Joe Sandbox Cloud Basic Analysis Report
Create Interactive Tour

Windows Analysis Report
http://ny-t.r-tb.com/

Overview

General Information

Sample URL:http://ny-t.r-tb.com/
Analysis ID:564184
Infos:

Detection

Score:56
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Antivirus / Scanner detection for submitted sample
Antivirus detection for URL or domain

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious

Process Tree

  • System is w10x64
  • chrome.exe (PID: 6060 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "http://ny-t.r-tb.com/ MD5: C139654B5C1438A95B321BB01AD63EF6)
    • chrome.exe (PID: 6084 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1544,13023897823658162512,2227868781108129078,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1932 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)
    • chrome.exe (PID: 8052 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1544,13023897823658162512,2227868781108129078,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=5072 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)
  • cleanup

Malware Configuration

⊘No configs have been found

Yara Overview

⊘No yara matches

Sigma Overview

⊘No Sigma rule has matched

Jbx Signature Overview

  • • AV Detection
  • • Compliance
  • • Networking
  • • System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Source: http://ny-t.r-tb.com/Avira URL Cloud: detection malicious, Label: phishing
Source: http://ny-t.r-tb.com/cdn-cgi/styles/cf.errors.cssAvira URL Cloud: Label: phishing
Source: http://ny-t.r-tb.com/cdn-cgi/images/icon-exclamation.png?1376755637Avira URL Cloud: Label: phishing
Source: http://ny-t.r-tb.com/2$SuspectedAvira URL Cloud: Label: phishing
Source: http://ny-t.r-tb.com/favicon.icoAvira URL Cloud: Label: phishing
Source: C:\Program Files\Google\Chrome\Application\chrome.exeDirectory created: C:\Program Files\Google\Chrome\Application\DictionariesJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeDirectory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdicJump to behavior
Source: unknownHTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.5:49844 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.5:49843 version: TLS 1.2
Source: unknownHTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.5:49940 version: TLS 1.2
Source: unknownHTTPS traffic detected: 35.190.26.57:443 -> 192.168.2.5:49944 version: TLS 1.2
Source: unknownHTTPS traffic detected: 54.73.67.72:443 -> 192.168.2.5:49946 version: TLS 1.2
Source: unknownHTTPS traffic detected: 151.101.13.51:443 -> 192.168.2.5:49991 version: TLS 1.2
Source: unknownHTTPS traffic detected: 151.101.0.65:443 -> 192.168.2.5:50060 version: TLS 1.2
Source: unknownHTTPS traffic detected: 45.92.42.1:443 -> 192.168.2.5:50061 version: TLS 1.2
Source: unknownHTTPS traffic detected: 68.142.70.14:443 -> 192.168.2.5:50224 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.53.99:443 -> 192.168.2.5:50222 version: TLS 1.2
Source: unknownDNS traffic detected: queries for: clients2.google.com
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49983
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49982
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49980
Source: unknownNetwork traffic detected: HTTP traffic on port 49898 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49852 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50131 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50177 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50257 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49979
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49977
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49976
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49974
Source: unknownNetwork traffic detected: HTTP traffic on port 50085 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49973
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49972
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49971
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49970
Source: unknownNetwork traffic detected: HTTP traffic on port 49784 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50325 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50004 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49909 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50292 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49969
Source: unknownNetwork traffic detected: HTTP traffic on port 49886 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49968
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49967
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49966
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49965
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49964
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49963
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49962
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49961
Source: unknownNetwork traffic detected: HTTP traffic on port 49966 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50189 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50108 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50028 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50303 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49805 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49958
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49955
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49954
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49953
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49951
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49950
Source: unknownNetwork traffic detected: HTTP traffic on port 49944 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49910 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50337 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50051 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49796 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49949
Source: unknownNetwork traffic detected: HTTP traffic on port 50235 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49948
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49947
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49946
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49944
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49788
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49787
Source: unknownNetwork traffic detected: HTTP traffic on port 50061 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49786
Source: unknownNetwork traffic detected: HTTP traffic on port 49922 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49785
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49784
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49783
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49782
Source: unknownNetwork traffic detected: HTTP traffic on port 49968 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50187 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50026 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49807 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50270 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50347 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49862 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50282 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50247 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50095 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49830 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49991 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50313 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50143 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50208 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49896 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50259 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50083 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49757
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49999
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49998
Source: unknownNetwork traffic detected: HTTP traffic on port 50121 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49996
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49995
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49994
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49993
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49992
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49991
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49990
Source: unknownNetwork traffic detected: HTTP traffic on port 49786 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49874 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49829 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50199 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49989
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49988
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49987
Source: unknownNetwork traffic detected: HTTP traffic on port 50277 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50337
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50339
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50338
Source: unknownNetwork traffic detected: HTTP traffic on port 50151 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50116 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50331
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50330
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50333
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50332
Source: unknownNetwork traffic detected: HTTP traffic on port 49803 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50305 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49849 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50106
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50347
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50108
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50107
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50349
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50340
Source: unknownNetwork traffic detected: HTTP traffic on port 49872 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50341
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50102
Source: unknownNetwork traffic detected: HTTP traffic on port 50339 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50344
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50101
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50104
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50346
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50345
Source: unknownNetwork traffic detected: HTTP traffic on port 50289 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49964 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50128 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49798 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50197 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50116
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50119
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50118
Source: unknownNetwork traffic detected: HTTP traffic on port 50317 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50350
Source: unknownNetwork traffic detected: HTTP traffic on port 49930 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50113
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50115
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50114
Source: unknownNetwork traffic detected: HTTP traffic on port 50175 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50213 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50128
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49799
Source: unknownNetwork traffic detected: HTTP traffic on port 49757 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50127
Source: unknownNetwork traffic detected: HTTP traffic on port 50012 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49798
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49797
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49796
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50129
Source: unknownNetwork traffic detected: HTTP traffic on port 50255 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49795
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49794
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49793
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49792
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50120
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49791
Source: unknownNetwork traffic detected: HTTP traffic on port 50093 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49790
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50122
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50121
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50124
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50123
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50126
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50125
Source: unknownNetwork traffic detected: HTTP traffic on port 50048 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49825 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49884 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50340 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49789
Source: unknownNetwork traffic detected: HTTP traffic on port 49859 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50315 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49894 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50350 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50106 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50267 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50081 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50304
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50303
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50305
Source: unknownNetwork traffic detected: HTTP traffic on port 50173 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50308
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50307
Source: unknownNetwork traffic detected: HTTP traffic on port 49919 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49954 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50014 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50309
Source: unknownNetwork traffic detected: HTTP traffic on port 49788 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49988 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49827 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50046 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49882 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50233 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50315
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50314
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50317
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50316
Source: unknownNetwork traffic detected: HTTP traffic on port 49976 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50319
Source: unknownNetwork traffic detected: HTTP traffic on port 50118 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50318
Source: unknownNetwork traffic detected: HTTP traffic on port 49815 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50279 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50311
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50310
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50313
Source: unknownNetwork traffic detected: HTTP traffic on port 50223 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50312
Source: unknownNetwork traffic detected: HTTP traffic on port 50024 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49860 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50349 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50326
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50325
Source: unknownNetwork traffic detected: HTTP traffic on port 49998 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50328
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50327
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50329
Source: unknownNetwork traffic detected: HTTP traffic on port 50245 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50320
Source: unknownNetwork traffic detected: HTTP traffic on port 50058 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50322
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50324
Source: unknownNetwork traffic detected: HTTP traffic on port 50002 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50185 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49920 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50327 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49926 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50054
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50296
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50053
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50295
Source: unknownNetwork traffic detected: HTTP traffic on port 49789 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50297
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50058
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50057
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50299
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50059
Source: unknownNetwork traffic detected: HTTP traffic on port 49961 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50061
Source: unknownNetwork traffic detected: HTTP traffic on port 50286 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50060
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50063
Source: unknownNetwork traffic detected: HTTP traffic on port 50102 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50045 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50148 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50274 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50065
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50064
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50067
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50066
Source: unknownNetwork traffic detected: HTTP traffic on port 50331 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50069
Source: unknownNetwork traffic detected: HTTP traffic on port 50240 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50183 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50074
Source: unknownNetwork traffic detected: HTTP traffic on port 49823 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50080 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50308 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49790 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50227 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50252 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50195 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50076
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50075
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50078
Source: unknownNetwork traffic detected: HTTP traffic on port 50057 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50114 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49892 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50079
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50081
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50080
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50083
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50082
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50085
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50084
Source: unknownNetwork traffic detected: HTTP traffic on port 49904 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49847 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50087
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50086
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50089
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50088
Source: unknownNetwork traffic detected: HTTP traffic on port 50079 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50090
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50092
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50091
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50094
Source: unknownNetwork traffic detected: HTTP traffic on port 50136 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49983 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50093
Source: unknownNetwork traffic detected: HTTP traffic on port 50023 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50095
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50018
Source: unknownNetwork traffic detected: HTTP traffic on port 50193 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50259
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50019
Source: unknownNetwork traffic detected: HTTP traffic on port 49813 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49951 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50010
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50252
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50251
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50012
Source: unknownNetwork traffic detected: HTTP traffic on port 49916 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50254
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50011
Source: unknownNetwork traffic detected: HTTP traffic on port 50090 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50014
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50256
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50255
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50258
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50257
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50261
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50260
Source: unknownNetwork traffic detected: HTTP traffic on port 50230 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50028
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50021
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50263
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50020
Source: unknownNetwork traffic detected: HTTP traffic on port 50318 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50023
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50265
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50022
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50264
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50025
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50267
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50024
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50027
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50026
Source: unknownNetwork traffic detected: HTTP traffic on port 49879 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50268
Source: unknownNetwork traffic detected: HTTP traffic on port 50264 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50270
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50030
Source: unknownNetwork traffic detected: HTTP traffic on port 50021 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50272
Source: unknownNetwork traffic detected: HTTP traffic on port 50138 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50067 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49995 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50011 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50032
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50274
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50273
Source: unknownNetwork traffic detected: HTTP traffic on port 49857 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50276
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50033
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50275
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50278
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50277
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50279
Source: unknownNetwork traffic detected: HTTP traffic on port 50242 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49801 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50281
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50283
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50040
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50282
Source: unknownNetwork traffic detected: HTTP traffic on port 50104 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50341 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50089 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49973 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50203 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50276 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50033 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50171 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49835 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50042
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50045
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50287
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50286
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50289
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50046
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50049
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50048
Source: unknownNetwork traffic detected: HTTP traffic on port 49880 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50292
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50052
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50294
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50051
Source: unknownNetwork traffic detected: HTTP traffic on port 50126 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49792 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49890 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50168 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50311 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50122 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50260 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49912 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49958 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49889 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49946 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50018 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50134 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49855 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50053 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50237 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50380 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50099 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49831 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50272 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50345 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49782 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50249 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50379 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50207 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49808 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50294 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50006 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50181 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50065 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49941
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49940
Source: unknownNetwork traffic detected: HTTP traffic on port 50229 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50296 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50098
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50097
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50099
Source: unknownNetwork traffic detected: HTTP traffic on port 50075 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49833 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49936
Source: unknownNetwork traffic detected: HTTP traffic on port 49902 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50087 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49930
Source: unknownNetwork traffic detected: HTTP traffic on port 50008 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49971 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49936 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49794 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49927
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49926
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49925
Source: unknownNetwork traffic detected: HTTP traffic on port 50250 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49923
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49922
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49921
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49920
Source: unknownNetwork traffic detected: HTTP traffic on port 50063 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50124 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50191 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49821 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49877 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50217 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49914 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49919
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49918
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49916
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49915
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49914
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49913
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49912
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49911
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49910
Source: unknownNetwork traffic detected: HTTP traffic on port 49948 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49843 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50146 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50333 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50097 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50239 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49909
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49908
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49906
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49905
Source: unknownNetwork traffic detected: HTTP traffic on port 49993 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49904
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49903
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49902
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49901
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49862
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49861
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49860
Source: unknownNetwork traffic detected: HTTP traffic on port 49875 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49795 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49990 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50234 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49859
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49858
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49857
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49856
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49855
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49854
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49853
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49852
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49851
Source: unknownNetwork traffic detected: HTTP traffic on port 50314 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49967 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50222 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50074 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50107 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50268 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49806 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49849
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49848
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49847
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49846
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49844
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49843
Source: unknownNetwork traffic detected: HTTP traffic on port 50120 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50040 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49989 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50246 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49828 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49838
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ny-t.r-tb.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /cdn-cgi/styles/cf.errors.css HTTP/1.1Host: ny-t.r-tb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://ny-t.r-tb.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: ny-t.r-tb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Referer: http://ny-t.r-tb.com/cdn-cgi/styles/cf.errors.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ny-t.r-tb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Referer: http://ny-t.r-tb.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: ny-t.r-tb.com
Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Feb 2022 14:15:00 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: MISSVary: Accept-EncodingServer: cloudflareCF-RAY: 6d6bca1069ed9225-FRAContent-Encoding: gzipData Raw: 61 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 8e 4d 0a c2 30 10 85 f7 85 de 61 3c 40 88 85 2e 87 6c 44 c1 85 6e 3c 41 ea 8c 4d 20 9d 94 31 82 bd bd 54 2d 88 6b 97 ae 1e bc 9f 8f 87 a1 0c c9 d5 15 06 f6 e4 b0 c4 92 d8 b5 eb 16 8e b9 c0 2e df 84 d0 be 4c b4 cf 4a 5d 61 97 69 9a f5 cc 52 58 1d 86 e6 7b 11 1a 87 f6 1d cf 6c 75 4b 59 fa 28 f7 cf cc 2e 34 bb 3c 59 19 03 1e 46 4f 14 a5 87 92 81 e2 d5 77 89 e1 70 da 6f c1 0b c1 26 68 1e 18 2e 1a 59 28 4d c0 aa 59 61 f4 3d 83 31 7f c4 af 11 0f 27 a7 bf a8 24 02 00 00 0d 0a Data Ascii: a7M0a<@.lDn<AM 1T-k.LJ]aiRX{luKY(.4<YFOwpo&h.Y(MYa=1'$
Source: angular.js.1.drString found in binary or memory: http://angularjs.org
Source: angular.js.1.drString found in binary or memory: http://errors.angularjs.org/1.6.4-local
Source: pnacl_public_x86_64_pnacl_sz_nexe.1.dr, pnacl_public_x86_64_pnacl_llc_nexe.1.drString found in binary or memory: http://llvm.org/):
Source: History Provider Cache.1.drString found in binary or memory: http://ny-t.r-tb.com/2$Suspected
Source: mirroring_hangouts.js.1.drString found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: mirroring_hangouts.js.1.drString found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: mirroring_hangouts.js.1.drString found in binary or memory: http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions
Source: mirroring_hangouts.js.1.drString found in binary or memory: http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
Source: 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://9309168.fls.doubleclick.net
Source: 696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, manifest.json.1.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://accounts.google.com
Source: craw_window.js.1.drString found in binary or memory: https://accounts.google.com/MergeSession
Source: 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://ad.doubleclick.net
Source: 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://adservice.google.ae
Source: 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://adservice.google.com
Source: 696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, manifest.json.1.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://apis.google.com
Source: mirroring_common.js.1.drString found in binary or memory: https://apis.google.com/js/client.js
Source: 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://benchmark.1e100cdn.net
Source: mirroring_common.js.1.drString found in binary or memory: https://castedumessaging-pa.googleapis.com/v1
Source: pnacl_public_x86_64_libcrt_platform_a.1.drString found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-clang.git
Source: pnacl_public_x86_64_libcrt_platform_a.1.drString found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
Source: 696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://clients2.google.com
Source: mirroring_hangouts.js.1.drString found in binary or memory: https://clients2.google.com/cr/report
Source: manifest.json0.1.dr, manifest.json.1.dr, manifest.json1.1.drString found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://clients2.googleusercontent.com
Source: mirroring_hangouts.js.1.drString found in binary or memory: https://clients6.google.com
Source: pnacl_public_x86_64_ld_nexe.1.drString found in binary or memory: https://code.google.com/p/nativeclient/issues/entry
Source: pnacl_public_x86_64_ld_nexe.1.drString found in binary or memory: https://code.google.com/p/nativeclient/issues/entry%s:
Source: manifest.json.1.drString found in binary or memory: https://content.googleapis.com
Source: common.js.1.dr, mirroring_cast_streaming.js.1.drString found in binary or memory: https://crash.corp.google.com/samples?reportid=&q=
Source: mirroring_hangouts.js.1.drString found in binary or memory: https://creativecommons.org/publicdomain/zero/1.0/.
Source: 696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.dr, c969abab-a3f1-4f19-81a5-e3c8ab3cb894.tmp.3.dr, 61ae7b3f-641b-4b4b-8fd6-fab4d52559d4.tmp.3.drString found in binary or memory: https://dns.google
Source: mirroring_common.js.1.drString found in binary or memory: https://docs.google.com
Source: manifest.json.1.drString found in binary or memory: https://feedback.googleusercontent.com
Source: 696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://fonts.googleapis.com
Source: manifest.json.1.drString found in binary or memory: https://fonts.googleapis.com;
Source: 696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://fonts.gstatic.com
Source: manifest.json.1.drString found in binary or memory: https://fonts.gstatic.com;
Source: angular.js.1.dr, material_css_min.css.1.drString found in binary or memory: https://github.com/angular/material
Source: craw_background.js.1.dr, craw_window.js.1.drString found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: mirroring_hangouts.js.1.drString found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: mirroring_hangouts.js.1.drString found in binary or memory: https://hangouts.clients6.google.com
Source: manifest.json.1.drString found in binary or memory: https://hangouts.google.com/
Source: mirroring_hangouts.js.1.drString found in binary or memory: https://hangouts.google.com/hangouts/_/logpref
Source: mirroring_common.js.1.drString found in binary or memory: https://meet.google.com
Source: mirroring_hangouts.js.1.drString found in binary or memory: https://meetings.clients6.google.com
Source: mirroring_common.js.1.drString found in binary or memory: https://networktraversal.googleapis.com/v1alpha
Source: 696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://ogs.google.com
Source: manifest.json0.1.dr, craw_window.js.1.drString found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: mirroring_hangouts.js.1.drString found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: mirroring_hangouts.js.1.drString found in binary or memory: https://preprod-hangouts-googleapis.sandbox.google.com
Source: 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://r4---sn-4g5e6ns7.gvt1.com
Source: 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://redirector.gvt1.com
Source: manifest.json0.1.dr, craw_window.js.1.drString found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: 696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://ssl.gstatic.com
Source: 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://stats.g.doubleclick.net
Source: messages.json27.1.dr, messages.json83.1.dr, feedback.html.1.dr, messages.json80.1.dr, messages.json22.1.dr, messages.json73.1.dr, messages.json34.1.dr, messages.json10.1.dr, messages.json21.1.dr, messages.json3.1.dr, messages.json74.1.dr, messages.json9.1.dr, messages.json75.1.dr, messages.json85.1.dr, messages.json24.1.dr, messages.json4.1.dr, messages.json8.1.dr, messages.json87.1.dr, messages.json86.1.dr, messages.json44.1.dr, messages.json1.1.drString found in binary or memory: https://support.google.com/chromecast/answer/2998456
Source: messages.json27.1.dr, messages.json83.1.dr, feedback.html.1.dr, messages.json80.1.dr, messages.json22.1.dr, messages.json73.1.dr, messages.json34.1.dr, messages.json10.1.dr, messages.json21.1.dr, messages.json3.1.dr, messages.json74.1.dr, messages.json9.1.dr, messages.json75.1.dr, messages.json85.1.dr, messages.json24.1.dr, messages.json4.1.dr, messages.json8.1.dr, messages.json87.1.dr, messages.json86.1.dr, messages.json44.1.dr, messages.json1.1.drString found in binary or memory: https://support.google.com/chromecast/troubleshooter/2995236
Source: craw_background.js.1.dr, craw_window.js.1.drString found in binary or memory: https://www-googleapis-staging.sandbox.google.com
Source: History Provider Cache.1.drString found in binary or memory: https://www.cloudflare.com/5xx-error-landing/2
Source: History Provider Cache.1.drString found in binary or memory: https://www.cloudflare.com/5xx-error-landing2
Source: 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://www.google.ae
Source: 696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, manifest.json.1.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://www.google.com
Source: manifest.json0.1.drString found in binary or memory: https://www.google.com/
Source: craw_window.js.1.drString found in binary or memory: https://www.google.com/accounts/OAuthLogin?issueuberauth=1
Source: craw_window.js.1.drString found in binary or memory: https://www.google.com/images/cleardot.gif
Source: craw_window.js.1.drString found in binary or memory: https://www.google.com/images/dot2.gif
Source: craw_window.js.1.drString found in binary or memory: https://www.google.com/images/x2.gif
Source: craw_background.js.1.drString found in binary or memory: https://www.google.com/intl/en-US/chrome/blank.html
Source: mirroring_hangouts.js.1.drString found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: feedback_script.js.1.drString found in binary or memory: https://www.google.com/tools/feedback
Source: manifest.json.1.drString found in binary or memory: https://www.google.com;
Source: 696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.dr, craw_background.js.1.dr, craw_window.js.1.drString found in binary or memory: https://www.googleapis.com
Source: manifest.json0.1.drString found in binary or memory: https://www.googleapis.com/
Source: manifest.json.1.drString found in binary or memory: https://www.googleapis.com/auth/calendar.readonly
Source: manifest.json.1.drString found in binary or memory: https://www.googleapis.com/auth/cast-edu-messaging
Source: manifest.json0.1.drString found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json0.1.drString found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json.1.drString found in binary or memory: https://www.googleapis.com/auth/clouddevices
Source: manifest.json.1.drString found in binary or memory: https://www.googleapis.com/auth/hangouts
Source: manifest.json.1.drString found in binary or memory: https://www.googleapis.com/auth/hangouts.readonly
Source: manifest.json.1.drString found in binary or memory: https://www.googleapis.com/auth/meetings
Source: manifest.json.1.drString found in binary or memory: https://www.googleapis.com/auth/plus.peopleapi.readwrite
Source: manifest.json0.1.drString found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json0.1.drString found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: manifest.json.1.drString found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: mirroring_common.js.1.drString found in binary or memory: https://www.googleapis.com/calendar/v3
Source: mirroring_common.js.1.drString found in binary or memory: https://www.googleapis.com/hangouts/v1
Source: 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://www.googleoptimize.com
Source: 696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drString found in binary or memory: https://www.gstatic.com
Source: common.js.1.drString found in binary or memory: https://www.gstatic.com/hangouts_echo_detector/release/%
Source: manifest.json.1.drString found in binary or memory: https://www.gstatic.com;
Source: unknownHTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.5:49844 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.5:49843 version: TLS 1.2
Source: unknownHTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.5:49940 version: TLS 1.2
Source: unknownHTTPS traffic detected: 35.190.26.57:443 -> 192.168.2.5:49944 version: TLS 1.2
Source: unknownHTTPS traffic detected: 54.73.67.72:443 -> 192.168.2.5:49946 version: TLS 1.2
Source: unknownHTTPS traffic detected: 151.101.13.51:443 -> 192.168.2.5:49991 version: TLS 1.2
Source: unknownHTTPS traffic detected: 151.101.0.65:443 -> 192.168.2.5:50060 version: TLS 1.2
Source: unknownHTTPS traffic detected: 45.92.42.1:443 -> 192.168.2.5:50061 version: TLS 1.2
Source: unknownHTTPS traffic detected: 68.142.70.14:443 -> 192.168.2.5:50224 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.53.99:443 -> 192.168.2.5:50222 version: TLS 1.2
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Local\Temp\41af2915-51f5-4897-bf38-828833c90425.tmpJump to behavior
Source: classification engineClassification label: mal56.win@34/201@59/34
Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "http://ny-t.r-tb.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1544,13023897823658162512,2227868781108129078,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1932 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1544,13023897823658162512,2227868781108129078,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=5072 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1544,13023897823658162512,2227868781108129078,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1932 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1544,13023897823658162512,2227868781108129078,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=5072 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Program Files\Google\Chrome\Application\DictionariesJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-61F9BEEF-17AC.pmaJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeAutomated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exeAutomated click: Run
Source: Window RecorderWindow detected: More than 3 window changes detected
Source: C:\Program Files\Google\Chrome\Application\chrome.exeDirectory created: C:\Program Files\Google\Chrome\Application\DictionariesJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeDirectory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdicJump to behavior

