier les fichiers disponibles ou cr.er des fichiers.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez des documents, feuilles de calcul et pr.sentations, sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Docs hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": "R.digez des documents, modifiez-les et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\fr_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	972
Entropy (8bit):	4.621319511196614
Encrypted:	false
SSDEEP:	24:1HAdyg2pwbv1V8Cd61PC/vT2fg3YHDyM1J1:EyHpwbpd61C/72Y3YOY1
MD5:	6CAC04BDCC09034981B4AB567B00C296
SHA1:	84F4D0E89E30ED7B7ACD7644E4867FFDB346D2A5
SHA-256:	4CAA46656ECC46A420AA98D3307731E84F5AC1A89111D2E808A228C436D83834
SHA-512:	160590B6EC3DCF48F3EA7A5BAA11A8F6FA4131059469623E00AD273606B468B3A6E56D199E97DAA0ECB6C526260EBAE008570223F2822811F441D1C900DC33D6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour utiliser Google.Documents sans connexion Internet, acc.dez aux param.tres sur la page d'accueil Google.Documents et activez la synchronisation hors ligne la prochaine fois que vous .tes connect. . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez toujours modifier les fichiers disponibles ou en cr.er.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez vos documents, vos feuilles de calcul et vos pr.sentations, le tout sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Documents hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": ".crivez, modifiez et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\gl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	990
Entropy (8bit):	4.497202347098541
Encrypted:	false
SSDEEP:	12:1HASvggECBxNbWVqMjlMgaPLqXPhTth0CBxebWbMRCSUCjAKFCSIj0tR7tCBhP1l:1HACzWsMlajIhJhHKWbFKFC0tR8oNK5
MD5:	6BAAFEE2F718BEFBC7CD58A04CCC6C92
SHA1:	CE0BDDDA2FA1F0AD222B604C13FF116CBB6D02CF
SHA-256:	0CF098DFE5BBB46FC0132B3CF0C54B06B4D2C8390D847EE2A65D20F9B7480F4C
SHA-512:	3DA23E74CD6CF9C0E2A0C4DBA60301281D362FB0A2A908F39A55ABDCA4CC69AD55638C63CC3BEFD44DC032F9CBB9E2FDC1B4C4ABE292917DF8272BA25B82AF20
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est.s sen conexi.n. Para utilizar Documentos de Google sen conexi.n a Internet, accede .s opci.ns de configuraci.n na p.xina de inicio de Documentos de Google e activa a sincronizaci.n sen conexi.n a pr.xima vez que esteas conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "Est.s sen conexi.n. A.nda podes editar os ficheiros dispo.ibles ou crear outros novos.".. },.. "extdesc": {.. "message": "Modifica, crea e consulta os teus documentos, follas de c.lculo e presentaci.ns sen necesidade de acceder a Internet.".. },.. "extname": {.. "message": "Documentos de Google sen conexi.n".. },.. "learnmore": {.. "message": "M.is informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, edita e colabora esteas onde esteas, tanto se tes conexi.n a Internet como se non a tes.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\gu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1658
Entropy (8bit):	4.294833932445159
Encrypted:	false
SSDEEP:	24:1HA3k3FzEVeXWuvLujNzAK11RiqRC2sA0O3cEiZ7dPRFFOPtZdK0A41yG3BczKT3:Q4pE4rCjNjw6/0y+5j8ZHA4PBSKr
MD5:	BC7E1D09028B085B74CB4E04D8A90814
SHA1:	E28B2919F000B41B41209E56B7BF3A4448456CFE
SHA-256:	FE8218DF25DB54E633927C4A1640B1A41B8E6CB3360FA386B5382F833B0B237C
SHA-512:	040A8267D67DB05BBAA52F1FAC3460F58D35C5B73AA76BBF17FA78ACC6D3BFB796A870DD44638F9AC3967E35217578A20D6F0B975CEEEEDBADFC9F65BE7E72C9
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .....".. },.. "explanationofflinedisabled": {.. "message": "... ...... ... ........ ....... ... Google .......... ..... .... ...., ... .... .... ...... ........ .... ...... ... ...... Google ........ ...... .. ........ .. ... ... ...... ....... .... ....".. },.. "explanationofflineenabled": {.. "message": "... ...... .., ..... ... ... .. ...... ..... ....... ... ... .. .... ... ..... ... ...".. },.. "extdesc": {.. "message": "..... ........., ..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\hi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1672
Entropy (8bit):	4.314484457325167
Encrypted:	false
SSDEEP:	48:46G2+ymELbLNzGVx/hXdDtxSRhqv7Qm6/7Lm:4GbxzGVzXdDtx+qzU/7C
MD5:	98A7FC3E2E05AFFFC1CFE4A029F47476
SHA1:	A17E077D6E6BA1D8A90C1F3FAF25D37B0FF5A6AD
SHA-256:	D2D1AFA224CDA388FF1DC8FAC24CDA228D7CE09DE5D375947D7207FA4A6C4F8D
SHA-512:	457E295C760ABFD29FC6BBBB7FC7D4959287BCA7FB0E3E99EB834087D17EED331DEF18138838D35C48C6DDC8A0134AFFFF1A5A24033F9B5607B355D3D48FDF88
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... .....".. },.. "explanationofflinedisabled": {.. "message": ".. ...... .... ....... ....... .. .... Google ........ .. ..... .... .. ..., .... ... ....... .. ...... .... .. Google ........ .. ........ .. ...... ... .... .. ...... ....... .... .....".. },.. "explanationofflineenabled": {.. "message": ".. ...... ..., ..... .. .. .. ...... ...... ..... .. .... ... .. .. ...... ... .... ....".. },.. "extdesc": {.. "message": ".... .... ....... ...... ..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\hr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	935
Entropy (8bit):	4.6369398601609735
Encrypted:	false
SSDEEP:	24:1HA7sR5k/I+UX/hrcySxG1fIZ3tp/S/d6Gpb+D:YsE/I+UX/hVSxQ03f/Sj+D
MD5:	25CDFF9D60C5FC4740A48EF9804BF5C7
SHA1:	4FADECC52FB43AEC084DF9FF86D2D465FBEBCDC0
SHA-256:	73E6E246CEEAB9875625CD4889FBF931F93B7B9DEAA11288AE1A0F8A6E311E76
SHA-512:	EF00B08496427FEB5A6B9FB3FE2E5404525BE7C329D9DD2A417480637FD91885837D134A26980DCF9F61E463E6CB68F09A24402805807E656AF16B116A75E02C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZRADI NOVI".. },.. "explanationofflinedisabled": {.. "message": "Vi ste izvan mre.e. Da biste koristili Google dokumente bez internetske veze, idite na postavke na po.etnoj stranici Google dokumenata i uklju.ite izvanmre.nu sinkronizaciju sljede.i put kada se pove.ete s internetom.".. },.. "explanationofflineenabled": {.. "message": "Vi ste izvan mre.e, no i dalje mo.ete ure.ivati dostupne datoteke i izra.ivati nove.".. },.. "extdesc": {.. "message": "Uredite, izradite i pregledajte dokumente, prora.unske tablice i prezentacije . sve bez pristupa internetu.".. },.. "extname": {.. "message": "Google dokumenti izvanmre.no".. },.. "learnmore": {.. "message": "Saznajte vi.e".. },.. "popuphelptext": {.. "message": "Pi.ite, ure.ujte i sura.ujte gdje god se nalazili, povezani s internetom ili izvanmre.no.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\hu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1065
Entropy (8bit):	4.816501737523951
Encrypted:	false
SSDEEP:	24:1HA6J54gEYwFFMxv4gvyB9FzmxlsN147g/zJcYwJgrus4QY2jom:NJ54gEYwUmgKHFzmsG7izJcYOgKgYjm
MD5:	8930A51E3ACE3DD897C9E61A2AEA1D02
SHA1:	4108506500C68C054BA03310C49FA5B8EE246EA4
SHA-256:	958C0F664FCA20855FA84293566B2DDB7F297185619143457D6479E6AC81D240
SHA-512:	126B80CD3428C0BC459EEAAFCBE4B9FDE2541A57F19F3EC7346BAF449F36DC073A9CF015594A57203255941551B25F6FAA6D2C73C57C44725F563883FF902606
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".J L.TREHOZ.SA".. },.. "explanationofflinedisabled": {.. "message": "Jelenleg offline .llapotban van. Ha a Google Dokumentumokat internetkapcsolat n.lk.l szeretn. haszn.lni, a legk.zelebbi internethaszn.lata sor.n nyissa meg a Google Dokumentumok kezd.oldal.n tal.lhat. be.ll.t.sokat, .s tiltsa le az offline szinkroniz.l.s be.ll.t.st.".. },.. "explanationofflineenabled": {.. "message": "Offline .llapotban van, de az el.rhet. f.jlokat .gy is szerkesztheti, valamint l.trehozhat .jakat.".. },.. "extdesc": {.. "message": "Szerkesszen, hozzon l.tre .s tekintsen meg dokumentumokat, t.bl.zatokat .s prezent.ci.kat . ak.r internetkapcsolat n.lk.l is.".. },.. "extname": {.. "message": "Google Dokumentumok Offline".. },.. "learnmore": {.. "message": "Tov.bbi inform.ci.".. },.. "popuphelptext": {.. "message": ".rjon, szerkesszen .s dolgozzon egy.tt m.sokkal

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\hy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2771
Entropy (8bit):	3.7629875118570055
Encrypted:	false
SSDEEP:	48:Y0Fx+eiYZBZ7K1ZZ/5QQxTuDLoFZaIZSK7lq0iC0mlMO6M3ih1oAgC:lF2BTz6N/
MD5:	55DE859AD778E0AA9D950EF505B29DA9
SHA1:	4479BE637A50C9EE8A2F7690AD362A6A8FFC59B2
SHA-256:	0B16E3F8BD904A767284345AE86A0A9927C47AFE89E05EA2B13AD80009BDF9E4
SHA-512:	EDAB2FCC14CABB6D116E9C2907B42CFBC34F1D9035F43E454F1F4D1F3774C100CBADF6B4C81B025810ED90FA91C22F1AEFE83056E4543D92527E4FE81C7889A8
Malicious:	false
Preview:	{"createnew":{"message":"\u054d\u054f\u0535\u0542\u053e\u0535\u053c \u0546\u0548\u0550"},"explanationofflinedisabled":{"message":"Google \u0553\u0561\u057d\u057f\u0561\u0569\u0572\u0569\u0565\u0580\u0568 \u0576\u0561\u0587 \u0561\u0576\u0581\u0561\u0576\u0581 \u057c\u0565\u056a\u056b\u0574\u0578\u0582\u0574 \u0585\u0563\u057f\u0561\u0563\u0578\u0580\u056e\u0565\u056c\u0578\u0582 \u0570\u0561\u0574\u0561\u0580 \u0574\u056b\u0561\u0581\u0565\u0584 \u0570\u0561\u0574\u0561\u0581\u0561\u0576\u0581\u056b\u0576, \u0562\u0561\u0581\u0565\u0584 \u056e\u0561\u057c\u0561\u0575\u0578\u0582\u0569\u0575\u0561\u0576 \u0563\u056c\u056d\u0561\u057e\u0578\u0580 \u0567\u057b\u0568, \u0561\u0576\u0581\u0565\u0584 \u056f\u0561\u0580\u0563\u0561\u057e\u0578\u0580\u0578\u0582\u0574\u0576\u0565\u0580 \u0587 \u0574\u056b\u0561\u0581\u0580\u0565\u0584 \u0561\u0576\u0581\u0561\u0576\u0581 \u0570\u0561\u0574\u0561\u056a\u0561\u0574\u0561\u0581\u0578\u0582\u0574\u0568:"},"explanationofflineenabled":{"message":"\u

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\id\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	858
Entropy (8bit):	4.474411340525479
Encrypted:	false
SSDEEP:	12:1HASvgJX4CBxNpXemNOAJRFqjRpCBxedIdjTi92OvbCSUuoi01uRwCBhUuvz1thK:1HARXzhXemNOQWGcEoeH1eXJNvT2
MD5:	34D6EE258AF9429465AE6A078C2FB1F5
SHA1:	612CAE151984449A4346A66C0A0DF4235D64D932
SHA-256:	E3C86DDD2EFEBE88EED8484765A9868202546149753E03A61EB7C28FD62CFCA1
SHA-512:	20427807B64A0F79A6349F8A923152D9647DA95C05DE19AD3A4BF7DB817E25227F3B99307C8745DD323A6591B515221BD2F1E92B6F1A1783BDFA7142E84601B1
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BARU".. },.. "explanationofflinedisabled": {.. "message": "Anda sedang offline. Untuk menggunakan Google Dokumen tanpa koneksi internet, buka setelan di beranda Google Dokumen dan aktifkan sinkronisasi offline saat terhubung ke internet.".. },.. "explanationofflineenabled": {.. "message": "Anda sedang offline, namun Anda masih dapat mengedit file yang tersedia atau membuat file baru.".. },.. "extdesc": {.. "message": "Edit, buat, dan lihat dokumen, spreadsheet, dan presentasi . tanpa perlu akses internet.".. },.. "extname": {.. "message": "Google Dokumen Offline".. },.. "learnmore": {.. "message": "Pelajari Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit, dan gabungkan di mana saja, dengan atau tanpa koneksi internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\is\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	954
Entropy (8bit):	4.6457079159286545
Encrypted:	false
SSDEEP:	12:YGXU2rOcxGe+J97M9TP2DBX9tMfxqbTMvOfWWgdraqlifVpm0Ekf95Mw89KkJ+je:YwBrD2g2DBLMfFuWvdpY94viDO+uh
MD5:	CAEB37F451B5B5E9F5EB2E7E7F46E2D7
SHA1:	F917F9EAE268A385A10DB3E19E3CC3ACED56D02E
SHA-256:	943E61988C859BB088F548889F0449885525DD660626A89BA67B2C94CFBFBB1B
SHA-512:	A55DEC2404E1D7FA5A05475284CBECC2A6208730F09A227D75FDD4AC82CE50F3751C89DC687C14B91950F9AA85503BD6BF705113F2F1D478E728DF64D476A9EE
Malicious:	false
Preview:	{"createnew":{"message":"B\u00daA TIL N\u00ddTT"},"explanationofflinedisabled":{"message":"\u00de\u00fa ert \u00e1n nettengingar. Til a\u00f0 nota Google-skj\u00f6l \u00e1n nettengingar skaltu opna stillingarnar \u00e1 heimas\u00ed\u00f0u Google skjala og virkja samstillingu \u00e1n nettengingar n\u00e6st \u00feegar \u00fe\u00fa tengist netinu."},"explanationofflineenabled":{"message":"Engin nettenging. \u00de\u00fa getur samt sem \u00e1\u00f0ur breytt tilt\u00e6kum skr\u00e1m e\u00f0a b\u00fai\u00f0 til n\u00fdjar."},"extdesc":{"message":"Breyttu, b\u00fa\u00f0u til og sko\u00f0a\u00f0u skj\u00f6lin \u00fe\u00edn, t\u00f6flureikna og kynningar \u2014 allt \u00e1n nettengingar."},"extname":{"message":"Google-skj\u00f6l \u00e1n nettengingar"},"learnmore":{"message":"Frekari uppl\u00fdsingar"},"popuphelptext":{"message":"Skrifa\u00f0u, breyttu og starfa\u00f0u me\u00f0 \u00f6\u00f0rum hvort sem nettenging er til sta\u00f0ar e\u00f0a ekki."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\it\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	899
Entropy (8bit):	4.474743599345443
Encrypted:	false
SSDEEP:	12:1HASvggrCBxNp8WJOJJrJ3WytVCBxep3bjP5CSUCjV8AgJJm2CBhr+z1tWgjqEOW:1HANXJOTBFtKa8Agju4NB3j
MD5:	0D82B734EF045D5FE7AA680B6A12E711
SHA1:	BD04F181E4EE09F02CD53161DCABCEF902423092
SHA-256:	F41862665B13C0B4C4F562EF1743684CCE29D4BCF7FE3EA494208DF253E33885
SHA-512:	01F305A280112482884485085494E871C66D40C0B03DE710B4E5F49C6A478D541C2C1FDA2CEAF4307900485946DEE9D905851E98A2EB237642C80D464D1B3ADA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA NUOVO".. },.. "explanationofflinedisabled": {.. "message": "Sei offline. Per utilizzare Documenti Google senza una connessione Internet, apri le impostazioni nella home page di Documenti Google e attiva la sincronizzazione offline la prossima volta che ti colleghi a Internet.".. },.. "explanationofflineenabled": {.. "message": "Sei offline, ma puoi comunque modificare i file disponibili o crearne di nuovi.".. },.. "extdesc": {.. "message": "Modifica, crea e visualizza documenti, fogli di lavoro e presentazioni, senza accesso a Internet.".. },.. "extname": {.. "message": "Documenti Google offline".. },.. "learnmore": {.. "message": "Ulteriori informazioni".. },.. "popuphelptext": {.. "message": "Scrivi, modifica e collabora ovunque ti trovi, con o senza una connessione Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\iw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2230
Entropy (8bit):	3.8239097369647634
Encrypted:	false
SSDEEP:	24:YIiTVLrLD1MEzMEH82LBLjO5YaQEqLytLLBm3dnA5LcqLWAU75yxFLcx+UxWRJLI:YfTFf589rZNgNA12Qzt4/zRz2vc
MD5:	26B1533C0852EE4661EC1A27BD87D6BF
SHA1:	18234E3ABAF702DF9330552780C2F33B83A1188A
SHA-256:	BBB81C32F482BA3216C9B1189C70CEF39CA8C2181AF3538FFA07B4C6AD52F06A
SHA-512:	450BFAF0E8159A4FAE309737EA69CA8DD91CAAFD27EF662087C4E7716B2DCAD3172555898E75814D6F11487F4F254DE8625EF0CFEA8DF0133FC49E18EC7FD5D2
Malicious:	false
Preview:	{"createnew":{"message":"\u05d9\u05e6\u05d9\u05e8\u05ea \u05d7\u05d3\u05e9"},"explanationofflinedisabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8. \u05db\u05d3\u05d9 \u05dc\u05d4\u05e9\u05ea\u05de\u05e9 \u05d1-Google Docs \u05dc\u05dc\u05d0 \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d1\u05d4\u05ea\u05d7\u05d1\u05e8\u05d5\u05ea \u05d4\u05d1\u05d0\u05d4 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d9\u05e9 \u05dc\u05e2\u05d1\u05d5\u05e8 \u05dc\u05e7\u05d8\u05e2 \u05d4\u05d4\u05d2\u05d3\u05e8\u05d5\u05ea \u05d1\u05d3\u05e3 \u05d4\u05d1\u05d9\u05ea \u05e9\u05dc Google Docs \u05d5\u05dc\u05d4\u05e4\u05e2\u05d9\u05dc \u05e1\u05e0\u05db\u05e8\u05d5\u05df \u05d1\u05de\u05e6\u05d1 \u05d0\u05d5\u05e4\u05dc\u05d9\u05d9\u05df."},"explanationofflineenabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\ja\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1160
Entropy (8bit):	5.292894989863142
Encrypted:	false
SSDEEP:	24:1HAoc3IiRF1viQ1RF3CMP3rnicCCAFrr1Oo0Y5ReXCCQkb:Dc3zF7F3CMTnOCAFVLHXCFb
MD5:	15EC1963FC113D4AD6E7E59AE5DE7C0A
SHA1:	4017FC6D8B302335469091B91D063B07C9E12109
SHA-256:	34AC08F3C4F2D42962A3395508818B48CA323D22F498738CC9F09E78CB197D73
SHA-512:	427251F471FA3B759CA1555E9600C10F755BC023701D058FF661BEC605B6AB94CFB3456C1FEA68D12B4D815FFBAFABCEB6C12311DD1199FC783ED6863AF97C0F
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ............................... Google .............. [..] .......[.......] ...........".. },.. "explanationofflineenabled": {.. "message": ".............................................".. },.. "extdesc": {.. "message": ".........................................................".. },.. "extname": {.. "message": "Google ..... ......".. },.. "learnmore": {.. "message": "..".. },.. "popuphelp

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\ka\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3264
Entropy (8bit):	3.586016059431306
Encrypted:	false
SSDEEP:	48:YGFbhVhVn0nM/XGbQTvxnItVJW/476CFdqaxWNlR:HFbhV/n0MfGbw875FkaANlR
MD5:	83F81D30913DC4344573D7A58BD20D85
SHA1:	5AD0E91EA18045232A8F9DF1627007FE506A70E0
SHA-256:	30898BBF51BDD58DB397FF780F061E33431A38EF5CFC288B5177ECF76B399F26
SHA-512:	85F97F12AD4482B5D9A6166BB2AE3C4458A582CF575190C71C1D8E0FB87C58482F8C0EFEAD56E3A70EDD42BED945816DB5E07732AD27B8FFC93F4093710DD58F
Malicious:	false
Preview:	{"createnew":{"message":"\u10d0\u10ee\u10da\u10d8\u10e1 \u10e8\u10d4\u10e5\u10db\u10dc\u10d0"},"explanationofflinedisabled":{"message":"\u10d7\u10e5\u10d5\u10d4\u10dc \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10ee\u10d0\u10e0\u10d7. Google Docs-\u10d8\u10e1 \u10d8\u10dc\u10e2\u10d4\u10e0\u10dc\u10d4\u10e2\u10d7\u10d0\u10dc \u10d9\u10d0\u10d5\u10e8\u10d8\u10e0\u10d8\u10e1 \u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10d2\u10d0\u10db\u10dd\u10e1\u10d0\u10e7\u10d4\u10dc\u10d4\u10d1\u10da\u10d0\u10d3 \u10d2\u10d0\u10d3\u10d0\u10d3\u10d8\u10d7 \u10de\u10d0\u10e0\u10d0\u10db\u10d4\u10e2\u10e0\u10d4\u10d1\u10d6\u10d4 Google Docs-\u10d8\u10e1 \u10db\u10d7\u10d0\u10d5\u10d0\u10e0 \u10d2\u10d5\u10d4\u10e0\u10d3\u10d6\u10d4 \u10d3\u10d0 \u10e9\u10d0\u10e0\u10d7\u10d4\u10d7 \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10e1\u10d8\u10dc\u10e5\u10e0\u10dd\u10dc\u10d8\u10d6\u10d0\u10ea\u10d8\u10d0, \u10e0\u10dd\u10d3\u10d4\u10e1\u10d0\u10ea \u10e8\u10d4\u10db\u10d3\u10d2\u10dd\u10

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\kk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3235
Entropy (8bit):	3.6081439490236464
Encrypted:	false
SSDEEP:	96:H3E+6rOEAbeHTln2EQ77Uayg45RjhCSj+OyRdM7AE9qdV:HXcR/nQXUayYV
MD5:	2D94A58795F7B1E6E43C9656A147AD3C
SHA1:	E377DB505C6924B6BFC9D73DC7C02610062F674E
SHA-256:	548DC6C96E31A16CE355DC55C64833B08EF3FBA8BF33149031B4A685959E3AF4
SHA-512:	F51CC857E4CF2D4545C76A2DCE7D837381CE59016E250319BF8D39718BE79F9F6EE74EA5A56DE0E8759E4E586D93430D51651FC902376D8A5698628E54A0F2D8
Malicious:	false
Preview:	{"createnew":{"message":"\u0416\u0410\u04a2\u0410\u0421\u042b\u041d \u0416\u0410\u0421\u0410\u0423"},"explanationofflinedisabled":{"message":"\u0421\u0456\u0437 \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u043d\u0434\u0435\u0441\u0456\u0437. Google Docs \u049b\u043e\u043b\u0434\u0430\u043d\u0431\u0430\u0441\u044b\u043d \u0436\u0435\u043b\u0456 \u0431\u0430\u0439\u043b\u0430\u043d\u044b\u0441\u044b\u043d\u0441\u044b\u0437 \u049b\u043e\u043b\u0434\u0430\u043d\u0443 \u04af\u0448\u0456\u043d, \u043a\u0435\u043b\u0435\u0441\u0456 \u0436\u043e\u043b\u044b \u0436\u0435\u043b\u0456\u0433\u0435 \u049b\u043e\u0441\u044b\u043b\u0493\u0430\u043d\u0434\u0430, Google Docs \u043d\u0435\u0433\u0456\u0437\u0433\u0456 \u0431\u0435\u0442\u0456\u043d\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043b\u0435\u0440 \u0431\u04e9\u043b\u0456\u043c\u0456\u043d \u043a\u0456\u0440\u0456\u043f, \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\km\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3122
Entropy (8bit):	3.891443295908904
Encrypted:	false
SSDEEP:	96:/OOrssRU6Bg7VSdL+zsCfoZiWssriWqo2gx7RRCos2sEeBkS7Zesg:H5GRZlXsGdo
MD5:	B3699C20A94776A5C2F90AEF6EB0DAD9
SHA1:	1F9B968B0679A20FA097624C9ABFA2B96C8C0BEA
SHA-256:	A6118F0A0DE329E07C01F53CD6FB4FED43E54C5F53DB4CD1C7F5B2B4D9FB10E6
SHA-512:	1E8D15B8BFF1D289434A244172F9ED42B4BB6BCB6372C1F300B01ACEA5A88167E97FEDABA0A7AE3BEB5E24763D1B09046AE8E30745B80E2E2FE785C94DF362F6
Malicious:	false
Preview:	{"createnew":{"message":"\u1794\u1784\u17d2\u1780\u17be\u178f\u200b\u1790\u17d2\u1798\u17b8"},"explanationofflinedisabled":{"message":"\u17a2\u17d2\u1793\u1780\u200b\u1782\u17d2\u1798\u17b6\u1793\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f\u17d4 \u178a\u17be\u1798\u17d2\u1794\u17b8\u200b\u1794\u17d2\u179a\u17be Google \u17af\u1780\u179f\u17b6\u179a\u200b\u1794\u17b6\u1793\u200b\u200b\u178a\u17c4\u1799\u200b\u200b\u1798\u17b7\u1793\u1798\u17b6\u1793\u200b\u200b\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f \u179f\u17bc\u1798\u200b\u200b\u1791\u17c5\u200b\u1780\u17b6\u1793\u17cb\u200b\u1780\u17b6\u179a\u200b\u1780\u17c6\u178e\u178f\u17cb\u200b\u1793\u17c5\u200b\u179b\u17be\u200b\u1782\u17c1\u17a0\u1791\u17c6\u1796\u17d0\u179a Google \u17af\u1780\u179f\u17b6\u179a \u1793\u17b7\u1784\u200b\u1794\u17be\u1780\u200b\u1780\u17b6\u179a\u1792\u17d2\u179c\u17be\u200b\u179f\u1798\u1780\u17b6\u179b\u1780\u1798\u17d2\u1798\u200b\u200b\u200b\u1782\u17d2\u1798\u17b6\u1793

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\kn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1895
Entropy (8bit):	4.28990403715536
Encrypted:	false
SSDEEP:	48:SHYGuEETiuF6OX5tCYFZt5GurMRRevsY4tVZIGnZRxlKT6/U0WG:yYG8iuF6yTCYFH5GjLPtVZVZRxOZ0J
MD5:	38BE0974108FC1CC30F13D8230EE5C40
SHA1:	ACF44889DD07DB97D26D534AD5AFA1BC1A827BAD
SHA-256:	30078EF35A76E02A400F03B3698708A0145D9B57241CC4009E010696895CF3A1
SHA-512:	7BDB2BADE4680801FC3B33E82C8AA4FAC648F45C795B4BACE4669D6E907A578FF181C093464884C0E00C9762E8DB75586A253D55CD10A7777D281B4BFFAFE302
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........ .....".. },.. "explanationofflinedisabled": {.. "message": ".... ..................... ......... ............. Google ...... ....., Google ...... ............ ............... .... ..... ...... .... .... ............ ............. ........ ..... ... .....".. },.. "explanationofflineenabled": {.. "message": ".... ...................., .... .... .... ......... ........... ............ .... ........ .........."..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\ko\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1042
Entropy (8bit):	5.3945675025513955
Encrypted:	false
SSDEEP:	24:1HAWYsF4dqNfBQH49Hk8YfIhYzTJ+6WJBtl/u4s+6:ZF4wNfvm87mX4LF6
MD5:	F3E59EEEB007144EA26306C20E04C292
SHA1:	83E7BDFA1F18F4C7534208493C3FF6B1F2F57D90
SHA-256:	C52D9B955D229373725A6E713334BBB31EA72EFA9B5CF4FBD76A566417B12CAC
SHA-512:	7808CB5FF041B002CBD78171EC5A0B4DBA3E017E21F7E8039084C2790F395B839BEE04AD6C942EED47CCB53E90F6DE818A725D1450BF81BA2990154AFD3763AF
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".. ...".. },.. "explanationofflinedisabled": {.. "message": ".... ...... ... .. .. Google Docs. ..... Google Docs .... .... .... .... .... ..... . .... .... ..... ......".. },.. "explanationofflineenabled": {.. "message": ".... ...... ... .. ... ... ..... ... ... .. . .....".. },.. "extdesc": {.. "message": ".... .... ... .., ...... . ....... .., .., ......".. },.. "extname": {.. "message": "Google Docs ....".. },.. "learnmore": {.. "message": "... ....".. },.. "popuphelptext": {.. "message": "... .. ... .... ..... .... .... .....

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\lo\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2535
Entropy (8bit):	3.8479764584971368
Encrypted:	false
SSDEEP:	48:YRcHe/4raK1EIlZt1wg62FIOg+xGaF8guI5EP9I2yC:+cs4raK1xlZtOgviOfGaF8RI5EP95b
MD5:	E20D6C27840B406555E2F5091B118FC5
SHA1:	0DCECC1A58CEB4936E255A64A2830956BFA6EC14
SHA-256:	89082FB05229826BC222F5D22C158235F025F0E6DF67FF135A18BD899E13BB8F
SHA-512:	AD53FC0B153005F47F9F4344DF6C4804049FAC94932D895FD02EEBE75222CFE77EEDD9CD3FDC4C88376D18C5972055B00190507AA896488499D64E884F84F093
Malicious:	false
Preview:	{"createnew":{"message":"\u0eaa\u0ec9\u0eb2\u0e87\u0ec3\u0edd\u0ec8"},"explanationofflinedisabled":{"message":"\u0e97\u0ec8\u0eb2\u0e99\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ea2\u0eb9\u0ec8. \u0ec0\u0e9e\u0eb7\u0ec8\u0ead\u0ec3\u0e8a\u0ec9 Google Docs \u0ec2\u0e94\u0e8d\u0e9a\u0ecd\u0ec8\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94, \u0ec3\u0eab\u0ec9\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e81\u0eb2\u0e99\u0e95\u0eb1\u0ec9\u0e87\u0e84\u0ec8\u0eb2\u0ec3\u0e99\u0edc\u0ec9\u0eb2 Google Docs \u0ec1\u0ea5\u0ec9\u0ea7\u0ec0\u0e9b\u0eb5\u0e94\u0ec3\u0e8a\u0ec9\u0e81\u0eb2\u0e99\u0e8a\u0eb4\u0ec9\u0e87\u0ec1\u0e9a\u0e9a\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ec3\u0e99\u0ec0\u0e97\u0eb7\u0ec8\u0ead\u0e95\u0ecd\u0ec8\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e97\u0ec8\u0eb2\u0e99\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94."},"explanationofflineenabled":{"message":"\u0e97\u0ec

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\lt\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1028
Entropy (8bit):	4.797571191712988
Encrypted:	false
SSDEEP:	24:1HAivZZaJ3Rje394+k7IKgpAJjUpSkiQjuRBMd:fZZahBeu7IKgqeMg
MD5:	970544AB4622701FFDF66DC556847652
SHA1:	14BEE2B77EE74C5E38EBD1DB09E8D8104CF75317
SHA-256:	5DFCBD4DFEAEC3ABE973A78277D3BD02CD77AE635D5C8CD1F816446C61808F59
SHA-512:	CC12D00C10B970189E90D47390EEB142359A8D6F3A9174C2EF3AE0118F09C88AB9B689D9773028834839A7DFAF3AAC6747BC1DCB23794A9F067281E20B8DC6EA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SUKURTI NAUJ.".. },.. "explanationofflinedisabled": {.. "message": "Esate neprisijung.. Jei norite naudoti .Google. dokumentus be interneto ry.io, pagrindiniame .Google. dokument. puslapyje eikite . nustatym. skilt. ir .junkite sinchronizavim. neprisijungus, kai kit. kart. b.site prisijung. prie interneto.".. },.. "explanationofflineenabled": {.. "message": "Esate neprisijung., bet vis tiek galite redaguoti pasiekiamus failus arba sukurti nauj..".. },.. "extdesc": {.. "message": "Redaguokite, kurkite ir per.i.r.kite savo dokumentus, skai.iuokles ir pristatymus . visk. darykite be prieigos prie interneto.".. },.. "extname": {.. "message": ".Google. dokumentai neprisijungus".. },.. "learnmore": {.. "message": "Su.inoti daugiau".. },.. "popuphelptext": {.. "message": "Ra.ykite, redaguokite ir bendradarbiaukite bet kurioje vietoje naudodami interneto ry.. arba

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\lv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	994
Entropy (8bit):	4.700308832360794
Encrypted:	false
SSDEEP:	24:1HAaJ7a/uNpoB/Y4vPnswSPkDzLKFQHpp//BpPDB:7J7a/uzQ/Y4vvswhDzDr/LDB
MD5:	A568A58817375590007D1B8ABCAEBF82
SHA1:	B0F51FE6927BB4975FC6EDA7D8A631BF0C1AB597
SHA-256:	0621DE9161748F45D53052ED8A430962139D7F19074C7FFE7223ECB06B0B87DB
SHA-512:	FCFBADEC9F73975301AB404DB6B09D31457FAC7CCAD2FA5BE348E1CAD6800F87CB5B56DE50880C55BBADB3C40423351A6B5C2D03F6A327D898E35F517B1C628C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZVEIDOT JAUNU".. },.. "explanationofflinedisabled": {.. "message": "J.s esat bezsaist.. Lai lietotu pakalpojumu Google dokumenti bez interneta savienojuma, n.kamaj. reiz., kad ir izveidots savienojums ar internetu, atveriet Google dokumentu s.kumlapas iestat.jumu izv.lni un iesl.dziet sinhroniz.ciju bezsaist..".. },.. "explanationofflineenabled": {.. "message": "J.s esat bezsaist., ta.u varat redi..t pieejamos failus un izveidot jaunus.".. },.. "extdesc": {.. "message": "Redi..jiet, veidojiet un skatiet savus dokumentus, izkl.jlapas un prezent.cijas, neizmantojot savienojumu ar internetu.".. },.. "extname": {.. "message": "Google dokumenti bezsaist.".. },.. "learnmore": {.. "message": "Uzziniet vair.k".. },.. "popuphelptext": {.. "message": "Rakstiet, redi..jiet un sadarbojieties ar interneta savienojumu vai bez t. neatkar.gi no t., kur atrodaties.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\ml\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2091
Entropy (8bit):	4.358252286391144
Encrypted:	false
SSDEEP:	24:1HAnHdGc4LtGxVY6IuVzJkeNL5kP13a67wNcYP8j5PIaSTIjPU4ELFPCWJjMupV/:idGcyYPVtkAUl7wqziBsg9DbpN6XoN/
MD5:	4717EFE4651F94EFF6ACB6653E868D1A
SHA1:	B8A7703152767FBE1819808876D09D9CC1C44450
SHA-256:	22CA9415E294D9C3EC3384B9D08CDAF5164AF73B4E4C251559E09E529C843EA6
SHA-512:	487EAB4938F6BC47B1D77DD47A5E2A389B94E01D29849E38E96C95CABC7BD98679451F0E22D3FEA25C045558CD69FDDB6C4FEF7C581141F1C53C4AA17578D7F7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ............".. },.. "explanationofflinedisabled": {.. "message": "...... ........... ........... ............. ..... Google ....... ..........., Google ....... .......... ............. .... ...... ...... ... ............... .................... '.......... ................' .........".. },.. "explanationofflineenabled": {.. "message": "................., .......... ......... ....... ...... ..............

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\mn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2778
Entropy (8bit):	3.595196082412897
Encrypted:	false
SSDEEP:	48:Y943BFU1LQ4HwQLQ4LQhlmVQL3QUm6H6ZgFIcwn6Rs2ShpQ3IwjGLQSJ/PYoEQj8:I43BCymz8XNcfuQDXYN2sum
MD5:	83E7A14B7FC60D4C66BF313C8A2BEF0B
SHA1:	1CCF1D79CDED5D65439266DB58480089CC110B18
SHA-256:	613D8751F6CC9D3FA319F4B7EA8B2BD3BED37FD077482CA825929DD7C12A69A8
SHA-512:	3742E24FFC4B5283E6EE496813C1BDC6835630D006E8647D427C3DE8B8E7BF814201ADF9A27BFAB3ABD130B6FEC64EBB102AC0EB8DEDFE7B63D82D3E1233305D
Malicious:	false
Preview:	{"createnew":{"message":"\u0428\u0418\u041d\u0418\u0419\u0413 \u04ae\u04ae\u0421\u0413\u042d\u0425"},"explanationofflinedisabled":{"message":"\u0422\u0430 \u043e\u0444\u043b\u0430\u0439\u043d \u0431\u0430\u0439\u043d\u0430. Google \u0414\u043e\u043a\u044b\u0433 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u0433\u04af\u0439\u0433\u044d\u044d\u0440 \u0430\u0448\u0438\u0433\u043b\u0430\u0445\u044b\u043d \u0442\u0443\u043b\u0434 \u0434\u0430\u0440\u0430\u0430\u0433\u0438\u0439\u043d \u0443\u0434\u0430\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u044d\u0434 \u0445\u043e\u043b\u0431\u043e\u0433\u0434\u043e\u0445\u0434\u043e\u043e Google \u0414\u043e\u043a\u044b\u043d \u043d\u04af\u04af\u0440 \u0445\u0443\u0443\u0434\u0430\u0441\u043d\u0430\u0430\u0441 \u0442\u043e\u0445\u0438\u0440\u0433\u043e\u043e \u0434\u043e\u0442\u043e\u0440\u0445 \u043e\u0444\u043b\u0430\u0439\u043d \u0441\u0438\u043d\u043a\u0438\u0439\u0433 \u0438\u0434\u044d\u0432\u0445\u0436\u04af\u04af\u043b\u043d\u0

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\mr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1719
Entropy (8bit):	4.287702203591075
Encrypted:	false
SSDEEP:	48:65/5EKaDMw6pEf4I5+jSksOTJqQyrFO8C:65/5EKaAw6pEf4I5+vsOVqQyFO8C
MD5:	3B98C4ED8874A160C3789FEAD5553CFA
SHA1:	5550D0EC548335293D962AAA96B6443DD8ABB9F6
SHA-256:	ADEB082A9C754DFD5A9D47340A3DDCC19BF9C7EFA6E629A2F1796305F1C9A66F
SHA-512:	5139B6C6DF9459C7B5CDC08A98348891499408CD75B46519BA3AC29E99AAAFCC5911A1DEE6C3A57E3413DBD0FAE72D7CBC676027248DCE6364377982B5CE4151
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ...".. },.. "explanationofflinedisabled": {.. "message": "...... ...... ..... ......... ....... ....... ..... Google ....... ............, Google ....... .............. .......... .. ... ..... .... ...... ......... ...... ...... ...... .... .... ....".. },.. "explanationofflineenabled": {.. "message": "...... ...... ...., ..... ...... ...... ...... .... ....... ... ..... .... .... ... .....".. },.. "extdesc": {.. "message": "..... ..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\ms\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	936
Entropy (8bit):	4.457879437756106
Encrypted:	false
SSDEEP:	24:1HARXIqhmemNKsE27rhdfNLChtyo2JJ/YgTgin:iIqFC7lrDfNLCIBRzn
MD5:	7D273824B1E22426C033FF5D8D7162B7
SHA1:	EADBE9DBE5519BD60458B3551BDFC36A10049DD1
SHA-256:	2824CF97513DC3ECC261F378BFD595AE95A5997E9D1C63F5731A58B1F8CD54F9
SHA-512:	E5B611BBFAB24C9924D1D5E1774925433C65C322769E1F3B116254B1E9C69B6DF1BE7828141EEBBF7524DD179875D40C1D8F29C4FB86D663B8A365C6C60421A7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BAHARU".. },.. "explanationofflinedisabled": {.. "message": "Anda berada di luar talian. Untuk menggunakan Google Docs tanpa sambungan Internet, pergi ke tetapan di halaman utama Google Docs dan hidupkan penyegerakan luar talian apabila anda disambungkan ke Internet selepas ini.".. },.. "explanationofflineenabled": {.. "message": "Anda berada di luar talian, tetapi anda masih boleh mengedit fail yang tersedia atau buat fail baharu.".. },.. "extdesc": {.. "message": "Edit, buat dan lihat dokumen, hamparan dan pembentangan anda . kesemuanya tanpa akses Internet.".. },.. "extname": {.. "message": "Google Docs Luar Talian".. },.. "learnmore": {.. "message": "Ketahui Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit dan bekerjasama di mana-mana sahaja anda berada, dengan atau tanpa sambungan Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\my\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3830
Entropy (8bit):	3.5483353063347587
Encrypted:	false
SSDEEP:	48:Ya+Ivxy6ur1+j3P7Xgr5ELkpeCgygyOxONHO3pj6H57ODyOXOVp6:8Uspsj3P3ty2a66xl09
MD5:	342335A22F1886B8BC92008597326B24
SHA1:	2CB04F892E430DCD7705C02BF0A8619354515513
SHA-256:	243BEFBD6B67A21433DCC97DC1A728896D3A070DC20055EB04D644E1BB955FE7
SHA-512:	CD344D060E30242E5A4705547E807CE3CE2231EE983BB9A8AD22B3E7598A7EC87399094B04A80245AD51D039370F09D74FE54C0B0738583884A73F0C7E888AD8
Malicious:	false
Preview:	{"createnew":{"message":"\u1021\u101e\u1005\u103a \u1015\u103c\u102f\u101c\u102f\u1015\u103a\u101b\u1014\u103a"},"explanationofflinedisabled":{"message":"\u101e\u1004\u103a \u1021\u1031\u102c\u1037\u1016\u103a\u101c\u102d\u102f\u1004\u103a\u1038\u1016\u103c\u1005\u103a\u1014\u1031\u1015\u102b\u101e\u100a\u103a\u104b \u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u1019\u103e\u102f \u1019\u101b\u103e\u102d\u1018\u1032 Google Docs \u1000\u102d\u102f \u1021\u101e\u102f\u1036\u1038\u1015\u103c\u102f\u101b\u1014\u103a \u1014\u1031\u102c\u1000\u103a\u1010\u1005\u103a\u1000\u103c\u102d\u1019\u103a \u101e\u1004\u103a\u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u101e\u100a\u1037\u103a\u1021\u1001\u102b Google Docs \u1015\u1004\u103a\u1019\u1005\u102c\u1019\u103b\u1000\u103a\u1014\u103e\u102c\u101b\u103e\u102d \u1006\u1000\u103a\u1010\u1004\u103a\u1019\u103b\u102c\u1038\u101e\u102d\u102f\u1037\u1

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\ne\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1898
Entropy (8bit):	4.187050294267571
Encrypted:	false
SSDEEP:	24:1HAmQ6ZSWfAx6fLMr48tE/cAbJtUZJScSIQoAfboFMiQ9pdvz48YgqG:TQ6W6MbkcAltUJxQdfbqQ9pp0gqG
MD5:	B1083DA5EC718D1F2F093BD3D1FB4F37
SHA1:	74B6F050D918448396642765DEF1AD5390AB5282
SHA-256:	E6ED0A023EF31705CCCBAF1E07F2B4B2279059296B5CA973D2070417BA16F790
SHA-512:	7102B90ABBE2C811E8EE2F1886A73B1298D4F3D5D05F0FFDB57CF78B9A49A25023A290B255BAA4895BB150B388BAFD9F8432650B8C70A1A9A75083FFFCD74F1A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... ....... .........".. },.. "explanationofflinedisabled": {.. "message": "..... ...... .......... .... ........ .... .... Google ........ ...... .... ..... ..... ... .......... ....... .... Google ........ .......... ..... .......... .. ...... ..... .... ..... ......... .. ..........".. },.. "explanationofflineenabled": {.. "message": "..... ...... ........., .. ..... ... ... ...... ....... ....... .. .... ....... ....

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\nl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.513485418448461
Encrypted:	false
SSDEEP:	12:1HASvgFARCBxNBv52/fXjOXl6W6ICBxeBvMzU1CSUJAO6SFAIVIbCBhZHdb1tvz+:1HABJx4X6QDwEzlm2uGvYzKU
MD5:	32DF72F14BE59A9BC9777113A8B21DE6
SHA1:	2A8D9B9A998453144307DD0B700A76E783062AD0
SHA-256:	F3FE1FFCB182183B76E1B46C4463168C746A38E461FD25CA91FF2A40846F1D61
SHA-512:	E0966F5CCA5A8A6D91C58D716E662E892D1C3441DAA5D632E5E843839BB989F620D8AC33ED3EDBAFE18D7306B40CD0C4639E5A4E04DA2C598331DACEC2112AAD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NIEUW MAKEN".. },.. "explanationofflinedisabled": {.. "message": "Je bent offline. Wil je Google Documenten zonder internetverbinding gebruiken, ga dan de volgende keer dat je verbinding met internet hebt naar 'Instellingen' op de homepage van Google Documenten en zet 'Offline synchronisatie' aan.".. },.. "explanationofflineenabled": {.. "message": "Je bent offline, maar je kunt nog wel beschikbare bestanden bewerken of nieuwe bestanden maken.".. },.. "extdesc": {.. "message": "Bewerk, maak en bekijk je documenten, spreadsheets en presentaties. Allemaal zonder internettoegang.".. },.. "extname": {.. "message": "Offline Documenten".. },.. "learnmore": {.. "message": "Meer informatie".. },.. "popuphelptext": {.. "message": "Overal schrijven, bewerken en samenwerken, met of zonder internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\no\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	878
Entropy (8bit):	4.4541485835627475
Encrypted:	false
SSDEEP:	24:1HAqwwrJ6wky68uk+NILxRGJwBvDyrj9V:nwwQwky6W+NwswVyT
MD5:	A1744B0F53CCF889955B95108367F9C8
SHA1:	6A5A6771DFF13DCB4FD425ED839BA100B7123DE0
SHA-256:	21CEFF02B45A4BFD60D144879DFA9F427949A027DD49A3EB0E9E345BD0B7C9A8
SHA-512:	F55E43F14514EECB89F6727A0D3C234149609020A516B193542B5964D2536D192F40CC12D377E70C683C269A1BDCDE1C6A0E634AA84A164775CFFE776536A961
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPPRETT NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du er uten nett. For . bruke Google Dokumenter uten internettilkobling, g. til innstillingene p. Google Dokumenter-nettsiden og sl. p. synkronisering uten nett neste gang du er koblet til Internett.".. },.. "explanationofflineenabled": {.. "message": "Du er uten nett, men du kan likevel endre tilgjengelige filer eller opprette nye.".. },.. "extdesc": {.. "message": "Rediger, opprett og se dokumentene, regnearkene og presentasjonene dine . uten nettilgang.".. },.. "extname": {.. "message": "Google Dokumenter uten nett".. },.. "learnmore": {.. "message": "Finn ut mer".. },.. "popuphelptext": {.. "message": "Skriv, rediger eller samarbeid uansett hvor du er, med eller uten internettilkobling.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\pa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2766
Entropy (8bit):	3.839730779948262
Encrypted:	false
SSDEEP:	48:YEH6/o0iZbNCbDMUcipdkNtQjsGKIhO9aBjj/nxt9o5nDAj3:p6wbZbEbvJ8jQkIhO9aBjb/90Ab
MD5:	97F769F51B83D35C260D1F8CFD7990AF
SHA1:	0D59A76564B0AEE31D0A074305905472F740CECA
SHA-256:	BBD37D41B7DE6F93948FA2437A7699D4C30A3C39E736179702F212CB36A3133C
SHA-512:	D91F5E2D22FC2D7F73C1F1C4AF79DB98FCFD1C7804069AE9B2348CBC729A6D2DFF7FB6F44D152B0BDABA6E0D05DFF54987E8472C081C4D39315CEC2CBC593816
Malicious:	false
Preview:	{"createnew":{"message":"\u0a28\u0a35\u0a3e\u0a02 \u0a2c\u0a23\u0a3e\u0a13"},"explanationofflinedisabled":{"message":"\u0a24\u0a41\u0a38\u0a40\u0a02 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a39\u0a4b\u0964 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a15\u0a28\u0a48\u0a15\u0a36\u0a28 \u0a26\u0a47 \u0a2c\u0a3f\u0a28\u0a3e\u0a02 Google Docs \u0a28\u0a42\u0a70 \u0a35\u0a30\u0a24\u0a23 \u0a32\u0a08, \u0a05\u0a17\u0a32\u0a40 \u0a35\u0a3e\u0a30 \u0a1c\u0a26\u0a4b\u0a02 \u0a24\u0a41\u0a38\u0a40\u0a02 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a26\u0a47 \u0a28\u0a3e\u0a32 \u0a15\u0a28\u0a48\u0a15\u0a1f \u0a39\u0a4b\u0a35\u0a4b \u0a24\u0a3e\u0a02 Google Docs \u0a2e\u0a41\u0a71\u0a16 \u0a2a\u0a70\u0a28\u0a47 '\u0a24\u0a47 \u0a38\u0a48\u0a1f\u0a3f\u0a70\u0a17\u0a3e\u0a02 \u0a35\u0a3f\u0a71\u0a1a \u0a1c\u0a3e\u0a13 \u0a05\u0a24\u0a47 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a38\u0a3f\u0a70\u0a15 \u0a28\u0a42\u0a70 \u0a1a\u0a3e\u0a32\u0a42 \u0a15\u0a30\u0a4b\u0964"},"expla

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\pl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	978
Entropy (8bit):	4.879137540019932
Encrypted:	false
SSDEEP:	24:1HApiJiRelvm3wi8QAYcbm24sK+tFJaSDD:FJMx3whxYcbNp
MD5:	B8D55E4E3B9619784AECA61BA15C9C0F
SHA1:	B4A9C9885FBEB78635957296FDDD12579FEFA033
SHA-256:	E00FF20437599A5C184CA0C79546CB6500171A95E5F24B9B5535E89A89D3EC3D
SHA-512:	266589116EEE223056391C65808255EDAE10EB6DC5C26655D96F8178A41E283B06360AB8E08AC3857D172023C4F616EF073D0BEA770A3B3DD3EE74F5FFB2296B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "UTW.RZ NOWY".. },.. "explanationofflinedisabled": {.. "message": "Jeste. offline. Aby korzysta. z Dokument.w Google bez po..czenia internetowego, otw.rz ustawienia na stronie g..wnej Dokument.w Google i w..cz synchronizacj. offline nast.pnym razem, gdy b.dziesz mie. dost.p do internetu.".. },.. "explanationofflineenabled": {.. "message": "Jeste. offline, ale nadal mo.esz edytowa. dost.pne pliki i tworzy. nowe.".. },.. "extdesc": {.. "message": "Edytuj, tw.rz i wy.wietlaj swoje dokumenty, arkusze kalkulacyjne oraz prezentacje bez konieczno.ci ..czenia si. z internetem.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Wi.cej informacji".. },.. "popuphelptext": {.. "message": "Pisz, edytuj i wsp..pracuj, gdziekolwiek jeste. . niezale.nie od tego, czy masz po..czenie z internetem.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\pt_BR\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	907
Entropy (8bit):	4.599411354657937
Encrypted:	false
SSDEEP:	12:1HASvgU30CBxNd6GwXOK1styCJ02OK9+4KbCBxed6X4LBAt4rXgUCSUuYDHIIQka:1HAcXlyCJ5+Tsz4LY4rXSw/Q+ftkC
MD5:	608551F7026E6BA8C0CF85D9AC11F8E3
SHA1:	87B017B2D4DA17E322AF6384F82B57B807628617
SHA-256:	A73EEA087164620FA2260D3910D3FBE302ED85F454EDB1493A4F287D42FC882F
SHA-512:	82F52F8591DB3C0469CC16D7CBFDBF9116F6D5B5D2AD02A3D8FA39CE1378C64C0EA80AB8509519027F71A89EB8BBF38A8702D9AD26C8E6E0F499BF7DA18BF747
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Voc. est. off-line. Para usar o Documentos Google sem conex.o com a Internet, na pr.xima vez que se conectar, acesse as configura..es na p.gina inicial do Documentos Google e ative a sincroniza..o off-line.".. },.. "explanationofflineenabled": {.. "message": "Voc. est. off-line, mas mesmo assim pode editar os arquivos dispon.veis ou criar novos arquivos.".. },.. "extdesc": {.. "message": "Edite, crie e veja seus documentos, planilhas e apresenta..es sem precisar de acesso . Internet.".. },.. "extname": {.. "message": "Documentos Google off-line".. },.. "learnmore": {.. "message": "Saiba mais".. },.. "popuphelptext": {.. "message": "Escreva, edite e colabore onde voc. estiver, com ou sem conex.o com a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\pt_PT\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.604761241355716
Encrypted:	false
SSDEEP:	24:1HAcXzw8M+N0STDIjxX+qxCjKw5BKriEQFMJXkETs:zXzw0pKXbxqKw5BKri3aNY
MD5:	0963F2F3641A62A78B02825F6FA3941C
SHA1:	7E6972BEAB3D18E49857079A24FB9336BC4D2D48
SHA-256:	E93B8E7FB86D2F7DFAE57416BB1FB6EE0EEA25629B972A5922940F0023C85F90
SHA-512:	22DD42D967124DA5A2209DD05FB6AD3F5D0D2687EA956A22BA1E31C56EC09DEB53F0711CD5B24D672405358502E9D1C502659BB36CED66CAF83923B021CA0286
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est. offline. Para utilizar o Google Docs sem uma liga..o . Internet, aceda .s defini..es na p.gina inicial do Google Docs e ative a sincroniza..o offline da pr.xima vez que estiver ligado . Internet.".. },.. "explanationofflineenabled": {.. "message": "Est. offline, mas continua a poder editar os ficheiros dispon.veis ou criar novos ficheiros.".. },.. "extdesc": {.. "message": "Edite, crie e veja os documentos, as folhas de c.lculo e as apresenta..es, tudo sem precisar de aceder . Internet.".. },.. "extname": {.. "message": "Google Docs offline".. },.. "learnmore": {.. "message": "Saber mais".. },.. "popuphelptext": {.. "message": "Escreva edite e colabore onde quer que esteja, com ou sem uma liga..o . Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\ro\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	937
Entropy (8bit):	4.686555713975264
Encrypted:	false
SSDEEP:	24:1HA8dC6e6w+uFPHf2TFMMlecFpweWV4RE:pC6KvHf4plVweCx
MD5:	BED8332AB788098D276B448EC2B33351
SHA1:	6084124A2B32F386967DA980CBE79DD86742859E
SHA-256:	085787999D78FADFF9600C9DC5E3FF4FB4EB9BE06D6BB19DF2EEF8C284BE7B20
SHA-512:	22596584D10707CC1C8179ED3ABE46EF2C314CF9C3D0685921475944B8855AAB660590F8FA1CFDCE7976B4BB3BD9ABBBF053F61F1249A325FD0094E1C95692ED
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREEAZ. UN DOCUMENT".. },.. "explanationofflinedisabled": {.. "message": "E.ti offline. Pentru a utiliza Documente Google f.r. conexiune la internet, intr. .n set.rile din pagina principal. Documente Google .i activeaz. sincronizarea offline data viitoare c.nd e.ti conectat(.) la internet.".. },.. "explanationofflineenabled": {.. "message": "E.ti offline, dar po.i .nc. s. editezi fi.ierele disponibile sau s. creezi altele.".. },.. "extdesc": {.. "message": "Editeaz., creeaz. .i acceseaz. documente, foi de calcul .i prezent.ri - totul f.r. acces la internet.".. },.. "extname": {.. "message": "Documente Google Offline".. },.. "learnmore": {.. "message": "Afl. mai multe".. },.. "popuphelptext": {.. "message": "Scrie, editeaz. .i colaboreaz. oriunde ai fi, cu sau f.r. conexiune la internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\ru\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1337
Entropy (8bit):	4.69531415794894
Encrypted:	false
SSDEEP:	24:1HABEapHTEmxUomjsfDVs8THjqBK8/hHUg41v+Lph5eFTHQ:I/VdxUomjsre8Kh4Riph5eFU
MD5:	51D34FE303D0C90EE409A2397FCA437D
SHA1:	B4B9A7B19C62D0AA95D1F10640A5FBA628CCCA12
SHA-256:	BE733625ACD03158103D62BC0EEF272CA3F265AC30C87A6A03467481A177DAE3
SHA-512:	E8670DED44DC6EE30E5F41C8B2040CF8A463CD9A60FC31FA70EB1D4C9AC1A3558369792B5B86FA761A21F5266D5A35E5C2C39297F367DAA84159585C19EC492A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......".. },.. "explanationofflinedisabled": {.. "message": "..... ............ Google ......... ... ........., ............ . .... . ......... ............. . ......-...... . .......... .. ......... .........".. },.. "explanationofflineenabled": {.. "message": "... ........... . .......... .. ...... ......... ..... ..... . ............. .., . ....... ........ ......-.......".. },.. "extdesc": {.. "message": ".........., .............. . ............ ........., ....... . ........... ... ....... . ..........".. },.. "extname": {.. "message": "Google.......... ......".. },.. "learnmore": {.

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\si\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2846
Entropy (8bit):	3.7416822879702547
Encrypted:	false
SSDEEP:	48:YWi+htQTKEQb3aXQYJLSWy7sTQThQTnQtQTrEmQ6kiLsegQSJFwsQGaiPn779I+S:zhiTK5b3tUGVjTGTnQiTryOLpyaxYf/S
MD5:	B8A4FD612534A171A9A03C1984BB4BDD
SHA1:	F513F7300827FE352E8ECB5BD4BB1729F3A0E22A
SHA-256:	54241EBE651A8344235CC47AFD274C080ABAEBC8C3A25AFB95D8373B6A5670A2
SHA-512:	C03E35BFDE546AEB3245024EF721E7E606327581EFE9EAF8C5B11989D9033BDB58437041A5CB6D567BAA05466B6AAF054C47F976FD940EEEDF69FDF80D79095B
Malicious:	false
Preview:	{"createnew":{"message":"\u0db1\u0dc0 \u0dbd\u0dda\u0d9b\u0db1\u0dba\u0d9a\u0dca \u0dc3\u0dcf\u0daf\u0db1\u0dca\u0db1"},"explanationofflinedisabled":{"message":"\u0d94\u0db6 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2\u0dba. \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd \u0dc3\u0db8\u0dca\u0db6\u0db1\u0dca\u0db0\u0dad\u0dcf\u0dc0\u0d9a\u0dca \u0db1\u0ddc\u0db8\u0dd0\u0dad\u0dd2\u0dc0 Google Docs \u0db7\u0dcf\u0dc0\u0dd2\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8\u0da7, Google Docs \u0db8\u0dd4\u0dbd\u0dca \u0db4\u0dd2\u0da7\u0dd4\u0dc0 \u0db8\u0dad \u0dc3\u0dd0\u0d9a\u0dc3\u0dd3\u0db8\u0dca \u0dc0\u0dd9\u0dad \u0d9c\u0ddc\u0dc3\u0dca \u0d94\u0db6 \u0d8a\u0dc5\u0d9f \u0d85\u0dc0\u0dc3\u0dca\u0dae\u0dcf\u0dc0\u0dda \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd\u0dba\u0da7 \u0dc3\u0db6\u0dd0\u0db3\u0dd2 \u0dc0\u0dd2\u0da7 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2 \u0dc3\u0db8\u0db8\u0dd4\u0dc4\u0dd4\u0dbb\u0dca\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8 \u0d9a\u0dca\u200d\u0dbb\u0dd2\u0dba\u0dc

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\sk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	934
Entropy (8bit):	4.882122893545996
Encrypted:	false
SSDEEP:	24:1HAF8pMv1RS4LXL22IUjdh8uJwpPqLDEtxKLhSS:hyv1RS4LXx38u36QsS
MD5:	8E55817BF7A87052F11FE554A61C52D5
SHA1:	9ABDC0725FE27967F6F6BE0DF5D6C46E2957F455
SHA-256:	903060EC9E76040B46DEB47BBB041D0B28A6816CB9B892D7342FC7DC6782F87C
SHA-512:	EFF9EC7E72B272DDE5F29123653BC056A4BC2C3C662AE3C448F8CB6A4D1865A0679B7E74C1B3189F3E262109ED6BC8F8D2BDE14AEFC8E87E0F785AE4837D01C7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVORI. NOV.".. },.. "explanationofflinedisabled": {.. "message": "Ste offline. Ak chcete pou.i. Dokumenty Google bez pripojenia na internet, po najbli..om pripojen. na internet prejdite do nastaven. na domovskej str.nke Dokumentov Google a.zapnite offline synchroniz.ciu.".. },.. "explanationofflineenabled": {.. "message": "Ste offline, no st.le m..ete upravova. dostupn. s.bory a.vytv.ra. nov..".. },.. "extdesc": {.. "message": ".prava, tvorba a.zobrazenie dokumentov, tabuliek a.prezent.ci.. To v.etko bez pr.stupu na internet.".. },.. "extname": {.. "message": "Dokumenty Google v re.ime offline".. },.. "learnmore": {.. "message": ".al.ie inform.cie".. },.. "popuphelptext": {.. "message": "P..te, upravujte a.spolupracuje, kdeko.vek ste, a.to s.pripojen.m na internet aj bez neho.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\sl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	963
Entropy (8bit):	4.6041913416245
Encrypted:	false
SSDEEP:	12:1HASvgfECBxNFCEuKXowwJrpvPwNgEcPJJJEfWOCBxeFCJuGuU4KYXCSUXKDxX4A:1HAXMKYw8VYNLcaeDmKYLdX2zJBG5
MD5:	BFAEFEFF32813DF91C56B71B79EC2AF4
SHA1:	F8EDA2B632610972B581724D6B2F9782AC37377B
SHA-256:	AAB9CF9098294A46DC0F2FA468AFFF7CA7C323A1A0EFA70C9DB1E3A4DA05D1D4
SHA-512:	971F2BBF5E9C84DE3D31E5F2A4D1A00D891A2504F8AF6D3F75FC19056BFD059A270C4C9836AF35258ABA586A1888133FB22B484F260C1CBC2D1D17BC3B4451AA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "USTVARI NOVO".. },.. "explanationofflinedisabled": {.. "message": "Nimate vzpostavljene povezave. .e .elite uporabljati Google Dokumente brez internetne povezave, odprite nastavitve na doma.i strani Google Dokumentov in vklopite sinhronizacijo brez povezave, ko naslednji. vzpostavite internetno povezavo.".. },.. "explanationofflineenabled": {.. "message": "Nimate vzpostavljene povezave, vendar lahko .e vedno urejate razpolo.ljive datoteke ali ustvarjate nove.".. },.. "extdesc": {.. "message": "Urejajte, ustvarjajte in si ogledujte dokumente, preglednice in predstavitve . vse to brez internetnega dostopa.".. },.. "extname": {.. "message": "Google Dokumenti brez povezave".. },.. "learnmore": {.. "message": "Ve. o tem".. },.. "popuphelptext": {.. "message": "Pi.ite, urejajte in sodelujte, kjer koli ste, z internetno povezavo ali brez nje.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\sr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1320
Entropy (8bit):	4.569671329405572
Encrypted:	false
SSDEEP:	24:1HArg/fjQg2JwrfZtUWTrw1P4epMnRGi5TBmuPDRxZQ/XtiCw/Rwh/Q9EVz:ogUg2JwDZe6rwKI8VTP9xK1CwhI94
MD5:	7F5F8933D2D078618496C67526A2B066
SHA1:	B7050E3EFA4D39548577CF47CB119FA0E246B7A4
SHA-256:	4E8B69E864F57CDDD4DC4E4FAF2C28D496874D06016BC22E8D39E0CB69552769
SHA-512:	0FBAB56629368EEF87DEEF2977CA51831BEB7DEAE98E02504E564218425C751853C4FDEAA40F51ECFE75C633128B56AE105A6EB308FD5B4A2E983013197F5DBA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ....".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. ..... ......... Google ......... ... ........ ...., ..... . .......... .. ........ ........ Google .......... . ........ ...... .............. ... ....... ... ...... ........ .. ...........".. },.. "explanationofflineenabled": {.. "message": "...... ..., ... . .... ...... .. ....... ...... . ........ ........ ... .. ....... .....".. },.. "extdesc": {.. "message": "....... . ........... ........., ...... . ............ . ....... ...... . ... . ... .. ... ........ .........".. },.. "extname": {.. "message

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\sv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	884
Entropy (8bit):	4.627108704340797
Encrypted:	false
SSDEEP:	24:1HA0NOYT/6McbnX/yzklyOIPRQrJlvDymvBd:vNOcyHnX/yg0P4Bymn
MD5:	90D8FB448CE9C0B9BA3D07FB8DE6D7EE
SHA1:	D8688CAC0245FD7B886D0DEB51394F5DF8AE7E84
SHA-256:	64B1E422B346AB77C5D1C77142685B3FF7661D498767D104B0C24CB36D0EB859
SHA-512:	6D58F49EE3EF0D3186EA036B868B2203FE936CE30DC8E246C32E90B58D9B18C624825419346B62AF8F7D61767DBE9721957280AA3C524D3A5DFB1A3A76C00742
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKAPA NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du .r offline. Om du vill anv.nda Google Dokument utan internetuppkoppling, .ppna inst.llningarna p. Google Dokuments startsida och aktivera offlinesynkronisering n.sta g.ng du .r ansluten till internet.".. },.. "explanationofflineenabled": {.. "message": "Du .r offline, men det g.r fortfarande att redigera tillg.ngliga filer eller skapa nya.".. },.. "extdesc": {.. "message": "Redigera, skapa och visa dina dokument, kalkylark och presentationer . helt utan internet.tkomst.".. },.. "extname": {.. "message": "Google Dokument Offline".. },.. "learnmore": {.. "message": "L.s mer".. },.. "popuphelptext": {.. "message": "Skriv, redigera och samarbeta .verallt, med eller utan internetanslutning.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\sw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	980
Entropy (8bit):	4.50673686618174
Encrypted:	false
SSDEEP:	12:1HASvgNHCBxNx1HMHyMhybK7QGU78oCuafIvfCBxex6EYPE5E1pOCSUJqONtCBh8:1HAGDQ3y0Q/Kjp/zhDoKMkeAT6dBaX
MD5:	D0579209686889E079D87C23817EDDD5
SHA1:	C4F99E66A5891973315D7F2BC9C1DAA524CB30DC
SHA-256:	0D20680B74AF10EF8C754FCDE259124A438DCE3848305B0CAF994D98E787D263
SHA-512:	D59911F91ED6C8FF78FD158389B4D326DAF4C031B940C399569FE210F6985E23897E7F404B7014FC7B0ACEC086C01CC5F76354F7E5D3A1E0DEDEF788C23C2978
Malicious:	false
Preview:	{.. "createnew": {.. "message": "FUNGUA MPYA".. },.. "explanationofflinedisabled": {.. "message": "Haupo mtandaoni. Ili uweze kutumia Hati za Google bila muunganisho wa intaneti, wakati utakuwa umeunganishwa kwenye intaneti, nenda kwenye sehemu ya mipangilio kwenye ukurasa wa kwanza wa Hati za Google kisha uwashe kipengele cha usawazishaji nje ya mtandao.".. },.. "explanationofflineenabled": {.. "message": "Haupo mtandaoni, lakini bado unaweza kubadilisha faili zilizopo au uunde mpya.".. },.. "extdesc": {.. "message": "Badilisha, unda na uangalie hati, malahajedwali na mawasilisho yako . yote bila kutumia muunganisho wa intaneti.".. },.. "extname": {.. "message": "Hati za Google Nje ya Mtandao".. },.. "learnmore": {.. "message": "Pata Maelezo Zaidi".. },.. "popuphelptext": {.. "message": "Andika hati, zibadilishe na ushirikiane na wengine popote ulipo, iwe una muunganisho wa intaneti au huna.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\ta\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1941
Entropy (8bit):	4.132139619026436
Encrypted:	false
SSDEEP:	24:1HAoTZwEj3YfVLiANpx96zjlXTwB4uNJDZwq3CP1B2xIZiIH1CYFIZ03SoFyxrph:JCEjWiAD0ZXkyYFyPND1L/I
MD5:	DCC0D1725AEAEAAF1690EF8053529601
SHA1:	BB9D31859469760AC93E84B70B57909DCC02EA65
SHA-256:	6282BF9DF12AD453858B0B531C8999D5FD6251EB855234546A1B30858462231A
SHA-512:	6243982D764026D342B3C47C706D822BB2B0CAFFA51F0591D8C878F981EEF2A7FC68B76D012630B1C1EB394AF90EB782E2B49329EB6538DD5608A7F0791FDCF5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....... .........".. },.. "explanationofflinedisabled": {.. "message": ".......... ........... .... ....... ..... Google ......... .........., ...... .... ........... ......... ...., Google ... ................... ................ ......, ........ ......... ..........".. },.. "explanationofflineenabled": {.. "message": ".......... ..........., .......... .......... .......... ......... ........... ...... .....

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\te\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1969
Entropy (8bit):	4.327258153043599
Encrypted:	false
SSDEEP:	48:R7jQrEONienBcFNBNieCyOBw0/kCcj+sEf24l+Q+u1LU4ljCj55ONipR41ssrNix:RjQJN1nBcFNBNlCyGcj+RXl+Q+u1LU4s
MD5:	385E65EF723F1C4018EEE6E4E56BC03F
SHA1:	0CEA195638A403FD99BAEF88A360BD746C21DF42
SHA-256:	026C164BAE27DBB36A564888A796AA3F188AAD9E0C37176D48910395CF772CEA
SHA-512:	E55167CB5638E04DF3543D57C8027B86B9483BFCAFA8E7C148EDED66454AEBF554B4C1CF3C33E93EC63D73E43800D6A6E7B9B1A1B0798B6BDB2F699D3989B052
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ...... ........ ......".. },.. "explanationofflinedisabled": {.. "message": ".... ........... ........ ......... ........ ....... Google Docs... .............., .... ............ ....... ..... ...... .... Google Docs .... ...... ............. ......, ........ ........ ... .......".. },.. "explanationofflineenabled": {.. "message": ".... ........... ......., .... .... ........ .......... .... ....... ..... ....... .... ..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\th\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1674
Entropy (8bit):	4.343724179386811
Encrypted:	false
SSDEEP:	48:fcGjnU3UnGKD1GeU3pktOggV1tL2ggG7Q:f3jnDG1eUk0g6RLE
MD5:	64077E3D186E585A8BEA86FF415AA19D
SHA1:	73A861AC810DABB4CE63AD052E6E1834F8CA0E65
SHA-256:	D147631B2334A25B8AA4519E4A30FB3A1A85B6A0396BC688C68DC124EC387D58
SHA-512:	56DD389EB9DD335A6214E206B3BF5D63562584394D1DE1928B67D369E548477004146E6CB2AD19D291CB06564676E2B2AC078162356F6BC9278B04D29825EF0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": ".............. ............. Google .................................... ............................... Google ...... .................................................................".. },.. "explanationofflineenabled": {.. "message": "................................................................".. },.. "extdesc": {.. "message": "..... ..... ........