Mitre Att&ck Matrix

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
Valid AccountsWindows Management InstrumentationPath Interception1
Process Injection		3
Masquerading		OS Credential DumpingSystem Service DiscoveryRemote ServicesData from Local SystemExfiltration Over Other Network Medium2
Encrypted Channel		Eavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition
Default AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization Scripts1
Process Injection		LSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable MediaExfiltration Over Bluetooth3
Non-Application Layer Protocol		Exploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout
Domain AccountsAt (Linux)Logon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared DriveAutomated Exfiltration4
Application Layer Protocol		Exploit SS7 to Track Device LocationObtain Device Cloud BackupsDelete Device Data
Local AccountsAt (Windows)Logon Script (Mac)Logon Script (Mac)Binary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput CaptureScheduled Transfer3
Ingress Tool Transfer		SIM Card SwapCarrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 564184 URL: http://ny-t.r-tb.com/ Startdate: 01/02/2022 Architecture: WINDOWS Score: 56 22 www.cloudflare.com 2->22 24 testingcf.jsdelivr.net 2->24 26 20 other IPs or domains 2->26 38 Antivirus detection for URL or domain 2->38 40 Antivirus / Scanner detection for submitted sample 2->40 7 chrome.exe 13 277 2->7         started        signatures3 process4 dnsIp5 28 192.168.2.1 unknown unknown 7->28 30 239.255.255.250 unknown Reserved 7->30 16 C:\...\pnacl_public_x86_64_pnacl_sz_nexe, ELF 7->16 dropped 18 C:\...\pnacl_public_x86_64_pnacl_llc_nexe, ELF 7->18 dropped 20 C:\Users\user\...\pnacl_public_x86_64_ld_nexe, ELF 7->20 dropped 11 chrome.exe 150 7->11         started        14 chrome.exe 7->14         started        file6 process7 dnsIp8 32 cdnetworks.cedexis-test.com.wsoversea.com 163.171.156.28, 443, 49936, 50045 QUANTILNETWORKSUS European Union 11->32 34 713-xsc-918.mktoresp.com 192.28.144.124 OMNITUREUS United States 11->34 36 57 other IPs or domains 11->36

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
http://ny-t.r-tb.com/4%VirustotalBrowse
http://ny-t.r-tb.com/100%Avira URL Cloudphishing

Dropped Files

SourceDetectionScannerLabelLink
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe0%MetadefenderBrowse
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe0%ReversingLabs
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe0%MetadefenderBrowse
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe0%ReversingLabs
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe0%MetadefenderBrowse
C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe0%ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

SourceDetectionScannerLabelLink
http://ny-t.r-tb.com/cdn-cgi/styles/cf.errors.css100%Avira URL Cloudphishing
https://benchmark.1e100cdn.net0%URL Reputationsafe
http://ny-t.r-tb.com/cdn-cgi/images/icon-exclamation.png?1376755637100%Avira URL Cloudphishing
https://www.googleoptimize.com0%URL Reputationsafe
https://dns.google0%URL Reputationsafe
http://ny-t.r-tb.com/2$Suspected100%Avira URL Cloudphishing
https://www.google.com;0%Avira URL Cloudsafe
http://ny-t.r-tb.com/favicon.ico100%Avira URL Cloudphishing