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\tr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1063
Entropy (8bit):	4.853399816115876
Encrypted:	false
SSDEEP:	24:1HAowYuBPgoMC4AGehrgGm7tJ3ckwFrXnRs5m:GYsPgrCtGehkGc3cvXr
MD5:	76B59AAACC7B469792694CF3855D3F4C
SHA1:	7C04A2C1C808FA57057A4CCEEE66855251A3C231
SHA-256:	B9066A162BEE00FD50DC48C71B32B69DFFA362A01F84B45698B017A624F46824
SHA-512:	2E507CA6874DE8028DC769F3D9DFD9E5494C268432BA41B51568D56F7426F8A5F2E5B111DDD04259EB8D9A036BB4E3333863A8FC65AAB793BCEF39EDFE41403B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN. OLU.TUR".. },.. "explanationofflinedisabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Google Dok.manlar'. .nternet ba.lant.s. olmadan kullanmak i.in, .nternet'e ba.lanabildi.inizde Google Dok.manlar ana sayfas.nda Ayarlar'a gidin ve .evrimd... senkronizasyonu etkinle.tirin.".. },.. "explanationofflineenabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Ancak, yine de mevcut dosyalar. d.zenleyebilir veya yeni dosyalar olu.turabilirsiniz.".. },.. "extdesc": {.. "message": "Dok.man, e-tablo ve sunu olu.turun, bunlar. d.zenleyin ve g.r.nt.leyin. T.m bu i.lemleri internet eri.imi olmadan yapabilirsiniz.".. },.. "extname": {.. "message": "Google Dok.manlar .evrimd...".. },.. "learnmore": {.. "message": "Daha Fazla Bilgi".. },.. "popuphelptext": {.. "message": ".nternet ba.lant.n.z olsun veya olmas.n, nerede olursan.z olun yaz.n, d.zenl

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\uk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1333
Entropy (8bit):	4.686760246306605
Encrypted:	false
SSDEEP:	24:1HAk9oxkm6H4KyGGB9GeGoxPEYMQhpARezTtHUN97zlwpEH7:VKU1GB9GeBc/OARETt+9/WCb
MD5:	970963C25C2CEF16BB6F60952E103105
SHA1:	BBDDACFEEE60E22FB1C130E1EE8EFDA75EA600AA
SHA-256:	9FA26FF09F6ACDE2457ED366C0C4124B6CAC1435D0C4FD8A870A0C090417DA19
SHA-512:	1BED9FE4D4ADEED3D0BC8258D9F2FD72C6A177C713C3B03FC6F5452B6D6C2CB2236C54EA972ECE7DBFD756733805EB2352CAE44BAB93AA8EA73BB80460349504
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........".. },.. "explanationofflinedisabled": {.. "message": ".. . ...... ....... ... ............. Google ........... ... ......... . .........., ......... . ............ .. ........ ........ Google .......... . ......... ......-............., .... ...... . .......".. },.. "explanationofflineenabled": {.. "message": ".. . ...... ......, ..... ... .... ...... .......... ........ ..... ... .......... .....".. },.. "extdesc": {.. "message": "........., ......... . ............ ........., .......... ....... .. ........... ... ....... .. ..........".. },.. "extname": {.. "message": "Goo

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\ur\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1263
Entropy (8bit):	4.861856182762435
Encrypted:	false
SSDEEP:	24:1HAl3zNEUhN3mNjkSIkmdNpInuUVsqNtOJDhY8Dvp/IkLzx:e3uUhQKvkmd+s11Lp1F
MD5:	8B4DF6A9281333341C939C244DDB7648
SHA1:	382C80CAD29BCF8AAF52D9A24CA5A6ECF1941C6B
SHA-256:	5DA836224D0F3A96F1C5EB5063061AAD837CA9FC6FED15D19C66DA25CF56F8AC
SHA-512:	FA1C015D4EA349F73468C78FDB798D462EEF0F73C1A762298798E19F825E968383B0A133E0A2CE3B3DF95F24C71992235BFC872C69DC98166B44D3183BF8A9E5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ......".. },.. "explanationofflinedisabled": {.. "message": ".. .. .... .... Google Docs .. .... ....... ..... ....... .... ..... .... ... .. .. ....... .. ..... ... .. Google Docs ... ... .. ....... .. ..... ... .. .... ...... ..... .. .. .....".. },.. "explanationofflineenabled": {.. "message": ".. .. .... ... .... .. ... ... ...... ..... ... ..... .. .... ... .. ... ..... ... .... ....".. },.. "extdesc": {.. "message": ".......... .......... ... ....... . .... ... ....... .. ..... .. .... ...... ..... .... ... ..... .......".. },.. "extname": {.. "message": "Google Docs .. ....".. },.. "learnmore": {..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\vi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1074
Entropy (8bit):	5.062722522759407
Encrypted:	false
SSDEEP:	24:1HAhBBLEBOVUSUfE+eDFmj4BLErQ7e2CIer32KIxqJ/HtNiE5nIGeU+KCVT:qHCDheDFmjDQgX32/S/hI9jh
MD5:	773A3B9E708D052D6CBAA6D55C8A5438
SHA1:	5617235844595D5C73961A2C0A4AC66D8EA5F90F
SHA-256:	597C5F32BC999746BC5C2ED1E5115C523B7EB1D33F81B042203E1C1DF4BBCAFE
SHA-512:	E5F906729E38B23F64D7F146FA48F3ABF6BAED9AAFC0E5F6FA59F369DC47829DBB4BFA94448580BD61A34E844241F590B8D7AEC7091861105D8EBB2590A3BEE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "T.O M.I".. },.. "explanationofflinedisabled": {.. "message": "B.n .ang ngo.i tuy.n. .. s. d.ng Google T.i li.u m. kh.ng c.n k.t n.i Internet, .i ..n c.i ..t tr.n trang ch. c.a Google T.i li.u v. b.t ..ng b. h.a ngo.i tuy.n v.o l.n ti.p theo b.n ...c k.t n.i v.i m.ng Internet.".. },.. "explanationofflineenabled": {.. "message": "B.n .ang ngo.i tuy.n, tuy nhi.n b.n v.n c. th. ch.nh s.a c.c t.p c. s.n ho.c t.o c.c t.p m.i.".. },.. "extdesc": {.. "message": "Ch.nh s.a, t.o v. xem t.i li.u, b.ng t.nh v. b.n tr.nh b.y . t.t c. m. kh.ng c.n truy c.p Internet.".. },.. "extname": {.. "message": "Google T.i li.u ngo.i tuy.n".. },.. "learnmore": {.. "message": "Ti.m hi..u th.m".. },.. "popuphelptext": {.. "message": "Vi.t, ch.nh s.a v. c.ng t.c

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\zh_CN\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	879
Entropy (8bit):	5.7905809868505544
Encrypted:	false
SSDEEP:	12:1HASvgteHCBxNtSBXuetOrgIkA2OrWjMOCBxetSBXK01fg/SOiCSUEQ27e1CBhUj:1HAFsHtrIkA2jqldI/727eggcLk9pf
MD5:	3E76788E17E62FB49FB5ED5F4E7A3DCE
SHA1:	6904FFA0D13D45496F126E58C886C35366EFCC11
SHA-256:	E72D0BB08CC3005556E95A498BD737E7783BB0E56DCC202E7D27A536616F5EE0
SHA-512:	F431E570AB5973C54275C9EEF05E49E6FE2D6C17000F98D672DD31F9A1FAD98E0D50B5B0B9CF85D5BBD3B655B93FD69768C194C8C1688CB962AA75FF1AF9BDB6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ................ Google ....................".. },.. "explanationofflineenabled": {.. "message": ".............................".. },.. "extdesc": {.. "message": "...................... - ........".. },.. "extname": {.. "message": "Google .......".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "...............................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\zh_HK\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1205
Entropy (8bit):	4.50367724745418
Encrypted:	false
SSDEEP:	24:YWvqB0f7Cr591AhI9Ah8U1F4rw4wtB9G976d6BY9scKUrPoAhNehIrI/uIXS1:YWvl7Cr5JHrw7k7u6BY9trW+rHR
MD5:	524E1B2A370D0E71342D05DDE3D3E774
SHA1:	60D1F59714F9E8F90EF34138D33FBFF6DD39E85A
SHA-256:	30F44CFAD052D73D86D12FA20CFC111563A3B2E4523B43F7D66D934BA8DACE91
SHA-512:	D2225CF2FA94B01A7B0F70A933E1FDCF69CDF92F76C424CE4F9FCC86510C481C9A87A7B71F907C836CBB1CA41A8BEBBD08F68DBC90710984CA738D293F905272
Malicious:	false
Preview:	{"createnew":{"message":"\u5efa\u7acb\u65b0\u9805\u76ee"},"explanationofflinedisabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\u3002\u5982\u8981\u5728\u6c92\u6709\u4e92\u806f\u7db2\u9023\u7dda\u7684\u60c5\u6cc1\u4e0b\u4f7f\u7528\u300cGoogle \u6587\u4ef6\u300d\uff0c\u8acb\u524d\u5f80\u300cGoogle \u6587\u4ef6\u300d\u9996\u9801\u7684\u8a2d\u5b9a\uff0c\u4e26\u5728\u4e0b\u6b21\u9023\u63a5\u4e92\u806f\u7db2\u6642\u958b\u555f\u96e2\u7dda\u540c\u6b65\u529f\u80fd\u3002"},"explanationofflineenabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\uff0c\u4f46\u60a8\u4ecd\u53ef\u4ee5\u7de8\u8f2f\u53ef\u7528\u6a94\u6848\u6216\u5efa\u7acb\u65b0\u6a94\u6848\u3002"},"extdesc":{"message":"\u7de8\u8f2f\u3001\u5efa\u7acb\u53ca\u67e5\u770b\u60a8\u7684\u6587\u4ef6\u3001\u8a66\u7b97\u8868\u548c\u7c21\u5831\uff0c\u5b8c\u5168\u4e0d\u9700\u4f7f\u7528\u4e92\u806f\u7db2\u3002"},"extname":{"message":"\u300cGoogle \u6587\u4ef6\u300d\u96e2\u7dda\u7248"},"learnmore":{"message":"\u77ad\u89e3\u8a

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\zh_TW\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	843
Entropy (8bit):	5.76581227215314
Encrypted:	false
SSDEEP:	12:1HASvgmaCBxNtBtA24ZOuAeOEHGOCBxetBtMHQIJECSUnLRNocPNy6CBhU5OGg1O:1HAEfQkekYyLvRmcPGgzcL2kx5U
MD5:	0E60627ACFD18F44D4DF469D8DCE6D30
SHA1:	2BFCB0C3CA6B50D69AD5745FA692BAF0708DB4B5
SHA-256:	F94C6DDEDF067642A1AF18D629778EC65E02B6097A8532B7E794502747AEB008
SHA-512:	6FF517EED4381A61075AC7C8E80C73FAFAE7C0583BA4FA7F4951DD7DBE183C253702DEE44B3276EFC566F295DAC1592271BE5E0AC0C7D2C9F6062054418C7C27
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".....".. },.. "explanationofflinedisabled": {.. "message": ".................. Google ................ Google .................".. },.. "explanationofflineenabled": {.. "message": ".........................".. },.. "extdesc": {.. "message": ".............................".. },.. "extname": {.. "message": "Google .....".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "................................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_locales\zu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	912
Entropy (8bit):	4.65963951143349
Encrypted:	false
SSDEEP:	24:YlMBKqLnI7EgBLWFQbTQIF+j4h3OadMJzLWnCieqgwLeOvKrCRPE:YlMBKqjI7EQOQb0Pj4heOWqeyaBrMPE
MD5:	71F916A64F98B6D1B5D1F62D297FDEC1
SHA1:	9386E8F723C3F42DA5B3F7E0B9970D2664EA0BAA
SHA-256:	EC78DDD4CCF32B5D76EC701A20167C3FBD146D79A505E4FB0421FC1E5CF4AA63
SHA-512:	30FA4E02120AF1BE6E7CC7DBB15FAE5D50825BD6B3CF28EF21D2F2E217B14AF5B76CFCC165685C3EDC1D09536BFCB10CA07E1E2CC0DA891CEC05E19394AD7144
Malicious:	false
Preview:	{"createnew":{"message":"DALA ENTSHA"},"explanationofflinedisabled":{"message":"Awuxhunyiwe ku-inthanethi. Ukuze usebenzise i-Google Amadokhumenti ngaphandle koxhumano lwe-inthanethi, iya kokuthi izilungiselelo ekhasini lasekhaya le-Google Amadokhumenti bese uvula ukuvumelanisa okungaxhunyiwe ku-inthanethi ngesikhathi esilandelayo lapho uxhunywe ku-inthanethi."},"explanationofflineenabled":{"message":"Awuxhunyiwe ku-inthanethi, kodwa usangakwazi ukuhlela amafayela atholakalayo noma udale amasha."},"extdesc":{"message":"Hlela, dala, futhi ubuke amadokhumenti akho, amaspredishithi, namaphrezentheshini \u2014 konke ngaphandle kokufinyelela kwe-inthanethi."},"extname":{"message":"I-Google Amadokhumenti engaxhumekile ku-intanethi"},"learnmore":{"message":"Funda kabanzi"},"popuphelptext":{"message":"Bhala, hlela, futhi hlanganyela noma yikuphi lapho okhona, unalo noma ungenalo uxhumano lwe-inthanethi."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11280
Entropy (8bit):	5.751992630887702
Encrypted:	false
SSDEEP:	192:RBG1G1UPkUj/86Op//Ier/2nsNLJtwg+K8HNnswuHEIIMuuqd7CKqvUpGTcjG:m8IEI4u8Rp
MD5:	250C48F4915DD4C0DFA7E7E021A4F066
SHA1:	092A98BF40D8C18280393BF3811A7DFA9A9FD326
SHA-256:	26D9B129339E2E2EB8E0223E16DB3CF0EA220AC0799480D462C236E6A425665E
SHA-512:	8B18E232992E55E8DA97AC46D7AACA061508341D1EADCEFF1E9D0677734DFA8B892AB44754A3AA100585F5B2F2562BC4F2D7103065050FFCD00F91D5915CE5E6
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\dasherSettingSchema.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	854
Entropy (8bit):	4.284628987131403
Encrypted:	false
SSDEEP:	12:ont+QByTwnnGNcMbyWM+Q9TZldnnnGGxlF/S0WOtUL0M0r:vOrGe4dDCVGOjWJ0nr
MD5:	4EC1DF2DA46182103D2FFC3B92D20CA5
SHA1:	FB9D1BA3710CF31A87165317C6EDC110E98994CE
SHA-256:	6C69CE0FE6FAB14F1990A320D704FEE362C175C00EB6C9224AA6F41108918CA6
SHA-512:	939D81E6A82B10FF73A35C931052D8D53D42D915E526665079EEB4820DF4D70F1C6AEBAB70B59519A0014A48514833FEFD687D5A3ED1B06482223A168292105D
Malicious:	false
Preview:	{. "type": "object",. "properties": {. "allowedDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Allow users to enable Docs offline for the specified managed domains.",. "description": "Users on managed devices will be able to enable docs offline if they are part of the specified managed domains.". },. "autoEnabledDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Auto enable Docs offline for the specified managed domains in certain eligible situations.",. "description": "Users on managed devices, in certain eligible situations, will be able to automatically access and edit recent files offline for the managed domains set in this property. They can still disable it from Drive settings.". }. }.}.

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2525
Entropy (8bit):	5.417833205646285
Encrypted:	false
SSDEEP:	24:1HEZ4WPoolELb/KxktGw3VwELb/4iL2QDkUpvdz1xxy/Atj1K9yiVvQe:WdP5aLTKQGwlTLT4oRvvxs/APKgiVb
MD5:	236D2DD305D64C2B6ABD232ED53270DF
SHA1:	9F6885E95FBC4213631F0B0EA49C803D07D34136
SHA-256:	2A4D526B9D1C8665427FB9E0DA58D16FDDE382DD74C1258941B18701EF7880C3
SHA-512:	B76AF22153F79BCA2429A23746A62A430A521E952E7F94936648ECFD25AFDD9801ACBF6FD16941918A4FEDE39DE747AB6C6336BC86CA74384920AF7E815DB855
Malicious:	false
Preview:	{.. "author": {.. "email": "docs-hosted-app-own@google.com".. },.. "background": {.. "service_worker": "service_worker_bin_prod.js".. },.. "content_capabilities": {.. "matches": [ "https://docs.google.com/", "https://drive.google.com/", "https://drive-autopush.corp.google.com/", "https://drive-daily-0.corp.google.com/", "https://drive-daily-1.corp.google.com/", "https://drive-daily-2.corp.google.com/", "https://drive-daily-3.corp.google.com/", "https://drive-daily-4.corp.google.com/", "https://drive-daily-5.corp.google.com/", "https://drive-daily-6.corp.google.com/", "https://drive-preprod.corp.google.com/", "https://drive-staging.corp.google.com/" ],.. "permissions": [ "clipboardRead", "clipboardWrite", "unlimitedStorage" ].. },.. "content_security_policy": {.. "extension_pages": "script-src 'self'; object-src 'self'".. },.. "default_locale": "en_US",.. "description": "__MSG_extDesc__",.. "externally_connectable": {.. "ma

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\offscreendocument.html

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	97
Entropy (8bit):	4.862433271815736
Encrypted:	false
SSDEEP:	3:PouV7uJL5XL/oGLvLAAJR90bZNGXIL0Hac4NGb:hxuJL5XsOv0EmNV4HX4Qb
MD5:	B747B5922A0BC74BBF0A9BC59DF7685F
SHA1:	7BF124B0BE8EE2CFCD2506C1C6FFC74D1650108C
SHA-256:	B9FA2D52A4FFABB438B56184131B893B04655B01F336066415D4FE839EFE64E7
SHA-512:	7567761BE4054FCB31885E16D119CD4E419A423FFB83C3B3ED80BFBF64E78A73C2E97AAE4E24AB25486CD1E43877842DB0836DB58FBFBCEF495BC53F9B2A20EC
Malicious:	false
Preview:	<!DOCTYPE html>.<html>.<body>. <script src="offscreendocument_main.js"></script>.</body>.</html>

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\offscreendocument_main.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3777)
Category:	dropped
Size (bytes):	98880
Entropy (8bit):	5.414989230634404
Encrypted:	false
SSDEEP:	1536:M+TW9bPq1M3ZOC0pJ/BjXf3Zk/7hry6fq66V3gr9KUw5SXfPxhZhGurH6c/V:WPLZwJJXf3ZvRV3gJKU/fP+urHRV
MD5:	DC93A1045D1AD8D7ADD06B93B2FE79E2
SHA1:	CAFCC8DB7F8E3FD2F8C1EFAC7B385D7616F55EA3
SHA-256:	D5CEB4449384CD2D7898C052B7B99417961880945FC4EAE80EBBAF8E24CC0A3E
SHA-512:	025F7103D1F7D607825BE916D0131C1E04B295EB562974A77F5A16E7BF40250B5608071779B420E4738F86F09A6F7C889469FA898268894FFFEEB7465C589E81
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function ba(){return function(){}}function l(a){return function(){return this[a]}}function ca(a){return function(){return a}}var n;function da(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function fa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var q=fa(this);function r(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new Ty

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\page_embed_script.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	291
Entropy (8bit):	4.65176400421739
Encrypted:	false
SSDEEP:	6:2LGX86tj66rU8j6D3bWq2un/XBtzHrH9Mnj63LK603:2Q8KVqb2u/Rt3Onj1
MD5:	3AB0CD0F493B1B185B42AD38AE2DD572
SHA1:	079B79C2ED6F67B5A5BD9BC8C85801F96B1B0F4B
SHA-256:	73E3888CCBC8E0425C3D2F8D1E6A7211F7910800EEDE7B1E23AD43D3B21173F7
SHA-512:	32F9DB54654F29F39D49F7A24A1FC800DBC0D4A8A1BAB2369C6F9799BC6ADE54962EFF6010EF6D6419AE51D5B53EC4B26B6E2CDD98DEF7CC0D2ADC3A865F37D3
Malicious:	false
Preview:	(function(){window._docs_chrome_extension_exists=!0;window._docs_chrome_extension_features_version=2;window._docs_chrome_extension_permissions="alarms clipboardRead clipboardWrite storage unlimitedStorage offscreen".split(" ");window._docs_chrome_extension_manifest_version=3;}).call(this);.

C:\Users\user\AppData\Local\Temp\scoped_dir572_468003876\CRX_INSTALL\service_worker_bin_prod.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3782)
Category:	dropped
Size (bytes):	107677
Entropy (8bit):	5.396220758526552
Encrypted:	false
SSDEEP:	1536:7nwyvB1qCo7mWUgsUopF5Xy4FlAwxdhvHcrdncqAKxwjBnKwIDQgrOChkPIgmrCp:wh6gstXy4FM5ncJKxCnKWgrd0v
MD5:	E8015AC436B33034EDF7DA060E853A04
SHA1:	62D0F6EB0E441158A1F56F6E0C70D3D229B57886
SHA-256:	23C953E989FF4AF6126D4A3B2AD21B33A82512FC8768045C00F05940DE2C9978
SHA-512:	C35AC8692FC22B78365CA202E173A90AE4B5DBA338B7FC9EEB17EDDF5868B52CF1D13DC0EDAF36BE1CC0E0152F41AC4027C51D7ECA27778B483E3FC83F11EA82
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function ba(){return function(){}}function k(a){return function(){return this[a]}}function ca(a){return function(){return a}}var n;function da(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function fa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var q=fa(this);function r(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new Ty

C:\Windows\Installer\4ce31b.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Google Chrome 131.0.6778.109, Subject: Google Chrome, Author: Google LLC, Keywords: Installer, Template: Intel;1033, Revision Number: {63DB0411-523F-42CB-B58A-AC5ACE0863C7}, Create Time/Date: Thu Jan 11 14:59:44 2024, Last Saved Time/Date: Thu Jan 11 14:59:44 2024, Number of Pages: 200, Number of Words: 12, Name of Creating Application: MSI Wrapper (11.0.53.0), Security: 2
Category:	dropped
Size (bytes):	1855488
Entropy (8bit):	5.507699487116634
Encrypted:	false
SSDEEP:	24576:at9cpVDh1i+OG6gviWd2ZXY3kJh8b1sd7ptsn5t:tpRh1agVYtAkJSbCpyT
MD5:	0D4245B805741F0D90E4A964971B0527
SHA1:	0828F6CBE30FC369EB62D9E992162870767489F5
SHA-256:	B6C37E3D6C1E61C71F42E005774CAE3F722A3273A91D6E29D27E9F76AB4AB934
SHA-512:	BE3C036F37BE183201C4FADC3C1111B8EA0C2ACF9D6F2EB1CE4E1DC4FFE4664ED91504E8FD83346257F10352F84CB701FB39057EB948FFF038BE3E3328E68371
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSIE443.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	212992
Entropy (8bit):	6.513409725320959
Encrypted:	false
SSDEEP:	3072:xspAtOdmXwCGjtYNKbYO2gjpcm8rRuqpjCL42loHUvU0yGxr5GqM2a8:jtOdiRQYpgjpjew5DHyGxcqo8
MD5:	0C8921BBCC37C6EFD34FAF44CF3B0CB5
SHA1:	DCFA71246157EDCD09EECAF9D4C5E360B24B3E49
SHA-256:	FD622CF73EA951A6DE631063ABA856487D77745DD1500ADCA61902B8DDE56FE1
SHA-512:	ED55443E20D40CCA90596F0A0542FA5AB83FE0270399ADFAAFD172987FB813DFD44EC0DA0A58C096AF3641003F830341FE259AD5BCE9823F238AE63B7E11E108
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: 56ff7c.msi, Detection: malicious, Browse Filename: 510286.msi, Detection: malicious, Browse Filename: 5c322c.msi, Detection: malicious, Browse Filename: 57ff67.msi, Detection: malicious, Browse Filename: 56ff7c.msi, Detection: malicious, Browse Filename: setup (2).msi, Detection: malicious, Browse Filename: 5c322c.msi, Detection: malicious, Browse Filename: 57ff67.msi, Detection: malicious, Browse Filename: 293944637.dll, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............p...p...p.......p.....p..../.p.......p...q.%.p.......p.....p.....p.Rich..p.........................PE..L...Y..e...........!.....h..........K................................................]....@.........................P...]............P.......................`.....................................p...@...............t............................text....f.......h.................. ..`.rdata...............l..............@..@.data....5..........................@....rsrc........P......................@..@.reloc...)...`...*..................@..B........................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\SourceHash{837A37B6-C086-4887-960B-B6BB04303EFC}

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.7683633145860249
Encrypted:	false
SSDEEP:	12:JSbX72FjIAGiLIlHVRpMh/7777777777777777777777777vDHF0Hx3p3Xl0i8Q:JeQI5ceP6F
MD5:	8313467A3B01593E72747126571301B4
SHA1:	9B82FBA2A084A1E47CA5D55448921B3357256C36
SHA-256:	017EB454403D93C5FC4EF3A12D09D87FFD212603DD28AC6CC430341EB90FE867
SHA-512:	C1C9FFAEB6BA9EF3C8E0D44636705BA7C9840D02F40435A118B2FB693DC2EEC1449A94F90AF799953C8E9542ECB4E037E20F9C5882C1F518513041A2A208FF0B
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\inprogressinstallinfo.ipi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.2104942575632993
Encrypted:	false
SSDEEP:	48:bJGucPveFXJxT52TddSPKrzddSBGrlvKR:dG8JTwTPqb
MD5:	3C69E76969B38DE80162EEFF007549EF
SHA1:	7CE66ADBFFEF6C9B8A7FED10CEE852A01D12F475
SHA-256:	5E2590EE07D0C6E4772BCF226E617BE9A6095BD9DB1BB6E4F5EE5E31D173789E
SHA-512:	B2EC759B2DD5DED91ACC95C69CEFB6FD62A01BE50185558EBDC066C2FF177D94783FB8A9DA5A581461B8CC8CADE813466AA2A0D7BB91BBE572A07A30D6CDC5A1
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	364484
Entropy (8bit):	5.365485636584087
Encrypted:	false
SSDEEP:	1536:6qELG7gK+RaOOp3LCCpfmLgYI66xgFF9Sq8K6MAS2OMUHl6Gin327D22A26KgauD:zTtbmkExhMJCIpEk
MD5:	F3AC28CDFE93C7B58B7FB902ACE5A600
SHA1:	5AB24FC04CA1D98352ECBAE4757A4B3D73E26203
SHA-256:	C7954F10BD23908D4399F9E7EE3F0E8510235177E2575A82F032B10FA8DA9B5A
SHA-512:	6ACCE3290E808EEE5CF93B6BDFF7ABCD54802C037E2B7831FD5C5665E81A675083591D6FDF629048AA51F7126B880CF7101AB82CBC4A51547E69ACE489485739
Malicious:	false
Preview:	.To learn about increasing the verbosity of the NGen log files please see http://go.microsoft.com/fwlink/?linkid=210113..12/07/2019 14:54:22.458 [5488]: Command line: D:\wd\compilerTemp\BMT.200yuild.1bk\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe executeQueuedItems /nologo ..12/07/2019 14:54:22.473 [5488]: Executing command from offline queue: install "System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil" /NoDependencies /queue:1..12/07/2019 14:54:22.490 [5488]: Executing command from offline queue: install "System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil" /NoDependencies /queue:3..12/07/2019 14:54:22.490 [5488]: Exclusion list entry found for System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil; it will not be installed..12/07/2019 14:54:22.490 [

C:\Windows\Temp\~DF0A54318868D63B44.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.06925452767188116
Encrypted:	false
SSDEEP:	6:2/9LG7iVCnLG7iVrKOzPLHKOwNTtx9N4He/bkyVky6l3X:2F0i8n0itFzDHF0Hxi3X
MD5:	59129D8DA65640255BA372C78BCCB457
SHA1:	4327A5E82A0D410AEBFAD7C7ED195B72A15559BE
SHA-256:	501E4CFC259514ABCD12865ED54E07B12AE456375243EDDE3377F549926328D8
SHA-512:	C543104AA4FC4DBD2D54EC48B103ECE7995F4329BE1A89472942DED94398F05FAF8DE39FED8367E3E93D383124F3E685FBC25FF7871C78866D316FB51D9EB1F1
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFFDD88951CDF1CDDA.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	81920
Entropy (8bit):	0.10400493570859182
Encrypted:	false
SSDEEP:	24:VJKMyj0hJfAebfddipV7UddipVdVQwGBlrkg9Snh+afH:7KRjQrfddSBUddSPKr4
MD5:	26497EB4021EE564CF30EFAEACFB2A73
SHA1:	71E167105C2CFFFAEB3535A42C786619D70F6D4F
SHA-256:	D902FDF5CF7465F844B563F2A495871385EF24A5053706ADABF486E9A6628997
SHA-512:	7FBECB9F344BD7FA3438E5B89FBA6BE337D83D24D86F6C36C11FD8ED8F5D508F7BFF894FBC75498CBF50D606AD950A156792A966023599D3802EF7F76D20D9BF
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

\Device\ConDrv

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	ASCII text, with very long lines (806), with CRLF, CR, LF line terminators, with overstriking
Category:	dropped
Size (bytes):	1005
Entropy (8bit):	3.6161093429142834
Encrypted:	false
SSDEEP:	12:zK/0HtBFNE8xQDdXXXXXXXXXXXXXXXeDYJQn:zKcNDrQDdXXXXXXXXXXXXXXXeDYJQn
MD5:	DEC717B7D4D4EDBE2B10513B97B41B4A
SHA1:	8F898A0D095434C2236AB18B7F006184FD1D23E3
SHA-256:	03973866B4686601A64F0EE4098F148A8D8E72168B5DD8C3187F4C16F0883841
SHA-512:	B1ADB13845BCA7F3946073989370E11A9A11395DE1D3C965429E2091C2DAB3FCAE4F2C606E015C0C946A5D92320C2CBC7808B9B4E170FEECD71E9355E4C7AD19
Malicious:	false
Preview:	Microsoft (R) File Expansion Utility..Copyright (c) Microsoft Corporation. All rights reserved.....Adding files\setup.exe to Extraction Queue....Expanding Files ......Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..Expanding Files Complete

Static File Info

General

File type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Google Chrome 131.0.6778.109, Subject: Google Chrome, Author: Google LLC, Keywords: Installer, Template: Intel;1033, Revision Number: {63DB0411-523F-42CB-B58A-AC5ACE0863C7}, Create Time/Date: Thu Jan 11 14:59:44 2024, Last Saved Time/Date: Thu Jan 11 14:59:44 2024, Number of Pages: 200, Number of Words: 12, Name of Creating Application: MSI Wrapper (11.0.53.0), Security: 2
Entropy (8bit):	5.507699487116634
TrID:	Generic OLE2 / Multistream Compound File (8008/1) 100.00%
File name:	33abb.msi
File size:	1'855'488 bytes
MD5:	0d4245b805741f0d90e4a964971b0527
SHA1:	0828f6cbe30fc369eb62d9e992162870767489f5
SHA256:	b6c37e3d6c1e61c71f42e005774cae3f722a3273a91d6e29d27e9f76ab4ab934
SHA512:	be3c036f37be183201c4fadc3c1111b8ea0c2acf9d6f2eb1ce4e1dc4ffe4664ed91504e8fd83346257f10352f84cb701fb39057eb948fff038be3e3328e68371
SSDEEP:	24576:at9cpVDh1i+OG6gviWd2ZXY3kJh8b1sd7ptsn5t:tpRh1agVYtAkJSbCpyT
TLSH:	C98524D13784C127EA4709314E67D39A6729FCA0AE31B08777A0FB6E5B39AD35E25301
File Content Preview:	........................>......................................................................................................................................................................................................................................

File Icon


Icon Hash:	2d2e3797b32b2b99

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 12, 2024 12:41:33.915811062 CET	49675	443	192.168.2.5	23.1.237.91
Dec 12, 2024 12:41:33.915853024 CET	49674	443	192.168.2.5	23.1.237.91
Dec 12, 2024 12:41:34.009628057 CET	49673	443	192.168.2.5	23.1.237.91
Dec 12, 2024 12:41:43.525108099 CET	49674	443	192.168.2.5	23.1.237.91
Dec 12, 2024 12:41:43.525116920 CET	49675	443	192.168.2.5	23.1.237.91
Dec 12, 2024 12:41:43.618773937 CET	49673	443	192.168.2.5	23.1.237.91
Dec 12, 2024 12:41:46.001511097 CET	443	49703	23.1.237.91	192.168.2.5
Dec 12, 2024 12:41:46.001607895 CET	49703	443	192.168.2.5	23.1.237.91
Dec 12, 2024 12:42:01.737186909 CET	49724	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:01.737241983 CET	443	49724	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:01.737315893 CET	49724	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:01.818634987 CET	49724	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:01.818670988 CET	443	49724	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:03.277084112 CET	443	49724	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:03.294240952 CET	49724	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:03.294270992 CET	443	49724	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:03.298122883 CET	443	49724	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:03.298214912 CET	49724	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:03.304647923 CET	49724	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:03.304835081 CET	443	49724	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:03.305457115 CET	49724	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:03.305469990 CET	443	49724	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:03.511390924 CET	443	49724	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:03.511454105 CET	49724	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:03.803155899 CET	443	49724	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:03.803224087 CET	443	49724	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:03.803283930 CET	49724	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:03.803302050 CET	443	49724	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:03.803423882 CET	443	49724	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:03.803469896 CET	49724	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:04.108953953 CET	49741	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:04.108999014 CET	443	49741	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:04.109062910 CET	49741	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:04.119963884 CET	49741	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:04.119976044 CET	443	49741	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:04.123378038 CET	49724	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:04.123408079 CET	443	49724	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:04.781549931 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:04.781599998 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:04.781661987 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:04.781940937 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:04.781954050 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:05.372596025 CET	443	49741	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:05.373389959 CET	49741	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:05.373430014 CET	443	49741	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:05.373980999 CET	443	49741	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:05.375171900 CET	49741	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:05.375252008 CET	443	49741	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:05.375719070 CET	49741	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:05.423331976 CET	443	49741	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:05.609307051 CET	49752	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:05.609354973 CET	443	49752	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:05.609442949 CET	49752	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:05.609606981 CET	49753	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:05.609657049 CET	443	49753	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:05.609719038 CET	49753	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:05.609843969 CET	49752	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:05.609858036 CET	443	49752	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:05.610074043 CET	49753	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:05.610090971 CET	443	49753	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:05.824935913 CET	443	49741	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:05.825046062 CET	443	49741	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:05.827474117 CET	49741	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:05.849967957 CET	49741	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:42:05.849986076 CET	443	49741	152.19.9.32	192.168.2.5
Dec 12, 2024 12:42:05.862623930 CET	49754	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:05.862675905 CET	443	49754	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:05.866055965 CET	49754	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:05.876545906 CET	49754	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:05.876558065 CET	443	49754	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:06.415354013 CET	49758	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:06.415391922 CET	443	49758	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:06.415908098 CET	49758	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:06.415908098 CET	49758	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:06.415936947 CET	443	49758	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:06.444686890 CET	49759	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:06.444773912 CET	443	49759	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:06.445261955 CET	49759	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:06.445990086 CET	49759	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:06.446026087 CET	443	49759	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:06.459944963 CET	49761	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:06.460047007 CET	443	49761	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:06.460442066 CET	49761	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:06.460443020 CET	49761	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:06.460534096 CET	443	49761	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:06.673624039 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:06.703269958 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:06.703305006 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:06.704813004 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:06.704871893 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:06.704895020 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:06.704906940 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:06.704933882 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:06.704956055 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:06.707418919 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:06.724653959 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:06.724903107 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:06.724916935 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:06.771332979 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:06.787658930 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:06.787693024 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:06.831305981 CET	443	49753	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:06.831482887 CET	443	49752	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:06.833998919 CET	49753	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:06.834047079 CET	443	49753	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:06.834213018 CET	49752	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:06.834278107 CET	443	49752	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:06.835130930 CET	443	49753	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:06.835206985 CET	49753	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:06.835268974 CET	443	49752	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:06.835344076 CET	49752	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:06.847697020 CET	49752	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:06.847986937 CET	443	49752	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:06.848889112 CET	49753	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:06.849051952 CET	49752	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:06.849081039 CET	443	49752	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:06.849153996 CET	49753	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:06.849179029 CET	443	49753	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:06.912581921 CET	49752	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:06.975178957 CET	49753	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:06.975244999 CET	443	49753	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:06.975286007 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.084434986 CET	49753	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.096199036 CET	443	49754	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:07.099159956 CET	49754	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:07.099183083 CET	443	49754	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:07.102993965 CET	443	49754	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:07.103343010 CET	49754	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:07.144798994 CET	49754	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:07.145101070 CET	49754	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:07.145174026 CET	443	49754	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:07.225038052 CET	49754	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:07.225059986 CET	443	49754	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:07.259424925 CET	443	49752	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.259648085 CET	443	49752	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.259829998 CET	49752	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.261065960 CET	443	49753	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.261231899 CET	443	49753	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.261292934 CET	49753	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.274036884 CET	49752	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.274080992 CET	443	49752	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.274501085 CET	49753	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.274564981 CET	443	49753	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.355798006 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.355905056 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.355976105 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.356041908 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.370588064 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.370654106 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.370672941 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.380490065 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.380549908 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.380564928 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.391417027 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.391480923 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.391495943 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.405184984 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.405247927 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.405263901 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.412663937 CET	49754	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:07.418564081 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.418731928 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.418801069 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.477209091 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.477276087 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.477309942 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.485502005 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.485563040 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.485588074 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.530633926 CET	443	49754	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:07.530740976 CET	443	49754	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:07.530785084 CET	49754	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:07.530957937 CET	49754	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:07.530977964 CET	443	49754	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:07.548645973 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.548789978 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.548818111 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.556816101 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.556871891 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.556890011 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.564899921 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.564966917 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.564980984 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.577438116 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.577616930 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.577680111 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.591013908 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.591074944 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.591094971 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.603203058 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.603262901 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.603279114 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.616775036 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.616835117 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.616851091 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.630383968 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.630537987 CET	443	49758	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.630557060 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.630620003 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.630918026 CET	49758	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.630939960 CET	443	49758	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.634507895 CET	443	49758	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.634582996 CET	49758	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.635493994 CET	49758	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.635642052 CET	49758	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.635664940 CET	443	49758	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.643862009 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.643923044 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.643942118 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.656586885 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.656665087 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.656697989 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.659348965 CET	443	49759	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:07.659768105 CET	49759	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:07.659830093 CET	443	49759	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:07.663528919 CET	443	49759	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:07.663609982 CET	49759	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:07.663886070 CET	49759	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:07.664042950 CET	49759	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:07.664067030 CET	443	49759	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:07.669230938 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.669300079 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.669327021 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.674165010 CET	443	49761	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.674365997 CET	49761	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.674376011 CET	443	49761	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.675360918 CET	443	49761	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.675434113 CET	49761	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.675678015 CET	49761	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.675740004 CET	443	49761	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.675791025 CET	49761	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.679810047 CET	49758	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.679825068 CET	443	49758	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.681081057 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.681138992 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.681154013 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.693185091 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.693249941 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.693264008 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.693599939 CET	49759	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:07.693645000 CET	443	49759	162.159.61.3	192.168.2.5
Dec 12, 2024 12:42:07.693772078 CET	49759	443	192.168.2.5	162.159.61.3
Dec 12, 2024 12:42:07.704817057 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.704967976 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.704982042 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.723339081 CET	443	49761	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.728732109 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.728935003 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.729001045 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.731106997 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.731173038 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.731193066 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.739558935 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.739617109 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.739631891 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.746859074 CET	49770	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.746926069 CET	49771	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.746951103 CET	443	49770	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.746972084 CET	443	49771	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.747055054 CET	49771	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.747060061 CET	49770	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.747387886 CET	49771	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.747415066 CET	443	49771	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.747574091 CET	49770	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.747615099 CET	443	49770	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.749437094 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.749494076 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.749511003 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.755095005 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.755151033 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.755166054 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.763432980 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.763489962 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.763504028 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.770220041 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.770284891 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.770298958 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.785480022 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.785999060 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.786020041 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.791271925 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.792865038 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.792985916 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.795762062 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.795798063 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.800365925 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.800448895 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.800477982 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.808118105 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.810019970 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.810039043 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.815607071 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.815712929 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.815726995 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.824785948 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.824841976 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.824872017 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.830579996 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.830723047 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.830740929 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.838218927 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.838288069 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.838304043 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.845719099 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.845783949 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.845798016 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.853243113 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.853307962 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.853322983 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.860748053 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.860799074 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.860819101 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.871189117 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.871264935 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.871278048 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.871658087 CET	49758	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.871824980 CET	443	49758	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.871871948 CET	49758	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.882945061 CET	49761	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.882958889 CET	443	49761	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.883130074 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.883189917 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.883203030 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.884495974 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.884574890 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.884588003 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.890170097 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.890300035 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.890312910 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.897202015 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.897265911 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.897279978 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.904114008 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.904175997 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.904189110 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.918853045 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.918929100 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.918956995 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.919023991 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.919089079 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.919997931 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.922946930 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.923031092 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.923043013 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.923074007 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.923166990 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.925146103 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.925292015 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.925410032 CET	443	49744	172.217.19.193	192.168.2.5
Dec 12, 2024 12:42:07.925472021 CET	49744	443	192.168.2.5	172.217.19.193
Dec 12, 2024 12:42:07.937277079 CET	49761	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.937387943 CET	443	49761	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:07.937474012 CET	49761	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.061016083 CET	49773	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.061064005 CET	443	49773	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.061235905 CET	49774	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.061250925 CET	49773	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.061271906 CET	443	49774	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.061374903 CET	49774	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.061783075 CET	49773	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.061805010 CET	443	49773	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.061945915 CET	49774	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.061959028 CET	443	49774	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.242068052 CET	49775	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.242100954 CET	443	49775	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.242170095 CET	49775	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.242573023 CET	49776	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.242611885 CET	443	49776	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.242677927 CET	49776	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.242892027 CET	49775	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.242907047 CET	443	49775	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.243058920 CET	49776	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.243098021 CET	443	49776	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.273267031 CET	49777	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.273317099 CET	49778	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.273327112 CET	443	49778	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.273366928 CET	443	49777	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.273384094 CET	49778	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.273431063 CET	49777	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.273580074 CET	49778	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.273593903 CET	443	49778	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.273772001 CET	49777	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.273813009 CET	443	49777	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.959515095 CET	443	49770	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.960007906 CET	49770	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.960069895 CET	443	49770	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.960408926 CET	443	49770	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.960673094 CET	443	49771	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.961999893 CET	49771	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.962066889 CET	443	49771	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.962107897 CET	49770	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.962212086 CET	443	49770	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.963242054 CET	443	49771	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.963531971 CET	49771	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.963727951 CET	443	49771	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.023197889 CET	49771	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.085382938 CET	49770	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.275144100 CET	443	49774	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.275741100 CET	49774	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.275759935 CET	443	49774	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.276324987 CET	443	49774	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.282052994 CET	49774	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.282207966 CET	443	49774	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.286389112 CET	443	49773	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.287128925 CET	49773	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.287158966 CET	443	49773	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.288806915 CET	443	49773	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.289431095 CET	49773	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.289918900 CET	49773	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.290003061 CET	443	49773	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.335450888 CET	49774	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.382221937 CET	49773	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.382236958 CET	443	49773	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.452388048 CET	443	49775	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.452759027 CET	49775	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.452774048 CET	443	49775	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.453633070 CET	443	49775	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.453989983 CET	49775	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.454092026 CET	49775	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.454153061 CET	443	49775	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.454576969 CET	443	49776	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.454865932 CET	49776	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.454886913 CET	443	49776	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.455777884 CET	443	49776	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.456021070 CET	49776	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.456145048 CET	49776	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.456207991 CET	443	49776	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.481576920 CET	443	49777	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.481812954 CET	49777	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.481839895 CET	443	49777	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.482723951 CET	443	49777	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.483074903 CET	49777	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.483074903 CET	49777	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.483136892 CET	443	49777	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.486999035 CET	443	49778	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.487191916 CET	49778	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.487214088 CET	443	49778	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.491113901 CET	443	49778	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.491460085 CET	49778	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.491460085 CET	49778	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.491707087 CET	443	49778	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.507678986 CET	49776	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.507695913 CET	443	49776	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.538533926 CET	49778	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.538553953 CET	443	49778	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.554092884 CET	49776	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.585282087 CET	49778	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.585361004 CET	49773	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.585361004 CET	49775	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.585367918 CET	49777	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.585378885 CET	443	49775	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.585390091 CET	443	49777	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.772744894 CET	49777	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.772764921 CET	49775	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:11.605854988 CET	49792	443	192.168.2.5	166.1.160.237
Dec 12, 2024 12:42:11.605912924 CET	443	49792	166.1.160.237	192.168.2.5
Dec 12, 2024 12:42:11.607139111 CET	49792	443	192.168.2.5	166.1.160.237
Dec 12, 2024 12:42:11.607139111 CET	49792	443	192.168.2.5	166.1.160.237
Dec 12, 2024 12:42:11.607182026 CET	443	49792	166.1.160.237	192.168.2.5
Dec 12, 2024 12:42:11.607558966 CET	443	49792	166.1.160.237	192.168.2.5
Dec 12, 2024 12:42:23.761842966 CET	443	49770	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:23.761904955 CET	443	49770	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:23.761960983 CET	49770	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:23.764949083 CET	443	49771	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:23.765120029 CET	443	49771	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:23.765181065 CET	49771	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:24.077779055 CET	443	49773	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:24.077869892 CET	443	49773	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:24.077913046 CET	49773	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:24.078922033 CET	443	49774	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:24.078986883 CET	443	49774	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:24.079025984 CET	49774	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:24.260286093 CET	443	49775	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:24.260375977 CET	443	49775	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:24.260426044 CET	49775	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:24.261398077 CET	443	49776	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:24.261564016 CET	443	49776	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:24.261612892 CET	49776	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:24.287729979 CET	443	49777	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:24.287810087 CET	443	49777	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:24.287866116 CET	49777	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:24.288193941 CET	443	49778	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:24.288276911 CET	443	49778	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:24.288347006 CET	49778	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:25.945242882 CET	49774	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:25.945276976 CET	49773	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:25.945278883 CET	443	49774	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:25.945301056 CET	443	49773	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:25.945358038 CET	49775	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:25.945365906 CET	443	49775	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:25.945430040 CET	49776	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:25.945458889 CET	443	49776	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:25.945663929 CET	49777	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:25.945688963 CET	49778	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:25.945696115 CET	443	49778	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:25.945729971 CET	443	49777	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:28.243305922 CET	49770	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:28.243338108 CET	443	49770	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:28.243511915 CET	49771	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:28.243556023 CET	443	49771	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:02.862041950 CET	49671	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:02.981827974 CET	53	49671	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:02.981909037 CET	49671	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:03.101685047 CET	53	49671	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:04.070898056 CET	49671	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:04.191018105 CET	53	49671	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:04.191170931 CET	49671	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:05.281106949 CET	49680	443	192.168.2.5	23.219.82.8
Dec 12, 2024 12:43:05.281198025 CET	443	49680	23.219.82.8	192.168.2.5
Dec 12, 2024 12:43:05.281290054 CET	49680	443	192.168.2.5	23.219.82.8
Dec 12, 2024 12:43:05.281464100 CET	49680	443	192.168.2.5	23.219.82.8
Dec 12, 2024 12:43:05.281488895 CET	443	49680	23.219.82.8	192.168.2.5
Dec 12, 2024 12:43:05.516144991 CET	49682	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:43:05.516227961 CET	443	49682	152.19.9.32	192.168.2.5
Dec 12, 2024 12:43:05.516277075 CET	49683	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:43:05.516316891 CET	49682	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:43:05.516372919 CET	443	49683	152.19.9.32	192.168.2.5
Dec 12, 2024 12:43:05.516443014 CET	49683	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:43:05.516495943 CET	49682	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:43:05.516515017 CET	443	49682	152.19.9.32	192.168.2.5
Dec 12, 2024 12:43:05.516597033 CET	49683	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:43:05.516618967 CET	443	49683	152.19.9.32	192.168.2.5
Dec 12, 2024 12:43:06.495817900 CET	443	49680	23.219.82.8	192.168.2.5
Dec 12, 2024 12:43:06.496109962 CET	49680	443	192.168.2.5	23.219.82.8
Dec 12, 2024 12:43:06.496139050 CET	443	49680	23.219.82.8	192.168.2.5
Dec 12, 2024 12:43:06.497673988 CET	443	49680	23.219.82.8	192.168.2.5
Dec 12, 2024 12:43:06.497746944 CET	49680	443	192.168.2.5	23.219.82.8
Dec 12, 2024 12:43:06.498820066 CET	49680	443	192.168.2.5	23.219.82.8
Dec 12, 2024 12:43:06.498914957 CET	443	49680	23.219.82.8	192.168.2.5
Dec 12, 2024 12:43:06.540623903 CET	49680	443	192.168.2.5	23.219.82.8
Dec 12, 2024 12:43:06.540646076 CET	443	49680	23.219.82.8	192.168.2.5
Dec 12, 2024 12:43:06.586810112 CET	49680	443	192.168.2.5	23.219.82.8
Dec 12, 2024 12:43:06.776027918 CET	443	49682	152.19.9.32	192.168.2.5
Dec 12, 2024 12:43:06.776823044 CET	443	49683	152.19.9.32	192.168.2.5
Dec 12, 2024 12:43:06.778594017 CET	49683	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:43:06.778625965 CET	443	49683	152.19.9.32	192.168.2.5
Dec 12, 2024 12:43:06.778706074 CET	49682	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:43:06.778743029 CET	443	49682	152.19.9.32	192.168.2.5
Dec 12, 2024 12:43:06.779059887 CET	443	49682	152.19.9.32	192.168.2.5
Dec 12, 2024 12:43:06.779114008 CET	443	49683	152.19.9.32	192.168.2.5
Dec 12, 2024 12:43:06.779896021 CET	49682	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:43:06.779961109 CET	443	49682	152.19.9.32	192.168.2.5
Dec 12, 2024 12:43:06.780157089 CET	49683	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:43:06.780240059 CET	443	49683	152.19.9.32	192.168.2.5
Dec 12, 2024 12:43:06.821430922 CET	49682	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:43:06.821449041 CET	49683	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:43:25.811629057 CET	443	49680	23.219.82.8	192.168.2.5
Dec 12, 2024 12:43:25.811758995 CET	443	49680	23.219.82.8	192.168.2.5
Dec 12, 2024 12:43:25.811891079 CET	49680	443	192.168.2.5	23.219.82.8
Dec 12, 2024 12:43:26.856487989 CET	49680	443	192.168.2.5	23.219.82.8
Dec 12, 2024 12:43:26.856553078 CET	49682	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:43:26.856566906 CET	443	49680	23.219.82.8	192.168.2.5
Dec 12, 2024 12:43:26.856595993 CET	49683	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:43:26.856667995 CET	443	49682	152.19.9.32	192.168.2.5
Dec 12, 2024 12:43:26.856726885 CET	49682	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:43:26.856945038 CET	443	49683	152.19.9.32	192.168.2.5
Dec 12, 2024 12:43:26.857012987 CET	49683	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:04.180129051 CET	49800	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:04.180181980 CET	443	49800	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:04.180412054 CET	49800	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:04.180558920 CET	49801	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:04.180605888 CET	443	49801	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:04.180685043 CET	49801	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:04.180787086 CET	49800	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:04.180804968 CET	443	49800	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:04.180871010 CET	49801	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:04.180885077 CET	443	49801	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:05.636003017 CET	443	49800	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:05.636454105 CET	49800	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:05.636482954 CET	443	49800	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:05.637164116 CET	443	49801	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:05.637379885 CET	49801	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:05.637404919 CET	443	49801	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:05.638408899 CET	443	49800	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:05.638453007 CET	443	49801	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:05.638484001 CET	49800	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:05.638544083 CET	49801	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:05.639997005 CET	49801	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:05.640065908 CET	443	49801	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:05.640511990 CET	49800	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:05.640657902 CET	443	49800	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:05.694323063 CET	49801	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:05.694350958 CET	443	49801	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:05.694350958 CET	49800	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:05.694369078 CET	443	49800	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:05.741224051 CET	49800	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:05.741229057 CET	49801	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:25.993768930 CET	443	49800	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:25.993964911 CET	443	49800	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:25.994138956 CET	49800	443	192.168.2.5	152.19.9.32
Dec 12, 2024 12:44:25.995546103 CET	443	49801	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:25.995629072 CET	443	49801	152.19.9.32	192.168.2.5
Dec 12, 2024 12:44:25.995712996 CET	49801	443	192.168.2.5	152.19.9.32