Domains and IPs

Contacted Domains

NameIPActiveMaliciousAntivirus DetectionReputation
jsdelivr.map.fastly.net
151.101.1.229
truefalse
    		unknown
    dart.l.doubleclick.net
    		216.58.201.70
    		truefalse
      		high
      benchmark.1e100cdn.net
      		35.190.26.57
      		truefalse
        		unknown
        static.cloudflareinsights.com
        		104.16.95.65
        		truefalse
          		unknown
          tr.www.cloudflare.com
          		104.16.124.96
          		truefalse
            		high
            ajax.cloudflare.com
            		104.17.72.14
            		truefalse
              		high
              adservice.google.com
              		142.251.36.130
              		truefalse
                		high
                ny-t.r-tb.com
                		104.22.65.104
                		truefalse
                  		unknown
                  cedexis-1.s.llnwi.net
                  		68.142.70.14
                  		truefalse
                    		unknown
                    jsdelivr.b-cdn.net
                    		45.92.42.1
                    		truefalse
                      		high
                      serverless-benchmarks-js.compute-pipe.com
                      		188.114.97.7
                      		truefalse
                        		unknown
                        www.google.com
                        		142.251.36.132
                        		truefalse
                          		high
                          cs482.wpc.edgecastcdn.net
                          		192.229.220.19
                          		truefalse
                            		high
                            serverless-benchmarks-rust.compute-pipe.com
                            		188.114.97.7
                            		truefalse
                              		unknown
                              d1inq1x5xtur5k.cloudfront.net
                              		13.224.222.119
                              		truefalse
                                		high
                                ab13.mktossl.com
                                		104.17.73.206
                                		truefalse
                                  		unknown
                                  ecp.map.fastly.net
                                  		151.101.13.51
                                  		truefalse
                                    		unknown
                                    embed.videodelivery.net
                                    		104.17.23.75
                                    		truefalse
                                      		unknown
                                      pagead46.l.doubleclick.net
                                      		142.251.36.130
                                      		truefalse
                                        		high
                                        a.nel.cloudflare.com
                                        		35.190.80.1
                                        		truefalse
                                          		high
                                          accounts.google.com
                                          		142.251.36.77
                                          		truefalse
                                            		high
                                            stats.l.doubleclick.net
                                            		142.250.102.154
                                            		truefalse
                                              		high
                                              videodelivery.net
                                              		104.17.22.75
                                              		truefalse
                                                		unknown
                                                sentry.io
                                                		35.188.42.15
                                                		truefalse
                                                  		high
                                                  prod.cedexis-ssl.map.fastly.net
                                                  		151.101.0.65
                                                  		truefalse
                                                    		unknown
                                                    assets.www.cloudflare.com
                                                    		104.16.123.96
                                                    		truefalse
                                                      		high
                                                      www.googleoptimize.com
                                                      		142.251.36.78
                                                      		truefalse
                                                        		unknown
                                                        iframe.videodelivery.net
                                                        		104.17.22.75
                                                        		truefalse
                                                          		unknown
                                                          www.cloudflare.com
                                                          		104.16.123.96
                                                          		truefalse
                                                            		high
                                                            ptcfc.com
                                                            		104.16.53.99
                                                            		truefalse
                                                              		unknown
                                                              api.radar.cloudflare.com
                                                              		104.18.1.239
                                                              		truefalse
                                                                		high
                                                                clients.l.google.com
                                                                		142.251.36.142
                                                                		truefalse
                                                                  		high
                                                                  713-xsc-918.mktoresp.com
                                                                  		192.28.144.124
                                                                  		truefalse
                                                                    		unknown
                                                                    googlehosted.l.googleusercontent.com
                                                                    		172.217.23.193
                                                                    		truefalse
                                                                      		high
                                                                      adserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.com
                                                                      		54.73.67.72
                                                                      		truefalse
                                                                        		high
                                                                        www.google.ae
                                                                        		142.251.36.67
                                                                        		truefalse
                                                                          		high
                                                                          cdnetworks.cedexis-test.com.wsoversea.com
                                                                          		163.171.156.28
                                                                          		truefalse
                                                                            		unknown
                                                                            limelight-ssl.cedexis-test.com
                                                                            		unknown
                                                                            		unknownfalse
                                                                              		high
                                                                              d.adroll.com
                                                                              		unknown
                                                                              		unknownfalse
                                                                                		high
                                                                                carefully-rested-condor.edgecompute.app
                                                                                		unknown
                                                                                		unknownfalse
                                                                                  		unknown
                                                                                  testingcf.jsdelivr.net
                                                                                  		unknown
                                                                                  		unknownfalse
                                                                                    		high
                                                                                    stats.g.doubleclick.net
                                                                                    		unknown
                                                                                    		unknownfalse
                                                                                      		high
                                                                                      clients2.googleusercontent.com
                                                                                      		unknown
                                                                                      		unknownfalse
                                                                                        		high
                                                                                        clients2.google.com
                                                                                        		unknown
                                                                                        		unknownfalse
                                                                                          		high
                                                                                          partly-divine-monitor.edgecompute.app
                                                                                          		unknown
                                                                                          		unknownfalse
                                                                                            		unknown
                                                                                            ad.doubleclick.net
                                                                                            		unknown
                                                                                            		unknownfalse
                                                                                              		high
                                                                                              adservice.google.ae
                                                                                              		unknown
                                                                                              		unknownfalse
                                                                                                		high
                                                                                                munchkin.marketo.net
                                                                                                		unknown
                                                                                                		unknownfalse
                                                                                                  		unknown
                                                                                                  info.cloudflare.com
                                                                                                  		unknown
                                                                                                  		unknownfalse
                                                                                                    		high
                                                                                                    9309168.fls.doubleclick.net
                                                                                                    		unknown
                                                                                                    		unknownfalse
                                                                                                      		high
                                                                                                      vdms-ssl.cedexis-test.com
                                                                                                      		unknown
                                                                                                      		unknownfalse
                                                                                                        		high
                                                                                                        stackpath-map3.cedexis-test.com
                                                                                                        		unknown
                                                                                                        		unknownfalse
                                                                                                          		high
                                                                                                          fastly.jsdelivr.net
                                                                                                          		unknown
                                                                                                          		unknownfalse
                                                                                                            		high
                                                                                                            fastly.cedexis-test.com
                                                                                                            		unknown
                                                                                                            		unknownfalse
                                                                                                              		high
                                                                                                              cdnetworks.cedexis-test.com
                                                                                                              		unknown
                                                                                                              		unknownfalse
                                                                                                                		high
                                                                                                                p29.cedexis-test.com
                                                                                                                		unknown
                                                                                                                		unknownfalse
                                                                                                                  		high

                                                                                                                  Contacted URLs

                                                                                                                  NameMaliciousAntivirus DetectionReputation
                                                                                                                  https://9309168.fls.doubleclick.net/activityi;dc_pre=CPPH_MjY3vUCFacKBgAdC0gMuA;src=9309168;type=prici0;cat=us-pr0;ord=5246337112613;gtm=2yg1q0;auiddc=1855812276.1643757326;u1=2022%20Feb%2001%2015%3A15%3A38;u2=undefined;u3=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2F;u4=undefined;u10=undefined;~oref=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2F?false
                                                                                                                    		high
                                                                                                                    https://www.cloudflare.com/plans/#overviewfalse
                                                                                                                      		high
                                                                                                                      http://ny-t.r-tb.com/cdn-cgi/styles/cf.errors.csstrue
                                                                                                                      • Avira URL Cloud: phishing
                                                                                                                      		unknown
                                                                                                                      https://www.cloudflare.com/disclosure/false
                                                                                                                        		high
                                                                                                                        https://www.cloudflare.com/ssl/false
                                                                                                                          		high
                                                                                                                          http://ny-t.r-tb.com/cdn-cgi/images/icon-exclamation.png?1376755637true
                                                                                                                          • Avira URL Cloud: phishing
                                                                                                                          		unknown
                                                                                                                          http://ny-t.r-tb.com/true
                                                                                                                            		unknown
                                                                                                                            https://www.cloudflare.com/hp/false
                                                                                                                              		high
                                                                                                                              https://iframe.videodelivery.net/36e2ecf71363317a16bd2236dfa3b8b1?poster=https%3A%2F%2Fwww.cloudflare.com%2Fstatic%2Fd54759e4e89631c396f7741c5250b8fa%2Fimage_new-homepage_thumbnail_video_findlaw.jpg&preload=autotrue
                                                                                                                                		unknown
                                                                                                                                https://www.cloudflare.com/case-studies/false
                                                                                                                                  		high
                                                                                                                                  https://9309168.fls.doubleclick.net/activityi;dc_pre=CPCPlczY3vUCFfAhBgAd84oHXg;src=9309168;type=resou0;cat=us-re0;ord=1699083194691;gtm=2yg1q0;auiddc=1855812276.1643757326;u1=2022%20Feb%2001%2015%3A15%3A45;u2=undefined;u3=https%3A%2F%2Fwww.cloudflare.com%2Fcase-studies%2F;u4=undefined;u5=undefined;u6=undefined;u10=undefined;~oref=https%3A%2F%2Fwww.cloudflare.com%2Fcase-studies%2F?false
                                                                                                                                    		high
                                                                                                                                    https://www.cloudflare.com/trademark/false
                                                                                                                                      		high
                                                                                                                                      https://tr.www.cloudflare.com/ns.html?id=GTM-PKQFGQBfalse
                                                                                                                                        		high
                                                                                                                                        https://iframe.videodelivery.net/652f2749728df84fc32f9a6480438364?poster=https%3A%2F%2Fwww.cloudflare.com%2Fstatic%2F6c664e30bf2f38015fb61bd986a719c8%2Fthumbnail_stream_case-study_lendingtree.jpg&preload=autotrue
                                                                                                                                          		unknown
                                                                                                                                          https://iframe.videodelivery.net/e696e3b6be9ada0fc9e9674aedb54b17?poster=https%3A%2F%2Fwww.cloudflare.com%2Fstatic%2Fcd4f24ce8e7102f1250568b31eef4fc7%2Fimage_new-homepage_thumbnail_video_hubspot.jpg&preload=autotrue
                                                                                                                                            		unknown
                                                                                                                                            https://www.cloudflare.com/5xx-error-landing/false
                                                                                                                                              		high
                                                                                                                                              https://tr.www.cloudflare.com/gtm.js?id=GTM-PKQFGQBfalse
                                                                                                                                                		high
                                                                                                                                                http://ny-t.r-tb.com/true
                                                                                                                                                  		unknown
                                                                                                                                                  https://iframe.videodelivery.net/5efe5eca1517ad1a2f9ff3e75cc9cf5a?poster=https%3A%2F%2Fwww.cloudflare.com%2Fstatic%2F49e13a9372ad387fe3f96771e6783819%2Fthumbnail_stream_case-study_customer-video.jpg&preload=autotrue
                                                                                                                                                    		unknown
                                                                                                                                                    http://ny-t.r-tb.com/favicon.icotrue
                                                                                                                                                    • Avira URL Cloud: phishing
                                                                                                                                                    		unknown
                                                                                                                                                    NameSourceMaliciousAntivirus DetectionReputation
                                                                                                                                                    https://stats.g.doubleclick.net87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drfalse
                                                                                                                                                      		high
                                                                                                                                                      https://apis.google.com/js/client.jsmirroring_common.js.1.drfalse
                                                                                                                                                        		high
                                                                                                                                                        https://www.google.com/images/cleardot.gifcraw_window.js.1.drfalse
                                                                                                                                                          		high
                                                                                                                                                          https://crash.corp.google.com/samples?reportid=&q=common.js.1.dr, mirroring_cast_streaming.js.1.drfalse
                                                                                                                                                            		high
                                                                                                                                                            https://benchmark.1e100cdn.net87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drfalse
                                                                                                                                                            • URL Reputation: safe
                                                                                                                                                            		unknown
                                                                                                                                                            https://www.google.com/log?format=json&hasfast=truemirroring_hangouts.js.1.drfalse
                                                                                                                                                              		high
                                                                                                                                                              https://sandbox.google.com/payments/v4/js/integrator.jsmanifest.json0.1.dr, craw_window.js.1.drfalse
                                                                                                                                                                		high
                                                                                                                                                                http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01mirroring_hangouts.js.1.drfalse
                                                                                                                                                                  		high
                                                                                                                                                                  https://9309168.fls.doubleclick.net87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drfalse
                                                                                                                                                                    		high
                                                                                                                                                                    https://accounts.google.com/MergeSessioncraw_window.js.1.drfalse
                                                                                                                                                                      		high
                                                                                                                                                                      https://preprod-hangouts-googleapis.sandbox.google.commirroring_hangouts.js.1.drfalse
                                                                                                                                                                        		high
                                                                                                                                                                        https://www.google.com696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, manifest.json.1.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drfalse
                                                                                                                                                                          		high
                                                                                                                                                                          https://www.googleoptimize.com87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drfalse
                                                                                                                                                                          • URL Reputation: safe
                                                                                                                                                                          		unknown
                                                                                                                                                                          https://hangouts.clients6.google.commirroring_hangouts.js.1.drfalse
                                                                                                                                                                            		high
                                                                                                                                                                            https://meet.google.commirroring_common.js.1.drfalse
                                                                                                                                                                              		high
                                                                                                                                                                              https://hangouts.google.com/hangouts/_/logprefmirroring_hangouts.js.1.drfalse
                                                                                                                                                                                		high
                                                                                                                                                                                https://accounts.google.com696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, manifest.json.1.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drfalse
                                                                                                                                                                                  		high
                                                                                                                                                                                  https://clients2.google.com/cr/reportmirroring_hangouts.js.1.drfalse
                                                                                                                                                                                    		high
                                                                                                                                                                                    http://angularjs.organgular.js.1.drfalse
                                                                                                                                                                                      		high
                                                                                                                                                                                      https://creativecommons.org/publicdomain/zero/1.0/.mirroring_hangouts.js.1.drfalse
                                                                                                                                                                                        		high
                                                                                                                                                                                        https://github.com/angular/materialangular.js.1.dr, material_css_min.css.1.drfalse
                                                                                                                                                                                          		high
                                                                                                                                                                                          https://apis.google.com696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, manifest.json.1.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drfalse
                                                                                                                                                                                            		high
                                                                                                                                                                                            https://www.google.com/accounts/OAuthLogin?issueuberauth=1craw_window.js.1.drfalse
                                                                                                                                                                                              		high
                                                                                                                                                                                              https://github.com/madler/zlib/blob/master/zlib.hmirroring_hangouts.js.1.drfalse
                                                                                                                                                                                                		high
                                                                                                                                                                                                https://www-googleapis-staging.sandbox.google.comcraw_background.js.1.dr, craw_window.js.1.drfalse
                                                                                                                                                                                                  		high
                                                                                                                                                                                                  https://clients2.google.com696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drfalse
                                                                                                                                                                                                    		high
                                                                                                                                                                                                    https://www.cloudflare.com/5xx-error-landing/2History Provider Cache.1.drfalse
                                                                                                                                                                                                      		high
                                                                                                                                                                                                      https://www.google.com/tools/feedbackfeedback_script.js.1.drfalse
                                                                                                                                                                                                        		high
                                                                                                                                                                                                        http://www.apache.org/licenses/LICENSE-2.0mirroring_hangouts.js.1.drfalse
                                                                                                                                                                                                          		high
                                                                                                                                                                                                          https://dns.google696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.dr, c969abab-a3f1-4f19-81a5-e3c8ab3cb894.tmp.3.dr, 61ae7b3f-641b-4b4b-8fd6-fab4d52559d4.tmp.3.drfalse
                                                                                                                                                                                                          • URL Reputation: safe
                                                                                                                                                                                                          		unknown
                                                                                                                                                                                                          https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.pcraw_background.js.1.dr, craw_window.js.1.drfalse
                                                                                                                                                                                                            		high
                                                                                                                                                                                                            https://www.google.com/intl/en-US/chrome/blank.htmlcraw_background.js.1.drfalse
                                                                                                                                                                                                              		high
                                                                                                                                                                                                              https://ogs.google.com696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drfalse
                                                                                                                                                                                                                		high
                                                                                                                                                                                                                http://ny-t.r-tb.com/2$SuspectedHistory Provider Cache.1.drtrue
                                                                                                                                                                                                                • Avira URL Cloud: phishing
                                                                                                                                                                                                                		unknown
                                                                                                                                                                                                                https://support.google.com/chromecast/troubleshooter/2995236messages.json27.1.dr, messages.json83.1.dr, feedback.html.1.dr, messages.json80.1.dr, messages.json22.1.dr, messages.json73.1.dr, messages.json34.1.dr, messages.json10.1.dr, messages.json21.1.dr, messages.json3.1.dr, messages.json74.1.dr, messages.json9.1.dr, messages.json75.1.dr, messages.json85.1.dr, messages.json24.1.dr, messages.json4.1.dr, messages.json8.1.dr, messages.json87.1.dr, messages.json86.1.dr, messages.json44.1.dr, messages.json1.1.drfalse
                                                                                                                                                                                                                  		high
                                                                                                                                                                                                                  https://www.google.ae87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drfalse
                                                                                                                                                                                                                    		high
                                                                                                                                                                                                                    http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensionsmirroring_hangouts.js.1.drfalse
                                                                                                                                                                                                                      		high
                                                                                                                                                                                                                      https://payments.google.com/payments/v4/js/integrator.jsmanifest.json0.1.dr, craw_window.js.1.drfalse
                                                                                                                                                                                                                        		high
                                                                                                                                                                                                                        https://adservice.google.com87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drfalse
                                                                                                                                                                                                                          		high
                                                                                                                                                                                                                          https://www.google.com;manifest.json.1.drfalse
                                                                                                                                                                                                                          • Avira URL Cloud: safe
                                                                                                                                                                                                                          		low
                                                                                                                                                                                                                          https://chromium.googlesource.com/a/native_client/pnacl-llvm.gitpnacl_public_x86_64_libcrt_platform_a.1.drfalse
                                                                                                                                                                                                                            		high
                                                                                                                                                                                                                            https://hangouts.google.com/manifest.json.1.drfalse
                                                                                                                                                                                                                              		high
                                                                                                                                                                                                                              https://www.google.com/images/x2.gifcraw_window.js.1.drfalse
                                                                                                                                                                                                                                		high
                                                                                                                                                                                                                                http://llvm.org/):pnacl_public_x86_64_pnacl_sz_nexe.1.dr, pnacl_public_x86_64_pnacl_llc_nexe.1.drfalse
                                                                                                                                                                                                                                  		high
                                                                                                                                                                                                                                  https://ad.doubleclick.net87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drfalse
                                                                                                                                                                                                                                    		high
                                                                                                                                                                                                                                    https://www.google.com/images/dot2.gifcraw_window.js.1.drfalse
                                                                                                                                                                                                                                      		high
                                                                                                                                                                                                                                      https://meetings.clients6.google.commirroring_hangouts.js.1.drfalse
                                                                                                                                                                                                                                        		high
                                                                                                                                                                                                                                        https://play.google.com/log?format=json&hasfast=truemirroring_hangouts.js.1.drfalse
                                                                                                                                                                                                                                          		high
                                                                                                                                                                                                                                          https://code.google.com/p/nativeclient/issues/entry%s:pnacl_public_x86_64_ld_nexe.1.drfalse
                                                                                                                                                                                                                                            		high
                                                                                                                                                                                                                                            http://tools.ietf.org/html/rfc1950mirroring_hangouts.js.1.drfalse
                                                                                                                                                                                                                                              		high
                                                                                                                                                                                                                                              https://code.google.com/p/nativeclient/issues/entrypnacl_public_x86_64_ld_nexe.1.drfalse
                                                                                                                                                                                                                                                		high
                                                                                                                                                                                                                                                https://www.cloudflare.com/5xx-error-landing2History Provider Cache.1.drfalse
                                                                                                                                                                                                                                                  		high
                                                                                                                                                                                                                                                  https://support.google.com/chromecast/answer/2998456messages.json27.1.dr, messages.json83.1.dr, feedback.html.1.dr, messages.json80.1.dr, messages.json22.1.dr, messages.json73.1.dr, messages.json34.1.dr, messages.json10.1.dr, messages.json21.1.dr, messages.json3.1.dr, messages.json74.1.dr, messages.json9.1.dr, messages.json75.1.dr, messages.json85.1.dr, messages.json24.1.dr, messages.json4.1.dr, messages.json8.1.dr, messages.json87.1.dr, messages.json86.1.dr, messages.json44.1.dr, messages.json1.1.drfalse
                                                                                                                                                                                                                                                    		high
                                                                                                                                                                                                                                                    https://clients2.googleusercontent.com696e657a-f8aa-4b81-b040-5814fcb6632c.tmp.3.dr, 87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drfalse
                                                                                                                                                                                                                                                      		high
                                                                                                                                                                                                                                                      https://docs.google.commirroring_common.js.1.drfalse
                                                                                                                                                                                                                                                        		high
                                                                                                                                                                                                                                                        https://www.google.com/manifest.json0.1.drfalse
                                                                                                                                                                                                                                                          		high
                                                                                                                                                                                                                                                          https://feedback.googleusercontent.commanifest.json.1.drfalse
                                                                                                                                                                                                                                                            		high
                                                                                                                                                                                                                                                            https://chromium.googlesource.com/a/native_client/pnacl-clang.gitpnacl_public_x86_64_libcrt_platform_a.1.drfalse
                                                                                                                                                                                                                                                              		high
                                                                                                                                                                                                                                                              https://adservice.google.ae87477827-3fa1-4073-b293-905b38f3ed65.tmp.3.dr, 0a4a6058-d422-4703-be98-4574384b304f.tmp.3.drfalse
                                                                                                                                                                                                                                                                		high
                                                                                                                                                                                                                                                                https://clients2.google.com/service/update2/crxmanifest.json0.1.dr, manifest.json.1.dr, manifest.json1.1.drfalse
                                                                                                                                                                                                                                                                  		high
                                                                                                                                                                                                                                                                  https://clients6.google.commirroring_hangouts.js.1.drfalse
                                                                                                                                                                                                                                                                    		high