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 12, 2024 12:42:01.132512093 CET	64841	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:01.132667065 CET	64805	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:01.432792902 CET	53	64841	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:01.448240042 CET	53	64805	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:03.935384989 CET	56064	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:03.935564995 CET	65459	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:04.642826080 CET	61456	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:04.642966986 CET	62215	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:04.779829025 CET	53	61456	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:04.780514002 CET	53	62215	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:05.470834017 CET	65057	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:05.471021891 CET	57598	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:05.471302032 CET	63412	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:05.471432924 CET	64160	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:05.608068943 CET	53	57598	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:05.608520031 CET	53	63412	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:05.608768940 CET	53	64160	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:05.608926058 CET	53	65057	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:05.719448090 CET	50798	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:05.719448090 CET	56346	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:05.856621027 CET	53	56346	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:05.857983112 CET	53	50798	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:07.745471001 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:07.746433020 CET	54512	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.060550928 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.061361074 CET	54512	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.663769007 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.663769007 CET	54512	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.830555916 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.830605030 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.830642939 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.830662012 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.831073046 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.831115007 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.831151962 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.831257105 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.831624985 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.832621098 CET	54512	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.833169937 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.833791018 CET	54512	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.860766888 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.860766888 CET	54512	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.959991932 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.960334063 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.961088896 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.961088896 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.980249882 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.980287075 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:08.980564117 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.980564117 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.980982065 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:08.991637945 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.071070910 CET	54512	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.085665941 CET	54512	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.147145033 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.147344112 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.147357941 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.147371054 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.147600889 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.147600889 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.147929907 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.148278952 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.148291111 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.148302078 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.148660898 CET	54512	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.148660898 CET	54512	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.175343990 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.176343918 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.177809954 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.178271055 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.182707071 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.188213110 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.188369989 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.188616991 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.274329901 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.274537086 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.274626970 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.275124073 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.301594973 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.309703112 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.310055017 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.386248112 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.400537014 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.403140068 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.429349899 CET	54512	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.429821968 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.456152916 CET	54512	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.461415052 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.462903023 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:09.487281084 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:09.491636992 CET	54512	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:10.839411974 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:10.839509010 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:11.154786110 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:11.154933929 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:11.155663013 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:11.157501936 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:11.290689945 CET	56714	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:11.600752115 CET	53	56714	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:11.608268023 CET	58583	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:11.746125937 CET	53	58583	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:11.747608900 CET	55944	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:11.885122061 CET	53	55944	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:11.888575077 CET	53271	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:12.026091099 CET	53	53271	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:12.026993990 CET	49925	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:12.165530920 CET	53	49925	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:12.166553974 CET	55638	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:12.304574966 CET	53	55638	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:12.305816889 CET	50955	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:12.444547892 CET	53	50955	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:12.445528984 CET	63403	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:12.592770100 CET	53	63403	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:12.593866110 CET	63402	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:12.732244015 CET	53	63402	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:12.733227968 CET	65252	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:12.871792078 CET	53	65252	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:12.872757912 CET	54849	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:13.010487080 CET	53	54849	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:13.011523962 CET	54788	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:13.152578115 CET	53	54788	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:13.153780937 CET	56476	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:13.292769909 CET	53	56476	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:13.293987989 CET	50392	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:13.432315111 CET	53	50392	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:13.433373928 CET	51044	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:13.573226929 CET	53	51044	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:13.576770067 CET	56584	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:13.714715004 CET	53	56584	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:13.716238976 CET	62735	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:13.854279041 CET	53	62735	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:13.871536970 CET	60557	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:14.009495020 CET	53	60557	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:14.010507107 CET	63564	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:14.148724079 CET	53	63564	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:14.149741888 CET	65363	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:14.288451910 CET	53	65363	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:14.289438009 CET	58275	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:14.426459074 CET	53	58275	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:14.427454948 CET	62673	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:14.565771103 CET	53	62673	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:14.566735029 CET	62944	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:14.704075098 CET	53	62944	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:14.705069065 CET	54605	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:14.843908072 CET	53	54605	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:14.845299959 CET	52589	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:14.983254910 CET	53	52589	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:14.984345913 CET	61503	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:15.123022079 CET	53	61503	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:15.123989105 CET	64813	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:15.263024092 CET	53	64813	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:15.264049053 CET	62000	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:15.405854940 CET	53	62000	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:15.406923056 CET	53484	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:15.544945002 CET	53	53484	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:15.545902014 CET	61538	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:15.683691025 CET	53	61538	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:15.684644938 CET	63266	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:15.823374987 CET	53	63266	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:15.824433088 CET	53418	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:15.963582993 CET	53	53418	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:15.965291977 CET	54353	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:16.138035059 CET	53	54353	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:16.139134884 CET	52397	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:16.357533932 CET	53	52397	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:16.358607054 CET	59321	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:16.497091055 CET	53	59321	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:16.498060942 CET	60714	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:16.641819000 CET	53	60714	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:16.642673016 CET	49335	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:16.780514956 CET	53	49335	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:16.781470060 CET	50659	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:16.918987989 CET	53	50659	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:16.920017958 CET	65069	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:17.059484005 CET	53	65069	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:17.060333967 CET	61113	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:17.197999954 CET	53	61113	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:17.199008942 CET	64353	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:17.340403080 CET	53	64353	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:17.343357086 CET	64724	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:17.482167959 CET	53	64724	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:17.483249903 CET	53743	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:17.622776985 CET	53	53743	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:17.623704910 CET	56009	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:17.761545897 CET	53	56009	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:17.763016939 CET	59180	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:17.901460886 CET	53	59180	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:17.902899981 CET	64691	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:18.040498018 CET	53	64691	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:18.041785955 CET	59641	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:18.181855917 CET	53	59641	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:18.182976007 CET	60446	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:18.320558071 CET	53	60446	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:18.321603060 CET	55557	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:18.461446047 CET	53	55557	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:18.462973118 CET	50137	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:18.601018906 CET	53	50137	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:18.602087021 CET	63562	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:18.739335060 CET	53	63562	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:18.740287066 CET	61687	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:18.879586935 CET	53	61687	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:18.880620956 CET	53843	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:19.019475937 CET	53	53843	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:19.020453930 CET	53867	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:19.158741951 CET	53	53867	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:19.159984112 CET	61699	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:19.297808886 CET	53	61699	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:19.298794985 CET	60839	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:19.437674999 CET	53	60839	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:19.438826084 CET	62670	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:19.576813936 CET	53	62670	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:19.577886105 CET	55385	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:19.715907097 CET	53	55385	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:19.716985941 CET	50547	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:19.855174065 CET	53	50547	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:19.856368065 CET	55483	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:19.994056940 CET	53	55483	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:19.995137930 CET	54632	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:20.132951021 CET	53	54632	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:20.134457111 CET	62432	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:20.275542974 CET	53	62432	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:20.276716948 CET	61388	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:20.415283918 CET	53	61388	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:20.416353941 CET	51964	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:20.555306911 CET	53	51964	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:20.556339979 CET	52380	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:20.694263935 CET	53	52380	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:20.695178032 CET	52221	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:20.836333990 CET	53	52221	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:20.837368965 CET	51248	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:20.975764036 CET	53	51248	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:20.976680994 CET	52516	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:21.114675999 CET	53	52516	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:21.115660906 CET	56373	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:21.254242897 CET	53	56373	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:21.255573034 CET	49177	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:21.394944906 CET	53	49177	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:21.395946980 CET	61990	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:21.533763885 CET	53	61990	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:21.534728050 CET	59079	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:21.672636032 CET	53	59079	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:21.673825026 CET	58736	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:21.811471939 CET	53	58736	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:21.812665939 CET	63002	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:21.951013088 CET	53	63002	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:21.951977015 CET	58458	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:22.090662956 CET	53	58458	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:22.091665983 CET	58010	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:22.230035067 CET	53	58010	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:22.231476068 CET	50710	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:22.369471073 CET	53	50710	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:22.370637894 CET	59401	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:22.508846998 CET	53	59401	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:22.510185957 CET	59245	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:22.647970915 CET	53	59245	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:22.649036884 CET	64356	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:22.788686991 CET	53	64356	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:22.794014931 CET	63006	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:22.931720972 CET	53	63006	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:22.932797909 CET	63758	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:23.070600033 CET	53	63758	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:23.071660042 CET	64325	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:23.210968971 CET	53	64325	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:23.212347031 CET	53988	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:23.351958990 CET	53	53988	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:23.354954004 CET	62805	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:23.492837906 CET	53	62805	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:23.494112015 CET	54266	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:23.632244110 CET	53	54266	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:23.633471966 CET	62051	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:23.771024942 CET	53	62051	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:23.772556067 CET	57386	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:23.910017967 CET	53	57386	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:23.911045074 CET	53204	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:24.049838066 CET	53	53204	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:24.050808907 CET	64566	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:24.189840078 CET	53	64566	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:24.191011906 CET	51777	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:24.331170082 CET	53	51777	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:24.332117081 CET	51173	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:24.471426010 CET	53	51173	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:24.472660065 CET	55493	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:24.611423016 CET	53	55493	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:24.612799883 CET	62703	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:24.750727892 CET	53	62703	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:24.751866102 CET	53960	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:24.906542063 CET	53	53960	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:24.907514095 CET	58591	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:25.045924902 CET	53	58591	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:25.047009945 CET	53492	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:25.185106039 CET	53	53492	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:25.186083078 CET	58225	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:25.324359894 CET	53	58225	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:25.327394962 CET	62903	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:25.465495110 CET	53	62903	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:25.466481924 CET	55078	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:25.605452061 CET	53	55078	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:25.606599092 CET	62107	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:25.744453907 CET	53	62107	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:25.745415926 CET	49350	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:25.884648085 CET	53	49350	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:25.885819912 CET	63423	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:25.946914911 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:25.947042942 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:26.023150921 CET	53	63423	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:26.024133921 CET	65291	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:26.162671089 CET	53	65291	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:26.163953066 CET	59347	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:26.262355089 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:26.264806986 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:26.265037060 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:26.265229940 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:26.301904917 CET	53	59347	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:26.303225994 CET	54841	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:26.441519022 CET	53	54841	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:26.442483902 CET	61771	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:26.583298922 CET	53	61771	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:26.584440947 CET	63806	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:26.722688913 CET	53	63806	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:26.723967075 CET	58826	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:26.862207890 CET	53	58826	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:26.863356113 CET	64537	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:27.005675077 CET	53	64537	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:27.007270098 CET	53749	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:27.145536900 CET	53	53749	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:27.147885084 CET	52058	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:27.285415888 CET	53	52058	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:27.286555052 CET	59041	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:27.427287102 CET	53	59041	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:27.428678036 CET	56273	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:27.566430092 CET	53	56273	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:27.567796946 CET	54056	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:27.705625057 CET	53	54056	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:27.712642908 CET	50972	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:27.853585958 CET	53	50972	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:27.854840040 CET	64251	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:27.992747068 CET	53	64251	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:27.994168997 CET	53730	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:28.132550955 CET	53	53730	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:28.134102106 CET	55592	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:28.242786884 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:28.243958950 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:28.245296955 CET	54512	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:28.245687962 CET	54512	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:28.272898912 CET	53	55592	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:28.273974895 CET	62289	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:28.412513018 CET	53	62289	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:28.413619995 CET	61406	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:28.552115917 CET	53	61406	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:28.552953005 CET	62942	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:28.557523012 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:28.558255911 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:28.558676958 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:28.559490919 CET	443	50741	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:28.559684992 CET	50741	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:28.560441017 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:28.561127901 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:28.561702967 CET	443	54512	172.64.41.3	192.168.2.5
Dec 12, 2024 12:42:28.561855078 CET	54512	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:42:28.691380978 CET	53	62942	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:28.692162037 CET	64580	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:28.830769062 CET	53	64580	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:28.831906080 CET	59260	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:28.970509052 CET	53	59260	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:28.971595049 CET	57079	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:29.109864950 CET	53	57079	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:29.111058950 CET	50098	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:29.249667883 CET	53	50098	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:29.254046917 CET	58343	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:29.391920090 CET	53	58343	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:29.394017935 CET	49788	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:29.533248901 CET	53	49788	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:29.535068989 CET	58661	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:29.672914982 CET	53	58661	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:29.674096107 CET	59882	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:29.812364101 CET	53	59882	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:29.813353062 CET	60380	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:29.952554941 CET	53	60380	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:29.953469038 CET	55502	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:30.091032982 CET	53	55502	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:30.092076063 CET	55200	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:30.230567932 CET	53	55200	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:30.231581926 CET	62807	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:30.393023968 CET	53	62807	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:30.394192934 CET	64347	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:30.534742117 CET	53	64347	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:30.535815001 CET	57653	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:30.674207926 CET	53	57653	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:30.675019979 CET	54247	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:30.827693939 CET	53	54247	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:30.828604937 CET	64566	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:30.985737085 CET	53	64566	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:30.986713886 CET	60074	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:31.125061989 CET	53	60074	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:31.125869036 CET	57245	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:31.263892889 CET	53	57245	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:31.265024900 CET	64874	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:31.402965069 CET	53	64874	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:31.403815985 CET	61483	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:31.542469025 CET	53	61483	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:31.543344021 CET	57473	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:31.681432009 CET	53	57473	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:31.682316065 CET	56507	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:31.820105076 CET	53	56507	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:31.820882082 CET	64262	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:31.961637974 CET	53	64262	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:31.962475061 CET	64580	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:32.102231979 CET	53	64580	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:32.103171110 CET	65248	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:32.240739107 CET	53	65248	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:32.242244005 CET	53795	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:32.381989956 CET	53	53795	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:32.382947922 CET	60376	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:32.520555973 CET	53	60376	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:32.521461964 CET	50657	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:32.663115025 CET	53	50657	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:32.664067984 CET	61099	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:32.803016901 CET	53	61099	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:32.804234982 CET	57070	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:32.941720009 CET	53	57070	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:32.942573071 CET	61695	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:33.080233097 CET	53	61695	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:33.081362963 CET	61932	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:33.219110966 CET	53	61932	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:33.220127106 CET	60575	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:33.358171940 CET	53	60575	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:33.359643936 CET	63251	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:33.500886917 CET	53	63251	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:33.501847029 CET	49548	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:33.641256094 CET	53	49548	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:33.642179966 CET	58108	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:33.779300928 CET	53	58108	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:33.780469894 CET	54905	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:33.918591976 CET	53	54905	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:33.919575930 CET	54454	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:34.057240009 CET	53	54454	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:34.058404922 CET	63135	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:34.196873903 CET	53	63135	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:34.197896957 CET	50118	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:34.336175919 CET	53	50118	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:34.337153912 CET	64587	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:34.474929094 CET	53	64587	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:34.475893974 CET	52849	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:34.615677118 CET	53	52849	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:34.616838932 CET	57515	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:34.755249023 CET	53	57515	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:34.756234884 CET	53261	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:34.893728018 CET	53	53261	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:34.896569967 CET	58646	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:35.034006119 CET	53	58646	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:35.034854889 CET	62043	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:35.173176050 CET	53	62043	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:35.174240112 CET	62686	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:35.312689066 CET	53	62686	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:35.313705921 CET	62944	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:35.452809095 CET	53	62944	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:35.453800917 CET	60547	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:35.591918945 CET	53	60547	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:35.592694044 CET	56317	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:35.730832100 CET	53	56317	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:35.731842995 CET	58105	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:35.869890928 CET	53	58105	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:35.870769978 CET	63056	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:36.009057999 CET	53	63056	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:36.010097980 CET	61053	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:36.150034904 CET	53	61053	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:36.151009083 CET	57893	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:36.288681984 CET	53	57893	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:36.289536953 CET	58617	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:36.428100109 CET	53	58617	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:36.429510117 CET	53671	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:36.567442894 CET	53	53671	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:36.568490028 CET	63417	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:36.708398104 CET	53	63417	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:36.709418058 CET	51273	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:36.847441912 CET	53	51273	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:36.848515034 CET	57478	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:36.987112999 CET	53	57478	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:36.988307953 CET	64560	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:37.127037048 CET	53	64560	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:37.128089905 CET	55846	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:37.266104937 CET	53	55846	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:37.267489910 CET	61147	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:37.406958103 CET	53	61147	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:37.408128023 CET	54086	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:37.545948029 CET	53	54086	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:37.546892881 CET	57995	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:37.687494040 CET	53	57995	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:37.688745022 CET	52584	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:37.828210115 CET	53	52584	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:37.829530001 CET	58023	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:37.967363119 CET	53	58023	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:37.968683004 CET	57358	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:38.106687069 CET	53	57358	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:38.108303070 CET	53769	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:38.246673107 CET	53	53769	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:38.247612000 CET	63502	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:38.386322021 CET	53	63502	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:38.387388945 CET	50045	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:38.525388956 CET	53	50045	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:38.526850939 CET	52942	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:38.665307999 CET	53	52942	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:38.666647911 CET	59194	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:38.805535078 CET	53	59194	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:38.806736946 CET	63820	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:38.946683884 CET	53	63820	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:38.947766066 CET	65467	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:39.085922956 CET	53	65467	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:39.086977005 CET	63892	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:39.224524975 CET	53	63892	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:39.225500107 CET	58338	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:39.362693071 CET	53	58338	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:39.363692999 CET	54061	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:39.502419949 CET	53	54061	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:39.503547907 CET	52981	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:39.643579960 CET	53	52981	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:39.644632101 CET	51371	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:39.782968044 CET	53	51371	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:39.783942938 CET	62805	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:39.922036886 CET	53	62805	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:39.923019886 CET	57460	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:40.063133001 CET	53	57460	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:40.063990116 CET	64165	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:40.202879906 CET	53	64165	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:40.203825951 CET	51188	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:40.346436977 CET	53	51188	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:40.347305059 CET	57330	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:40.486430883 CET	53	57330	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:40.487349987 CET	62854	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:40.624582052 CET	53	62854	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:40.625510931 CET	59230	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:40.762579918 CET	53	59230	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:40.765199900 CET	60128	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:40.903212070 CET	53	60128	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:40.904177904 CET	60118	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:41.042697906 CET	53	60118	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:41.043577909 CET	54749	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:41.181701899 CET	53	54749	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:41.182606936 CET	62063	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:41.321598053 CET	53	62063	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:41.322702885 CET	55106	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:41.460577965 CET	53	55106	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:41.466322899 CET	51983	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:41.604969978 CET	53	51983	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:41.606028080 CET	52388	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:41.744100094 CET	53	52388	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:41.745527029 CET	54553	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:41.883423090 CET	53	54553	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:41.884485006 CET	53206	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:42.024595022 CET	53	53206	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:42.025458097 CET	56635	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:42.164814949 CET	53	56635	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:42.165868998 CET	52311	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:42.303565025 CET	53	52311	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:42.304764032 CET	64357	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:42.442945957 CET	53	64357	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:42.444046974 CET	51464	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:42.706406116 CET	53	51464	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:42.707374096 CET	50166	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:42.844430923 CET	53	50166	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:42.845757008 CET	61670	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:42.989109993 CET	53	61670	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:42.990365028 CET	51243	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:43.128807068 CET	53	51243	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:43.129885912 CET	61531	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:43.268990040 CET	53	61531	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:43.270243883 CET	60148	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:43.410126925 CET	53	60148	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:43.411269903 CET	50108	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:43.549595118 CET	53	50108	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:43.550790071 CET	57671	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:43.689565897 CET	53	57671	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:43.690485954 CET	58498	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:43.829010963 CET	53	58498	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:43.830077887 CET	49964	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:43.967462063 CET	53	49964	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:43.968570948 CET	50919	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:44.108907938 CET	53	50919	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:44.109934092 CET	50910	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:44.248531103 CET	53	50910	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:44.249844074 CET	62696	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:44.389683008 CET	53	62696	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:44.390858889 CET	63028	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:44.528214931 CET	53	63028	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:44.529413939 CET	65171	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:44.668359995 CET	53	65171	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:44.669713020 CET	59075	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:44.807584047 CET	53	59075	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:44.808692932 CET	63085	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:44.946500063 CET	53	63085	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:44.947496891 CET	58352	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:45.085603952 CET	53	58352	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:45.086750031 CET	58070	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:45.224688053 CET	53	58070	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:45.225698948 CET	56249	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:45.363892078 CET	53	56249	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:45.365262985 CET	54764	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:45.502794027 CET	53	54764	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:45.504168034 CET	59364	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:45.644479036 CET	53	59364	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:45.645591974 CET	65524	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:45.783809900 CET	53	65524	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:45.785085917 CET	50698	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:45.925179005 CET	53	50698	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:45.928312063 CET	64422	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:46.066023111 CET	53	64422	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:46.067388058 CET	65134	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:46.205323935 CET	53	65134	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:46.206482887 CET	53283	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:46.345196009 CET	53	53283	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:46.346359015 CET	56868	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:46.483799934 CET	53	56868	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:46.484993935 CET	55302	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:46.623630047 CET	53	55302	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:46.624963999 CET	64659	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:46.763216972 CET	53	64659	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:46.764669895 CET	65429	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:46.902548075 CET	53	65429	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:46.903886080 CET	55456	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:47.042876959 CET	53	55456	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:47.044287920 CET	64034	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:47.183860064 CET	53	64034	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:47.185131073 CET	50110	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:47.326484919 CET	53	50110	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:47.327620983 CET	54589	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:47.469223976 CET	53	54589	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:47.470438004 CET	56573	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:47.608334064 CET	53	56573	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:47.614816904 CET	58506	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:47.754841089 CET	53	58506	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:47.755801916 CET	64631	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:47.893645048 CET	53	64631	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:47.894987106 CET	57373	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:48.034725904 CET	53	57373	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:48.035722017 CET	55781	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:48.177412987 CET	53	55781	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:48.178632975 CET	51716	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:48.317583084 CET	53	51716	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:48.318691969 CET	51219	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:48.457364082 CET	53	51219	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:48.458410025 CET	62407	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:48.596113920 CET	53	62407	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:48.597088099 CET	65505	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:48.734325886 CET	53	65505	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:48.735599995 CET	57024	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:48.874432087 CET	53	57024	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:48.875576019 CET	58205	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:49.014204979 CET	53	58205	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:49.016164064 CET	60324	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:49.157325983 CET	53	60324	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:49.158421993 CET	49816	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:49.296706915 CET	53	49816	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:49.297827959 CET	57592	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:49.437644005 CET	53	57592	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:49.438781023 CET	57062	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:49.576941967 CET	53	57062	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:49.577919960 CET	56218	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:49.717070103 CET	53	56218	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:49.717941046 CET	57657	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:49.855618000 CET	53	57657	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:49.856631041 CET	53614	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:49.997138023 CET	53	53614	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:49.998053074 CET	53563	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:50.135854959 CET	53	53563	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:50.136972904 CET	50132	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:50.276164055 CET	53	50132	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:50.277302027 CET	56753	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:50.415467978 CET	53	56753	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:50.416618109 CET	62302	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:50.555531025 CET	53	62302	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:50.556526899 CET	56579	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:50.695044041 CET	53	56579	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:50.696150064 CET	59150	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:50.834203005 CET	53	59150	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:50.835479975 CET	52525	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:50.975619078 CET	53	52525	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:50.976527929 CET	60885	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:51.116460085 CET	53	60885	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:51.117464066 CET	53230	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:51.254885912 CET	53	53230	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:51.256103039 CET	56064	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:51.395380020 CET	53	56064	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:51.396697044 CET	63963	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:51.539180994 CET	53	63963	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:51.540262938 CET	65383	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:51.868372917 CET	53	65383	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:51.869445086 CET	61535	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:52.011770010 CET	53	61535	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:52.012799978 CET	55131	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:52.150268078 CET	53	55131	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:52.151356936 CET	49580	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:52.289298058 CET	53	49580	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:52.290993929 CET	63564	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:52.429142952 CET	53	63564	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:52.430154085 CET	62589	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:52.568630934 CET	53	62589	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:52.569504976 CET	58336	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:52.707875013 CET	53	58336	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:52.708605051 CET	58611	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:52.847740889 CET	53	58611	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:52.848617077 CET	63033	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:52.988607883 CET	53	63033	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:52.989814043 CET	60100	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:53.128427029 CET	53	60100	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:53.129319906 CET	57809	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:53.267308950 CET	53	57809	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:53.268512964 CET	61351	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:53.406745911 CET	53	61351	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:53.407922029 CET	55292	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:53.545854092 CET	53	55292	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:53.547068119 CET	52694	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:53.685390949 CET	53	52694	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:53.686636925 CET	52766	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:53.825956106 CET	53	52766	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:53.827151060 CET	54096	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:53.967068911 CET	53	54096	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:53.968226910 CET	60400	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:54.112718105 CET	53	60400	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:54.113723040 CET	59927	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:54.252193928 CET	53	59927	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:54.253317118 CET	55131	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:54.392106056 CET	53	55131	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:54.393237114 CET	58437	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:54.531677961 CET	53	58437	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:54.532933950 CET	61258	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:54.670727015 CET	53	61258	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:54.671788931 CET	58018	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:54.810786963 CET	53	58018	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:54.813885927 CET	51925	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:54.951756001 CET	53	51925	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:54.952810049 CET	49868	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:55.093310118 CET	53	49868	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:55.094276905 CET	55775	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:55.233196020 CET	53	55775	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:55.234246969 CET	53458	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:55.372767925 CET	53	53458	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:55.373785973 CET	56533	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:55.511657953 CET	53	56533	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:55.512610912 CET	60548	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:55.651827097 CET	53	60548	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:55.652884960 CET	50597	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:55.794485092 CET	53	50597	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:55.795511961 CET	56443	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:55.932909012 CET	53	56443	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:55.933914900 CET	57030	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:56.075628996 CET	53	57030	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:56.076822996 CET	62147	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:56.214531898 CET	53	62147	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:56.215589046 CET	54674	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:56.354051113 CET	53	54674	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:56.355436087 CET	54747	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:56.493305922 CET	53	54747	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:56.494328022 CET	53933	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:56.632721901 CET	53	53933	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:56.633703947 CET	62244	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:56.772201061 CET	53	62244	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:56.773974895 CET	53008	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:56.914294958 CET	53	53008	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:56.915724039 CET	52067	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:57.053807974 CET	53	52067	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:57.055124044 CET	55945	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:57.192754984 CET	53	55945	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:57.193572998 CET	56529	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:57.331270933 CET	53	56529	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:57.332643032 CET	51897	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:57.471093893 CET	53	51897	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:57.472215891 CET	62878	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:57.610122919 CET	53	62878	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:57.611112118 CET	60751	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:57.748724937 CET	53	60751	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:57.749906063 CET	49565	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:57.888461113 CET	53	49565	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:57.890156984 CET	51874	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:58.028090954 CET	53	51874	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:58.029191017 CET	63757	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:58.167619944 CET	53	63757	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:58.168642998 CET	51487	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:58.307115078 CET	53	51487	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:58.308131933 CET	65322	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:58.446716070 CET	53	65322	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:58.447628975 CET	52891	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:58.586639881 CET	53	52891	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:58.587551117 CET	49289	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:58.729547977 CET	53	49289	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:58.730710983 CET	53060	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:58.869535923 CET	53	53060	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:58.870481014 CET	53053	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:59.007369041 CET	53	53053	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:59.008438110 CET	51052	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:59.146598101 CET	53	51052	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:59.147730112 CET	58851	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:59.287152052 CET	53	58851	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:59.288150072 CET	60892	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:59.426642895 CET	53	60892	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:59.427900076 CET	56563	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:59.565706015 CET	53	56563	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:59.566862106 CET	65118	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:59.705001116 CET	53	65118	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:59.706150055 CET	52717	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:59.846765995 CET	53	52717	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:59.847758055 CET	59636	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:42:59.985414982 CET	53	59636	1.1.1.1	192.168.2.5
Dec 12, 2024 12:42:59.986279964 CET	64220	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:00.124664068 CET	53	64220	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:00.125905991 CET	55437	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:00.266505003 CET	53	55437	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:00.267716885 CET	61808	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:00.410343885 CET	53	61808	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:00.411648035 CET	49592	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:00.550097942 CET	53	49592	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:00.551054955 CET	59962	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:00.690319061 CET	53	59962	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:00.691368103 CET	64989	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:00.830504894 CET	53	64989	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:00.831597090 CET	57190	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:00.970153093 CET	53	57190	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:00.971654892 CET	60036	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:01.110091925 CET	53	60036	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:01.111212015 CET	54522	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:01.249535084 CET	53	54522	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:01.250511885 CET	50465	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:01.387864113 CET	53	50465	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:01.388906002 CET	53543	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:01.526318073 CET	53	53543	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:01.527411938 CET	51728	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:01.699474096 CET	53	51728	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:01.700540066 CET	63767	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:01.840152979 CET	53	63767	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:01.841109037 CET	62207	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:01.985375881 CET	53	62207	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:01.986381054 CET	50315	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:02.130429983 CET	53	50315	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:02.131654024 CET	57033	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:02.269696951 CET	53	57033	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:02.270876884 CET	51380	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:02.408776999 CET	53	51380	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:02.409976006 CET	63399	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:02.548458099 CET	53	63399	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:02.549521923 CET	65272	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:02.689382076 CET	53	65272	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:02.690535069 CET	53432	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:02.828805923 CET	53	53432	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:02.829730034 CET	57176	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:02.860707998 CET	53	62672	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:02.974415064 CET	53	57176	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:02.975368977 CET	62305	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:03.120842934 CET	53	62305	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:03.121920109 CET	55506	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:03.259913921 CET	53	55506	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:03.260845900 CET	62365	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:03.399096012 CET	53	62365	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:03.400130033 CET	55047	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:03.538358927 CET	53	55047	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:03.539323092 CET	60219	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:03.677459955 CET	53	60219	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:03.678697109 CET	58291	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:03.817200899 CET	53	58291	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:03.829370975 CET	54936	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:03.970096111 CET	53	54936	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:03.988148928 CET	50139	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:04.119383097 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:04.119651079 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:04.119921923 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:04.120006084 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:04.127466917 CET	53	50139	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:04.128436089 CET	53336	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:04.266875029 CET	53	53336	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:04.267875910 CET	53302	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:04.405770063 CET	53	53302	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:04.407134056 CET	61336	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:04.550662994 CET	53	61336	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:04.551981926 CET	49594	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:04.690926075 CET	53	49594	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:04.692090988 CET	56916	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:04.829391956 CET	53	56916	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:04.830637932 CET	51410	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:04.962152958 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:04.962152958 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:04.974344969 CET	53	51410	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:04.975579977 CET	54635	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:05.115442991 CET	53	54635	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:05.116607904 CET	63760	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:05.132540941 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:05.132606983 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:05.132678032 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:05.132791996 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:05.133549929 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:05.148125887 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:05.204406977 CET	443	54932	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:05.205091953 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:05.241835117 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:05.254405022 CET	53	63760	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:05.255455017 CET	49764	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:05.277662039 CET	443	54932	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:05.277692080 CET	443	54932	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:05.277812004 CET	443	54932	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:05.277818918 CET	443	54932	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:05.278064966 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:05.278125048 CET	443	54932	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:05.278476954 CET	443	54932	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:05.278826952 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:05.278896093 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:05.279033899 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:05.393945932 CET	53	49764	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:05.395026922 CET	62262	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:05.447058916 CET	443	54932	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:05.447753906 CET	443	54932	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:05.448446989 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:05.462862015 CET	443	54932	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:05.515197992 CET	443	54932	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:05.515381098 CET	443	54932	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:05.515850067 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:05.518871069 CET	443	54932	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:05.534050941 CET	53	62262	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:05.535129070 CET	49652	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:05.554337025 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:05.592170000 CET	443	54932	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:05.592618942 CET	443	54932	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:05.632973909 CET	54932	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:43:05.674988985 CET	53	49652	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:05.676259041 CET	57566	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:05.762670040 CET	443	54932	172.64.41.3	192.168.2.5
Dec 12, 2024 12:43:05.816265106 CET	53	57566	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:05.817363024 CET	52368	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:05.962593079 CET	53	52368	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:05.963509083 CET	52952	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:06.107867002 CET	53	52952	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:06.109018087 CET	62544	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:06.253638029 CET	53	62544	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:06.254827976 CET	65421	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:06.399941921 CET	53	65421	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:06.401046038 CET	57046	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:06.543806076 CET	53	57046	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:06.544872999 CET	54747	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:06.683486938 CET	53	54747	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:06.684499025 CET	50066	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:06.824584961 CET	53	50066	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:06.825880051 CET	60488	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:06.964174032 CET	53	60488	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:06.966109991 CET	49729	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:07.103739023 CET	53	49729	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:07.104986906 CET	64060	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:07.242306948 CET	53	64060	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:07.243355036 CET	60284	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:07.381290913 CET	53	60284	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:07.382525921 CET	49465	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:07.520473003 CET	53	49465	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:07.521652937 CET	61099	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:07.660187006 CET	53	61099	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:07.661705017 CET	50946	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:07.800111055 CET	53	50946	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:07.801410913 CET	54335	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:07.939218044 CET	53	54335	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:07.940466881 CET	58009	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:08.079950094 CET	53	58009	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:08.081079006 CET	49337	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:08.219233990 CET	53	49337	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:08.220463991 CET	62220	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:08.358613014 CET	53	62220	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:08.359532118 CET	62804	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:08.498330116 CET	53	62804	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:08.499365091 CET	56854	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:08.639549017 CET	53	56854	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:08.640727997 CET	57817	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:08.778497934 CET	53	57817	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:08.779686928 CET	49611	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:08.917980909 CET	53	49611	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:08.919078112 CET	56698	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:09.066348076 CET	53	56698	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:09.067365885 CET	61089	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:09.209398985 CET	53	61089	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:09.210486889 CET	62890	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:09.350960970 CET	53	62890	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:09.352195978 CET	56207	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:09.490053892 CET	53	56207	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:09.491149902 CET	54516	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:09.629626989 CET	53	54516	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:09.630549908 CET	58022	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:09.769315004 CET	53	58022	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:09.770334005 CET	60634	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:09.912182093 CET	53	60634	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:09.913168907 CET	52854	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:10.052778959 CET	53	52854	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:10.053822994 CET	54115	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:10.191579103 CET	53	54115	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:10.194240093 CET	54466	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:10.333272934 CET	53	54466	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:10.334507942 CET	56597	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:10.473459005 CET	53	56597	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:10.474647999 CET	65250	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:10.613356113 CET	53	65250	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:10.614387989 CET	65138	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:10.753593922 CET	53	65138	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:10.754868031 CET	62809	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:10.893212080 CET	53	62809	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:10.894453049 CET	49217	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:11.033052921 CET	53	49217	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:11.034166098 CET	64119	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:11.173311949 CET	53	64119	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:11.174698114 CET	56398	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:11.312809944 CET	53	56398	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:11.313956022 CET	63218	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:11.451102972 CET	53	63218	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:11.453938007 CET	52037	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:11.592223883 CET	53	52037	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:11.595478058 CET	52003	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:11.733984947 CET	53	52003	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:11.735042095 CET	57270	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:11.873029947 CET	53	57270	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:11.874131918 CET	64886	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:12.011914015 CET	53	64886	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:12.013042927 CET	53435	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:12.155256987 CET	53	53435	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:12.156272888 CET	59776	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:12.295161009 CET	53	59776	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:12.296382904 CET	56841	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:12.434139967 CET	53	56841	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:12.435122013 CET	65128	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:12.575436115 CET	53	65128	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:12.576575041 CET	59415	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:12.715900898 CET	53	59415	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:12.716991901 CET	57311	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:12.854794979 CET	53	57311	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:12.855832100 CET	51354	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:12.993949890 CET	53	51354	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:12.994959116 CET	57573	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:13.134246111 CET	53	57573	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:13.135545015 CET	61373	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:13.277658939 CET	53	61373	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:13.278819084 CET	56203	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:13.417001009 CET	53	56203	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:13.418143034 CET	61066	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:13.556751966 CET	53	61066	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:13.557754040 CET	61279	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:13.695456982 CET	53	61279	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:13.696528912 CET	51220	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:13.836016893 CET	53	51220	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:13.836993933 CET	53355	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:13.975649118 CET	53	53355	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:13.976502895 CET	54688	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:14.119429111 CET	53	54688	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:14.120512962 CET	59069	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:14.259010077 CET	53	59069	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:14.260066032 CET	59874	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:14.399717093 CET	53	59874	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:14.401107073 CET	64942	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:14.539041042 CET	53	64942	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:14.540410995 CET	55205	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:14.679155111 CET	53	55205	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:14.686512947 CET	59643	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:14.823652029 CET	53	59643	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:14.824809074 CET	51523	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:14.962981939 CET	53	51523	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:14.964191914 CET	65376	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:15.102987051 CET	53	65376	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:15.104394913 CET	63180	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:15.241925001 CET	53	63180	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:15.243511915 CET	61198	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:15.384902954 CET	53	61198	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:15.386429071 CET	62440	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:15.527139902 CET	53	62440	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:15.528153896 CET	64282	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:15.666923046 CET	53	64282	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:15.668344975 CET	52015	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:15.808090925 CET	53	52015	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:15.809705973 CET	50574	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:15.948014021 CET	53	50574	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:15.949068069 CET	53479	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:16.091568947 CET	53	53479	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:16.093005896 CET	52821	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:16.232695103 CET	53	52821	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:16.233726978 CET	52135	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:16.372461081 CET	53	52135	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:16.376441002 CET	60124	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:16.516011953 CET	53	60124	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:16.517137051 CET	49514	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:16.658198118 CET	53	49514	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:16.659410000 CET	59897	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:16.800523996 CET	53	59897	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:16.802062035 CET	60767	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:16.940139055 CET	53	60767	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:16.941668987 CET	63837	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:17.080956936 CET	53	63837	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:17.082027912 CET	65115	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:17.221240997 CET	53	65115	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:17.222531080 CET	62062	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:17.361469030 CET	53	62062	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:17.362562895 CET	64195	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:17.501168013 CET	53	64195	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:17.502563000 CET	64829	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:17.641345978 CET	53	64829	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:17.642446041 CET	58492	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:17.782207012 CET	53	58492	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:17.783618927 CET	51089	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:17.922270060 CET	53	51089	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:17.923608065 CET	61849	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:18.061323881 CET	53	61849	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:18.062500954 CET	50549	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:18.200579882 CET	53	50549	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:18.203178883 CET	60982	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:18.340907097 CET	53	60982	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:18.343035936 CET	54433	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:18.488897085 CET	53	54433	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:18.491095066 CET	51072	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:18.631097078 CET	53	51072	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:18.635184050 CET	63347	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:18.773400068 CET	53	63347	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:18.774466991 CET	59281	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:18.912059069 CET	53	59281	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:18.913058996 CET	61737	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:19.053255081 CET	53	61737	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:19.054382086 CET	50724	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:19.192584038 CET	53	50724	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:19.193521023 CET	52079	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:19.335294962 CET	52079	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:19.336544991 CET	53	52079	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:19.337476015 CET	64195	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:19.472754955 CET	53	52079	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:19.475377083 CET	53	64195	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:19.476891041 CET	58635	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:19.617536068 CET	53	58635	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:19.618833065 CET	58020	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:19.773144007 CET	58020	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:19.918551922 CET	53	58020	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:19.918699980 CET	53	58020	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:19.919686079 CET	57641	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:20.058631897 CET	53	57641	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:20.059874058 CET	55501	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:20.198390007 CET	53	55501	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:20.199317932 CET	53034	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:20.339792013 CET	53	53034	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:20.340774059 CET	59989	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:20.478847980 CET	53	59989	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:20.497170925 CET	61418	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:20.635174990 CET	53	61418	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:20.636137009 CET	60989	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:20.774717093 CET	53	60989	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:20.794497967 CET	56010	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:20.933037996 CET	53	56010	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:20.934990883 CET	52278	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:21.073045969 CET	53	52278	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:21.074089050 CET	52395	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:21.211400032 CET	53	52395	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:21.212481976 CET	53095	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:21.350133896 CET	53	53095	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:21.351192951 CET	56400	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:21.489387035 CET	53	56400	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:21.490519047 CET	61231	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:21.628592014 CET	53	61231	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:21.630146027 CET	65117	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:21.768162012 CET	53	65117	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:21.769294024 CET	61202	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:21.907700062 CET	53	61202	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:21.911344051 CET	65254	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:22.050355911 CET	53	65254	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:22.051745892 CET	52318	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:22.189868927 CET	53	52318	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:22.190973997 CET	56948	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:22.331224918 CET	53	56948	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:22.332468033 CET	52623	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:22.470061064 CET	53	52623	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:22.473735094 CET	53586	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:22.612679005 CET	53	53586	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:22.613706112 CET	58059	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:22.753412962 CET	53	58059	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:22.754709005 CET	64859	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:22.893210888 CET	53	64859	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:22.894375086 CET	49464	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:23.032100916 CET	53	49464	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:23.037094116 CET	65241	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:23.174436092 CET	53	65241	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:23.175477028 CET	59417	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:23.316607952 CET	53	59417	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:23.320609093 CET	54317	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:23.464540958 CET	53	54317	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:23.491158962 CET	63427	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:23.630465984 CET	53	63427	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:23.631983995 CET	54086	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:23.771189928 CET	53	54086	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:23.772254944 CET	60469	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:23.910747051 CET	53	60469	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:23.913762093 CET	60469	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:23.914453030 CET	49472	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:24.051683903 CET	53	60469	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:24.052032948 CET	53	49472	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:24.053040981 CET	53112	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:24.193380117 CET	53	53112	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:24.194556952 CET	60702	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:24.331754923 CET	53	60702	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:24.332747936 CET	63369	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:24.470454931 CET	53	63369	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:24.471487045 CET	53440	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:24.609860897 CET	53	53440	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:24.611011028 CET	54545	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:24.749130964 CET	53	54545	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:24.750184059 CET	56854	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:24.890145063 CET	53	56854	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:24.891118050 CET	55355	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:25.030067921 CET	53	55355	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:25.031244040 CET	57325	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:25.170224905 CET	53	57325	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:25.171370983 CET	57192	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:25.308748960 CET	53	57192	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:25.313096046 CET	53176	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:25.451168060 CET	53	53176	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:25.452183962 CET	57768	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:25.592644930 CET	53	57768	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:25.593679905 CET	58346	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:25.731381893 CET	53	58346	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:25.734524012 CET	65195	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:25.872819901 CET	53	65195	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:25.889550924 CET	65195	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:25.923089027 CET	58622	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:26.027625084 CET	53	65195	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:26.063163996 CET	53	58622	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:26.070754051 CET	58622	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:26.096678019 CET	62900	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:26.208412886 CET	53	58622	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:26.239695072 CET	53	62900	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:26.240621090 CET	63885	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:26.386085033 CET	63885	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:26.388928890 CET	53	63885	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:26.389864922 CET	60604	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:26.525358915 CET	53	63885	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:26.528944969 CET	53	60604	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:26.529911995 CET	58113	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:26.669828892 CET	53	58113	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:26.670819044 CET	59740	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:26.808315992 CET	53	59740	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:26.810264111 CET	53441	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:26.948295116 CET	53	53441	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:26.950184107 CET	60007	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:27.093492031 CET	53	60007	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:27.095139980 CET	64116	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:27.240609884 CET	53	64116	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:27.241831064 CET	50854	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:27.390934944 CET	53	50854	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:27.392062902 CET	51409	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:27.534060955 CET	53	51409	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:27.535259008 CET	51395	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:27.675983906 CET	53	51395	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:27.679965973 CET	54684	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:27.818865061 CET	53	54684	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:27.822941065 CET	53973	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:27.963877916 CET	53	53973	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:27.965068102 CET	56982	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:28.102849007 CET	53	56982	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:28.106991053 CET	56461	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:28.248754025 CET	53	56461	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:28.256839991 CET	50805	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:28.395441055 CET	53	50805	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:28.419523954 CET	50805	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:28.423855066 CET	59889	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:28.557049036 CET	53	50805	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:28.562062025 CET	53	59889	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:28.571253061 CET	56726	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:28.708987951 CET	53	56726	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:28.711158991 CET	57713	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:28.850096941 CET	53	57713	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:28.851263046 CET	64535	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:28.989651918 CET	53	64535	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:28.990649939 CET	57011	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:29.130480051 CET	53	57011	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:29.132036924 CET	54035	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:29.271786928 CET	53	54035	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:29.273184061 CET	56813	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:29.414725065 CET	53	56813	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:29.416111946 CET	54087	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:29.554162979 CET	53	54087	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:29.555103064 CET	57092	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:29.701570988 CET	53	57092	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:29.702528954 CET	54217	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:29.852338076 CET	54217	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:29.919771910 CET	53	54217	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:29.924906015 CET	61791	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:29.989453077 CET	53	54217	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:30.070267916 CET	61791	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:30.250756025 CET	53	61791	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:30.250763893 CET	53	61791	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:30.252104998 CET	65143	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:30.420419931 CET	65143	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:30.471107960 CET	53	65143	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:30.473144054 CET	51150	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:30.559382915 CET	53	65143	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:30.637861967 CET	51150	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:30.804264069 CET	53	51150	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:30.804670095 CET	53	51150	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:30.805440903 CET	53691	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:30.961322069 CET	53691	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:31.029545069 CET	53	53691	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:31.030863047 CET	60933	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:31.101246119 CET	53	53691	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:31.180135012 CET	60933	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:31.264857054 CET	53	60933	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:31.266105890 CET	60459	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:31.320398092 CET	53	60933	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:31.414614916 CET	60459	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:31.596951962 CET	53	60459	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:31.596978903 CET	53	60459	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:31.598193884 CET	61740	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:31.745907068 CET	61740	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:31.817683935 CET	53	61740	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:31.819067001 CET	59182	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:31.883538008 CET	53	61740	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:31.962250948 CET	59182	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:32.039772034 CET	53	59182	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:32.041104078 CET	55053	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:32.099802017 CET	53	59182	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:32.196666956 CET	55053	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:32.260021925 CET	53	55053	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:32.264585018 CET	58875	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:32.339574099 CET	53	55053	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:32.420707941 CET	58875	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:32.490350008 CET	53	58875	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:32.494467974 CET	63560	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:32.559906006 CET	53	58875	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:32.651894093 CET	63560	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:32.807718992 CET	53	63560	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:32.807806015 CET	53	63560	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:32.808825970 CET	64197	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:32.975692034 CET	64197	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:33.026333094 CET	53	64197	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:33.027620077 CET	59246	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:33.113573074 CET	53	64197	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:33.178786993 CET	59246	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:33.356221914 CET	53	59246	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:33.356281996 CET	53	59246	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:33.357929945 CET	61185	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:33.526062965 CET	61185	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:33.669632912 CET	53	61185	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:33.669677973 CET	53	61185	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:33.670602083 CET	54975	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:33.838140965 CET	54975	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:33.890772104 CET	53	54975	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:33.898138046 CET	61150	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:33.975850105 CET	53	54975	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:34.054236889 CET	61150	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:34.200854063 CET	53	61150	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:34.200905085 CET	53	61150	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:34.201766014 CET	51494	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:34.367352009 CET	51494	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:34.423633099 CET	53	51494	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:34.424863100 CET	56011	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:34.505815029 CET	53	51494	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:34.570148945 CET	56011	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:34.755595922 CET	53	56011	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:34.755733967 CET	53	56011	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:34.756766081 CET	49618	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:34.898035049 CET	49618	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:34.975024939 CET	53	49618	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:34.976299047 CET	57929	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:35.035813093 CET	53	49618	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:35.132481098 CET	57929	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:35.285624027 CET	53	57929	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:35.285659075 CET	53	57929	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:35.286988974 CET	53444	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:35.429290056 CET	53444	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:35.697804928 CET	53	53444	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:35.697848082 CET	53	53444	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:35.698852062 CET	50187	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:35.851216078 CET	50187	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:35.915821075 CET	53	50187	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:35.918067932 CET	51171	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:35.988652945 CET	53	50187	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:36.076216936 CET	51171	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:36.136884928 CET	53	51171	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:36.139096975 CET	52629	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:36.213675022 CET	53	51171	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:36.306485891 CET	52629	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:36.466893911 CET	53	52629	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:36.467055082 CET	53	52629	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:36.471070051 CET	61255	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:36.634136915 CET	61255	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:36.801783085 CET	53	61255	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:36.801812887 CET	53	61255	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:36.802849054 CET	54970	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:36.944762945 CET	54970	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:37.027230024 CET	53	54970	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:37.028383970 CET	52644	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:37.082355022 CET	53	54970	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:37.179115057 CET	52644	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:37.261421919 CET	53	52644	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:37.267287016 CET	64156	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:37.316865921 CET	53	52644	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:37.413475990 CET	64156	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:37.487478018 CET	53	64156	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:37.488377094 CET	50088	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:37.551419020 CET	53	64156	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:37.632251978 CET	50088	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:37.712160110 CET	53	50088	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:37.713376045 CET	60683	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:37.769685030 CET	53	50088	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:37.866698980 CET	60683	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:37.932023048 CET	53	60683	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:37.936326027 CET	56725	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:38.004156113 CET	53	60683	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:38.096823931 CET	56725	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:38.153424025 CET	53	56725	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:38.159395933 CET	65188	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:38.234428883 CET	53	56725	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:38.328396082 CET	65188	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:38.383793116 CET	53	65188	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:38.387389898 CET	55583	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:38.465454102 CET	53	65188	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:38.546147108 CET	55583	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:38.700560093 CET	53	55583	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:38.700575113 CET	53	55583	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:38.706146955 CET	57711	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:38.850384951 CET	57711	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:38.927674055 CET	53	57711	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:38.929025888 CET	49610	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:38.987484932 CET	53	57711	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:39.084825039 CET	49610	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:39.154869080 CET	53	49610	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:39.156028032 CET	60301	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:39.222023964 CET	53	49610	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:39.317095995 CET	60301	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:39.381241083 CET	53	60301	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:39.382211924 CET	61493	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:39.454972982 CET	53	60301	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:39.539711952 CET	61493	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:39.605562925 CET	53	61493	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:39.606699944 CET	55696	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:39.677206039 CET	53	61493	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:39.773562908 CET	55696	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:39.826128006 CET	53	55696	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:39.834237099 CET	53813	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:39.911812067 CET	53	55696	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:39.994240999 CET	53813	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:40.055247068 CET	53	53813	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:40.062237978 CET	64460	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:40.133650064 CET	53	53813	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:40.209815025 CET	64460	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:40.282660007 CET	53	64460	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:40.283621073 CET	51952	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:40.347377062 CET	53	64460	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:40.428570986 CET	51952	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:40.507590055 CET	53	51952	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:40.510766983 CET	60705	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:40.565557003 CET	53	51952	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:40.666265011 CET	60705	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:40.842727900 CET	53	60705	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:40.842753887 CET	53	60705	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:40.843925953 CET	52945	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:40.994290113 CET	52945	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:41.060975075 CET	53	52945	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:41.063381910 CET	63009	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:41.132371902 CET	53	52945	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:41.210798025 CET	63009	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:41.284120083 CET	53	63009	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:41.318751097 CET	53330	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:41.348401070 CET	53	63009	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:41.460329056 CET	53330	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:41.538773060 CET	53	53330	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:41.539697886 CET	51438	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:41.597692966 CET	53	53330	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:41.697069883 CET	51438	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:41.766575098 CET	53	51438	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:41.767791033 CET	56915	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:41.834813118 CET	53	51438	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:41.930270910 CET	56915	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:42.077411890 CET	53	56915	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:42.077436924 CET	53	56915	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:42.078743935 CET	57956	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:42.241731882 CET	57956	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:42.389764071 CET	53	57956	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:42.389771938 CET	53	57956	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:42.394257069 CET	57609	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:42.538753033 CET	57609	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:42.612133026 CET	53	57609	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:42.614162922 CET	57290	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:42.676239014 CET	53	57609	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:42.757652998 CET	57290	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:42.839031935 CET	53	57290	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:42.840624094 CET	53822	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:42.924197912 CET	53	57290	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:42.992072105 CET	53822	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:43.149990082 CET	53	53822	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:43.150002003 CET	53	53822	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:43.151432991 CET	52013	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:43.304632902 CET	52013	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:43.465027094 CET	53	52013	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:43.465039968 CET	53	52013	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:43.466011047 CET	63438	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:43.616981030 CET	63438	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:43.690589905 CET	53	63438	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:43.691680908 CET	53134	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:43.754136086 CET	53	63438	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:43.842159033 CET	53134	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:43.911386013 CET	53	53134	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:43.912349939 CET	58543	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:43.979242086 CET	53	53134	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:44.070156097 CET	58543	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:44.252180099 CET	53	58543	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:44.252190113 CET	53	58543	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:44.253587961 CET	63155	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:44.414154053 CET	63155	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:44.474611998 CET	53	63155	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:44.475744009 CET	60767	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:44.553209066 CET	53	63155	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:44.618151903 CET	60767	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:44.696363926 CET	53	60767	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:44.697556973 CET	52382	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:44.755297899 CET	53	60767	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:44.855161905 CET	52382	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:44.917432070 CET	53	52382	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:44.918744087 CET	53826	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:44.992580891 CET	53	52382	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:45.088574886 CET	53826	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:45.229774952 CET	53	53826	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:45.229790926 CET	53	53826	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:45.231426954 CET	54673	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:45.397505045 CET	54673	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:45.448113918 CET	53	54673	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:45.448945045 CET	55545	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:45.534545898 CET	53	54673	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:45.601078987 CET	55545	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:45.670725107 CET	53	55545	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:45.672161102 CET	53054	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:45.738344908 CET	53	55545	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:45.835227966 CET	53054	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:46.003420115 CET	53	53054	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:46.003849983 CET	53	53054	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:46.007343054 CET	53909	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:46.163772106 CET	53909	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:46.224677086 CET	53	53909	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:46.230165005 CET	58059	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:46.301438093 CET	53	53909	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:46.386164904 CET	58059	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:46.447190046 CET	53	58059	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:46.448738098 CET	53293	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:46.523591042 CET	53	58059	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:46.600827932 CET	53293	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:46.673264027 CET	53	53293	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:46.676755905 CET	53005	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:46.738120079 CET	53	53293	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:46.819310904 CET	53005	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:46.900062084 CET	53	53005	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:46.904670954 CET	50234	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:46.956700087 CET	53	53005	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:47.053680897 CET	50234	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:47.124502897 CET	53	50234	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:47.125807047 CET	54994	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:47.191549063 CET	53	50234	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:47.272424936 CET	54994	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:47.345943928 CET	53	54994	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:47.347171068 CET	50344	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:47.410162926 CET	53	54994	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:47.506480932 CET	50344	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:47.564719915 CET	53	50344	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:47.565630913 CET	55233	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:47.643704891 CET	53	50344	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:47.723367929 CET	55233	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:47.782500982 CET	53	55233	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:47.783596039 CET	53757	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:47.861097097 CET	53	55233	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:47.950167894 CET	53757	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:48.097717047 CET	53	53757	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:48.097866058 CET	53	53757	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:48.102166891 CET	53465	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:48.244075060 CET	53465	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:48.325062037 CET	53	53465	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:48.326116085 CET	57787	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:48.384188890 CET	53	53465	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:48.478528023 CET	57787	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:48.546104908 CET	53	57787	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:48.547147989 CET	64039	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:48.615463972 CET	53	57787	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:48.697134018 CET	64039	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:48.857176065 CET	53	64039	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:48.857220888 CET	53	64039	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:48.858114958 CET	60011	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:49.009637117 CET	60011	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:49.075071096 CET	53	60011	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:49.076405048 CET	59477	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:49.147051096 CET	53	60011	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:49.228734970 CET	59477	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:49.300185919 CET	53	59477	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:49.301429987 CET	65090	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:49.366478920 CET	53	59477	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:49.449899912 CET	65090	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:49.632309914 CET	53	65090	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:49.632355928 CET	53	65090	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:49.633863926 CET	51708	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:49.792942047 CET	51708	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:49.858078957 CET	53	51708	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:49.858911037 CET	54971	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:49.930244923 CET	53	51708	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:50.026173115 CET	54971	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:50.084022999 CET	53	54971	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:50.091110945 CET	55561	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:50.163710117 CET	53	54971	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:50.242178917 CET	55561	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:50.309070110 CET	53	55561	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:50.314173937 CET	56472	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:50.383431911 CET	53	55561	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:50.460588932 CET	56472	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:50.534209013 CET	53	56472	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:50.535283089 CET	55425	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:50.606163979 CET	53	56472	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:50.698788881 CET	55425	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:50.758253098 CET	53	55425	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:50.761765003 CET	51976	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:50.836342096 CET	53	55425	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:50.929730892 CET	51976	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:50.985208035 CET	53	51976	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:50.986609936 CET	61916	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:51.067284107 CET	53	51976	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:51.147802114 CET	61916	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:51.214267015 CET	53	61916	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:51.215346098 CET	62182	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:51.285327911 CET	53	61916	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:51.366691113 CET	62182	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:51.436696053 CET	53	62182	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:51.438215017 CET	65284	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:51.504283905 CET	53	62182	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:51.600879908 CET	65284	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:51.656397104 CET	53	65284	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:51.657568932 CET	63174	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:51.738147974 CET	53	65284	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:51.804081917 CET	63174	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:51.875509024 CET	53	63174	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:51.880227089 CET	51632	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:51.941963911 CET	53	63174	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:52.022553921 CET	51632	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:52.101017952 CET	53	51632	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:52.103255987 CET	60587	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:52.160351038 CET	53	51632	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:52.257586956 CET	60587	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:52.326657057 CET	53	60587	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:52.328195095 CET	56415	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:52.395005941 CET	53	60587	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:52.477732897 CET	56415	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:52.545689106 CET	53	56415	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:52.546833992 CET	59182	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:52.616543055 CET	53	56415	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:52.694596052 CET	59182	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:52.767647028 CET	53	59182	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:52.769354105 CET	52071	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:52.833642006 CET	53	59182	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:52.913141012 CET	52071	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:52.993544102 CET	53	52071	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:52.994870901 CET	60811	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:53.051368952 CET	53	52071	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:53.153770924 CET	60811	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:53.212743044 CET	53	60811	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:53.213924885 CET	51281	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:53.291415930 CET	53	60811	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:53.383128881 CET	51281	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:53.437978983 CET	53	51281	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:53.439028025 CET	49944	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:53.520528078 CET	53	51281	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:53.597353935 CET	49944	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:53.661088943 CET	53	49944	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:53.662252903 CET	63478	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:53.735409021 CET	53	49944	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:53.819478989 CET	63478	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:53.887105942 CET	53	63478	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:53.891088963 CET	57122	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:53.958134890 CET	53	63478	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:54.038830042 CET	57122	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:54.111170053 CET	53	57122	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:54.115185976 CET	62851	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:54.176697016 CET	53	57122	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:54.257160902 CET	62851	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:54.443389893 CET	53	62851	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:54.443418980 CET	53	62851	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:54.444490910 CET	63722	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:54.602191925 CET	63722	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:54.668287039 CET	53	63722	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:54.669234037 CET	57234	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:54.740020990 CET	53	63722	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:54.821063042 CET	57234	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:54.893452883 CET	53	57234	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:54.894505978 CET	53823	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:54.958741903 CET	53	57234	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:55.038443089 CET	53823	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:55.112256050 CET	53	53823	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:55.113610029 CET	64223	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:55.176002979 CET	53	53823	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:55.261359930 CET	64223	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:55.335369110 CET	53	64223	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:55.342138052 CET	60198	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:55.398910999 CET	53	64223	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:55.507472038 CET	60198	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:55.560514927 CET	53	60198	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:55.561482906 CET	54475	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:55.644769907 CET	53	60198	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:55.726336956 CET	54475	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:55.780999899 CET	53	54475	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:55.782242060 CET	55871	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:55.866995096 CET	53	54475	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:55.934181929 CET	55871	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:56.005198956 CET	53	55871	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:56.009305954 CET	64257	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:56.072458982 CET	53	55871	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:56.163480997 CET	64257	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:56.229469061 CET	53	64257	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:56.232188940 CET	55809	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:56.301235914 CET	53	64257	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:56.384041071 CET	55809	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:56.451555967 CET	53	55809	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:56.453547001 CET	57337	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:56.521303892 CET	53	55809	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:56.622189999 CET	57337	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:56.677028894 CET	53	57337	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:56.682965994 CET	55121	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:56.760231018 CET	53	57337	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:56.852598906 CET	55121	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:56.900707960 CET	53	55121	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:56.901670933 CET	49844	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:56.991338968 CET	53	55121	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:57.069823027 CET	49844	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:57.125643969 CET	53	49844	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:57.127969027 CET	56956	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:57.208101988 CET	53	49844	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:57.286900043 CET	56956	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:57.436839104 CET	53	56956	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:57.437473059 CET	53	56956	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:57.438066006 CET	55271	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:57.585330009 CET	55271	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:57.661708117 CET	53	55271	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:57.662702084 CET	54185	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:57.722515106 CET	53	55271	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:57.804048061 CET	54185	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:57.881684065 CET	53	54185	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:57.885169029 CET	56251	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:57.941735983 CET	53	54185	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:58.040539980 CET	56251	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:58.108917952 CET	53	56251	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:58.114273071 CET	58131	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:58.179251909 CET	53	56251	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:58.257355928 CET	58131	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:58.332906008 CET	53	58131	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:58.333941936 CET	53008	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:58.396111012 CET	53	58131	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:58.476134062 CET	53008	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:58.551687956 CET	53	53008	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:58.553236961 CET	53695	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:58.613461971 CET	53	53008	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:58.696588039 CET	53695	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:58.881311893 CET	53	53695	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:58.881335020 CET	53	53695	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:58.882318974 CET	62038	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:59.043193102 CET	62038	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:59.210089922 CET	53	62038	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:59.210151911 CET	53	62038	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:59.211889982 CET	57869	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:59.370244980 CET	57869	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:59.432354927 CET	53	57869	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:59.433568954 CET	61485	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:59.507989883 CET	53	57869	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:59.601064920 CET	61485	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:59.742455959 CET	53	61485	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:59.742512941 CET	53	61485	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:59.743652105 CET	57595	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:59.897547960 CET	57595	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:43:59.963584900 CET	53	57595	1.1.1.1	192.168.2.5
Dec 12, 2024 12:43:59.964543104 CET	56205	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:00.035033941 CET	53	57595	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:00.116236925 CET	56205	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:00.277822971 CET	53	56205	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:00.277884007 CET	53	56205	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:00.278906107 CET	53626	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:00.428805113 CET	53626	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:00.501523018 CET	53	53626	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:00.504636049 CET	52308	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:00.567925930 CET	53	53626	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:00.648446083 CET	52308	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:00.813035965 CET	53	52308	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:00.813050985 CET	53	52308	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:00.814384937 CET	63697	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:00.960382938 CET	63697	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:01.032210112 CET	53	63697	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:01.033180952 CET	60837	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:01.100131989 CET	53	63697	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:01.197402954 CET	60837	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:01.251703978 CET	53	60837	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:01.252870083 CET	55477	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:01.336802959 CET	53	60837	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:01.414437056 CET	55477	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:01.476964951 CET	53	55477	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:01.477922916 CET	58613	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:01.551984072 CET	53	55477	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:01.633768082 CET	58613	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:01.704139948 CET	53	58613	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:01.705250025 CET	64953	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:01.774231911 CET	53	58613	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:01.876365900 CET	64953	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:01.929497004 CET	53	64953	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:01.930639982 CET	53251	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:02.013396025 CET	53	64953	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:02.089907885 CET	53251	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:02.169398069 CET	53	53251	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:02.170600891 CET	61721	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:02.238084078 CET	53	53251	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:02.335931063 CET	61721	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:02.500591993 CET	53	61721	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:02.500637054 CET	53	61721	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:02.501640081 CET	51486	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:02.667088985 CET	51486	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:02.728589058 CET	53	51486	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:02.729650974 CET	53656	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:02.804647923 CET	53	51486	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:02.885572910 CET	53656	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:02.959979057 CET	53	53656	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:02.960937977 CET	59099	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:03.022929907 CET	53	53656	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:03.132250071 CET	59099	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:03.183557987 CET	53	59099	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:03.184504986 CET	50404	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:03.270380020 CET	53	59099	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:03.335340977 CET	50404	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:03.404488087 CET	53	50404	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:03.405524015 CET	61821	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:03.475786924 CET	53	50404	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:03.553936005 CET	61821	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:03.739320993 CET	53	61821	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:03.739444017 CET	53	61821	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:03.740679979 CET	61427	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:03.882040977 CET	61427	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:03.946278095 CET	61961	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:03.947591066 CET	61961	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:03.947765112 CET	61961	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:03.947881937 CET	61961	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:04.048630953 CET	53	61427	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:04.048701048 CET	53	61427	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:04.049879074 CET	57604	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:04.194514036 CET	57604	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:04.277549982 CET	53	57604	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:04.278655052 CET	62943	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:04.338270903 CET	53	57604	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:04.429075003 CET	62943	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:04.500814915 CET	53	62943	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:04.501996994 CET	55577	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:04.567490101 CET	53	62943	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:04.647811890 CET	55577	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:04.720097065 CET	53	55577	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:04.721401930 CET	62183	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:04.785326004 CET	53	55577	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:04.885972977 CET	62183	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:04.949007034 CET	53	62183	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:04.950330019 CET	59135	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:04.963902950 CET	61961	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:04.963960886 CET	61961	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:04.964358091 CET	59534	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:04.964556932 CET	55098	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:04.964634895 CET	61961	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:04.964675903 CET	61961	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:05.024388075 CET	53	62183	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:05.031944036 CET	443	61961	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:05.034262896 CET	61961	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:05.073115110 CET	61961	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:05.119467974 CET	59135	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:05.170315027 CET	53	59135	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:05.171354055 CET	64786	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:05.260780096 CET	53	59135	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:05.280280113 CET	443	61961	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:05.280302048 CET	443	61961	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:05.280314922 CET	443	61961	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:05.280328035 CET	443	61961	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:05.280340910 CET	443	61961	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:05.280353069 CET	443	61961	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:05.280805111 CET	61961	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:05.280878067 CET	61961	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:05.280914068 CET	61961	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:05.288233995 CET	61961	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:05.336086035 CET	64786	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:05.349222898 CET	443	61961	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:05.382198095 CET	61961	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:05.391309977 CET	53	64786	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:05.392563105 CET	55688	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:05.473876953 CET	53	64786	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:05.538234949 CET	55688	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:05.556572914 CET	51334	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:05.558264971 CET	51334	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:05.558470964 CET	51334	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:05.558569908 CET	51334	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:05.596146107 CET	443	61961	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:05.602962017 CET	443	61961	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:05.614447117 CET	53	55688	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:05.615515947 CET	49780	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:05.632009029 CET	61961	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:05.675709009 CET	53	55688	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:05.757137060 CET	49780	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:05.845828056 CET	53	49780	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:05.846977949 CET	64371	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:05.895785093 CET	53	49780	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:05.993819952 CET	64371	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:06.174873114 CET	53	64371	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:06.174916983 CET	53	64371	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:06.176100016 CET	60201	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:06.319514036 CET	60201	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:06.406616926 CET	53	60201	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:06.410166979 CET	64995	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:06.457794905 CET	53	60201	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:06.554047108 CET	64995	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:06.569719076 CET	51334	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:06.569782019 CET	51334	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:06.570455074 CET	51334	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:06.570501089 CET	51334	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:06.639812946 CET	53	64995	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:06.640940905 CET	55853	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:06.645164013 CET	443	51334	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:06.645648956 CET	51334	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:06.674660921 CET	51334	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:06.694998980 CET	53	64995	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:06.793337107 CET	55853	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:06.867472887 CET	53	55853	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:06.868890047 CET	56224	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:06.884634972 CET	443	51334	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:06.884674072 CET	443	51334	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:06.884702921 CET	443	51334	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:06.884732008 CET	443	51334	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:06.884783030 CET	443	51334	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:06.885123014 CET	51334	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:06.885168076 CET	51334	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:06.885168076 CET	51334	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:06.902740002 CET	51334	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:06.931468964 CET	53	55853	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:06.960500956 CET	443	51334	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:06.996093988 CET	51334	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:07.027517080 CET	56224	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:07.093512058 CET	53	56224	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:07.094810963 CET	63513	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:07.165149927 CET	53	56224	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:07.199132919 CET	443	51334	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:07.199170113 CET	443	51334	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:07.217560053 CET	443	51334	172.64.41.3	192.168.2.5
Dec 12, 2024 12:44:07.240448952 CET	51334	443	192.168.2.5	172.64.41.3
Dec 12, 2024 12:44:07.255950928 CET	63513	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:07.312793016 CET	53	63513	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:07.314084053 CET	54571	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:07.397371054 CET	53	63513	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:07.460375071 CET	54571	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:07.540427923 CET	53	54571	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:07.541503906 CET	57722	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:07.601342916 CET	53	54571	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:07.697371006 CET	57722	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:07.764717102 CET	53	57722	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:07.765713930 CET	51347	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:07.835202932 CET	53	57722	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:07.928651094 CET	51347	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:07.984241962 CET	53	51347	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:07.985488892 CET	50595	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:08.066207886 CET	53	51347	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:08.146223068 CET	50595	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:08.202857971 CET	53	50595	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:08.204040051 CET	55747	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:08.283596039 CET	53	50595	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:08.366647005 CET	55747	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:08.424316883 CET	53	55747	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:08.426847935 CET	62476	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:08.504528999 CET	53	55747	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:08.570593119 CET	62476	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:08.651756048 CET	53	62476	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:08.652853966 CET	56326	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:08.708466053 CET	53	62476	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:08.819602013 CET	56326	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:08.987654924 CET	53	56326	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:08.987776995 CET	53	56326	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:08.989013910 CET	61698	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:09.132114887 CET	61698	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:09.208889961 CET	53	61698	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:09.210398912 CET	61438	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:09.269902945 CET	53	61698	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:09.366401911 CET	61438	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:09.432917118 CET	53	61438	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:09.435506105 CET	54586	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:09.504257917 CET	53	61438	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:09.585308075 CET	54586	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:09.655889988 CET	53	54586	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:09.657109022 CET	60491	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:09.725187063 CET	53	54586	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:09.804044008 CET	60491	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:09.877620935 CET	53	60491	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:09.878978968 CET	50085	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:09.941556931 CET	53	60491	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:10.022969961 CET	50085	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:10.096801043 CET	53	50085	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:10.098614931 CET	61570	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:10.161482096 CET	53	50085	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:10.241812944 CET	61570	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:10.325349092 CET	53	61570	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:10.326486111 CET	57394	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:10.380234957 CET	53	61570	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:10.479070902 CET	57394	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:10.550688982 CET	53	57394	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:10.551860094 CET	58378	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:10.617798090 CET	53	57394	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:10.711297989 CET	58378	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:10.773520947 CET	53	58378	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:10.774920940 CET	58787	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:10.848972082 CET	53	58378	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:10.944677114 CET	58787	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:11.105571985 CET	53	58787	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:11.105614901 CET	53	58787	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:11.106703997 CET	60976	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:11.257350922 CET	60976	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:11.325270891 CET	53	60976	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:11.326342106 CET	64773	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:11.395159960 CET	53	60976	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:11.476068974 CET	64773	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:11.547652960 CET	53	64773	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:11.548592091 CET	57752	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:11.615520000 CET	53	64773	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:11.694926977 CET	57752	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:11.767657042 CET	53	57752	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:11.768914938 CET	63097	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:11.833372116 CET	53	57752	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:11.913444042 CET	63097	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:11.989883900 CET	53	63097	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:11.991420031 CET	50341	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:12.051582098 CET	53	63097	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:12.132458925 CET	50341	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:12.303059101 CET	53	50341	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:12.303131104 CET	53	50341	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:12.304174900 CET	63516	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:12.465579987 CET	63516	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:12.633346081 CET	53	63516	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:12.633388996 CET	53	63516	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:12.634731054 CET	63529	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:12.792614937 CET	63529	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:12.967257977 CET	53	63529	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:12.967279911 CET	53	63529	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:12.968199015 CET	65354	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:13.131720066 CET	65354	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:13.299386024 CET	53	65354	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:13.299429893 CET	53	65354	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:13.300915003 CET	63870	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:13.444200993 CET	63870	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:13.522628069 CET	53	63870	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:13.524560928 CET	62853	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:13.581482887 CET	53	63870	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:13.683069944 CET	62853	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:13.744987965 CET	53	62853	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:13.746282101 CET	59719	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:13.821427107 CET	53	62853	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:13.916853905 CET	59719	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:13.967116117 CET	53	59719	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:13.968322039 CET	50021	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:14.054208040 CET	53	59719	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:14.131896973 CET	50021	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:14.188976049 CET	53	50021	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:14.190135956 CET	62271	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:14.269340992 CET	53	50021	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:14.335150957 CET	62271	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:14.411451101 CET	53	62271	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:14.412636995 CET	51637	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:14.472371101 CET	53	62271	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:14.569710016 CET	51637	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:14.647203922 CET	53	51637	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:14.648484945 CET	63538	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:14.709800959 CET	53	51637	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:14.819847107 CET	63538	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:14.870583057 CET	53	63538	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:14.871989965 CET	63685	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:14.957771063 CET	53	63538	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:15.023086071 CET	63685	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:15.096710920 CET	53	63685	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:15.098144054 CET	50940	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:15.161216974 CET	53	63685	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:15.242335081 CET	50940	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:15.325004101 CET	53	50940	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:15.326324940 CET	59042	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:15.380841970 CET	53	50940	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:15.476037025 CET	59042	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:15.552270889 CET	53	59042	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:15.553483009 CET	52611	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:15.613466978 CET	53	59042	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:15.694948912 CET	52611	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:15.778583050 CET	53	52611	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:15.779855013 CET	52316	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:15.832736015 CET	53	52611	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:15.936458111 CET	52316	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:16.003773928 CET	53	52316	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:16.005913973 CET	62798	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:16.073625088 CET	53	52316	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:16.148216009 CET	62798	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:16.225703955 CET	53	62798	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:16.226809978 CET	64733	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:16.285528898 CET	53	62798	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:16.397758007 CET	64733	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:16.444473982 CET	53	64733	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:16.446088076 CET	50653	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:16.536922932 CET	53	64733	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:16.615071058 CET	50653	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:16.671168089 CET	53	50653	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:16.672441959 CET	53145	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:16.752789021 CET	53	50653	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:16.835650921 CET	53145	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:16.893476963 CET	53	53145	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:16.894917011 CET	57332	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:16.972836971 CET	53	53145	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:17.038587093 CET	57332	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:17.117702961 CET	53	57332	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:17.119209051 CET	63991	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:17.176446915 CET	53	57332	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:17.273330927 CET	63991	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:17.436006069 CET	53	63991	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:17.437381029 CET	55400	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:17.439362049 CET	53	63991	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:17.585464001 CET	55400	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:17.662241936 CET	53	55400	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:17.663786888 CET	60765	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:17.722713947 CET	53	55400	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:17.819781065 CET	60765	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:17.885965109 CET	53	60765	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:17.887604952 CET	64615	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:17.958074093 CET	53	60765	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:18.038630009 CET	64615	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:18.107896090 CET	53	64615	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:18.109450102 CET	63692	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:18.176224947 CET	53	64615	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:18.260534048 CET	63692	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:18.329407930 CET	53	63692	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:18.330800056 CET	60672	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:18.398849010 CET	53	63692	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:18.494805098 CET	60672	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:18.659126997 CET	53	60672	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:18.659168005 CET	53	60672	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:18.661602974 CET	57802	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:18.820064068 CET	57802	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:18.887962103 CET	53	57802	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:18.889617920 CET	59890	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:18.957398891 CET	53	57802	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:19.038594961 CET	59890	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:19.109324932 CET	53	59890	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:19.110486984 CET	59115	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:19.176317930 CET	53	59890	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:19.262629986 CET	59115	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:19.334007978 CET	53	59115	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:19.335660934 CET	50256	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:19.400163889 CET	53	59115	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:19.500093937 CET	50256	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:19.558525085 CET	53	50256	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:19.559930086 CET	63865	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:19.638082981 CET	53	50256	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:19.719696999 CET	63865	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:19.784341097 CET	53	63865	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:19.785831928 CET	58495	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:19.857566118 CET	53	63865	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:19.936590910 CET	58495	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:20.007805109 CET	53	58495	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:20.009073973 CET	54551	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:20.074268103 CET	53	58495	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:20.178958893 CET	54551	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:20.228948116 CET	53	54551	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:20.231020927 CET	58675	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:20.316453934 CET	53	54551	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:20.381925106 CET	58675	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:20.449059010 CET	53	58675	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:20.450381994 CET	54291	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:20.519525051 CET	53	58675	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:20.600733042 CET	54291	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:20.758968115 CET	53	54291	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:20.759008884 CET	53	54291	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:20.760253906 CET	50455	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:20.913175106 CET	50455	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:20.984771013 CET	53	50455	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:20.985860109 CET	49676	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:21.050806999 CET	53	50455	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:21.131850958 CET	49676	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:21.218240023 CET	53	49676	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:21.220479012 CET	54605	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:21.270822048 CET	53	49676	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:21.366436958 CET	54605	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:21.445295095 CET	53	54605	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:21.447982073 CET	62378	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:21.504666090 CET	53	54605	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:21.600917101 CET	62378	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:21.670074940 CET	53	62378	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:21.671617031 CET	50134	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:21.739167929 CET	53	62378	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:21.824959040 CET	50134	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:21.892803907 CET	53	50134	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:21.895046949 CET	58353	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:21.962445021 CET	53	50134	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:22.058974028 CET	58353	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:22.118662119 CET	53	58353	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:22.119858980 CET	57028	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:22.197422981 CET	53	58353	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:22.277762890 CET	57028	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:22.342850924 CET	53	57028	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:22.345140934 CET	55481	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:22.415457010 CET	53	57028	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:22.507047892 CET	55481	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:22.571727037 CET	53	55481	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:22.573865891 CET	52692	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:22.646872997 CET	53	55481	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:22.725855112 CET	52692	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:22.885482073 CET	53	52692	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:22.885524035 CET	53	52692	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:22.886600018 CET	54040	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:23.038764954 CET	54040	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:23.111459017 CET	53	54040	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:23.112772942 CET	51956	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:23.176613092 CET	53	54040	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:23.257409096 CET	51956	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:23.336024046 CET	53	51956	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:23.337510109 CET	64957	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:23.395015001 CET	53	51956	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:23.491666079 CET	64957	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:23.562097073 CET	53	64957	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:23.563812971 CET	49949	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:23.629730940 CET	53	64957	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:23.710410118 CET	49949	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:23.781827927 CET	53	49949	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:23.784152031 CET	50789	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:23.848329067 CET	53	49949	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:23.936820030 CET	50789	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:24.002438068 CET	53	50789	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:24.003532887 CET	63553	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:24.074387074 CET	53	50789	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:24.192810059 CET	63553	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:24.227844000 CET	53	63553	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:24.229171991 CET	51087	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:24.330384016 CET	53	63553	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:24.396593094 CET	51087	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:24.557763100 CET	53	51087	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:24.557810068 CET	53	51087	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:24.559173107 CET	50554	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:24.711206913 CET	50554	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:24.892832041 CET	53	50554	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:24.892874002 CET	53	50554	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:24.894216061 CET	50758	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:25.042860985 CET	50758	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:25.119277000 CET	53	50758	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:25.121762037 CET	49945	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:25.182305098 CET	53	50758	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:25.292161942 CET	49945	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:25.453933001 CET	53	49945	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:25.453975916 CET	53	49945	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:25.455387115 CET	59590	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:25.616413116 CET	59590	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:25.766323090 CET	53	59590	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:25.766366005 CET	53	59590	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:25.767810106 CET	51349	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:25.930944920 CET	51349	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:25.993365049 CET	53	51349	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:25.995745897 CET	58999	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:26.068795919 CET	53	51349	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:26.163758993 CET	58999	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:26.217694044 CET	53	58999	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:26.218924999 CET	60400	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:26.301867962 CET	53	58999	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:26.367026091 CET	60400	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:26.532805920 CET	53	60400	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:26.532847881 CET	53	60400	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:26.534053087 CET	64148	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:26.679400921 CET	64148	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:26.753937960 CET	53	64148	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:26.755410910 CET	63390	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:26.817215919 CET	53	64148	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:26.898195028 CET	63390	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:26.980987072 CET	53	63390	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:26.982347965 CET	54327	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:27.036210060 CET	53	63390	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:27.132477999 CET	54327	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:27.313571930 CET	53	54327	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:27.313613892 CET	53	54327	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:27.314975023 CET	57995	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:27.460474968 CET	57995	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:27.537111044 CET	53	57995	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:27.538626909 CET	54451	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:27.598227024 CET	53	57995	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:27.695995092 CET	54451	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:27.763797045 CET	53	54451	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:27.766141891 CET	51790	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:27.833579063 CET	53	54451	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:27.929344893 CET	51790	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:27.989595890 CET	53	51790	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:27.990783930 CET	58561	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:28.067286015 CET	53	51790	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:28.148459911 CET	58561	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:28.214792013 CET	53	58561	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:28.215925932 CET	56984	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:28.286055088 CET	53	58561	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:28.366873026 CET	56984	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:28.527415037 CET	53	56984	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:28.527456999 CET	53	56984	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:28.528646946 CET	53485	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:28.679599047 CET	53485	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:28.843552113 CET	53	53485	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:28.843594074 CET	53	53485	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:28.844917059 CET	64700	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:28.992935896 CET	64700	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:29.069230080 CET	53	64700	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:29.070403099 CET	54610	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:29.132141113 CET	53	64700	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:29.226372004 CET	54610	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:29.290941000 CET	53	54610	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:29.292076111 CET	62891	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:29.363889933 CET	53	54610	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:29.445197105 CET	62891	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:29.518146038 CET	53	62891	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:29.519412994 CET	60489	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:29.582819939 CET	53	62891	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:29.665985107 CET	60489	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:29.740689993 CET	53	60489	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:29.742175102 CET	56758	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:29.805326939 CET	53	60489	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:29.900005102 CET	56758	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:30.072076082 CET	53	56758	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:30.072134972 CET	53	56758	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:30.073911905 CET	55085	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:30.242072105 CET	55085	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:30.293232918 CET	53	55085	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:30.294533968 CET	57424	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:30.380002975 CET	53	55085	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:30.445092916 CET	57424	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:30.514153004 CET	53	57424	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:30.516283989 CET	56584	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:30.582650900 CET	53	57424	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:30.664129019 CET	56584	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:30.737025023 CET	53	56584	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:30.739252090 CET	63467	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:30.802212954 CET	53	56584	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:30.904694080 CET	63467	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:30.960443020 CET	53	63467	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:30.961837053 CET	58347	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:31.042268991 CET	53	63467	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:31.132853985 CET	58347	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:31.185796022 CET	53	58347	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:31.187083960 CET	57371	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:31.270509005 CET	53	58347	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:31.336198092 CET	57371	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:31.411216021 CET	53	57371	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:31.412641048 CET	53345	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:31.473927975 CET	53	57371	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:31.554347038 CET	53345	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:31.632236958 CET	53	53345	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:31.634409904 CET	61973	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:31.692485094 CET	53	53345	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:31.788948059 CET	61973	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:31.853094101 CET	53	61973	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:31.854365110 CET	61300	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:31.926969051 CET	53	61973	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:32.007883072 CET	61300	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:32.072329044 CET	53	61300	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:32.073623896 CET	64134	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:32.145468950 CET	53	61300	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:32.225928068 CET	64134	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:32.290793896 CET	53	64134	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:32.292280912 CET	51263	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:32.363672018 CET	53	64134	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:32.444570065 CET	51263	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:32.518362999 CET	53	51263	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:32.519591093 CET	49193	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:32.582401991 CET	53	51263	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:32.663285017 CET	49193	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:32.828186989 CET	53	49193	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:32.828260899 CET	53	49193	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:32.830637932 CET	64938	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:32.975811005 CET	64938	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:33.049820900 CET	53	64938	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:33.050827980 CET	61892	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:33.113549948 CET	53	64938	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:33.213984013 CET	61892	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:33.382652044 CET	53	61892	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:33.382724047 CET	53	61892	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:33.384110928 CET	53365	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:33.544101000 CET	53365	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:33.605648041 CET	53	53365	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:33.606589079 CET	50298	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:33.681839943 CET	53	53365	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:33.758613110 CET	50298	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:33.824589968 CET	53	50298	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:33.825983047 CET	61874	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:33.896775007 CET	53	50298	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:33.976438999 CET	61874	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:34.159753084 CET	53	61874	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:34.159797907 CET	53	61874	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:34.161053896 CET	56851	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:34.304475069 CET	56851	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:34.382086992 CET	53	56851	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:34.384370089 CET	49513	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:34.442384958 CET	53	56851	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:34.539505959 CET	49513	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:34.606762886 CET	53	49513	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:34.608247042 CET	63678	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:34.677413940 CET	53	49513	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:34.757312059 CET	63678	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:34.917507887 CET	53	63678	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:34.917579889 CET	53	63678	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:34.918878078 CET	63645	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:35.069896936 CET	63645	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:35.138292074 CET	53	63645	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:35.139395952 CET	50316	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:35.207642078 CET	53	63645	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:35.305768013 CET	50316	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:35.363434076 CET	53	50316	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:35.364629030 CET	55926	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:35.443983078 CET	53	50316	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:35.523788929 CET	55926	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:35.584835052 CET	53	55926	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:35.585894108 CET	57381	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:35.661187887 CET	53	55926	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:35.726917982 CET	57381	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:35.913573027 CET	53	57381	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:35.913613081 CET	53	57381	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:35.916070938 CET	52871	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:36.070532084 CET	52871	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:36.142329931 CET	53	52871	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:36.148427010 CET	50847	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:36.208481073 CET	53	52871	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:36.312441111 CET	50847	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:36.375008106 CET	53	50847	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:36.376296043 CET	56301	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:36.450465918 CET	53	50847	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:36.544069052 CET	56301	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:36.596549988 CET	53	56301	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:36.597877979 CET	64502	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:36.683774948 CET	53	56301	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:36.758893967 CET	64502	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:36.821707964 CET	53	64502	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:36.822959900 CET	50137	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:36.897140980 CET	53	64502	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:36.975608110 CET	50137	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:37.041812897 CET	53	50137	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:37.044198036 CET	59363	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:37.113274097 CET	53	50137	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:37.211095095 CET	59363	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:37.260863066 CET	53	59363	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:37.262072086 CET	57538	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:37.348702908 CET	53	59363	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:37.414551973 CET	57538	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:37.573312044 CET	53	57538	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:37.573328972 CET	53	57538	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:37.574754953 CET	62943	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:37.727062941 CET	62943	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:37.801913977 CET	53	62943	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:37.803709984 CET	61473	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:37.864475965 CET	53	62943	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:37.945780993 CET	61473	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:38.029944897 CET	53	61473	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:38.031516075 CET	52887	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:38.083468914 CET	53	61473	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:38.180105925 CET	52887	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:38.250551939 CET	53	52887	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:38.252103090 CET	51879	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:38.318330050 CET	53	52887	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:38.398662090 CET	51879	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:38.477806091 CET	53	51879	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:38.478687048 CET	57979	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:38.535650015 CET	53	51879	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:38.632980108 CET	57979	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:38.811750889 CET	53	57979	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:38.811825037 CET	53	57979	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:38.812768936 CET	62368	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:38.961875916 CET	62368	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:39.122525930 CET	53	62368	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:39.122653961 CET	53	62368	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:39.123637915 CET	58673	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:39.289145947 CET	58673	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:39.343561888 CET	53	58673	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:39.344523907 CET	64543	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:39.426294088 CET	53	58673	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:39.507317066 CET	64543	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:39.563450098 CET	53	64543	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:39.565463066 CET	56131	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:39.646184921 CET	53	64543	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:39.710767031 CET	56131	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:39.782985926 CET	53	56131	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:39.784363985 CET	54805	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:39.848138094 CET	53	56131	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:39.929033041 CET	54805	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:40.004703045 CET	53	54805	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:40.005650997 CET	55394	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:40.067111969 CET	53	54805	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:40.147875071 CET	55394	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:40.319896936 CET	53	55394	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:40.319937944 CET	53	55394	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:40.320883036 CET	60821	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:40.476025105 CET	60821	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:40.633219004 CET	53	60821	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:40.633261919 CET	53	60821	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:40.637887955 CET	52481	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:40.788727999 CET	52481	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:40.971277952 CET	53	52481	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:40.971354008 CET	53	52481	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:40.972626925 CET	51707	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:41.121613979 CET	51707	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:41.189470053 CET	53	51707	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:41.190807104 CET	49589	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:41.259097099 CET	53	51707	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:41.354449987 CET	49589	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:41.409533978 CET	53	49589	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:41.410841942 CET	59074	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:41.492976904 CET	53	49589	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:41.582149029 CET	59074	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:41.631074905 CET	53	59074	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:41.633213997 CET	56705	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:41.719513893 CET	53	59074	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:41.789334059 CET	56705	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:41.856698036 CET	53	56705	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:41.857909918 CET	64602	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:41.930284977 CET	53	56705	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:42.008152962 CET	64602	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:42.077919960 CET	53	64602	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:42.079186916 CET	52942	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:42.146671057 CET	53	64602	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:42.245948076 CET	52942	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:42.297485113 CET	53	52942	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:42.298800945 CET	52075	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:42.383991957 CET	53	52942	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:42.462708950 CET	52075	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:42.516992092 CET	53	52075	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:42.518290043 CET	55695	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:42.600001097 CET	53	52075	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:42.687947035 CET	55695	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:42.735697031 CET	53	55695	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:42.737201929 CET	55871	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:42.827176094 CET	53	55695	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:42.882643938 CET	55871	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:43.051490068 CET	53	55871	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:43.051521063 CET	53	55871	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:43.052706957 CET	53676	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:43.210251093 CET	53676	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:43.384195089 CET	53	53676	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:43.384253025 CET	53	53676	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:43.504662037 CET	63321	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:43.647797108 CET	63321	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:43.727720976 CET	53	63321	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:43.728671074 CET	61855	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:43.786993980 CET	53	63321	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:43.882055044 CET	61855	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:43.952599049 CET	53	61855	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:43.953596115 CET	51775	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:44.019618034 CET	53	61855	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:44.101110935 CET	51775	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:44.179373980 CET	53	51775	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:44.180200100 CET	55518	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:44.238043070 CET	53	51775	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:44.335717916 CET	55518	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:44.509094954 CET	53	55518	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:44.509147882 CET	53	55518	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:44.510104895 CET	56589	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:44.663278103 CET	56589	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:44.734181881 CET	53	56589	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:44.734997988 CET	63309	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:44.800164938 CET	53	56589	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:44.886303902 CET	63309	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:44.959599972 CET	53	63309	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:44.960308075 CET	58042	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:45.026604891 CET	53	63309	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:45.116776943 CET	58042	53	192.168.2.5	1.1.1.1
Dec 12, 2024 12:44:45.184927940 CET	53	58042	1.1.1.1	192.168.2.5
Dec 12, 2024 12:44:45.257730007 CET	53	58042	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 12, 2024 12:43:19.473023891 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:24.051892996 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:26.030167103 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:28.559485912 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:29.989614964 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:31.101423979 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:31.883682966 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:33.113636017 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:33.982237101 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:35.036015987 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:35.994259119 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:37.082432985 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:38.005486012 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:38.987570047 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:39.918201923 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:41.132441998 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:41.838557959 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:42.924850941 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:43.979732037 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:44.992645025 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:46.301937103 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:46.956768036 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:47.868175983 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:49.147135973 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:49.934268951 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:50.836469889 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:51.946254015 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:53.051429987 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:53.959378004 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:54.958940983 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:55.868463993 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:56.991421938 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:57.944932938 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:43:59.508192062 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:00.568391085 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:01.336872101 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:02.804791927 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:03.475907087 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:04.338365078 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:05.473969936 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:06.458076954 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:07.397583008 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:08.504621029 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:09.504363060 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:10.380448103 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:11.395272970 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:13.581571102 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:14.472570896 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:15.381277084 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:16.537167072 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:17.439651012 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:18.399386883 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:19.400443077 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:20.519866943 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:21.504920959 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:22.415679932 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:23.395360947 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:24.330528975 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:26.069154024 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:27.036596060 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:27.833801985 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:29.132241011 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:30.380397081 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:31.474167109 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:32.363905907 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:33.682229042 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:34.442631960 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:35.444170952 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:36.450865030 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:37.349045038 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:38.535818100 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:39.426557064 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:41.259325027 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:41.930602074 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:43.787179947 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:44:44.800441027 CET	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 12, 2024 12:42:01.132512093 CET	192.168.2.5	1.1.1.1	0x3736	Standard query (0)	www.med.unc.edu	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:01.132667065 CET	192.168.2.5	1.1.1.1	0x196	Standard query (0)	www.med.unc.edu	65	IN (0x0001)	false
Dec 12, 2024 12:42:03.935384989 CET	192.168.2.5	1.1.1.1	0xeb15	Standard query (0)	bzib.nelreports.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:03.935564995 CET	192.168.2.5	1.1.1.1	0x66f3	Standard query (0)	bzib.nelreports.net	65	IN (0x0001)	false
Dec 12, 2024 12:42:04.642826080 CET	192.168.2.5	1.1.1.1	0xcf94	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:04.642966986 CET	192.168.2.5	1.1.1.1	0xe85c	Standard query (0)	clients2.googleusercontent.com	65	IN (0x0001)	false
Dec 12, 2024 12:42:05.470834017 CET	192.168.2.5	1.1.1.1	0x74d9	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:05.471021891 CET	192.168.2.5	1.1.1.1	0xe139	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Dec 12, 2024 12:42:05.471302032 CET	192.168.2.5	1.1.1.1	0x2c9	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:05.471432924 CET	192.168.2.5	1.1.1.1	0x259e	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Dec 12, 2024 12:42:05.719448090 CET	192.168.2.5	1.1.1.1	0xb65	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:05.719448090 CET	192.168.2.5	1.1.1.1	0xa347	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Dec 12, 2024 12:42:11.290689945 CET	192.168.2.5	1.1.1.1	0x5a33	Standard query (0)	aikmouciiqgecoqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:11.608268023 CET	192.168.2.5	1.1.1.1	0x62c5	Standard query (0)	koecgqggegimaeya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:11.747608900 CET	192.168.2.5	1.1.1.1	0x7f42	Standard query (0)	aawqwccomcemcysm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:11.888575077 CET	192.168.2.5	1.1.1.1	0xc78d	Standard query (0)	kcyakwisycecaqgw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:12.026993990 CET	192.168.2.5	1.1.1.1	0x66ae	Standard query (0)	uogksceymossmmqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:12.166553974 CET	192.168.2.5	1.1.1.1	0xdef0	Standard query (0)	qgmyeeguweaukuke.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:12.305816889 CET	192.168.2.5	1.1.1.1	0x7bc8	Standard query (0)	mywaqkeaawisisky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:12.445528984 CET	192.168.2.5	1.1.1.1	0xc623	Standard query (0)	yqqsggacauiiugka.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:12.593866110 CET	192.168.2.5	1.1.1.1	0xc0e3	Standard query (0)	equmqmqwuuuioawa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:12.733227968 CET	192.168.2.5	1.1.1.1	0x4d9	Standard query (0)	wmoamsauiwauoosg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:12.872757912 CET	192.168.2.5	1.1.1.1	0xe3cd	Standard query (0)	oqsakkimkesccikc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:13.011523962 CET	192.168.2.5	1.1.1.1	0x4a16	Standard query (0)	mgiwaegaqyyaakwy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:13.153780937 CET	192.168.2.5	1.1.1.1	0xac80	Standard query (0)	ucmioacycscyeouk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:13.293987989 CET	192.168.2.5	1.1.1.1	0xe53b	Standard query (0)	qumaseqmggyaiauq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:13.433373928 CET	192.168.2.5	1.1.1.1	0x5450	Standard query (0)	uccyyemqaiiksuwm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:13.576770067 CET	192.168.2.5	1.1.1.1	0x77dc	Standard query (0)	sesyieaiesegeaow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:13.716238976 CET	192.168.2.5	1.1.1.1	0x4012	Standard query (0)	kccmicaswqmswwak.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:13.871536970 CET	192.168.2.5	1.1.1.1	0x87c1	Standard query (0)	mssaogwocegysoow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:14.010507107 CET	192.168.2.5	1.1.1.1	0x1707	Standard query (0)	wssaqmakumewmaes.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:14.149741888 CET	192.168.2.5	1.1.1.1	0x6399	Standard query (0)	cmukociggiqcouio.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:14.289438009 CET	192.168.2.5	1.1.1.1	0x83d3	Standard query (0)	skyqsyyymyacyayc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:14.427454948 CET	192.168.2.5	1.1.1.1	0x158f	Standard query (0)	uoigsiqmemcscosu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:14.566735029 CET	192.168.2.5	1.1.1.1	0x4daa	Standard query (0)	kuywuskkgqsigqqs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:14.705069065 CET	192.168.2.5	1.1.1.1	0xad14	Standard query (0)	auayomwkewcomwas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:14.845299959 CET	192.168.2.5	1.1.1.1	0xccfc	Standard query (0)	iyaikmkkowcqemsi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:14.984345913 CET	192.168.2.5	1.1.1.1	0x5d6f	Standard query (0)	ggicikyqcaiyguee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:15.123989105 CET	192.168.2.5	1.1.1.1	0x4c72	Standard query (0)	oqyaoykomyoygics.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:15.264049053 CET	192.168.2.5	1.1.1.1	0xeb0b	Standard query (0)	eqakguiwiqacqiwg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:15.406923056 CET	192.168.2.5	1.1.1.1	0x88c5	Standard query (0)	wgcaouuqqqwucogy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:15.545902014 CET	192.168.2.5	1.1.1.1	0x96c	Standard query (0)	ewacuagosgqmuocm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:15.684644938 CET	192.168.2.5	1.1.1.1	0xd4bf	Standard query (0)	wgqyouayikuyuqmk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:15.824433088 CET	192.168.2.5	1.1.1.1	0xee95	Standard query (0)	owaaygsacguucaye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:15.965291977 CET	192.168.2.5	1.1.1.1	0x50ac	Standard query (0)	uwgicagyykoommga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:16.139134884 CET	192.168.2.5	1.1.1.1	0x55d6	Standard query (0)	uiggameqqycugsqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:16.358607054 CET	192.168.2.5	1.1.1.1	0xd7ea	Standard query (0)	goguooqkgysueime.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:16.498060942 CET	192.168.2.5	1.1.1.1	0x8a2d	Standard query (0)	keosqeosukqcooco.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:16.642673016 CET	192.168.2.5	1.1.1.1	0x6592	Standard query (0)	maoeeogmuauywsyu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:16.781470060 CET	192.168.2.5	1.1.1.1	0x70e8	Standard query (0)	ismqaewykmoiguki.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:16.920017958 CET	192.168.2.5	1.1.1.1	0xd12e	Standard query (0)	wucwykasawokemaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:17.060333967 CET	192.168.2.5	1.1.1.1	0x22c0	Standard query (0)	ukmcqucewskcqygg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:17.199008942 CET	192.168.2.5	1.1.1.1	0x5b49	Standard query (0)	qqqmeagkkosgcayo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:17.343357086 CET	192.168.2.5	1.1.1.1	0x596c	Standard query (0)	ysawassgkwqygmmq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:17.483249903 CET	192.168.2.5	1.1.1.1	0x1b0c	Standard query (0)	osaeyoiqoqawauga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:17.623704910 CET	192.168.2.5	1.1.1.1	0x95db	Standard query (0)	iagisciiyoemgwaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:17.763016939 CET	192.168.2.5	1.1.1.1	0x711f	Standard query (0)	ymysimqoykwqeqiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:17.902899981 CET	192.168.2.5	1.1.1.1	0xc3c2	Standard query (0)	ymmcwogyimsuqmcc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:18.041785955 CET	192.168.2.5	1.1.1.1	0xe3e9	Standard query (0)	osmoygyawqmmimkq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:18.182976007 CET	192.168.2.5	1.1.1.1	0x4c0e	Standard query (0)	immyecuqwkiyscys.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:18.321603060 CET	192.168.2.5	1.1.1.1	0x9780	Standard query (0)	omsqkuiwcwoegooq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:18.462973118 CET	192.168.2.5	1.1.1.1	0x2662	Standard query (0)	ukaiiiyqoooycyqm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:18.602087021 CET	192.168.2.5	1.1.1.1	0x5e4f	Standard query (0)	isemauqkwwiumyky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:18.740287066 CET	192.168.2.5	1.1.1.1	0x23ab	Standard query (0)	keguuyioweymiaws.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:18.880620956 CET	192.168.2.5	1.1.1.1	0x9f84	Standard query (0)	kwaywmaequkqccai.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:19.020453930 CET	192.168.2.5	1.1.1.1	0xf771	Standard query (0)	yyimcoiwgckeakcm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:19.159984112 CET	192.168.2.5	1.1.1.1	0xc7d3	Standard query (0)	ekcwemuekgqsimae.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:19.298794985 CET	192.168.2.5	1.1.1.1	0x9828	Standard query (0)	imigkomgmqgmakqk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:19.438826084 CET	192.168.2.5	1.1.1.1	0xa4a1	Standard query (0)	omasqkwqyskcagwi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:19.577886105 CET	192.168.2.5	1.1.1.1	0x4073	Standard query (0)	awyomscgweuqmgaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:19.716985941 CET	192.168.2.5	1.1.1.1	0xeff8	Standard query (0)	eyoyssauceguqwmk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:19.856368065 CET	192.168.2.5	1.1.1.1	0x240d	Standard query (0)	gwwcqeykmseicgaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:19.995137930 CET	192.168.2.5	1.1.1.1	0xcfcf	Standard query (0)	qwywqgsmgaoiwsga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:20.134457111 CET	192.168.2.5	1.1.1.1	0xe156	Standard query (0)	ososwckwcqmmwqcy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:20.276716948 CET	192.168.2.5	1.1.1.1	0xbce9	Standard query (0)	osaymwoggqqycmse.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:20.416353941 CET	192.168.2.5	1.1.1.1	0xc803	Standard query (0)	oyewqwkusieeoqey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:20.556339979 CET	192.168.2.5	1.1.1.1	0x610	Standard query (0)	ommwaqgaemsmcqwc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:20.695178032 CET	192.168.2.5	1.1.1.1	0x47ed	Standard query (0)	cauewwukyywyqiei.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:20.837368965 CET	192.168.2.5	1.1.1.1	0x4d62	Standard query (0)	goeykqccmemkswom.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:20.976680994 CET	192.168.2.5	1.1.1.1	0xcd0e	Standard query (0)	aksuakswwkiimamq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:21.115660906 CET	192.168.2.5	1.1.1.1	0xddc7	Standard query (0)	isaeicumkcuwqmqq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:21.255573034 CET	192.168.2.5	1.1.1.1	0x923e	Standard query (0)	qiswokuokugiooky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:21.395946980 CET	192.168.2.5	1.1.1.1	0x387d	Standard query (0)	qiswcssocuqsaqkq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:21.534728050 CET	192.168.2.5	1.1.1.1	0xbdc7	Standard query (0)	qcyksokwumicscaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:21.673825026 CET	192.168.2.5	1.1.1.1	0x7f11	Standard query (0)	esiaisyasoaoqwki.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:21.812665939 CET	192.168.2.5	1.1.1.1	0xf8e8	Standard query (0)	giqukkwwcwgqcisg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:21.951977015 CET	192.168.2.5	1.1.1.1	0x4bb3	Standard query (0)	ymqaaskiwomkucuy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:22.091665983 CET	192.168.2.5	1.1.1.1	0x20cc	Standard query (0)	akueuaicusaoieiy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:22.231476068 CET	192.168.2.5	1.1.1.1	0x930f	Standard query (0)	sauygqecsusickcu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:22.370637894 CET	192.168.2.5	1.1.1.1	0xa7f	Standard query (0)	kkwkgmcoawgaoiwg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:22.510185957 CET	192.168.2.5	1.1.1.1	0x988c	Standard query (0)	saumycuogqsqykes.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:22.649036884 CET	192.168.2.5	1.1.1.1	0x1a95	Standard query (0)	ukyokaigmmkumgoa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:22.794014931 CET	192.168.2.5	1.1.1.1	0xe73	Standard query (0)	eswweuycwwiiykwo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:22.932797909 CET	192.168.2.5	1.1.1.1	0xde23	Standard query (0)	uksgyqiqaaiaiesi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:23.071660042 CET	192.168.2.5	1.1.1.1	0x5c84	Standard query (0)	smckcsaioceiyasu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:23.212347031 CET	192.168.2.5	1.1.1.1	0xdff4	Standard query (0)	esimsqgcwwwmyoqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:23.354954004 CET	192.168.2.5	1.1.1.1	0x1849	Standard query (0)	maiyuocqqiqiiskw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:23.494112015 CET	192.168.2.5	1.1.1.1	0x31e8	Standard query (0)	smaaowemwiwggocu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:23.633471966 CET	192.168.2.5	1.1.1.1	0xc0dc	Standard query (0)	kwuuwgemogmuomwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:23.772556067 CET	192.168.2.5	1.1.1.1	0x462d	Standard query (0)	ukicsmiwggcwksam.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:23.911045074 CET	192.168.2.5	1.1.1.1	0xd75a	Standard query (0)	gwamoggwyegsseao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:24.050808907 CET	192.168.2.5	1.1.1.1	0x5f5f	Standard query (0)	immcqsiceooqyaay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:24.191011906 CET	192.168.2.5	1.1.1.1	0xa388	Standard query (0)	kkcqgowgkcoyokcu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:24.332117081 CET	192.168.2.5	1.1.1.1	0x72ae	Standard query (0)	kecgikusmakuksma.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:24.472660065 CET	192.168.2.5	1.1.1.1	0xab15	Standard query (0)	ymuiggyusggsymoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:24.612799883 CET	192.168.2.5	1.1.1.1	0xf14a	Standard query (0)	uecouukwkuceyuwg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:24.751866102 CET	192.168.2.5	1.1.1.1	0x24a1	Standard query (0)	eyoaceoookqskqmy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:24.907514095 CET	192.168.2.5	1.1.1.1	0x5ac0	Standard query (0)	awwomgcseeqwkkom.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:25.047009945 CET	192.168.2.5	1.1.1.1	0x8f25	Standard query (0)	keykoekseemyiewq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:25.186083078 CET	192.168.2.5	1.1.1.1	0x5ef	Standard query (0)	ysiwwoeeaaskykaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:25.327394962 CET	192.168.2.5	1.1.1.1	0x73c0	Standard query (0)	kwmcuwccqmuecgea.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:25.466481924 CET	192.168.2.5	1.1.1.1	0x65b6	Standard query (0)	gwyooeiscmwguqms.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:25.606599092 CET	192.168.2.5	1.1.1.1	0x10c4	Standard query (0)	wuokiysmiucoucak.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:25.745415926 CET	192.168.2.5	1.1.1.1	0x44a4	Standard query (0)	wuuiumemmigyyauq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:25.885819912 CET	192.168.2.5	1.1.1.1	0x27fd	Standard query (0)	acwomuuukiomgqkm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:26.024133921 CET	192.168.2.5	1.1.1.1	0x8074	Standard query (0)	muwqwgaaymomgwmi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:26.163953066 CET	192.168.2.5	1.1.1.1	0xc3ab	Standard query (0)	omgcoecwsqiuqyug.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:26.303225994 CET	192.168.2.5	1.1.1.1	0xd8a1	Standard query (0)	kqmsgskwgemyueya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:26.442483902 CET	192.168.2.5	1.1.1.1	0x3da3	Standard query (0)	eyiyueewuaqmmwcm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:26.584440947 CET	192.168.2.5	1.1.1.1	0xa1eb	Standard query (0)	gwoyamckoqoaauoq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:26.723967075 CET	192.168.2.5	1.1.1.1	0xe958	Standard query (0)	qwqsoyoqkymakowm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:26.863356113 CET	192.168.2.5	1.1.1.1	0x43bd	Standard query (0)	gcmiymmqgwuquokm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:27.007270098 CET	192.168.2.5	1.1.1.1	0x1c3c	Standard query (0)	ymseciekayuweoww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:27.147885084 CET	192.168.2.5	1.1.1.1	0x1552	Standard query (0)	oyocwswugeiqqyoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:27.286555052 CET	192.168.2.5	1.1.1.1	0x903f	Standard query (0)	omgooecquoweeomo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:27.428678036 CET	192.168.2.5	1.1.1.1	0x9adf	Standard query (0)	imgeoyougkmmeuec.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:27.567796946 CET	192.168.2.5	1.1.1.1	0xf4af	Standard query (0)	smoswyoekkccyuga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:27.712642908 CET	192.168.2.5	1.1.1.1	0x4e5e	Standard query (0)	suwkomiqcykeyako.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:27.854840040 CET	192.168.2.5	1.1.1.1	0x1d70	Standard query (0)	smwsugycuuckemue.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:27.994168997 CET	192.168.2.5	1.1.1.1	0x8908	Standard query (0)	qigcqiaomwieqwka.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:28.134102106 CET	192.168.2.5	1.1.1.1	0x24db	Standard query (0)	oekcyqqggaegsesm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:28.273974895 CET	192.168.2.5	1.1.1.1	0x334d	Standard query (0)	qcoysaaooaiccqyu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:28.413619995 CET	192.168.2.5	1.1.1.1	0xfb17	Standard query (0)	mismuqiygyeysaoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:28.552953005 CET	192.168.2.5	1.1.1.1	0xf5d9	Standard query (0)	wockoyekyageakcg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:28.692162037 CET	192.168.2.5	1.1.1.1	0xcc3b	Standard query (0)	ososokqeakgguwsq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:28.831906080 CET	192.168.2.5	1.1.1.1	0x1331	Standard query (0)	wcgqccqcugomywua.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:28.971595049 CET	192.168.2.5	1.1.1.1	0xf51c	Standard query (0)	aqaqgemescmwsqks.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:29.111058950 CET	192.168.2.5	1.1.1.1	0x7de	Standard query (0)	aqiwocaywcswuwsq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:29.254046917 CET	192.168.2.5	1.1.1.1	0x7f05	Standard query (0)	aqgmgoqcoqqkguyk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:29.394017935 CET	192.168.2.5	1.1.1.1	0x7944	Standard query (0)	oywgqkusocouysua.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:29.535068989 CET	192.168.2.5	1.1.1.1	0x5888	Standard query (0)	uyygagweoagcuqky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:29.674096107 CET	192.168.2.5	1.1.1.1	0x2e72	Standard query (0)	muiccguyaeaqwweg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:29.813353062 CET	192.168.2.5	1.1.1.1	0x7090	Standard query (0)	qiqueqokwqqgwwci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:29.953469038 CET	192.168.2.5	1.1.1.1	0x11eb	Standard query (0)	uygmgoymcwcgkios.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:30.092076063 CET	192.168.2.5	1.1.1.1	0xa93b	Standard query (0)	qiyggmguowygeooc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:30.231581926 CET	192.168.2.5	1.1.1.1	0x7b30	Standard query (0)	acacoiqgoimayqwm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:30.394192934 CET	192.168.2.5	1.1.1.1	0x36ff	Standard query (0)	smisyqewaummmwoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:30.535815001 CET	192.168.2.5	1.1.1.1	0x5e14	Standard query (0)	mumuqocoisaucwmq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:30.675019979 CET	192.168.2.5	1.1.1.1	0x333	Standard query (0)	qqoawmqqwqcusmee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:30.828604937 CET	192.168.2.5	1.1.1.1	0x45b4	Standard query (0)	qcygacuamqqugcck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:30.986713886 CET	192.168.2.5	1.1.1.1	0xb59d	Standard query (0)	kkiigoymgkmoggoq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:31.125869036 CET	192.168.2.5	1.1.1.1	0x4e	Standard query (0)	qqmicqemgcgieoau.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:31.265024900 CET	192.168.2.5	1.1.1.1	0x7fca	Standard query (0)	sagymwuwgeucsmac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:31.403815985 CET	192.168.2.5	1.1.1.1	0x2da3	Standard query (0)	igmqooiwioymwkcm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:31.543344021 CET	192.168.2.5	1.1.1.1	0x7dd0	Standard query (0)	osyqameakgkceeog.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:31.682316065 CET	192.168.2.5	1.1.1.1	0x21ee	Standard query (0)	sgigamoeiwksoecq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:31.820882082 CET	192.168.2.5	1.1.1.1	0xb876	Standard query (0)	keckssemmeoqieqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:31.962475061 CET	192.168.2.5	1.1.1.1	0xd3d3	Standard query (0)	caysswwugsmkeksw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:32.103171110 CET	192.168.2.5	1.1.1.1	0xa653	Standard query (0)	cgiamwsqgcmqgqse.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:32.242244005 CET	192.168.2.5	1.1.1.1	0xe3d8	Standard query (0)	uyeqwcuyimescesu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:32.382947922 CET	192.168.2.5	1.1.1.1	0x82ce	Standard query (0)	ekiwqiyewuiqoemo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:32.521461964 CET	192.168.2.5	1.1.1.1	0x982e	Standard query (0)	oeakuqueisysswcg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:32.664067984 CET	192.168.2.5	1.1.1.1	0x1cd0	Standard query (0)	acemcwecgiqcukys.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:32.804234982 CET	192.168.2.5	1.1.1.1	0x675e	Standard query (0)	qcwaiaiqiwcakawa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:32.942573071 CET	192.168.2.5	1.1.1.1	0x7197	Standard query (0)	esyiocqieemagwmo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:33.081362963 CET	192.168.2.5	1.1.1.1	0x9130	Standard query (0)	kqsakygykwusqams.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:33.220127106 CET	192.168.2.5	1.1.1.1	0xc8bc	Standard query (0)	ymygkkggyigeqcqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:33.359643936 CET	192.168.2.5	1.1.1.1	0x6963	Standard query (0)	qqqkagyoymmosuyo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:33.501847029 CET	192.168.2.5	1.1.1.1	0x97d3	Standard query (0)	moiimkscmiswaesw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:33.642179966 CET	192.168.2.5	1.1.1.1	0x19e6	Standard query (0)	igkiociagqsacmwa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:33.780469894 CET	192.168.2.5	1.1.1.1	0xebc6	Standard query (0)	ymugwyokyyccykmw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:33.919575930 CET	192.168.2.5	1.1.1.1	0x8eae	Standard query (0)	gieksqwccmmqkemm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:34.058404922 CET	192.168.2.5	1.1.1.1	0x1c04	Standard query (0)	iaueigwgocakgsku.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:34.197896957 CET	192.168.2.5	1.1.1.1	0xbe96	Standard query (0)	sgsasqgwayeckgoy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:34.337153912 CET	192.168.2.5	1.1.1.1	0xc61c	Standard query (0)	kwogawueykiiumao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:34.475893974 CET	192.168.2.5	1.1.1.1	0x543e	Standard query (0)	iagmkeayqmuowswy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:34.616838932 CET	192.168.2.5	1.1.1.1	0xbf8c	Standard query (0)	yyyagyakeciucagk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:34.756234884 CET	192.168.2.5	1.1.1.1	0x6e36	Standard query (0)	isukyiwyscosaaqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:34.896569967 CET	192.168.2.5	1.1.1.1	0x497a	Standard query (0)	goicqsmskkygkkka.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:35.034854889 CET	192.168.2.5	1.1.1.1	0xd9c	Standard query (0)	awacwkqgsoomimye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:35.174240112 CET	192.168.2.5	1.1.1.1	0x7be5	Standard query (0)	iaawaweqwceogamg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:35.313705921 CET	192.168.2.5	1.1.1.1	0x9438	Standard query (0)	kqueagsoikuyocca.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:35.453800917 CET	192.168.2.5	1.1.1.1	0x158f	Standard query (0)	momoqikcaksewaua.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:35.592694044 CET	192.168.2.5	1.1.1.1	0x2f3b	Standard query (0)	suagiqkqmkgysmiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:35.731842995 CET	192.168.2.5	1.1.1.1	0xc708	Standard query (0)	gcwequgwyimwymsa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:35.870769978 CET	192.168.2.5	1.1.1.1	0xdd5d	Standard query (0)	igywsgwooemqiuss.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:36.010097980 CET	192.168.2.5	1.1.1.1	0x40db	Standard query (0)	wikiagqsmeeaeegy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:36.151009083 CET	192.168.2.5	1.1.1.1	0xac7b	Standard query (0)	eeoeukoqgiwsumsu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:36.289536953 CET	192.168.2.5	1.1.1.1	0x672	Standard query (0)	ygooiessycewaocg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:36.429510117 CET	192.168.2.5	1.1.1.1	0xe1c5	Standard query (0)	qcqgssmagywqcgws.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:36.568490028 CET	192.168.2.5	1.1.1.1	0xe9a9	Standard query (0)	goiikukwyyauemqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:36.709418058 CET	192.168.2.5	1.1.1.1	0xe98	Standard query (0)	comuwmkimocayeeu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:36.848515034 CET	192.168.2.5	1.1.1.1	0xffb5	Standard query (0)	isgasoomksiwqcmg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:36.988307953 CET	192.168.2.5	1.1.1.1	0x7fd0	Standard query (0)	qigismmgwsiseyuu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:37.128089905 CET	192.168.2.5	1.1.1.1	0x18d5	Standard query (0)	wuqggcwmoscwykwg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:37.267489910 CET	192.168.2.5	1.1.1.1	0xe6e5	Standard query (0)	qceawaaswmsuekmu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:37.408128023 CET	192.168.2.5	1.1.1.1	0x45f4	Standard query (0)	ygucsucmagwqsqcu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:37.546892881 CET	192.168.2.5	1.1.1.1	0x61ff	Standard query (0)	giuccqyqokookyue.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:37.688745022 CET	192.168.2.5	1.1.1.1	0x8423	Standard query (0)	gceesusqmuockkgw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:37.829530001 CET	192.168.2.5	1.1.1.1	0x7b62	Standard query (0)	ygesoycecmkuwayg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:37.968683004 CET	192.168.2.5	1.1.1.1	0xc852	Standard query (0)	sasqgsyksiccuuws.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:38.108303070 CET	192.168.2.5	1.1.1.1	0x94c4	Standard query (0)	qwggykgwkqoceiuo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:38.247612000 CET	192.168.2.5	1.1.1.1	0x609e	Standard query (0)	wiguisuayimaukgu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:38.387388945 CET	192.168.2.5	1.1.1.1	0x4ac8	Standard query (0)	qcwcgegyyieaoqca.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:38.526850939 CET	192.168.2.5	1.1.1.1	0x1388	Standard query (0)	gwcyyawigmwceaqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:38.666647911 CET	192.168.2.5	1.1.1.1	0x3c72	Standard query (0)	mueuwcqsioowsmce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:38.806736946 CET	192.168.2.5	1.1.1.1	0x28c	Standard query (0)	qiewcykmuuacuoyk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:38.947766066 CET	192.168.2.5	1.1.1.1	0xe166	Standard query (0)	coayaokeissieqcc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:39.086977005 CET	192.168.2.5	1.1.1.1	0xb231	Standard query (0)	oeooiqokqsqcsaig.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:39.225500107 CET	192.168.2.5	1.1.1.1	0xc23	Standard query (0)	masegmsiqgamiugm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:39.363692999 CET	192.168.2.5	1.1.1.1	0xc0e0	Standard query (0)	smwywssyyaciqkae.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:39.503547907 CET	192.168.2.5	1.1.1.1	0xb983	Standard query (0)	aweqoooqomueeiwi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:39.644632101 CET	192.168.2.5	1.1.1.1	0xb479	Standard query (0)	akasikewaomyiwqk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:39.783942938 CET	192.168.2.5	1.1.1.1	0xca8b	Standard query (0)	oyyamqygcecqocmq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:39.923019886 CET	192.168.2.5	1.1.1.1	0xd37d	Standard query (0)	qwikoqqgiayyuakq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:40.063990116 CET	192.168.2.5	1.1.1.1	0x40	Standard query (0)	miqcugomwgmygyoq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:40.203825951 CET	192.168.2.5	1.1.1.1	0x6871	Standard query (0)	wiccyamsgmuqoeoy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:40.347305059 CET	192.168.2.5	1.1.1.1	0xbfed	Standard query (0)	ymeiqyyqqyaaygie.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:40.487349987 CET	192.168.2.5	1.1.1.1	0x860d	Standard query (0)	wiomcwmascsigags.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:40.625510931 CET	192.168.2.5	1.1.1.1	0xacf8	Standard query (0)	awgyuqqswicwkqcs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:40.765199900 CET	192.168.2.5	1.1.1.1	0x6045	Standard query (0)	iacisiamimiiqyeo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:40.904177904 CET	192.168.2.5	1.1.1.1	0xbf40	Standard query (0)	wogawoqysgiockwa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:41.043577909 CET	192.168.2.5	1.1.1.1	0xd687	Standard query (0)	mayykkuyeuiggyws.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:41.182606936 CET	192.168.2.5	1.1.1.1	0x117b	Standard query (0)	cosaygigqegeyewi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:41.322702885 CET	192.168.2.5	1.1.1.1	0x63ed	Standard query (0)	ekqyosgcumkcecmo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:41.466322899 CET	192.168.2.5	1.1.1.1	0x9424	Standard query (0)	qimmkmaumumswocw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:41.606028080 CET	192.168.2.5	1.1.1.1	0x6817	Standard query (0)	acqaagqgmsmeouce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:41.745527029 CET	192.168.2.5	1.1.1.1	0xf5e1	Standard query (0)	awasockiaymagmci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:41.884485006 CET	192.168.2.5	1.1.1.1	0x13b3	Standard query (0)	akuyqkmomwqyiyow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:42.025458097 CET	192.168.2.5	1.1.1.1	0xbf32	Standard query (0)	caceukeeygaaqaec.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:42.165868998 CET	192.168.2.5	1.1.1.1	0x9248	Standard query (0)	qwcaikouwwekssco.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:42.304764032 CET	192.168.2.5	1.1.1.1	0x2ed0	Standard query (0)	qqioykeogcwkowgq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:42.444046974 CET	192.168.2.5	1.1.1.1	0x8ac	Standard query (0)	igeqissugeuswaus.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:42.707374096 CET	192.168.2.5	1.1.1.1	0xf2d6	Standard query (0)	osoawyeyassgycgy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:42.845757008 CET	192.168.2.5	1.1.1.1	0x57b6	Standard query (0)	cuaumuqcoeegomsq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:42.990365028 CET	192.168.2.5	1.1.1.1	0x84a8	Standard query (0)	oyogquqkmyqwwkuq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:43.129885912 CET	192.168.2.5	1.1.1.1	0xaf67	Standard query (0)	gwyougsgeaaoiumg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:43.270243883 CET	192.168.2.5	1.1.1.1	0xb109	Standard query (0)	ukeoemaaimqyuais.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:43.411269903 CET	192.168.2.5	1.1.1.1	0x9236	Standard query (0)	oewuwcsmaacckewa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:43.550790071 CET	192.168.2.5	1.1.1.1	0x4b50	Standard query (0)	esykokiigsgwcwsa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:43.690485954 CET	192.168.2.5	1.1.1.1	0xb21d	Standard query (0)	ekgqymkkqiwogqsy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:43.830077887 CET	192.168.2.5	1.1.1.1	0x631e	Standard query (0)	wueossewygqoakoq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:43.968570948 CET	192.168.2.5	1.1.1.1	0x18a	Standard query (0)	isceiesauogasmoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:44.109934092 CET	192.168.2.5	1.1.1.1	0xac92	Standard query (0)	giscmywoiaqmqcmw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:44.249844074 CET	192.168.2.5	1.1.1.1	0x6a2a	Standard query (0)	uyqweoyukcewugsu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:44.390858889 CET	192.168.2.5	1.1.1.1	0x272f	Standard query (0)	imuscegymggagewg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:44.529413939 CET	192.168.2.5	1.1.1.1	0x2be1	Standard query (0)	wgesgakysuqaewik.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:44.669713020 CET	192.168.2.5	1.1.1.1	0xccba	Standard query (0)	uwoyyqgiwowysqou.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:44.808692932 CET	192.168.2.5	1.1.1.1	0x5071	Standard query (0)	syaouwwyoaemeekm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:44.947496891 CET	192.168.2.5	1.1.1.1	0xed5b	Standard query (0)	aoscugususamokuy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:45.086750031 CET	192.168.2.5	1.1.1.1	0xb9be	Standard query (0)	qucyaygweeasqeoy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:45.225698948 CET	192.168.2.5	1.1.1.1	0x8546	Standard query (0)	uiwwamyuymycooey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:45.365262985 CET	192.168.2.5	1.1.1.1	0xdfaa	Standard query (0)	iygukwyuqwiuoqmi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:45.504168034 CET	192.168.2.5	1.1.1.1	0xb0ac	Standard query (0)	koaeaguekwcaousw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:45.645591974 CET	192.168.2.5	1.1.1.1	0x4824	Standard query (0)	skssioqkemoiieaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:45.785085917 CET	192.168.2.5	1.1.1.1	0x3067	Standard query (0)	yewomygmueegmoqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:45.928312063 CET	192.168.2.5	1.1.1.1	0x4b51	Standard query (0)	kuyoukwwacqkcoyo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:46.067388058 CET	192.168.2.5	1.1.1.1	0xbeb0	Standard query (0)	gmcqgmkyguwkskyg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:46.206482887 CET	192.168.2.5	1.1.1.1	0x25e9	Standard query (0)	mygiqcqokowwmgqq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:46.346359015 CET	192.168.2.5	1.1.1.1	0x749e	Standard query (0)	cymogqmasaiiwmww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:46.484993935 CET	192.168.2.5	1.1.1.1	0xba16	Standard query (0)	iykumkamcykgicyi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:46.624963999 CET	192.168.2.5	1.1.1.1	0x1297	Standard query (0)	cyemcqwkasuimkgs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:46.764669895 CET	192.168.2.5	1.1.1.1	0x513e	Standard query (0)	ieqeeiggkuqcomyo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:46.903886080 CET	192.168.2.5	1.1.1.1	0xdd18	Standard query (0)	ssmkyomikukusksu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:47.044287920 CET	192.168.2.5	1.1.1.1	0x598a	Standard query (0)	kimakioiwmawksiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:47.185131073 CET	192.168.2.5	1.1.1.1	0xce12	Standard query (0)	qumssmeysccykkyo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:47.327620983 CET	192.168.2.5	1.1.1.1	0x3a01	Standard query (0)	ykuoaucocogcwoky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:47.470438004 CET	192.168.2.5	1.1.1.1	0x47bb	Standard query (0)	semyssioekmosauo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:47.614816904 CET	192.168.2.5	1.1.1.1	0xc789	Standard query (0)	aiiqyyikowqaygwy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:47.755801916 CET	192.168.2.5	1.1.1.1	0xab06	Standard query (0)	kouumoyqiuckkcau.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:47.894987106 CET	192.168.2.5	1.1.1.1	0x7ff8	Standard query (0)	qgwkkkyicoqmooqu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:48.035722017 CET	192.168.2.5	1.1.1.1	0x99a5	Standard query (0)	uwwcocucusmeguaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:48.178632975 CET	192.168.2.5	1.1.1.1	0x977a	Standard query (0)	cekggiciueyeyoku.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:48.318691969 CET	192.168.2.5	1.1.1.1	0x8a82	Standard query (0)	iqqeoamqwiuiyuua.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:48.458410025 CET	192.168.2.5	1.1.1.1	0x9fd7	Standard query (0)	uokqmokseqqakiui.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:48.597088099 CET	192.168.2.5	1.1.1.1	0x6a7b	Standard query (0)	cyqqgacqkowwkqqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:48.735599995 CET	192.168.2.5	1.1.1.1	0x70ff	Standard query (0)	cmqqeimyycgqwsgg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:48.875576019 CET	192.168.2.5	1.1.1.1	0x6054	Standard query (0)	wmgeoqqiwqcmimwu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:49.016164064 CET	192.168.2.5	1.1.1.1	0xeae4	Standard query (0)	quyckaioggawuois.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:49.158421993 CET	192.168.2.5	1.1.1.1	0xe55b	Standard query (0)	eqciawooemoueyqu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:49.297827959 CET	192.168.2.5	1.1.1.1	0xef9a	Standard query (0)	oqoaumkywacmuwwm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:49.438781023 CET	192.168.2.5	1.1.1.1	0x7f6e	Standard query (0)	ewueyekksqksycww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:49.577919960 CET	192.168.2.5	1.1.1.1	0xbc85	Standard query (0)	csmasucykosuwouy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:49.717941046 CET	192.168.2.5	1.1.1.1	0x3e2	Standard query (0)	seeogeqwsqmsoaqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:49.856631041 CET	192.168.2.5	1.1.1.1	0xce26	Standard query (0)	gusmkkaiomeeqaiy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:49.998053074 CET	192.168.2.5	1.1.1.1	0xaed2	Standard query (0)	msyecoiqeyqeiquy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:50.136972904 CET	192.168.2.5	1.1.1.1	0x51ce	Standard query (0)	skawoueawceoywsy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:50.277302027 CET	192.168.2.5	1.1.1.1	0xd2a0	Standard query (0)	iyuaqococuqcsgii.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:50.416618109 CET	192.168.2.5	1.1.1.1	0x589a	Standard query (0)	kuyaasckcgacyesi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:50.556526899 CET	192.168.2.5	1.1.1.1	0xe47c	Standard query (0)	aaeqiiecqqumcgky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:50.696150064 CET	192.168.2.5	1.1.1.1	0x720c	Standard query (0)	aawiysageawcoyok.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:50.835479975 CET	192.168.2.5	1.1.1.1	0xb3de	Standard query (0)	yqysoaosqewciiww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:50.976527929 CET	192.168.2.5	1.1.1.1	0x7cdb	Standard query (0)	yessywkwcwmyewqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:51.117464066 CET	192.168.2.5	1.1.1.1	0xa2a7	Standard query (0)	aueiqscgeicewaoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:51.256103039 CET	192.168.2.5	1.1.1.1	0x4164	Standard query (0)	uccsgcekiwcyucou.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:51.396697044 CET	192.168.2.5	1.1.1.1	0xb08d	Standard query (0)	aiumyocycyyikiwc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:51.540262938 CET	192.168.2.5	1.1.1.1	0x2984	Standard query (0)	aoqayemwgmsyuimi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:51.869445086 CET	192.168.2.5	1.1.1.1	0xbaeb	Standard query (0)	mmiowgeswucumqae.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:52.012799978 CET	192.168.2.5	1.1.1.1	0xd32a	Standard query (0)	mmiugosumuqmuqoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:52.151356936 CET	192.168.2.5	1.1.1.1	0xef51	Standard query (0)	ecqisawmymscauow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:52.290993929 CET	192.168.2.5	1.1.1.1	0x4fdf	Standard query (0)	iyoqqeicqoquiqka.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:52.430154085 CET	192.168.2.5	1.1.1.1	0x5176	Standard query (0)	ecoqwiswmwqokmay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:52.569504976 CET	192.168.2.5	1.1.1.1	0x3811	Standard query (0)	ceckmwoyqkwgeoqg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:52.708605051 CET	192.168.2.5	1.1.1.1	0x9d67	Standard query (0)	kcoiygiwuyqyaoku.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:52.848617077 CET	192.168.2.5	1.1.1.1	0x4bc7	Standard query (0)	aaeyckqsgmiqsgew.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:52.989814043 CET	192.168.2.5	1.1.1.1	0xbc63	Standard query (0)	qgaiosyouwwkgsmm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:53.129319906 CET	192.168.2.5	1.1.1.1	0xa965	Standard query (0)	ocqseueommkkqcgs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:53.268512964 CET	192.168.2.5	1.1.1.1	0xb402	Standard query (0)	owmesaosmycoeceq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:53.407922029 CET	192.168.2.5	1.1.1.1	0xa382	Standard query (0)	qokauaicweuwscac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:53.547068119 CET	192.168.2.5	1.1.1.1	0x8673	Standard query (0)	sewmmwqeyauowwwo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:53.686636925 CET	192.168.2.5	1.1.1.1	0xfd07	Standard query (0)	mmgowiccqoeomagq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:53.827151060 CET	192.168.2.5	1.1.1.1	0x70b5	Standard query (0)	kcwiywyygywkkysk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:53.968226910 CET	192.168.2.5	1.1.1.1	0xf2b8	Standard query (0)	syiysgiqgqggqkoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:54.113723040 CET	192.168.2.5	1.1.1.1	0x2b9d	Standard query (0)	ykuasckuceswseig.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:54.253317118 CET	192.168.2.5	1.1.1.1	0x9489	Standard query (0)	quugmiumsieaiyys.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:54.393237114 CET	192.168.2.5	1.1.1.1	0xaf2c	Standard query (0)	ikqywgcqaggogqsa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:54.532933950 CET	192.168.2.5	1.1.1.1	0x5bda	Standard query (0)	eqyamamqwsseyoig.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:54.671788931 CET	192.168.2.5	1.1.1.1	0xbd9a	Standard query (0)	seqkawokggwucsui.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:54.813885927 CET	192.168.2.5	1.1.1.1	0x4a09	Standard query (0)	gmqeqkcqackwkgao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:54.952810049 CET	192.168.2.5	1.1.1.1	0x20e1	Standard query (0)	guowewgekuoqacyy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:55.094276905 CET	192.168.2.5	1.1.1.1	0x190	Standard query (0)	aaokyscqeecowaci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:55.234246969 CET	192.168.2.5	1.1.1.1	0xc65d	Standard query (0)	ywywwwgwekicgico.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:55.373785973 CET	192.168.2.5	1.1.1.1	0xc6a3	Standard query (0)	wsisaoaauqwmuomg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:55.512610912 CET	192.168.2.5	1.1.1.1	0xd28	Standard query (0)	koouumcuucaeakye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:55.652884960 CET	192.168.2.5	1.1.1.1	0xf54c	Standard query (0)	okccisioeycusekg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:55.795511961 CET	192.168.2.5	1.1.1.1	0xf506	Standard query (0)	cymymsciyaiacwgw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:55.933914900 CET	192.168.2.5	1.1.1.1	0x884a	Standard query (0)	aoyeoimcuuqakckw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:56.076822996 CET	192.168.2.5	1.1.1.1	0x1719	Standard query (0)	qoaweokuqggaymks.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:56.215589046 CET	192.168.2.5	1.1.1.1	0x1c30	Standard query (0)	ewuyacewswkoueqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:56.355436087 CET	192.168.2.5	1.1.1.1	0xddea	Standard query (0)	kiuymkmaomciimcc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:56.494328022 CET	192.168.2.5	1.1.1.1	0x4cbc	Standard query (0)	oqaiyaoqwyeswaiy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:56.633703947 CET	192.168.2.5	1.1.1.1	0x7463	Standard query (0)	koyokggaqsagggym.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:56.773974895 CET	192.168.2.5	1.1.1.1	0x124c	Standard query (0)	cmsuagygagqceocm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:56.915724039 CET	192.168.2.5	1.1.1.1	0xda67	Standard query (0)	uisgoqaoksgqsqyg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:57.055124044 CET	192.168.2.5	1.1.1.1	0xb8ea	Standard query (0)	ocgcqsagaakgkcma.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:57.193572998 CET	192.168.2.5	1.1.1.1	0x4637	Standard query (0)	okgigkmiieweagia.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:57.332643032 CET	192.168.2.5	1.1.1.1	0xb90f	Standard query (0)	skiwkmaaeeiqqgee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:57.472215891 CET	192.168.2.5	1.1.1.1	0x2c93	Standard query (0)	aagokgyaswscyaeu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:57.611112118 CET	192.168.2.5	1.1.1.1	0x2419	Standard query (0)	gmciuwiycsqycggy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:57.749906063 CET	192.168.2.5	1.1.1.1	0xd1d7	Standard query (0)	ggeymcaisciikucq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:57.890156984 CET	192.168.2.5	1.1.1.1	0x1317	Standard query (0)	uwskygguegqkasme.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:58.029191017 CET	192.168.2.5	1.1.1.1	0x2b73	Standard query (0)	cyumiiokkswcoeag.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:58.168642998 CET	192.168.2.5	1.1.1.1	0xf75d	Standard query (0)	oqisqmesaeoegmyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:58.308131933 CET	192.168.2.5	1.1.1.1	0xbd2a	Standard query (0)	wagasowawsoyycom.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:58.447628975 CET	192.168.2.5	1.1.1.1	0x2799	Standard query (0)	gaguweiwsgouugqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:58.587551117 CET	192.168.2.5	1.1.1.1	0xfd20	Standard query (0)	syyyweaywowycsia.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:58.730710983 CET	192.168.2.5	1.1.1.1	0x2e95	Standard query (0)	mmoycwqiuykiusuy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:58.870481014 CET	192.168.2.5	1.1.1.1	0x423d	Standard query (0)	ikoycakqiuuascco.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:59.008438110 CET	192.168.2.5	1.1.1.1	0xa8c3	Standard query (0)	cmuqekokuyuqgige.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:59.147730112 CET	192.168.2.5	1.1.1.1	0x15db	Standard query (0)	cywoimwmsoamqoem.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:59.288150072 CET	192.168.2.5	1.1.1.1	0x9187	Standard query (0)	skyiqyaeoykwcgiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:59.427900076 CET	192.168.2.5	1.1.1.1	0xb23d	Standard query (0)	ssiooaeoaocuyaow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:59.566862106 CET	192.168.2.5	1.1.1.1	0x560c	Standard query (0)	ywmgykycywqqewqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:59.706150055 CET	192.168.2.5	1.1.1.1	0xecd6	Standard query (0)	uosaescwmkiyscay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:59.847758055 CET	192.168.2.5	1.1.1.1	0xf857	Standard query (0)	eigywisgeoiskekg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:59.986279964 CET	192.168.2.5	1.1.1.1	0xaf4b	Standard query (0)	msqsoggkkoiokugk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:00.125905991 CET	192.168.2.5	1.1.1.1	0xd3f4	Standard query (0)	cmaaciimeememwao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:00.267716885 CET	192.168.2.5	1.1.1.1	0x7530	Standard query (0)	uigkauqkumywguig.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:00.411648035 CET	192.168.2.5	1.1.1.1	0xdbf1	Standard query (0)	wggygeoisauouuoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:00.551054955 CET	192.168.2.5	1.1.1.1	0x9b2d	Standard query (0)	okoykokgycygucya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:00.691368103 CET	192.168.2.5	1.1.1.1	0x2ba9	Standard query (0)	ewaoowewmsomgaiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:00.831597090 CET	192.168.2.5	1.1.1.1	0xbe7f	Standard query (0)	ieiegkokewkqmkwe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:00.971654892 CET	192.168.2.5	1.1.1.1	0xd391	Standard query (0)	gakesieaaickekuo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:01.111212015 CET	192.168.2.5	1.1.1.1	0xbb55	Standard query (0)	ecasigiwguqgguyw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:01.250511885 CET	192.168.2.5	1.1.1.1	0x8d2b	Standard query (0)	okwswuciummewsui.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:01.388906002 CET	192.168.2.5	1.1.1.1	0xdf59	Standard query (0)	ggaqiymaekkywusy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:01.527411938 CET	192.168.2.5	1.1.1.1	0x39b2	Standard query (0)	ocicimqkgucacyim.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:01.700540066 CET	192.168.2.5	1.1.1.1	0x232b	Standard query (0)	qoyisgoayskswigs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:01.841109037 CET	192.168.2.5	1.1.1.1	0x3e13	Standard query (0)	wsywmuwgsogemomw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:01.986381054 CET	192.168.2.5	1.1.1.1	0xb23b	Standard query (0)	skaeggkkcmoqoywy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:02.131654024 CET	192.168.2.5	1.1.1.1	0xf175	Standard query (0)	uowicsywgqmgagyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:02.270876884 CET	192.168.2.5	1.1.1.1	0x6249	Standard query (0)	yqyqgowkwqiggewq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:02.409976006 CET	192.168.2.5	1.1.1.1	0x66f1	Standard query (0)	aikmggymywuooyqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:02.549521923 CET	192.168.2.5	1.1.1.1	0xc253	Standard query (0)	semgkyogsqqwgsmy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:02.690535069 CET	192.168.2.5	1.1.1.1	0xaf9e	Standard query (0)	ucmwywoqciswaguc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:02.829730034 CET	192.168.2.5	1.1.1.1	0x6704	Standard query (0)	qowoagcmkkgqcswk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:02.975368977 CET	192.168.2.5	1.1.1.1	0xf3e2	Standard query (0)	mmgusimiaqiweyas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:03.121920109 CET	192.168.2.5	1.1.1.1	0x15e7	Standard query (0)	wgssaogcsscmkswu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:03.260845900 CET	192.168.2.5	1.1.1.1	0x1191	Standard query (0)	aoeewogkicikusoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:03.400130033 CET	192.168.2.5	1.1.1.1	0x54d2	Standard query (0)	ikggquqsigykqamc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:03.539323092 CET	192.168.2.5	1.1.1.1	0x8729	Standard query (0)	waaqccyeaeywuoqu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:03.678697109 CET	192.168.2.5	1.1.1.1	0x6950	Standard query (0)	ecgiqiiieksaooyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:03.829370975 CET	192.168.2.5	1.1.1.1	0xa78	Standard query (0)	iqcogqmwegaqewuu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:03.988148928 CET	192.168.2.5	1.1.1.1	0xa205	Standard query (0)	aiusammkykucyyso.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:04.128436089 CET	192.168.2.5	1.1.1.1	0x5519	Standard query (0)	qgkswogkcsaeegki.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:04.267875910 CET	192.168.2.5	1.1.1.1	0xadb9	Standard query (0)	ywcwqgmikmycwoeu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:04.407134056 CET	192.168.2.5	1.1.1.1	0xcf6d	Standard query (0)	eiqogaaggeswoges.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:04.551981926 CET	192.168.2.5	1.1.1.1	0xfa38	Standard query (0)	sekqikccsokicgye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:04.692090988 CET	192.168.2.5	1.1.1.1	0x9608	Standard query (0)	ssqggwwkkaayqkgk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:04.830637932 CET	192.168.2.5	1.1.1.1	0x3e0e	Standard query (0)	seiiycgosccmaykm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:04.975579977 CET	192.168.2.5	1.1.1.1	0x6637	Standard query (0)	aosagqwwquakwceq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:05.116607904 CET	192.168.2.5	1.1.1.1	0x69f6	Standard query (0)	qoiigkweqeiwycuo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:05.255455017 CET	192.168.2.5	1.1.1.1	0xfed3	Standard query (0)	oqycmugocqsyuaae.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:05.395026922 CET	192.168.2.5	1.1.1.1	0x4209	Standard query (0)	ewwgmiicuyowacum.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:05.535129070 CET	192.168.2.5	1.1.1.1	0x86e0	Standard query (0)	mmmoiaecqyuquoya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:05.676259041 CET	192.168.2.5	1.1.1.1	0xf282	Standard query (0)	auscackumyccuyuk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:05.817363024 CET	192.168.2.5	1.1.1.1	0x9adb	Standard query (0)	okgquokwaassqyyi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:05.963509083 CET	192.168.2.5	1.1.1.1	0xfd6b	Standard query (0)	uikciyeoaumwomqo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:06.109018087 CET	192.168.2.5	1.1.1.1	0xd0ad	Standard query (0)	gmoguamscceqkamk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:06.254827976 CET	192.168.2.5	1.1.1.1	0x8179	Standard query (0)	eqgoeemewamgucie.