                                                                                                                                                                                                                                                                    World Map of Contacted IPs

                                                                                                                                                                                                                                                                    • No. of IPs < 25%
                                                                                                                                                                                                                                                                    • 25% < No. of IPs < 50%
                                                                                                                                                                                                                                                                    • 50% < No. of IPs < 75%
                                                                                                                                                                                                                                                                    • 75% < No. of IPs

                                                                                                                                                                                                                                                                    Public IPs

                                                                                                                                                                                                                                                                    IPDomainCountryFlagASNASN NameMalicious
                                                                                                                                                                                                                                                                    192.28.144.124
                                                                                                                                                                                                                                                                    		713-xsc-918.mktoresp.comUnited States
                                                                                                                                                                                                                                                                    		15224OMNITUREUSfalse
                                                                                                                                                                                                                                                                    104.16.53.99
                                                                                                                                                                                                                                                                    		ptcfc.comUnited States
                                                                                                                                                                                                                                                                    		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                                                    163.171.156.28
                                                                                                                                                                                                                                                                    		cdnetworks.cedexis-test.com.wsoversea.comEuropean Union
                                                                                                                                                                                                                                                                    		54994QUANTILNETWORKSUSfalse
                                                                                                                                                                                                                                                                    151.101.13.51
                                                                                                                                                                                                                                                                    		ecp.map.fastly.netUnited States
                                                                                                                                                                                                                                                                    		54113FASTLYUSfalse
                                                                                                                                                                                                                                                                    45.92.42.1
                                                                                                                                                                                                                                                                    		jsdelivr.b-cdn.netUnited Kingdom
                                                                                                                                                                                                                                                                    		200325BUNNYCDNDEfalse
                                                                                                                                                                                                                                                                    151.101.0.65
                                                                                                                                                                                                                                                                    		prod.cedexis-ssl.map.fastly.netUnited States
                                                                                                                                                                                                                                                                    		54113FASTLYUSfalse
                                                                                                                                                                                                                                                                    35.188.42.15
                                                                                                                                                                                                                                                                    		sentry.ioUnited States
                                                                                                                                                                                                                                                                    		15169GOOGLEUSfalse
                                                                                                                                                                                                                                                                    192.229.220.19
                                                                                                                                                                                                                                                                    		cs482.wpc.edgecastcdn.netUnited States
                                                                                                                                                                                                                                                                    		15133EDGECASTUSfalse
                                                                                                                                                                                                                                                                    104.17.73.206
                                                                                                                                                                                                                                                                    		ab13.mktossl.comUnited States
                                                                                                                                                                                                                                                                    		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                                                    142.251.36.78
                                                                                                                                                                                                                                                                    		www.googleoptimize.comUnited States
                                                                                                                                                                                                                                                                    		15169GOOGLEUSfalse
                                                                                                                                                                                                                                                                    142.251.36.77
                                                                                                                                                                                                                                                                    		accounts.google.comUnited States
                                                                                                                                                                                                                                                                    		15169GOOGLEUSfalse
                                                                                                                                                                                                                                                                    35.190.80.1
                                                                                                                                                                                                                                                                    		a.nel.cloudflare.comUnited States
                                                                                                                                                                                                                                                                    		15169GOOGLEUSfalse
                                                                                                                                                                                                                                                                    54.73.67.72
                                                                                                                                                                                                                                                                    		adserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.comUnited States
                                                                                                                                                                                                                                                                    		16509AMAZON-02USfalse
                                                                                                                                                                                                                                                                    104.22.65.104
                                                                                                                                                                                                                                                                    		ny-t.r-tb.comUnited States
                                                                                                                                                                                                                                                                    		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                                                    172.217.23.193
                                                                                                                                                                                                                                                                    		googlehosted.l.googleusercontent.comUnited States
                                                                                                                                                                                                                                                                    		15169GOOGLEUSfalse
                                                                                                                                                                                                                                                                    104.17.22.75
                                                                                                                                                                                                                                                                    		videodelivery.netUnited States
                                                                                                                                                                                                                                                                    		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                                                    104.16.124.96
                                                                                                                                                                                                                                                                    		tr.www.cloudflare.comUnited States
                                                                                                                                                                                                                                                                    		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                                                    104.16.95.65
                                                                                                                                                                                                                                                                    		static.cloudflareinsights.comUnited States
                                                                                                                                                                                                                                                                    		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                                                    104.17.72.14
                                                                                                                                                                                                                                                                    		ajax.cloudflare.comUnited States
                                                                                                                                                                                                                                                                    		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                                                    151.101.1.229
                                                                                                                                                                                                                                                                    		jsdelivr.map.fastly.netUnited States
                                                                                                                                                                                                                                                                    		54113FASTLYUSfalse
                                                                                                                                                                                                                                                                    142.251.36.132
                                                                                                                                                                                                                                                                    		www.google.comUnited States
                                                                                                                                                                                                                                                                    		15169GOOGLEUSfalse
                                                                                                                                                                                                                                                                    216.58.201.70
                                                                                                                                                                                                                                                                    		dart.l.doubleclick.netUnited States
                                                                                                                                                                                                                                                                    		15169GOOGLEUSfalse
                                                                                                                                                                                                                                                                    13.224.222.119
                                                                                                                                                                                                                                                                    		d1inq1x5xtur5k.cloudfront.netUnited States
                                                                                                                                                                                                                                                                    		16509AMAZON-02USfalse
                                                                                                                                                                                                                                                                    142.251.36.130
                                                                                                                                                                                                                                                                    		adservice.google.comUnited States
                                                                                                                                                                                                                                                                    		15169GOOGLEUSfalse
                                                                                                                                                                                                                                                                    188.114.97.7
                                                                                                                                                                                                                                                                    		serverless-benchmarks-js.compute-pipe.comEuropean Union
                                                                                                                                                                                                                                                                    		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                                                    68.142.70.14
                                                                                                                                                                                                                                                                    		cedexis-1.s.llnwi.netUnited States
                                                                                                                                                                                                                                                                    		22822LLNWUSfalse
                                                                                                                                                                                                                                                                    239.255.255.250
                                                                                                                                                                                                                                                                    		unknownReserved
                                                                                                                                                                                                                                                                    		unknownunknownfalse
                                                                                                                                                                                                                                                                    35.190.26.57
                                                                                                                                                                                                                                                                    		benchmark.1e100cdn.netUnited States
                                                                                                                                                                                                                                                                    		15169GOOGLEUSfalse
                                                                                                                                                                                                                                                                    104.18.1.239
                                                                                                                                                                                                                                                                    		api.radar.cloudflare.comUnited States
                                                                                                                                                                                                                                                                    		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                                                    142.250.102.154
                                                                                                                                                                                                                                                                    		stats.l.doubleclick.netUnited States
                                                                                                                                                                                                                                                                    		15169GOOGLEUSfalse
                                                                                                                                                                                                                                                                    104.17.23.75
                                                                                                                                                                                                                                                                    		embed.videodelivery.netUnited States
                                                                                                                                                                                                                                                                    		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                                                    104.16.123.96
                                                                                                                                                                                                                                                                    		assets.www.cloudflare.comUnited States
                                                                                                                                                                                                                                                                    		13335CLOUDFLARENETUSfalse