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:06.401046038 CET	192.168.2.5	1.1.1.1	0xf55	Standard query (0)	uoiyoewsiosismow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:06.544872999 CET	192.168.2.5	1.1.1.1	0x9c33	Standard query (0)	cekeeosckoouciwe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:06.684499025 CET	192.168.2.5	1.1.1.1	0x93e8	Standard query (0)	mycgaaaymgowwicw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:06.825880051 CET	192.168.2.5	1.1.1.1	0xc8f2	Standard query (0)	ecgmcmqswickqcgi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:06.966109991 CET	192.168.2.5	1.1.1.1	0xfe14	Standard query (0)	guwwqcuqmkmyyyyi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:07.104986906 CET	192.168.2.5	1.1.1.1	0xd07f	Standard query (0)	cygmqaagqcuusmiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:07.243355036 CET	192.168.2.5	1.1.1.1	0x872d	Standard query (0)	wggqoukyeokwgmoy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:07.382525921 CET	192.168.2.5	1.1.1.1	0x2202	Standard query (0)	okoccmmgswcmakcw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:07.521652937 CET	192.168.2.5	1.1.1.1	0x45cf	Standard query (0)	iesmewkokeqooioo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:07.661705017 CET	192.168.2.5	1.1.1.1	0x29dd	Standard query (0)	mmiccoqwqmssougs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:07.801410913 CET	192.168.2.5	1.1.1.1	0x445d	Standard query (0)	aoqymkkusuecomsw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:07.940466881 CET	192.168.2.5	1.1.1.1	0x47d0	Standard query (0)	mskmgwkuiamqikce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:08.081079006 CET	192.168.2.5	1.1.1.1	0x956c	Standard query (0)	waucsgsqqsqkacog.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:08.220463991 CET	192.168.2.5	1.1.1.1	0xafff	Standard query (0)	yqmqwygosgguwqsu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:08.359532118 CET	192.168.2.5	1.1.1.1	0x4480	Standard query (0)	wsicgeayaoueooom.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:08.499365091 CET	192.168.2.5	1.1.1.1	0xb2a4	Standard query (0)	uwagocmgakuuykiu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:08.640727997 CET	192.168.2.5	1.1.1.1	0x48e8	Standard query (0)	uowkoqwgqqeweume.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:08.779686928 CET	192.168.2.5	1.1.1.1	0xbf3	Standard query (0)	aakowgaeoeuekqyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:08.919078112 CET	192.168.2.5	1.1.1.1	0x154f	Standard query (0)	skmmaauasaqywsas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:09.067365885 CET	192.168.2.5	1.1.1.1	0x1a81	Standard query (0)	cygeomikesiegqsk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:09.210486889 CET	192.168.2.5	1.1.1.1	0x8cb3	Standard query (0)	okeyuasamkcqqeka.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:09.352195978 CET	192.168.2.5	1.1.1.1	0xd3d8	Standard query (0)	qagaeyiqsgakegya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:09.491149902 CET	192.168.2.5	1.1.1.1	0xd25c	Standard query (0)	ucoweesewcwiosgw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:09.630549908 CET	192.168.2.5	1.1.1.1	0x9e7c	Standard query (0)	sskawiyqmweogyqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:09.770334005 CET	192.168.2.5	1.1.1.1	0x4efa	Standard query (0)	wgwmaeskqmwumwkk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:09.913168907 CET	192.168.2.5	1.1.1.1	0xfb0c	Standard query (0)	quwocusecekwqkaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:10.053822994 CET	192.168.2.5	1.1.1.1	0x1845	Standard query (0)	qukyogcwsgswyayo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:10.194240093 CET	192.168.2.5	1.1.1.1	0xb84b	Standard query (0)	uiicikumwwsmaeem.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:10.334507942 CET	192.168.2.5	1.1.1.1	0xe7a1	Standard query (0)	wagyuykcqmqyygkw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:10.474647999 CET	192.168.2.5	1.1.1.1	0x4802	Standard query (0)	uiaqcykmqwcwgmeg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:10.614387989 CET	192.168.2.5	1.1.1.1	0x82a	Standard query (0)	uoeukcckqmmsuwaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:10.754868031 CET	192.168.2.5	1.1.1.1	0x31d6	Standard query (0)	gugueqckkyuaeqqy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:10.894453049 CET	192.168.2.5	1.1.1.1	0xb476	Standard query (0)	skqsqowayeqesqqk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:11.034166098 CET	192.168.2.5	1.1.1.1	0xe420	Standard query (0)	kuscomokgkmaommk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:11.174698114 CET	192.168.2.5	1.1.1.1	0xb968	Standard query (0)	wsmyawqeqguacwas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:11.313956022 CET	192.168.2.5	1.1.1.1	0xd94	Standard query (0)	ikuqcsooiucogaww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:11.453938007 CET	192.168.2.5	1.1.1.1	0x195b	Standard query (0)	iysmukmcmacuomic.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:11.595478058 CET	192.168.2.5	1.1.1.1	0xd355	Standard query (0)	ecqoqckqoaogcesy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:11.735042095 CET	192.168.2.5	1.1.1.1	0xb26c	Standard query (0)	iesmkwqgmkmksgam.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:11.874131918 CET	192.168.2.5	1.1.1.1	0xfd92	Standard query (0)	guwououoomacaysu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:12.013042927 CET	192.168.2.5	1.1.1.1	0x577d	Standard query (0)	ucsoeygscgagowqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:12.156272888 CET	192.168.2.5	1.1.1.1	0x8f38	Standard query (0)	ykeuawieaequiyag.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:12.296382904 CET	192.168.2.5	1.1.1.1	0x2aaf	Standard query (0)	cskowwiekeqaakki.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:12.435122013 CET	192.168.2.5	1.1.1.1	0xb9da	Standard query (0)	ecogmmaysgwkmwqm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:12.576575041 CET	192.168.2.5	1.1.1.1	0x68ac	Standard query (0)	uwuomysuqkaykwuy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:12.716991901 CET	192.168.2.5	1.1.1.1	0xa3a8	Standard query (0)	ikqokmauuissyuce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:12.855832100 CET	192.168.2.5	1.1.1.1	0xe77d	Standard query (0)	oeeoucsuawuqkqoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:12.994959116 CET	192.168.2.5	1.1.1.1	0x240b	Standard query (0)	ygquuyekcusgsqqu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:13.135545015 CET	192.168.2.5	1.1.1.1	0x89e8	Standard query (0)	uqsqcgouceqmigcg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:13.278819084 CET	192.168.2.5	1.1.1.1	0x1196	Standard query (0)	kwoesauawkouiecq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:13.418143034 CET	192.168.2.5	1.1.1.1	0x954	Standard query (0)	yywgmuqggsagcmco.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:13.557754040 CET	192.168.2.5	1.1.1.1	0xfb63	Standard query (0)	imumkckaqyieaasa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:13.696528912 CET	192.168.2.5	1.1.1.1	0x7f3a	Standard query (0)	qqkoemcaocsomwow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:13.836993933 CET	192.168.2.5	1.1.1.1	0xc629	Standard query (0)	awsigwcaesugycuk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:13.976502895 CET	192.168.2.5	1.1.1.1	0xd41b	Standard query (0)	kkqoqmmcwacsqiiu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:14.120512962 CET	192.168.2.5	1.1.1.1	0xbf52	Standard query (0)	iamowksweuqyssis.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:14.260066032 CET	192.168.2.5	1.1.1.1	0xca4e	Standard query (0)	wicwocqcucgaimwe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:14.401107073 CET	192.168.2.5	1.1.1.1	0xc45e	Standard query (0)	wiuyuwqiqkkogmoe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:14.540410995 CET	192.168.2.5	1.1.1.1	0x354c	Standard query (0)	ueyeeeegieoukoci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:14.686512947 CET	192.168.2.5	1.1.1.1	0xefb1	Standard query (0)	caysuwggmqimaqwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:14.824809074 CET	192.168.2.5	1.1.1.1	0x6805	Standard query (0)	kecsceaqksygeamy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:14.964191914 CET	192.168.2.5	1.1.1.1	0x3f27	Standard query (0)	oyyagswauqyckoye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:15.104394913 CET	192.168.2.5	1.1.1.1	0xfd4c	Standard query (0)	aciemoayegyggwiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:15.243511915 CET	192.168.2.5	1.1.1.1	0xc623	Standard query (0)	micemismikicsccc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:15.386429071 CET	192.168.2.5	1.1.1.1	0xf019	Standard query (0)	kwieueawsewqigey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:15.528153896 CET	192.168.2.5	1.1.1.1	0xe25	Standard query (0)	qiwmqykuesscgkac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:15.668344975 CET	192.168.2.5	1.1.1.1	0x308d	Standard query (0)	issaesuceymoyccq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:15.809705973 CET	192.168.2.5	1.1.1.1	0x10f4	Standard query (0)	sgowwwmqgkeyukwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:15.949068069 CET	192.168.2.5	1.1.1.1	0xdcab	Standard query (0)	kewweiikaaysqugi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:16.093005896 CET	192.168.2.5	1.1.1.1	0xf1e2	Standard query (0)	oywkwakwykimigck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:16.233726978 CET	192.168.2.5	1.1.1.1	0x5a92	Standard query (0)	aqkiemcseioemogk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:16.376441002 CET	192.168.2.5	1.1.1.1	0x1525	Standard query (0)	omoaicgooscecewq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:16.517137051 CET	192.168.2.5	1.1.1.1	0x51c	Standard query (0)	gcyciogqguooyici.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:16.659410000 CET	192.168.2.5	1.1.1.1	0x81ee	Standard query (0)	qwyikqowekcgesga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:16.802062035 CET	192.168.2.5	1.1.1.1	0x7aa0	Standard query (0)	moysoauykmieesas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:16.941668987 CET	192.168.2.5	1.1.1.1	0xb5ed	Standard query (0)	ysmmeamaooogyuwa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:17.082027912 CET	192.168.2.5	1.1.1.1	0x8930	Standard query (0)	qqggiaeuuaskcisa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:17.222531080 CET	192.168.2.5	1.1.1.1	0x720e	Standard query (0)	ukwgsimcamwqcqus.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:17.362562895 CET	192.168.2.5	1.1.1.1	0x1a54	Standard query (0)	makysawqyqkmmkuo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:17.502563000 CET	192.168.2.5	1.1.1.1	0xd372	Standard query (0)	gwuaqqsyegywuaya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:17.642446041 CET	192.168.2.5	1.1.1.1	0xe2f0	Standard query (0)	smwcqasgeqikoqss.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:17.783618927 CET	192.168.2.5	1.1.1.1	0x276e	Standard query (0)	qigaaawumoqgmwck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:17.923608065 CET	192.168.2.5	1.1.1.1	0xaada	Standard query (0)	kwkiuumqgigawcek.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:18.062500954 CET	192.168.2.5	1.1.1.1	0x8143	Standard query (0)	imcgogsosiogeqgc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:18.203178883 CET	192.168.2.5	1.1.1.1	0x76de	Standard query (0)	coosumygqywusaaq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:18.343035936 CET	192.168.2.5	1.1.1.1	0xa30f	Standard query (0)	muikisowiqmckiao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:18.491095066 CET	192.168.2.5	1.1.1.1	0x6b2b	Standard query (0)	eygeqyioakqgwkws.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:18.635184050 CET	192.168.2.5	1.1.1.1	0xd05b	Standard query (0)	wcagmacwieoosqok.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:18.774466991 CET	192.168.2.5	1.1.1.1	0xe498	Standard query (0)	igyccoycggkescsw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:18.913058996 CET	192.168.2.5	1.1.1.1	0xc3b2	Standard query (0)	uegmseugcsaymygc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:19.054382086 CET	192.168.2.5	1.1.1.1	0x9a57	Standard query (0)	gcgquesqkuokqoos.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:19.193521023 CET	192.168.2.5	1.1.1.1	0x1e2b	Standard query (0)	awcmmsyugikucuqg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:19.335294962 CET	192.168.2.5	1.1.1.1	0x1e2b	Standard query (0)	awcmmsyugikucuqg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:19.337476015 CET	192.168.2.5	1.1.1.1	0x2581	Standard query (0)	qqmoakcgiagmaiou.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:19.476891041 CET	192.168.2.5	1.1.1.1	0x488	Standard query (0)	qcweoeaqygkgoyqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:19.618833065 CET	192.168.2.5	1.1.1.1	0xeee1	Standard query (0)	kwcqymkoyiusyywg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:19.773144007 CET	192.168.2.5	1.1.1.1	0xeee1	Standard query (0)	kwcqymkoyiusyywg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:19.919686079 CET	192.168.2.5	1.1.1.1	0xacb7	Standard query (0)	uysuukowkciwgmko.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:20.059874058 CET	192.168.2.5	1.1.1.1	0xab4f	Standard query (0)	yyqmiikqggkgkcke.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:20.199317932 CET	192.168.2.5	1.1.1.1	0xe9f	Standard query (0)	cgwgwmsuyaicegcq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:20.340774059 CET	192.168.2.5	1.1.1.1	0xb5cc	Standard query (0)	oesgsmmsyegwkaii.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:20.497170925 CET	192.168.2.5	1.1.1.1	0x73c9	Standard query (0)	eeimyyskiwmsmwaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:20.636137009 CET	192.168.2.5	1.1.1.1	0x50f	Standard query (0)	akqmmimguqeacqki.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:20.794497967 CET	192.168.2.5	1.1.1.1	0xace0	Standard query (0)	eeuqeoimgoqakquw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:20.934990883 CET	192.168.2.5	1.1.1.1	0x22f	Standard query (0)	mookqcgowekwsyme.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:21.074089050 CET	192.168.2.5	1.1.1.1	0x8c3f	Standard query (0)	iaamsmcuweooiums.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:21.212481976 CET	192.168.2.5	1.1.1.1	0x649a	Standard query (0)	qwwkyygoyymumeqa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:21.351192951 CET	192.168.2.5	1.1.1.1	0x5f04	Standard query (0)	qwmqmwoieykcoums.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:21.490519047 CET	192.168.2.5	1.1.1.1	0x8ee6	Standard query (0)	aqmmgwoeiissyuay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:21.630146027 CET	192.168.2.5	1.1.1.1	0xf602	Standard query (0)	ukgeakkwimkacgwm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:21.769294024 CET	192.168.2.5	1.1.1.1	0xfb55	Standard query (0)	wcuwikyucakswsgy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:21.911344051 CET	192.168.2.5	1.1.1.1	0x7a5b	Standard query (0)	oyqmksygwiuekomo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:22.051745892 CET	192.168.2.5	1.1.1.1	0x4f6c	Standard query (0)	gokuyyiawuwwyeqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:22.190973997 CET	192.168.2.5	1.1.1.1	0x7e6a	Standard query (0)	qqumaeswmyusisoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:22.332468033 CET	192.168.2.5	1.1.1.1	0x8a9b	Standard query (0)	ekommiasesmcaysg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:22.473735094 CET	192.168.2.5	1.1.1.1	0xc917	Standard query (0)	kwokcgwecseqcsck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:22.613706112 CET	192.168.2.5	1.1.1.1	0xb65	Standard query (0)	cgcukekaacucqesm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:22.754709005 CET	192.168.2.5	1.1.1.1	0xb21e	Standard query (0)	sgiwoemuskksgmem.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:22.894375086 CET	192.168.2.5	1.1.1.1	0x90be	Standard query (0)	miyuaaeqyewssisg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:23.037094116 CET	192.168.2.5	1.1.1.1	0x2c42	Standard query (0)	awquimmiceucqika.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:23.175477028 CET	192.168.2.5	1.1.1.1	0xb180	Standard query (0)	qwsgiwukuaoocqgw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:23.320609093 CET	192.168.2.5	1.1.1.1	0xd6ce	Standard query (0)	coyikkwmyomyykmo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:23.491158962 CET	192.168.2.5	1.1.1.1	0x79bf	Standard query (0)	osyawgmkggwwaise.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:23.631983995 CET	192.168.2.5	1.1.1.1	0x4325	Standard query (0)	gcuasoickeyqugwe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:23.772254944 CET	192.168.2.5	1.1.1.1	0x6e71	Standard query (0)	oscegykuecgmiioq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:23.913762093 CET	192.168.2.5	1.1.1.1	0x6e71	Standard query (0)	oscegykuecgmiioq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:23.914453030 CET	192.168.2.5	1.1.1.1	0xdc72	Standard query (0)	camkaaeqmmemkeqo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:24.053040981 CET	192.168.2.5	1.1.1.1	0xae35	Standard query (0)	gwswakimuyyacece.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:24.194556952 CET	192.168.2.5	1.1.1.1	0x869e	Standard query (0)	giqagqyuwgskokgg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:24.332747936 CET	192.168.2.5	1.1.1.1	0x466f	Standard query (0)	uqswoygsykiwckyk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:24.471487045 CET	192.168.2.5	1.1.1.1	0xa999	Standard query (0)	wccgukagisyugimy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:24.611011028 CET	192.168.2.5	1.1.1.1	0x4d31	Standard query (0)	qieoqgsomueyeass.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:24.750184059 CET	192.168.2.5	1.1.1.1	0xddc4	Standard query (0)	uqumusgyyygmiicq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:24.891118050 CET	192.168.2.5	1.1.1.1	0xdba1	Standard query (0)	wuowyewqgeeycsio.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:25.031244040 CET	192.168.2.5	1.1.1.1	0xf8fc	Standard query (0)	sgckugycwoyyoeow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:25.171370983 CET	192.168.2.5	1.1.1.1	0xdbcd	Standard query (0)	keyqaymgcyswowqc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:25.313096046 CET	192.168.2.5	1.1.1.1	0x51cc	Standard query (0)	yskeokkusmkcyosa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:25.452183962 CET	192.168.2.5	1.1.1.1	0x4e1b	Standard query (0)	ymmoqwiyeomigemu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:25.593679905 CET	192.168.2.5	1.1.1.1	0xa543	Standard query (0)	iaiyeiseoyssykuu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:25.734524012 CET	192.168.2.5	1.1.1.1	0x46fa	Standard query (0)	gcsgyeomwaaiuwmg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:25.889550924 CET	192.168.2.5	1.1.1.1	0x46fa	Standard query (0)	gcsgyeomwaaiuwmg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:25.923089027 CET	192.168.2.5	1.1.1.1	0x8e8e	Standard query (0)	cuccscimmuweokoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.070754051 CET	192.168.2.5	1.1.1.1	0x8e8e	Standard query (0)	cuccscimmuweokoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.096678019 CET	192.168.2.5	1.1.1.1	0x9776	Standard query (0)	wigeqewyusckikqk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.240621090 CET	192.168.2.5	1.1.1.1	0x8e29	Standard query (0)	wowsuycqmmumwayq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.386085033 CET	192.168.2.5	1.1.1.1	0x8e29	Standard query (0)	wowsuycqmmumwayq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.389864922 CET	192.168.2.5	1.1.1.1	0x5475	Standard query (0)	keqgamuiascccwou.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.529911995 CET	192.168.2.5	1.1.1.1	0x334c	Standard query (0)	awyogsywqmeoaemc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.670819044 CET	192.168.2.5	1.1.1.1	0x345	Standard query (0)	gogceqqcygywqquk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.810264111 CET	192.168.2.5	1.1.1.1	0x3ef	Standard query (0)	akewqoewkigoyqgk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.950184107 CET	192.168.2.5	1.1.1.1	0xe646	Standard query (0)	smgomgmggmimcecy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:27.095139980 CET	192.168.2.5	1.1.1.1	0xa74	Standard query (0)	uqemqeoguyciagkm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:27.241831064 CET	192.168.2.5	1.1.1.1	0xe25e	Standard query (0)	oekuaqgwaqowmqwa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:27.392062902 CET	192.168.2.5	1.1.1.1	0x4569	Standard query (0)	sgqwuwmskisykocm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:27.535259008 CET	192.168.2.5	1.1.1.1	0x4be0	Standard query (0)	kewgquswkewgaweo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:27.679965973 CET	192.168.2.5	1.1.1.1	0x5a80	Standard query (0)	eekokuwaauqiuoci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:27.822941065 CET	192.168.2.5	1.1.1.1	0xaa84	Standard query (0)	qweaumwmomesioio.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:27.965068102 CET	192.168.2.5	1.1.1.1	0x8f88	Standard query (0)	couuuksyuscyykke.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:28.106991053 CET	192.168.2.5	1.1.1.1	0xcf4b	Standard query (0)	moygyoakyaoosocs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:28.256839991 CET	192.168.2.5	1.1.1.1	0xd085	Standard query (0)	qwikeawwkykgymoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:28.419523954 CET	192.168.2.5	1.1.1.1	0xd085	Standard query (0)	qwikeawwkykgymoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:28.423855066 CET	192.168.2.5	1.1.1.1	0xd12a	Standard query (0)	aqcyeeuumekyigiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:28.571253061 CET	192.168.2.5	1.1.1.1	0xc68e	Standard query (0)	mugimcuecsqusuec.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:28.711158991 CET	192.168.2.5	1.1.1.1	0x1dcf	Standard query (0)	suogmuweyqgoqkgk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:28.851263046 CET	192.168.2.5	1.1.1.1	0xacdb	Standard query (0)	ukgmmiakkgwgssak.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:28.990649939 CET	192.168.2.5	1.1.1.1	0x5ef4	Standard query (0)	yyuewgegwqqkccay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:29.132036924 CET	192.168.2.5	1.1.1.1	0xde7a	Standard query (0)	qqmoqouykmakcwwo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:29.273184061 CET	192.168.2.5	1.1.1.1	0xb0f8	Standard query (0)	ekucgqkwyqioewgm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:29.416111946 CET	192.168.2.5	1.1.1.1	0x7256	Standard query (0)	cgmocwqyagacokyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:29.555103064 CET	192.168.2.5	1.1.1.1	0xc4e8	Standard query (0)	ekuisswoiwwasmug.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:29.702528954 CET	192.168.2.5	1.1.1.1	0xedca	Standard query (0)	mucqakweaoaeqwqg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:29.852338076 CET	192.168.2.5	1.1.1.1	0xedca	Standard query (0)	mucqakweaoaeqwqg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:29.924906015 CET	192.168.2.5	1.1.1.1	0xdbf	Standard query (0)	iaqkoyuacqaqiiaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:30.070267916 CET	192.168.2.5	1.1.1.1	0xdbf	Standard query (0)	iaqkoyuacqaqiiaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:30.252104998 CET	192.168.2.5	1.1.1.1	0xe82	Standard query (0)	ysysqieskmiymcsq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:30.420419931 CET	192.168.2.5	1.1.1.1	0xe82	Standard query (0)	ysysqieskmiymcsq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:30.473144054 CET	192.168.2.5	1.1.1.1	0x1bad	Standard query (0)	ossaysgggqwskqck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:30.637861967 CET	192.168.2.5	1.1.1.1	0x1bad	Standard query (0)	ossaysgggqwskqck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:30.805440903 CET	192.168.2.5	1.1.1.1	0xda8e	Standard query (0)	ygceccuaqcgscgks.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:30.961322069 CET	192.168.2.5	1.1.1.1	0xda8e	Standard query (0)	ygceccuaqcgscgks.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:31.030863047 CET	192.168.2.5	1.1.1.1	0xa597	Standard query (0)	kkyoeaiisaskwsgi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:31.180135012 CET	192.168.2.5	1.1.1.1	0xa597	Standard query (0)	kkyoeaiisaskwsgi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:31.266105890 CET	192.168.2.5	1.1.1.1	0xfafa	Standard query (0)	kkmycqgoqwsgagmm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:31.414614916 CET	192.168.2.5	1.1.1.1	0xfafa	Standard query (0)	kkmycqgoqwsgagmm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:31.598193884 CET	192.168.2.5	1.1.1.1	0xc882	Standard query (0)	kkqgkiqaiegyuuac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:31.745907068 CET	192.168.2.5	1.1.1.1	0xc882	Standard query (0)	kkqgkiqaiegyuuac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:31.819067001 CET	192.168.2.5	1.1.1.1	0xe13e	Standard query (0)	sgyosccwmusakiag.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:31.962250948 CET	192.168.2.5	1.1.1.1	0xe13e	Standard query (0)	sgyosccwmusakiag.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:32.041104078 CET	192.168.2.5	1.1.1.1	0x7092	Standard query (0)	esmcwycsgkmmkmie.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:32.196666956 CET	192.168.2.5	1.1.1.1	0x7092	Standard query (0)	esmcwycsgkmmkmie.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:32.264585018 CET	192.168.2.5	1.1.1.1	0x297b	Standard query (0)	eeagssccuuqgoyck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:32.420707941 CET	192.168.2.5	1.1.1.1	0x297b	Standard query (0)	eeagssccuuqgoyck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:32.494467974 CET	192.168.2.5	1.1.1.1	0x26f2	Standard query (0)	kweqseyaokkowemm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:32.651894093 CET	192.168.2.5	1.1.1.1	0x26f2	Standard query (0)	kweqseyaokkowemm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:32.808825970 CET	192.168.2.5	1.1.1.1	0xb0cf	Standard query (0)	omqukiqqqkicumaq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:32.975692034 CET	192.168.2.5	1.1.1.1	0xb0cf	Standard query (0)	omqukiqqqkicumaq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:33.027620077 CET	192.168.2.5	1.1.1.1	0x6be1	Standard query (0)	cgagsqguosagcyko.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:33.178786993 CET	192.168.2.5	1.1.1.1	0x6be1	Standard query (0)	cgagsqguosagcyko.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:33.357929945 CET	192.168.2.5	1.1.1.1	0x1ad1	Standard query (0)	kwuyeysggksaauew.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:33.526062965 CET	192.168.2.5	1.1.1.1	0x1ad1	Standard query (0)	kwuyeysggksaauew.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:33.670602083 CET	192.168.2.5	1.1.1.1	0x4e64	Standard query (0)	yyyocaqgqkgawuoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:33.838140965 CET	192.168.2.5	1.1.1.1	0x4e64	Standard query (0)	yyyocaqgqkgawuoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:33.898138046 CET	192.168.2.5	1.1.1.1	0x33c5	Standard query (0)	qcyusyquosgecuec.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:34.054236889 CET	192.168.2.5	1.1.1.1	0x33c5	Standard query (0)	qcyusyquosgecuec.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:34.201766014 CET	192.168.2.5	1.1.1.1	0x13f	Standard query (0)	wciikuskwmgwyqqo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:34.367352009 CET	192.168.2.5	1.1.1.1	0x13f	Standard query (0)	wciikuskwmgwyqqo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:34.424863100 CET	192.168.2.5	1.1.1.1	0x1e31	Standard query (0)	giekgiaycwsmicgi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:34.570148945 CET	192.168.2.5	1.1.1.1	0x1e31	Standard query (0)	giekgiaycwsmicgi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:34.756766081 CET	192.168.2.5	1.1.1.1	0xad9	Standard query (0)	moigwmmwmwaesewy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:34.898035049 CET	192.168.2.5	1.1.1.1	0xad9	Standard query (0)	moigwmmwmwaesewy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:34.976299047 CET	192.168.2.5	1.1.1.1	0x25d1	Standard query (0)	uyeyicisiasmeaiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:35.132481098 CET	192.168.2.5	1.1.1.1	0x25d1	Standard query (0)	uyeyicisiasmeaiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:35.286988974 CET	192.168.2.5	1.1.1.1	0x3739	Standard query (0)	wikomoakewmgswsg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:35.429290056 CET	192.168.2.5	1.1.1.1	0x3739	Standard query (0)	wikomoakewmgswsg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:35.698852062 CET	192.168.2.5	1.1.1.1	0x2171	Standard query (0)	eyqewqgswoiwucau.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:35.851216078 CET	192.168.2.5	1.1.1.1	0x2171	Standard query (0)	eyqewqgswoiwucau.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:35.918067932 CET	192.168.2.5	1.1.1.1	0x84ba	Standard query (0)	igsykuymgikayiyw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:36.076216936 CET	192.168.2.5	1.1.1.1	0x84ba	Standard query (0)	igsykuymgikayiyw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:36.139096975 CET	192.168.2.5	1.1.1.1	0xd1fb	Standard query (0)	awoiesggoyaqumsc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:36.306485891 CET	192.168.2.5	1.1.1.1	0xd1fb	Standard query (0)	awoiesggoyaqumsc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:36.471070051 CET	192.168.2.5	1.1.1.1	0xaed	Standard query (0)	akwcugeaamycaqus.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:36.634136915 CET	192.168.2.5	1.1.1.1	0xaed	Standard query (0)	akwcugeaamycaqus.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:36.802849054 CET	192.168.2.5	1.1.1.1	0xf707	Standard query (0)	oyigkwsqmiqmyaem.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:36.944762945 CET	192.168.2.5	1.1.1.1	0xf707	Standard query (0)	oyigkwsqmiqmyaem.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.028383970 CET	192.168.2.5	1.1.1.1	0x807	Standard query (0)	qiakkiycwyckaoyk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.179115057 CET	192.168.2.5	1.1.1.1	0x807	Standard query (0)	qiakkiycwyckaoyk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.267287016 CET	192.168.2.5	1.1.1.1	0xaa3c	Standard query (0)	couqoiaioicsmiyi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.413475990 CET	192.168.2.5	1.1.1.1	0xaa3c	Standard query (0)	couqoiaioicsmiyi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.488377094 CET	192.168.2.5	1.1.1.1	0xe21a	Standard query (0)	goqwgykuuockgkiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.632251978 CET	192.168.2.5	1.1.1.1	0xe21a	Standard query (0)	goqwgykuuockgkiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.713376045 CET	192.168.2.5	1.1.1.1	0x539	Standard query (0)	mawieiaeeguckoce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.866698980 CET	192.168.2.5	1.1.1.1	0x539	Standard query (0)	mawieiaeeguckoce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.936326027 CET	192.168.2.5	1.1.1.1	0x6ec0	Standard query (0)	yyaqueaqcsokisee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.096823931 CET	192.168.2.5	1.1.1.1	0x6ec0	Standard query (0)	yyaqueaqcsokisee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.159395933 CET	192.168.2.5	1.1.1.1	0xfc19	Standard query (0)	cassqaqeuciekkeo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.328396082 CET	192.168.2.5	1.1.1.1	0xfc19	Standard query (0)	cassqaqeuciekkeo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.387389898 CET	192.168.2.5	1.1.1.1	0xd688	Standard query (0)	gwscqggqeoiuwqkc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.546147108 CET	192.168.2.5	1.1.1.1	0xd688	Standard query (0)	gwscqggqeoiuwqkc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.706146955 CET	192.168.2.5	1.1.1.1	0xa87	Standard query (0)	caiqmqkuwumoeemo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.850384951 CET	192.168.2.5	1.1.1.1	0xa87	Standard query (0)	caiqmqkuwumoeemo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.929025888 CET	192.168.2.5	1.1.1.1	0x490a	Standard query (0)	qwgogmasssoceeqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.084825039 CET	192.168.2.5	1.1.1.1	0x490a	Standard query (0)	qwgogmasssoceeqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.156028032 CET	192.168.2.5	1.1.1.1	0x78a0	Standard query (0)	akyqwcwaokmmkguw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.317095995 CET	192.168.2.5	1.1.1.1	0x78a0	Standard query (0)	akyqwcwaokmmkguw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.382211924 CET	192.168.2.5	1.1.1.1	0xccb9	Standard query (0)	kkoguuoieqeogeic.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.539711952 CET	192.168.2.5	1.1.1.1	0xccb9	Standard query (0)	kkoguuoieqeogeic.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.606699944 CET	192.168.2.5	1.1.1.1	0x5802	Standard query (0)	sagqoimosegsiusq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.773562908 CET	192.168.2.5	1.1.1.1	0x5802	Standard query (0)	sagqoimosegsiusq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.834237099 CET	192.168.2.5	1.1.1.1	0xb0b1	Standard query (0)	aqwacqooyiwygyoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.994240999 CET	192.168.2.5	1.1.1.1	0xb0b1	Standard query (0)	aqwacqooyiwygyoc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:40.062237978 CET	192.168.2.5	1.1.1.1	0xb429	Standard query (0)	ukyogakooecoqmwk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:40.209815025 CET	192.168.2.5	1.1.1.1	0xb429	Standard query (0)	ukyogakooecoqmwk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:40.283621073 CET	192.168.2.5	1.1.1.1	0xf434	Standard query (0)	suuugkackgokicyg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:40.428570986 CET	192.168.2.5	1.1.1.1	0xf434	Standard query (0)	suuugkackgokicyg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:40.510766983 CET	192.168.2.5	1.1.1.1	0x121d	Standard query (0)	woieimgsuwmisgsa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:40.666265011 CET	192.168.2.5	1.1.1.1	0x121d	Standard query (0)	woieimgsuwmisgsa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:40.843925953 CET	192.168.2.5	1.1.1.1	0x40cd	Standard query (0)	yyeuksqgowaaewyy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:40.994290113 CET	192.168.2.5	1.1.1.1	0x40cd	Standard query (0)	yyeuksqgowaaewyy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:41.063381910 CET	192.168.2.5	1.1.1.1	0x633c	Standard query (0)	kesowemsyoqwmwma.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:41.210798025 CET	192.168.2.5	1.1.1.1	0x633c	Standard query (0)	kesowemsyoqwmwma.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:41.318751097 CET	192.168.2.5	1.1.1.1	0xf2a8	Standard query (0)	iswkciyqkcwyyyoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:41.460329056 CET	192.168.2.5	1.1.1.1	0xf2a8	Standard query (0)	iswkciyqkcwyyyoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:41.539697886 CET	192.168.2.5	1.1.1.1	0x66ae	Standard query (0)	kwecsqeywykucesq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:41.697069883 CET	192.168.2.5	1.1.1.1	0x66ae	Standard query (0)	kwecsqeywykucesq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:41.767791033 CET	192.168.2.5	1.1.1.1	0x5973	Standard query (0)	goakocqoasequusi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:41.930270910 CET	192.168.2.5	1.1.1.1	0x5973	Standard query (0)	goakocqoasequusi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:42.078743935 CET	192.168.2.5	1.1.1.1	0x64dd	Standard query (0)	oygeiewaeigymgci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:42.241731882 CET	192.168.2.5	1.1.1.1	0x64dd	Standard query (0)	oygeiewaeigymgci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:42.394257069 CET	192.168.2.5	1.1.1.1	0x4346	Standard query (0)	omqkkmkwwgmaaoqk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:42.538753033 CET	192.168.2.5	1.1.1.1	0x4346	Standard query (0)	omqkkmkwwgmaaoqk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:42.614162922 CET	192.168.2.5	1.1.1.1	0x3f57	Standard query (0)	caqswskigemmaoes.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:42.757652998 CET	192.168.2.5	1.1.1.1	0x3f57	Standard query (0)	caqswskigemmaoes.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:42.840624094 CET	192.168.2.5	1.1.1.1	0x41c5	Standard query (0)	ueimyeqaawcyewac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:42.992072105 CET	192.168.2.5	1.1.1.1	0x41c5	Standard query (0)	ueimyeqaawcyewac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:43.151432991 CET	192.168.2.5	1.1.1.1	0xa8fe	Standard query (0)	kekmcgakqcicegie.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:43.304632902 CET	192.168.2.5	1.1.1.1	0xa8fe	Standard query (0)	kekmcgakqcicegie.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:43.466011047 CET	192.168.2.5	1.1.1.1	0xf1a0	Standard query (0)	ymiiqugmiuaoqcwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:43.616981030 CET	192.168.2.5	1.1.1.1	0xf1a0	Standard query (0)	ymiiqugmiuaoqcwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:43.691680908 CET	192.168.2.5	1.1.1.1	0x2f22	Standard query (0)	osqeiasimqgaoygy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:43.842159033 CET	192.168.2.5	1.1.1.1	0x2f22	Standard query (0)	osqeiasimqgaoygy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:43.912349939 CET	192.168.2.5	1.1.1.1	0x3baf	Standard query (0)	osqycyuomwweqgoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:44.070156097 CET	192.168.2.5	1.1.1.1	0x3baf	Standard query (0)	osqycyuomwweqgoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:44.253587961 CET	192.168.2.5	1.1.1.1	0x2221	Standard query (0)	qccagsecgcqcuiou.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:44.414154053 CET	192.168.2.5	1.1.1.1	0x2221	Standard query (0)	qccagsecgcqcuiou.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:44.475744009 CET	192.168.2.5	1.1.1.1	0xda35	Standard query (0)	kegwueiwuqwoeysg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:44.618151903 CET	192.168.2.5	1.1.1.1	0xda35	Standard query (0)	kegwueiwuqwoeysg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:44.697556973 CET	192.168.2.5	1.1.1.1	0xa7a0	Standard query (0)	oygmkqkooqokiiuw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:44.855161905 CET	192.168.2.5	1.1.1.1	0xa7a0	Standard query (0)	oygmkqkooqokiiuw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:44.918744087 CET	192.168.2.5	1.1.1.1	0xc8f8	Standard query (0)	acqkcwiiwggmuiuy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:45.088574886 CET	192.168.2.5	1.1.1.1	0xc8f8	Standard query (0)	acqkcwiiwggmuiuy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:45.231426954 CET	192.168.2.5	1.1.1.1	0xc7ed	Standard query (0)	sugsqseasiuccwou.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:45.397505045 CET	192.168.2.5	1.1.1.1	0xc7ed	Standard query (0)	sugsqseasiuccwou.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:45.448945045 CET	192.168.2.5	1.1.1.1	0x807e	Standard query (0)	smccsacmmusgkaqy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:45.601078987 CET	192.168.2.5	1.1.1.1	0x807e	Standard query (0)	smccsacmmusgkaqy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:45.672161102 CET	192.168.2.5	1.1.1.1	0x7dc4	Standard query (0)	cgciecgcocwassiu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:45.835227966 CET	192.168.2.5	1.1.1.1	0x7dc4	Standard query (0)	cgciecgcocwassiu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.007343054 CET	192.168.2.5	1.1.1.1	0xe84f	Standard query (0)	wueiymqkmeqoaeoa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.163772106 CET	192.168.2.5	1.1.1.1	0xe84f	Standard query (0)	wueiymqkmeqoaeoa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.230165005 CET	192.168.2.5	1.1.1.1	0x853e	Standard query (0)	awuasceiaugcyimo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.386164904 CET	192.168.2.5	1.1.1.1	0x853e	Standard query (0)	awuasceiaugcyimo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.448738098 CET	192.168.2.5	1.1.1.1	0xcc04	Standard query (0)	qqeuqoguwmyeoyyy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.600827932 CET	192.168.2.5	1.1.1.1	0xcc04	Standard query (0)	qqeuqoguwmyeoyyy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.676755905 CET	192.168.2.5	1.1.1.1	0x388f	Standard query (0)	muuwmkkgesiqeqms.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.819310904 CET	192.168.2.5	1.1.1.1	0x388f	Standard query (0)	muuwmkkgesiqeqms.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.904670954 CET	192.168.2.5	1.1.1.1	0x4233	Standard query (0)	gcgwqyqugwoyoaey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.053680897 CET	192.168.2.5	1.1.1.1	0x4233	Standard query (0)	gcgwqyqugwoyoaey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.125807047 CET	192.168.2.5	1.1.1.1	0xd64	Standard query (0)	iaamggceyqysmkmg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.272424936 CET	192.168.2.5	1.1.1.1	0xd64	Standard query (0)	iaamggceyqysmkmg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.347171068 CET	192.168.2.5	1.1.1.1	0x5354	Standard query (0)	ueokeesyogikokkq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.506480932 CET	192.168.2.5	1.1.1.1	0x5354	Standard query (0)	ueokeesyogikokkq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.565630913 CET	192.168.2.5	1.1.1.1	0x62f5	Standard query (0)	sasckqaoagasgwsk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.723367929 CET	192.168.2.5	1.1.1.1	0x62f5	Standard query (0)	sasckqaoagasgwsk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.783596039 CET	192.168.2.5	1.1.1.1	0x268d	Standard query (0)	cukeocigwcwkgyoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.950167894 CET	192.168.2.5	1.1.1.1	0x268d	Standard query (0)	cukeocigwcwkgyoi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:48.102166891 CET	192.168.2.5	1.1.1.1	0x958	Standard query (0)	awaciggcyceyokce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:48.244075060 CET	192.168.2.5	1.1.1.1	0x958	Standard query (0)	awaciggcyceyokce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:48.326116085 CET	192.168.2.5	1.1.1.1	0x806	Standard query (0)	uyokuyiqqowcscqo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:48.478528023 CET	192.168.2.5	1.1.1.1	0x806	Standard query (0)	uyokuyiqqowcscqo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:48.547147989 CET	192.168.2.5	1.1.1.1	0x5c1c	Standard query (0)	qcuueqqykmeqswys.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:48.697134018 CET	192.168.2.5	1.1.1.1	0x5c1c	Standard query (0)	qcuueqqykmeqswys.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:48.858114958 CET	192.168.2.5	1.1.1.1	0xfdeb	Standard query (0)	iskaigeaaociwauo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:49.009637117 CET	192.168.2.5	1.1.1.1	0xfdeb	Standard query (0)	iskaigeaaociwauo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:49.076405048 CET	192.168.2.5	1.1.1.1	0x4ffb	Standard query (0)	qqwoeoqkcogwcyeg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:49.228734970 CET	192.168.2.5	1.1.1.1	0x4ffb	Standard query (0)	qqwoeoqkcogwcyeg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:49.301429987 CET	192.168.2.5	1.1.1.1	0xe775	Standard query (0)	gouigugcegqomqik.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:49.449899912 CET	192.168.2.5	1.1.1.1	0xe775	Standard query (0)	gouigugcegqomqik.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:49.633863926 CET	192.168.2.5	1.1.1.1	0xb3fa	Standard query (0)	magwucmkkmykkess.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:49.792942047 CET	192.168.2.5	1.1.1.1	0xb3fa	Standard query (0)	magwucmkkmykkess.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:49.858911037 CET	192.168.2.5	1.1.1.1	0x64c1	Standard query (0)	wuimeuggwgaokuau.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.026173115 CET	192.168.2.5	1.1.1.1	0x64c1	Standard query (0)	wuimeuggwgaokuau.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.091110945 CET	192.168.2.5	1.1.1.1	0x820e	Standard query (0)	kqggcmgimkogkaeq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.242178917 CET	192.168.2.5	1.1.1.1	0x820e	Standard query (0)	kqggcmgimkogkaeq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.314173937 CET	192.168.2.5	1.1.1.1	0xf372	Standard query (0)	keyemuoegimmgqiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.460588932 CET	192.168.2.5	1.1.1.1	0xf372	Standard query (0)	keyemuoegimmgqiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.535283089 CET	192.168.2.5	1.1.1.1	0xf615	Standard query (0)	wmgoyusqoacscaym.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.698788881 CET	192.168.2.5	1.1.1.1	0xf615	Standard query (0)	wmgoyusqoacscaym.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.761765003 CET	192.168.2.5	1.1.1.1	0xcc98	Standard query (0)	oqgksoekmuecmuks.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.929730892 CET	192.168.2.5	1.1.1.1	0xcc98	Standard query (0)	oqgksoekmuecmuks.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.986609936 CET	192.168.2.5	1.1.1.1	0xfba9	Standard query (0)	qoaqqguqascciiey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.147802114 CET	192.168.2.5	1.1.1.1	0xfba9	Standard query (0)	qoaqqguqascciiey.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.215346098 CET	192.168.2.5	1.1.1.1	0x9a90	Standard query (0)	ykwswkacmaqscuaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.366691113 CET	192.168.2.5	1.1.1.1	0x9a90	Standard query (0)	ykwswkacmaqscuaw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.438215017 CET	192.168.2.5	1.1.1.1	0x1062	Standard query (0)	quuicoywaeqsaqam.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.600879908 CET	192.168.2.5	1.1.1.1	0x1062	Standard query (0)	quuicoywaeqsaqam.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.657568932 CET	192.168.2.5	1.1.1.1	0x1282	Standard query (0)	gawwyyweayiamauo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.804081917 CET	192.168.2.5	1.1.1.1	0x1282	Standard query (0)	gawwyyweayiamauo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.880227089 CET	192.168.2.5	1.1.1.1	0x62b8	Standard query (0)	ggmagoysqkegguym.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.022553921 CET	192.168.2.5	1.1.1.1	0x62b8	Standard query (0)	ggmagoysqkegguym.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.103255987 CET	192.168.2.5	1.1.1.1	0xe2af	Standard query (0)	qosiywgcuamwuuos.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.257586956 CET	192.168.2.5	1.1.1.1	0xe2af	Standard query (0)	qosiywgcuamwuuos.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.328195095 CET	192.168.2.5	1.1.1.1	0xbaaf	Standard query (0)	ikiakwccommusayk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.477732897 CET	192.168.2.5	1.1.1.1	0xbaaf	Standard query (0)	ikiakwccommusayk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.546833992 CET	192.168.2.5	1.1.1.1	0x613f	Standard query (0)	kuowguomwakoagem.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.694596052 CET	192.168.2.5	1.1.1.1	0x613f	Standard query (0)	kuowguomwakoagem.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.769354105 CET	192.168.2.5	1.1.1.1	0x17aa	Standard query (0)	iycyekwmcqmygiwc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.913141012 CET	192.168.2.5	1.1.1.1	0x17aa	Standard query (0)	iycyekwmcqmygiwc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.994870901 CET	192.168.2.5	1.1.1.1	0xec6d	Standard query (0)	wsggkemgawiyoyag.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.153770924 CET	192.168.2.5	1.1.1.1	0xec6d	Standard query (0)	wsggkemgawiyoyag.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.213924885 CET	192.168.2.5	1.1.1.1	0x7ed6	Standard query (0)	uokueeguoscassay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.383128881 CET	192.168.2.5	1.1.1.1	0x7ed6	Standard query (0)	uokueeguoscassay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.439028025 CET	192.168.2.5	1.1.1.1	0x935a	Standard query (0)	gmmgooqqmkmccsyo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.597353935 CET	192.168.2.5	1.1.1.1	0x935a	Standard query (0)	gmmgooqqmkmccsyo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.662252903 CET	192.168.2.5	1.1.1.1	0x3846	Standard query (0)	aucauemcyuaguocm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.819478989 CET	192.168.2.5	1.1.1.1	0x3846	Standard query (0)	aucauemcyuaguocm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.891088963 CET	192.168.2.5	1.1.1.1	0xcdba	Standard query (0)	waicykwqykeikcwk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:54.038830042 CET	192.168.2.5	1.1.1.1	0xcdba	Standard query (0)	waicykwqykeikcwk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:54.115185976 CET	192.168.2.5	1.1.1.1	0x6feb	Standard query (0)	cyaeiisoyegwmaai.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:54.257160902 CET	192.168.2.5	1.1.1.1	0x6feb	Standard query (0)	cyaeiisoyegwmaai.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:54.444490910 CET	192.168.2.5	1.1.1.1	0x9c35	Standard query (0)	yksmsewamgkcawsk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:54.602191925 CET	192.168.2.5	1.1.1.1	0x9c35	Standard query (0)	yksmsewamgkcawsk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:54.669234037 CET	192.168.2.5	1.1.1.1	0xc164	Standard query (0)	ssckkeymaqqkauaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:54.821063042 CET	192.168.2.5	1.1.1.1	0xc164	Standard query (0)	ssckkeymaqqkauaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:54.894505978 CET	192.168.2.5	1.1.1.1	0x23c	Standard query (0)	kiskqiemmoucayee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.038443089 CET	192.168.2.5	1.1.1.1	0x23c	Standard query (0)	kiskqiemmoucayee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.113610029 CET	192.168.2.5	1.1.1.1	0x7da7	Standard query (0)	csamiaaeciweemoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.261359930 CET	192.168.2.5	1.1.1.1	0x7da7	Standard query (0)	csamiaaeciweemoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.342138052 CET	192.168.2.5	1.1.1.1	0x2eee	Standard query (0)	wgemkqmwasoamykk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.507472038 CET	192.168.2.5	1.1.1.1	0x2eee	Standard query (0)	wgemkqmwasoamykk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.561482906 CET	192.168.2.5	1.1.1.1	0x4fb6	Standard query (0)	augywiqkiooqagai.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.726336956 CET	192.168.2.5	1.1.1.1	0x4fb6	Standard query (0)	augywiqkiooqagai.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.782242060 CET	192.168.2.5	1.1.1.1	0x3f39	Standard query (0)	aiikcuqwkqqgmmuc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.934181929 CET	192.168.2.5	1.1.1.1	0x3f39	Standard query (0)	aiikcuqwkqqgmmuc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.009305954 CET	192.168.2.5	1.1.1.1	0x6b06	Standard query (0)	yqsygmwgyeswauee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.163480997 CET	192.168.2.5	1.1.1.1	0x6b06	Standard query (0)	yqsygmwgyeswauee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.232188940 CET	192.168.2.5	1.1.1.1	0x9b29	Standard query (0)	kuuwqyicicueeksi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.384041071 CET	192.168.2.5	1.1.1.1	0x9b29	Standard query (0)	kuuwqyicicueeksi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.453547001 CET	192.168.2.5	1.1.1.1	0x850d	Standard query (0)	guceugymaqesqyog.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.622189999 CET	192.168.2.5	1.1.1.1	0x850d	Standard query (0)	guceugymaqesqyog.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.682965994 CET	192.168.2.5	1.1.1.1	0xfb82	Standard query (0)	eiqqkwekkoqucugk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.852598906 CET	192.168.2.5	1.1.1.1	0xfb82	Standard query (0)	eiqqkwekkoqucugk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.901670933 CET	192.168.2.5	1.1.1.1	0xf54c	Standard query (0)	myqaoiaciwyiksim.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:57.069823027 CET	192.168.2.5	1.1.1.1	0xf54c	Standard query (0)	myqaoiaciwyiksim.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:57.127969027 CET	192.168.2.5	1.1.1.1	0xed7	Standard query (0)	iqsogimomioksqss.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:57.286900043 CET	192.168.2.5	1.1.1.1	0xed7	Standard query (0)	iqsogimomioksqss.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:57.438066006 CET	192.168.2.5	1.1.1.1	0x5178	Standard query (0)	msyyqqocckwcwqsq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:57.585330009 CET	192.168.2.5	1.1.1.1	0x5178	Standard query (0)	msyyqqocckwcwqsq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:57.662702084 CET	192.168.2.5	1.1.1.1	0xa683	Standard query (0)	kcuacaiscasmmeuc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:57.804048061 CET	192.168.2.5	1.1.1.1	0xa683	Standard query (0)	kcuacaiscasmmeuc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:57.885169029 CET	192.168.2.5	1.1.1.1	0x4655	Standard query (0)	yqmmaakeuowasuaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:58.040539980 CET	192.168.2.5	1.1.1.1	0x4655	Standard query (0)	yqmmaakeuowasuaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:58.114273071 CET	192.168.2.5	1.1.1.1	0x3285	Standard query (0)	oquiosikasgcasiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:58.257355928 CET	192.168.2.5	1.1.1.1	0x3285	Standard query (0)	oquiosikasgcasiw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:58.333941936 CET	192.168.2.5	1.1.1.1	0x1f0c	Standard query (0)	cmyagoqaqeowiecy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:58.476134062 CET	192.168.2.5	1.1.1.1	0x1f0c	Standard query (0)	cmyagoqaqeowiecy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:58.553236961 CET	192.168.2.5	1.1.1.1	0xd9a3	Standard query (0)	syceoaskgquyieos.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:58.696588039 CET	192.168.2.5	1.1.1.1	0xd9a3	Standard query (0)	syceoaskgquyieos.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:58.882318974 CET	192.168.2.5	1.1.1.1	0xddd6	Standard query (0)	ykcgwkgwcoqyugqg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:59.043193102 CET	192.168.2.5	1.1.1.1	0xddd6	Standard query (0)	ykcgwkgwcoqyugqg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:59.211889982 CET	192.168.2.5	1.1.1.1	0xa56f	Standard query (0)	oqmyqqwuiuaiigci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:59.370244980 CET	192.168.2.5	1.1.1.1	0xa56f	Standard query (0)	oqmyqqwuiuaiigci.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:59.433568954 CET	192.168.2.5	1.1.1.1	0x2d73	Standard query (0)	auskeuccomeakswi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:59.601064920 CET	192.168.2.5	1.1.1.1	0x2d73	Standard query (0)	auskeuccomeakswi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:59.743652105 CET	192.168.2.5	1.1.1.1	0x9d88	Standard query (0)	cmgeyaisiymscucu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:59.897547960 CET	192.168.2.5	1.1.1.1	0x9d88	Standard query (0)	cmgeyaisiymscucu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:59.964543104 CET	192.168.2.5	1.1.1.1	0xe464	Standard query (0)	ecooqgmioaukkiek.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:00.116236925 CET	192.168.2.5	1.1.1.1	0xe464	Standard query (0)	ecooqgmioaukkiek.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:00.278906107 CET	192.168.2.5	1.1.1.1	0x95e4	Standard query (0)	iqsoeecisqgmauqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:00.428805113 CET	192.168.2.5	1.1.1.1	0x95e4	Standard query (0)	iqsoeecisqgmauqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:00.504636049 CET	192.168.2.5	1.1.1.1	0x81cf	Standard query (0)	yeomyogimecqkkiu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:00.648446083 CET	192.168.2.5	1.1.1.1	0x81cf	Standard query (0)	yeomyogimecqkkiu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:00.814384937 CET	192.168.2.5	1.1.1.1	0x83b8	Standard query (0)	uowccagcekcagqcq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:00.960382938 CET	192.168.2.5	1.1.1.1	0x83b8	Standard query (0)	uowccagcekcagqcq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.033180952 CET	192.168.2.5	1.1.1.1	0x471b	Standard query (0)	myckiuaukiksguyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.197402954 CET	192.168.2.5	1.1.1.1	0x471b	Standard query (0)	myckiuaukiksguyc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.252870083 CET	192.168.2.5	1.1.1.1	0xdd2a	Standard query (0)	iqsokeqeouccmuwc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.414437056 CET	192.168.2.5	1.1.1.1	0xdd2a	Standard query (0)	iqsokeqeouccmuwc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.477922916 CET	192.168.2.5	1.1.1.1	0xb82f	Standard query (0)	yqgoeegqeiyqqsiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.633768082 CET	192.168.2.5	1.1.1.1	0xb82f	Standard query (0)	yqgoeegqeiyqqsiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.705250025 CET	192.168.2.5	1.1.1.1	0x5c57	Standard query (0)	iywsuagcuwgimqeo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.876365900 CET	192.168.2.5	1.1.1.1	0x5c57	Standard query (0)	iywsuagcuwgimqeo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.930639982 CET	192.168.2.5	1.1.1.1	0xc33b	Standard query (0)	ecammuqkkqyucoai.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:02.089907885 CET	192.168.2.5	1.1.1.1	0xc33b	Standard query (0)	ecammuqkkqyucoai.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:02.170600891 CET	192.168.2.5	1.1.1.1	0xcaf2	Standard query (0)	ieyeuycgicikgamu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:02.335931063 CET	192.168.2.5	1.1.1.1	0xcaf2	Standard query (0)	ieyeuycgicikgamu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:02.501640081 CET	192.168.2.5	1.1.1.1	0xe102	Standard query (0)	iyewyuckwykisgck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:02.667088985 CET	192.168.2.5	1.1.1.1	0xe102	Standard query (0)	iyewyuckwykisgck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:02.729650974 CET	192.168.2.5	1.1.1.1	0x481f	Standard query (0)	mmkakgcagcuccqsk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:02.885572910 CET	192.168.2.5	1.1.1.1	0x481f	Standard query (0)	mmkakgcagcuccqsk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:02.960937977 CET	192.168.2.5	1.1.1.1	0x4045	Standard query (0)	ewieqqiiukcowiwm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:03.132250071 CET	192.168.2.5	1.1.1.1	0x4045	Standard query (0)	ewieqqiiukcowiwm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:03.184504986 CET	192.168.2.5	1.1.1.1	0x980a	Standard query (0)	ykqwqkwkiaokmqsg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:03.335340977 CET	192.168.2.5	1.1.1.1	0x980a	Standard query (0)	ykqwqkwkiaokmqsg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:03.405524015 CET	192.168.2.5	1.1.1.1	0xb967	Standard query (0)	wmaqkcccaqgacsck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:03.553936005 CET	192.168.2.5	1.1.1.1	0xb967	Standard query (0)	wmaqkcccaqgacsck.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:03.740679979 CET	192.168.2.5	1.1.1.1	0x743b	Standard query (0)	eqekseueimasciym.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:03.882040977 CET	192.168.2.5	1.1.1.1	0x743b	Standard query (0)	eqekseueimasciym.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.049879074 CET	192.168.2.5	1.1.1.1	0xf55a	Standard query (0)	ausikyguukygiigc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.194514036 CET	192.168.2.5	1.1.1.1	0xf55a	Standard query (0)	ausikyguukygiigc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.278655052 CET	192.168.2.5	1.1.1.1	0x45ca	Standard query (0)	aasgkgymuaeqciyw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.429075003 CET	192.168.2.5	1.1.1.1	0x45ca	Standard query (0)	aasgkgymuaeqciyw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.501996994 CET	192.168.2.5	1.1.1.1	0x1ee6	Standard query (0)	wawmyyockkgegeoe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.647811890 CET	192.168.2.5	1.1.1.1	0x1ee6	Standard query (0)	wawmyyockkgegeoe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.721401930 CET	192.168.2.5	1.1.1.1	0x7a2a	Standard query (0)	ywcgcgyyyqscecqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.885972977 CET	192.168.2.5	1.1.1.1	0x7a2a	Standard query (0)	ywcgcgyyyqscecqw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.950330019 CET	192.168.2.5	1.1.1.1	0x6d83	Standard query (0)	kuccgkagekoikgmm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.964358091 CET	192.168.2.5	1.1.1.1	0x6ddf	Standard query (0)	bzib.nelreports.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.964556932 CET	192.168.2.5	1.1.1.1	0x601f	Standard query (0)	bzib.nelreports.net	65	IN (0x0001)	false
Dec 12, 2024 12:44:05.119467974 CET	192.168.2.5	1.1.1.1	0x6d83	Standard query (0)	kuccgkagekoikgmm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.171354055 CET	192.168.2.5	1.1.1.1	0x2f4e	Standard query (0)	kumigqceckauukog.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.336086035 CET	192.168.2.5	1.1.1.1	0x2f4e	Standard query (0)	kumigqceckauukog.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.392563105 CET	192.168.2.5	1.1.1.1	0x1554	Standard query (0)	eckkuysaycwcqqku.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.538234949 CET	192.168.2.5	1.1.1.1	0x1554	Standard query (0)	eckkuysaycwcqqku.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.615515947 CET	192.168.2.5	1.1.1.1	0xed40	Standard query (0)	iyeammagiquggqcm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.757137060 CET	192.168.2.5	1.1.1.1	0xed40	Standard query (0)	iyeammagiquggqcm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.846977949 CET	192.168.2.5	1.1.1.1	0xb0db	Standard query (0)	owmikgkucmkwweqq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.993819952 CET	192.168.2.5	1.1.1.1	0xb0db	Standard query (0)	owmikgkucmkwweqq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:06.176100016 CET	192.168.2.5	1.1.1.1	0xf598	Standard query (0)	ykkeioesuamggwwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:06.319514036 CET	192.168.2.5	1.1.1.1	0xf598	Standard query (0)	ykkeioesuamggwwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:06.410166979 CET	192.168.2.5	1.1.1.1	0x4231	Standard query (0)	eqkkcuekysiksqco.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:06.554047108 CET	192.168.2.5	1.1.1.1	0x4231	Standard query (0)	eqkkcuekysiksqco.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:06.640940905 CET	192.168.2.5	1.1.1.1	0x9e31	Standard query (0)	kimoecemogwywowc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:06.793337107 CET	192.168.2.5	1.1.1.1	0x9e31	Standard query (0)	kimoecemogwywowc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:06.868890047 CET	192.168.2.5	1.1.1.1	0x370d	Standard query (0)	syuauicykgemuiok.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.027517080 CET	192.168.2.5	1.1.1.1	0x370d	Standard query (0)	syuauicykgemuiok.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.094810963 CET	192.168.2.5	1.1.1.1	0x2a42	Standard query (0)	iecgcgwccmuowsea.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.255950928 CET	192.168.2.5	1.1.1.1	0x2a42	Standard query (0)	iecgcgwccmuowsea.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.314084053 CET	192.168.2.5	1.1.1.1	0xa7be	Standard query (0)	ggcqakgyieemkmuo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.460375071 CET	192.168.2.5	1.1.1.1	0xa7be	Standard query (0)	ggcqakgyieemkmuo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.541503906 CET	192.168.2.5	1.1.1.1	0xcbc0	Standard query (0)	aieuacwguymakoes.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.697371006 CET	192.168.2.5	1.1.1.1	0xcbc0	Standard query (0)	aieuacwguymakoes.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.765713930 CET	192.168.2.5	1.1.1.1	0xa840	Standard query (0)	ggwimysceeqqgiyu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.928651094 CET	192.168.2.5	1.1.1.1	0xa840	Standard query (0)	ggwimysceeqqgiyu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.985488892 CET	192.168.2.5	1.1.1.1	0x6ffc	Standard query (0)	wsiawkaagcyucsac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.146223068 CET	192.168.2.5	1.1.1.1	0x6ffc	Standard query (0)	wsiawkaagcyucsac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.204040051 CET	192.168.2.5	1.1.1.1	0x75cb	Standard query (0)	iycyikamuooaacma.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.366647005 CET	192.168.2.5	1.1.1.1	0x75cb	Standard query (0)	iycyikamuooaacma.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.426847935 CET	192.168.2.5	1.1.1.1	0x9c34	Standard query (0)	mykuowgamqeskuki.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.570593119 CET	192.168.2.5	1.1.1.1	0x9c34	Standard query (0)	mykuowgamqeskuki.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.652853966 CET	192.168.2.5	1.1.1.1	0x2400	Standard query (0)	skagyeaoseoukumo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.819602013 CET	192.168.2.5	1.1.1.1	0x2400	Standard query (0)	skagyeaoseoukumo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.989013910 CET	192.168.2.5	1.1.1.1	0x40a4	Standard query (0)	eiqkweimkgoomugk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:09.132114887 CET	192.168.2.5	1.1.1.1	0x40a4	Standard query (0)	eiqkweimkgoomugk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:09.210398912 CET	192.168.2.5	1.1.1.1	0x2871	Standard query (0)	uiommoyoeogiawye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:09.366401911 CET	192.168.2.5	1.1.1.1	0x2871	Standard query (0)	uiommoyoeogiawye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:09.435506105 CET	192.168.2.5	1.1.1.1	0x54e6	Standard query (0)	gueimqgaakkuakms.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:09.585308075 CET	192.168.2.5	1.1.1.1	0x54e6	Standard query (0)	gueimqgaakkuakms.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:09.657109022 CET	192.168.2.5	1.1.1.1	0x6fa4	Standard query (0)	kowqayugiigekmmo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:09.804044008 CET	192.168.2.5	1.1.1.1	0x6fa4	Standard query (0)	kowqayugiigekmmo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:09.878978968 CET	192.168.2.5	1.1.1.1	0x493c	Standard query (0)	csiymeqcoikqsaow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.022969961 CET	192.168.2.5	1.1.1.1	0x493c	Standard query (0)	csiymeqcoikqsaow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.098614931 CET	192.168.2.5	1.1.1.1	0xcf40	Standard query (0)	yeueycumkskuescc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.241812944 CET	192.168.2.5	1.1.1.1	0xcf40	Standard query (0)	yeueycumkskuescc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.326486111 CET	192.168.2.5	1.1.1.1	0xf0b1	Standard query (0)	mmigqysqmokkemay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.479070902 CET	192.168.2.5	1.1.1.1	0xf0b1	Standard query (0)	mmigqysqmokkemay.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.551860094 CET	192.168.2.5	1.1.1.1	0x925e	Standard query (0)	mmqosscscmqcuacg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.711297989 CET	192.168.2.5	1.1.1.1	0x925e	Standard query (0)	mmqosscscmqcuacg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.774920940 CET	192.168.2.5	1.1.1.1	0xd665	Standard query (0)	kisiusqmiiqcuyia.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.944677114 CET	192.168.2.5	1.1.1.1	0xd665	Standard query (0)	kisiusqmiiqcuyia.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.106703997 CET	192.168.2.5	1.1.1.1	0xdc69	Standard query (0)	mskouqiwuueeyssa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.257350922 CET	192.168.2.5	1.1.1.1	0xdc69	Standard query (0)	mskouqiwuueeyssa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.326342106 CET	192.168.2.5	1.1.1.1	0x8a02	Standard query (0)	okmiqsaegoymiski.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.476068974 CET	192.168.2.5	1.1.1.1	0x8a02	Standard query (0)	okmiqsaegoymiski.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.548592091 CET	192.168.2.5	1.1.1.1	0xe221	Standard query (0)	yqwywskqqakoiwcy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.694926977 CET	192.168.2.5	1.1.1.1	0xe221	Standard query (0)	yqwywskqqakoiwcy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.768914938 CET	192.168.2.5	1.1.1.1	0xf4be	Standard query (0)	kuoqkakokweawekm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.913444042 CET	192.168.2.5	1.1.1.1	0xf4be	Standard query (0)	kuoqkakokweawekm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.991420031 CET	192.168.2.5	1.1.1.1	0x647	Standard query (0)	mgycommyaaqeqmkm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:12.132458925 CET	192.168.2.5	1.1.1.1	0x647	Standard query (0)	mgycommyaaqeqmkm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:12.304174900 CET	192.168.2.5	1.1.1.1	0x4bdd	Standard query (0)	ocewmkymckokmugk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:12.465579987 CET	192.168.2.5	1.1.1.1	0x4bdd	Standard query (0)	ocewmkymckokmugk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:12.634731054 CET	192.168.2.5	1.1.1.1	0x81ac	Standard query (0)	wsgeqoowqmqmcyye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:12.792614937 CET	192.168.2.5	1.1.1.1	0x81ac	Standard query (0)	wsgeqoowqmqmcyye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:12.968199015 CET	192.168.2.5	1.1.1.1	0xc929	Standard query (0)	skecqquggosqicqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:13.131720066 CET	192.168.2.5	1.1.1.1	0xc929	Standard query (0)	skecqquggosqicqi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:13.300915003 CET	192.168.2.5	1.1.1.1	0x4f8e	Standard query (0)	sekowasmqguwsuyo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:13.444200993 CET	192.168.2.5	1.1.1.1	0x4f8e	Standard query (0)	sekowasmqguwsuyo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:13.524560928 CET	192.168.2.5	1.1.1.1	0x6d4	Standard query (0)	kcwwsqiwqggiwcyk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:13.683069944 CET	192.168.2.5	1.1.1.1	0x6d4	Standard query (0)	kcwwsqiwqggiwcyk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:13.746282101 CET	192.168.2.5	1.1.1.1	0x6f26	Standard query (0)	owwysogioycmsuai.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:13.916853905 CET	192.168.2.5	1.1.1.1	0x6f26	Standard query (0)	owwysogioycmsuai.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:13.968322039 CET	192.168.2.5	1.1.1.1	0xb6b1	Standard query (0)	oqyqscyykseqyqow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.131896973 CET	192.168.2.5	1.1.1.1	0xb6b1	Standard query (0)	oqyqscyykseqyqow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.190135956 CET	192.168.2.5	1.1.1.1	0xdddf	Standard query (0)	sseeykkocmqieyyg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.335150957 CET	192.168.2.5	1.1.1.1	0xdddf	Standard query (0)	sseeykkocmqieyyg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.412636995 CET	192.168.2.5	1.1.1.1	0x62e1	Standard query (0)	qusgcyswiemkqqqa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.569710016 CET	192.168.2.5	1.1.1.1	0x62e1	Standard query (0)	qusgcyswiemkqqqa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.648484945 CET	192.168.2.5	1.1.1.1	0xd584	Standard query (0)	oqguiqcckakicqkc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.819847107 CET	192.168.2.5	1.1.1.1	0xd584	Standard query (0)	oqguiqcckakicqkc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.871989965 CET	192.168.2.5	1.1.1.1	0x7395	Standard query (0)	wguimyqeoyiaumsi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.023086071 CET	192.168.2.5	1.1.1.1	0x7395	Standard query (0)	wguimyqeoyiaumsi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.098144054 CET	192.168.2.5	1.1.1.1	0xa22	Standard query (0)	yqsesiecouossmmi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.242335081 CET	192.168.2.5	1.1.1.1	0xa22	Standard query (0)	yqsesiecouossmmi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.326324940 CET	192.168.2.5	1.1.1.1	0x6bbf	Standard query (0)	okmoqgusiuyugieo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.476037025 CET	192.168.2.5	1.1.1.1	0x6bbf	Standard query (0)	okmoqgusiuyugieo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.553483009 CET	192.168.2.5	1.1.1.1	0xd012	Standard query (0)	ggiqseieggeoyeow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.694948912 CET	192.168.2.5	1.1.1.1	0xd012	Standard query (0)	ggiqseieggeoyeow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.779855013 CET	192.168.2.5	1.1.1.1	0xd05c	Standard query (0)	ceiekqsouoywwoic.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.936458111 CET	192.168.2.5	1.1.1.1	0xd05c	Standard query (0)	ceiekqsouoywwoic.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.005913973 CET	192.168.2.5	1.1.1.1	0x1aeb	Standard query (0)	guqkcceaoeyoqoyq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.148216009 CET	192.168.2.5	1.1.1.1	0x1aeb	Standard query (0)	guqkcceaoeyoqoyq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.226809978 CET	192.168.2.5	1.1.1.1	0x9c9	Standard query (0)	ceuyecmmqgeeqemu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.397758007 CET	192.168.2.5	1.1.1.1	0x9c9	Standard query (0)	ceuyecmmqgeeqemu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.446088076 CET	192.168.2.5	1.1.1.1	0x80c6	Standard query (0)	mysqkauciwceesek.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.615071058 CET	192.168.2.5	1.1.1.1	0x80c6	Standard query (0)	mysqkauciwceesek.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.672441959 CET	192.168.2.5	1.1.1.1	0x8f74	Standard query (0)	kueqeiimeikkcmuy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.835650921 CET	192.168.2.5	1.1.1.1	0x8f74	Standard query (0)	kueqeiimeikkcmuy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.894917011 CET	192.168.2.5	1.1.1.1	0x3d44	Standard query (0)	aumgsckyakkcgwgc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:17.038587093 CET	192.168.2.5	1.1.1.1	0x3d44	Standard query (0)	aumgsckyakkcgwgc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:17.119209051 CET	192.168.2.5	1.1.1.1	0xc28e	Standard query (0)	mgeccekkkemcmsco.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:17.273330927 CET	192.168.2.5	1.1.1.1	0xc28e	Standard query (0)	mgeccekkkemcmsco.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:17.437381029 CET	192.168.2.5	1.1.1.1	0x7523	Standard query (0)	ggqswaiwcwwueaac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:17.585464001 CET	192.168.2.5	1.1.1.1	0x7523	Standard query (0)	ggqswaiwcwwueaac.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:17.663786888 CET	192.168.2.5	1.1.1.1	0x4de3	Standard query (0)	kiuawkcguuoikmme.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:17.819781065 CET	192.168.2.5	1.1.1.1	0x4de3	Standard query (0)	kiuawkcguuoikmme.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:17.887604952 CET	192.168.2.5	1.1.1.1	0xcec3	Standard query (0)	kcoaiymskwqcauuw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:18.038630009 CET	192.168.2.5	1.1.1.1	0xcec3	Standard query (0)	kcoaiymskwqcauuw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:18.109450102 CET	192.168.2.5	1.1.1.1	0x9532	Standard query (0)	ykgggmusocemeskm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:18.260534048 CET	192.168.2.5	1.1.1.1	0x9532	Standard query (0)	ykgggmusocemeskm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:18.330800056 CET	192.168.2.5	1.1.1.1	0xda71	Standard query (0)	wgysqssusaemskkw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:18.494805098 CET	192.168.2.5	1.1.1.1	0xda71	Standard query (0)	wgysqssusaemskkw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:18.661602974 CET	192.168.2.5	1.1.1.1	0x8d72	Standard query (0)	oqegwsisauaesaea.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:18.820064068 CET	192.168.2.5	1.1.1.1	0x8d72	Standard query (0)	oqegwsisauaesaea.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:18.889617920 CET	192.168.2.5	1.1.1.1	0xb8b	Standard query (0)	owycaegcuiimcukc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.038594961 CET	192.168.2.5	1.1.1.1	0xb8b	Standard query (0)	owycaegcuiimcukc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.110486984 CET	192.168.2.5	1.1.1.1	0x8561	Standard query (0)	cmuscyakosgukoas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.262629986 CET	192.168.2.5	1.1.1.1	0x8561	Standard query (0)	cmuscyakosgukoas.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.335660934 CET	192.168.2.5	1.1.1.1	0xd83f	Standard query (0)	yqikuqaioyqqiwmw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.500093937 CET	192.168.2.5	1.1.1.1	0xd83f	Standard query (0)	yqikuqaioyqqiwmw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.559930086 CET	192.168.2.5	1.1.1.1	0x9169	Standard query (0)	eiwmagmcsgkoooso.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.719696999 CET	192.168.2.5	1.1.1.1	0x9169	Standard query (0)	eiwmagmcsgkoooso.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.785831928 CET	192.168.2.5	1.1.1.1	0xf729	Standard query (0)	cmiewoeeeyosacus.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.936590910 CET	192.168.2.5	1.1.1.1	0xf729	Standard query (0)	cmiewoeeeyosacus.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.009073973 CET	192.168.2.5	1.1.1.1	0x381	Standard query (0)	ceoyuaakgoseaykc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.178958893 CET	192.168.2.5	1.1.1.1	0x381	Standard query (0)	ceoyuaakgoseaykc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.231020927 CET	192.168.2.5	1.1.1.1	0xd2ee	Standard query (0)	gmuuqgaowsscqocw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.381925106 CET	192.168.2.5	1.1.1.1	0xd2ee	Standard query (0)	gmuuqgaowsscqocw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.450381994 CET	192.168.2.5	1.1.1.1	0xc45b	Standard query (0)	uoaogmkwgsausoye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.600733042 CET	192.168.2.5	1.1.1.1	0xc45b	Standard query (0)	uoaogmkwgsausoye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.760253906 CET	192.168.2.5	1.1.1.1	0x9669	Standard query (0)	msmswakokwkaaiiu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.913175106 CET	192.168.2.5	1.1.1.1	0x9669	Standard query (0)	msmswakokwkaaiiu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.985860109 CET	192.168.2.5	1.1.1.1	0x1c40	Standard query (0)	kcagsugwmswmqiuw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.131850958 CET	192.168.2.5	1.1.1.1	0x1c40	Standard query (0)	kcagsugwmswmqiuw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.220479012 CET	192.168.2.5	1.1.1.1	0xbe56	Standard query (0)	seqeuqomcuuuuaea.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.366436958 CET	192.168.2.5	1.1.1.1	0xbe56	Standard query (0)	seqeuqomcuuuuaea.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.447982073 CET	192.168.2.5	1.1.1.1	0xb1ab	Standard query (0)	oqcsmsouwkcuyaoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.600917101 CET	192.168.2.5	1.1.1.1	0xb1ab	Standard query (0)	oqcsmsouwkcuyaoo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.671617031 CET	192.168.2.5	1.1.1.1	0xf6cc	Standard query (0)	cmksisquyyqwwmag.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.824959040 CET	192.168.2.5	1.1.1.1	0xf6cc	Standard query (0)	cmksisquyyqwwmag.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.895046949 CET	192.168.2.5	1.1.1.1	0x5c3c	Standard query (0)	ucuamgqecgomicgi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:22.058974028 CET	192.168.2.5	1.1.1.1	0x5c3c	Standard query (0)	ucuamgqecgomicgi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:22.119858980 CET	192.168.2.5	1.1.1.1	0x9bb6	Standard query (0)	ykyisgakyugwseya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:22.277762890 CET	192.168.2.5	1.1.1.1	0x9bb6	Standard query (0)	ykyisgakyugwseya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:22.345140934 CET	192.168.2.5	1.1.1.1	0x537	Standard query (0)	oqqaakemigkwogcs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:22.507047892 CET	192.168.2.5	1.1.1.1	0x537	Standard query (0)	oqqaakemigkwogcs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:22.573865891 CET	192.168.2.5	1.1.1.1	0x467e	Standard query (0)	ggusoyqqicokiysm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:22.725855112 CET	192.168.2.5	1.1.1.1	0x467e	Standard query (0)	ggusoyqqicokiysm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:22.886600018 CET	192.168.2.5	1.1.1.1	0x77	Standard query (0)	aikuqasyeiugeiio.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.038764954 CET	192.168.2.5	1.1.1.1	0x77	Standard query (0)	aikuqasyeiugeiio.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.112772942 CET	192.168.2.5	1.1.1.1	0x491d	Standard query (0)	wmoiaeekogscwuew.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.257409096 CET	192.168.2.5	1.1.1.1	0x491d	Standard query (0)	wmoiaeekogscwuew.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.337510109 CET	192.168.2.5	1.1.1.1	0x7399	Standard query (0)	gmeqccaiocakquuk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.491666079 CET	192.168.2.5	1.1.1.1	0x7399	Standard query (0)	gmeqccaiocakquuk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.563812971 CET	192.168.2.5	1.1.1.1	0x6ff1	Standard query (0)	yeioouseacmiciyw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.710410118 CET	192.168.2.5	1.1.1.1	0x6ff1	Standard query (0)	yeioouseacmiciyw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.784152031 CET	192.168.2.5	1.1.1.1	0xd52e	Standard query (0)	uoiuamiqegoeicgu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.936820030 CET	192.168.2.5	1.1.1.1	0xd52e	Standard query (0)	uoiuamiqegoeicgu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:24.003532887 CET	192.168.2.5	1.1.1.1	0x1869	Standard query (0)	qgugqmcwawgyuama.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:24.192810059 CET	192.168.2.5	1.1.1.1	0x1869	Standard query (0)	qgugqmcwawgyuama.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:24.229171991 CET	192.168.2.5	1.1.1.1	0x3a03	Standard query (0)	aamskiawwiwwmcak.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:24.396593094 CET	192.168.2.5	1.1.1.1	0x3a03	Standard query (0)	aamskiawwiwwmcak.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:24.559173107 CET	192.168.2.5	1.1.1.1	0xfe8c	Standard query (0)	yqysmywsumymqwis.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:24.711206913 CET	192.168.2.5	1.1.1.1	0xfe8c	Standard query (0)	yqysmywsumymqwis.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:24.894216061 CET	192.168.2.5	1.1.1.1	0xb2b2	Standard query (0)	eqeuykyqmakycswk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:25.042860985 CET	192.168.2.5	1.1.1.1	0xb2b2	Standard query (0)	eqeuykyqmakycswk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:25.121762037 CET	192.168.2.5	1.1.1.1	0x2f5e	Standard query (0)	wmiiaeyooekwqkya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:25.292161942 CET	192.168.2.5	1.1.1.1	0x2f5e	Standard query (0)	wmiiaeyooekwqkya.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:25.455387115 CET	192.168.2.5	1.1.1.1	0xc7b3	Standard query (0)	gaiaysiwkgqouusw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:25.616413116 CET	192.168.2.5	1.1.1.1	0xc7b3	Standard query (0)	gaiaysiwkgqouusw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:25.767810106 CET	192.168.2.5	1.1.1.1	0x2ee1	Standard query (0)	ssmwweeyqaumqisg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:25.930944920 CET	192.168.2.5	1.1.1.1	0x2ee1	Standard query (0)	ssmwweeyqaumqisg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:25.995745897 CET	192.168.2.5	1.1.1.1	0x2c36	Standard query (0)	ucmkykimauqkwcme.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:26.163758993 CET	192.168.2.5	1.1.1.1	0x2c36	Standard query (0)	ucmkykimauqkwcme.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:26.218924999 CET	192.168.2.5	1.1.1.1	0x5453	Standard query (0)	ieimsimsawwoiook.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:26.367026091 CET	192.168.2.5	1.1.1.1	0x5453	Standard query (0)	ieimsimsawwoiook.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:26.534053087 CET	192.168.2.5	1.1.1.1	0xa96	Standard query (0)	aoicciqqqeqggowe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:26.679400921 CET	192.168.2.5	1.1.1.1	0xa96	Standard query (0)	aoicciqqqeqggowe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:26.755410910 CET	192.168.2.5	1.1.1.1	0x4b2d	Standard query (0)	ggciqwsioiqeoqew.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:26.898195028 CET	192.168.2.5	1.1.1.1	0x4b2d	Standard query (0)	ggciqwsioiqeoqew.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:26.982347965 CET	192.168.2.5	1.1.1.1	0x3a93	Standard query (0)	cmqwyscguecgggwu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:27.132477999 CET	192.168.2.5	1.1.1.1	0x3a93	Standard query (0)	cmqwyscguecgggwu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:27.314975023 CET	192.168.2.5	1.1.1.1	0x10d6	Standard query (0)	owecemciwkscukqg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:27.460474968 CET	192.168.2.5	1.1.1.1	0x10d6	Standard query (0)	owecemciwkscukqg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:27.538626909 CET	192.168.2.5	1.1.1.1	0x2d44	Standard query (0)	kuioiqqeicsiukgs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:27.695995092 CET	192.168.2.5	1.1.1.1	0x2d44	Standard query (0)	kuioiqqeicsiukgs.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:27.766141891 CET	192.168.2.5	1.1.1.1	0x56eb	Standard query (0)	uwokcqusmagemywa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:27.929344893 CET	192.168.2.5	1.1.1.1	0x56eb	Standard query (0)	uwokcqusmagemywa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:27.990783930 CET	192.168.2.5	1.1.1.1	0xba02	Standard query (0)	uomsosocoaqawqsa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:28.148459911 CET	192.168.2.5	1.1.1.1	0xba02	Standard query (0)	uomsosocoaqawqsa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:28.215925932 CET	192.168.2.5	1.1.1.1	0x835a	Standard query (0)	uockoamcmumauqgi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:28.366873026 CET	192.168.2.5	1.1.1.1	0x835a	Standard query (0)	uockoamcmumauqgi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:28.528646946 CET	192.168.2.5	1.1.1.1	0xcf75	Standard query (0)	iqcscikcwkmmakwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:28.679599047 CET	192.168.2.5	1.1.1.1	0xcf75	Standard query (0)	iqcscikcwkmmakwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:28.844917059 CET	192.168.2.5	1.1.1.1	0x604b	Standard query (0)	ikkoukqciouowoeo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:28.992935896 CET	192.168.2.5	1.1.1.1	0x604b	Standard query (0)	ikkoukqciouowoeo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:29.070403099 CET	192.168.2.5	1.1.1.1	0xb28c	Standard query (0)	iygqaacuocyieiqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:29.226372004 CET	192.168.2.5	1.1.1.1	0xb28c	Standard query (0)	iygqaacuocyieiqe.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:29.292076111 CET	192.168.2.5	1.1.1.1	0xff59	Standard query (0)	ecskgwqmkqqkqaia.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:29.445197105 CET	192.168.2.5	1.1.1.1	0xff59	Standard query (0)	ecskgwqmkqqkqaia.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:29.519412994 CET	192.168.2.5	1.1.1.1	0xb579	Standard query (0)	wgkuucmewiweyqmg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:29.665985107 CET	192.168.2.5	1.1.1.1	0xb579	Standard query (0)	wgkuucmewiweyqmg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:29.742175102 CET	192.168.2.5	1.1.1.1	0x363d	Standard query (0)	eqowmcmwisyomyai.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:29.900005102 CET	192.168.2.5	1.1.1.1	0x363d	Standard query (0)	eqowmcmwisyomyai.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.073911905 CET	192.168.2.5	1.1.1.1	0xca8b	Standard query (0)	ieemukassiigqqam.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.242072105 CET	192.168.2.5	1.1.1.1	0xca8b	Standard query (0)	ieemukassiigqqam.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.294533968 CET	192.168.2.5	1.1.1.1	0x7c72	Standard query (0)	gamewcewqkqaywuu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.445092916 CET	192.168.2.5	1.1.1.1	0x7c72	Standard query (0)	gamewcewqkqaywuu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.516283989 CET	192.168.2.5	1.1.1.1	0x5ad6	Standard query (0)	kimqkmqyeyakkgwu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.664129019 CET	192.168.2.5	1.1.1.1	0x5ad6	Standard query (0)	kimqkmqyeyakkgwu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.739252090 CET	192.168.2.5	1.1.1.1	0x462b	Standard query (0)	auiceuyaksiyscwm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.904694080 CET	192.168.2.5	1.1.1.1	0x462b	Standard query (0)	auiceuyaksiyscwm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.961837053 CET	192.168.2.5	1.1.1.1	0x119d	Standard query (0)	waukkceycmkacsww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.132853985 CET	192.168.2.5	1.1.1.1	0x119d	Standard query (0)	waukkceycmkacsww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.187083960 CET	192.168.2.5	1.1.1.1	0xb8d8	Standard query (0)	ikkyoeigmaeogagg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.336198092 CET	192.168.2.5	1.1.1.1	0xb8d8	Standard query (0)	ikkyoeigmaeogagg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.412641048 CET	192.168.2.5	1.1.1.1	0x9220	Standard query (0)	qggwicocawaskwym.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.554347038 CET	192.168.2.5	1.1.1.1	0x9220	Standard query (0)	qggwicocawaskwym.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.634409904 CET	192.168.2.5	1.1.1.1	0xccff	Standard query (0)	mgiiackwueekoeao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.788948059 CET	192.168.2.5	1.1.1.1	0xccff	Standard query (0)	mgiiackwueekoeao.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.854365110 CET	192.168.2.5	1.1.1.1	0xccc1	Standard query (0)	myskkueqcumuguai.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.007883072 CET	192.168.2.5	1.1.1.1	0xccc1	Standard query (0)	myskkueqcumuguai.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.073623896 CET	192.168.2.5	1.1.1.1	0x5e80	Standard query (0)	sksesqgoiqkgueoa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.225928068 CET	192.168.2.5	1.1.1.1	0x5e80	Standard query (0)	sksesqgoiqkgueoa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.292280912 CET	192.168.2.5	1.1.1.1	0xffd4	Standard query (0)	ywyqmeewycguakww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.444570065 CET	192.168.2.5	1.1.1.1	0xffd4	Standard query (0)	ywyqmeewycguakww.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.519591093 CET	192.168.2.5	1.1.1.1	0x3d84	Standard query (0)	uiymqmoqyeiiggem.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.663285017 CET	192.168.2.5	1.1.1.1	0x3d84	Standard query (0)	uiymqmoqyeiiggem.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.830637932 CET	192.168.2.5	1.1.1.1	0xeba3	Standard query (0)	aikeesqwaummqiky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.975811005 CET	192.168.2.5	1.1.1.1	0xeba3	Standard query (0)	aikeesqwaummqiky.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:33.050827980 CET	192.168.2.5	1.1.1.1	0xe960	Standard query (0)	uiyuisqqokmsagwo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:33.213984013 CET	192.168.2.5	1.1.1.1	0xe960	Standard query (0)	uiyuisqqokmsagwo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:33.384110928 CET	192.168.2.5	1.1.1.1	0xe3ef	Standard query (0)	csuuwqcekcgekqke.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:33.544101000 CET	192.168.2.5	1.1.1.1	0xe3ef	Standard query (0)	csuuwqcekcgekqke.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:33.606589079 CET	192.168.2.5	1.1.1.1	0xe5c3	Standard query (0)	ssgquawgywywkgma.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:33.758613110 CET	192.168.2.5	1.1.1.1	0xe5c3	Standard query (0)	ssgquawgywywkgma.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:33.825983047 CET	192.168.2.5	1.1.1.1	0xf38f	Standard query (0)	ucyqoqgesaqmqwgc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:33.976438999 CET	192.168.2.5	1.1.1.1	0xf38f	Standard query (0)	ucyqoqgesaqmqwgc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:34.161053896 CET	192.168.2.5	1.1.1.1	0x63c6	Standard query (0)	mmosecuciioycquy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:34.304475069 CET	192.168.2.5	1.1.1.1	0x63c6	Standard query (0)	mmosecuciioycquy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:34.384370089 CET	192.168.2.5	1.1.1.1	0xb8d6	Standard query (0)	ewwsmckwiyiiseaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:34.539505959 CET	192.168.2.5	1.1.1.1	0xb8d6	Standard query (0)	ewwsmckwiyiiseaa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:34.608247042 CET	192.168.2.5	1.1.1.1	0x55b9	Standard query (0)	koikucwciykcwqms.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:34.757312059 CET	192.168.2.5	1.1.1.1	0x55b9	Standard query (0)	koikucwciykcwqms.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:34.918878078 CET	192.168.2.5	1.1.1.1	0x29e1	Standard query (0)	okwwqyssguiiiuyq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:35.069896936 CET	192.168.2.5	1.1.1.1	0x29e1	Standard query (0)	okwwqyssguiiiuyq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:35.139395952 CET	192.168.2.5	1.1.1.1	0xf261	Standard query (0)	kowkuoagommaeueg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:35.305768013 CET	192.168.2.5	1.1.1.1	0xf261	Standard query (0)	kowkuoagommaeueg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:35.364629030 CET	192.168.2.5	1.1.1.1	0x2f14	Standard query (0)	kuccieoyswosqasm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:35.523788929 CET	192.168.2.5	1.1.1.1	0x2f14	Standard query (0)	kuccieoyswosqasm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:35.585894108 CET	192.168.2.5	1.1.1.1	0x1e8f	Standard query (0)	kcseqmeyuaomsmeg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:35.726917982 CET	192.168.2.5	1.1.1.1	0x1e8f	Standard query (0)	kcseqmeyuaomsmeg.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:35.916070938 CET	192.168.2.5	1.1.1.1	0xcf45	Standard query (0)	aaemgmsewqoiomua.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.070532084 CET	192.168.2.5	1.1.1.1	0xcf45	Standard query (0)	aaemgmsewqoiomua.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.148427010 CET	192.168.2.5	1.1.1.1	0x4367	Standard query (0)	uogkwkgwukicwgcu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.312441111 CET	192.168.2.5	1.1.1.1	0x4367	Standard query (0)	uogkwkgwukicwgcu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.376296043 CET	192.168.2.5	1.1.1.1	0x343f	Standard query (0)	skwmeoeewcgwoeam.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.544069052 CET	192.168.2.5	1.1.1.1	0x343f	Standard query (0)	skwmeoeewcgwoeam.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.597877979 CET	192.168.2.5	1.1.1.1	0x17be	Standard query (0)	mscciwmgquasayuw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.758893967 CET	192.168.2.5	1.1.1.1	0x17be	Standard query (0)	mscciwmgquasayuw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.822959900 CET	192.168.2.5	1.1.1.1	0x9dc9	Standard query (0)	kcaqqqiyigkuuoiu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.975608110 CET	192.168.2.5	1.1.1.1	0x9dc9	Standard query (0)	kcaqqqiyigkuuoiu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:37.044198036 CET	192.168.2.5	1.1.1.1	0xb001	Standard query (0)	owaeqqogcksoyges.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:37.211095095 CET	192.168.2.5	1.1.1.1	0xb001	Standard query (0)	owaeqqogcksoyges.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:37.262072086 CET	192.168.2.5	1.1.1.1	0xacf8	Standard query (0)	ieqkyomwwkkisoiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:37.414551973 CET	192.168.2.5	1.1.1.1	0xacf8	Standard query (0)	ieqkyomwwkkisoiq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:37.574754953 CET	192.168.2.5	1.1.1.1	0xd2b0	Standard query (0)	iyqsawyqkmesuqei.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:37.727062941 CET	192.168.2.5	1.1.1.1	0xd2b0	Standard query (0)	iyqsawyqkmesuqei.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:37.803709984 CET	192.168.2.5	1.1.1.1	0x77b4	Standard query (0)	quccqcoyikcgcmsa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:37.945780993 CET	192.168.2.5	1.1.1.1	0x77b4	Standard query (0)	quccqcoyikcgcmsa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:38.031516075 CET	192.168.2.5	1.1.1.1	0xa190	Standard query (0)	kiwaggoqgowsiiqa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:38.180105925 CET	192.168.2.5	1.1.1.1	0xa190	Standard query (0)	kiwaggoqgowsiiqa.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:38.252103090 CET	192.168.2.5	1.1.1.1	0x3d86	Standard query (0)	quwswgwawyoyugcu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:38.398662090 CET	192.168.2.5	1.1.1.1	0x3d86	Standard query (0)	quwswgwawyoyugcu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:38.478687048 CET	192.168.2.5	1.1.1.1	0xd6a0	Standard query (0)	owqaywkieskcqcuc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:38.632980108 CET	192.168.2.5	1.1.1.1	0xd6a0	Standard query (0)	owqaywkieskcqcuc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:38.812768936 CET	192.168.2.5	1.1.1.1	0xd2fd	Standard query (0)	kccqgowccsimioee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:38.961875916 CET	192.168.2.5	1.1.1.1	0xd2fd	Standard query (0)	kccqgowccsimioee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:39.123637915 CET	192.168.2.5	1.1.1.1	0x85e	Standard query (0)	eeggwwsowsigeuqu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:39.289145947 CET	192.168.2.5	1.1.1.1	0x85e	Standard query (0)	eeggwwsowsigeuqu.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:39.344523907 CET	192.168.2.5	1.1.1.1	0xbee5	Standard query (0)	uqakyaekiwsqsuga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:39.507317066 CET	192.168.2.5	1.1.1.1	0xbee5	Standard query (0)	uqakyaekiwsqsuga.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:39.565463066 CET	192.168.2.5	1.1.1.1	0x2566	Standard query (0)	susgymkqieewckye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:39.710767031 CET	192.168.2.5	1.1.1.1	0x2566	Standard query (0)	susgymkqieewckye.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:39.784363985 CET	192.168.2.5	1.1.1.1	0x6487	Standard query (0)	kwogewsyemkeeamk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:39.929033041 CET	192.168.2.5	1.1.1.1	0x6487	Standard query (0)	kwogewsyemkeeamk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:40.005650997 CET	192.168.2.5	1.1.1.1	0x1d4a	Standard query (0)	ekwimeeskgocsuui.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:40.147875071 CET	192.168.2.5	1.1.1.1	0x1d4a	Standard query (0)	ekwimeeskgocsuui.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:40.320883036 CET	192.168.2.5	1.1.1.1	0xe35f	Standard query (0)	isayemkaiyaoqgow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:40.476025105 CET	192.168.2.5	1.1.1.1	0xe35f	Standard query (0)	isayemkaiyaoqgow.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:40.637887955 CET	192.168.2.5	1.1.1.1	0x52cf	Standard query (0)	ysiaoiaegogyyqcw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:40.788727999 CET	192.168.2.5	1.1.1.1	0x52cf	Standard query (0)	ysiaoiaegogyyqcw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:40.972626925 CET	192.168.2.5	1.1.1.1	0x6039	Standard query (0)	esocsuqgoagysuia.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:41.121613979 CET	192.168.2.5	1.1.1.1	0x6039	Standard query (0)	esocsuqgoagysuia.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:41.190807104 CET	192.168.2.5	1.1.1.1	0x8792	Standard query (0)	eegokqscemcyaagw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:41.354449987 CET	192.168.2.5	1.1.1.1	0x8792	Standard query (0)	eegokqscemcyaagw.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:41.410841942 CET	192.168.2.5	1.1.1.1	0x1d72	Standard query (0)	gcossyeokskomcaq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:41.582149029 CET	192.168.2.5	1.1.1.1	0x1d72	Standard query (0)	gcossyeokskomcaq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:41.633213997 CET	192.168.2.5	1.1.1.1	0xd55e	Standard query (0)	akikeamwcwugeiak.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:41.789334059 CET	192.168.2.5	1.1.1.1	0xd55e	Standard query (0)	akikeamwcwugeiak.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:41.857909918 CET	192.168.2.5	1.1.1.1	0xa30f	Standard query (0)	qwcoyysusgwiykee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.008152962 CET	192.168.2.5	1.1.1.1	0xa30f	Standard query (0)	qwcoyysusgwiykee.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.079186916 CET	192.168.2.5	1.1.1.1	0x32f2	Standard query (0)	saugqugmmygwauwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.245948076 CET	192.168.2.5	1.1.1.1	0x32f2	Standard query (0)	saugqugmmygwauwq.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.298800945 CET	192.168.2.5	1.1.1.1	0x8bc2	Standard query (0)	gcqyckieawwcwugm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.462708950 CET	192.168.2.5	1.1.1.1	0x8bc2	Standard query (0)	gcqyckieawwcwugm.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.518290043 CET	192.168.2.5	1.1.1.1	0x62a9	Standard query (0)	gicywycaasauoywy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.687947035 CET	192.168.2.5	1.1.1.1	0x62a9	Standard query (0)	gicywycaasauoywy.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.737201929 CET	192.168.2.5	1.1.1.1	0x5f7e	Standard query (0)	gwwwscyqswgmauwc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.882643938 CET	192.168.2.5	1.1.1.1	0x5f7e	Standard query (0)	gwwwscyqswgmauwc.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:43.052706957 CET	192.168.2.5	1.1.1.1	0x5de8	Standard query (0)	imwsaieiewcagwig.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:43.210251093 CET	192.168.2.5	1.1.1.1	0x5de8	Standard query (0)	imwsaieiewcagwig.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:43.504662037 CET	192.168.2.5	1.1.1.1	0x1a7c	Standard query (0)	ekiyiekccgwqaise.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:43.647797108 CET	192.168.2.5	1.1.1.1	0x1a7c	Standard query (0)	ekiyiekccgwqaise.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:43.728671074 CET	192.168.2.5	1.1.1.1	0x6980	Standard query (0)	gwimwkcogwwimwce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:43.882055044 CET	192.168.2.5	1.1.1.1	0x6980	Standard query (0)	gwimwkcogwwimwce.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:43.953596115 CET	192.168.2.5	1.1.1.1	0xb476	Standard query (0)	maoykykcuaykkkgi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:44.101110935 CET	192.168.2.5	1.1.1.1	0xb476	Standard query (0)	maoykykcuaykkkgi.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:44.180200100 CET	192.168.2.5	1.1.1.1	0x41d3	Standard query (0)	yywmwuyumcyqokyk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:44.335717916 CET	192.168.2.5	1.1.1.1	0x41d3	Standard query (0)	yywmwuyumcyqokyk.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:44.510104895 CET	192.168.2.5	1.1.1.1	0x2e20	Standard query (0)	qimwqcyuqouawmss.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:44.663278103 CET	192.168.2.5	1.1.1.1	0x2e20	Standard query (0)	qimwqcyuqouawmss.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:44.734997988 CET	192.168.2.5	1.1.1.1	0x3d2c	Standard query (0)	ukwgqsiuowqyawii.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:44.886303902 CET	192.168.2.5	1.1.1.1	0x3d2c	Standard query (0)	ukwgqsiuowqyawii.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:44.960308075 CET	192.168.2.5	1.1.1.1	0x3b95	Standard query (0)	miysoiiqgyewuceo.xyz	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:45.116776943 CET	192.168.2.5	1.1.1.1	0x3b95	Standard query (0)	miysoiiqgyewuceo.xyz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 12, 2024 12:42:01.432792902 CET	1.1.1.1	192.168.2.5	0x3736	No error (0)	www.med.unc.edu		152.19.9.32	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:02.224539995 CET	1.1.1.1	192.168.2.5	0xff78	No error (0)	bingadsedgeextension-prod-europe.azurewebsites.net	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:42:02.224539995 CET	1.1.1.1	192.168.2.5	0xff78	No error (0)	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		94.245.104.56	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:02.240092993 CET	1.1.1.1	192.168.2.5	0x2b18	No error (0)	bingadsedgeextension-prod-europe.azurewebsites.net	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:42:04.073051929 CET	1.1.1.1	192.168.2.5	0x66f3	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:42:04.073234081 CET	1.1.1.1	192.168.2.5	0xeb15	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:42:04.779829025 CET	1.1.1.1	192.168.2.5	0xcf94	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:42:04.779829025 CET	1.1.1.1	192.168.2.5	0xcf94	No error (0)	googlehosted.l.googleusercontent.com		172.217.19.193	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:04.780514002 CET	1.1.1.1	192.168.2.5	0xe85c	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:42:05.608068943 CET	1.1.1.1	192.168.2.5	0xe139	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Dec 12, 2024 12:42:05.608520031 CET	1.1.1.1	192.168.2.5	0x2c9	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:05.608520031 CET	1.1.1.1	192.168.2.5	0x2c9	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:05.608768940 CET	1.1.1.1	192.168.2.5	0x259e	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Dec 12, 2024 12:42:05.608926058 CET	1.1.1.1	192.168.2.5	0x74d9	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:05.608926058 CET	1.1.1.1	192.168.2.5	0x74d9	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:05.856621027 CET	1.1.1.1	192.168.2.5	0xa347	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Dec 12, 2024 12:42:05.857983112 CET	1.1.1.1	192.168.2.5	0xb65	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:05.857983112 CET	1.1.1.1	192.168.2.5	0xb65	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:09.119699955 CET	1.1.1.1	192.168.2.5	0x6dc8	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:42:09.119699955 CET	1.1.1.1	192.168.2.5	0x6dc8	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:11.600752115 CET	1.1.1.1	192.168.2.5	0x5a33	No error (0)	aikmouciiqgecoqi.xyz		166.1.160.237	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:11.746125937 CET	1.1.1.1	192.168.2.5	0x62c5	Name error (3)	koecgqggegimaeya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:11.885122061 CET	1.1.1.1	192.168.2.5	0x7f42	Name error (3)	aawqwccomcemcysm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:12.026091099 CET	1.1.1.1	192.168.2.5	0xc78d	Name error (3)	kcyakwisycecaqgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:12.165530920 CET	1.1.1.1	192.168.2.5	0x66ae	Name error (3)	uogksceymossmmqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:12.304574966 CET	1.1.1.1	192.168.2.5	0xdef0	Name error (3)	qgmyeeguweaukuke.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:12.444547892 CET	1.1.1.1	192.168.2.5	0x7bc8	Name error (3)	mywaqkeaawisisky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:12.592770100 CET	1.1.1.1	192.168.2.5	0xc623	Name error (3)	yqqsggacauiiugka.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:12.732244015 CET	1.1.1.1	192.168.2.5	0xc0e3	Name error (3)	equmqmqwuuuioawa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:12.871792078 CET	1.1.1.1	192.168.2.5	0x4d9	Name error (3)	wmoamsauiwauoosg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:13.010487080 CET	1.1.1.1	192.168.2.5	0xe3cd	Name error (3)	oqsakkimkesccikc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:13.152578115 CET	1.1.1.1	192.168.2.5	0x4a16	Name error (3)	mgiwaegaqyyaakwy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:13.292769909 CET	1.1.1.1	192.168.2.5	0xac80	Name error (3)	ucmioacycscyeouk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:13.432315111 CET	1.1.1.1	192.168.2.5	0xe53b	Name error (3)	qumaseqmggyaiauq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:13.573226929 CET	1.1.1.1	192.168.2.5	0x5450	Name error (3)	uccyyemqaiiksuwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:13.714715004 CET	1.1.1.1	192.168.2.5	0x77dc	Name error (3)	sesyieaiesegeaow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:13.854279041 CET	1.1.1.1	192.168.2.5	0x4012	Name error (3)	kccmicaswqmswwak.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:14.009495020 CET	1.1.1.1	192.168.2.5	0x87c1	Name error (3)	mssaogwocegysoow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:14.148724079 CET	1.1.1.1	192.168.2.5	0x1707	Name error (3)	wssaqmakumewmaes.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:14.288451910 CET	1.1.1.1	192.168.2.5	0x6399	Name error (3)	cmukociggiqcouio.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:14.426459074 CET	1.1.1.1	192.168.2.5	0x83d3	Name error (3)	skyqsyyymyacyayc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:14.565771103 CET	1.1.1.1	192.168.2.5	0x158f	Name error (3)	uoigsiqmemcscosu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:14.704075098 CET	1.1.1.1	192.168.2.5	0x4daa	Name error (3)	kuywuskkgqsigqqs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:14.843908072 CET	1.1.1.1	192.168.2.5	0xad14	Name error (3)	auayomwkewcomwas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:14.983254910 CET	1.1.1.1	192.168.2.5	0xccfc	Name error (3)	iyaikmkkowcqemsi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:15.123022079 CET	1.1.1.1	192.168.2.5	0x5d6f	Name error (3)	ggicikyqcaiyguee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:15.263024092 CET	1.1.1.1	192.168.2.5	0x4c72	Name error (3)	oqyaoykomyoygics.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:15.405854940 CET	1.1.1.1	192.168.2.5	0xeb0b	Name error (3)	eqakguiwiqacqiwg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:15.544945002 CET	1.1.1.1	192.168.2.5	0x88c5	Name error (3)	wgcaouuqqqwucogy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:15.683691025 CET	1.1.1.1	192.168.2.5	0x96c	Name error (3)	ewacuagosgqmuocm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:15.823374987 CET	1.1.1.1	192.168.2.5	0xd4bf	Name error (3)	wgqyouayikuyuqmk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:15.963582993 CET	1.1.1.1	192.168.2.5	0xee95	Name error (3)	owaaygsacguucaye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:16.138035059 CET	1.1.1.1	192.168.2.5	0x50ac	Name error (3)	uwgicagyykoommga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:16.357533932 CET	1.1.1.1	192.168.2.5	0x55d6	Name error (3)	uiggameqqycugsqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:16.497091055 CET	1.1.1.1	192.168.2.5	0xd7ea	Name error (3)	goguooqkgysueime.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:16.641819000 CET	1.1.1.1	192.168.2.5	0x8a2d	Name error (3)	keosqeosukqcooco.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:16.780514956 CET	1.1.1.1	192.168.2.5	0x6592	Name error (3)	maoeeogmuauywsyu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:16.918987989 CET	1.1.1.1	192.168.2.5	0x70e8	Name error (3)	ismqaewykmoiguki.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:17.059484005 CET	1.1.1.1	192.168.2.5	0xd12e	Name error (3)	wucwykasawokemaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:17.197999954 CET	1.1.1.1	192.168.2.5	0x22c0	Name error (3)	ukmcqucewskcqygg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:17.340403080 CET	1.1.1.1	192.168.2.5	0x5b49	Name error (3)	qqqmeagkkosgcayo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:17.482167959 CET	1.1.1.1	192.168.2.5	0x596c	Name error (3)	ysawassgkwqygmmq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:17.622776985 CET	1.1.1.1	192.168.2.5	0x1b0c	Name error (3)	osaeyoiqoqawauga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:17.761545897 CET	1.1.1.1	192.168.2.5	0x95db	Name error (3)	iagisciiyoemgwaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:17.901460886 CET	1.1.1.1	192.168.2.5	0x711f	Name error (3)	ymysimqoykwqeqiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:18.040498018 CET	1.1.1.1	192.168.2.5	0xc3c2	Name error (3)	ymmcwogyimsuqmcc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:18.181855917 CET	1.1.1.1	192.168.2.5	0xe3e9	Name error (3)	osmoygyawqmmimkq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:18.320558071 CET	1.1.1.1	192.168.2.5	0x4c0e	Name error (3)	immyecuqwkiyscys.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:18.461446047 CET	1.1.1.1	192.168.2.5	0x9780	Name error (3)	omsqkuiwcwoegooq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:18.601018906 CET	1.1.1.1	192.168.2.5	0x2662	Name error (3)	ukaiiiyqoooycyqm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:18.739335060 CET	1.1.1.1	192.168.2.5	0x5e4f	Name error (3)	isemauqkwwiumyky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:18.879586935 CET	1.1.1.1	192.168.2.5	0x23ab	Name error (3)	keguuyioweymiaws.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:19.019475937 CET	1.1.1.1	192.168.2.5	0x9f84	Name error (3)	kwaywmaequkqccai.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:19.158741951 CET	1.1.1.1	192.168.2.5	0xf771	Name error (3)	yyimcoiwgckeakcm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:19.297808886 CET	1.1.1.1	192.168.2.5	0xc7d3	Name error (3)	ekcwemuekgqsimae.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:19.437674999 CET	1.1.1.1	192.168.2.5	0x9828	Name error (3)	imigkomgmqgmakqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:19.576813936 CET	1.1.1.1	192.168.2.5	0xa4a1	Name error (3)	omasqkwqyskcagwi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:19.715907097 CET	1.1.1.1	192.168.2.5	0x4073	Name error (3)	awyomscgweuqmgaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:19.855174065 CET	1.1.1.1	192.168.2.5	0xeff8	Name error (3)	eyoyssauceguqwmk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:19.994056940 CET	1.1.1.1	192.168.2.5	0x240d	Name error (3)	gwwcqeykmseicgaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:20.132951021 CET	1.1.1.1	192.168.2.5	0xcfcf	Name error (3)	qwywqgsmgaoiwsga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:20.275542974 CET	1.1.1.1	192.168.2.5	0xe156	Name error (3)	ososwckwcqmmwqcy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:20.415283918 CET	1.1.1.1	192.168.2.5	0xbce9	Name error (3)	osaymwoggqqycmse.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:20.555306911 CET	1.1.1.1	192.168.2.5	0xc803	Name error (3)	oyewqwkusieeoqey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:20.694263935 CET	1.1.1.1	192.168.2.5	0x610	Name error (3)	ommwaqgaemsmcqwc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:20.836333990 CET	1.1.1.1	192.168.2.5	0x47ed	Name error (3)	cauewwukyywyqiei.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:20.975764036 CET	1.1.1.1	192.168.2.5	0x4d62	Name error (3)	goeykqccmemkswom.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:21.114675999 CET	1.1.1.1	192.168.2.5	0xcd0e	Name error (3)	aksuakswwkiimamq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:21.254242897 CET	1.1.1.1	192.168.2.5	0xddc7	Name error (3)	isaeicumkcuwqmqq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:21.394944906 CET	1.1.1.1	192.168.2.5	0x923e	Name error (3)	qiswokuokugiooky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:21.533763885 CET	1.1.1.1	192.168.2.5	0x387d	Name error (3)	qiswcssocuqsaqkq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:21.672636032 CET	1.1.1.1	192.168.2.5	0xbdc7	Name error (3)	qcyksokwumicscaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:21.811471939 CET	1.1.1.1	192.168.2.5	0x7f11	Name error (3)	esiaisyasoaoqwki.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:21.951013088 CET	1.1.1.1	192.168.2.5	0xf8e8	Name error (3)	giqukkwwcwgqcisg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:22.090662956 CET	1.1.1.1	192.168.2.5	0x4bb3	Name error (3)	ymqaaskiwomkucuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:22.230035067 CET	1.1.1.1	192.168.2.5	0x20cc	Name error (3)	akueuaicusaoieiy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:22.369471073 CET	1.1.1.1	192.168.2.5	0x930f	Name error (3)	sauygqecsusickcu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:22.508846998 CET	1.1.1.1	192.168.2.5	0xa7f	Name error (3)	kkwkgmcoawgaoiwg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:22.647970915 CET	1.1.1.1	192.168.2.5	0x988c	Name error (3)	saumycuogqsqykes.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:22.788686991 CET	1.1.1.1	192.168.2.5	0x1a95	Name error (3)	ukyokaigmmkumgoa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:22.931720972 CET	1.1.1.1	192.168.2.5	0xe73	Name error (3)	eswweuycwwiiykwo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:23.070600033 CET	1.1.1.1	192.168.2.5	0xde23	Name error (3)	uksgyqiqaaiaiesi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:23.210968971 CET	1.1.1.1	192.168.2.5	0x5c84	Name error (3)	smckcsaioceiyasu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:23.351958990 CET	1.1.1.1	192.168.2.5	0xdff4	Name error (3)	esimsqgcwwwmyoqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:23.492837906 CET	1.1.1.1	192.168.2.5	0x1849	Name error (3)	maiyuocqqiqiiskw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:23.632244110 CET	1.1.1.1	192.168.2.5	0x31e8	Name error (3)	smaaowemwiwggocu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:23.771024942 CET	1.1.1.1	192.168.2.5	0xc0dc	Name error (3)	kwuuwgemogmuomwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:23.910017967 CET	1.1.1.1	192.168.2.5	0x462d	Name error (3)	ukicsmiwggcwksam.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:24.049838066 CET	1.1.1.1	192.168.2.5	0xd75a	Name error (3)	gwamoggwyegsseao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:24.189840078 CET	1.1.1.1	192.168.2.5	0x5f5f	Name error (3)	immcqsiceooqyaay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:24.331170082 CET	1.1.1.1	192.168.2.5	0xa388	Name error (3)	kkcqgowgkcoyokcu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:24.471426010 CET	1.1.1.1	192.168.2.5	0x72ae	Name error (3)	kecgikusmakuksma.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:24.611423016 CET	1.1.1.1	192.168.2.5	0xab15	Name error (3)	ymuiggyusggsymoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:24.750727892 CET	1.1.1.1	192.168.2.5	0xf14a	Name error (3)	uecouukwkuceyuwg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:24.906542063 CET	1.1.1.1	192.168.2.5	0x24a1	Name error (3)	eyoaceoookqskqmy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:25.045924902 CET	1.1.1.1	192.168.2.5	0x5ac0	Name error (3)	awwomgcseeqwkkom.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:25.185106039 CET	1.1.1.1	192.168.2.5	0x8f25	Name error (3)	keykoekseemyiewq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:25.324359894 CET	1.1.1.1	192.168.2.5	0x5ef	Name error (3)	ysiwwoeeaaskykaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:25.465495110 CET	1.1.1.1	192.168.2.5	0x73c0	Name error (3)	kwmcuwccqmuecgea.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:25.605452061 CET	1.1.1.1	192.168.2.5	0x65b6	Name error (3)	gwyooeiscmwguqms.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:25.744453907 CET	1.1.1.1	192.168.2.5	0x10c4	Name error (3)	wuokiysmiucoucak.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:25.884648085 CET	1.1.1.1	192.168.2.5	0x44a4	Name error (3)	wuuiumemmigyyauq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:26.023150921 CET	1.1.1.1	192.168.2.5	0x27fd	Name error (3)	acwomuuukiomgqkm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:26.162671089 CET	1.1.1.1	192.168.2.5	0x8074	Name error (3)	muwqwgaaymomgwmi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:26.301904917 CET	1.1.1.1	192.168.2.5	0xc3ab	Name error (3)	omgcoecwsqiuqyug.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:26.441519022 CET	1.1.1.1	192.168.2.5	0xd8a1	Name error (3)	kqmsgskwgemyueya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:26.583298922 CET	1.1.1.1	192.168.2.5	0x3da3	Name error (3)	eyiyueewuaqmmwcm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:26.722688913 CET	1.1.1.1	192.168.2.5	0xa1eb	Name error (3)	gwoyamckoqoaauoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:26.862207890 CET	1.1.1.1	192.168.2.5	0xe958	Name error (3)	qwqsoyoqkymakowm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:27.005675077 CET	1.1.1.1	192.168.2.5	0x43bd	Name error (3)	gcmiymmqgwuquokm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:27.145536900 CET	1.1.1.1	192.168.2.5	0x1c3c	Name error (3)	ymseciekayuweoww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:27.285415888 CET	1.1.1.1	192.168.2.5	0x1552	Name error (3)	oyocwswugeiqqyoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:27.427287102 CET	1.1.1.1	192.168.2.5	0x903f	Name error (3)	omgooecquoweeomo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:27.566430092 CET	1.1.1.1	192.168.2.5	0x9adf	Name error (3)	imgeoyougkmmeuec.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:27.705625057 CET	1.1.1.1	192.168.2.5	0xf4af	Name error (3)	smoswyoekkccyuga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:27.853585958 CET	1.1.1.1	192.168.2.5	0x4e5e	Name error (3)	suwkomiqcykeyako.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:27.992747068 CET	1.1.1.1	192.168.2.5	0x1d70	Name error (3)	smwsugycuuckemue.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:28.132550955 CET	1.1.1.1	192.168.2.5	0x8908	Name error (3)	qigcqiaomwieqwka.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:28.272898912 CET	1.1.1.1	192.168.2.5	0x24db	Name error (3)	oekcyqqggaegsesm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:28.412513018 CET	1.1.1.1	192.168.2.5	0x334d	Name error (3)	qcoysaaooaiccqyu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:28.552115917 CET	1.1.1.1	192.168.2.5	0xfb17	Name error (3)	mismuqiygyeysaoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:28.691380978 CET	1.1.1.1	192.168.2.5	0xf5d9	Name error (3)	wockoyekyageakcg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:28.830769062 CET	1.1.1.1	192.168.2.5	0xcc3b	Name error (3)	ososokqeakgguwsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:28.970509052 CET	1.1.1.1	192.168.2.5	0x1331	Name error (3)	wcgqccqcugomywua.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:29.109864950 CET	1.1.1.1	192.168.2.5	0xf51c	Name error (3)	aqaqgemescmwsqks.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:29.249667883 CET	1.1.1.1	192.168.2.5	0x7de	Name error (3)	aqiwocaywcswuwsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:29.391920090 CET	1.1.1.1	192.168.2.5	0x7f05	Name error (3)	aqgmgoqcoqqkguyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:29.533248901 CET	1.1.1.1	192.168.2.5	0x7944	Name error (3)	oywgqkusocouysua.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:29.672914982 CET	1.1.1.1	192.168.2.5	0x5888	Name error (3)	uyygagweoagcuqky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:29.812364101 CET	1.1.1.1	192.168.2.5	0x2e72	Name error (3)	muiccguyaeaqwweg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:29.952554941 CET	1.1.1.1	192.168.2.5	0x7090	Name error (3)	qiqueqokwqqgwwci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:30.091032982 CET	1.1.1.1	192.168.2.5	0x11eb	Name error (3)	uygmgoymcwcgkios.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:30.230567932 CET	1.1.1.1	192.168.2.5	0xa93b	Name error (3)	qiyggmguowygeooc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:30.393023968 CET	1.1.1.1	192.168.2.5	0x7b30	Name error (3)	acacoiqgoimayqwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:30.534742117 CET	1.1.1.1	192.168.2.5	0x36ff	Name error (3)	smisyqewaummmwoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:30.674207926 CET	1.1.1.1	192.168.2.5	0x5e14	Name error (3)	mumuqocoisaucwmq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:30.827693939 CET	1.1.1.1	192.168.2.5	0x333	Name error (3)	qqoawmqqwqcusmee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:30.985737085 CET	1.1.1.1	192.168.2.5	0x45b4	Name error (3)	qcygacuamqqugcck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:31.125061989 CET	1.1.1.1	192.168.2.5	0xb59d	Name error (3)	kkiigoymgkmoggoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:31.263892889 CET	1.1.1.1	192.168.2.5	0x4e	Name error (3)	qqmicqemgcgieoau.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:31.402965069 CET	1.1.1.1	192.168.2.5	0x7fca	Name error (3)	sagymwuwgeucsmac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:31.542469025 CET	1.1.1.1	192.168.2.5	0x2da3	Name error (3)	igmqooiwioymwkcm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:31.681432009 CET	1.1.1.1	192.168.2.5	0x7dd0	Name error (3)	osyqameakgkceeog.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:31.820105076 CET	1.1.1.1	192.168.2.5	0x21ee	Name error (3)	sgigamoeiwksoecq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:31.961637974 CET	1.1.1.1	192.168.2.5	0xb876	Name error (3)	keckssemmeoqieqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:32.102231979 CET	1.1.1.1	192.168.2.5	0xd3d3	Name error (3)	caysswwugsmkeksw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:32.240739107 CET	1.1.1.1	192.168.2.5	0xa653	Name error (3)	cgiamwsqgcmqgqse.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:32.381989956 CET	1.1.1.1	192.168.2.5	0xe3d8	Name error (3)	uyeqwcuyimescesu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:32.520555973 CET	1.1.1.1	192.168.2.5	0x82ce	Name error (3)	ekiwqiyewuiqoemo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:32.663115025 CET	1.1.1.1	192.168.2.5	0x982e	Name error (3)	oeakuqueisysswcg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:32.803016901 CET	1.1.1.1	192.168.2.5	0x1cd0	Name error (3)	acemcwecgiqcukys.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:32.941720009 CET	1.1.1.1	192.168.2.5	0x675e	Name error (3)	qcwaiaiqiwcakawa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:33.080233097 CET	1.1.1.1	192.168.2.5	0x7197	Name error (3)	esyiocqieemagwmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:33.219110966 CET	1.1.1.1	192.168.2.5	0x9130	Name error (3)	kqsakygykwusqams.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:33.358171940 CET	1.1.1.1	192.168.2.5	0xc8bc	Name error (3)	ymygkkggyigeqcqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:33.500886917 CET	1.1.1.1	192.168.2.5	0x6963	Name error (3)	qqqkagyoymmosuyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:33.641256094 CET	1.1.1.1	192.168.2.5	0x97d3	Name error (3)	moiimkscmiswaesw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:33.779300928 CET	1.1.1.1	192.168.2.5	0x19e6	Name error (3)	igkiociagqsacmwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:33.918591976 CET	1.1.1.1	192.168.2.5	0xebc6	Name error (3)	ymugwyokyyccykmw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:34.057240009 CET	1.1.1.1	192.168.2.5	0x8eae	Name error (3)	gieksqwccmmqkemm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:34.196873903 CET	1.1.1.1	192.168.2.5	0x1c04	Name error (3)	iaueigwgocakgsku.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:34.336175919 CET	1.1.1.1	192.168.2.5	0xbe96	Name error (3)	sgsasqgwayeckgoy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:34.474929094 CET	1.1.1.1	192.168.2.5	0xc61c	Name error (3)	kwogawueykiiumao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:34.615677118 CET	1.1.1.1	192.168.2.5	0x543e	Name error (3)	iagmkeayqmuowswy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:34.755249023 CET	1.1.1.1	192.168.2.5	0xbf8c	Name error (3)	yyyagyakeciucagk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:34.893728018 CET	1.1.1.1	192.168.2.5	0x6e36	Name error (3)	isukyiwyscosaaqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:35.034006119 CET	1.1.1.1	192.168.2.5	0x497a	Name error (3)	goicqsmskkygkkka.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:35.173176050 CET	1.1.1.1	192.168.2.5	0xd9c	Name error (3)	awacwkqgsoomimye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:35.312689066 CET	1.1.1.1	192.168.2.5	0x7be5	Name error (3)	iaawaweqwceogamg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:35.452809095 CET	1.1.1.1	192.168.2.5	0x9438	Name error (3)	kqueagsoikuyocca.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:35.591918945 CET	1.1.1.1	192.168.2.5	0x158f	Name error (3)	momoqikcaksewaua.