                                                                                                                                                                                                                                                                    Private

                                                                                                                                                                                                                                                                    IP
                                                                                                                                                                                                                                                                    192.168.2.1
                                                                                                                                                                                                                                                                    127.0.0.1

                                                                                                                                                                                                                                                                    General Information

                                                                                                                                                                                                                                                                    Joe Sandbox Version:34.0.0 Boulder Opal
                                                                                                                                                                                                                                                                    Analysis ID:564184
                                                                                                                                                                                                                                                                    Start date:01.02.2022
                                                                                                                                                                                                                                                                    Start time:15:13:56
                                                                                                                                                                                                                                                                    Joe Sandbox Product:CloudBasic
                                                                                                                                                                                                                                                                    Overall analysis duration:0h 8m 19s
                                                                                                                                                                                                                                                                    Hypervisor based Inspection enabled:false
                                                                                                                                                                                                                                                                    Report type:light
                                                                                                                                                                                                                                                                    Cookbook file name:browseurl.jbs
                                                                                                                                                                                                                                                                    Sample URL:http://ny-t.r-tb.com/
                                                                                                                                                                                                                                                                    Analysis system description:Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
                                                                                                                                                                                                                                                                    Number of analysed new started processes analysed:22
                                                                                                                                                                                                                                                                    Number of new started drivers analysed:0
                                                                                                                                                                                                                                                                    Number of existing processes analysed:0
                                                                                                                                                                                                                                                                    Number of existing drivers analysed:0
                                                                                                                                                                                                                                                                    Number of injected processes analysed:0
                                                                                                                                                                                                                                                                    Technologies:
                                                                                                                                                                                                                                                                    • HCA enabled
                                                                                                                                                                                                                                                                    • EGA enabled
                                                                                                                                                                                                                                                                    • HDC enabled
                                                                                                                                                                                                                                                                    • AMSI enabled
                                                                                                                                                                                                                                                                    Analysis Mode:default
                                                                                                                                                                                                                                                                    Analysis stop reason:Timeout
                                                                                                                                                                                                                                                                    Detection:MAL
                                                                                                                                                                                                                                                                    Classification:mal56.win@34/201@59/34
                                                                                                                                                                                                                                                                    EGA Information:Failed
                                                                                                                                                                                                                                                                    HDC Information:Failed
                                                                                                                                                                                                                                                                    HCA Information:
                                                                                                                                                                                                                                                                    • Successful, ratio: 100%
                                                                                                                                                                                                                                                                    • Number of executed functions: 0
                                                                                                                                                                                                                                                                    • Number of non-executed functions: 0
                                                                                                                                                                                                                                                                    Cookbook Comments:
                                                                                                                                                                                                                                                                    • Adjust boot time
                                                                                                                                                                                                                                                                    • Enable AMSI
                                                                                                                                                                                                                                                                    • Browse: https://www.cloudflare.com/5xx-error-landing
                                                                                                                                                                                                                                                                    • Browse: https://www.cloudflare.com/
                                                                                                                                                                                                                                                                    • Browse: https://www.cloudflare.com/ssl/
                                                                                                                                                                                                                                                                    • Browse: https://www.cloudflare.com/plans/
                                                                                                                                                                                                                                                                    • Browse: https://www.cloudflare.com/case-studies/
                                                                                                                                                                                                                                                                    • Browse: https://www.cloudflare.com/disclosure/
                                                                                                                                                                                                                                                                    • Browse: https://www.cloudflare.com/trademark/
                                                                                                                                                                                                                                                                    • Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
                                                                                                                                                                                                                                                                    • TCP Packets have been reduced to 100
                                                                                                                                                                                                                                                                    • Created / dropped Files have been reduced to 100
                                                                                                                                                                                                                                                                    • Excluded IPs from analysis (whitelisted): 23.54.113.53, 142.251.36.131, 142.251.36.142, 173.194.182.73, 34.104.35.123, 151.139.128.10, 23.10.249.122, 23.10.249.99, 2.21.22.169, 2.21.22.160, 104.16.85.20, 104.16.87.20, 104.16.88.20, 104.16.86.20, 104.16.89.20, 142.251.36.67, 104.89.28.179, 40.112.88.60, 142.251.37.106, 216.58.201.74, 142.251.36.74, 142.251.36.138, 20.54.104.15, 20.54.7.98
                                                                                                                                                                                                                                                                    • Excluded domains from analysis (whitelisted): testingcf.jsdelivr.net.cdn.cloudflare.net, store-images.s-microsoft.com-c.edgekey.net, clientservices.googleapis.com, e10776.b.akamaiedge.net, r4.sn-4g5e6ns7.gvt1.com, cds.x7t9n8c4.hwcdn.net, arc.msn.com, wildcard.marketo.net.edgekey.net, consumerrp-displaycatalog-aks2eap-europe.md.mp.microsoft.com.akadns.net, e12564.dspb.akamaiedge.net, essl-cdxs.edgekey.net, e31668.a.akamaiedge.net, redirector.gvt1.com, cedexis-test.akamaized.net, update.googleapis.com, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, www.gstatic.com, r4---sn-4g5e6ns7.gvt1.com, client.wns.windows.com, fs.microsoft.com, displaycatalog-rp-europe.md.mp.microsoft.com.akadns.net, ris-prod.trafficmanager.net, geo.cdxswitch.akadns.net, asf-ris-prod-neu.northeurope.cloudapp.azure.com, www.googleapis.com, consumerrp-displaycatalog-aks2aks-europe.md.mp.microsoft.com.akadns.net, cedexis-ssl.wpc.apr-b30d.edgecastdns.net, ris.api.iris.microsoft.com, edgedl.me.gvt1.com, store-imag
                                                                                                                                                                                                                                                                    • Not all processes where analyzed, report is missing behavior information
                                                                                                                                                                                                                                                                    • Report size exceeded maximum capacity and may have missing network information.
                                                                                                                                                                                                                                                                    • Report size getting too big, too many NtCreateFile calls found.
                                                                                                                                                                                                                                                                    • Report size getting too big, too many NtOpenFile calls found.
                                                                                                                                                                                                                                                                    • Report size getting too big, too many NtSetInformationFile calls found.
                                                                                                                                                                                                                                                                    • Report size getting too big, too many NtWriteVirtualMemory calls found.

                                                                                                                                                                                                                                                                    Simulations

                                                                                                                                                                                                                                                                    Behavior and APIs

                                                                                                                                                                                                                                                                    ⊘No simulations

                                                                                                                                                                                                                                                                    Joe Sandbox View / Context

                                                                                                                                                                                                                                                                    IPs

                                                                                                                                                                                                                                                                    ⊘No context

                                                                                                                                                                                                                                                                    Domains

                                                                                                                                                                                                                                                                    ⊘No context

                                                                                                                                                                                                                                                                    ASNs

                                                                                                                                                                                                                                                                    ⊘No context

                                                                                                                                                                                                                                                                    JA3 Fingerprints

                                                                                                                                                                                                                                                                    ⊘No context

                                                                                                                                                                                                                                                                    Dropped Files

                                                                                                                                                                                                                                                                    ⊘No context

                                                                                                                                                                                                                                                                    Created / dropped Files

                                                                                                                                                                                                                                                                    C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:data
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):451603
                                                                                                                                                                                                                                                                    Entropy (8bit):5.009711072558331
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12288:ZHfRTyGZ6lup8Cfrvq4JBPKh+FBlESBw4p6:NfOCzvRKhGvwJ
                                                                                                                                                                                                                                                                    MD5:A78AD14E77147E7DE3647E61964C0335
                                                                                                                                                                                                                                                                    SHA1:CECC3DD41F4CEA0192B24300C71E1911BD4FCE45
                                                                                                                                                                                                                                                                    SHA-256:0D6803758FF8F87081FAFD62E90F0950DFB2DD7991E9607FE76A8F92D0E893FA
                                                                                                                                                                                                                                                                    SHA-512:DDE24D5AD50D68FC91E9E325D31E66EF8F624B6BB3A07D14FFED1104D3AB5F4EF1D7969A5CDE0DFBB19CB31C506F7DE97AF67C2F244F7E7E8E10648EA8321101
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:BDic.... ....6...."..Z..4g....6.2...{/...3...5....AF 1363.AF nm.AF pt.AF n1.AF p.AF tc.AF SM.AF M.AF S.AF MS.AF MNR.AF GDS.AF MNT.AF MH.AF MR.AF SZMR.AF MJ.AF MT.AF MY.AF MRZ.AF MN.AF MG.AF RM.AF N.AF MV.AF XM.AF DSM.AF SD.AF G.AF R.AF MNX.AF MRS.AF MD.AF MNRB.AF B.AF ZSMR.AF PM.AF SMNGJ.AF SMN.AF ZMR.AF SMGB.AF MZR.AF GM.AF SMR.AF SMDG.AF RMZ.AF ZM.AF MDG.AF MDT.AF SMNXT.AF SDY.AF LSDG.AF LGDS.AF GLDS.AF UY.AF U.AF DSGNX.AF GNDSX.AF DSG.AF Y.AF GS.AF IEMS.AF YP.AF ZGDRS.AF XGNVDS.AF UT.AF GNDS.AF GVDS.AF MYPS.AF XGNDS.AF TPRY.AF MDSG.AF ZGSDR.AF DYSG.AF PMYTNS.AF AGDS.AF DRZGS.AF PY.AF GSPMDY.AF EGVDS.AF SL.AF GNXDS.AF DSBG.AF IM.AF I.AF MDGS.AF SMY.AF DSGN.AF DSLG.AF GMDS.AF MDSBG.AF SGD.AF IY.AF P.AF DSMG.AF BLZGDRS.AF TR.AF AGSD.AF ZGBDRSL.AF PTRY.AF ASDGV.AF ASM.AF ICANGSD.AF ICAM.AF IKY.AF AMS.AF PMYTRS.AF BZGVDRS.AF SDRBZG.AF GVMDS.AF PSM.AF DGLS.AF GNVXDS.AF AGDSL.AF DGS.AF XDSGNV.AF BZGDRS.AF AM.AF AS.AF A.AF LDSG.AF AGVDS.AF SDG.AF LDSMG.AF EDSMG.AF EY.AF DRSMZG.AF PRYT.AF LZ

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\099695c3-6035-4124-a6b1-6f136b73835e.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):389409
                                                                                                                                                                                                                                                                    Entropy (8bit):6.014505856367536
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6144:sQLGSTXsYPlzTFEIm8Acx6ZaurE5/EDnJpAl9SeefNqWF4iVx/9LPeq/1LHm/dBD:sQxDJdzTFEsxzurRDn9nfNxF4ijZVtiX
                                                                                                                                                                                                                                                                    MD5:467DBC1CCDDD4743715056743551486C
                                                                                                                                                                                                                                                                    SHA1:12A99E43DB0BCA59E19794218D741B54F6FBE7C4
                                                                                                                                                                                                                                                                    SHA-256:6D3F421F36D3D3A608A27629F68F68B13A85870FECBDAD95D29805A7152AE801
                                                                                                                                                                                                                                                                    SHA-512:E10E69CCC9FC0648D4DF2476067F580CE0E4407CB0D6AA099BD377AA97CB6D7A9454F9C12A935F519437F0913A33C210D9B2946095E7098A1A2A7E4F0F246EEE
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643757298223905e+12,"network":1.643724899e+12,"ticks":117203742.0,"uncertainty":3353517.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABUPWY4cSyAQZRX3j8/SLmMAAAAAAIAAAAAABBmAAAAAQAAIAAAACC7lwCjByxIY/Ds1S6cdCxJW6iSr1QfjoKlVKoVEQ4EAAAAAA6AAAAAAgAAIAAAAD9PMfiGkWkdrfU+zeMpOLPS1eDxLpcgjYP2R/ndeCNxMAAAAK+RpovfP61NtB5nOpQgPMjPTyt2T1WPeru9i3yP05zNVEj0uCRDWfONruG9ricX1kAAAADB9KtQ9KY2z38GdfaF7dW2ZLcAMHOX2oEKBg8ZJG9lsuMexxChB4M8HFpyb0Bpr6axpi+zmMIXt76noTOxFzKN"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245950075485715"},"policy":{"last_statistics_update":"13288230896157