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:35.730832100 CET	1.1.1.1	192.168.2.5	0x2f3b	Name error (3)	suagiqkqmkgysmiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:35.869890928 CET	1.1.1.1	192.168.2.5	0xc708	Name error (3)	gcwequgwyimwymsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:36.009057999 CET	1.1.1.1	192.168.2.5	0xdd5d	Name error (3)	igywsgwooemqiuss.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:36.150034904 CET	1.1.1.1	192.168.2.5	0x40db	Name error (3)	wikiagqsmeeaeegy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:36.288681984 CET	1.1.1.1	192.168.2.5	0xac7b	Name error (3)	eeoeukoqgiwsumsu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:36.428100109 CET	1.1.1.1	192.168.2.5	0x672	Name error (3)	ygooiessycewaocg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:36.567442894 CET	1.1.1.1	192.168.2.5	0xe1c5	Name error (3)	qcqgssmagywqcgws.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:36.708398104 CET	1.1.1.1	192.168.2.5	0xe9a9	Name error (3)	goiikukwyyauemqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:36.847441912 CET	1.1.1.1	192.168.2.5	0xe98	Name error (3)	comuwmkimocayeeu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:36.987112999 CET	1.1.1.1	192.168.2.5	0xffb5	Name error (3)	isgasoomksiwqcmg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:37.127037048 CET	1.1.1.1	192.168.2.5	0x7fd0	Name error (3)	qigismmgwsiseyuu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:37.266104937 CET	1.1.1.1	192.168.2.5	0x18d5	Name error (3)	wuqggcwmoscwykwg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:37.406958103 CET	1.1.1.1	192.168.2.5	0xe6e5	Name error (3)	qceawaaswmsuekmu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:37.545948029 CET	1.1.1.1	192.168.2.5	0x45f4	Name error (3)	ygucsucmagwqsqcu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:37.687494040 CET	1.1.1.1	192.168.2.5	0x61ff	Name error (3)	giuccqyqokookyue.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:37.828210115 CET	1.1.1.1	192.168.2.5	0x8423	Name error (3)	gceesusqmuockkgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:37.967363119 CET	1.1.1.1	192.168.2.5	0x7b62	Name error (3)	ygesoycecmkuwayg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:38.106687069 CET	1.1.1.1	192.168.2.5	0xc852	Name error (3)	sasqgsyksiccuuws.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:38.246673107 CET	1.1.1.1	192.168.2.5	0x94c4	Name error (3)	qwggykgwkqoceiuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:38.386322021 CET	1.1.1.1	192.168.2.5	0x609e	Name error (3)	wiguisuayimaukgu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:38.525388956 CET	1.1.1.1	192.168.2.5	0x4ac8	Name error (3)	qcwcgegyyieaoqca.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:38.665307999 CET	1.1.1.1	192.168.2.5	0x1388	Name error (3)	gwcyyawigmwceaqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:38.805535078 CET	1.1.1.1	192.168.2.5	0x3c72	Name error (3)	mueuwcqsioowsmce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:38.946683884 CET	1.1.1.1	192.168.2.5	0x28c	Name error (3)	qiewcykmuuacuoyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:39.085922956 CET	1.1.1.1	192.168.2.5	0xe166	Name error (3)	coayaokeissieqcc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:39.224524975 CET	1.1.1.1	192.168.2.5	0xb231	Name error (3)	oeooiqokqsqcsaig.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:39.362693071 CET	1.1.1.1	192.168.2.5	0xc23	Name error (3)	masegmsiqgamiugm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:39.502419949 CET	1.1.1.1	192.168.2.5	0xc0e0	Name error (3)	smwywssyyaciqkae.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:39.643579960 CET	1.1.1.1	192.168.2.5	0xb983	Name error (3)	aweqoooqomueeiwi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:39.782968044 CET	1.1.1.1	192.168.2.5	0xb479	Name error (3)	akasikewaomyiwqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:39.922036886 CET	1.1.1.1	192.168.2.5	0xca8b	Name error (3)	oyyamqygcecqocmq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:40.063133001 CET	1.1.1.1	192.168.2.5	0xd37d	Name error (3)	qwikoqqgiayyuakq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:40.202879906 CET	1.1.1.1	192.168.2.5	0x40	Name error (3)	miqcugomwgmygyoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:40.346436977 CET	1.1.1.1	192.168.2.5	0x6871	Name error (3)	wiccyamsgmuqoeoy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:40.486430883 CET	1.1.1.1	192.168.2.5	0xbfed	Name error (3)	ymeiqyyqqyaaygie.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:40.624582052 CET	1.1.1.1	192.168.2.5	0x860d	Name error (3)	wiomcwmascsigags.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:40.762579918 CET	1.1.1.1	192.168.2.5	0xacf8	Name error (3)	awgyuqqswicwkqcs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:40.903212070 CET	1.1.1.1	192.168.2.5	0x6045	Name error (3)	iacisiamimiiqyeo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:41.042697906 CET	1.1.1.1	192.168.2.5	0xbf40	Name error (3)	wogawoqysgiockwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:41.181701899 CET	1.1.1.1	192.168.2.5	0xd687	Name error (3)	mayykkuyeuiggyws.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:41.321598053 CET	1.1.1.1	192.168.2.5	0x117b	Name error (3)	cosaygigqegeyewi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:41.460577965 CET	1.1.1.1	192.168.2.5	0x63ed	Name error (3)	ekqyosgcumkcecmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:41.604969978 CET	1.1.1.1	192.168.2.5	0x9424	Name error (3)	qimmkmaumumswocw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:41.744100094 CET	1.1.1.1	192.168.2.5	0x6817	Name error (3)	acqaagqgmsmeouce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:41.883423090 CET	1.1.1.1	192.168.2.5	0xf5e1	Name error (3)	awasockiaymagmci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:42.024595022 CET	1.1.1.1	192.168.2.5	0x13b3	Name error (3)	akuyqkmomwqyiyow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:42.164814949 CET	1.1.1.1	192.168.2.5	0xbf32	Name error (3)	caceukeeygaaqaec.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:42.303565025 CET	1.1.1.1	192.168.2.5	0x9248	Name error (3)	qwcaikouwwekssco.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:42.442945957 CET	1.1.1.1	192.168.2.5	0x2ed0	Name error (3)	qqioykeogcwkowgq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:42.706406116 CET	1.1.1.1	192.168.2.5	0x8ac	Name error (3)	igeqissugeuswaus.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:42.844430923 CET	1.1.1.1	192.168.2.5	0xf2d6	Name error (3)	osoawyeyassgycgy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:42.989109993 CET	1.1.1.1	192.168.2.5	0x57b6	Name error (3)	cuaumuqcoeegomsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:43.128807068 CET	1.1.1.1	192.168.2.5	0x84a8	Name error (3)	oyogquqkmyqwwkuq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:43.268990040 CET	1.1.1.1	192.168.2.5	0xaf67	Name error (3)	gwyougsgeaaoiumg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:43.410126925 CET	1.1.1.1	192.168.2.5	0xb109	Name error (3)	ukeoemaaimqyuais.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:43.549595118 CET	1.1.1.1	192.168.2.5	0x9236	Name error (3)	oewuwcsmaacckewa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:43.689565897 CET	1.1.1.1	192.168.2.5	0x4b50	Name error (3)	esykokiigsgwcwsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:43.829010963 CET	1.1.1.1	192.168.2.5	0xb21d	Name error (3)	ekgqymkkqiwogqsy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:43.967462063 CET	1.1.1.1	192.168.2.5	0x631e	Name error (3)	wueossewygqoakoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:44.108907938 CET	1.1.1.1	192.168.2.5	0x18a	Name error (3)	isceiesauogasmoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:44.248531103 CET	1.1.1.1	192.168.2.5	0xac92	Name error (3)	giscmywoiaqmqcmw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:44.389683008 CET	1.1.1.1	192.168.2.5	0x6a2a	Name error (3)	uyqweoyukcewugsu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:44.528214931 CET	1.1.1.1	192.168.2.5	0x272f	Name error (3)	imuscegymggagewg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:44.668359995 CET	1.1.1.1	192.168.2.5	0x2be1	Name error (3)	wgesgakysuqaewik.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:44.807584047 CET	1.1.1.1	192.168.2.5	0xccba	Name error (3)	uwoyyqgiwowysqou.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:44.946500063 CET	1.1.1.1	192.168.2.5	0x5071	Name error (3)	syaouwwyoaemeekm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:45.085603952 CET	1.1.1.1	192.168.2.5	0xed5b	Name error (3)	aoscugususamokuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:45.224688053 CET	1.1.1.1	192.168.2.5	0xb9be	Name error (3)	qucyaygweeasqeoy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:45.363892078 CET	1.1.1.1	192.168.2.5	0x8546	Name error (3)	uiwwamyuymycooey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:45.502794027 CET	1.1.1.1	192.168.2.5	0xdfaa	Name error (3)	iygukwyuqwiuoqmi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:45.644479036 CET	1.1.1.1	192.168.2.5	0xb0ac	Name error (3)	koaeaguekwcaousw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:45.783809900 CET	1.1.1.1	192.168.2.5	0x4824	Name error (3)	skssioqkemoiieaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:45.925179005 CET	1.1.1.1	192.168.2.5	0x3067	Name error (3)	yewomygmueegmoqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:46.066023111 CET	1.1.1.1	192.168.2.5	0x4b51	Name error (3)	kuyoukwwacqkcoyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:46.205323935 CET	1.1.1.1	192.168.2.5	0xbeb0	Name error (3)	gmcqgmkyguwkskyg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:46.345196009 CET	1.1.1.1	192.168.2.5	0x25e9	Name error (3)	mygiqcqokowwmgqq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:46.483799934 CET	1.1.1.1	192.168.2.5	0x749e	Name error (3)	cymogqmasaiiwmww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:46.623630047 CET	1.1.1.1	192.168.2.5	0xba16	Name error (3)	iykumkamcykgicyi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:46.763216972 CET	1.1.1.1	192.168.2.5	0x1297	Name error (3)	cyemcqwkasuimkgs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:46.902548075 CET	1.1.1.1	192.168.2.5	0x513e	Name error (3)	ieqeeiggkuqcomyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:47.042876959 CET	1.1.1.1	192.168.2.5	0xdd18	Name error (3)	ssmkyomikukusksu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:47.183860064 CET	1.1.1.1	192.168.2.5	0x598a	Name error (3)	kimakioiwmawksiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:47.326484919 CET	1.1.1.1	192.168.2.5	0xce12	Name error (3)	qumssmeysccykkyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:47.469223976 CET	1.1.1.1	192.168.2.5	0x3a01	Name error (3)	ykuoaucocogcwoky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:47.608334064 CET	1.1.1.1	192.168.2.5	0x47bb	Name error (3)	semyssioekmosauo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:47.754841089 CET	1.1.1.1	192.168.2.5	0xc789	Name error (3)	aiiqyyikowqaygwy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:47.893645048 CET	1.1.1.1	192.168.2.5	0xab06	Name error (3)	kouumoyqiuckkcau.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:48.034725904 CET	1.1.1.1	192.168.2.5	0x7ff8	Name error (3)	qgwkkkyicoqmooqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:48.177412987 CET	1.1.1.1	192.168.2.5	0x99a5	Name error (3)	uwwcocucusmeguaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:48.317583084 CET	1.1.1.1	192.168.2.5	0x977a	Name error (3)	cekggiciueyeyoku.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:48.457364082 CET	1.1.1.1	192.168.2.5	0x8a82	Name error (3)	iqqeoamqwiuiyuua.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:48.596113920 CET	1.1.1.1	192.168.2.5	0x9fd7	Name error (3)	uokqmokseqqakiui.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:48.734325886 CET	1.1.1.1	192.168.2.5	0x6a7b	Name error (3)	cyqqgacqkowwkqqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:48.874432087 CET	1.1.1.1	192.168.2.5	0x70ff	Name error (3)	cmqqeimyycgqwsgg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:49.014204979 CET	1.1.1.1	192.168.2.5	0x6054	Name error (3)	wmgeoqqiwqcmimwu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:49.157325983 CET	1.1.1.1	192.168.2.5	0xeae4	Name error (3)	quyckaioggawuois.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:49.296706915 CET	1.1.1.1	192.168.2.5	0xe55b	Name error (3)	eqciawooemoueyqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:49.437644005 CET	1.1.1.1	192.168.2.5	0xef9a	Name error (3)	oqoaumkywacmuwwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:49.576941967 CET	1.1.1.1	192.168.2.5	0x7f6e	Name error (3)	ewueyekksqksycww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:49.717070103 CET	1.1.1.1	192.168.2.5	0xbc85	Name error (3)	csmasucykosuwouy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:49.855618000 CET	1.1.1.1	192.168.2.5	0x3e2	Name error (3)	seeogeqwsqmsoaqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:49.997138023 CET	1.1.1.1	192.168.2.5	0xce26	Name error (3)	gusmkkaiomeeqaiy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:50.135854959 CET	1.1.1.1	192.168.2.5	0xaed2	Name error (3)	msyecoiqeyqeiquy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:50.276164055 CET	1.1.1.1	192.168.2.5	0x51ce	Name error (3)	skawoueawceoywsy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:50.415467978 CET	1.1.1.1	192.168.2.5	0xd2a0	Name error (3)	iyuaqococuqcsgii.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:50.555531025 CET	1.1.1.1	192.168.2.5	0x589a	Name error (3)	kuyaasckcgacyesi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:50.695044041 CET	1.1.1.1	192.168.2.5	0xe47c	Name error (3)	aaeqiiecqqumcgky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:50.834203005 CET	1.1.1.1	192.168.2.5	0x720c	Name error (3)	aawiysageawcoyok.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:50.975619078 CET	1.1.1.1	192.168.2.5	0xb3de	Name error (3)	yqysoaosqewciiww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:51.116460085 CET	1.1.1.1	192.168.2.5	0x7cdb	Name error (3)	yessywkwcwmyewqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:51.254885912 CET	1.1.1.1	192.168.2.5	0xa2a7	Name error (3)	aueiqscgeicewaoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:51.395380020 CET	1.1.1.1	192.168.2.5	0x4164	Name error (3)	uccsgcekiwcyucou.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:51.539180994 CET	1.1.1.1	192.168.2.5	0xb08d	Name error (3)	aiumyocycyyikiwc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:51.868372917 CET	1.1.1.1	192.168.2.5	0x2984	Name error (3)	aoqayemwgmsyuimi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:52.011770010 CET	1.1.1.1	192.168.2.5	0xbaeb	Name error (3)	mmiowgeswucumqae.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:52.150268078 CET	1.1.1.1	192.168.2.5	0xd32a	Name error (3)	mmiugosumuqmuqoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:52.289298058 CET	1.1.1.1	192.168.2.5	0xef51	Name error (3)	ecqisawmymscauow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:52.429142952 CET	1.1.1.1	192.168.2.5	0x4fdf	Name error (3)	iyoqqeicqoquiqka.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:52.568630934 CET	1.1.1.1	192.168.2.5	0x5176	Name error (3)	ecoqwiswmwqokmay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:52.707875013 CET	1.1.1.1	192.168.2.5	0x3811	Name error (3)	ceckmwoyqkwgeoqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:52.847740889 CET	1.1.1.1	192.168.2.5	0x9d67	Name error (3)	kcoiygiwuyqyaoku.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:52.988607883 CET	1.1.1.1	192.168.2.5	0x4bc7	Name error (3)	aaeyckqsgmiqsgew.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:53.128427029 CET	1.1.1.1	192.168.2.5	0xbc63	Name error (3)	qgaiosyouwwkgsmm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:53.267308950 CET	1.1.1.1	192.168.2.5	0xa965	Name error (3)	ocqseueommkkqcgs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:53.406745911 CET	1.1.1.1	192.168.2.5	0xb402	Name error (3)	owmesaosmycoeceq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:53.545854092 CET	1.1.1.1	192.168.2.5	0xa382	Name error (3)	qokauaicweuwscac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:53.685390949 CET	1.1.1.1	192.168.2.5	0x8673	Name error (3)	sewmmwqeyauowwwo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:53.825956106 CET	1.1.1.1	192.168.2.5	0xfd07	Name error (3)	mmgowiccqoeomagq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:53.967068911 CET	1.1.1.1	192.168.2.5	0x70b5	Name error (3)	kcwiywyygywkkysk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:54.112718105 CET	1.1.1.1	192.168.2.5	0xf2b8	Name error (3)	syiysgiqgqggqkoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:54.252193928 CET	1.1.1.1	192.168.2.5	0x2b9d	Name error (3)	ykuasckuceswseig.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:54.392106056 CET	1.1.1.1	192.168.2.5	0x9489	Name error (3)	quugmiumsieaiyys.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:54.531677961 CET	1.1.1.1	192.168.2.5	0xaf2c	Name error (3)	ikqywgcqaggogqsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:54.670727015 CET	1.1.1.1	192.168.2.5	0x5bda	Name error (3)	eqyamamqwsseyoig.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:54.810786963 CET	1.1.1.1	192.168.2.5	0xbd9a	Name error (3)	seqkawokggwucsui.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:54.951756001 CET	1.1.1.1	192.168.2.5	0x4a09	Name error (3)	gmqeqkcqackwkgao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:55.093310118 CET	1.1.1.1	192.168.2.5	0x20e1	Name error (3)	guowewgekuoqacyy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:55.233196020 CET	1.1.1.1	192.168.2.5	0x190	Name error (3)	aaokyscqeecowaci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:55.372767925 CET	1.1.1.1	192.168.2.5	0xc65d	Name error (3)	ywywwwgwekicgico.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:55.511657953 CET	1.1.1.1	192.168.2.5	0xc6a3	Name error (3)	wsisaoaauqwmuomg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:55.651827097 CET	1.1.1.1	192.168.2.5	0xd28	Name error (3)	koouumcuucaeakye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:55.794485092 CET	1.1.1.1	192.168.2.5	0xf54c	Name error (3)	okccisioeycusekg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:55.932909012 CET	1.1.1.1	192.168.2.5	0xf506	Name error (3)	cymymsciyaiacwgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:56.075628996 CET	1.1.1.1	192.168.2.5	0x884a	Name error (3)	aoyeoimcuuqakckw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:56.214531898 CET	1.1.1.1	192.168.2.5	0x1719	Name error (3)	qoaweokuqggaymks.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:56.354051113 CET	1.1.1.1	192.168.2.5	0x1c30	Name error (3)	ewuyacewswkoueqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:56.493305922 CET	1.1.1.1	192.168.2.5	0xddea	Name error (3)	kiuymkmaomciimcc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:56.632721901 CET	1.1.1.1	192.168.2.5	0x4cbc	Name error (3)	oqaiyaoqwyeswaiy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:56.772201061 CET	1.1.1.1	192.168.2.5	0x7463	Name error (3)	koyokggaqsagggym.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:56.914294958 CET	1.1.1.1	192.168.2.5	0x124c	Name error (3)	cmsuagygagqceocm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:57.053807974 CET	1.1.1.1	192.168.2.5	0xda67	Name error (3)	uisgoqaoksgqsqyg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:57.192754984 CET	1.1.1.1	192.168.2.5	0xb8ea	Name error (3)	ocgcqsagaakgkcma.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:57.331270933 CET	1.1.1.1	192.168.2.5	0x4637	Name error (3)	okgigkmiieweagia.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:57.471093893 CET	1.1.1.1	192.168.2.5	0xb90f	Name error (3)	skiwkmaaeeiqqgee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:57.610122919 CET	1.1.1.1	192.168.2.5	0x2c93	Name error (3)	aagokgyaswscyaeu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:57.748724937 CET	1.1.1.1	192.168.2.5	0x2419	Name error (3)	gmciuwiycsqycggy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:57.888461113 CET	1.1.1.1	192.168.2.5	0xd1d7	Name error (3)	ggeymcaisciikucq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:58.028090954 CET	1.1.1.1	192.168.2.5	0x1317	Name error (3)	uwskygguegqkasme.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:58.167619944 CET	1.1.1.1	192.168.2.5	0x2b73	Name error (3)	cyumiiokkswcoeag.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:58.307115078 CET	1.1.1.1	192.168.2.5	0xf75d	Name error (3)	oqisqmesaeoegmyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:58.446716070 CET	1.1.1.1	192.168.2.5	0xbd2a	Name error (3)	wagasowawsoyycom.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:58.586639881 CET	1.1.1.1	192.168.2.5	0x2799	Name error (3)	gaguweiwsgouugqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:58.729547977 CET	1.1.1.1	192.168.2.5	0xfd20	Name error (3)	syyyweaywowycsia.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:58.869535923 CET	1.1.1.1	192.168.2.5	0x2e95	Name error (3)	mmoycwqiuykiusuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:59.007369041 CET	1.1.1.1	192.168.2.5	0x423d	Name error (3)	ikoycakqiuuascco.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:59.146598101 CET	1.1.1.1	192.168.2.5	0xa8c3	Name error (3)	cmuqekokuyuqgige.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:59.287152052 CET	1.1.1.1	192.168.2.5	0x15db	Name error (3)	cywoimwmsoamqoem.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:59.426642895 CET	1.1.1.1	192.168.2.5	0x9187	Name error (3)	skyiqyaeoykwcgiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:59.565706015 CET	1.1.1.1	192.168.2.5	0xb23d	Name error (3)	ssiooaeoaocuyaow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:59.705001116 CET	1.1.1.1	192.168.2.5	0x560c	Name error (3)	ywmgykycywqqewqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:59.846765995 CET	1.1.1.1	192.168.2.5	0xecd6	Name error (3)	uosaescwmkiyscay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:42:59.985414982 CET	1.1.1.1	192.168.2.5	0xf857	Name error (3)	eigywisgeoiskekg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:00.124664068 CET	1.1.1.1	192.168.2.5	0xaf4b	Name error (3)	msqsoggkkoiokugk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:00.266505003 CET	1.1.1.1	192.168.2.5	0xd3f4	Name error (3)	cmaaciimeememwao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:00.410343885 CET	1.1.1.1	192.168.2.5	0x7530	Name error (3)	uigkauqkumywguig.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:00.550097942 CET	1.1.1.1	192.168.2.5	0xdbf1	Name error (3)	wggygeoisauouuoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:00.690319061 CET	1.1.1.1	192.168.2.5	0x9b2d	Name error (3)	okoykokgycygucya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:00.830504894 CET	1.1.1.1	192.168.2.5	0x2ba9	Name error (3)	ewaoowewmsomgaiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:00.970153093 CET	1.1.1.1	192.168.2.5	0xbe7f	Name error (3)	ieiegkokewkqmkwe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:01.110091925 CET	1.1.1.1	192.168.2.5	0xd391	Name error (3)	gakesieaaickekuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:01.249535084 CET	1.1.1.1	192.168.2.5	0xbb55	Name error (3)	ecasigiwguqgguyw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:01.387864113 CET	1.1.1.1	192.168.2.5	0x8d2b	Name error (3)	okwswuciummewsui.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:01.526318073 CET	1.1.1.1	192.168.2.5	0xdf59	Name error (3)	ggaqiymaekkywusy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:01.699474096 CET	1.1.1.1	192.168.2.5	0x39b2	Name error (3)	ocicimqkgucacyim.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:01.840152979 CET	1.1.1.1	192.168.2.5	0x232b	Name error (3)	qoyisgoayskswigs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:01.985375881 CET	1.1.1.1	192.168.2.5	0x3e13	Name error (3)	wsywmuwgsogemomw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:02.130429983 CET	1.1.1.1	192.168.2.5	0xb23b	Name error (3)	skaeggkkcmoqoywy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:02.269696951 CET	1.1.1.1	192.168.2.5	0xf175	Name error (3)	uowicsywgqmgagyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:02.408776999 CET	1.1.1.1	192.168.2.5	0x6249	Name error (3)	yqyqgowkwqiggewq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:02.548458099 CET	1.1.1.1	192.168.2.5	0x66f1	Name error (3)	aikmggymywuooyqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:02.689382076 CET	1.1.1.1	192.168.2.5	0xc253	Name error (3)	semgkyogsqqwgsmy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:02.828805923 CET	1.1.1.1	192.168.2.5	0xaf9e	Name error (3)	ucmwywoqciswaguc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:02.974415064 CET	1.1.1.1	192.168.2.5	0x6704	Name error (3)	qowoagcmkkgqcswk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:03.120842934 CET	1.1.1.1	192.168.2.5	0xf3e2	Name error (3)	mmgusimiaqiweyas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:03.259913921 CET	1.1.1.1	192.168.2.5	0x15e7	Name error (3)	wgssaogcsscmkswu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:03.399096012 CET	1.1.1.1	192.168.2.5	0x1191	Name error (3)	aoeewogkicikusoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:03.538358927 CET	1.1.1.1	192.168.2.5	0x54d2	Name error (3)	ikggquqsigykqamc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:03.677459955 CET	1.1.1.1	192.168.2.5	0x8729	Name error (3)	waaqccyeaeywuoqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:03.817200899 CET	1.1.1.1	192.168.2.5	0x6950	Name error (3)	ecgiqiiieksaooyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:03.970096111 CET	1.1.1.1	192.168.2.5	0xa78	Name error (3)	iqcogqmwegaqewuu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:04.127466917 CET	1.1.1.1	192.168.2.5	0xa205	Name error (3)	aiusammkykucyyso.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:04.266875029 CET	1.1.1.1	192.168.2.5	0x5519	Name error (3)	qgkswogkcsaeegki.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:04.405770063 CET	1.1.1.1	192.168.2.5	0xadb9	Name error (3)	ywcwqgmikmycwoeu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:04.550662994 CET	1.1.1.1	192.168.2.5	0xcf6d	Name error (3)	eiqogaaggeswoges.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:04.690926075 CET	1.1.1.1	192.168.2.5	0xfa38	Name error (3)	sekqikccsokicgye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:04.829391956 CET	1.1.1.1	192.168.2.5	0x9608	Name error (3)	ssqggwwkkaayqkgk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:04.974344969 CET	1.1.1.1	192.168.2.5	0x3e0e	Name error (3)	seiiycgosccmaykm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:05.115442991 CET	1.1.1.1	192.168.2.5	0x6637	Name error (3)	aosagqwwquakwceq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:05.254405022 CET	1.1.1.1	192.168.2.5	0x69f6	Name error (3)	qoiigkweqeiwycuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:05.393945932 CET	1.1.1.1	192.168.2.5	0xfed3	Name error (3)	oqycmugocqsyuaae.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:05.534050941 CET	1.1.1.1	192.168.2.5	0x4209	Name error (3)	ewwgmiicuyowacum.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:05.674988985 CET	1.1.1.1	192.168.2.5	0x86e0	Name error (3)	mmmoiaecqyuquoya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:05.816265106 CET	1.1.1.1	192.168.2.5	0xf282	Name error (3)	auscackumyccuyuk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:05.962593079 CET	1.1.1.1	192.168.2.5	0x9adb	Name error (3)	okgquokwaassqyyi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:06.107867002 CET	1.1.1.1	192.168.2.5	0xfd6b	Name error (3)	uikciyeoaumwomqo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:06.253638029 CET	1.1.1.1	192.168.2.5	0xd0ad	Name error (3)	gmoguamscceqkamk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:06.399941921 CET	1.1.1.1	192.168.2.5	0x8179	Name error (3)	eqgoeemewamgucie.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:06.543806076 CET	1.1.1.1	192.168.2.5	0xf55	Name error (3)	uoiyoewsiosismow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:06.683486938 CET	1.1.1.1	192.168.2.5	0x9c33	Name error (3)	cekeeosckoouciwe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:06.824584961 CET	1.1.1.1	192.168.2.5	0x93e8	Name error (3)	mycgaaaymgowwicw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:06.964174032 CET	1.1.1.1	192.168.2.5	0xc8f2	Name error (3)	ecgmcmqswickqcgi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:07.103739023 CET	1.1.1.1	192.168.2.5	0xfe14	Name error (3)	guwwqcuqmkmyyyyi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:07.242306948 CET	1.1.1.1	192.168.2.5	0xd07f	Name error (3)	cygmqaagqcuusmiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:07.381290913 CET	1.1.1.1	192.168.2.5	0x872d	Name error (3)	wggqoukyeokwgmoy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:07.520473003 CET	1.1.1.1	192.168.2.5	0x2202	Name error (3)	okoccmmgswcmakcw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:07.660187006 CET	1.1.1.1	192.168.2.5	0x45cf	Name error (3)	iesmewkokeqooioo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:07.800111055 CET	1.1.1.1	192.168.2.5	0x29dd	Name error (3)	mmiccoqwqmssougs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:07.939218044 CET	1.1.1.1	192.168.2.5	0x445d	Name error (3)	aoqymkkusuecomsw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:08.079950094 CET	1.1.1.1	192.168.2.5	0x47d0	Name error (3)	mskmgwkuiamqikce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:08.219233990 CET	1.1.1.1	192.168.2.5	0x956c	Name error (3)	waucsgsqqsqkacog.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:08.358613014 CET	1.1.1.1	192.168.2.5	0xafff	Name error (3)	yqmqwygosgguwqsu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:08.498330116 CET	1.1.1.1	192.168.2.5	0x4480	Name error (3)	wsicgeayaoueooom.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:08.639549017 CET	1.1.1.1	192.168.2.5	0xb2a4	Name error (3)	uwagocmgakuuykiu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:08.778497934 CET	1.1.1.1	192.168.2.5	0x48e8	Name error (3)	uowkoqwgqqeweume.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:08.917980909 CET	1.1.1.1	192.168.2.5	0xbf3	Name error (3)	aakowgaeoeuekqyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:09.066348076 CET	1.1.1.1	192.168.2.5	0x154f	Name error (3)	skmmaauasaqywsas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:09.209398985 CET	1.1.1.1	192.168.2.5	0x1a81	Name error (3)	cygeomikesiegqsk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:09.350960970 CET	1.1.1.1	192.168.2.5	0x8cb3	Name error (3)	okeyuasamkcqqeka.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:09.490053892 CET	1.1.1.1	192.168.2.5	0xd3d8	Name error (3)	qagaeyiqsgakegya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:09.629626989 CET	1.1.1.1	192.168.2.5	0xd25c	Name error (3)	ucoweesewcwiosgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:09.769315004 CET	1.1.1.1	192.168.2.5	0x9e7c	Name error (3)	sskawiyqmweogyqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:09.912182093 CET	1.1.1.1	192.168.2.5	0x4efa	Name error (3)	wgwmaeskqmwumwkk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:10.052778959 CET	1.1.1.1	192.168.2.5	0xfb0c	Name error (3)	quwocusecekwqkaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:10.191579103 CET	1.1.1.1	192.168.2.5	0x1845	Name error (3)	qukyogcwsgswyayo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:10.333272934 CET	1.1.1.1	192.168.2.5	0xb84b	Name error (3)	uiicikumwwsmaeem.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:10.473459005 CET	1.1.1.1	192.168.2.5	0xe7a1	Name error (3)	wagyuykcqmqyygkw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:10.613356113 CET	1.1.1.1	192.168.2.5	0x4802	Name error (3)	uiaqcykmqwcwgmeg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:10.753593922 CET	1.1.1.1	192.168.2.5	0x82a	Name error (3)	uoeukcckqmmsuwaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:10.893212080 CET	1.1.1.1	192.168.2.5	0x31d6	Name error (3)	gugueqckkyuaeqqy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:11.033052921 CET	1.1.1.1	192.168.2.5	0xb476	Name error (3)	skqsqowayeqesqqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:11.173311949 CET	1.1.1.1	192.168.2.5	0xe420	Name error (3)	kuscomokgkmaommk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:11.312809944 CET	1.1.1.1	192.168.2.5	0xb968	Name error (3)	wsmyawqeqguacwas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:11.451102972 CET	1.1.1.1	192.168.2.5	0xd94	Name error (3)	ikuqcsooiucogaww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:11.592223883 CET	1.1.1.1	192.168.2.5	0x195b	Name error (3)	iysmukmcmacuomic.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:11.733984947 CET	1.1.1.1	192.168.2.5	0xd355	Name error (3)	ecqoqckqoaogcesy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:11.873029947 CET	1.1.1.1	192.168.2.5	0xb26c	Name error (3)	iesmkwqgmkmksgam.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:12.011914015 CET	1.1.1.1	192.168.2.5	0xfd92	Name error (3)	guwououoomacaysu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:12.155256987 CET	1.1.1.1	192.168.2.5	0x577d	Name error (3)	ucsoeygscgagowqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:12.295161009 CET	1.1.1.1	192.168.2.5	0x8f38	Name error (3)	ykeuawieaequiyag.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:12.434139967 CET	1.1.1.1	192.168.2.5	0x2aaf	Name error (3)	cskowwiekeqaakki.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:12.575436115 CET	1.1.1.1	192.168.2.5	0xb9da	Name error (3)	ecogmmaysgwkmwqm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:12.715900898 CET	1.1.1.1	192.168.2.5	0x68ac	Name error (3)	uwuomysuqkaykwuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:12.854794979 CET	1.1.1.1	192.168.2.5	0xa3a8	Name error (3)	ikqokmauuissyuce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:12.993949890 CET	1.1.1.1	192.168.2.5	0xe77d	Name error (3)	oeeoucsuawuqkqoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:13.134246111 CET	1.1.1.1	192.168.2.5	0x240b	Name error (3)	ygquuyekcusgsqqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:13.277658939 CET	1.1.1.1	192.168.2.5	0x89e8	Name error (3)	uqsqcgouceqmigcg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:13.417001009 CET	1.1.1.1	192.168.2.5	0x1196	Name error (3)	kwoesauawkouiecq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:13.556751966 CET	1.1.1.1	192.168.2.5	0x954	Name error (3)	yywgmuqggsagcmco.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:13.695456982 CET	1.1.1.1	192.168.2.5	0xfb63	Name error (3)	imumkckaqyieaasa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:13.836016893 CET	1.1.1.1	192.168.2.5	0x7f3a	Name error (3)	qqkoemcaocsomwow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:13.975649118 CET	1.1.1.1	192.168.2.5	0xc629	Name error (3)	awsigwcaesugycuk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:14.119429111 CET	1.1.1.1	192.168.2.5	0xd41b	Name error (3)	kkqoqmmcwacsqiiu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:14.259010077 CET	1.1.1.1	192.168.2.5	0xbf52	Name error (3)	iamowksweuqyssis.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:14.399717093 CET	1.1.1.1	192.168.2.5	0xca4e	Name error (3)	wicwocqcucgaimwe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:14.539041042 CET	1.1.1.1	192.168.2.5	0xc45e	Name error (3)	wiuyuwqiqkkogmoe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:14.679155111 CET	1.1.1.1	192.168.2.5	0x354c	Name error (3)	ueyeeeegieoukoci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:14.823652029 CET	1.1.1.1	192.168.2.5	0xefb1	Name error (3)	caysuwggmqimaqwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:14.962981939 CET	1.1.1.1	192.168.2.5	0x6805	Name error (3)	kecsceaqksygeamy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:15.102987051 CET	1.1.1.1	192.168.2.5	0x3f27	Name error (3)	oyyagswauqyckoye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:15.241925001 CET	1.1.1.1	192.168.2.5	0xfd4c	Name error (3)	aciemoayegyggwiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:15.384902954 CET	1.1.1.1	192.168.2.5	0xc623	Name error (3)	micemismikicsccc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:15.527139902 CET	1.1.1.1	192.168.2.5	0xf019	Name error (3)	kwieueawsewqigey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:15.666923046 CET	1.1.1.1	192.168.2.5	0xe25	Name error (3)	qiwmqykuesscgkac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:15.808090925 CET	1.1.1.1	192.168.2.5	0x308d	Name error (3)	issaesuceymoyccq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:15.948014021 CET	1.1.1.1	192.168.2.5	0x10f4	Name error (3)	sgowwwmqgkeyukwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:16.091568947 CET	1.1.1.1	192.168.2.5	0xdcab	Name error (3)	kewweiikaaysqugi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:16.232695103 CET	1.1.1.1	192.168.2.5	0xf1e2	Name error (3)	oywkwakwykimigck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:16.372461081 CET	1.1.1.1	192.168.2.5	0x5a92	Name error (3)	aqkiemcseioemogk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:16.516011953 CET	1.1.1.1	192.168.2.5	0x1525	Name error (3)	omoaicgooscecewq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:16.658198118 CET	1.1.1.1	192.168.2.5	0x51c	Name error (3)	gcyciogqguooyici.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:16.800523996 CET	1.1.1.1	192.168.2.5	0x81ee	Name error (3)	qwyikqowekcgesga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:16.940139055 CET	1.1.1.1	192.168.2.5	0x7aa0	Name error (3)	moysoauykmieesas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:17.080956936 CET	1.1.1.1	192.168.2.5	0xb5ed	Name error (3)	ysmmeamaooogyuwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:17.221240997 CET	1.1.1.1	192.168.2.5	0x8930	Name error (3)	qqggiaeuuaskcisa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:17.361469030 CET	1.1.1.1	192.168.2.5	0x720e	Name error (3)	ukwgsimcamwqcqus.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:17.501168013 CET	1.1.1.1	192.168.2.5	0x1a54	Name error (3)	makysawqyqkmmkuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:17.641345978 CET	1.1.1.1	192.168.2.5	0xd372	Name error (3)	gwuaqqsyegywuaya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:17.782207012 CET	1.1.1.1	192.168.2.5	0xe2f0	Name error (3)	smwcqasgeqikoqss.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:17.922270060 CET	1.1.1.1	192.168.2.5	0x276e	Name error (3)	qigaaawumoqgmwck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:18.061323881 CET	1.1.1.1	192.168.2.5	0xaada	Name error (3)	kwkiuumqgigawcek.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:18.200579882 CET	1.1.1.1	192.168.2.5	0x8143	Name error (3)	imcgogsosiogeqgc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:18.340907097 CET	1.1.1.1	192.168.2.5	0x76de	Name error (3)	coosumygqywusaaq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:18.488897085 CET	1.1.1.1	192.168.2.5	0xa30f	Name error (3)	muikisowiqmckiao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:18.631097078 CET	1.1.1.1	192.168.2.5	0x6b2b	Name error (3)	eygeqyioakqgwkws.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:18.773400068 CET	1.1.1.1	192.168.2.5	0xd05b	Name error (3)	wcagmacwieoosqok.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:18.912059069 CET	1.1.1.1	192.168.2.5	0xe498	Name error (3)	igyccoycggkescsw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:19.053255081 CET	1.1.1.1	192.168.2.5	0xc3b2	Name error (3)	uegmseugcsaymygc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:19.192584038 CET	1.1.1.1	192.168.2.5	0x9a57	Name error (3)	gcgquesqkuokqoos.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:19.336544991 CET	1.1.1.1	192.168.2.5	0x1e2b	Name error (3)	awcmmsyugikucuqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:19.472754955 CET	1.1.1.1	192.168.2.5	0x1e2b	Name error (3)	awcmmsyugikucuqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:19.475377083 CET	1.1.1.1	192.168.2.5	0x2581	Name error (3)	qqmoakcgiagmaiou.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:19.617536068 CET	1.1.1.1	192.168.2.5	0x488	Name error (3)	qcweoeaqygkgoyqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:19.918551922 CET	1.1.1.1	192.168.2.5	0xeee1	Name error (3)	kwcqymkoyiusyywg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:19.918699980 CET	1.1.1.1	192.168.2.5	0xeee1	Name error (3)	kwcqymkoyiusyywg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:20.058631897 CET	1.1.1.1	192.168.2.5	0xacb7	Name error (3)	uysuukowkciwgmko.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:20.198390007 CET	1.1.1.1	192.168.2.5	0xab4f	Name error (3)	yyqmiikqggkgkcke.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:20.339792013 CET	1.1.1.1	192.168.2.5	0xe9f	Name error (3)	cgwgwmsuyaicegcq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:20.478847980 CET	1.1.1.1	192.168.2.5	0xb5cc	Name error (3)	oesgsmmsyegwkaii.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:20.635174990 CET	1.1.1.1	192.168.2.5	0x73c9	Name error (3)	eeimyyskiwmsmwaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:20.774717093 CET	1.1.1.1	192.168.2.5	0x50f	Name error (3)	akqmmimguqeacqki.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:20.933037996 CET	1.1.1.1	192.168.2.5	0xace0	Name error (3)	eeuqeoimgoqakquw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:21.073045969 CET	1.1.1.1	192.168.2.5	0x22f	Name error (3)	mookqcgowekwsyme.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:21.211400032 CET	1.1.1.1	192.168.2.5	0x8c3f	Name error (3)	iaamsmcuweooiums.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:21.350133896 CET	1.1.1.1	192.168.2.5	0x649a	Name error (3)	qwwkyygoyymumeqa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:21.489387035 CET	1.1.1.1	192.168.2.5	0x5f04	Name error (3)	qwmqmwoieykcoums.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:21.628592014 CET	1.1.1.1	192.168.2.5	0x8ee6	Name error (3)	aqmmgwoeiissyuay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:21.768162012 CET	1.1.1.1	192.168.2.5	0xf602	Name error (3)	ukgeakkwimkacgwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:21.907700062 CET	1.1.1.1	192.168.2.5	0xfb55	Name error (3)	wcuwikyucakswsgy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:22.050355911 CET	1.1.1.1	192.168.2.5	0x7a5b	Name error (3)	oyqmksygwiuekomo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:22.189868927 CET	1.1.1.1	192.168.2.5	0x4f6c	Name error (3)	gokuyyiawuwwyeqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:22.331224918 CET	1.1.1.1	192.168.2.5	0x7e6a	Name error (3)	qqumaeswmyusisoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:22.470061064 CET	1.1.1.1	192.168.2.5	0x8a9b	Name error (3)	ekommiasesmcaysg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:22.612679005 CET	1.1.1.1	192.168.2.5	0xc917	Name error (3)	kwokcgwecseqcsck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:22.753412962 CET	1.1.1.1	192.168.2.5	0xb65	Name error (3)	cgcukekaacucqesm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:22.893210888 CET	1.1.1.1	192.168.2.5	0xb21e	Name error (3)	sgiwoemuskksgmem.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:23.032100916 CET	1.1.1.1	192.168.2.5	0x90be	Name error (3)	miyuaaeqyewssisg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:23.174436092 CET	1.1.1.1	192.168.2.5	0x2c42	Name error (3)	awquimmiceucqika.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:23.316607952 CET	1.1.1.1	192.168.2.5	0xb180	Name error (3)	qwsgiwukuaoocqgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:23.464540958 CET	1.1.1.1	192.168.2.5	0xd6ce	Name error (3)	coyikkwmyomyykmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:23.630465984 CET	1.1.1.1	192.168.2.5	0x79bf	Name error (3)	osyawgmkggwwaise.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:23.771189928 CET	1.1.1.1	192.168.2.5	0x4325	Name error (3)	gcuasoickeyqugwe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:23.910747051 CET	1.1.1.1	192.168.2.5	0x6e71	Name error (3)	oscegykuecgmiioq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:24.051683903 CET	1.1.1.1	192.168.2.5	0x6e71	Name error (3)	oscegykuecgmiioq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:24.052032948 CET	1.1.1.1	192.168.2.5	0xdc72	Name error (3)	camkaaeqmmemkeqo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:24.193380117 CET	1.1.1.1	192.168.2.5	0xae35	Name error (3)	gwswakimuyyacece.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:24.331754923 CET	1.1.1.1	192.168.2.5	0x869e	Name error (3)	giqagqyuwgskokgg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:24.470454931 CET	1.1.1.1	192.168.2.5	0x466f	Name error (3)	uqswoygsykiwckyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:24.609860897 CET	1.1.1.1	192.168.2.5	0xa999	Name error (3)	wccgukagisyugimy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:24.749130964 CET	1.1.1.1	192.168.2.5	0x4d31	Name error (3)	qieoqgsomueyeass.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:24.890145063 CET	1.1.1.1	192.168.2.5	0xddc4	Name error (3)	uqumusgyyygmiicq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:25.030067921 CET	1.1.1.1	192.168.2.5	0xdba1	Name error (3)	wuowyewqgeeycsio.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:25.170224905 CET	1.1.1.1	192.168.2.5	0xf8fc	Name error (3)	sgckugycwoyyoeow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:25.308748960 CET	1.1.1.1	192.168.2.5	0xdbcd	Name error (3)	keyqaymgcyswowqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:25.451168060 CET	1.1.1.1	192.168.2.5	0x51cc	Name error (3)	yskeokkusmkcyosa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:25.592644930 CET	1.1.1.1	192.168.2.5	0x4e1b	Name error (3)	ymmoqwiyeomigemu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:25.731381893 CET	1.1.1.1	192.168.2.5	0xa543	Name error (3)	iaiyeiseoyssykuu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:25.872819901 CET	1.1.1.1	192.168.2.5	0x46fa	Name error (3)	gcsgyeomwaaiuwmg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.027625084 CET	1.1.1.1	192.168.2.5	0x46fa	Name error (3)	gcsgyeomwaaiuwmg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.063163996 CET	1.1.1.1	192.168.2.5	0x8e8e	Name error (3)	cuccscimmuweokoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.208412886 CET	1.1.1.1	192.168.2.5	0x8e8e	Name error (3)	cuccscimmuweokoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.239695072 CET	1.1.1.1	192.168.2.5	0x9776	Name error (3)	wigeqewyusckikqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.388928890 CET	1.1.1.1	192.168.2.5	0x8e29	Name error (3)	wowsuycqmmumwayq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.525358915 CET	1.1.1.1	192.168.2.5	0x8e29	Name error (3)	wowsuycqmmumwayq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.528944969 CET	1.1.1.1	192.168.2.5	0x5475	Name error (3)	keqgamuiascccwou.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.669828892 CET	1.1.1.1	192.168.2.5	0x334c	Name error (3)	awyogsywqmeoaemc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.808315992 CET	1.1.1.1	192.168.2.5	0x345	Name error (3)	gogceqqcygywqquk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:26.948295116 CET	1.1.1.1	192.168.2.5	0x3ef	Name error (3)	akewqoewkigoyqgk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:27.093492031 CET	1.1.1.1	192.168.2.5	0xe646	Name error (3)	smgomgmggmimcecy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:27.240609884 CET	1.1.1.1	192.168.2.5	0xa74	Name error (3)	uqemqeoguyciagkm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:27.390934944 CET	1.1.1.1	192.168.2.5	0xe25e	Name error (3)	oekuaqgwaqowmqwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:27.534060955 CET	1.1.1.1	192.168.2.5	0x4569	Name error (3)	sgqwuwmskisykocm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:27.675983906 CET	1.1.1.1	192.168.2.5	0x4be0	Name error (3)	kewgquswkewgaweo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:27.818865061 CET	1.1.1.1	192.168.2.5	0x5a80	Name error (3)	eekokuwaauqiuoci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:27.963877916 CET	1.1.1.1	192.168.2.5	0xaa84	Name error (3)	qweaumwmomesioio.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:28.102849007 CET	1.1.1.1	192.168.2.5	0x8f88	Name error (3)	couuuksyuscyykke.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:28.248754025 CET	1.1.1.1	192.168.2.5	0xcf4b	Name error (3)	moygyoakyaoosocs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:28.395441055 CET	1.1.1.1	192.168.2.5	0xd085	Name error (3)	qwikeawwkykgymoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:28.557049036 CET	1.1.1.1	192.168.2.5	0xd085	Name error (3)	qwikeawwkykgymoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:28.562062025 CET	1.1.1.1	192.168.2.5	0xd12a	Name error (3)	aqcyeeuumekyigiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:28.708987951 CET	1.1.1.1	192.168.2.5	0xc68e	Name error (3)	mugimcuecsqusuec.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:28.850096941 CET	1.1.1.1	192.168.2.5	0x1dcf	Name error (3)	suogmuweyqgoqkgk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:28.989651918 CET	1.1.1.1	192.168.2.5	0xacdb	Name error (3)	ukgmmiakkgwgssak.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:29.130480051 CET	1.1.1.1	192.168.2.5	0x5ef4	Name error (3)	yyuewgegwqqkccay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:29.271786928 CET	1.1.1.1	192.168.2.5	0xde7a	Name error (3)	qqmoqouykmakcwwo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:29.414725065 CET	1.1.1.1	192.168.2.5	0xb0f8	Name error (3)	ekucgqkwyqioewgm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:29.554162979 CET	1.1.1.1	192.168.2.5	0x7256	Name error (3)	cgmocwqyagacokyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:29.701570988 CET	1.1.1.1	192.168.2.5	0xc4e8	Name error (3)	ekuisswoiwwasmug.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:29.919771910 CET	1.1.1.1	192.168.2.5	0xedca	Name error (3)	mucqakweaoaeqwqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:29.989453077 CET	1.1.1.1	192.168.2.5	0xedca	Name error (3)	mucqakweaoaeqwqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:30.250756025 CET	1.1.1.1	192.168.2.5	0xdbf	Name error (3)	iaqkoyuacqaqiiaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:30.250763893 CET	1.1.1.1	192.168.2.5	0xdbf	Name error (3)	iaqkoyuacqaqiiaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:30.471107960 CET	1.1.1.1	192.168.2.5	0xe82	Name error (3)	ysysqieskmiymcsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:30.559382915 CET	1.1.1.1	192.168.2.5	0xe82	Name error (3)	ysysqieskmiymcsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:30.804264069 CET	1.1.1.1	192.168.2.5	0x1bad	Name error (3)	ossaysgggqwskqck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:30.804670095 CET	1.1.1.1	192.168.2.5	0x1bad	Name error (3)	ossaysgggqwskqck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:31.029545069 CET	1.1.1.1	192.168.2.5	0xda8e	Name error (3)	ygceccuaqcgscgks.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:31.101246119 CET	1.1.1.1	192.168.2.5	0xda8e	Name error (3)	ygceccuaqcgscgks.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:31.264857054 CET	1.1.1.1	192.168.2.5	0xa597	Name error (3)	kkyoeaiisaskwsgi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:31.320398092 CET	1.1.1.1	192.168.2.5	0xa597	Name error (3)	kkyoeaiisaskwsgi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:31.596951962 CET	1.1.1.1	192.168.2.5	0xfafa	Name error (3)	kkmycqgoqwsgagmm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:31.596978903 CET	1.1.1.1	192.168.2.5	0xfafa	Name error (3)	kkmycqgoqwsgagmm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:31.817683935 CET	1.1.1.1	192.168.2.5	0xc882	Name error (3)	kkqgkiqaiegyuuac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:31.883538008 CET	1.1.1.1	192.168.2.5	0xc882	Name error (3)	kkqgkiqaiegyuuac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:32.039772034 CET	1.1.1.1	192.168.2.5	0xe13e	Name error (3)	sgyosccwmusakiag.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:32.099802017 CET	1.1.1.1	192.168.2.5	0xe13e	Name error (3)	sgyosccwmusakiag.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:32.260021925 CET	1.1.1.1	192.168.2.5	0x7092	Name error (3)	esmcwycsgkmmkmie.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:32.339574099 CET	1.1.1.1	192.168.2.5	0x7092	Name error (3)	esmcwycsgkmmkmie.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:32.490350008 CET	1.1.1.1	192.168.2.5	0x297b	Name error (3)	eeagssccuuqgoyck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:32.559906006 CET	1.1.1.1	192.168.2.5	0x297b	Name error (3)	eeagssccuuqgoyck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:32.807718992 CET	1.1.1.1	192.168.2.5	0x26f2	Name error (3)	kweqseyaokkowemm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:32.807806015 CET	1.1.1.1	192.168.2.5	0x26f2	Name error (3)	kweqseyaokkowemm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:33.026333094 CET	1.1.1.1	192.168.2.5	0xb0cf	Name error (3)	omqukiqqqkicumaq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:33.113573074 CET	1.1.1.1	192.168.2.5	0xb0cf	Name error (3)	omqukiqqqkicumaq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:33.356221914 CET	1.1.1.1	192.168.2.5	0x6be1	Name error (3)	cgagsqguosagcyko.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:33.356281996 CET	1.1.1.1	192.168.2.5	0x6be1	Name error (3)	cgagsqguosagcyko.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:33.669632912 CET	1.1.1.1	192.168.2.5	0x1ad1	Name error (3)	kwuyeysggksaauew.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:33.669677973 CET	1.1.1.1	192.168.2.5	0x1ad1	Name error (3)	kwuyeysggksaauew.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:33.890772104 CET	1.1.1.1	192.168.2.5	0x4e64	Name error (3)	yyyocaqgqkgawuoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:33.975850105 CET	1.1.1.1	192.168.2.5	0x4e64	Name error (3)	yyyocaqgqkgawuoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:34.200854063 CET	1.1.1.1	192.168.2.5	0x33c5	Name error (3)	qcyusyquosgecuec.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:34.200905085 CET	1.1.1.1	192.168.2.5	0x33c5	Name error (3)	qcyusyquosgecuec.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:34.423633099 CET	1.1.1.1	192.168.2.5	0x13f	Name error (3)	wciikuskwmgwyqqo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:34.505815029 CET	1.1.1.1	192.168.2.5	0x13f	Name error (3)	wciikuskwmgwyqqo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:34.755595922 CET	1.1.1.1	192.168.2.5	0x1e31	Name error (3)	giekgiaycwsmicgi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:34.755733967 CET	1.1.1.1	192.168.2.5	0x1e31	Name error (3)	giekgiaycwsmicgi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:34.975024939 CET	1.1.1.1	192.168.2.5	0xad9	Name error (3)	moigwmmwmwaesewy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:35.035813093 CET	1.1.1.1	192.168.2.5	0xad9	Name error (3)	moigwmmwmwaesewy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:35.285624027 CET	1.1.1.1	192.168.2.5	0x25d1	Name error (3)	uyeyicisiasmeaiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:35.285659075 CET	1.1.1.1	192.168.2.5	0x25d1	Name error (3)	uyeyicisiasmeaiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:35.697804928 CET	1.1.1.1	192.168.2.5	0x3739	Name error (3)	wikomoakewmgswsg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:35.697848082 CET	1.1.1.1	192.168.2.5	0x3739	Name error (3)	wikomoakewmgswsg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:35.915821075 CET	1.1.1.1	192.168.2.5	0x2171	Name error (3)	eyqewqgswoiwucau.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:35.988652945 CET	1.1.1.1	192.168.2.5	0x2171	Name error (3)	eyqewqgswoiwucau.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:36.136884928 CET	1.1.1.1	192.168.2.5	0x84ba	Name error (3)	igsykuymgikayiyw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:36.213675022 CET	1.1.1.1	192.168.2.5	0x84ba	Name error (3)	igsykuymgikayiyw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:36.466893911 CET	1.1.1.1	192.168.2.5	0xd1fb	Name error (3)	awoiesggoyaqumsc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:36.467055082 CET	1.1.1.1	192.168.2.5	0xd1fb	Name error (3)	awoiesggoyaqumsc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:36.801783085 CET	1.1.1.1	192.168.2.5	0xaed	Name error (3)	akwcugeaamycaqus.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:36.801812887 CET	1.1.1.1	192.168.2.5	0xaed	Name error (3)	akwcugeaamycaqus.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.027230024 CET	1.1.1.1	192.168.2.5	0xf707	Name error (3)	oyigkwsqmiqmyaem.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.082355022 CET	1.1.1.1	192.168.2.5	0xf707	Name error (3)	oyigkwsqmiqmyaem.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.261421919 CET	1.1.1.1	192.168.2.5	0x807	Name error (3)	qiakkiycwyckaoyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.316865921 CET	1.1.1.1	192.168.2.5	0x807	Name error (3)	qiakkiycwyckaoyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.487478018 CET	1.1.1.1	192.168.2.5	0xaa3c	Name error (3)	couqoiaioicsmiyi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.551419020 CET	1.1.1.1	192.168.2.5	0xaa3c	Name error (3)	couqoiaioicsmiyi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.712160110 CET	1.1.1.1	192.168.2.5	0xe21a	Name error (3)	goqwgykuuockgkiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.769685030 CET	1.1.1.1	192.168.2.5	0xe21a	Name error (3)	goqwgykuuockgkiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:37.932023048 CET	1.1.1.1	192.168.2.5	0x539	Name error (3)	mawieiaeeguckoce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.004156113 CET	1.1.1.1	192.168.2.5	0x539	Name error (3)	mawieiaeeguckoce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.153424025 CET	1.1.1.1	192.168.2.5	0x6ec0	Name error (3)	yyaqueaqcsokisee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.234428883 CET	1.1.1.1	192.168.2.5	0x6ec0	Name error (3)	yyaqueaqcsokisee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.383793116 CET	1.1.1.1	192.168.2.5	0xfc19	Name error (3)	cassqaqeuciekkeo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.465454102 CET	1.1.1.1	192.168.2.5	0xfc19	Name error (3)	cassqaqeuciekkeo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.700560093 CET	1.1.1.1	192.168.2.5	0xd688	Name error (3)	gwscqggqeoiuwqkc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.700575113 CET	1.1.1.1	192.168.2.5	0xd688	Name error (3)	gwscqggqeoiuwqkc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.927674055 CET	1.1.1.1	192.168.2.5	0xa87	Name error (3)	caiqmqkuwumoeemo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:38.987484932 CET	1.1.1.1	192.168.2.5	0xa87	Name error (3)	caiqmqkuwumoeemo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.154869080 CET	1.1.1.1	192.168.2.5	0x490a	Name error (3)	qwgogmasssoceeqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.222023964 CET	1.1.1.1	192.168.2.5	0x490a	Name error (3)	qwgogmasssoceeqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.381241083 CET	1.1.1.1	192.168.2.5	0x78a0	Name error (3)	akyqwcwaokmmkguw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.454972982 CET	1.1.1.1	192.168.2.5	0x78a0	Name error (3)	akyqwcwaokmmkguw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.605562925 CET	1.1.1.1	192.168.2.5	0xccb9	Name error (3)	kkoguuoieqeogeic.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.677206039 CET	1.1.1.1	192.168.2.5	0xccb9	Name error (3)	kkoguuoieqeogeic.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.826128006 CET	1.1.1.1	192.168.2.5	0x5802	Name error (3)	sagqoimosegsiusq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:39.911812067 CET	1.1.1.1	192.168.2.5	0x5802	Name error (3)	sagqoimosegsiusq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:40.055247068 CET	1.1.1.1	192.168.2.5	0xb0b1	Name error (3)	aqwacqooyiwygyoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:40.133650064 CET	1.1.1.1	192.168.2.5	0xb0b1	Name error (3)	aqwacqooyiwygyoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:40.282660007 CET	1.1.1.1	192.168.2.5	0xb429	Name error (3)	ukyogakooecoqmwk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:40.347377062 CET	1.1.1.1	192.168.2.5	0xb429	Name error (3)	ukyogakooecoqmwk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:40.507590055 CET	1.1.1.1	192.168.2.5	0xf434	Name error (3)	suuugkackgokicyg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:40.565557003 CET	1.1.1.1	192.168.2.5	0xf434	Name error (3)	suuugkackgokicyg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:40.842727900 CET	1.1.1.1	192.168.2.5	0x121d	Name error (3)	woieimgsuwmisgsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:40.842753887 CET	1.1.1.1	192.168.2.5	0x121d	Name error (3)	woieimgsuwmisgsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:41.060975075 CET	1.1.1.1	192.168.2.5	0x40cd	Name error (3)	yyeuksqgowaaewyy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:41.132371902 CET	1.1.1.1	192.168.2.5	0x40cd	Name error (3)	yyeuksqgowaaewyy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:41.284120083 CET	1.1.1.1	192.168.2.5	0x633c	Name error (3)	kesowemsyoqwmwma.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:41.348401070 CET	1.1.1.1	192.168.2.5	0x633c	Name error (3)	kesowemsyoqwmwma.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:41.538773060 CET	1.1.1.1	192.168.2.5	0xf2a8	Name error (3)	iswkciyqkcwyyyoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:41.597692966 CET	1.1.1.1	192.168.2.5	0xf2a8	Name error (3)	iswkciyqkcwyyyoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:41.766575098 CET	1.1.1.1	192.168.2.5	0x66ae	Name error (3)	kwecsqeywykucesq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:41.834813118 CET	1.1.1.1	192.168.2.5	0x66ae	Name error (3)	kwecsqeywykucesq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:42.077411890 CET	1.1.1.1	192.168.2.5	0x5973	Name error (3)	goakocqoasequusi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:42.077436924 CET	1.1.1.1	192.168.2.5	0x5973	Name error (3)	goakocqoasequusi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:42.389764071 CET	1.1.1.1	192.168.2.5	0x64dd	Name error (3)	oygeiewaeigymgci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:42.389771938 CET	1.1.1.1	192.168.2.5	0x64dd	Name error (3)	oygeiewaeigymgci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:42.612133026 CET	1.1.1.1	192.168.2.5	0x4346	Name error (3)	omqkkmkwwgmaaoqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:42.676239014 CET	1.1.1.1	192.168.2.5	0x4346	Name error (3)	omqkkmkwwgmaaoqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:42.839031935 CET	1.1.1.1	192.168.2.5	0x3f57	Name error (3)	caqswskigemmaoes.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:42.924197912 CET	1.1.1.1	192.168.2.5	0x3f57	Name error (3)	caqswskigemmaoes.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:43.149990082 CET	1.1.1.1	192.168.2.5	0x41c5	Name error (3)	ueimyeqaawcyewac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:43.150002003 CET	1.1.1.1	192.168.2.5	0x41c5	Name error (3)	ueimyeqaawcyewac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:43.465027094 CET	1.1.1.1	192.168.2.5	0xa8fe	Name error (3)	kekmcgakqcicegie.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:43.465039968 CET	1.1.1.1	192.168.2.5	0xa8fe	Name error (3)	kekmcgakqcicegie.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:43.690589905 CET	1.1.1.1	192.168.2.5	0xf1a0	Name error (3)	ymiiqugmiuaoqcwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:43.754136086 CET	1.1.1.1	192.168.2.5	0xf1a0	Name error (3)	ymiiqugmiuaoqcwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:43.911386013 CET	1.1.1.1	192.168.2.5	0x2f22	Name error (3)	osqeiasimqgaoygy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:43.979242086 CET	1.1.1.1	192.168.2.5	0x2f22	Name error (3)	osqeiasimqgaoygy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:44.252180099 CET	1.1.1.1	192.168.2.5	0x3baf	Name error (3)	osqycyuomwweqgoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:44.252190113 CET	1.1.1.1	192.168.2.5	0x3baf	Name error (3)	osqycyuomwweqgoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:44.474611998 CET	1.1.1.1	192.168.2.5	0x2221	Name error (3)	qccagsecgcqcuiou.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:44.553209066 CET	1.1.1.1	192.168.2.5	0x2221	Name error (3)	qccagsecgcqcuiou.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:44.696363926 CET	1.1.1.1	192.168.2.5	0xda35	Name error (3)	kegwueiwuqwoeysg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:44.755297899 CET	1.1.1.1	192.168.2.5	0xda35	Name error (3)	kegwueiwuqwoeysg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:44.917432070 CET	1.1.1.1	192.168.2.5	0xa7a0	Name error (3)	oygmkqkooqokiiuw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:44.992580891 CET	1.1.1.1	192.168.2.5	0xa7a0	Name error (3)	oygmkqkooqokiiuw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:45.229774952 CET	1.1.1.1	192.168.2.5	0xc8f8	Name error (3)	acqkcwiiwggmuiuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:45.229790926 CET	1.1.1.1	192.168.2.5	0xc8f8	Name error (3)	acqkcwiiwggmuiuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:45.448113918 CET	1.1.1.1	192.168.2.5	0xc7ed	Name error (3)	sugsqseasiuccwou.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:45.534545898 CET	1.1.1.1	192.168.2.5	0xc7ed	Name error (3)	sugsqseasiuccwou.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:45.670725107 CET	1.1.1.1	192.168.2.5	0x807e	Name error (3)	smccsacmmusgkaqy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:45.738344908 CET	1.1.1.1	192.168.2.5	0x807e	Name error (3)	smccsacmmusgkaqy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.003420115 CET	1.1.1.1	192.168.2.5	0x7dc4	Name error (3)	cgciecgcocwassiu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.003849983 CET	1.1.1.1	192.168.2.5	0x7dc4	Name error (3)	cgciecgcocwassiu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.224677086 CET	1.1.1.1	192.168.2.5	0xe84f	Name error (3)	wueiymqkmeqoaeoa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.301438093 CET	1.1.1.1	192.168.2.5	0xe84f	Name error (3)	wueiymqkmeqoaeoa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.447190046 CET	1.1.1.1	192.168.2.5	0x853e	Name error (3)	awuasceiaugcyimo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.523591042 CET	1.1.1.1	192.168.2.5	0x853e	Name error (3)	awuasceiaugcyimo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.673264027 CET	1.1.1.1	192.168.2.5	0xcc04	Name error (3)	qqeuqoguwmyeoyyy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.738120079 CET	1.1.1.1	192.168.2.5	0xcc04	Name error (3)	qqeuqoguwmyeoyyy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.900062084 CET	1.1.1.1	192.168.2.5	0x388f	Name error (3)	muuwmkkgesiqeqms.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:46.956700087 CET	1.1.1.1	192.168.2.5	0x388f	Name error (3)	muuwmkkgesiqeqms.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.124502897 CET	1.1.1.1	192.168.2.5	0x4233	Name error (3)	gcgwqyqugwoyoaey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.191549063 CET	1.1.1.1	192.168.2.5	0x4233	Name error (3)	gcgwqyqugwoyoaey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.345943928 CET	1.1.1.1	192.168.2.5	0xd64	Name error (3)	iaamggceyqysmkmg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.410162926 CET	1.1.1.1	192.168.2.5	0xd64	Name error (3)	iaamggceyqysmkmg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.564719915 CET	1.1.1.1	192.168.2.5	0x5354	Name error (3)	ueokeesyogikokkq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.643704891 CET	1.1.1.1	192.168.2.5	0x5354	Name error (3)	ueokeesyogikokkq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.782500982 CET	1.1.1.1	192.168.2.5	0x62f5	Name error (3)	sasckqaoagasgwsk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:47.861097097 CET	1.1.1.1	192.168.2.5	0x62f5	Name error (3)	sasckqaoagasgwsk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:48.097717047 CET	1.1.1.1	192.168.2.5	0x268d	Name error (3)	cukeocigwcwkgyoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:48.097866058 CET	1.1.1.1	192.168.2.5	0x268d	Name error (3)	cukeocigwcwkgyoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:48.325062037 CET	1.1.1.1	192.168.2.5	0x958	Name error (3)	awaciggcyceyokce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:48.384188890 CET	1.1.1.1	192.168.2.5	0x958	Name error (3)	awaciggcyceyokce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:48.546104908 CET	1.1.1.1	192.168.2.5	0x806	Name error (3)	uyokuyiqqowcscqo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:48.615463972 CET	1.1.1.1	192.168.2.5	0x806	Name error (3)	uyokuyiqqowcscqo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:48.857176065 CET	1.1.1.1	192.168.2.5	0x5c1c	Name error (3)	qcuueqqykmeqswys.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:48.857220888 CET	1.1.1.1	192.168.2.5	0x5c1c	Name error (3)	qcuueqqykmeqswys.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:49.075071096 CET	1.1.1.1	192.168.2.5	0xfdeb	Name error (3)	iskaigeaaociwauo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:49.147051096 CET	1.1.1.1	192.168.2.5	0xfdeb	Name error (3)	iskaigeaaociwauo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:49.300185919 CET	1.1.1.1	192.168.2.5	0x4ffb	Name error (3)	qqwoeoqkcogwcyeg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:49.366478920 CET	1.1.1.1	192.168.2.5	0x4ffb	Name error (3)	qqwoeoqkcogwcyeg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:49.632309914 CET	1.1.1.1	192.168.2.5	0xe775	Name error (3)	gouigugcegqomqik.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:49.632355928 CET	1.1.1.1	192.168.2.5	0xe775	Name error (3)	gouigugcegqomqik.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:49.858078957 CET	1.1.1.1	192.168.2.5	0xb3fa	Name error (3)	magwucmkkmykkess.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:49.930244923 CET	1.1.1.1	192.168.2.5	0xb3fa	Name error (3)	magwucmkkmykkess.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.084022999 CET	1.1.1.1	192.168.2.5	0x64c1	Name error (3)	wuimeuggwgaokuau.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.163710117 CET	1.1.1.1	192.168.2.5	0x64c1	Name error (3)	wuimeuggwgaokuau.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.309070110 CET	1.1.1.1	192.168.2.5	0x820e	Name error (3)	kqggcmgimkogkaeq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.383431911 CET	1.1.1.1	192.168.2.5	0x820e	Name error (3)	kqggcmgimkogkaeq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.534209013 CET	1.1.1.1	192.168.2.5	0xf372	Name error (3)	keyemuoegimmgqiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.606163979 CET	1.1.1.1	192.168.2.5	0xf372	Name error (3)	keyemuoegimmgqiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.758253098 CET	1.1.1.1	192.168.2.5	0xf615	Name error (3)	wmgoyusqoacscaym.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.836342096 CET	1.1.1.1	192.168.2.5	0xf615	Name error (3)	wmgoyusqoacscaym.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:50.985208035 CET	1.1.1.1	192.168.2.5	0xcc98	Name error (3)	oqgksoekmuecmuks.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.067284107 CET	1.1.1.1	192.168.2.5	0xcc98	Name error (3)	oqgksoekmuecmuks.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.214267015 CET	1.1.1.1	192.168.2.5	0xfba9	Name error (3)	qoaqqguqascciiey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.285327911 CET	1.1.1.1	192.168.2.5	0xfba9	Name error (3)	qoaqqguqascciiey.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.436696053 CET	1.1.1.1	192.168.2.5	0x9a90	Name error (3)	ykwswkacmaqscuaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.504283905 CET	1.1.1.1	192.168.2.5	0x9a90	Name error (3)	ykwswkacmaqscuaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.656397104 CET	1.1.1.1	192.168.2.5	0x1062	Name error (3)	quuicoywaeqsaqam.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.738147974 CET	1.1.1.1	192.168.2.5	0x1062	Name error (3)	quuicoywaeqsaqam.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.875509024 CET	1.1.1.1	192.168.2.5	0x1282	Name error (3)	gawwyyweayiamauo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:51.941963911 CET	1.1.1.1	192.168.2.5	0x1282	Name error (3)	gawwyyweayiamauo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.101017952 CET	1.1.1.1	192.168.2.5	0x62b8	Name error (3)	ggmagoysqkegguym.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.160351038 CET	1.1.1.1	192.168.2.5	0x62b8	Name error (3)	ggmagoysqkegguym.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.326657057 CET	1.1.1.1	192.168.2.5	0xe2af	Name error (3)	qosiywgcuamwuuos.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.395005941 CET	1.1.1.1	192.168.2.5	0xe2af	Name error (3)	qosiywgcuamwuuos.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.545689106 CET	1.1.1.1	192.168.2.5	0xbaaf	Name error (3)	ikiakwccommusayk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.616543055 CET	1.1.1.1	192.168.2.5	0xbaaf	Name error (3)	ikiakwccommusayk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.767647028 CET	1.1.1.1	192.168.2.5	0x613f	Name error (3)	kuowguomwakoagem.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.833642006 CET	1.1.1.1	192.168.2.5	0x613f	Name error (3)	kuowguomwakoagem.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:52.993544102 CET	1.1.1.1	192.168.2.5	0x17aa	Name error (3)	iycyekwmcqmygiwc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.051368952 CET	1.1.1.1	192.168.2.5	0x17aa	Name error (3)	iycyekwmcqmygiwc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.212743044 CET	1.1.1.1	192.168.2.5	0xec6d	Name error (3)	wsggkemgawiyoyag.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.291415930 CET	1.1.1.1	192.168.2.5	0xec6d	Name error (3)	wsggkemgawiyoyag.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.437978983 CET	1.1.1.1	192.168.2.5	0x7ed6	Name error (3)	uokueeguoscassay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.520528078 CET	1.1.1.1	192.168.2.5	0x7ed6	Name error (3)	uokueeguoscassay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.661088943 CET	1.1.1.1	192.168.2.5	0x935a	Name error (3)	gmmgooqqmkmccsyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.735409021 CET	1.1.1.1	192.168.2.5	0x935a	Name error (3)	gmmgooqqmkmccsyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.887105942 CET	1.1.1.1	192.168.2.5	0x3846	Name error (3)	aucauemcyuaguocm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:53.958134890 CET	1.1.1.1	192.168.2.5	0x3846	Name error (3)	aucauemcyuaguocm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:54.111170053 CET	1.1.1.1	192.168.2.5	0xcdba	Name error (3)	waicykwqykeikcwk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:54.176697016 CET	1.1.1.1	192.168.2.5	0xcdba	Name error (3)	waicykwqykeikcwk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:54.443389893 CET	1.1.1.1	192.168.2.5	0x6feb	Name error (3)	cyaeiisoyegwmaai.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:54.443418980 CET	1.1.1.1	192.168.2.5	0x6feb	Name error (3)	cyaeiisoyegwmaai.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:54.668287039 CET	1.1.1.1	192.168.2.5	0x9c35	Name error (3)	yksmsewamgkcawsk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:54.740020990 CET	1.1.1.1	192.168.2.5	0x9c35	Name error (3)	yksmsewamgkcawsk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:54.893452883 CET	1.1.1.1	192.168.2.5	0xc164	Name error (3)	ssckkeymaqqkauaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:54.958741903 CET	1.1.1.1	192.168.2.5	0xc164	Name error (3)	ssckkeymaqqkauaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.112256050 CET	1.1.1.1	192.168.2.5	0x23c	Name error (3)	kiskqiemmoucayee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.176002979 CET	1.1.1.1	192.168.2.5	0x23c	Name error (3)	kiskqiemmoucayee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.335369110 CET	1.1.1.1	192.168.2.5	0x7da7	Name error (3)	csamiaaeciweemoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.398910999 CET	1.1.1.1	192.168.2.5	0x7da7	Name error (3)	csamiaaeciweemoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.560514927 CET	1.1.1.1	192.168.2.5	0x2eee	Name error (3)	wgemkqmwasoamykk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.644769907 CET	1.1.1.1	192.168.2.5	0x2eee	Name error (3)	wgemkqmwasoamykk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.780999899 CET	1.1.1.1	192.168.2.5	0x4fb6	Name error (3)	augywiqkiooqagai.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:55.866995096 CET	1.1.1.1	192.168.2.5	0x4fb6	Name error (3)	augywiqkiooqagai.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.005198956 CET	1.1.1.1	192.168.2.5	0x3f39	Name error (3)	aiikcuqwkqqgmmuc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.072458982 CET	1.1.1.1	192.168.2.5	0x3f39	Name error (3)	aiikcuqwkqqgmmuc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.229469061 CET	1.1.1.1	192.168.2.5	0x6b06	Name error (3)	yqsygmwgyeswauee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.301235914 CET	1.1.1.1	192.168.2.5	0x6b06	Name error (3)	yqsygmwgyeswauee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.451555967 CET	1.1.1.1	192.168.2.5	0x9b29	Name error (3)	kuuwqyicicueeksi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.521303892 CET	1.1.1.1	192.168.2.5	0x9b29	Name error (3)	kuuwqyicicueeksi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.677028894 CET	1.1.1.1	192.168.2.5	0x850d	Name error (3)	guceugymaqesqyog.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.760231018 CET	1.1.1.1	192.168.2.5	0x850d	Name error (3)	guceugymaqesqyog.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.900707960 CET	1.1.1.1	192.168.2.5	0xfb82	Name error (3)	eiqqkwekkoqucugk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:56.991338968 CET	1.1.1.1	192.168.2.5	0xfb82	Name error (3)	eiqqkwekkoqucugk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:57.125643969 CET	1.1.1.1	192.168.2.5	0xf54c	Name error (3)	myqaoiaciwyiksim.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:57.208101988 CET	1.1.1.1	192.168.2.5	0xf54c	Name error (3)	myqaoiaciwyiksim.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:57.436839104 CET	1.1.1.1	192.168.2.5	0xed7	Name error (3)	iqsogimomioksqss.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:57.437473059 CET	1.1.1.1	192.168.2.5	0xed7	Name error (3)	iqsogimomioksqss.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:57.661708117 CET	1.1.1.1	192.168.2.5	0x5178	Name error (3)	msyyqqocckwcwqsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:57.722515106 CET	1.1.1.1	192.168.2.5	0x5178	Name error (3)	msyyqqocckwcwqsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:57.881684065 CET	1.1.1.1	192.168.2.5	0xa683	Name error (3)	kcuacaiscasmmeuc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:57.941735983 CET	1.1.1.1	192.168.2.5	0xa683	Name error (3)	kcuacaiscasmmeuc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:58.108917952 CET	1.1.1.1	192.168.2.5	0x4655	Name error (3)	yqmmaakeuowasuaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:58.179251909 CET	1.1.1.1	192.168.2.5	0x4655	Name error (3)	yqmmaakeuowasuaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:58.332906008 CET	1.1.1.1	192.168.2.5	0x3285	Name error (3)	oquiosikasgcasiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:58.396111012 CET	1.1.1.1	192.168.2.5	0x3285	Name error (3)	oquiosikasgcasiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:58.551687956 CET	1.1.1.1	192.168.2.5	0x1f0c	Name error (3)	cmyagoqaqeowiecy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:58.613461971 CET	1.1.1.1	192.168.2.5	0x1f0c	Name error (3)	cmyagoqaqeowiecy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:58.881311893 CET	1.1.1.1	192.168.2.5	0xd9a3	Name error (3)	syceoaskgquyieos.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:58.881335020 CET	1.1.1.1	192.168.2.5	0xd9a3	Name error (3)	syceoaskgquyieos.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:59.210089922 CET	1.1.1.1	192.168.2.5	0xddd6	Name error (3)	ykcgwkgwcoqyugqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:59.210151911 CET	1.1.1.1	192.168.2.5	0xddd6	Name error (3)	ykcgwkgwcoqyugqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:59.432354927 CET	1.1.1.1	192.168.2.5	0xa56f	Name error (3)	oqmyqqwuiuaiigci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:59.507989883 CET	1.1.1.1	192.168.2.5	0xa56f	Name error (3)	oqmyqqwuiuaiigci.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:59.742455959 CET	1.1.1.1	192.168.2.5	0x2d73	Name error (3)	auskeuccomeakswi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:59.742512941 CET	1.1.1.1	192.168.2.5	0x2d73	Name error (3)	auskeuccomeakswi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:43:59.963584900 CET	1.1.1.1	192.168.2.5	0x9d88	Name error (3)	cmgeyaisiymscucu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:00.035033941 CET	1.1.1.1	192.168.2.5	0x9d88	Name error (3)	cmgeyaisiymscucu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:00.277822971 CET	1.1.1.1	192.168.2.5	0xe464	Name error (3)	ecooqgmioaukkiek.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:00.277884007 CET	1.1.1.1	192.168.2.5	0xe464	Name error (3)	ecooqgmioaukkiek.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:00.501523018 CET	1.1.1.1	192.168.2.5	0x95e4	Name error (3)	iqsoeecisqgmauqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:00.567925930 CET	1.1.1.1	192.168.2.5	0x95e4	Name error (3)	iqsoeecisqgmauqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:00.813035965 CET	1.1.1.1	192.168.2.5	0x81cf	Name error (3)	yeomyogimecqkkiu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:00.813050985 CET	1.1.1.1	192.168.2.5	0x81cf	Name error (3)	yeomyogimecqkkiu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.032210112 CET	1.1.1.1	192.168.2.5	0x83b8	Name error (3)	uowccagcekcagqcq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.100131989 CET	1.1.1.1	192.168.2.5	0x83b8	Name error (3)	uowccagcekcagqcq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.251703978 CET	1.1.1.1	192.168.2.5	0x471b	Name error (3)	myckiuaukiksguyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.336802959 CET	1.1.1.1	192.168.2.5	0x471b	Name error (3)	myckiuaukiksguyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.476964951 CET	1.1.1.1	192.168.2.5	0xdd2a	Name error (3)	iqsokeqeouccmuwc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.551984072 CET	1.1.1.1	192.168.2.5	0xdd2a	Name error (3)	iqsokeqeouccmuwc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.704139948 CET	1.1.1.1	192.168.2.5	0xb82f	Name error (3)	yqgoeegqeiyqqsiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.774231911 CET	1.1.1.1	192.168.2.5	0xb82f	Name error (3)	yqgoeegqeiyqqsiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:01.929497004 CET	1.1.1.1	192.168.2.5	0x5c57	Name error (3)	iywsuagcuwgimqeo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:02.013396025 CET	1.1.1.1	192.168.2.5	0x5c57	Name error (3)	iywsuagcuwgimqeo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:02.169398069 CET	1.1.1.1	192.168.2.5	0xc33b	Name error (3)	ecammuqkkqyucoai.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:02.238084078 CET	1.1.1.1	192.168.2.5	0xc33b	Name error (3)	ecammuqkkqyucoai.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:02.500591993 CET	1.1.1.1	192.168.2.5	0xcaf2	Name error (3)	ieyeuycgicikgamu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:02.500637054 CET	1.1.1.1	192.168.2.5	0xcaf2	Name error (3)	ieyeuycgicikgamu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:02.728589058 CET	1.1.1.1	192.168.2.5	0xe102	Name error (3)	iyewyuckwykisgck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:02.804647923 CET	1.1.1.1	192.168.2.5	0xe102	Name error (3)	iyewyuckwykisgck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:02.959979057 CET	1.1.1.1	192.168.2.5	0x481f	Name error (3)	mmkakgcagcuccqsk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:03.022929907 CET	1.1.1.1	192.168.2.5	0x481f	Name error (3)	mmkakgcagcuccqsk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:03.183557987 CET	1.1.1.1	192.168.2.5	0x4045	Name error (3)	ewieqqiiukcowiwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:03.270380020 CET	1.1.1.1	192.168.2.5	0x4045	Name error (3)	ewieqqiiukcowiwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:03.404488087 CET	1.1.1.1	192.168.2.5	0x980a	Name error (3)	ykqwqkwkiaokmqsg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:03.475786924 CET	1.1.1.1	192.168.2.5	0x980a	Name error (3)	ykqwqkwkiaokmqsg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:03.739320993 CET	1.1.1.1	192.168.2.5	0xb967	Name error (3)	wmaqkcccaqgacsck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:03.739444017 CET	1.1.1.1	192.168.2.5	0xb967	Name error (3)	wmaqkcccaqgacsck.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.048630953 CET	1.1.1.1	192.168.2.5	0x743b	Name error (3)	eqekseueimasciym.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.048701048 CET	1.1.1.1	192.168.2.5	0x743b	Name error (3)	eqekseueimasciym.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.277549982 CET	1.1.1.1	192.168.2.5	0xf55a	Name error (3)	ausikyguukygiigc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.338270903 CET	1.1.1.1	192.168.2.5	0xf55a	Name error (3)	ausikyguukygiigc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.500814915 CET	1.1.1.1	192.168.2.5	0x45ca	Name error (3)	aasgkgymuaeqciyw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.567490101 CET	1.1.1.1	192.168.2.5	0x45ca	Name error (3)	aasgkgymuaeqciyw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.720097065 CET	1.1.1.1	192.168.2.5	0x1ee6	Name error (3)	wawmyyockkgegeoe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.785326004 CET	1.1.1.1	192.168.2.5	0x1ee6	Name error (3)	wawmyyockkgegeoe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:04.949007034 CET	1.1.1.1	192.168.2.5	0x7a2a	Name error (3)	ywcgcgyyyqscecqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.024388075 CET	1.1.1.1	192.168.2.5	0x7a2a	Name error (3)	ywcgcgyyyqscecqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.102979898 CET	1.1.1.1	192.168.2.5	0x601f	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:44:05.170315027 CET	1.1.1.1	192.168.2.5	0x6d83	Name error (3)	kuccgkagekoikgmm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.260780096 CET	1.1.1.1	192.168.2.5	0x6d83	Name error (3)	kuccgkagekoikgmm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.280375957 CET	1.1.1.1	192.168.2.5	0x6ddf	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:44:05.391309977 CET	1.1.1.1	192.168.2.5	0x2f4e	Name error (3)	kumigqceckauukog.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.473876953 CET	1.1.1.1	192.168.2.5	0x2f4e	Name error (3)	kumigqceckauukog.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.614447117 CET	1.1.1.1	192.168.2.5	0x1554	Name error (3)	eckkuysaycwcqqku.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.675709009 CET	1.1.1.1	192.168.2.5	0x1554	Name error (3)	eckkuysaycwcqqku.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.845828056 CET	1.1.1.1	192.168.2.5	0xed40	Name error (3)	iyeammagiquggqcm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:05.895785093 CET	1.1.1.1	192.168.2.5	0xed40	Name error (3)	iyeammagiquggqcm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:06.174873114 CET	1.1.1.1	192.168.2.5	0xb0db	Name error (3)	owmikgkucmkwweqq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:06.174916983 CET	1.1.1.1	192.168.2.5	0xb0db	Name error (3)	owmikgkucmkwweqq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:06.406616926 CET	1.1.1.1	192.168.2.5	0xf598	Name error (3)	ykkeioesuamggwwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:06.457794905 CET	1.1.1.1	192.168.2.5	0xf598	Name error (3)	ykkeioesuamggwwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:06.639812946 CET	1.1.1.1	192.168.2.5	0x4231	Name error (3)	eqkkcuekysiksqco.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:06.694998980 CET	1.1.1.1	192.168.2.5	0x4231	Name error (3)	eqkkcuekysiksqco.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:06.867472887 CET	1.1.1.1	192.168.2.5	0x9e31	Name error (3)	kimoecemogwywowc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:06.931468964 CET	1.1.1.1	192.168.2.5	0x9e31	Name error (3)	kimoecemogwywowc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.093512058 CET	1.1.1.1	192.168.2.5	0x370d	Name error (3)	syuauicykgemuiok.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.165149927 CET	1.1.1.1	192.168.2.5	0x370d	Name error (3)	syuauicykgemuiok.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.312793016 CET	1.1.1.1	192.168.2.5	0x2a42	Name error (3)	iecgcgwccmuowsea.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.397371054 CET	1.1.1.1	192.168.2.5	0x2a42	Name error (3)	iecgcgwccmuowsea.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.540427923 CET	1.1.1.1	192.168.2.5	0xa7be	Name error (3)	ggcqakgyieemkmuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.601342916 CET	1.1.1.1	192.168.2.5	0xa7be	Name error (3)	ggcqakgyieemkmuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.764717102 CET	1.1.1.1	192.168.2.5	0xcbc0	Name error (3)	aieuacwguymakoes.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.835202932 CET	1.1.1.1	192.168.2.5	0xcbc0	Name error (3)	aieuacwguymakoes.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:07.984241962 CET	1.1.1.1	192.168.2.5	0xa840	Name error (3)	ggwimysceeqqgiyu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.066207886 CET	1.1.1.1	192.168.2.5	0xa840	Name error (3)	ggwimysceeqqgiyu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.202857971 CET	1.1.1.1	192.168.2.5	0x6ffc	Name error (3)	wsiawkaagcyucsac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.283596039 CET	1.1.1.1	192.168.2.5	0x6ffc	Name error (3)	wsiawkaagcyucsac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.424316883 CET	1.1.1.1	192.168.2.5	0x75cb	Name error (3)	iycyikamuooaacma.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.504528999 CET	1.1.1.1	192.168.2.5	0x75cb	Name error (3)	iycyikamuooaacma.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.651756048 CET	1.1.1.1	192.168.2.5	0x9c34	Name error (3)	mykuowgamqeskuki.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.708466053 CET	1.1.1.1	192.168.2.5	0x9c34	Name error (3)	mykuowgamqeskuki.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.987654924 CET	1.1.1.1	192.168.2.5	0x2400	Name error (3)	skagyeaoseoukumo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:08.987776995 CET	1.1.1.1	192.168.2.5	0x2400	Name error (3)	skagyeaoseoukumo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:09.208889961 CET	1.1.1.1	192.168.2.5	0x40a4	Name error (3)	eiqkweimkgoomugk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:09.269902945 CET	1.1.1.1	192.168.2.5	0x40a4	Name error (3)	eiqkweimkgoomugk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:09.432917118 CET	1.1.1.1	192.168.2.5	0x2871	Name error (3)	uiommoyoeogiawye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:09.504257917 CET	1.1.1.1	192.168.2.5	0x2871	Name error (3)	uiommoyoeogiawye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:09.655889988 CET	1.1.1.1	192.168.2.5	0x54e6	Name error (3)	gueimqgaakkuakms.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:09.725187063 CET	1.1.1.1	192.168.2.5	0x54e6	Name error (3)	gueimqgaakkuakms.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:09.877620935 CET	1.1.1.1	192.168.2.5	0x6fa4	Name error (3)	kowqayugiigekmmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:09.941556931 CET	1.1.1.1	192.168.2.5	0x6fa4	Name error (3)	kowqayugiigekmmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.096801043 CET	1.1.1.1	192.168.2.5	0x493c	Name error (3)	csiymeqcoikqsaow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.161482096 CET	1.1.1.1	192.168.2.5	0x493c	Name error (3)	csiymeqcoikqsaow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.325349092 CET	1.1.1.1	192.168.2.5	0xcf40	Name error (3)	yeueycumkskuescc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.380234957 CET	1.1.1.1	192.168.2.5	0xcf40	Name error (3)	yeueycumkskuescc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.550688982 CET	1.1.1.1	192.168.2.5	0xf0b1	Name error (3)	mmigqysqmokkemay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.617798090 CET	1.1.1.1	192.168.2.5	0xf0b1	Name error (3)	mmigqysqmokkemay.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.773520947 CET	1.1.1.1	192.168.2.5	0x925e	Name error (3)	mmqosscscmqcuacg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:10.848972082 CET	1.1.1.1	192.168.2.5	0x925e	Name error (3)	mmqosscscmqcuacg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.105571985 CET	1.1.1.1	192.168.2.5	0xd665	Name error (3)	kisiusqmiiqcuyia.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.105614901 CET	1.1.1.1	192.168.2.5	0xd665	Name error (3)	kisiusqmiiqcuyia.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.325270891 CET	1.1.1.1	192.168.2.5	0xdc69	Name error (3)	mskouqiwuueeyssa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.395159960 CET	1.1.1.1	192.168.2.5	0xdc69	Name error (3)	mskouqiwuueeyssa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.547652960 CET	1.1.1.1	192.168.2.5	0x8a02	Name error (3)	okmiqsaegoymiski.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.615520000 CET	1.1.1.1	192.168.2.5	0x8a02	Name error (3)	okmiqsaegoymiski.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.767657042 CET	1.1.1.1	192.168.2.5	0xe221	Name error (3)	yqwywskqqakoiwcy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.833372116 CET	1.1.1.1	192.168.2.5	0xe221	Name error (3)	yqwywskqqakoiwcy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:11.989883900 CET	1.1.1.1	192.168.2.5	0xf4be	Name error (3)	kuoqkakokweawekm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:12.051582098 CET	1.1.1.1	192.168.2.5	0xf4be	Name error (3)	kuoqkakokweawekm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:12.303059101 CET	1.1.1.1	192.168.2.5	0x647	Name error (3)	mgycommyaaqeqmkm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:12.303131104 CET	1.1.1.1	192.168.2.5	0x647	Name error (3)	mgycommyaaqeqmkm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:12.633346081 CET	1.1.1.1	192.168.2.5	0x4bdd	Name error (3)	ocewmkymckokmugk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:12.633388996 CET	1.1.1.1	192.168.2.5	0x4bdd	Name error (3)	ocewmkymckokmugk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:12.967257977 CET	1.1.1.1	192.168.2.5	0x81ac	Name error (3)	wsgeqoowqmqmcyye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:12.967279911 CET	1.1.1.1	192.168.2.5	0x81ac	Name error (3)	wsgeqoowqmqmcyye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:13.299386024 CET	1.1.1.1	192.168.2.5	0xc929	Name error (3)	skecqquggosqicqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:13.299429893 CET	1.1.1.1	192.168.2.5	0xc929	Name error (3)	skecqquggosqicqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:13.522628069 CET	1.1.1.1	192.168.2.5	0x4f8e	Name error (3)	sekowasmqguwsuyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:13.581482887 CET	1.1.1.1	192.168.2.5	0x4f8e	Name error (3)	sekowasmqguwsuyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:13.744987965 CET	1.1.1.1	192.168.2.5	0x6d4	Name error (3)	kcwwsqiwqggiwcyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:13.821427107 CET	1.1.1.1	192.168.2.5	0x6d4	Name error (3)	kcwwsqiwqggiwcyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:13.967116117 CET	1.1.1.1	192.168.2.5	0x6f26	Name error (3)	owwysogioycmsuai.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.054208040 CET	1.1.1.1	192.168.2.5	0x6f26	Name error (3)	owwysogioycmsuai.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.188976049 CET	1.1.1.1	192.168.2.5	0xb6b1	Name error (3)	oqyqscyykseqyqow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.269340992 CET	1.1.1.1	192.168.2.5	0xb6b1	Name error (3)	oqyqscyykseqyqow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.411451101 CET	1.1.1.1	192.168.2.5	0xdddf	Name error (3)	sseeykkocmqieyyg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.472371101 CET	1.1.1.1	192.168.2.5	0xdddf	Name error (3)	sseeykkocmqieyyg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.647203922 CET	1.1.1.1	192.168.2.5	0x62e1	Name error (3)	qusgcyswiemkqqqa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.709800959 CET	1.1.1.1	192.168.2.5	0x62e1	Name error (3)	qusgcyswiemkqqqa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.870583057 CET	1.1.1.1	192.168.2.5	0xd584	Name error (3)	oqguiqcckakicqkc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:14.957771063 CET	1.1.1.1	192.168.2.5	0xd584	Name error (3)	oqguiqcckakicqkc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.096710920 CET	1.1.1.1	192.168.2.5	0x7395	Name error (3)	wguimyqeoyiaumsi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.161216974 CET	1.1.1.1	192.168.2.5	0x7395	Name error (3)	wguimyqeoyiaumsi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.325004101 CET	1.1.1.1	192.168.2.5	0xa22	Name error (3)	yqsesiecouossmmi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.380841970 CET	1.1.1.1	192.168.2.5	0xa22	Name error (3)	yqsesiecouossmmi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.552270889 CET	1.1.1.1	192.168.2.5	0x6bbf	Name error (3)	okmoqgusiuyugieo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.613466978 CET	1.1.1.1	192.168.2.5	0x6bbf	Name error (3)	okmoqgusiuyugieo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.778583050 CET	1.1.1.1	192.168.2.5	0xd012	Name error (3)	ggiqseieggeoyeow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:15.832736015 CET	1.1.1.1	192.168.2.5	0xd012	Name error (3)	ggiqseieggeoyeow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.003773928 CET	1.1.1.1	192.168.2.5	0xd05c	Name error (3)	ceiekqsouoywwoic.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.073625088 CET	1.1.1.1	192.168.2.5	0xd05c	Name error (3)	ceiekqsouoywwoic.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.225703955 CET	1.1.1.1	192.168.2.5	0x1aeb	Name error (3)	guqkcceaoeyoqoyq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.285528898 CET	1.1.1.1	192.168.2.5	0x1aeb	Name error (3)	guqkcceaoeyoqoyq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.444473982 CET	1.1.1.1	192.168.2.5	0x9c9	Name error (3)	ceuyecmmqgeeqemu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.536922932 CET	1.1.1.1	192.168.2.5	0x9c9	Name error (3)	ceuyecmmqgeeqemu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.671168089 CET	1.1.1.1	192.168.2.5	0x80c6	Name error (3)	mysqkauciwceesek.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.752789021 CET	1.1.1.1	192.168.2.5	0x80c6	Name error (3)	mysqkauciwceesek.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.893476963 CET	1.1.1.1	192.168.2.5	0x8f74	Name error (3)	kueqeiimeikkcmuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:16.972836971 CET	1.1.1.1	192.168.2.5	0x8f74	Name error (3)	kueqeiimeikkcmuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:17.117702961 CET	1.1.1.1	192.168.2.5	0x3d44	Name error (3)	aumgsckyakkcgwgc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:17.176446915 CET	1.1.1.1	192.168.2.5	0x3d44	Name error (3)	aumgsckyakkcgwgc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:17.436006069 CET	1.1.1.1	192.168.2.5	0xc28e	Name error (3)	mgeccekkkemcmsco.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:17.439362049 CET	1.1.1.1	192.168.2.5	0xc28e	Name error (3)	mgeccekkkemcmsco.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:17.662241936 CET	1.1.1.1	192.168.2.5	0x7523	Name error (3)	ggqswaiwcwwueaac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:17.722713947 CET	1.1.1.1	192.168.2.5	0x7523	Name error (3)	ggqswaiwcwwueaac.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:17.885965109 CET	1.1.1.1	192.168.2.5	0x4de3	Name error (3)	kiuawkcguuoikmme.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:17.958074093 CET	1.1.1.1	192.168.2.5	0x4de3	Name error (3)	kiuawkcguuoikmme.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:18.107896090 CET	1.1.1.1	192.168.2.5	0xcec3	Name error (3)	kcoaiymskwqcauuw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:18.176224947 CET	1.1.1.1	192.168.2.5	0xcec3	Name error (3)	kcoaiymskwqcauuw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:18.329407930 CET	1.1.1.1	192.168.2.5	0x9532	Name error (3)	ykgggmusocemeskm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:18.398849010 CET	1.1.1.1	192.168.2.5	0x9532	Name error (3)	ykgggmusocemeskm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:18.659126997 CET	1.1.1.1	192.168.2.5	0xda71	Name error (3)	wgysqssusaemskkw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:18.659168005 CET	1.1.1.1	192.168.2.5	0xda71	Name error (3)	wgysqssusaemskkw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:18.887962103 CET	1.1.1.1	192.168.2.5	0x8d72	Name error (3)	oqegwsisauaesaea.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:18.957398891 CET	1.1.1.1	192.168.2.5	0x8d72	Name error (3)	oqegwsisauaesaea.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.109324932 CET	1.1.1.1	192.168.2.5	0xb8b	Name error (3)	owycaegcuiimcukc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.176317930 CET	1.1.1.1	192.168.2.5	0xb8b	Name error (3)	owycaegcuiimcukc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.334007978 CET	1.1.1.1	192.168.2.5	0x8561	Name error (3)	cmuscyakosgukoas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.400163889 CET	1.1.1.1	192.168.2.5	0x8561	Name error (3)	cmuscyakosgukoas.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.558525085 CET	1.1.1.1	192.168.2.5	0xd83f	Name error (3)	yqikuqaioyqqiwmw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.638082981 CET	1.1.1.1	192.168.2.5	0xd83f	Name error (3)	yqikuqaioyqqiwmw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.784341097 CET	1.1.1.1	192.168.2.5	0x9169	Name error (3)	eiwmagmcsgkoooso.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:19.857566118 CET	1.1.1.1	192.168.2.5	0x9169	Name error (3)	eiwmagmcsgkoooso.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.007805109 CET	1.1.1.1	192.168.2.5	0xf729	Name error (3)	cmiewoeeeyosacus.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.074268103 CET	1.1.1.1	192.168.2.5	0xf729	Name error (3)	cmiewoeeeyosacus.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.228948116 CET	1.1.1.1	192.168.2.5	0x381	Name error (3)	ceoyuaakgoseaykc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.316453934 CET	1.1.1.1	192.168.2.5	0x381	Name error (3)	ceoyuaakgoseaykc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.449059010 CET	1.1.1.1	192.168.2.5	0xd2ee	Name error (3)	gmuuqgaowsscqocw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.519525051 CET	1.1.1.1	192.168.2.5	0xd2ee	Name error (3)	gmuuqgaowsscqocw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.758968115 CET	1.1.1.1	192.168.2.5	0xc45b	Name error (3)	uoaogmkwgsausoye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.759008884 CET	1.1.1.1	192.168.2.5	0xc45b	Name error (3)	uoaogmkwgsausoye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:20.984771013 CET	1.1.1.1	192.168.2.5	0x9669	Name error (3)	msmswakokwkaaiiu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.050806999 CET	1.1.1.1	192.168.2.5	0x9669	Name error (3)	msmswakokwkaaiiu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.218240023 CET	1.1.1.1	192.168.2.5	0x1c40	Name error (3)	kcagsugwmswmqiuw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.270822048 CET	1.1.1.1	192.168.2.5	0x1c40	Name error (3)	kcagsugwmswmqiuw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.445295095 CET	1.1.1.1	192.168.2.5	0xbe56	Name error (3)	seqeuqomcuuuuaea.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.504666090 CET	1.1.1.1	192.168.2.5	0xbe56	Name error (3)	seqeuqomcuuuuaea.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.670074940 CET	1.1.1.1	192.168.2.5	0xb1ab	Name error (3)	oqcsmsouwkcuyaoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.739167929 CET	1.1.1.1	192.168.2.5	0xb1ab	Name error (3)	oqcsmsouwkcuyaoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.892803907 CET	1.1.1.1	192.168.2.5	0xf6cc	Name error (3)	cmksisquyyqwwmag.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:21.962445021 CET	1.1.1.1	192.168.2.5	0xf6cc	Name error (3)	cmksisquyyqwwmag.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:22.118662119 CET	1.1.1.1	192.168.2.5	0x5c3c	Name error (3)	ucuamgqecgomicgi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:22.197422981 CET	1.1.1.1	192.168.2.5	0x5c3c	Name error (3)	ucuamgqecgomicgi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:22.342850924 CET	1.1.1.1	192.168.2.5	0x9bb6	Name error (3)	ykyisgakyugwseya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:22.415457010 CET	1.1.1.1	192.168.2.5	0x9bb6	Name error (3)	ykyisgakyugwseya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:22.571727037 CET	1.1.1.1	192.168.2.5	0x537	Name error (3)	oqqaakemigkwogcs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:22.646872997 CET	1.1.1.1	192.168.2.5	0x537	Name error (3)	oqqaakemigkwogcs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:22.885482073 CET	1.1.1.1	192.168.2.5	0x467e	Name error (3)	ggusoyqqicokiysm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:22.885524035 CET	1.1.1.1	192.168.2.5	0x467e	Name error (3)	ggusoyqqicokiysm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.111459017 CET	1.1.1.1	192.168.2.5	0x77	Name error (3)	aikuqasyeiugeiio.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.176613092 CET	1.1.1.1	192.168.2.5	0x77	Name error (3)	aikuqasyeiugeiio.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.336024046 CET	1.1.1.1	192.168.2.5	0x491d	Name error (3)	wmoiaeekogscwuew.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.395015001 CET	1.1.1.1	192.168.2.5	0x491d	Name error (3)	wmoiaeekogscwuew.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.562097073 CET	1.1.1.1	192.168.2.5	0x7399	Name error (3)	gmeqccaiocakquuk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.629730940 CET	1.1.1.1	192.168.2.5	0x7399	Name error (3)	gmeqccaiocakquuk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.781827927 CET	1.1.1.1	192.168.2.5	0x6ff1	Name error (3)	yeioouseacmiciyw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:23.848329067 CET	1.1.1.1	192.168.2.5	0x6ff1	Name error (3)	yeioouseacmiciyw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:24.002438068 CET	1.1.1.1	192.168.2.5	0xd52e	Name error (3)	uoiuamiqegoeicgu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:24.074387074 CET	1.1.1.1	192.168.2.5	0xd52e	Name error (3)	uoiuamiqegoeicgu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:24.227844000 CET	1.1.1.1	192.168.2.5	0x1869	Name error (3)	qgugqmcwawgyuama.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:24.330384016 CET	1.1.1.1	192.168.2.5	0x1869	Name error (3)	qgugqmcwawgyuama.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:24.557763100 CET	1.1.1.1	192.168.2.5	0x3a03	Name error (3)	aamskiawwiwwmcak.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:24.557810068 CET	1.1.1.1	192.168.2.5	0x3a03	Name error (3)	aamskiawwiwwmcak.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:24.892832041 CET	1.1.1.1	192.168.2.5	0xfe8c	Name error (3)	yqysmywsumymqwis.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:24.892874002 CET	1.1.1.1	192.168.2.5	0xfe8c	Name error (3)	yqysmywsumymqwis.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:25.119277000 CET	1.1.1.1	192.168.2.5	0xb2b2	Name error (3)	eqeuykyqmakycswk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:25.182305098 CET	1.1.1.1	192.168.2.5	0xb2b2	Name error (3)	eqeuykyqmakycswk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:25.453933001 CET	1.1.1.1	192.168.2.5	0x2f5e	Name error (3)	wmiiaeyooekwqkya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:25.453975916 CET	1.1.1.1	192.168.2.5	0x2f5e	Name error (3)	wmiiaeyooekwqkya.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:25.766323090 CET	1.1.1.1	192.168.2.5	0xc7b3	Name error (3)	gaiaysiwkgqouusw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:25.766366005 CET	1.1.1.1	192.168.2.5	0xc7b3	Name error (3)	gaiaysiwkgqouusw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:25.993365049 CET	1.1.1.1	192.168.2.5	0x2ee1	Name error (3)	ssmwweeyqaumqisg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:26.068795919 CET	1.1.1.1	192.168.2.5	0x2ee1	Name error (3)	ssmwweeyqaumqisg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:26.217694044 CET	1.1.1.1	192.168.2.5	0x2c36	Name error (3)	ucmkykimauqkwcme.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:26.301867962 CET	1.1.1.1	192.168.2.5	0x2c36	Name error (3)	ucmkykimauqkwcme.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:26.532805920 CET	1.1.1.1	192.168.2.5	0x5453	Name error (3)	ieimsimsawwoiook.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:26.532847881 CET	1.1.1.1	192.168.2.5	0x5453	Name error (3)	ieimsimsawwoiook.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:26.753937960 CET	1.1.1.1	192.168.2.5	0xa96	Name error (3)	aoicciqqqeqggowe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:26.817215919 CET	1.1.1.1	192.168.2.5	0xa96	Name error (3)	aoicciqqqeqggowe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:26.980987072 CET	1.1.1.1	192.168.2.5	0x4b2d	Name error (3)	ggciqwsioiqeoqew.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:27.036210060 CET	1.1.1.1	192.168.2.5	0x4b2d	Name error (3)	ggciqwsioiqeoqew.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:27.313571930 CET	1.1.1.1	192.168.2.5	0x3a93	Name error (3)	cmqwyscguecgggwu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:27.313613892 CET	1.1.1.1	192.168.2.5	0x3a93	Name error (3)	cmqwyscguecgggwu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:27.537111044 CET	1.1.1.1	192.168.2.5	0x10d6	Name error (3)	owecemciwkscukqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:27.598227024 CET	1.1.1.1	192.168.2.5	0x10d6	Name error (3)	owecemciwkscukqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:27.763797045 CET	1.1.1.1	192.168.2.5	0x2d44	Name error (3)	kuioiqqeicsiukgs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:27.833579063 CET	1.1.1.1	192.168.2.5	0x2d44	Name error (3)	kuioiqqeicsiukgs.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:27.989595890 CET	1.1.1.1	192.168.2.5	0x56eb	Name error (3)	uwokcqusmagemywa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:28.067286015 CET	1.1.1.1	192.168.2.5	0x56eb	Name error (3)	uwokcqusmagemywa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:28.214792013 CET	1.1.1.1	192.168.2.5	0xba02	Name error (3)	uomsosocoaqawqsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:28.286055088 CET	1.1.1.1	192.168.2.5	0xba02	Name error (3)	uomsosocoaqawqsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:28.527415037 CET	1.1.1.1	192.168.2.5	0x835a	Name error (3)	uockoamcmumauqgi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:28.527456999 CET	1.1.1.1	192.168.2.5	0x835a	Name error (3)	uockoamcmumauqgi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:28.843552113 CET	1.1.1.1	192.168.2.5	0xcf75	Name error (3)	iqcscikcwkmmakwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:28.843594074 CET	1.1.1.1	192.168.2.5	0xcf75	Name error (3)	iqcscikcwkmmakwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:29.069230080 CET	1.1.1.1	192.168.2.5	0x604b	Name error (3)	ikkoukqciouowoeo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:29.132141113 CET	1.1.1.1	192.168.2.5	0x604b	Name error (3)	ikkoukqciouowoeo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:29.290941000 CET	1.1.1.1	192.168.2.5	0xb28c	Name error (3)	iygqaacuocyieiqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:29.363889933 CET	1.1.1.1	192.168.2.5	0xb28c	Name error (3)	iygqaacuocyieiqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:29.518146038 CET	1.1.1.1	192.168.2.5	0xff59	Name error (3)	ecskgwqmkqqkqaia.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:29.582819939 CET	1.1.1.1	192.168.2.5	0xff59	Name error (3)	ecskgwqmkqqkqaia.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:29.740689993 CET	1.1.1.1	192.168.2.5	0xb579	Name error (3)	wgkuucmewiweyqmg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:29.805326939 CET	1.1.1.1	192.168.2.5	0xb579	Name error (3)	wgkuucmewiweyqmg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.072076082 CET	1.1.1.1	192.168.2.5	0x363d	Name error (3)	eqowmcmwisyomyai.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.072134972 CET	1.1.1.1	192.168.2.5	0x363d	Name error (3)	eqowmcmwisyomyai.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.293232918 CET	1.1.1.1	192.168.2.5	0xca8b	Name error (3)	ieemukassiigqqam.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.380002975 CET	1.1.1.1	192.168.2.5	0xca8b	Name error (3)	ieemukassiigqqam.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.514153004 CET	1.1.1.1	192.168.2.5	0x7c72	Name error (3)	gamewcewqkqaywuu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.582650900 CET	1.1.1.1	192.168.2.5	0x7c72	Name error (3)	gamewcewqkqaywuu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.737025023 CET	1.1.1.1	192.168.2.5	0x5ad6	Name error (3)	kimqkmqyeyakkgwu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.802212954 CET	1.1.1.1	192.168.2.5	0x5ad6	Name error (3)	kimqkmqyeyakkgwu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:30.960443020 CET	1.1.1.1	192.168.2.5	0x462b	Name error (3)	auiceuyaksiyscwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.042268991 CET	1.1.1.1	192.168.2.5	0x462b	Name error (3)	auiceuyaksiyscwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.185796022 CET	1.1.1.1	192.168.2.5	0x119d	Name error (3)	waukkceycmkacsww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.270509005 CET	1.1.1.1	192.168.2.5	0x119d	Name error (3)	waukkceycmkacsww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.411216021 CET	1.1.1.1	192.168.2.5	0xb8d8	Name error (3)	ikkyoeigmaeogagg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.473927975 CET	1.1.1.1	192.168.2.5	0xb8d8	Name error (3)	ikkyoeigmaeogagg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.632236958 CET	1.1.1.1	192.168.2.5	0x9220	Name error (3)	qggwicocawaskwym.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.692485094 CET	1.1.1.1	192.168.2.5	0x9220	Name error (3)	qggwicocawaskwym.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.853094101 CET	1.1.1.1	192.168.2.5	0xccff	Name error (3)	mgiiackwueekoeao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:31.926969051 CET	1.1.1.1	192.168.2.5	0xccff	Name error (3)	mgiiackwueekoeao.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.072329044 CET	1.1.1.1	192.168.2.5	0xccc1	Name error (3)	myskkueqcumuguai.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.145468950 CET	1.1.1.1	192.168.2.5	0xccc1	Name error (3)	myskkueqcumuguai.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.290793896 CET	1.1.1.1	192.168.2.5	0x5e80	Name error (3)	sksesqgoiqkgueoa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.363672018 CET	1.1.1.1	192.168.2.5	0x5e80	Name error (3)	sksesqgoiqkgueoa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.518362999 CET	1.1.1.1	192.168.2.5	0xffd4	Name error (3)	ywyqmeewycguakww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.582401991 CET	1.1.1.1	192.168.2.5	0xffd4	Name error (3)	ywyqmeewycguakww.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.828186989 CET	1.1.1.1	192.168.2.5	0x3d84	Name error (3)	uiymqmoqyeiiggem.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:32.828260899 CET	1.1.1.1	192.168.2.5	0x3d84	Name error (3)	uiymqmoqyeiiggem.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:33.049820900 CET	1.1.1.1	192.168.2.5	0xeba3	Name error (3)	aikeesqwaummqiky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:33.113549948 CET	1.1.1.1	192.168.2.5	0xeba3	Name error (3)	aikeesqwaummqiky.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:33.382652044 CET	1.1.1.1	192.168.2.5	0xe960	Name error (3)	uiyuisqqokmsagwo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:33.382724047 CET	1.1.1.1	192.168.2.5	0xe960	Name error (3)	uiyuisqqokmsagwo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:33.605648041 CET	1.1.1.1	192.168.2.5	0xe3ef	Name error (3)	csuuwqcekcgekqke.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:33.681839943 CET	1.1.1.1	192.168.2.5	0xe3ef	Name error (3)	csuuwqcekcgekqke.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:33.824589968 CET	1.1.1.1	192.168.2.5	0xe5c3	Name error (3)	ssgquawgywywkgma.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:33.896775007 CET	1.1.1.1	192.168.2.5	0xe5c3	Name error (3)	ssgquawgywywkgma.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:34.159753084 CET	1.1.1.1	192.168.2.5	0xf38f	Name error (3)	ucyqoqgesaqmqwgc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:34.159797907 CET	1.1.1.1	192.168.2.5	0xf38f	Name error (3)	ucyqoqgesaqmqwgc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:34.382086992 CET	1.1.1.1	192.168.2.5	0x63c6	Name error (3)	mmosecuciioycquy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:34.442384958 CET	1.1.1.1	192.168.2.5	0x63c6	Name error (3)	mmosecuciioycquy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:34.606762886 CET	1.1.1.1	192.168.2.5	0xb8d6	Name error (3)	ewwsmckwiyiiseaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:34.677413940 CET	1.1.1.1	192.168.2.5	0xb8d6	Name error (3)	ewwsmckwiyiiseaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:34.917507887 CET	1.1.1.1	192.168.2.5	0x55b9	Name error (3)	koikucwciykcwqms.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:34.917579889 CET	1.1.1.1	192.168.2.5	0x55b9	Name error (3)	koikucwciykcwqms.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:35.138292074 CET	1.1.1.1	192.168.2.5	0x29e1	Name error (3)	okwwqyssguiiiuyq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:35.207642078 CET	1.1.1.1	192.168.2.5	0x29e1	Name error (3)	okwwqyssguiiiuyq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:35.363434076 CET	1.1.1.1	192.168.2.5	0xf261	Name error (3)	kowkuoagommaeueg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:35.443983078 CET	1.1.1.1	192.168.2.5	0xf261	Name error (3)	kowkuoagommaeueg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:35.584835052 CET	1.1.1.1	192.168.2.5	0x2f14	Name error (3)	kuccieoyswosqasm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:35.661187887 CET	1.1.1.1	192.168.2.5	0x2f14	Name error (3)	kuccieoyswosqasm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:35.913573027 CET	1.1.1.1	192.168.2.5	0x1e8f	Name error (3)	kcseqmeyuaomsmeg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:35.913613081 CET	1.1.1.1	192.168.2.5	0x1e8f	Name error (3)	kcseqmeyuaomsmeg.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.142329931 CET	1.1.1.1	192.168.2.5	0xcf45	Name error (3)	aaemgmsewqoiomua.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.208481073 CET	1.1.1.1	192.168.2.5	0xcf45	Name error (3)	aaemgmsewqoiomua.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.375008106 CET	1.1.1.1	192.168.2.5	0x4367	Name error (3)	uogkwkgwukicwgcu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.450465918 CET	1.1.1.1	192.168.2.5	0x4367	Name error (3)	uogkwkgwukicwgcu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.596549988 CET	1.1.1.1	192.168.2.5	0x343f	Name error (3)	skwmeoeewcgwoeam.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.683774948 CET	1.1.1.1	192.168.2.5	0x343f	Name error (3)	skwmeoeewcgwoeam.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.821707964 CET	1.1.1.1	192.168.2.5	0x17be	Name error (3)	mscciwmgquasayuw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:36.897140980 CET	1.1.1.1	192.168.2.5	0x17be	Name error (3)	mscciwmgquasayuw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:37.041812897 CET	1.1.1.1	192.168.2.5	0x9dc9	Name error (3)	kcaqqqiyigkuuoiu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:37.113274097 CET	1.1.1.1	192.168.2.5	0x9dc9	Name error (3)	kcaqqqiyigkuuoiu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:37.260863066 CET	1.1.1.1	192.168.2.5	0xb001	Name error (3)	owaeqqogcksoyges.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:37.348702908 CET	1.1.1.1	192.168.2.5	0xb001	Name error (3)	owaeqqogcksoyges.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:37.573312044 CET	1.1.1.1	192.168.2.5	0xacf8	Name error (3)	ieqkyomwwkkisoiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:37.573328972 CET	1.1.1.1	192.168.2.5	0xacf8	Name error (3)	ieqkyomwwkkisoiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:37.801913977 CET	1.1.1.1	192.168.2.5	0xd2b0	Name error (3)	iyqsawyqkmesuqei.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:37.864475965 CET	1.1.1.1	192.168.2.5	0xd2b0	Name error (3)	iyqsawyqkmesuqei.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:38.029944897 CET	1.1.1.1	192.168.2.5	0x77b4	Name error (3)	quccqcoyikcgcmsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:38.083468914 CET	1.1.1.1	192.168.2.5	0x77b4	Name error (3)	quccqcoyikcgcmsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:38.250551939 CET	1.1.1.1	192.168.2.5	0xa190	Name error (3)	kiwaggoqgowsiiqa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:38.318330050 CET	1.1.1.1	192.168.2.5	0xa190	Name error (3)	kiwaggoqgowsiiqa.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:38.477806091 CET	1.1.1.1	192.168.2.5	0x3d86	Name error (3)	quwswgwawyoyugcu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:38.535650015 CET	1.1.1.1	192.168.2.5	0x3d86	Name error (3)	quwswgwawyoyugcu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:38.811750889 CET	1.1.1.1	192.168.2.5	0xd6a0	Name error (3)	owqaywkieskcqcuc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:38.811825037 CET	1.1.1.1	192.168.2.5	0xd6a0	Name error (3)	owqaywkieskcqcuc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:39.122525930 CET	1.1.1.1	192.168.2.5	0xd2fd	Name error (3)	kccqgowccsimioee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:39.122653961 CET	1.1.1.1	192.168.2.5	0xd2fd	Name error (3)	kccqgowccsimioee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:39.343561888 CET	1.1.1.1	192.168.2.5	0x85e	Name error (3)	eeggwwsowsigeuqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:39.426294088 CET	1.1.1.1	192.168.2.5	0x85e	Name error (3)	eeggwwsowsigeuqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:39.563450098 CET	1.1.1.1	192.168.2.5	0xbee5	Name error (3)	uqakyaekiwsqsuga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:39.646184921 CET	1.1.1.1	192.168.2.5	0xbee5	Name error (3)	uqakyaekiwsqsuga.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:39.782985926 CET	1.1.1.1	192.168.2.5	0x2566	Name error (3)	susgymkqieewckye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:39.848138094 CET	1.1.1.1	192.168.2.5	0x2566	Name error (3)	susgymkqieewckye.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:40.004703045 CET	1.1.1.1	192.168.2.5	0x6487	Name error (3)	kwogewsyemkeeamk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:40.067111969 CET	1.1.1.1	192.168.2.5	0x6487	Name error (3)	kwogewsyemkeeamk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:40.319896936 CET	1.1.1.1	192.168.2.5	0x1d4a	Name error (3)	ekwimeeskgocsuui.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:40.319937944 CET	1.1.1.1	192.168.2.5	0x1d4a	Name error (3)	ekwimeeskgocsuui.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:40.633219004 CET	1.1.1.1	192.168.2.5	0xe35f	Name error (3)	isayemkaiyaoqgow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:40.633261919 CET	1.1.1.1	192.168.2.5	0xe35f	Name error (3)	isayemkaiyaoqgow.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:40.971277952 CET	1.1.1.1	192.168.2.5	0x52cf	Name error (3)	ysiaoiaegogyyqcw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:40.971354008 CET	1.1.1.1	192.168.2.5	0x52cf	Name error (3)	ysiaoiaegogyyqcw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:41.189470053 CET	1.1.1.1	192.168.2.5	0x6039	Name error (3)	esocsuqgoagysuia.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:41.259097099 CET	1.1.1.1	192.168.2.5	0x6039	Name error (3)	esocsuqgoagysuia.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:41.409533978 CET	1.1.1.1	192.168.2.5	0x8792	Name error (3)	eegokqscemcyaagw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:41.492976904 CET	1.1.1.1	192.168.2.5	0x8792	Name error (3)	eegokqscemcyaagw.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:41.631074905 CET	1.1.1.1	192.168.2.5	0x1d72	Name error (3)	gcossyeokskomcaq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:41.719513893 CET	1.1.1.1	192.168.2.5	0x1d72	Name error (3)	gcossyeokskomcaq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:41.856698036 CET	1.1.1.1	192.168.2.5	0xd55e	Name error (3)	akikeamwcwugeiak.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:41.930284977 CET	1.1.1.1	192.168.2.5	0xd55e	Name error (3)	akikeamwcwugeiak.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.077919960 CET	1.1.1.1	192.168.2.5	0xa30f	Name error (3)	qwcoyysusgwiykee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.146671057 CET	1.1.1.1	192.168.2.5	0xa30f	Name error (3)	qwcoyysusgwiykee.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.297485113 CET	1.1.1.1	192.168.2.5	0x32f2	Name error (3)	saugqugmmygwauwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.383991957 CET	1.1.1.1	192.168.2.5	0x32f2	Name error (3)	saugqugmmygwauwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.516992092 CET	1.1.1.1	192.168.2.5	0x8bc2	Name error (3)	gcqyckieawwcwugm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.600001097 CET	1.1.1.1	192.168.2.5	0x8bc2	Name error (3)	gcqyckieawwcwugm.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.735697031 CET	1.1.1.1	192.168.2.5	0x62a9	Name error (3)	gicywycaasauoywy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:42.827176094 CET	1.1.1.1	192.168.2.5	0x62a9	Name error (3)	gicywycaasauoywy.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:43.051490068 CET	1.1.1.1	192.168.2.5	0x5f7e	Name error (3)	gwwwscyqswgmauwc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:43.051521063 CET	1.1.1.1	192.168.2.5	0x5f7e	Name error (3)	gwwwscyqswgmauwc.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:43.384195089 CET	1.1.1.1	192.168.2.5	0x5de8	Name error (3)	imwsaieiewcagwig.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:43.384253025 CET	1.1.1.1	192.168.2.5	0x5de8	Name error (3)	imwsaieiewcagwig.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:43.727720976 CET	1.1.1.1	192.168.2.5	0x1a7c	Name error (3)	ekiyiekccgwqaise.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:43.786993980 CET	1.1.1.1	192.168.2.5	0x1a7c	Name error (3)	ekiyiekccgwqaise.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:43.952599049 CET	1.1.1.1	192.168.2.5	0x6980	Name error (3)	gwimwkcogwwimwce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:44.019618034 CET	1.1.1.1	192.168.2.5	0x6980	Name error (3)	gwimwkcogwwimwce.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:44.179373980 CET	1.1.1.1	192.168.2.5	0xb476	Name error (3)	maoykykcuaykkkgi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:44.238043070 CET	1.1.1.1	192.168.2.5	0xb476	Name error (3)	maoykykcuaykkkgi.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:44.509094954 CET	1.1.1.1	192.168.2.5	0x41d3	Name error (3)	yywmwuyumcyqokyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:44.509147882 CET	1.1.1.1	192.168.2.5	0x41d3	Name error (3)	yywmwuyumcyqokyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:44.734181881 CET	1.1.1.1	192.168.2.5	0x2e20	Name error (3)	qimwqcyuqouawmss.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:44.800164938 CET	1.1.1.1	192.168.2.5	0x2e20	Name error (3)	qimwqcyuqouawmss.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:44.959599972 CET	1.1.1.1	192.168.2.5	0x3d2c	Name error (3)	ukwgqsiuowqyawii.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:45.026604891 CET	1.1.1.1	192.168.2.5	0x3d2c	Name error (3)	ukwgqsiuowqyawii.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:45.184927940 CET	1.1.1.1	192.168.2.5	0x3b95	Name error (3)	miysoiiqgyewuceo.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:44:45.257730007 CET	1.1.1.1	192.168.2.5	0x3b95	Name error (3)	miysoiiqgyewuceo.xyz	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.med.unc.edu