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\19a56dee-9088-43e7-9ed3-476166115f4f.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:SysEx File -
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):94708
                                                                                                                                                                                                                                                                    Entropy (8bit):3.7490635095476
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:384:B7DQU2l3uROYV9/EbNYrxvUw3LY+DHebG/Crty0mxbi6uNrJAmtaBiogkLOWCoNE:x2iFZG27z4ejKMmg/LaIKyYUFs
                                                                                                                                                                                                                                                                    MD5:D96F25A6C8425938BD321F6808695BB9
                                                                                                                                                                                                                                                                    SHA1:803E648400101955AE3D15AD11A92514AF56BAAD
                                                                                                                                                                                                                                                                    SHA-256:F7D209545D50F7BA17DAFF4043737BDF37C842FC926B8BE50EF8EE362A98E017
                                                                                                                                                                                                                                                                    SHA-512:CD3F0EBD7F67F2F5DF6740C3C8025D15F321B54BD152CF7F181CA4414FB1D9ECEF34B67FC137481E338F170AF4DE3EEEF2DC5A1F42610BADF45C9A8B7B808B56
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:.q..............*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6...*...M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....R8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\2b477162-4e57-43f3-970d-2b76389e302f.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):389408
                                                                                                                                                                                                                                                                    Entropy (8bit):6.014505244478799
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6144:1QLGSTXsYPlzTFEIm8Acx6ZaurE5/EDnJpAl9SeefNqWF4iVx/9LPeq/1LHm/dBD:1QxDJdzTFEsxzurRDn9nfNxF4ijZVtiX
                                                                                                                                                                                                                                                                    MD5:4C4306CB8E7BAC96272743F6844206B6
                                                                                                                                                                                                                                                                    SHA1:FA943D65EB787436F2C8E8752164D5FBF0903D93
                                                                                                                                                                                                                                                                    SHA-256:9BF947C6E5FFBBACD7F057A84325330E52E50B98A192D13AA0AD0BC8FFAF2624
                                                                                                                                                                                                                                                                    SHA-512:CEF764E150BAF2258BA1BDE46F53FE2ED8761CCC867277FC44AAB42CED62864EFA865935F63D038BFA6A0F1F6017E10394174319BF3609497C3C2BB4785FC18B
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643757298223905e+12,"network":1.643724899e+12,"ticks":117203742.0,"uncertainty":3353517.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABUPWY4cSyAQZRX3j8/SLmMAAAAAAIAAAAAABBmAAAAAQAAIAAAACC7lwCjByxIY/Ds1S6cdCxJW6iSr1QfjoKlVKoVEQ4EAAAAAA6AAAAAAgAAIAAAAD9PMfiGkWkdrfU+zeMpOLPS1eDxLpcgjYP2R/ndeCNxMAAAAK+RpovfP61NtB5nOpQgPMjPTyt2T1WPeru9i3yP05zNVEj0uCRDWfONruG9ricX1kAAAADB9KtQ9KY2z38GdfaF7dW2ZLcAMHOX2oEKBg8ZJG9lsuMexxChB4M8HFpyb0Bpr6axpi+zmMIXt76noTOxFzKN"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245950075265799"},"policy":{"last_statistics_update":"13288230896157

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\33a70f25-d5bd-4f8e-8abc-1406591bebc6.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:data
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):92724
                                                                                                                                                                                                                                                                    Entropy (8bit):3.748426989580152
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:384:H7DQU2l3qOJEbNYrxvUw3LY+DHebG/Crty0mxbi6uNrJAmtaBiogkLOWCoNh1oxo:1iFZG27z4ejKMmg/LaIKyYUFF
                                                                                                                                                                                                                                                                    MD5:56BC2A58EF1915717135593F151C7F68
                                                                                                                                                                                                                                                                    SHA1:07AB51011755A00A28F8410FDB8F9187FD74220D
                                                                                                                                                                                                                                                                    SHA-256:92FB9D43F860BC0696A8628B2D90C7C36A3AB7EA93DEB577D40DAF929859594E
                                                                                                                                                                                                                                                                    SHA-512:B642F9364C25AD7AB09F7699F98F386057FAB9B8ECDD64D5955CD63BC6CA40F5CAE4877609098D767D81531B7DCB030F11F1E298F2DCF4CADF6E66DBA106AAA3
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:0j..............*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6...*...M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....R8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\4534a1f8-d36d-451d-973a-90a1320a3fb5.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:data
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):95428
                                                                                                                                                                                                                                                                    Entropy (8bit):3.7486699833983868
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:384:x7DQU2l3uROYV9/EbNYrxvUw3LY+DHebG/Crty0mxbi6uNrJAmtB/BiogkLOWCoX:B2iFZG20z4ejKMmg/LaIKyYUFp
                                                                                                                                                                                                                                                                    MD5:2A7F7A2AE27ABCED8AF99BCD7DC06316
                                                                                                                                                                                                                                                                    SHA1:BDE9439BB4680AC9889E07987BF3F64562A6663B
                                                                                                                                                                                                                                                                    SHA-256:62BB19C3CA80D0AF2C607EE24789E47BD2C7FC7BD943109C76A9A227015BCAC5
                                                                                                                                                                                                                                                                    SHA-512:56F379C7CFE881FF2568B2AAE0159E0B0C8ABA3A05672B5BD31959CA2961A703369CEC1E02FECCBDA9DA6A5DE7407D39768561ACE4546E25955DBA7F4842416E
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:.t..............*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6...*...M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....R8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\679a509e-476c-4930-bb34-ac639f894c4c.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):389409
                                                                                                                                                                                                                                                                    Entropy (8bit):6.014505817777632
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6144:/QLGSTXsYPlzTFEIm8Acx6ZaurE5/EDnJpAl9SeefNqWF4iVx/9LPeq/1LHm/dBD:/QxDJdzTFEsxzurRDn9nfNxF4ijZVtiX
                                                                                                                                                                                                                                                                    MD5:6D9F3BF9E2788891180EA3AF7AA721C0
                                                                                                                                                                                                                                                                    SHA1:36EBF2A247B670BA91B550C526C942E66F0DC49E
                                                                                                                                                                                                                                                                    SHA-256:3624CCB501E21D58C7784EC25BDE5440AAFA37981F535C39D8C72B8939367F36
                                                                                                                                                                                                                                                                    SHA-512:5204ED4603F9D65F02146BF4B87C12D8CDB48D5648A90DED8F6FC36AD77CE2EC3F779989D5D3D61F6EAEE0F01186C7BFCAC0E6541601FEF3692589403756D137
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643757298223905e+12,"network":1.643724899e+12,"ticks":117203742.0,"uncertainty":3353517.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABUPWY4cSyAQZRX3j8/SLmMAAAAAAIAAAAAABBmAAAAAQAAIAAAACC7lwCjByxIY/Ds1S6cdCxJW6iSr1QfjoKlVKoVEQ4EAAAAAA6AAAAAAgAAIAAAAD9PMfiGkWkdrfU+zeMpOLPS1eDxLpcgjYP2R/ndeCNxMAAAAK+RpovfP61NtB5nOpQgPMjPTyt2T1WPeru9i3yP05zNVEj0uCRDWfONruG9ricX1kAAAADB9KtQ9KY2z38GdfaF7dW2ZLcAMHOX2oEKBg8ZJG9lsuMexxChB4M8HFpyb0Bpr6axpi+zmMIXt76noTOxFzKN"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245950075265799"},"policy":{"last_statistics_update":"13288230896157

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\7973fe94-1984-4a9a-bee9-a599d288ad2b.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):392981
                                                                                                                                                                                                                                                                    Entropy (8bit):6.026417052953649
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6144:kQLGSTXsYPlzTFEIm8Acx6ZaurE5/EDnJpAl9SeefNqWF4iVx/9LPeq/1LHm/dBD:kQxDJdzTFEsxzurRDn9nfNxF4ijZVtiX
                                                                                                                                                                                                                                                                    MD5:853C297E5A6DECE16B6A29B77543E9AC
                                                                                                                                                                                                                                                                    SHA1:582B3F66CDF9B2F0E26A436A97AFF9F0CB72DBC8
                                                                                                                                                                                                                                                                    SHA-256:D1A4D4D076D234D82C1B33C8A6E7D1A67DBACCF48140B4862E352568145C8776
                                                                                                                                                                                                                                                                    SHA-512:367D76B7A3007E75A1CC744ABE0A37C0CD3ACE32D17D342A835DCA78296294E2422B91C3FD157F74C543A9EFD58C08C4E354D78FAF235605CBAF12A068D071AB
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643757298223905e+12,"network":1.643724899e+12,"ticks":117203742.0,"uncertainty":3353517.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABUPWY4cSyAQZRX3j8/SLmMAAAAAAIAAAAAABBmAAAAAQAAIAAAACC7lwCjByxIY/Ds1S6cdCxJW6iSr1QfjoKlVKoVEQ4EAAAAAA6AAAAAAgAAIAAAAD9PMfiGkWkdrfU+zeMpOLPS1eDxLpcgjYP2R/ndeCNxMAAAAK+RpovfP61NtB5nOpQgPMjPTyt2T1WPeru9i3yP05zNVEj0uCRDWfONruG9ricX1kAAAADB9KtQ9KY2z38GdfaF7dW2ZLcAMHOX2oEKBg8ZJG9lsuMexxChB4M8HFpyb0Bpr6axpi+zmMIXt76noTOxFzKN"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245950075485715"},"plugins":{"metadata":{"adobe-flash-player":{"disp

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:data
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):40
                                                                                                                                                                                                                                                                    Entropy (8bit):3.3041625260016576
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3:FkXYDu6cR9n:+Y66cR9
                                                                                                                                                                                                                                                                    MD5:7A9D405E9218ED86C7ED3BB729DAA896
                                                                                                                                                                                                                                                                    SHA1:E5BB69E833231B755B20E5A0C9B2392D8B923C66
                                                                                                                                                                                                                                                                    SHA-256:D83D002DFE4F96C43A6FBF24FC7AA739945731ABDEC2AFB53EDDCE2D2D87D6AF
                                                                                                                                                                                                                                                                    SHA-512:F34290BF6A4B1AA63F47436C0788FC1DAC7B970A1861EF1D1891826FD3DFD0FD484A900E23A3024C19CA93DE842BF8B5BC7A5E159362A4C3A36AE8D47C8551A7
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:sdPC.....................8...?E."..N_.

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0a4a6058-d422-4703-be98-4574384b304f.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):3876
                                                                                                                                                                                                                                                                    Entropy (8bit):4.914821429032005
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:96:JxOTCXDHztKNebrYcZ6V9FE9fPKG2GGYGMDGe8GawGMUxhVD:JxOTCXDHztKNeb8cZ6Vg9fPK5hYZDj8J
                                                                                                                                                                                                                                                                    MD5:D2BE421678FCFF67371BCB6271D1F1F0
                                                                                                                                                                                                                                                                    SHA1:53C061633A1F8706520C36B0A99AB2EC563EA374
                                                                                                                                                                                                                                                                    SHA-256:E1E2BD2D1C0C8930395D6497A12786C385FF1BDC53E5D4A30B1D2965BD5C7648
                                                                                                                                                                                                                                                                    SHA-512:2C4B4DB1200E1A14D3840186F80B3D94AFB1C78D79E33350B77D6DEAAB8737754457F0F42336C775DFDF40428E2EA498D7C0EBA1C9B45DB8D3D91A0255823713
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://fonts.googleapis.com","supports_spdy":true},{"isolation":[],"server":"https://ssl.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://www.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://fonts.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://apis.google.com","supports_spdy":true},{"isolation":[],"server":"https://ogs.google.com","supports_spdy":true},{"isolation":[],"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13290822899162371","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://redirector.gvt1.com"},{"alternative_service":[{"advertised_versions":[50],"expiration":"13290822899197548","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://accounts.google.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"132908

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\165a8378-f10d-4a9e-9dee-1dfccada9f20.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):16745
                                                                                                                                                                                                                                                                    Entropy (8bit):5.577976703386908
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:384:0KLt4Ll//Xt1kXqKf/pUZNCgVLH2HfDDrUPcDRV43c:8Llnt1kXqKf/pUZNCgVLH2HffrUPcdVn
                                                                                                                                                                                                                                                                    MD5:67E4F1AFD089396E8092B83633D6F956
                                                                                                                                                                                                                                                                    SHA1:E8C14CB23182D5EC0ECFBCAB7F4AA543778C168F
                                                                                                                                                                                                                                                                    SHA-256:A4EF58C7ACF63B22D27EC4692CE0335D25F42C7BF8DD7D5F128D6C388E5A2D50
                                                                                                                                                                                                                                                                    SHA-512:9463F168B6FE2A12FAEF41AA65D2C150F20869C8E15D58FA24A9F91D3906C6CA1AF2FDE611B883660A6FA24AB0C682EC8FA162410FA551D5A1FBB23F7994FA21
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13288230896444832","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\29335cdd-86d6-4f3d-8413-57382d2e0536.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):19182
                                                                                                                                                                                                                                                                    Entropy (8bit):5.570761164463218
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:384:0KLttLl//Xt1kXqKf/pUZNCgVLH2HfDDrU6HGi/pV4W:5Llnt1kXqKf/pUZNCgVLH2HffrUKGiRj
                                                                                                                                                                                                                                                                    MD5:4AA359C300EF3831FBF3DB1D19FED196
                                                                                                                                                                                                                                                                    SHA1:C78592099A49B7B75CA83DDABDA207E009DBF012
                                                                                                                                                                                                                                                                    SHA-256:847C83EF2A5E036C39413F321DED5BA041D38B2547E22753BE01F93DF32ED68F
                                                                                                                                                                                                                                                                    SHA-512:2E1A81BCF725D5A75D6924B5557C081244D148A0C5C02E767A372DCC6C49B253825AEC3A0D1F70454668D9278DD3246D92EDD0991E54CE342A3794D2C6742E79
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13288230896444832","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4ab450bc-7dd4-4bb0-8095-5117ef8a74ed.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):5108
                                                                                                                                                                                                                                                                    Entropy (8bit):4.96875778810328
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:96:nMrORG9pSKIlIk0JCKL8/3hkAS11+bOTQVuwn:nMr59pSbC4Kkkfc
                                                                                                                                                                                                                                                                    MD5:B035D75AAE9531383D3CCAF4D17E4B21
                                                                                                                                                                                                                                                                    SHA1:4283591068629B0C7E6A6F40E1F64644ABA98AA6
                                                                                                                                                                                                                                                                    SHA-256:74DE9FB67B15111846205BE26050367FBD54DDB4D7776B6F538B8240DFCB60DF
                                                                                                                                                                                                                                                                    SHA-512:6AFF0D1BC32911425C3CC29F4133A02DD400EDD9209BFE9F32A186F5BF37CB827B294EE8DD70485F67AB7FCAC82693BDBC58CC797448CCF50D718608DABC6A85
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"account_id_migration_state":2,"account_tracker_service_last_update":"13288230897029381","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245950583260338","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245950640095768","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","1538886"],"daily_received_length":["0","0","0","0","0","0","0","