https:

clients2.googleusercontent.com

chrome.cloudflare-dns.com

aikmouciiqgecoqi.xyz:443

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49792	166.1.160.237	443	2412	C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe

Timestamp	Bytes transferred	Direction	Data
Dec 12, 2024 12:42:11.607139111 CET	130	OUT	GET /api/client_hello HTTP/1.1 Accept: / Connection: close Host: aikmouciiqgecoqi.xyz:443 User-Agent: cpp-httplib/0.12.1

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49724	152.19.9.32	443	7252	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:42:03 UTC	736	OUT	GET /webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf HTTP/1.1 Host: www.med.unc.edu Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-12-12 11:42:03 UTC	821	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:42:03 GMT Server: nginx X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 4911 Cache-Control: max-age=31622400 Content-Type: application/pdf Expires: Fri, 12 Dec 2025 18:43:41 GMT Strict-Transport-Security: max-age=300 X-Pantheon-Styx-Hostname: styx-fe1-b-677b7fd77f-7xgcw X-Styx-Req-Id: d7771620-b7ef-11ef-a04c-0644842cdc67 Age: 61102 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish, 1.1 varnish, 1.1 varnish X-Served-By: cache-chi-klot8100154-CHI, cache-iad-kiad7000080-IAD, cache-iad-kcgs7200135-IAD, cache-iad-kcgs7200135-IAD X-Cache: MISS, HIT, MISS, MISS X-Cache-Hits: 0, 2246, 0, 0 X-Timer: S1734003724.601936,VS0,VE5 Vary: orig-host Connection: close
2024-12-12 11:42:03 UTC	4911	IN	Data Raw: 25 50 44 46 2d 31 2e 36 0d 25 e2 e3 cf d3 0d 0a 32 34 20 30 20 6f 62 6a 0d 3c 3c 2f 46 69 6c 74 65 72 2f 46 6c 61 74 65 44 65 63 6f 64 65 2f 46 69 72 73 74 20 34 2f 4c 65 6e 67 74 68 20 32 31 36 2f 4e 20 31 2f 54 79 70 65 2f 4f 62 6a 53 74 6d 3e 3e 73 74 72 65 61 6d 0d 0a 68 de 3c 8f 51 4b c3 30 14 85 ff ca 7d 5b 8b d8 de a4 24 3a 19 83 69 14 14 c4 32 c5 bd ec 25 4b 6e 35 98 36 92 26 9b 3f df 56 c5 d7 73 0f df fd ce 12 10 56 ab 7a 93 d3 7b 88 85 a2 4f 1d 53 4f 43 82 d0 c1 43 1e 93 33 04 fb e2 f6 8b 4c 4e ee 48 f0 d4 75 73 34 5d ef fb de bd 45 9d 5c 18 60 4b 47 47 a7 7d 59 d6 37 91 7e 22 a5 13 15 ea 8a 23 4a 6c 50 32 81 b2 69 ce 51 2c 10 17 7f ad e9 df c6 86 03 b5 cf a2 b2 de c3 2b c5 71 86 89 8a 57 bc ac 1f 83 fd 87 30 89 17 4c 30 64 9c b3 33 bc fc 85 b4 Data Ascii: %PDF-1.6%24 0 obj<</Filter/FlateDecode/First 4/Length 216/N 1/Type/ObjStm>>streamh<QK0}[$:i2%Kn56&?VsVz{OSOCC3LNHus4]E\`KGG}Y7~"#JlP2iQ,+qW0L0d3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49741	152.19.9.32	443	7252	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:42:05 UTC	664	OUT	GET /favicon.ico HTTP/1.1 Host: www.med.unc.edu Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-12-12 11:42:05 UTC	399	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:42:05 GMT Server: Apache/2.4.62 (Red Hat Enterprise Linux) OpenSSL/3.2.2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Mon, 15 Jul 2024 16:02:31 GMT Accept-Ranges: bytes Content-Length: 1150 Connection: close Content-Type: image/vnd.microsoft.icon
2024-12-12 11:42:05 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff e1 ff ff ff f0 ff ff ff f0 ff ff ff f0 ff ff ff f0 ff ff ff f0 d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff ff ff ff f0 ff ff ff f0 ff ff ff f0 ff ff ff f0 ff ff ff e1 ff ff ff f4 ff ff ff ff ff ff ff ff ff ff ff ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff ff ff ff ff ff ff ff ff ff ff ff f4 ff ff ff f0 ff ff ff ff ff ff ff ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff d7 ac 7b ff ff ff ff ff ff ff ff f0 ff Data Ascii: h( {{{{{{{{{{{{{{{{{{{{{{{{{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49744	172.217.19.193	443	7252	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:42:06 UTC	594	OUT	GET /crx/blobs/AW50ZFsLPhJJyx_4ShcDOgcEpJeOc7Vr0kMzfFRoaMfWx4pAgZ0UGF2i9_ei1A7FAHQ-EPFULeBn7F8_SEKhjbpEyKfiidX7GF_6BDOycMeg5w03wjwVQ61hkaEix8WFqmEAxlKa5cmz_tdFr9JtRwdqRu82wmLe2Ghe/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_84_1_0.crx HTTP/1.1 Host: clients2.googleusercontent.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-12-12 11:42:07 UTC	566	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 138356 X-GUploader-UploadID: AFiumC4IQxV4q3j7O5WaAop-zN-nbICjYs5JCDxYQQTJdLHwfq1yHey8LncGkDjHls6iyR7xt5E X-Goog-Hash: crc32c=ld9IFg== Server: UploadServer Date: Wed, 11 Dec 2024 16:45:00 GMT Expires: Thu, 11 Dec 2025 16:45:00 GMT Cache-Control: public, max-age=31536000 Age: 68227 Last-Modified: Tue, 19 Nov 2024 16:44:49 GMT ETag: 2373c8b9_cba0b209_e851cacf_d4df989e_81c52a41 Content-Type: application/x-chrome-extension Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-12 11:42:07 UTC	824	IN	Data Raw: 43 72 32 34 03 00 00 00 e0 15 00 00 12 ac 04 0a a6 02 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 9c 5e d1 18 b0 31 22 89 f4 fd 77 8d 67 83 0b 74 fd c3 32 4a 0e 47 31 00 29 58 34 b1 bf 3d 26 90 3f 5b 6a 2c 4c 7a fd d5 6a b0 75 cf 65 5b 49 85 71 2a 42 61 2f 58 dd ee dc 50 c1 68 fc cd 84 4c 04 88 b9 99 dc 32 25 33 5f 6f f4 ae b5 ad 19 0d d4 b8 48 f7 29 27 b9 3d d6 95 65 f8 ac c8 9c 3f 15 e6 ef 1f 08 ab 11 6a e1 a9 c8 33 55 48 fd 7c bf 58 8c 4d 06 e3 97 75 cc c2 9c 73 5b a6 2a f2 ea 3f 24 f3 9c db 8a 05 9f 46 25 11 1d 18 b4 49 08 19 94 80 29 08 f2 2c 2d c0 2f 90 65 35 29 a6 66 83 e7 4f e4 b2 71 14 5e ff 90 92 01 8d d3 bf ca a0 d0 39 a0 08 28 e3 d2 5f d5 70 68 32 fe 10 5e d5 59 42 50 58 66 5f 38 cc 0b 08 Data Ascii: Cr240"0H0^1"wgt2JG1)X4=&?[j,Lzjue[IqBa/XPhL2%3_oH)'=e?j3UH\|XMus[*?$F%I),-/e5)fOq^9(_ph2^YBPXf_8
2024-12-12 11:42:07 UTC	1390	IN	Data Raw: 3a 5f 86 5f 7f f9 35 7d d5 75 53 5c 9b ff 18 eb af ff 78 3f ab fa d7 9f 7e 5d cf 1f 43 2d ff b3 ba 0c 53 3d 4c bf fe f2 f7 5f 63 f1 50 97 42 ea cf d7 8f b0 2d 4d db 10 dc 36 32 b3 69 2a b3 51 d5 e3 f8 c4 ad eb 39 ef e7 ef dc 9c de 2b 53 3d 89 f4 f8 84 0e 2f 36 3a df cf c2 57 83 c8 90 71 6c 2f 67 fd f9 26 6a a9 79 fc f9 7b af ae 22 8b ce b1 9a fe 7c 1c dc 46 fa 1f e7 f8 7c 9c a3 f6 e3 56 f9 f6 f0 f3 99 aa 77 be 25 74 2e 79 86 2e 3f df 17 26 e2 e2 61 cc 9c 7f 3c d2 6e c2 88 c1 89 f6 53 2b 7c d4 17 3d 05 72 61 c7 0a 84 08 01 b1 27 7d f8 28 82 70 57 fb c2 16 8f d0 39 05 d7 73 e5 43 a3 d8 1f 9f 8e ca b9 96 26 6a 4a 9f 2d 27 13 f6 27 13 a8 ca 42 8d 30 f5 75 3f 2e a5 b9 3b 9f f6 e1 a3 34 9d 7f cf f3 e7 d9 c2 b9 f0 d4 c0 ac e6 90 42 86 4e 5c 7c a7 3d 83 9c c3 33 Data Ascii: :__5}uS\x?~]C-S=L_cPB-M62i*Q9+S=/6:Wql/g&jy{"\|F\|Vw%t.y.?&a<nS+\|=ra'}(pW9sC&jJ-''B0u?.;4BN\\|=3
2024-12-12 11:42:07 UTC	1390	IN	Data Raw: 60 65 eb 98 45 ab ec b5 f7 df 38 3e ce 17 36 8b 4c d7 7b 85 4d 64 18 16 65 b0 90 1e f2 cb 03 4c 8a 00 e1 48 79 96 ec 9b 3d f6 a0 d6 80 10 57 0f 10 60 43 7e af 8e 3f 1c b7 7a ee 1d 59 c2 29 1a 94 12 c6 ec 9e 28 ba 47 74 ea a9 92 fb f2 20 bd f4 20 c3 8a 8a 04 03 ec 56 83 d6 68 aa f5 88 d1 39 0a d6 d7 be fa 7f 68 70 d5 e2 31 37 1a 25 03 f1 55 98 2a 4b bd 68 22 81 eb 25 ad 18 84 19 e6 b8 d7 a1 60 b9 67 e1 89 9c f6 e2 ad 52 d0 c5 a6 dc ad e7 9e dc ca 7f d2 3e 77 87 7d e1 a1 a5 e9 a4 17 9a 04 c0 1e 05 42 14 c6 78 22 8b d6 00 1f f3 28 78 31 13 f3 7e 67 01 4e 72 8a 0f 75 ff 71 5f e5 6f 6d cd bd d1 43 0a 76 99 35 be 4a e5 2d 31 6c 3a 02 10 c5 56 13 ea 1e 23 15 1d 58 74 af 43 75 3d f0 13 03 bc 22 a2 fc ca 82 66 b9 ee fd 2e c5 46 f6 b8 53 d7 bc 55 5e 3d b8 46 34 c8 Data Ascii: `eE8>6L{MdeLHy=W`C~?zY)(Gt Vh9hp17%U*Kh"%`gR>w}Bx"(x1~gNruq_omCv5J-1l:V#XtCu="f.FSU^=F4
2024-12-12 11:42:07 UTC	1390	IN	Data Raw: 7d dd cf 6f 71 6a 3c aa 40 7e 15 06 ce 18 81 87 14 8e b0 58 44 27 7a dd 77 ac b1 b7 dc 66 ab cf 89 e9 ce a6 3c ec 05 3f 02 02 d8 27 ea 46 4f 70 bb e1 2d 44 84 4e 09 f6 ed 1b e9 1b c5 3d 68 a6 0c d9 75 0f 3f b1 8e cd 35 f6 95 bf 91 bd 1a 69 d1 42 51 b5 ee b9 e2 ce 89 50 6c 26 16 de 89 5e bc e6 c4 fd 26 da f5 e3 ce 69 10 77 1e cc c8 01 e9 9e 41 6a 55 a0 38 bc ac b1 bf 6b be 7b ba 51 77 aa c0 9b 05 fc b0 44 37 6a e6 e1 c0 0e 78 4a 7b 14 13 4f eb 10 ed ee 3f fb 8d c4 1f af b9 25 7e f2 af cb 87 f0 11 f9 c7 c7 ff c1 df c8 80 4b b7 c6 3f 03 ce 51 66 ae c1 bd e9 35 31 9c a0 54 88 27 0b eb 52 98 2c 14 76 36 e7 d3 53 74 70 f3 94 48 50 51 74 c1 6a 6c c5 02 57 75 bf ea 37 d6 5c 85 75 ff 1a de 92 f6 c3 8e 3c db 2b f4 fc 0a bf 49 4b a8 ce 14 7e 00 ce c6 ac 26 ca 94 9e Data Ascii: }oqj<@~XD'zwf<?'FOp-DN=hu?5iBQPl&^&iwAjU8k{QwD7jxJ{O?%~K?Qf51T'R,v6StpHPQtjlWu7\u<+IK~&
2024-12-12 11:42:07 UTC	1390	IN	Data Raw: ae e7 0e 9d 1f 06 63 15 24 ff cb b8 61 7b a2 4e 58 74 c0 4c 09 86 ba 97 48 e8 03 c4 a9 0f ee 35 65 bd 60 e1 21 a1 18 44 a6 bd 68 e1 33 23 9a dc 91 a1 d2 1c 38 bf d3 98 ca 64 0f d9 ab 56 8f 6d 95 56 f8 a5 e3 ec 3d ef d5 2d b3 5c 3d e6 ff 3a fe 0d 19 c0 60 d4 b8 23 8f b9 88 da a3 ee df 88 f6 ec a7 9c 21 9f 2e 21 cc 81 f2 75 fd ed 12 f6 f3 fe 52 6a 9f db f0 a2 fb e9 a7 81 d4 f7 eb f5 58 53 9e 25 3f f7 32 7e 98 ff 3b 96 ae c7 fe 9f e7 2d df ff f0 9c e5 bf be 3b 4a 9f 4d 99 a9 ba 7f 9d 95 6c 74 8c da b7 42 c7 85 e0 d3 bd e4 8e ca 4d fb 56 f6 ea 5a f6 b6 f6 9f f3 77 e9 37 5f 85 df 9d ff fb bb 96 8e e7 01 8d 3f b9 f3 73 16 f3 d4 7e 18 a7 d6 fb f9 ff 5d c7 97 a1 e3 ee bb 84 8e a9 59 2c 05 d7 fa d6 5e e6 f7 e4 df 87 46 8b e9 f6 55 5f 7f fd e5 af 7f ff d5 d4 85 ac Data Ascii: c$a{NXtLH5e`!Dh3#8dVmV=-\=:`#!.!uRjXS%?2~;-;JMltBMVZw7_?s~]Y,^FU_
2024-12-12 11:42:07 UTC	1390	IN	Data Raw: c2 43 a0 f0 9c cf 84 2c dc 6f 77 dd ff 5e 04 27 23 01 db 3b d0 22 fa fd ca c2 00 94 91 17 e4 5e bb e4 28 b3 f2 09 87 4b 75 14 8e e0 c2 6f 3a 13 0a 28 96 4a ee 0a 6a 2c 09 f3 2c c2 e9 23 6a 8c ec 09 a0 e8 96 87 84 d2 68 a5 cd ca f5 ec 0a 46 60 f9 be 7b e8 5e a6 f5 2e a5 46 6e c8 a6 db bc 01 50 4b 07 08 1d fb 12 3a a0 00 00 00 23 01 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 19 00 2d 00 5f 6c 6f 63 61 6c 65 73 2f 72 6f 2f 6d 65 73 73 61 67 65 73 2e 6a 73 6f 6e 55 54 05 00 01 ca 36 2a 67 0a 00 20 00 00 00 00 00 01 00 18 00 00 41 64 ae 95 2f db 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8d 52 c1 4e 1c 31 0c bd f3 15 d6 9c 8a 34 a0 65 7b 82 1b 82 55 4f 85 aa 2d 97 aa 17 6f c6 b3 58 ca 38 51 e2 00 5a c4 bf e3 99 Data Ascii: C,ow^'#;"^(Kuo:(Jj,,#jhF`{^.FnPK:#PK!-_locales/ro/messages.jsonUT6*g Ad/RN14e{UO-oX8QZ
2024-12-12 11:42:07 UTC	1390	IN	Data Raw: 0f 6e 3d 2c 91 9f b7 f2 c2 8f 9e 81 ed 64 91 89 5f c8 93 db ec d7 38 3e f4 ec 97 19 5a 11 ad f3 b8 82 28 3a 6c b3 ee 24 e1 50 fb 79 09 cf f1 ad 57 e9 76 70 aa 85 35 32 aa 0a 0f 41 0d 1c 63 cf 15 51 0d 8c 44 97 9c 43 b8 94 04 8f 60 5f 09 e2 4b c0 6e a2 3a 29 12 e1 86 4f 49 97 b9 92 11 e2 5a d6 16 fc 60 20 03 a5 d7 f5 68 06 5f 65 93 9a dd ad 65 97 51 8b ac 05 b4 69 a5 64 30 17 f8 1c 4a 1d 10 6c a0 02 36 20 1b 29 c2 cd 6a e6 f5 e9 55 66 60 81 a8 0e 0c 0c 22 4a e0 41 05 8c 7f 9c 57 46 cf 54 ff 32 7c 7d 9b 6e 4b 1e be a1 2b 8b 2c ea 96 fa 5c 18 5d 04 b1 51 7c 89 a2 45 6d 3a 0b 61 c3 6f a2 78 04 e6 19 c0 10 c1 b2 2f e8 63 ec 0d 6c f9 20 a0 26 d6 8b ea b0 75 64 be 5d fd c4 70 d9 3b b5 ed d4 f1 bc 8d 4d 4a b4 8e 05 bc 1a 18 57 05 34 4d 40 13 b4 28 e5 ea ff 64 31 Data Ascii: n=,d_8>Z(:l$PyWvp52AcQDC`_Kn:)OIZ` h_eeQid0Jl6 )jUf`"JAWFT2\|}nK+,\]Q\|Em:aox/cl &ud]p;MJW4M@(d1
2024-12-12 11:42:07 UTC	1390	IN	Data Raw: 80 ac 82 c5 04 63 89 63 38 bd 2a 36 1c e9 9a 44 2a 3c 4e 2d ee 92 46 8e 50 dc e3 94 bb f5 61 c2 1d cf 5c 48 24 42 49 6c 12 12 d7 49 d9 ae b5 78 32 3e ee bd 6d 14 36 10 04 42 78 75 49 e8 56 12 9a c0 f8 4e 5b 9e a8 18 48 07 60 fa c4 f3 b8 1c e9 66 42 8d 56 0a 4d 3a 20 57 32 60 3d 87 5b 12 2d 22 e5 44 56 25 e1 21 a6 58 0d e8 46 f5 04 83 06 0e 87 28 fb a4 f0 19 18 b8 02 88 01 7c 80 61 ef 0c 9c e0 24 d3 07 48 c9 09 3f e2 9c 5e e9 89 97 4b 26 3f f6 66 0d 22 cf 03 86 52 31 81 e4 3a 97 fa 54 dc fb b0 49 d9 ef a1 7d 1a 46 e5 77 f4 02 a7 fd a6 7b 35 4f fa 61 2c 0d 6e 07 7a 72 4d 94 18 5d f3 fe 4e 2c 30 9b 6d f6 54 60 d0 58 d4 81 d8 05 43 89 9b 2d 91 75 b1 84 72 e5 82 16 5a a8 d1 8f 71 28 22 a2 ed 69 03 7e 0f 3a 87 3c 26 69 4c 4d 0a 36 d7 c7 a7 16 96 fa 98 fd 47 dc Data Ascii: cc86D<N-FPa\H$BIlIx2>m6BxuIVN[H`fBVM: W2`=[-"DV%!XF(\|a$H?^K&?f"R1:TI}Fw{5Oa,nzrM]N,0mT`XC-urZq("i~:<&iLM6G
2024-12-12 11:42:07 UTC	1390	IN	Data Raw: 92 6f 30 19 61 42 16 3c c5 8e d8 b3 84 2e 10 d8 71 39 f8 5c 22 7b 60 27 ee 3a 3f 1a 26 6a f5 a8 f2 1f 13 ad 85 fc dd 51 24 58 d5 3c 25 19 9d fa 2b 81 d6 c7 4d 37 fd 9a e2 f2 53 ad 5f c1 c9 b9 41 f8 0f 77 84 84 39 d5 5c 7f 74 b0 dd bb 43 ac e6 be ce d5 bf df bb 77 82 1b a6 ff 9c 05 67 3a 77 fe 7a f2 5d 9a 09 4d 66 b5 8d f8 e6 d8 2d cb 4e 6d ee a3 82 48 7b c6 a8 5d b2 e8 52 97 3d e5 a5 b8 ef 36 ad cf 46 de f8 e7 8e 98 46 5f 0f 08 b5 d5 be 41 c5 77 eb e3 54 28 7a 31 07 87 c9 e3 1b f0 13 22 9f 73 e2 40 ce 5e e0 09 2d 54 01 dc 63 06 df 9b 0e c1 43 bf 5c bc 02 50 4b 07 08 c0 47 8a 9f 88 01 00 00 46 03 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 19 00 2d 00 5f 6c 6f 63 61 6c 65 73 2f 6b 6d 2f 6d 65 73 73 61 67 65 73 2e 6a Data Ascii: o0aB<.q9\"{`':?&jQ$X<%+M7S_Aw9\tCwg:wz]Mf-NmH{]R=6FF_AwT(z1"s@^-TcC\PKGFPK!-_locales/km/messages.j
2024-12-12 11:42:07 UTC	1390	IN	Data Raw: 46 69 27 57 e6 ee 9e df fa e6 7c 6c 22 ff dc fc cd 83 bf 84 75 53 df fb 95 fb e0 a6 5b e2 f7 c1 5f 87 cb 78 0d a9 ac a4 0c 68 8e 44 f1 68 52 0e 42 cf 48 31 70 61 e4 4c d1 69 c5 a7 46 2f 04 a6 71 7a 9a be 86 7e 9a df 4a 91 d1 b6 e2 f0 34 96 a4 11 21 a4 4d e9 67 b4 5d b3 aa 52 cd 51 3d 41 bb 66 f2 ab fd 2b c2 fc 18 cf 78 47 7c 50 e9 5f 0e f0 9b c4 43 6a 2a f2 42 35 42 84 04 d7 70 02 ab 0d b5 b1 89 32 98 e2 55 e6 4f d6 3f 1c 81 d7 4f df 01 50 4b 07 08 80 81 20 9b 32 02 00 00 f3 0a 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 19 00 2d 00 5f 6c 6f 63 61 6c 65 73 2f 73 6b 2f 6d 65 73 73 61 67 65 73 2e 6a 73 6f 6e 55 54 05 00 01 ca 36 2a 67 0a 00 20 00 00 00 00 00 01 00 18 00 00 41 64 ae 95 2f db 01 00 00 00 00 00 00 00 00 Data Ascii: Fi'W\|l"uS[_xhDhRBH1paLiF/qz~J4!Mg]RQ=Af+xG\|P_CjB5Bp2UO?OPK 2PK!-_locales/sk/messages.jsonUT6g Ad/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49752	172.64.41.3	443	7252	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:42:06 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-12 11:42:06 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-12-12 11:42:07 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 12 Dec 2024 11:42:07 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f0d72fe6ab2424c-EWR alt-svc: h3=":443"; ma=86400
2024-12-12 11:42:07 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 2b 00 04 8e fa 41 c3 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom+A)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49753	172.64.41.3	443	7252	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:42:06 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-12 11:42:06 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-12-12 11:42:07 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 12 Dec 2024 11:42:07 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f0d72fe6c234288-EWR alt-svc: h3=":443"; ma=86400
2024-12-12 11:42:07 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 29 00 04 8e fb 28 63 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)(c)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49754	162.159.61.3	443	7252	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:42:07 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-12 11:42:07 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-12-12 11:42:07 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 12 Dec 2024 11:42:07 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f0d73001aafc3f8-EWR alt-svc: h3=":443"; ma=86400
2024-12-12 11:42:07 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 1c 00 04 8e fb 28 63 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom(c)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49758	172.64.41.3	443	7252	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:42:07 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-12 11:42:07 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49759	162.159.61.3	443	7252	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:42:07 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-12 11:42:07 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49761	172.64.41.3	443	7252	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:42:07 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-12 11:42:07 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP

Target ID:	0
Start time:	06:41:36
Start date:	12/12/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\33abb.msi"
Imagebase:	0x7ff769e50000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	06:41:36
Start date:	12/12/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\msiexec.exe /V
Imagebase:	0x7ff769e50000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	06:41:37
Start date:	12/12/2024
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\syswow64\MsiExec.exe -Embedding A391672FD02B667B0E8D14AD63D14E05
Imagebase:	0x6a0000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	06:41:37
Start date:	12/12/2024
Path:	C:\Windows\SysWOW64\icacls.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\." /SETINTEGRITYLEVEL (CI)(OI)HIGH
Imagebase:	0xa30000
File size:	29'696 bytes
MD5 hash:	2E49585E4E08565F52090B144062F97E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	06:41:37
Start date:	12/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	06:41:38
Start date:	12/12/2024
Path:	C:\Windows\SysWOW64\expand.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files
Imagebase:	0xe30000
File size:	53'248 bytes
MD5 hash:	544B0DBFF3F393BCE8BB9D815F532D51
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	06:41:38
Start date:	12/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	06:41:55
Start date:	12/12/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\cmd.exe" /c start msedge https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	06:41:56
Start date:	12/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	06:41:56
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	06:42:05
Start date:	12/12/2024
Path:	C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\MW-2f3cfedf-4a17-405c-9489-91ce86ad3666\files\setup.exe" /VERYSILENT /VERYSILENT
Imagebase:	0xe30000
File size:	688'541'696 bytes
MD5 hash:	C474153CAFE60A41858493469CB85EDE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	06:41:58
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2100,i,3809971658774042701,17388671140319593064,262144 /prefetch:3
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	06:41:58
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate https://www.med.unc.edu/webguide/wp-content/uploads/sites/419/2019/07/AdobePDF.pdf
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	06:41:59
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2344 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:3
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	21
Start time:	06:42:04
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6916 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:8
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	06:42:04
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=7052 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:8
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	06:42:04
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-GB --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=7204 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:6
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	25
Start time:	06:42:59
Start date:	12/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=4644 --field-trial-handle=2168,i,14445547242834738574,6422972122154203484,262144 /prefetch:8
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	1.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	6.6%
Total number of Nodes:	892
Total number of Limit Nodes:	16