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4fea363e-f686-46a5-a814-74d8dcd5abac.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):6050
                                                                                                                                                                                                                                                                    Entropy (8bit):5.180361646219473
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:96:nMr+Z8H9TW0SKIxIk0JCKL8/3hkAS14k3d/5bOTQVuwn:nMrX9TW0STC4Kkkfqk3H
                                                                                                                                                                                                                                                                    MD5:E295731EE7699EED632576E09A15AE36
                                                                                                                                                                                                                                                                    SHA1:478B6A3844D17DE9AE25F5D86CED6CA70ACDD62B
                                                                                                                                                                                                                                                                    SHA-256:421BB33E6831B7A8E95FEC0E0113CF08E70EDE95B73283EB320A185B0D899C8F
                                                                                                                                                                                                                                                                    SHA-512:4E409E5BC9B290D449A1EDFFA4E25E24CA9ED731DD197EC2FE85D7134152D6691C2EF257FD6B4870E01564388B920EE48C5EE698A17EA5F666EC974C9517D536
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"account_id_migration_state":2,"account_tracker_service_last_update":"13288230897029381","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245950583260338","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245950640095768","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","1538886"],"daily_received_length":["0","0","0","0","0","0","0","

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\515409e7-6b24-47c4-b784-0832b2cdb72f.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):5201
                                                                                                                                                                                                                                                                    Entropy (8bit):4.977764895973751
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:96:nMr+ZVH9pSKIxIk0JCKL8/3hkAS11IbOTQVuwn:nMrW9pSTC4KkkfK
                                                                                                                                                                                                                                                                    MD5:E9C391BDD33BF318945E76C3D59812B2
                                                                                                                                                                                                                                                                    SHA1:3E60A4D47F69517591400B1EA82BDB25577668C6
                                                                                                                                                                                                                                                                    SHA-256:58B6FDE456C32AF6F5C6263F04715B8134C6ADE4892430F86ED8479C1EBADFCD
                                                                                                                                                                                                                                                                    SHA-512:0562F2370BD705B575A4AF1B2E1D8E382AFA00A7ED417EE63CBD52148DFBB5F1CC4E2F8BD45BC63D2AD7E8DCB39E978293E89AACBEDA3FFA8C7DD8021551F74A
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"account_id_migration_state":2,"account_tracker_service_last_update":"13288230897029381","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245950583260338","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245950640095768","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","1538886"],"daily_received_length":["0","0","0","0","0","0","0","

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\53a21b2a-3951-4c03-b07b-f1159639f252.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):17092
                                                                                                                                                                                                                                                                    Entropy (8bit):5.583624077948589
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:384:0KLttLl//Xt1kXqKf/pUZNCgVLH2HfDDrUj/7V4G:5Llnt1kXqKf/pUZNCgVLH2HffrUjzV5
                                                                                                                                                                                                                                                                    MD5:49DA149C00C8415A0503201EC483FEDF
                                                                                                                                                                                                                                                                    SHA1:0B47AB78B4C23E67EE2C25E05D7B24785F93803A
                                                                                                                                                                                                                                                                    SHA-256:3375433B409B5A63C3DDEDEF4BF099962672419A8BD8627EAFD5D8D768DC77E8
                                                                                                                                                                                                                                                                    SHA-512:9D22E8ECA62CBB1F0932067E55188A62E1EB070609553FC015ACBCF9E77C171465CE3AA457DD0C75C2910301326612473A91D18BF59D820250F30D55656D24A1
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13288230896444832","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\696e657a-f8aa-4b81-b040-5814fcb6632c.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):2693
                                                                                                                                                                                                                                                                    Entropy (8bit):4.871599185186076
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:48:YXs2MHRzsoMHT5s0MHyKsTMHksrDys4Csb7synWsQItFsym6zs6zMHWLsZMH5YhV:+GDGTHGmGHDW1/nOIbmOGlGGhVD
                                                                                                                                                                                                                                                                    MD5:829D5654ADF098AD43036E24C47F2A94
                                                                                                                                                                                                                                                                    SHA1:506C8BA397509BA0357787950C538C1879047DF3
                                                                                                                                                                                                                                                                    SHA-256:4D0B852D18FCA5C1A712904CF6DB3811FB905E86D8A7508A2D42F9C8D68E2211
                                                                                                                                                                                                                                                                    SHA-512:D9B18E6B0AD1E8E4BECF9E84BBE30D64730CFEC2CBEAF96D5DF52E28B907B03EADF22F020FBE0A56D137A52F4F09798031BC6CA026CFA8A979A608B3445DBCAA
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[],"expiration":"13248542600883925","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":40156},"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248542628822803","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":30856},"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248542600893104","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":25300},"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248542600872791","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":34789},"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"exp

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6d287a92-e8b8-4b3c-8074-c7822327e98d.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):5109
                                                                                                                                                                                                                                                                    Entropy (8bit):4.968703615528303
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:96:nMr+ZgH9pSKI2Ik0JCKL8/3hkAS11+bOTQVuwn:nMrT9pSQC4Kkkfc
                                                                                                                                                                                                                                                                    MD5:4ED4F8C38C9DFFEF5DF83B6BEF9FCC31
                                                                                                                                                                                                                                                                    SHA1:0D8545A7C53523D26039D79745003A32C545B91A
                                                                                                                                                                                                                                                                    SHA-256:9914350F9053193C9E676B26E60FB854E1A4FB438EE3957298499D1DEE20705D
                                                                                                                                                                                                                                                                    SHA-512:3E48302F081C9C4C3B10209DA5970F3B3884CA8DCA99AC70E0E363E473EE61A31632DA6CD6C470397208F0B7754F28A3240D2AACFF91CE0288F1F7A3D8811C18
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"account_id_migration_state":2,"account_tracker_service_last_update":"13288230897029381","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245950583260338","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245950640095768","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","1538886"],"daily_received_length":["0","0","0","0","0","0","0","

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7171c975-6592-4bc2-8007-ca76e492ef76.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):371
                                                                                                                                                                                                                                                                    Entropy (8bit):5.494676686569305
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6:YAQNqtrVmVn+XDMXB8wXwlmUUAnIMOTLamOrVY3osHdOa8wXwlmUUAnIMp5cV30/:Y09VmV+XDiN+UAnIAmOGlx+UAnIZHQ
                                                                                                                                                                                                                                                                    MD5:B9797678A9083F81951392F108C67EBA
                                                                                                                                                                                                                                                                    SHA1:E6F78D3488A5337287DDEF4A64CD41439E720525
                                                                                                                                                                                                                                                                    SHA-256:635BFF3711A1BDE44DDBE1896358E831FBB0E2596E8764D3F553186F797FC5D0
                                                                                                                                                                                                                                                                    SHA-512:86FEF3832C23453DE404FD8B25F51BF475B1ADD0CF9DE3C79DEFE4B473B128B522A781C87B2EEA50884136BFF718B3EA13FCEBE2F09F56736119BA3D541371FB
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"expect_ct":[],"sts":[{"expiry":1643778945.668089,"host":"Ie2p1rK5PbkAy3tH/gbQ14Xhq5IimP6vz4V/UKzEP+c=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1643757345.668095},{"expiry":1675293356.588044,"host":"opXOuPncEqRjkYSjAgcGEU30CFS/DB8Obxt4KuKod80=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1643757356.588051}],"version":2}

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7654ac1b-8a64-4aee-a060-605b2d775bbf.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):5109
                                                                                                                                                                                                                                                                    Entropy (8bit):4.968596792656575
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:96:nMr+ZgH9pSKIEIk0JCKL8/3hkAS11+bOTQVuwn:nMrT9pSiC4Kkkfc
                                                                                                                                                                                                                                                                    MD5:EEA0B0F725263CE3C7245A7514ADB491
                                                                                                                                                                                                                                                                    SHA1:1BC30311D10AA8133DDC7B3BE714E5906C9A2333
                                                                                                                                                                                                                                                                    SHA-256:3443D65D03A712E6DDE9E45BB22473CB4FAAAAF354831B8E5AE3D5A575876E65
                                                                                                                                                                                                                                                                    SHA-512:BF8A996F8F10C5D792477B6EACD9BEA5955F83A002F15756980F2B7CF9F9C9CC415BDF7CCA1ADD779C2A1009FB3383216A542F6973F53E198227BBAB479A3546
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"account_id_migration_state":2,"account_tracker_service_last_update":"13288230897029381","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245950583260338","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245950640095768","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","1538886"],"daily_received_length":["0","0","0","0","0","0","0","

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\87477827-3fa1-4073-b293-905b38f3ed65.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):3602
                                                                                                                                                                                                                                                                    Entropy (8bit):4.9141000093320235
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:96:JxOTCXDHzMDKNebrYcZ6V9FE9fPKG6RQpgpfb6IxVD:JxOTCXDHzMDKNeb8cZ6Vg9fPKxRQpgpN
                                                                                                                                                                                                                                                                    MD5:F0C85DB89B92596A345CF1531DBD1800
                                                                                                                                                                                                                                                                    SHA1:AD2D61199CCD1261B3F1D349A582AFDFA9290B2F
                                                                                                                                                                                                                                                                    SHA-256:6EB8D9C8DA4396C4C5D432A4908DC24763D7159D9343396369837654AAD6FAD2
                                                                                                                                                                                                                                                                    SHA-512:09670185915ED524FA61FD5EFBFAAB357D31FD451856FD89CBCD024CC44FEE7F39AA8516204BFE2FFCF9995CEEADB51B29BC005DC389B38BF1BF9DF8BDE54C59
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://fonts.googleapis.com","supports_spdy":true},{"isolation":[],"server":"https://ssl.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://www.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://fonts.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://apis.google.com","supports_spdy":true},{"isolation":[],"server":"https://ogs.google.com","supports_spdy":true},{"isolation":[],"server":"https://dns.google","supports_spdy":true},{"isolation":[],"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13290822899162371","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://redirector.gvt1.com"},{"alternative_service":[{"advertised_versions":[50],"expiration":"13290822899197548","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://accounts.google.com","supports_spdy":tr

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9c7e9906-6184-40d9-bd62-b7c328ababc4.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):5109
                                                                                                                                                                                                                                                                    Entropy (8bit):4.968769076044507
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:96:nMr+ZgH9pSKIxIk0JCKL8/3hkAS11+bOTQVuwn:nMrT9pSvC4Kkkfc
                                                                                                                                                                                                                                                                    MD5:894D9FC5F3C9E1EB85184173F88EAB4F
                                                                                                                                                                                                                                                                    SHA1:2B2363D629D24BAC5EBB301009EE518B23F2B620
                                                                                                                                                                                                                                                                    SHA-256:0948F1C3DFD9AFAD5763823D55E3D61920E3F8E66766D0BAE9AEDEDD6BB42419
                                                                                                                                                                                                                                                                    SHA-512:92C3C80897FBFE7AD27B2F425C1DE7975DCC12A3A5E2B11709F40FCA8ADDB498A6323AD6AF83F422DD2576182DC64DBAC284CDF64571AA0389367C1141E27316
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"account_id_migration_state":2,"account_tracker_service_last_update":"13288230897029381","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245950583260338","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245950640095768","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","1538886"],"daily_received_length":["0","0","0","0","0","0","0","

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):11217
                                                                                                                                                                                                                                                                    Entropy (8bit):6.069602775336632
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:192:GbylJnlTwGB7V9Hne4qasKxXItmLG48gcLg/PkI:Gb+nldByaFx4toj8VEPT
                                                                                                                                                                                                                                                                    MD5:90F880064A42B29CCFF51FE5425BF1A3
                                                                                                                                                                                                                                                                    SHA1:6A3CAE3996E9FFF653A1DDF731CED32B2BE2ACBF
                                                                                                                                                                                                                                                                    SHA-256:965203D541E442C107DBC6D5B395168123D0397559774BEAE4E5B9ABC44EF268
                                                                                                                                                                                                                                                                    SHA-512:D9CBFCD865356F19A57954F8FD952CAF3D31B354112766C41892D1EF40BD2533682D4EC3F4DA0E59A5397364F67A484B45091BA94E6C69ED18AB681403DFD3F3
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"file_hashes":[{"block_hashes":["A+1PYW3V6CJbBuQ7aqrgYhyH3bT8PKyBXp3hN2slpI0=","WSOpQRkYTHjPSlG9Zif2a7TNhy43NDcG1Zg5Nv0UbH0=","jDctR8ImG5KZrQKm4kDjUB7FokSJfjo/pmvFowRVlaY=","LPxhhJiuU0lprt0T6flpS7TkaDg7MocrbmzO65xH6RI=","nZ9zLb2By96AkKXALRM+C0Eu11XUjPiMXEKjiCPdtHE=","wifibc1QfMBN2jrtUtLgsCefvuceTpAatmLvul11RJA=","dHjWlSIIdjj7MWqg3T8MG58RuuqRXk32vqi/13JqEgA=","zd3DV7dbvfNvx1hdhU01fW5ily52DLN0CFL/ADaEeTI=","DpjXcO85FFFY9KJFPkGNfFUtdQIOsGwO5jUckiUwY14=","gqid6l1+mk/6yWgUECRofI9lMipXgXh2jEN2+CxmPE0=","prDB91X2Mmfg/M/txVMITWBmEGbOGjqBTP7CMjYqdHs=","yLPAqV4gqoyS/zFkEt3Cn2j0q2v9QOSthVFfWn8EzCM=","EPQ3jzdrLkAHyvf3920B5Y3aAkO1IJdn/UtbnAmq6T0=","+oOc6ca+ChKUpTu+oa2ZRxRE+wG3QJmuYWEvYCs40NI=","3mBGNAiRlTANEQkqzU3TEi+5wJ0ubR5uwtS4/9OOM7w=","1A9NNawxuhu95H5eThvf1rewJ4QQWhhPNxJXO1C/n68=","E3vWLQxzmj+e5QxYbUscllJ5n0ITpw5JBHV1Kph3/KM=","i3I8ghdTF9c1ZXNBZmvsID+DV4gxBVN27rj9wsMtRpg=","R8B8qYabnMSlLPhrtu0hGYrHn3llsMHqBbi70gkIjEE=","rhlzuEvv2KRAFMms896xFwkNgPrw6WvmgPn6xrBSa2Y=","LAMXv6sRb0VZrY34aVXF3Fftxs