Executed Functions

Function 00F9A126 Relevance: .0, Instructions: 29
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12823348a290a94e40e7895e0dc481b774e5fe684f8344508c8fde0555b0c024
Instruction ID: 23fec5b8a0b5d0a03531146c7ea19508f0c0f9d1d996869ad058824c0b32defa
Opcode Fuzzy Hash: 12823348a290a94e40e7895e0dc481b774e5fe684f8344508c8fde0555b0c024
Instruction Fuzzy Hash: 17F0A932A14324AFDF26DB48C80AB89B3ACEB45B20F115096E101EB251C3B4DE40EBC0

Function 00F97969 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 77
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

ext-ms-, xrefs: 00F979D4
api-ms-, xrefs: 00F979C0

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: api-ms-$ext-ms-
API String ID: 0-537541572
Opcode ID: bfe983c025fb71bbc928ed1091a0069a3751d2baaccfc3082f62ba04d0029a78
Instruction ID: 4ecbeba77e5f17964935de9ec661e1e355868d618d2daf930b8b6f9afcc3115b
Opcode Fuzzy Hash: bfe983c025fb71bbc928ed1091a0069a3751d2baaccfc3082f62ba04d0029a78
Instruction Fuzzy Hash: 9321C672E19315ABFF31AB259C85B1E3755AB017B4F140614EC06B71A0D634EE00B9D0

Function 00E65DD0 Relevance: 9.2, APIs: 6, Instructions: 219
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00F85E4C: QueryPerformanceFrequency.KERNEL32(?,?,?,?,00E65DDC), ref: 00F85E6A

Part of subcall function 00F85E35: QueryPerformanceCounter.KERNEL32(?,?,?,?,00E65DE5), ref: 00F85E3E

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00E66018

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: PerformanceQuery$CounterFrequencyUnothrow_t@std@@@__ehfuncinfo$??2@
String ID:
API String ID: 3326107206-0
Opcode ID: 40e5fb258fc5e3b533219a67339a58d754ceb0c86c700ffcd1256344a5c90d71
Instruction ID: 3d7199a463631064ca93230ead8411385842493d60d7676c503dc432ba79c991
Opcode Fuzzy Hash: 40e5fb258fc5e3b533219a67339a58d754ceb0c86c700ffcd1256344a5c90d71
Instruction Fuzzy Hash: C8615E32B44B504BCB1CED38AC1266BBAD6ABC5784F65C53DE40ADB351F6258C0A87D1

Function 00F8B836 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 51
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNEL32(00000000,00000000,Function_0015B94E,00000000,00000000,00000000), ref: 00F8B87F
GetLastError.KERNEL32(?,?,?,00E65645,00000000,00000000), ref: 00F8B88B
__dosmaperr.LIBCMT ref: 00F8B892

Strings

EV, xrefs: 00F8B8A7

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: CreateErrorLastThread__dosmaperr
String ID: EV
API String ID: 2744730728-3429145217
Opcode ID: 8857d8cc3ef3742a6009e56c35b232ebd65883b717bfdef38ad301ec82128245
Instruction ID: c8564278d6ea3000355b9e142c2636b674f15e92ad8f035eefe5a1cf0f7c1bec
Opcode Fuzzy Hash: 8857d8cc3ef3742a6009e56c35b232ebd65883b717bfdef38ad301ec82128245
Instruction Fuzzy Hash: E3017C7290021AAFDF19BFA0DC06AEE3BA9EF00365F104158F80196190DB74DE51FB90

Function 00F849EA Relevance: 4.6, APIs: 3, Instructions: 93
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00F8569E
IsProcessorFeaturePresent.KERNEL32(00000017), ref: 00F86161
___raise_securityfailure.LIBCMT ref: 00F8621E

Part of subcall function 00F87340: RaiseException.KERNEL32(E06D7363,00000001,00000003,00F86155,A05FDAAB,?,?,?,00F86155,?,00FB302C,?), ref: 00F873A0

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: ExceptionFeaturePresentProcessorRaise___raise_securityfailurestd::invalid_argument::invalid_argument
String ID:
API String ID: 3436172217-0
Opcode ID: b44c03e612b354e38fdd2d41cc1a5f4d5016c683593db3e28768382fac063c94
Instruction ID: 48d51b5f60e00d5755cd73f7138593779f31347ba3af1894cb79d76b068927a1
Opcode Fuzzy Hash: b44c03e612b354e38fdd2d41cc1a5f4d5016c683593db3e28768382fac063c94
Instruction Fuzzy Hash: EA31507490070DABC708FF55FE46E897BA8BB18B10F50416DF814872A1E7B0B685EB85

Function 00E65F5C Relevance: 4.6, APIs: 3, Instructions: 62
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(05265C00,00000000), ref: 00E65E71
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00E65EDA
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00E65F1A
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00E65F6D

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@$Sleep
String ID:
API String ID: 1587848893-0
Opcode ID: 2f684e419a07a305438c1c52bac9b88aee43865a423d72cdc0bfe80b1674fe15
Instruction ID: b3d7cec3230ef8b44b152d63fc0e40a756d737b7ac05fd05f7567f6b4da51188
Opcode Fuzzy Hash: 2f684e419a07a305438c1c52bac9b88aee43865a423d72cdc0bfe80b1674fe15
Instruction Fuzzy Hash: A4110433784E1007CB18B93CAC12B6971D29BD4B80FAA8A3CB146EB392F925AC050750

Function 00E65E30 Relevance: 3.1, APIs: 2, Instructions: 72
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(05265C00,00000000), ref: 00E65E71
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00E65EDA

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: SleepUnothrow_t@std@@@__ehfuncinfo$??2@
String ID:
API String ID: 4141101911-0
Opcode ID: a8804277b1e90bc195a49ef1f4174af7831bf380b1d738a08b6929f22c2451aa
Instruction ID: efdf20015a8944bf353348982ee16f9e2a356edb758a6fe434b087835bc79b4b
Opcode Fuzzy Hash: a8804277b1e90bc195a49ef1f4174af7831bf380b1d738a08b6929f22c2451aa
Instruction Fuzzy Hash: 93115C33744F4047CB18A93C5C5127932D29BD8BA0FB99B3CF526EB2D1FA268C0A4380

Function 00F8B94E Relevance: 3.0, APIs: 2, Instructions: 38
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLastError.KERNEL32(00FB7C80,0000000C), ref: 00F8B961
ExitThread.KERNEL32 ref: 00F8B968

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: ErrorExitLastThread
String ID:
API String ID: 1611280651-0
Opcode ID: 36dd5ba0c4fd988f5dc5047db17791ea7b45755c9cc6a1a9e339a51d34fa275a
Instruction ID: bf34d5be27e745fc47648b8dfb176a2998d9d26c9b3b187f536d0507ebd58637
Opcode Fuzzy Hash: 36dd5ba0c4fd988f5dc5047db17791ea7b45755c9cc6a1a9e339a51d34fa275a
Instruction Fuzzy Hash: 94F04F71A40209AFEF05BFB0CC4AAAE7B75FF45710F140149F415972A2DB789941EFA1

Function 00F97A30 Relevance: 1.6, APIs: 1, Instructions: 57
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46e51ad1e8b45f5c32f0ca51e4d54ddb8fe9039c68cc37e80937b36a21b7395e
Instruction ID: 9d02c1c1ecf63a6e0c058626f56859407321809cb4f8a69c1573294a8cf7b51b
Opcode Fuzzy Hash: 46e51ad1e8b45f5c32f0ca51e4d54ddb8fe9039c68cc37e80937b36a21b7395e
Instruction Fuzzy Hash: 24019633B283155FAF1AAE6DEC4195F3396BB857307244124F604DB5A4EA35D901A790

Function 00F96C91 Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,4D88C033,4D88C033,?,00F9894A,00000220,00F9ECE1,4D88C033,?,?,?,?,00000000,00000000,?,00F9ECE1), ref: 00F96CC3

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: a445e8d12c48f87e005cbf79a1b673fd0e69fa55146c0df6d7331cbdc31ad95e
Instruction ID: 816a8de5caadf68a48455caf6940727e16167b551072a847af5f2f069048154a
Opcode Fuzzy Hash: a445e8d12c48f87e005cbf79a1b673fd0e69fa55146c0df6d7331cbdc31ad95e
Instruction Fuzzy Hash: B9E06D32A002256AFF213BB69D11B9A7649DF857B2F154221BC94EA2D1DB28CC00B6E1

Non-executed Functions

Function 00E6C740 Relevance: 52.6, APIs: 1, Strings: 28, Instructions: 1870COMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(ntdll), ref: 00E6C75D

Strings

R78, xrefs: 00E6E13E
R78, xrefs: 00E6DE15
IU], xrefs: 00E6E6D7
ntdll, xrefs: 00E6C758
C/0C, xrefs: 00E6CEBF
HF>, xrefs: 00E6D9DC
J}H, xrefs: 00E6D1FB
WO, xrefs: 00E6E273
IU], xrefs: 00E6E6D2
(, xrefs: 00E6E5A4
IU], xrefs: 00E6DF62
.text, xrefs: 00E6D9E8
J}H, xrefs: 00E6D7D6
J}H, xrefs: 00E6D1F1
IU], xrefs: 00E6D529
J}H, xrefs: 00E6C914
SE%B, xrefs: 00E6C884
Q78, xrefs: 00E6C848
B/0C, xrefs: 00E6C830
R78, xrefs: 00E6D722
qcP", xrefs: 00E6D05A
SE%B, xrefs: 00E6E725
qcP", xrefs: 00E6CEEB
WO, xrefs: 00E6C9CA
WO, xrefs: 00E6E27D
R78, xrefs: 00E6E143
C/0C, xrefs: 00E6E755
HF>, xrefs: 00E6E101

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: HandleModule
String ID: ($.text$B/0C$C/0C$C/0C$HF>$HF>$IU]$IU]$IU]$IU]$J}H$J}H$J}H$J}H$Q78$R78$R78$R78$R78$SE%B$SE%B$ntdll$qcP"$qcP"$WO$WO$WO
API String ID: 4139908857-2462950815
Opcode ID: 796f218afe8a91b4d0f8ab5d1f509c04594bbc227fa7254604d52413d1305c0c
Instruction ID: 5c66c0b13dfd2f2384bd1392a304f03ff248cf169186b0089fa0c5ea357a1a73
Opcode Fuzzy Hash: 796f218afe8a91b4d0f8ab5d1f509c04594bbc227fa7254604d52413d1305c0c
Instruction Fuzzy Hash: ECE229395983488BCA24EF34E8C057E77D257943B4F28AA27D561AB3E1F73298458F43

Function 00E5F7F0 Relevance: 30.1, APIs: 4, Strings: 13, Instructions: 359COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00E5F855
std::_Lockit::_Lockit.LIBCPMT ref: 00E5F89C
std::_Lockit::~_Lockit.LIBCPMT ref: 00E5F8CF

Strings

Ve", xrefs: 00E5FAEA
Ve", xrefs: 00E5F9B6
Ve", xrefs: 00E5FB8C
F, xrefs: 00E5FA00
F, xrefs: 00E5FB6D
F, xrefs: 00E5FBA7
Ve", xrefs: 00E5FA08
F, xrefs: 00E5F9F7
F, xrefs: 00E5F9C0
F, xrefs: 00E5F9D0
F, xrefs: 00E5FA79
F, xrefs: 00E5FB80
F, xrefs: 00E5FB50

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_$Lockit::~_
String ID: Ve"$Ve"$Ve"$Ve"$F$F$F$F$F$F$F$F$F
API String ID: 1965920666-3427626561
Opcode ID: 256bfce6c099e7e8f388dda0d0cb650ac377de8bfbd8cb5936c40472c7e49df7
Instruction ID: 7ddbcfe24e66492941b64317d64e5b1dd21f32d0a248fb14814c5c5453d29246
Opcode Fuzzy Hash: 256bfce6c099e7e8f388dda0d0cb650ac377de8bfbd8cb5936c40472c7e49df7
Instruction Fuzzy Hash: 40D1F43AA00219CFCB18CF68D4D1AEDB7F6AB98325F295669E8117B3A1D7315C09CF40

Function 00E373A0 Relevance: 18.2, Strings: 14, Instructions: 683COMMON

Download Yara Rule

Strings

@jpk, xrefs: 00E37B4B
?q>, xrefs: 00E37D4A
8u%, xrefs: 00E37C80
@jpk, xrefs: 00E3768B
J], xrefs: 00E37631
a2#, xrefs: 00E37444
b2#, xrefs: 00E37880
8u%, xrefs: 00E37C6C
?q>, xrefs: 00E37534
8u%, xrefs: 00E376D2
b2#, xrefs: 00E375EB
J], xrefs: 00E37B92
8u%, xrefs: 00E376BE
8u%, xrefs: 00E375F7

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: 8u%$8u%$8u%$8u%$8u%$?q>$?q>$@jpk$@jpk$J]$J]$a2#$b2#$b2#
API String ID: 0-4089490577
Opcode ID: cad14389c5ed3ef0c5649762946cd9e2b778a037b28bdca5e093d074a9b33298
Instruction ID: a53bcc4e6b7d9bc34f8e0e84366573fd8fac9b188b9d8c53cb9690c48114d3df
Opcode Fuzzy Hash: cad14389c5ed3ef0c5649762946cd9e2b778a037b28bdca5e093d074a9b33298
Instruction Fuzzy Hash: 7F42A6B57052098F8F2CCF28D4E85BE7FE2AF89314F64521DD857AB7A0C624AC41DB91

Function 00E62B50 Relevance: 14.1, Strings: 11, Instructions: 343COMMON

Download Yara Rule

Strings

9W4y, xrefs: 00E62BCA
ZsN, xrefs: 00E62B94
uNpu, xrefs: 00E62DD4
9W4y, xrefs: 00E62BEB
uNpu, xrefs: 00E62CD8
uNpu, xrefs: 00E62DC8
uNpu, xrefs: 00E62D9D
uNpu, xrefs: 00E62CAF
9W4y, xrefs: 00E62FCE
uNpu, xrefs: 00E62CE4
ZsN, xrefs: 00E62BB2

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: 9W4y$9W4y$9W4y$ZsN$ZsN$uNpu$uNpu$uNpu$uNpu$uNpu$uNpu
API String ID: 0-2308921380
Opcode ID: c93bde7250462b8ab96546835164eedd82ea4c9582bbe515ccdf1b99d4978a0d
Instruction ID: a8a9704b22b07f45a7f46fff9a43e83e6c8459ceaf399f0407498e5132bde81f
Opcode Fuzzy Hash: c93bde7250462b8ab96546835164eedd82ea4c9582bbe515ccdf1b99d4978a0d
Instruction Fuzzy Hash: 79C13775B455198FCF08CE38A8E05FEBBF2AF992A0F28512DD946B7295C7358C05CB90

Function 00E35AF0 Relevance: 13.1, Strings: 10, Instructions: 578COMMON

Download Yara Rule

Strings

(\{, xrefs: 00E35E15
F]05, xrefs: 00E35BD8
[:U?, xrefs: 00E36238
[:U?, xrefs: 00E36242
[:U?, xrefs: 00E35E88
(\{, xrefs: 00E35BA5
G]05, xrefs: 00E35E6E
G]05, xrefs: 00E35B20
G]05, xrefs: 00E35E59
G]05, xrefs: 00E36372

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: (\{$(\{$F]05$G]05$G]05$G]05$G]05$[:U?$[:U?$[:U?
API String ID: 0-193899520
Opcode ID: 7df9e89e347d7d8390b123556b76469002dabe670cdd94548c77149e21168d76
Instruction ID: 0f6e5d149a97446c8642f445f5c63d5dbcbe0d17380abdd7a6846479afbbc345
Opcode Fuzzy Hash: 7df9e89e347d7d8390b123556b76469002dabe670cdd94548c77149e21168d76
Instruction Fuzzy Hash: D42220376047158BCB388E2491D812FBBB2ABC4324F7ADA5ED4593B3A4C2719C45DBC2

Function 00E573B0 Relevance: 11.6, Strings: 9, Instructions: 325COMMON

Download Yara Rule

Strings

boGe, xrefs: 00E57731
%[G^, xrefs: 00E573E9
boGe, xrefs: 00E57569
Rfd, xrefs: 00E574F0
Sfd, xrefs: 00E574FC
Sfd, xrefs: 00E577D8
Sfd, xrefs: 00E5780A
%[G^, xrefs: 00E57618
boGe, xrefs: 00E57508

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: %[G^$%[G^$Rfd$Sfd$Sfd$Sfd$boGe$boGe$boGe
API String ID: 0-85758264
Opcode ID: 0c0ae9bf212a64bda498bac3537d84f4d9d6105f2133401ed34ee79f9d9ce9c7
Instruction ID: 6e09c31cfe2e1db2a27d8b522c607429c66b226f07d0acad585a6f416a93351c
Opcode Fuzzy Hash: 0c0ae9bf212a64bda498bac3537d84f4d9d6105f2133401ed34ee79f9d9ce9c7
Instruction Fuzzy Hash: B3B1F7357081058B8F1C8A38A8E44BE77E39F98365B256759D873AB3F4D6308C5A9B42

Function 00E46100 Relevance: 11.5, Strings: 9, Instructions: 247COMMON

Download Yara Rule

Strings

\wA, xrefs: 00E463A0
]wA, xrefs: 00E46217
\wA, xrefs: 00E461F0
]wA, xrefs: 00E46281
]wA, xrefs: 00E46397
\wA, xrefs: 00E46290
]wA, xrefs: 00E461DB
]wA, xrefs: 00E462B8
]wA, xrefs: 00E463C8

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: \wA$\wA$\wA$]wA$]wA$]wA$]wA$]wA$]wA
API String ID: 0-738632401
Opcode ID: 6738efdbe8f47b700b2917b3d0d4f9af0e2c4d24dff12a9aa9e1ec8fe46ccf50
Instruction ID: 7b848d9f99c8847b317de4c08658945e13ce59c210c790429be966b7d1411dd4
Opcode Fuzzy Hash: 6738efdbe8f47b700b2917b3d0d4f9af0e2c4d24dff12a9aa9e1ec8fe46ccf50
Instruction Fuzzy Hash: 56913339A016198FCF14CFA8E4C06EEB7F1AF8A354F19465AE825A7356C3749C05DF81

Function 00E52460 Relevance: 11.0, Strings: 8, Instructions: 956COMMON

Download Yara Rule

Strings

]+e, xrefs: 00E53380
j;Qu, xrefs: 00E526A8
]+e, xrefs: 00E52C2B
\+e, xrefs: 00E5274E
i;Qu, xrefs: 00E52690
j;Qu, xrefs: 00E52F3F
5jr, xrefs: 00E5290E
5jr, xrefs: 00E52490

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: \+e$]+e$]+e$i;Qu$j;Qu$j;Qu$5jr$5jr
API String ID: 0-2074394632
Opcode ID: 59f32353421b32a4d93bde1918dd17efae5a0f51861ce2b1a0b346b590fc8404
Instruction ID: 7b62d4aa6b43d47fc6bc0c56c6efecbb79d53881747b618f57286f18eb8ec045
Opcode Fuzzy Hash: 59f32353421b32a4d93bde1918dd17efae5a0f51861ce2b1a0b346b590fc8404
Instruction Fuzzy Hash: 85723D373042058B8B28CE28C9D056E77D25BD6365F266E1EED76AB2E0D630DD49CB43

Function 00E565A0 Relevance: 10.5, Strings: 8, Instructions: 504COMMON

Download Yara Rule

Strings

o}:;, xrefs: 00E568CD
vG;,, xrefs: 00E56C94
o}:;, xrefs: 00E567EC
o}:;, xrefs: 00E568D7
uG;,, xrefs: 00E56770
o}:;, xrefs: 00E569AB
vG;,, xrefs: 00E5678A
n}:;, xrefs: 00E5677B

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: n}:;$o}:;$o}:;$o}:;$o}:;$uG;,$vG;,$vG;,
API String ID: 0-458545417
Opcode ID: 26ace7edca3769ff45a7aa96d0aa56cdf2561094857e0420ae4a9ccbacb0b085
Instruction ID: 36aa7076e2acdaf1f21af6179e41c8ef483bc5b560bc8ed54983a911d7a10de8
Opcode Fuzzy Hash: 26ace7edca3769ff45a7aa96d0aa56cdf2561094857e0420ae4a9ccbacb0b085
Instruction Fuzzy Hash: B302E975A04100CBCB28CF2894D446E77E2ABD4335F649E6AEC57EB3E4D671DC498B82

Function 00E55370 Relevance: 9.4, APIs: 2, Strings: 3, Instructions: 628COMMON

Download Yara Rule

Strings

!I_, xrefs: 00E55434
!I_, xrefs: 00E55832
!I_, xrefs: 00E55BC9

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: !I_$!I_$!I_
API String ID: 0-3325016455
Opcode ID: b7f8b53a21c94bdf8e52c46261213814cdabb3167942a4781ed14dcbe1e7e723
Instruction ID: aea565865cdd01f447510a037a30cc6048517c2feb2c08868d56d3f41387d429
Opcode Fuzzy Hash: b7f8b53a21c94bdf8e52c46261213814cdabb3167942a4781ed14dcbe1e7e723
Instruction Fuzzy Hash: C83225362047419FCB1C8E2894F453EB3E2EFC4365F645E5EEC1B676A1D634AC489B82

Function 00E59300 Relevance: 9.3, Strings: 7, Instructions: 508COMMON

Download Yara Rule

Strings

ZHD, xrefs: 00E59670
TZ!I, xrefs: 00E597B8
ZHD, xrefs: 00E59609
TZ!I, xrefs: 00E59686
ZHD, xrefs: 00E5973C
TZ!I, xrefs: 00E5989F
ZHD, xrefs: 00E59377

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: TZ!I$TZ!I$TZ!I$ZHD$ZHD$ZHD$ZHD
API String ID: 0-2972758004
Opcode ID: 744a91e02786c891a6154cb060d19327cf16545770b72f027bf264dd31ad5bd2
Instruction ID: 0018360facb1ff0ae8205569e651e953b3a87d02bf080356248354ba3eeb6fe8
Opcode Fuzzy Hash: 744a91e02786c891a6154cb060d19327cf16545770b72f027bf264dd31ad5bd2
Instruction Fuzzy Hash: 4B020439304201CB8B188F3899D05AE77D2AFC5765B245F5EE8279B2E2D731CD49DB42

Function 00E578E0 Relevance: 9.2, Strings: 7, Instructions: 409COMMON

Download Yara Rule

Strings

W%^@, xrefs: 00E57A5A
iA80, xrefs: 00E57CE7
D!b, xrefs: 00E57A08
iA80, xrefs: 00E57AB0
iA80, xrefs: 00E57C8B
W%^@, xrefs: 00E579E4
D!b, xrefs: 00E57C36

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: W%^@$W%^@$iA80$iA80$iA80$D!b$D!b
API String ID: 0-3554979420
Opcode ID: 335750b14d67cce55ca21142bcc8e2862d0bbc45f2749946811e4a05904e524b
Instruction ID: bab7c91d70296f015a5c15cbd9c80c2290e347eda35d47c56e7e2c21fe05e8b1
Opcode Fuzzy Hash: 335750b14d67cce55ca21142bcc8e2862d0bbc45f2749946811e4a05904e524b
Instruction Fuzzy Hash: 55E1173530C2048FCF1CCA2CA4E467D76D1AFD4315F655E1EE897AB6A0C6229D68CB92

Function 00E321B0 Relevance: 9.1, APIs: 1, Strings: 4, Instructions: 352COMMON

Download Yara Rule

Strings

(w, xrefs: 00E324F4
(w, xrefs: 00E32508
(w, xrefs: 00E32341
(w, xrefs: 00E32358

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: (w$(w$(w$(w
API String ID: 0-2512490830
Opcode ID: 5e6effde1d053e04bfde76d493a8f06f52034afe2cbca0aff87da51f5bec1a92
Instruction ID: a1e3fb423531d1c3de0aa7063af7d036e088c4d91775c3afbf0a9e1bd1ba66ba
Opcode Fuzzy Hash: 5e6effde1d053e04bfde76d493a8f06f52034afe2cbca0aff87da51f5bec1a92
Instruction Fuzzy Hash: 82C11F767007018FCB388E289DD416B7AE27FD8324B65AB1DD5A797790D630E845CF41

Function 00E58F00 Relevance: 9.0, Strings: 7, Instructions: 258COMMON

Download Yara Rule

Strings

E;, xrefs: 00E592B6
E;, xrefs: 00E58FDA
$w_, xrefs: 00E59040
E;, xrefs: 00E58F9B
$w_, xrefs: 00E59072
E;, xrefs: 00E58FC6
#w_, xrefs: 00E58F90

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: E;$E;$E;$E;$#w_$$w_$$w_
API String ID: 0-2198086451
Opcode ID: 4a846e9c991a796537d21874a17bb1d5912d9c6be4d1f2275a5da23382747336
Instruction ID: fee01997f31cf0a5be94978fc6c7b4703a3764f234f66aeb372bd3ba8afefaeb
Opcode Fuzzy Hash: 4a846e9c991a796537d21874a17bb1d5912d9c6be4d1f2275a5da23382747336
Instruction Fuzzy Hash: DE919B39309245CBCB188A3459D056E37D39BC5252F259E2EF8A9A73E9D630CC0EDB53

Function 00E60E90 Relevance: 9.0, APIs: 2, Strings: 3, Instructions: 252COMMON

Download Yara Rule

Strings

8, &, xrefs: 00E60F1C
8, &, xrefs: 00E60EE6
7, &, xrefs: 00E60EF0

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: 7, &$8, &$8, &
API String ID: 0-1421006158
Opcode ID: 82a92787d854e8c3112e01c5eddb3d6ebb76a0fc003bbadf6b39c01fbcffaeab
Instruction ID: 1b105cce9ee9ef2ad3d26a06b917e85f7ed062ac9f00784f044ca28a826b946d
Opcode Fuzzy Hash: 82a92787d854e8c3112e01c5eddb3d6ebb76a0fc003bbadf6b39c01fbcffaeab
Instruction Fuzzy Hash: 98817E3AB451668FCF1C8F3879E11BE77E19F42394F29125AC8167B2E1D6268C098B80

Function 00E39970 Relevance: 8.0, Strings: 6, Instructions: 461COMMONLIBRARYCODE

Download Yara Rule

Strings

Rt>H, xrefs: 00E39DCE
kL}, xrefs: 00E39FE5
Qt>H, xrefs: 00E39BE9
kL}, xrefs: 00E39ED8
Rt>H, xrefs: 00E39B80
kL}, xrefs: 00E39A28

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: Qt>H$Rt>H$Rt>H$kL}$kL}$kL}
API String ID: 0-3550729115
Opcode ID: 6606ca61af4c85097578804140df65b97b748d633ac170d12cd21053c09f360c
Instruction ID: 7325fc6c55aa0f2996cd6bc94beb54867090113c8582b0289e0bdec3ea57606b
Opcode Fuzzy Hash: 6606ca61af4c85097578804140df65b97b748d633ac170d12cd21053c09f360c
Instruction Fuzzy Hash: ABF148397040158F8B18CB3899D85BE7BD2AB94314F38579AD412FB3E2C765DC41EBA2

Function 00E42D30 Relevance: 7.8, Strings: 6, Instructions: 304COMMON

Download Yara Rule

Strings

3f`E, xrefs: 00E42F1C
3f`E, xrefs: 00E42F08
3f`E, xrefs: 00E42E5C
3f`E, xrefs: 00E42E7D
3f`E, xrefs: 00E42E48
3f`E, xrefs: 00E42F3C

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: 3f`E$3f`E$3f`E$3f`E$3f`E$3f`E
API String ID: 0-1712670537
Opcode ID: 28188ec38f14a2bb616fecdb83bd06dd40729f52963590be48b22aec44d2f239
Instruction ID: be652e828c44266eb74c5481c433f88dbcf4c7256649fe9a701928760bce2022
Opcode Fuzzy Hash: 28188ec38f14a2bb616fecdb83bd06dd40729f52963590be48b22aec44d2f239
Instruction Fuzzy Hash: B6B14D2920C34C9F8A199B34B5E017A3AD35FC2314F68D76DD969177E6E2364C06DB82

Function 00E58700 Relevance: 7.7, Strings: 6, Instructions: 249COMMONLIBRARYCODE

Download Yara Rule

Strings

]pAx, xrefs: 00E5871B
@mD, xrefs: 00E58956
]pAx, xrefs: 00E5888E
@mD, xrefs: 00E5880F
@mD, xrefs: 00E588EB
]pAx, xrefs: 00E588D5

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: @mD$@mD$@mD$]pAx$]pAx$]pAx
API String ID: 0-3167829755
Opcode ID: 9735b352d7ad3aa07555e8d93210258d1f68767e885aa7ca47799ed04980363c
Instruction ID: aac602c71f4c536d318d4a4ebb6e384f4a02444e96b62fa538dc61811ee2ed54
Opcode Fuzzy Hash: 9735b352d7ad3aa07555e8d93210258d1f68767e885aa7ca47799ed04980363c
Instruction Fuzzy Hash: 0C8119393056059FCF1C8E2896E457D77D29BC9321B389A1EE817BB2E1DA348C49DF42

Function 00E59B00 Relevance: 7.1, Strings: 5, Instructions: 811COMMON

Download Yara Rule

Strings

gE6;, xrefs: 00E59D1C
hE6;, xrefs: 00E5A1CB
hE6;, xrefs: 00E5A2B1
hE6;, xrefs: 00E59E80
hE6;, xrefs: 00E5A29D

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: gE6;$hE6;$hE6;$hE6;$hE6;
API String ID: 0-1409955804
Opcode ID: 410bf6721760944378a6d645bd1e9d6716041b86563e8e663d32503aad909855
Instruction ID: 41d9da050e6e209e9cb91d68811dead4a6b33add771e21270e234bd2a589c767
Opcode Fuzzy Hash: 410bf6721760944378a6d645bd1e9d6716041b86563e8e663d32503aad909855
Instruction Fuzzy Hash: 4762A075300601CFC728CF28D5D086AB7E2EFC93557289B5DD86B9BBA5D630EC498B02

Function 00E36C20 Relevance: 6.7, Strings: 5, Instructions: 428COMMON

Download Yara Rule

Strings

ZQK, xrefs: 00E36DD6
.pdata, xrefs: 00E36EB3, 00E372AD
ZQK, xrefs: 00E36DD1
.rdata, xrefs: 00E36FA2
ZQK, xrefs: 00E3737A

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: .pdata$.rdata$ZQK$ZQK$ZQK
API String ID: 0-2823215940
Opcode ID: bc5de5f6e0ec8529f5654717aee85787324301e5befae0b1692f98fd514d64e5
Instruction ID: 79773086d0551320525af4e1593ddb7920da568c01cbf83cbafc4672b830b16f
Opcode Fuzzy Hash: bc5de5f6e0ec8529f5654717aee85787324301e5befae0b1692f98fd514d64e5
Instruction Fuzzy Hash: CDE108717082019B8B3C8A38C5DC53ABA92EFD0798F65F51AF496BF760D221DD44DB82

Function 00E31000 Relevance: 5.6, Strings: 4, Instructions: 624COMMON

Download Yara Rule

Strings

T3r, xrefs: 00E3136B
T3r, xrefs: 00E31856
T3r, xrefs: 00E31361
T3r, xrefs: 00E3148E

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: T3r$T3r$T3r$T3r
API String ID: 0-4052342060
Opcode ID: 514626f72519e9271bde981ae0e57a5a5a18edb673433a5280e5f776d78edbbd
Instruction ID: 90ef31516972c1696cffc4faebf36c339526b9177b4362c1729584f904ad4349
Opcode Fuzzy Hash: 514626f72519e9271bde981ae0e57a5a5a18edb673433a5280e5f776d78edbbd
Instruction Fuzzy Hash: A4222D35A052008BCF3C8A2898AC6FE7ED29FD4364F25679EE5177B7A0C6258C45D783

Function 00E3EBA0 Relevance: 5.6, Strings: 4, Instructions: 610COMMON

Download Yara Rule

Strings

;_'], xrefs: 00E3EF35
~NV%, xrefs: 00E3EE3B
;_'], xrefs: 00E3ECEB
:_'], xrefs: 00E3EC37

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: :_']$;_']$;_']$~NV%
API String ID: 0-2518181869
Opcode ID: 2b0f4369156dfdd0747dbc23d8b6d6b4f745ccbf1a80a2ed7c56cdd0d76284b5
Instruction ID: ef832e386f22a0addb8ae64e09f5527b5ccdbe50bee64d1c6973d29d4533ee2b
Opcode Fuzzy Hash: 2b0f4369156dfdd0747dbc23d8b6d6b4f745ccbf1a80a2ed7c56cdd0d76284b5
Instruction Fuzzy Hash: 6232D175B00209CF8B18CF68D8D45AEBBF1AF89314F245569E816FB3A1D635AC42CF91

Function 00F8E34A Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,00000000), ref: 00F8E442
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 00F8E44C
UnhandledExceptionFilter.KERNEL32(00F9E9B9,?,?,?,?,?,00000000), ref: 00F8E459

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 64234a9a16d2147b3702622582306e8bb3faec7b5f89223809a00270bcdc2b10
Instruction ID: 8fceedc818cf83199537df2d50c4cb99ebfed2dfe95673bc97d31301c2778e31
Opcode Fuzzy Hash: 64234a9a16d2147b3702622582306e8bb3faec7b5f89223809a00270bcdc2b10
Instruction Fuzzy Hash: 8931B174D0122C9BCB21EF68DD897CDBBB8BF08710F5042EAE41CA6250EB749B819F44

Function 00F8BB38 Relevance: 4.5, APIs: 3, Instructions: 20COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,00F8BBF0,?,?,?,?), ref: 00F8BB5A
TerminateProcess.KERNEL32(00000000,?,00F8BBF0,?,?,?,?), ref: 00F8BB61
ExitProcess.KERNEL32 ref: 00F8BB73

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: a9f8ce1410bf898c24e4c12957e653119ed1e8c98e2e44edef5eec9728b7b7df
Instruction ID: b97972c6ec59ddc5e35e16bbbf004c783f130da303e70325c36252f174a9a113
Opcode Fuzzy Hash: a9f8ce1410bf898c24e4c12957e653119ed1e8c98e2e44edef5eec9728b7b7df
Instruction Fuzzy Hash: F4E0B671800148AFCF527B65DD499993F69EF85751F004614F80586531CB39ED82EF90

Function 00E3F480 Relevance: 4.4, Strings: 3, Instructions: 619COMMON

Download Yara Rule

Strings

x%"Q, xrefs: 00E3F55C
y%"Q, xrefs: 00E3F532
y%"Q, xrefs: 00E3F86F

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: x%"Q$y%"Q$y%"Q
API String ID: 0-2014898107
Opcode ID: 678f563dca32f8ad6511b3bf39f6865030fc0c0b6c398fdb71b33a46f30f1e44
Instruction ID: 8563359297ea5be6f03063de9a970d53d95bb45e867a4b5642aa8eeac14358b0
Opcode Fuzzy Hash: 678f563dca32f8ad6511b3bf39f6865030fc0c0b6c398fdb71b33a46f30f1e44
Instruction Fuzzy Hash: 9F323C79A012099F8F08CF68D4E49AEBBF2FF8D314B245169E816A73A0D731AC45DF51

Function 00E55DE0 Relevance: 4.2, Strings: 3, Instructions: 499COMMON

Download Yara Rule

Strings

_fbP, xrefs: 00E55FDC
_fbP, xrefs: 00E56020
_fbP, xrefs: 00E56240

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: _fbP$_fbP$_fbP
API String ID: 0-2286847205
Opcode ID: 0c9a0edd13f4b3198e506a32f25772bb7de2d294e6eb855d5c5f255defb50fef
Instruction ID: c06b2d6a7eeac4362558678052af0fa0ef475e3bf2ecc3ce1934714696f44784
Opcode Fuzzy Hash: 0c9a0edd13f4b3198e506a32f25772bb7de2d294e6eb855d5c5f255defb50fef
Instruction Fuzzy Hash: F30259367056018BCB1C8E2895F053DB7D2AFC4715F645E2EF86B576E0DA30ED498B82

Function 00E41300 Relevance: 4.2, Strings: 3, Instructions: 419COMMON

Download Yara Rule

Strings

]wA, xrefs: 00E41778
]wA, xrefs: 00E41739
\wA, xrefs: 00E41750

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: \wA$]wA$]wA
API String ID: 0-1779333493
Opcode ID: cf68cb39a89986cde52a470a68aef322694d661c9b4e47cde3e198339ae84102
Instruction ID: 5fb706e337564ba373a155b11504b2492237e084cc2a9fe21ad0f4adbc43651e
Opcode Fuzzy Hash: cf68cb39a89986cde52a470a68aef322694d661c9b4e47cde3e198339ae84102
Instruction Fuzzy Hash: F1F12576A052158BCF18CF28E8D46EDB7F1AF88364F195699D825BB391C731EC84CB90

Function 00E5D830 Relevance: 3.2, APIs: 2, Instructions: 232COMMON

Download Yara Rule

APIs

std::ios_base::_Ios_base_dtor.LIBCPMT ref: 00E5DB9D

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: Ios_base_dtorstd::ios_base::_
String ID:
API String ID: 323602529-0
Opcode ID: ffa39d25870581dcc4ca7c8e521d880fb1eaedd1e78644a73052d2b78f459c9f
Instruction ID: 553740b82b42f6bf4194091772a20869c0b2d622d761aaa00743c455cae9c48b
Opcode Fuzzy Hash: ffa39d25870581dcc4ca7c8e521d880fb1eaedd1e78644a73052d2b78f459c9f
Instruction Fuzzy Hash: 11813A72A082168FCF2CDF2898D06EEB7E1EB44361F195A15DC16BB2A1D3358D4D8F81

Function 00E533F0 Relevance: 3.0, Strings: 2, Instructions: 471COMMON

Download Yara Rule

Strings

OP, xrefs: 00E53999
OP, xrefs: 00E53500

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: OP$OP
API String ID: 0-315069799
Opcode ID: 0242b75aee20f33761cf1c9466e870441e770e44c759a6edbc86e21d493c97ec
Instruction ID: 9b4c20d1412f92020256c130820e6cc8472f88eb14dc45a2e64e1fa5f04f7e89
Opcode Fuzzy Hash: 0242b75aee20f33761cf1c9466e870441e770e44c759a6edbc86e21d493c97ec
Instruction Fuzzy Hash: D5F148753083099FCB1DAA3890D043E77D19B853A6F246E1DEC625B7B6F6318D49CB82

Function 00E4E9C0 Relevance: 2.7, Strings: 2, Instructions: 206COMMON

Download Yara Rule

Strings

g4-, xrefs: 00E4EAB6
g4-, xrefs: 00E4EBF6

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: g4-$g4-
API String ID: 0-1438324879
Opcode ID: 552664b00b391deab805a42b1a55e921cf277be9553c45ff9535cc6c66d24320
Instruction ID: 301e07539b09f5bd9a1e58496015ba95f4209dded5d3ab97dbcd2ac2b6ff68bc
Opcode Fuzzy Hash: 552664b00b391deab805a42b1a55e921cf277be9553c45ff9535cc6c66d24320
Instruction Fuzzy Hash: 6E613A363046028B8718CE39A9C497A73D7BFC4714B2CDA55E856EB3A2D635CC45FB82

Function 00E43530 Relevance: 1.5, Strings: 1, Instructions: 281COMMON

Download Yara Rule

Strings

iostream stream error, xrefs: 00E4390A

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: iostream stream error
API String ID: 0-3252602735
Opcode ID: 60add682d423af1ac4cce6bedd36f09ef8742232e882081499b2efeadd102209
Instruction ID: 37180339b16c24912e968a69ac40a58fcf963c03312a341777bf5aa097d67fda
Opcode Fuzzy Hash: 60add682d423af1ac4cce6bedd36f09ef8742232e882081499b2efeadd102209
Instruction Fuzzy Hash: E9A1397A704206CFCB18CE38A8D45AA77E2AFD5320B245716E921EB2E1D635DE09DF41

Function 00E545F4 Relevance: .9, Instructions: 911COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f2402ba0441416e3252b8aeec80e9ceb33b8281473ceaa64474aaafbf3b73a0
Instruction ID: f3138b4493e90939427db2e9a04da0c6dc8c4d2cb28243f5ee21e8da4f5e4b14
Opcode Fuzzy Hash: 0f2402ba0441416e3252b8aeec80e9ceb33b8281473ceaa64474aaafbf3b73a0
Instruction Fuzzy Hash: 02724BB6A00215CFCF18CB68A1D06EDB7F2AB89319F2A6955DC157B3E1C6315C89CF90

Function 00E3BC10 Relevance: .8, Instructions: 782COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86ee0ce4011651f4fc6ea1061c7b48cad17711564ec8905d82fb4a518b9f8060
Instruction ID: 290b849d39d82560c0933b6f514cad9b816ad2df6d19bebd577e5b5e8c73d11a
Opcode Fuzzy Hash: 86ee0ce4011651f4fc6ea1061c7b48cad17711564ec8905d82fb4a518b9f8060
Instruction Fuzzy Hash: CF526935A042198BCF148F7899D46EEBBE2AB89354F35A215D812BB3A5D731DC06CF81

Function 00E3FF6E Relevance: .6, Instructions: 631COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a02f5636895a7c2a90f037514eacd7dd70b7b1c5b8ba5d7a2ffdde106f004523
Instruction ID: 779bc6ddc73bebf15979186783c9b351f46e6873b0d45ab38b8f9564e488cd93
Opcode Fuzzy Hash: a02f5636895a7c2a90f037514eacd7dd70b7b1c5b8ba5d7a2ffdde106f004523
Instruction Fuzzy Hash: 473248357082018F8B18CE28A9D446EB7D2AFC5324F349A3EF566E73A5D234DC45DB82

Function 00E43C10 Relevance: .6, Instructions: 620COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a34888df4b2f56c963e89884fa6cf631c475038858709efc75f5a9f1d928c68a
Instruction ID: 1a79e0dcc6c5013849672f5872513d26c01e8d7ade0c872b0a97bf31e0db01d8
Opcode Fuzzy Hash: a34888df4b2f56c963e89884fa6cf631c475038858709efc75f5a9f1d928c68a
Instruction Fuzzy Hash: 7F225B767082059FCB188E387CD066AB7D2AFD5354F389A29F8A5E72E5D231CD05DB02

Function 00E384F0 Relevance: .6, Instructions: 597COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 400cf05531ee20a15a22586657b0774da7c421081ebde7cd9870bc0f474da2fc
Instruction ID: 3b71c2caa3832a2d69e86ad6b07c8f9bacb79b5ef2a53bd1730468f33f52041d
Opcode Fuzzy Hash: 400cf05531ee20a15a22586657b0774da7c421081ebde7cd9870bc0f474da2fc
Instruction Fuzzy Hash: 5D2228367083459BCB1C8E3496E417E7BD29FC4324F69965EF856972A4DB31CC0ACB82

Function 00E53FF0 Relevance: .5, Instructions: 516COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a421d9a73976b2758126f2a727342a0747f1666872c57cb2f854a3036b750416
Instruction ID: bfa0d68781ead7fe7d8815e719aa32c5639090e4ad2c46a3f19299f321cb7f00
Opcode Fuzzy Hash: a421d9a73976b2758126f2a727342a0747f1666872c57cb2f854a3036b750416
Instruction Fuzzy Hash: 4C0258BBA051158FCF18CB38A4902ED77F29B95329F2A1B55DC217B3E1D7318C898B81

Function 00E3A7D0 Relevance: .5, Instructions: 487COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e455fb92e9050e97423b629b878f026361bd1dd6582f25b7e3255f55bf404c9f
Instruction ID: f9240b94d07496c3213c7536421db3a44ac3b8fac564db2ee940018802bcc1a7
Opcode Fuzzy Hash: e455fb92e9050e97423b629b878f026361bd1dd6582f25b7e3255f55bf404c9f
Instruction Fuzzy Hash: 7B02D77AB002189F8F18CB68D5D45BEBBF2AF89310F299265D856773A0C7319C46CF91

Function 00E40970 Relevance: .4, Instructions: 420COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a0a1808feb4b50bb7d859dc3dd0db4ef15ad12c5a9f5125c4d426158e23f981
Instruction ID: a835289e2b5beadeda0e00ee3e74f3ce384ddc04a725721793c36564555ca684
Opcode Fuzzy Hash: 0a0a1808feb4b50bb7d859dc3dd0db4ef15ad12c5a9f5125c4d426158e23f981
Instruction Fuzzy Hash: 59E139767182409FCB188E28B8D057EBBE2AFC5354F285A2DF656E72A1D730DC05DB42

Function 00E4FED0 Relevance: .4, Instructions: 401COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4c4b6172a81be354df1db83f25f3b7976e9cbc425caa516b6579d29ab7fd45ec
Instruction ID: 392c11e298ee8997547ae30c92a18dba12614ec2879a5b0dccb89f1ee559f02d
Opcode Fuzzy Hash: 4c4b6172a81be354df1db83f25f3b7976e9cbc425caa516b6579d29ab7fd45ec
Instruction Fuzzy Hash: F0D116363042019FCB1C8E2498F05BE77D2AFD5355F285A1DFC5B672A2D6218C499B93

Function 00E392E0 Relevance: .3, Instructions: 303COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 372161233a79394a1946c45a238cf3fd3d07c9a9dffb1a22415f86d59b3ed8cb
Instruction ID: c24f1637c82d92eb0dccf239cf0ea79ea863b1f5518c33a2828c6f2161164a17
Opcode Fuzzy Hash: 372161233a79394a1946c45a238cf3fd3d07c9a9dffb1a22415f86d59b3ed8cb
Instruction Fuzzy Hash: 6FC16976E012199FCB18CF68D8D59AEBBF1EB49314F261199E816BB3A1D3705D40CFA0

Function 00E53BA0 Relevance: .3, Instructions: 283COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99c8d47e672da778630ad335ed2eaa0ff4b514c11950c896789c27e84d073d29
Instruction ID: 2fcff9df3c594b354de47e98babffdd5f9fb1f55a633e6b99073fd2c8aef87bc
Opcode Fuzzy Hash: 99c8d47e672da778630ad335ed2eaa0ff4b514c11950c896789c27e84d073d29
Instruction Fuzzy Hash: 83A109367083548F8B18CE3894D046EB7E2DBC8755B259D19EC5AEB364E230DD0EDB92

Function 00E3B3D0 Relevance: .3, Instructions: 274COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a896a135ab18c356c4dfbd4a0cbb5c686b1f6d358611864fe47caed2f44b9bd
Instruction ID: 7d8ac74ff327afc597a53400d6619b672a37f0c9111a51d171708deeab8dbb39
Opcode Fuzzy Hash: 4a896a135ab18c356c4dfbd4a0cbb5c686b1f6d358611864fe47caed2f44b9bd
Instruction Fuzzy Hash: D5A14436F04149CF8F14CA2889D55EEBBE2AF89314F69955AD852FB3A1C731CC06DB90

Function 00E31D20 Relevance: .3, Instructions: 268COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8645641ffb65e357706a9d88ea8b92ec3fd274b630d08462c23d406cac3de0c4
Instruction ID: 876a2e973936777e3f6b38c30cdd091c3b85920b366731a89e820a609fd5f83c
Opcode Fuzzy Hash: 8645641ffb65e357706a9d88ea8b92ec3fd274b630d08462c23d406cac3de0c4
Instruction Fuzzy Hash: F8915A373041018F4E288E2CE5CC16E3AE29BC5365FAB665ED565AB3B0D7349C46DF81

Function 00E57000 Relevance: .2, Instructions: 231COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76024a94ad4e6df46630d1f5ea4d091e026a6e8786481863584057206126c960
Instruction ID: f3d5163ee68799225ce185aa852f9ea2c673ab9525b40a1496dd644ab53dc012
Opcode Fuzzy Hash: 76024a94ad4e6df46630d1f5ea4d091e026a6e8786481863584057206126c960
Instruction Fuzzy Hash: 1D714D3531E2044B8F649A2875D466B72D36BC0366F249E16FDD5EF3E0D232CC5A9782

Function 00E3B8E0 Relevance: .2, Instructions: 227COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 08fd6e0206f8d2f6e0ec4036d2cb60217a31254f10b44f597a463a8f84f76aa3
Instruction ID: 9c8907f7854d097a42966e915a46d7b98f3730501fd7d9796985fa74e771e40e
Opcode Fuzzy Hash: 08fd6e0206f8d2f6e0ec4036d2cb60217a31254f10b44f597a463a8f84f76aa3
Instruction Fuzzy Hash: 45812A332083468BC7148F2894D436EBBD3AFC5314F1A566DD9975B2D2DB36880ACB92

Function 00F87D20 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: f3ea187f573ef86c3777ee55948f20b39e0f6b5aaa4506f57c2c68bd2464c19a
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: 9211E2B7A4C78243D614BA2DD8B47F7A395EFC6335B3C426AD0428B758D222E945B700

Function 00F9A0F5 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8002cddf0912a3c4a4c14f9dabde380401963fb4ceedbd51d2a293b40520d5e8
Instruction ID: 5df93c56609146aa80e770e0dbd6949fb3c809427e0093f70243b2cfe9553cea
Opcode Fuzzy Hash: 8002cddf0912a3c4a4c14f9dabde380401963fb4ceedbd51d2a293b40520d5e8
Instruction Fuzzy Hash: FDE08C32A11228EBCF29DBC8C904D9AF3ECEB44B10F110096F501D3100C274DE40EBD0

Function 00F9B0C4 Relevance: 19.6, APIs: 13, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 00F9B108

Part of subcall function 00F9A520: _free.LIBCMT ref: 00F9A53D
Part of subcall function 00F9A520: _free.LIBCMT ref: 00F9A54F
Part of subcall function 00F9A520: _free.LIBCMT ref: 00F9A561
Part of subcall function 00F9A520: _free.LIBCMT ref: 00F9A573
Part of subcall function 00F9A520: _free.LIBCMT ref: 00F9A585
Part of subcall function 00F9A520: _free.LIBCMT ref: 00F9A597
Part of subcall function 00F9A520: _free.LIBCMT ref: 00F9A5A9
Part of subcall function 00F9A520: _free.LIBCMT ref: 00F9A5BB
Part of subcall function 00F9A520: _free.LIBCMT ref: 00F9A5CD
Part of subcall function 00F9A520: _free.LIBCMT ref: 00F9A5DF
Part of subcall function 00F9A520: _free.LIBCMT ref: 00F9A5F1
Part of subcall function 00F9A520: _free.LIBCMT ref: 00F9A603
Part of subcall function 00F9A520: _free.LIBCMT ref: 00F9A615

_free.LIBCMT ref: 00F9B0FD

Part of subcall function 00F96C57: HeapFree.KERNEL32(00000000,00000000,?,00F8DABB), ref: 00F96C6D
Part of subcall function 00F96C57: GetLastError.KERNEL32(?,?,00F8DABB), ref: 00F96C7F

_free.LIBCMT ref: 00F9B11F
_free.LIBCMT ref: 00F9B134
_free.LIBCMT ref: 00F9B13F
_free.LIBCMT ref: 00F9B161
_free.LIBCMT ref: 00F9B174
_free.LIBCMT ref: 00F9B182
_free.LIBCMT ref: 00F9B18D
_free.LIBCMT ref: 00F9B1C5
_free.LIBCMT ref: 00F9B1CC
_free.LIBCMT ref: 00F9B1E9
_free.LIBCMT ref: 00F9B201

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID:
API String ID: 161543041-0
Opcode ID: b956c3bbd5694c01619f7cad43d9a9c8d2a2746a5c6c84c9f85313c4c8c29c9b
Instruction ID: 367abd494cb16f56f80f328923ccb6ad44cf210f39719e159012158ba05aad3c
Opcode Fuzzy Hash: b956c3bbd5694c01619f7cad43d9a9c8d2a2746a5c6c84c9f85313c4c8c29c9b
Instruction Fuzzy Hash: DB312771A042019FFF21AA39EE55B6A73E9EF40321F144429F499D7191DB7AADC0AB20

Function 00E5B3A0 Relevance: 17.7, APIs: 4, Strings: 6, Instructions: 153COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00E5B3D2

Part of subcall function 00E5B5F0: std::_Lockit::~_Lockit.LIBCPMT ref: 00E5B65F

Strings

Ve", xrefs: 00E5B48B
F, xrefs: 00E5B495
F, xrefs: 00E5B4BF
F, xrefs: 00E5B4A0
Ve", xrefs: 00E5B4D8
F, xrefs: 00E5B4D0

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_
String ID: Ve"$Ve"$F$F$F$F
API String ID: 593203224-2516679520
Opcode ID: 5e4b74db9423b321a598630eeb51294c1b9405edb4f7b745cbf7d38e2c599f03
Instruction ID: 078ddeec0c850beb8861fe31a8e54f88095f4e7a7a4565618465e5e9939995a5
Opcode Fuzzy Hash: 5e4b74db9423b321a598630eeb51294c1b9405edb4f7b745cbf7d38e2c599f03
Instruction Fuzzy Hash: DB512476A00209CBCB14DF78E8C06EDB7F6AB88328F195655E82477392EB305D09CB51

Function 00F95CD4 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 303COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 00F95DF3
CatchIt.LIBVCRUNTIME ref: 00F95F52
_UnwindNestedFrames.LIBCMT ref: 00F96053
CallUnexpected.LIBVCRUNTIME ref: 00F9606E

Strings

csm, xrefs: 00F95E2A
csm, xrefs: 00F95D11
csm, xrefs: 00F95D7E

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: CallCatchFramesNestedUnexpectedUnwindtype_info::operator==
String ID: csm$csm$csm
API String ID: 2332921423-393685449
Opcode ID: be4259ce23eb8765e07fe4260fee8a05550f194e2e48049277bbf597d2abed24
Instruction ID: 18324a58e41adc4bf42d34d62b6c5d1ba549d9ff42d08a123006e020dd371d53
Opcode Fuzzy Hash: be4259ce23eb8765e07fe4260fee8a05550f194e2e48049277bbf597d2abed24
Instruction Fuzzy Hash: BCB1BF71C00609EFEF2AEFA4C8819AEB7B5FF04724F14405AE815AB212D735DA51EF91

Function 00E66580 Relevance: 10.7, APIs: 2, Strings: 4, Instructions: 172COMMON

Download Yara Rule

Strings

pY*a, xrefs: 00E6679B
pY*a, xrefs: 00E667AF
pY*a, xrefs: 00E66737
pY*a, xrefs: 00E666BB

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID:
String ID: pY*a$pY*a$pY*a$pY*a
API String ID: 0-2097975559
Opcode ID: 096908dcc548444edccb71081d05e02d35ed78cba6d8a75bb4b15016720361d5
Instruction ID: d3c1c5b4d4b52626496f1b964400c3ef1c9ef5da09fa1d522f04ce82f7d1efdd
Opcode Fuzzy Hash: 096908dcc548444edccb71081d05e02d35ed78cba6d8a75bb4b15016720361d5
Instruction Fuzzy Hash: 6D51C075B402098FCF04CF68EC81AAAB7E5AF49394F645926D812EB3A4D638DC45DFD0

Function 00F87B90 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 130COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00F87BC7
___except_validate_context_record.LIBVCRUNTIME ref: 00F87BCF
_ValidateLocalCookies.LIBCMT ref: 00F87C58
__IsNonwritableInCurrentImage.LIBCMT ref: 00F87C83
_ValidateLocalCookies.LIBCMT ref: 00F87CD8

Strings

csm, xrefs: 00F87C6D

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 0bff52d2465f4096a5415208c98433fc92d04de09a7ad8bc43f1113f1ea1fac8
Instruction ID: 43a1576881ee1ccb61e40f91fb9f2999b06e1608fede1b796b9882f8419ef8ea
Opcode Fuzzy Hash: 0bff52d2465f4096a5415208c98433fc92d04de09a7ad8bc43f1113f1ea1fac8
Instruction Fuzzy Hash: BE417D34E042189BCF11FF68CC85BDEBBA5AF46324F248155E814AB392D735EA01EB91

Function 00E66800 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 70COMMON

Download Yara Rule

APIs

FreeLibrary.KERNEL32(?,?,?), ref: 00E668A2

Strings

E[(, xrefs: 00E6683A
E[(, xrefs: 00E66875
E[(, xrefs: 00E668C7
E[(, xrefs: 00E66897

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: FreeLibrary
String ID: E[($E[($E[($E[(
API String ID: 3664257935-2128234650
Opcode ID: 5ad7da0ebc4558fa361216a96ccb7bf67bd0095fed45e9b2d3760d7815b81c61
Instruction ID: ba09d9b3e4b12f3c0dd51621c7d46bead4cd99a4d6dd79fe440548cc1910fd1b
Opcode Fuzzy Hash: 5ad7da0ebc4558fa361216a96ccb7bf67bd0095fed45e9b2d3760d7815b81c61
Instruction Fuzzy Hash: 761166323251044FCA988B387DD042ABBC68F952A9F2D052DF821E32E2D225CC0D9B81

Function 00F9A910 Relevance: 10.6, APIs: 7, Instructions: 65COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00F9AC70: _free.LIBCMT ref: 00F9AC95

_free.LIBCMT ref: 00F9A95E

Part of subcall function 00F96C57: HeapFree.KERNEL32(00000000,00000000,?,00F8DABB), ref: 00F96C6D
Part of subcall function 00F96C57: GetLastError.KERNEL32(?,?,00F8DABB), ref: 00F96C7F

_free.LIBCMT ref: 00F9A969
_free.LIBCMT ref: 00F9A974
_free.LIBCMT ref: 00F9A9C8
_free.LIBCMT ref: 00F9A9D3
_free.LIBCMT ref: 00F9A9DE
_free.LIBCMT ref: 00F9A9E9

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 10f89baa2e0e33ddf7736a6c1844a4c53b43da7e62d178f93e44d7a4bdad20d8
Instruction ID: f23825eafbd2fd36a689c25de0354a0da5abe53cfd58cf58ccf8869a7e39526d
Opcode Fuzzy Hash: 10f89baa2e0e33ddf7736a6c1844a4c53b43da7e62d178f93e44d7a4bdad20d8
Instruction Fuzzy Hash: E31119B1944B04ABEE20BBB0CC47FDB779CEF04700F404815B2D9AA092DA6AF544A7E1

Function 00F910CA Relevance: 9.2, APIs: 6, Instructions: 238COMMONLIBRARYCODE

Download Yara Rule

APIs

__cftoe.LIBCMT ref: 00F910F6
__cftoe.LIBCMT ref: 00F91128
_free.LIBCMT ref: 00F9114E

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: __cftoe$_free
String ID:
API String ID: 1303422935-0
Opcode ID: c94ad536faa530105c3a7d49f7e86a90bdfc4099b9735ea4c42006c057fdb743
Instruction ID: ec7e07a0dd84acaf683832702dbed481f805cfea4f57a6cd5b50fedbbcc6f8ab
Opcode Fuzzy Hash: c94ad536faa530105c3a7d49f7e86a90bdfc4099b9735ea4c42006c057fdb743
Instruction Fuzzy Hash: 8371A132A00106AFEF24EF9CCC81EAA77E8FF49360B244569F515C7291EB35ED50AB50

Function 00F86BD7 Relevance: 9.2, APIs: 6, Instructions: 175COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,00000001,?,00000000,00000000,FBE264A1,00E603BF,?,00000001,?,31CAF3BE,?,4D666F31,00E603BF), ref: 00F86C20
MultiByteToWideChar.KERNEL32(00000001,00000001,00000000,?,00000000,00000000,?,31CAF3BE,?,4D666F31,00E603BF,?,?), ref: 00F86C8B
LCMapStringEx.KERNEL32(31CAF3BE,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,31CAF3BE,?,4D666F31,00E603BF,?,?), ref: 00F86CA8
LCMapStringEx.KERNEL32(31CAF3BE,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,31CAF3BE,?,4D666F31,00E603BF,?,?), ref: 00F86CE7
LCMapStringEx.KERNEL32(31CAF3BE,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,31CAF3BE,?,4D666F31,00E603BF,?,?), ref: 00F86D46
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000,?,31CAF3BE,?,4D666F31,00E603BF,?,?), ref: 00F86D69

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: ByteCharMultiStringWide
String ID:
API String ID: 2829165498-0
Opcode ID: a9d80cafb91e6dc7573fd800db6b9cdf1d5f8ad2e957d2e6e97547128270e375
Instruction ID: c7893eeb1fe27bdbcb3dcf62806ee827fb6816568de56c19f1094626d420ad11
Opcode Fuzzy Hash: a9d80cafb91e6dc7573fd800db6b9cdf1d5f8ad2e957d2e6e97547128270e375
Instruction Fuzzy Hash: 23518E73A0020AAFEF216F64CC45FEB7BB9EF44750F154529F915DA160DB349C10AB60

Function 00F96E58 Relevance: 9.1, APIs: 6, Instructions: 128COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,00F8B973,00FB7C80,0000000C), ref: 00F96E5D
_free.LIBCMT ref: 00F96EBA
_free.LIBCMT ref: 00F96EF0
SetLastError.KERNEL32(00000000,00000006,000000FF,?,?,00F8B973,00FB7C80,0000000C), ref: 00F96EFB
_free.LIBCMT ref: 00F96F65
_free.LIBCMT ref: 00F96F99

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: _free$ErrorLast
String ID:
API String ID: 3291180501-0
Opcode ID: 01ea7c31ddc983114b8fb718f84c7f046ed7081134e9595962783456ed8adc00
Instruction ID: e3d8665c610ffddb5fc1170e7f5caad081d0e4870b5e47e063e423ae91737e1c
Opcode Fuzzy Hash: 01ea7c31ddc983114b8fb718f84c7f046ed7081134e9595962783456ed8adc00
Instruction Fuzzy Hash: 7131EB36A1D7566BFE513379ACD2F2B3249EB417B4B2D0324F921E61E1EE158C0176B0

Function 00E64890 Relevance: 9.1, APIs: 3, Strings: 2, Instructions: 321synchronizationCOMMON

Download Yara Rule

APIs

CreateEventA.KERNEL32(?), ref: 00E64D1D
WaitForSingleObject.KERNEL32(?,000000FF), ref: 00E64D85
GetLastError.KERNEL32 ref: 00E64DDE

Strings

,D, xrefs: 00E64C4F
=i , xrefs: 00E64BDC

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: CreateErrorEventLastObjectSingleWait
String ID: ,D$=i
API String ID: 1695325170-1526521300
Opcode ID: 06812f85853e6f4a3c186e248dcb19ee682b455a0d7340dc2c707ac2e9ea0ece
Instruction ID: c72af098f78d0e9874e289418210e2786d835f944698c357c3eee036f8ea280d
Opcode Fuzzy Hash: 06812f85853e6f4a3c186e248dcb19ee682b455a0d7340dc2c707ac2e9ea0ece
Instruction Fuzzy Hash: 5102B171508BC0CDE332CB38D469787BFE16B26308F08495DD4DA5B782D7BAA508C7A6

Function 00F9540D Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,00F95404,00F95BE6,?,?,?,?,00F8767D,?,?,?,?,?,00000000,00000000), ref: 00F9541B
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 00F95429
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 00F95442
SetLastError.KERNEL32(00000000,?,00F95404,00F95BE6,?,?,?,?,00F8767D,?,?,?,?,?,00000000,00000000), ref: 00F95494

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 3a6a341508b6db3dbdd98e52e7cf1e8047ca57285f9c405bcbf7276335e51b4a
Instruction ID: 2d6491ab1bb5b6d5699d3ea7fe1c9259e7f3daa272d812a606f06b429bf7c5b4
Opcode Fuzzy Hash: 3a6a341508b6db3dbdd98e52e7cf1e8047ca57285f9c405bcbf7276335e51b4a
Instruction Fuzzy Hash: 4801F533909B156EBA5667FCBCE595B3784FB42B367284329F614440E0EF1148417A80

Function 00F8BAE5 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 30libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,00F8BB6F,?,?,00F8BBF0,?,?,?), ref: 00F8BAFA
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00F8BB0D
FreeLibrary.KERNEL32(00000000,?,?,00F8BB6F,?,?,00F8BBF0,?,?,?), ref: 00F8BB30

Strings

mscoree.dll, xrefs: 00F8BAF3
CorExitProcess, xrefs: 00F8BB05

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 7df340334acb044d687b2fc9046fcc1e603bb6e4b1949eafa361517aaeb93de8
Instruction ID: 7e171a154e765f133827a3be4bf0bf48f717b8e68bb02d2f9d7df50b57e33ae3
Opcode Fuzzy Hash: 7df340334acb044d687b2fc9046fcc1e603bb6e4b1949eafa361517aaeb93de8
Instruction Fuzzy Hash: 9EF01C31D4121CFBDB66AF55DD4AFEEBB69EB44766F140160E401A21A0DB708E00FF91

Function 00E66460 Relevance: 7.6, APIs: 2, Strings: 3, Instructions: 86COMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,?,?,?,?), ref: 00E664BE

Strings

bI5, xrefs: 00E664A0
cI5, xrefs: 00E66542
cI5, xrefs: 00E664D0

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: FreeVirtual
String ID: bI5$cI5$cI5
API String ID: 1263568516-172152604
Opcode ID: 4a63d00e8e6b0f2c77c1d8a5a537e173a33b5390bcfef88f8ad266d79f73a9f3
Instruction ID: 2acee51c05a0b49300cc492008618e3ada7f32bdb6e7eb237d2195620759c15b
Opcode Fuzzy Hash: 4a63d00e8e6b0f2c77c1d8a5a537e173a33b5390bcfef88f8ad266d79f73a9f3
Instruction Fuzzy Hash: 62213C363443549B8E089A34A8E487F77D6EEC4368B68871EF4AA572E4C5309C09DB41

Function 00F85397 Relevance: 7.5, APIs: 5, Instructions: 44COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00F8539E
std::_Lockit::_Lockit.LIBCPMT ref: 00F853A9
std::_Lockit::~_Lockit.LIBCPMT ref: 00F85417

Part of subcall function 00F852A0: std::locale::_Locimp::_Locimp.LIBCPMT ref: 00F852B8

std::locale::_Setgloballocale.LIBCPMT ref: 00F853C4
_Yarn.LIBCPMT ref: 00F853DA

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_SetgloballocaleYarn
String ID:
API String ID: 1088826258-0
Opcode ID: da3287f264e8651ae4cc0d4a5e9a210edeccf6f4c0bcfb3cb31fe7b34412be90
Instruction ID: 56a73140011c6aa5d7432307729e0adf9cdedea7582bd99f381918d7a0810caf
Opcode Fuzzy Hash: da3287f264e8651ae4cc0d4a5e9a210edeccf6f4c0bcfb3cb31fe7b34412be90
Instruction Fuzzy Hash: E7017175A01A159BD706FB60DD5A9BD7771FFC4B50B144008E80257381CF786E42EB85

Function 00F9A82C Relevance: 7.5, APIs: 5, Instructions: 40COMMONLIBRARYCODE

Download Yara Rule

APIs

_free.LIBCMT ref: 00F9A844

Part of subcall function 00F96C57: HeapFree.KERNEL32(00000000,00000000,?,00F8DABB), ref: 00F96C6D
Part of subcall function 00F96C57: GetLastError.KERNEL32(?,?,00F8DABB), ref: 00F96C7F

_free.LIBCMT ref: 00F9A856
_free.LIBCMT ref: 00F9A868
_free.LIBCMT ref: 00F9A87A
_free.LIBCMT ref: 00F9A88C

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: c7bee086ec520b2e87342cd41cfd2228c7734856e595fdd1a0a10b86272330ad
Instruction ID: 143f8f52ca861f56890e238263efd535c2ae6a9653fbfcf6daa7393902b425c5
Opcode Fuzzy Hash: c7bee086ec520b2e87342cd41cfd2228c7734856e595fdd1a0a10b86272330ad
Instruction Fuzzy Hash: 69F06272908204A7AE64EB58EDC2C0B73D9FA007217984819F09DD7501CB35FC80AAE5

Function 00E5C560 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 212COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00E5C593
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00E5C7EA

Strings

bad locale name, xrefs: 00E5C808

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: std::_$Locinfo::_Locinfo_ctorLockitLockit::_
String ID: bad locale name
API String ID: 3988782225-1405518554
Opcode ID: 9b3ad01a267e3e016aa538392729483206c069e8cc51b4310e3b466397885a17
Instruction ID: 075ef63c14f1ac6a75e672cca4f7f45b0bb9ff91bfbde3f87a8d50e9efe0b0ca
Opcode Fuzzy Hash: 9b3ad01a267e3e016aa538392729483206c069e8cc51b4310e3b466397885a17
Instruction Fuzzy Hash: EF819CB29002598FCB14DF68D4E5BEABBF0AF48321F2A5655DC197B291E3349D08CF90

Function 00F960F9 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,00000000,00000000,?,?,?,?,?,?,00F95FFF,?,?,00000000,00000000,00000000,?), ref: 00F9611E
CatchIt.LIBVCRUNTIME ref: 00F96204

Strings

RCC, xrefs: 00F96138
MOC, xrefs: 00F96130

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: CatchEncodePointer
String ID: MOC$RCC
API String ID: 1435073870-2084237596
Opcode ID: fadb81616a82aefe1e4bf75d1b8c2e48409cbb66f9d1ed5ddc8ac1d5df087407
Instruction ID: 4822ac2bf535819b0b6b25959afa476465db676b4537cff245a95b8a1b79b40b
Opcode Fuzzy Hash: fadb81616a82aefe1e4bf75d1b8c2e48409cbb66f9d1ed5ddc8ac1d5df087407
Instruction Fuzzy Hash: AF414772D00209AFEF16DF98DD81AEEBBB5FF48314F188059F904A7261D3359A90EB51

Function 00FA166F Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,00000000,00000800,?,00FA170B,?,?,00000000,?,?,?,00FA15C9,00000002,FlsGetValue,00FAB364,00FAB36C), ref: 00FA167C
GetLastError.KERNEL32(?,00FA170B,?,?,00000000,?,?,?,00FA15C9,00000002,FlsGetValue,00FAB364,00FAB36C,?,?,00F9542E), ref: 00FA1686
LoadLibraryExW.KERNEL32(?,00000000,00000000), ref: 00FA16AE

Strings

api-ms-, xrefs: 00FA1693

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 8a0dbee16a2f3d0b99610d9289051948e765930ff4814c590182ebcb2814fa84
Instruction ID: 4f86d682d2daed6d29cebe5c769cb8b5fb3505f667268004280db0e2ecc1aa68
Opcode Fuzzy Hash: 8a0dbee16a2f3d0b99610d9289051948e765930ff4814c590182ebcb2814fa84
Instruction Fuzzy Hash: C3E0BFB0AC4209BBEF706F61EC4AB593F59BB01B94F144220F90DE85E2EB61D950BD85

Function 00F959FB Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00F95AC2
___AdjustPointer.LIBCMT ref: 00F95AE5
___AdjustPointer.LIBCMT ref: 00F95B81

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 41ea92adbf1bae5267941381bdf212dbcbcb64a15ab5c26e6ee9f4fcee361968
Instruction ID: fd3f137296878644e3a184eb28407aab359231fae811c3f52f3f135b7a7450a2
Opcode Fuzzy Hash: 41ea92adbf1bae5267941381bdf212dbcbcb64a15ab5c26e6ee9f4fcee361968
Instruction Fuzzy Hash: 2A51E672E05A069FFF2A9F55D881BBA73A4EF80B20F24412DE80557291E735ED41EB90

Function 00F96FAF Relevance: 6.1, APIs: 4, Instructions: 69COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,00F8DBFC,00F96C7D,?,?,00F8DABB), ref: 00F96FB4
_free.LIBCMT ref: 00F97011
_free.LIBCMT ref: 00F97047
SetLastError.KERNEL32(00000000,00000006,000000FF,?,?,00F8DBFC,00F96C7D,?,?,00F8DABB), ref: 00F97052

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: ErrorLast_free
String ID:
API String ID: 2283115069-0
Opcode ID: 3a4a2e19d7582950ae4f805d78532574bbc9796df062aa96d036fb3ea96b48ac
Instruction ID: 572265bf8b6698227e9a65a6e0bb8da5ac21db726b8aba1c284a118df900f95e
Opcode Fuzzy Hash: 3a4a2e19d7582950ae4f805d78532574bbc9796df062aa96d036fb3ea96b48ac
Instruction Fuzzy Hash: C811E57261C3052AFE5137766CD1E2B3259EBC03B872D0324F124D21E1EF268C057660

Function 00E46D6D Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 128COMMON

Download Yara Rule

APIs

Beep.KERNEL32(00000000,00000000), ref: 00E46DC0

Strings

<MK, xrefs: 00E46E3A
<MK, xrefs: 00E46DFC

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: Beep
String ID: <MK$<MK
API String ID: 382380223-366659916
Opcode ID: 4174f721710a0493ced7e7eaa6a645470cb60eb9eeb09c739a52fe42a4b65d60
Instruction ID: 2226dc29e968b66a5be721b76aac73461b6bf6cbd7ecf3837278cd1a2f816221
Opcode Fuzzy Hash: 4174f721710a0493ced7e7eaa6a645470cb60eb9eeb09c739a52fe42a4b65d60
Instruction Fuzzy Hash: 7E516D75A04B409FC335DF399444656BBF6BF89310B108A2EE1EBDBB90EB31A801CB51

Function 00F95964 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

___except_validate_context_record.LIBVCRUNTIME ref: 00F95BDB

Strings

csm, xrefs: 00F95C6E
csm, xrefs: 00F95BFD

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: ___except_validate_context_record
String ID: csm$csm
API String ID: 3493665558-3733052814
Opcode ID: ee8a524020e09249eccb709a157b16ca9d4d61e7cc21d2ed1e53b10017db9429
Instruction ID: b0b61ca65e5aa01dab488ab511ae8166ed03b6af90cd595714f90721a954fe16
Opcode Fuzzy Hash: ee8a524020e09249eccb709a157b16ca9d4d61e7cc21d2ed1e53b10017db9429
Instruction Fuzzy Hash: 5F31D272800B199BEF275F61CC4096E7B66FF08B25B18455AFD145A221C336DCA1FB91

Function 00E3A620 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 84COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 00E3A63A

Strings

*7di, xrefs: 00E3A6C0
*7di, xrefs: 00E3A6A2

Memory Dump Source

Source File: 0000000C.00000002.3921600995.0000000000E31000.00000020.00000001.01000000.00000008.sdmp, Offset: 00E30000, based on PE: true

Associated: 0000000C.00000002.3921529843.0000000000E30000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921896010.0000000000FA6000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3921965189.0000000000FB9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FBC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922018682.0000000000FC6000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCA000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.0000000000FCD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000100D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000102F000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.3922116677.000000000106E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_e30000_setup.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: *7di$*7di
API String ID: 4194217158-3251188295
Opcode ID: 1ef24f9350ecc865c659eed7de23b0626deb0c728534c63fe54fa83ebd0d239a
Instruction ID: 45f0a0532989302812a8b6bcf928f428d954b9536ca33159fb7a40c4713df561
Opcode Fuzzy Hash: 1ef24f9350ecc865c659eed7de23b0626deb0c728534c63fe54fa83ebd0d239a
Instruction Fuzzy Hash: 07218EB56051084BCA148E28ACCE86A7AD4DB81718F2E263DF4D5E72F0D621DC85DB93

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the binaries used by services. Adversaries may use flaws in the permissions of Windows services to replace the binary that is executed upon service start. These service processes may automatically execute specific binaries as part of their functionality or to perform other actions. If the permissions on the file system directory containing a target binary, or permissions on the binary itself are improperly set, then the target binary may be overwritten with another binary using user-level permissions and executed by the original process. If the original process and thread are running under a higher permissions level, then the replaced binary will also execute under higher-level permissions, which could include SYSTEM.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Process: Process Creation, Service: Service Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 33abb.msi

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\46fa476e-2a6d-4138-8cf5-64dde92cd8ca.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\470d7abf-fbf4-4633-8e7e-7d429108f1e8.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\7e1c804b-7d35-44f7-b555-929b1fade5bd.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\894a43c0-a5c1-4135-8c9e-9b8115999da9.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\90a6ab4b-1484-4445-8a7b-22dc10a00eaf.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\68523d79-538b-4328-96d6-95e37135c194.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma (copy)

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-675ACC06-23C.pma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\2f1eb5b7-710e-4485-9fbb-70c4371638a2.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\35576e81-3b67-462a-933c-7e3dda8179c4.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\4075fbba-0654-4d1d-a9d6-c4ca70649b5e.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\6054d1d6-afdb-48a9-84ef-06c61614dad6.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000001.dbtmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000003.log

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\CURRENT (copy)

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\LOG

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\MANIFEST-000001

Windows Analysis Report
33abb.msi