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):23474
                                                                                                                                                                                                                                                                    Entropy (8bit):6.059847580419268
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:384:7dNc1NC6IcafusK4H1IIGRlhKlkIALQWdynQh2RX4K6M1tVztzr7XSNyzH:7dOscSRKc1nGRSkIhEw6M1tf7SNyb
                                                                                                                                                                                                                                                                    MD5:6AE2135EA4583C2F06CDEBEA4AE70FA4
                                                                                                                                                                                                                                                                    SHA1:DCEB26C7F02D53B5F214305F4C75B4A33A79CDC2
                                                                                                                                                                                                                                                                    SHA-256:03AA1944CB3C4F39E20B6361571BC45DFBEBD3FFDA3D8F148CC6ECB29958F903
                                                                                                                                                                                                                                                                    SHA-512:B5945E67D9F73DD1982D687E5C6D9B5D6B3886C8050363A259755C76AC0F93651F3425FA7C21AA6A13977AC1C8C9322F998F131648CB8909096058D4F0D23312
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"file_hashes":[{"block_hashes":["DOZdV3jFvk12AM2JNDYKo3KZrIVRprmJ+sVGWkqqE4Q=","rVElW3Hu3T52SzDDUqGT5YiJTBGUv2h3pNuBKFlhZ1U=","X/3fg4KZxgQ1jBr5QGq0F5JnflgE27UErd88mrxTcxs=","VibLbpy0ig+5INMOU71fTYN76iaka2XVpmm1qAKYsX8=","EChCwCbQHbHQ7oDdGT2qNyiRJ0yck2YC2emNGq4whtE="],"block_size":4096,"path":"_locales/iw/messages.json"},{"block_hashes":["xklkoZ7iSU1+7cd6DAtEmUC5lPFd+EgcbnzxkOiFwlk=","3KbsvoxKY/3AwqgF2aAdVQRpMhsNVRkQ3rx2A6Z2Z+Y=","o9+tsohquaCMj+70zeinRG/hBhA2uLoDl/WoC1uokME=","xV/K8xucyWJELVT8Cqn+ugFjobBVmg8pnmACF+2PP4Y=","p/mvJm2wuCl32Rx3it654MljKAsMe3S9IDEabc1A8mE=","j8mPrTb5oOsBTj2Fer78JE6xG6+kR64Cvu2SW8d3j/k=","nqSRpGQ3USU2bZJsZ+AzBmFOyann8omwJrhEWFZDTXc=","eTcQyJUuNuF9yCga/fXGyFCj/pysSceanhBzksdx23s=","Wj7faqnspelXKMvnduxHn1XUBG8TEOqyns7/oUihekM=","VtBwXoadI3EP336rAiL33Gz19KGqtN+RYdKnMKAXoLw=","iDgLXQqXJp8nCZxgLuC9LXM45DGfufvGnXvmHsn18wc=","g+RfdDfrWTUK0Pkcsbot7NJ4SC9wVRV/dVVMuHAtEj8=","2oC4HcCuXu3VjFf6wnKlznt9uqQNaebcuWpm/mWj69U=","aMUIpuFqPMiieSaWhIktCK62v2P3OZQAWupWsYzCnvk=","L

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:data
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):38
                                                                                                                                                                                                                                                                    Entropy (8bit):1.8784775129881184
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3:FQxlXNQxlX:qTCT
                                                                                                                                                                                                                                                                    MD5:51A2CBB807F5085530DEC18E45CB8569
                                                                                                                                                                                                                                                                    SHA1:7AD88CD3DE5844C7FC269C4500228A630016AB5B
                                                                                                                                                                                                                                                                    SHA-256:1C43A1BDA1E458863C46DFAE7FB43BFB3E27802169F37320399B1DD799A819AC
                                                                                                                                                                                                                                                                    SHA-512:B643A8FA75EDA90C89AB98F79D4D022BB81F1F62F50ED4E5440F487F22D1163671EC3AE73C4742C11830214173FF2935C785018318F4A4CAD413AE4EEEF985DF
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:.f.5................f.5...............

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):374
                                                                                                                                                                                                                                                                    Entropy (8bit):5.180888142849961
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6:8+k9+q2P923iKKdK25+Xqx8chI+IFUtqVdYEbJZmwYVdgN9VkwO923iKKdK25+Xc:04v45KkTXfchI3FUtrkJ/dND5L5KkTXc
                                                                                                                                                                                                                                                                    MD5:C8A1D652A529615889569BB914F6637A
                                                                                                                                                                                                                                                                    SHA1:970F32F85F6F9B14AB1B1CC69DC469A1E57A6528
                                                                                                                                                                                                                                                                    SHA-256:F4C130CB408231E196083670EB37FD53FA58B11CF2E07758C947B3932C2E85A9
                                                                                                                                                                                                                                                                    SHA-512:6377FE794F77F4354A3C8B12DDA7F81CBBA3DC1A9D4ABA9641AF8C231EB9DFEC0744B8E3339FC57D32D081C1801A4220BA72B365E7AC0EA5BB0FA185ACE788A4
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:2022/02/01-15:15:15.101 18f8 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/MANIFEST-000001.2022/02/01-15:15:15.103 18f8 Recovering log #3.2022/02/01-15:15:15.104 18f8 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/000003.log .

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):374
                                                                                                                                                                                                                                                                    Entropy (8bit):5.180888142849961
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6:8+k9+q2P923iKKdK25+Xqx8chI+IFUtqVdYEbJZmwYVdgN9VkwO923iKKdK25+Xc:04v45KkTXfchI3FUtrkJ/dND5L5KkTXc
                                                                                                                                                                                                                                                                    MD5:C8A1D652A529615889569BB914F6637A
                                                                                                                                                                                                                                                                    SHA1:970F32F85F6F9B14AB1B1CC69DC469A1E57A6528
                                                                                                                                                                                                                                                                    SHA-256:F4C130CB408231E196083670EB37FD53FA58B11CF2E07758C947B3932C2E85A9
                                                                                                                                                                                                                                                                    SHA-512:6377FE794F77F4354A3C8B12DDA7F81CBBA3DC1A9D4ABA9641AF8C231EB9DFEC0744B8E3339FC57D32D081C1801A4220BA72B365E7AC0EA5BB0FA185ACE788A4
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:2022/02/01-15:15:15.101 18f8 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/MANIFEST-000001.2022/02/01-15:15:15.103 18f8 Recovering log #3.2022/02/01-15:15:15.104 18f8 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/000003.log .

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:data
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):1032
                                                                                                                                                                                                                                                                    Entropy (8bit):5.586325309536695
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:24:qO+MJTCvHCjodc0LbFLStR9yBDOxo7R8rAYW29l++r460WL89l/Hwp:qO+mTCvHfuabt8ESkawHwp
                                                                                                                                                                                                                                                                    MD5:A81020A6BED7BE9D2DC21C8D31B1BE6A
                                                                                                                                                                                                                                                                    SHA1:540D3B3A0033C859DC15D9FA5EE653656EFBE1CF
                                                                                                                                                                                                                                                                    SHA-256:FD01E8B6B72460A794C1CF770C5170A05E145F21B6A35FFE7637FC0B1A4C08E9
                                                                                                                                                                                                                                                                    SHA-512:F87BA9882306AF5369B215C8A040C584CC59C82AAD16B4FED2825831DB0E9F588ADAABE3A6532F16769C5694544E878651B2434FB39486E9C7A57A9E02CA5AE4
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:............"c....5xx..cloudflare..com..error..https..landing..www..http..ny..phishing..r..site..suspected..t..tb*........5xx......cloudflare......com......error......http......https......landing......ny......phishing......r......site......suspected......t......tb......www..2.........5........a.........b........c..........d..........e...........f........g.........h..........i..........l.........m........n..........o..........p...........r..........s...........t.............u.........w........x........y...:....................................................................................................................................................B.....f...... .......*,https://www.cloudflare.com/5xx-error-landing2.5xx Error | Cloudflare:................]...... .......*.http://ny-t.r-tb.com/2$Suspected phishing site | Cloudflare:................l...... .......*-https://www.cloudflare.com/5xx-error-landing/2.5xx Error | Cloudflare:....................J8........................

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State} (copy)

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):2693
                                                                                                                                                                                                                                                                    Entropy (8bit):4.871599185186076
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:48:YXs2MHRzsoMHT5s0MHyKsTMHksrDys4Csb7synWsQItFsym6zs6zMHWLsZMH5YhV:+GDGTHGmGHDW1/nOIbmOGlGGhVD
                                                                                                                                                                                                                                                                    MD5:829D5654ADF098AD43036E24C47F2A94
                                                                                                                                                                                                                                                                    SHA1:506C8BA397509BA0357787950C538C1879047DF3
                                                                                                                                                                                                                                                                    SHA-256:4D0B852D18FCA5C1A712904CF6DB3811FB905E86D8A7508A2D42F9C8D68E2211
                                                                                                                                                                                                                                                                    SHA-512:D9B18E6B0AD1E8E4BECF9E84BBE30D64730CFEC2CBEAF96D5DF52E28B907B03EADF22F020FBE0A56D137A52F4F09798031BC6CA026CFA8A979A608B3445DBCAA
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[],"expiration":"13248542600883925","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":40156},"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248542628822803","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":30856},"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248542600893104","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":25300},"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248542600872791","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":34789},"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"exp

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):5109
                                                                                                                                                                                                                                                                    Entropy (8bit):4.968769076044507
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:96:nMr+ZgH9pSKIxIk0JCKL8/3hkAS11+bOTQVuwn:nMrT9pSvC4Kkkfc
                                                                                                                                                                                                                                                                    MD5:894D9FC5F3C9E1EB85184173F88EAB4F
                                                                                                                                                                                                                                                                    SHA1:2B2363D629D24BAC5EBB301009EE518B23F2B620
                                                                                                                                                                                                                                                                    SHA-256:0948F1C3DFD9AFAD5763823D55E3D61920E3F8E66766D0BAE9AEDEDD6BB42419
                                                                                                                                                                                                                                                                    SHA-512:92C3C80897FBFE7AD27B2F425C1DE7975DCC12A3A5E2B11709F40FCA8ADDB498A6323AD6AF83F422DD2576182DC64DBAC284CDF64571AA0389367C1141E27316
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"account_id_migration_state":2,"account_tracker_service_last_update":"13288230897029381","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245950583260338","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245950640095768","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","1538886"],"daily_received_length":["0","0","0","0","0","0","0","

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences. (copy)

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):5109
                                                                                                                                                                                                                                                                    Entropy (8bit):4.968596792656575
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:96:nMr+ZgH9pSKIEIk0JCKL8/3hkAS11+bOTQVuwn:nMrT9pSiC4Kkkfc
                                                                                                                                                                                                                                                                    MD5:EEA0B0F725263CE3C7245A7514ADB491
                                                                                                                                                                                                                                                                    SHA1:1BC30311D10AA8133DDC7B3BE714E5906C9A2333
                                                                                                                                                                                                                                                                    SHA-256:3443D65D03A712E6DDE9E45BB22473CB4FAAAAF354831B8E5AE3D5A575876E65
                                                                                                                                                                                                                                                                    SHA-512:BF8A996F8F10C5D792477B6EACD9BEA5955F83A002F15756980F2B7CF9F9C9CC415BDF7CCA1ADD779C2A1009FB3383216A542F6973F53E198227BBAB479A3546
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"account_id_migration_state":2,"account_tracker_service_last_update":"13288230897029381","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245950583260338","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245950640095768","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","1538886"],"daily_received_length":["0","0","0","0","0","0","0","

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferencesl\ (copy)

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):5109
                                                                                                                                                                                                                                                                    Entropy (8bit):4.968703615528303
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:96:nMr+ZgH9pSKI2Ik0JCKL8/3hkAS11+bOTQVuwn:nMrT9pSQC4Kkkfc
                                                                                                                                                                                                                                                                    MD5:4ED4F8C38C9DFFEF5DF83B6BEF9FCC31
                                                                                                                                                                                                                                                                    SHA1:0D8545A7C53523D26039D79745003A32C545B91A
                                                                                                                                                                                                                                                                    SHA-256:9914350F9053193C9E676B26E60FB854E1A4FB438EE3957298499D1DEE20705D
                                                                                                                                                                                                                                                                    SHA-512:3E48302F081C9C4C3B10209DA5970F3B3884CA8DCA99AC70E0E363E473EE61A31632DA6CD6C470397208F0B7754F28A3240D2AACFF91CE0288F1F7A3D8811C18
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"account_id_migration_state":2,"account_tracker_service_last_update":"13288230897029381","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245950583260338","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245950640095768","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","1538886"],"daily_received_length":["0","0","0","0","0","0","0","

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):17092
                                                                                                                                                                                                                                                                    Entropy (8bit):5.583624077948589
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:384:0KLttLl//Xt1kXqKf/pUZNCgVLH2HfDDrUj/7V4G:5Llnt1kXqKf/pUZNCgVLH2HffrUjzV5
                                                                                                                                                                                                                                                                    MD5:49DA149C00C8415A0503201EC483FEDF
                                                                                                                                                                                                                                                                    SHA1:0B47AB78B4C23E67EE2C25E05D7B24785F93803A
                                                                                                                                                                                                                                                                    SHA-256:3375433B409B5A63C3DDEDEF4BF099962672419A8BD8627EAFD5D8D768DC77E8
                                                                                                                                                                                                                                                                    SHA-512:9D22E8ECA62CBB1F0932067E55188A62E1EB070609553FC015ACBCF9E77C171465CE3AA457DD0C75C2910301326612473A91D18BF59D820250F30D55656D24A1
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13288230896444832","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:data
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):270336
                                                                                                                                                                                                                                                                    Entropy (8bit):0.0012471779557650352
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3:MsEllllkEthXllkl2zE:/M/xT02z
                                                                                                                                                                                                                                                                    MD5:F50F89A0A91564D0B8A211F8921AA7DE
                                                                                                                                                                                                                                                                    SHA1:112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
                                                                                                                                                                                                                                                                    SHA-256:B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
                                                                                                                                                                                                                                                                    SHA-512:BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy)

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):325
                                                                                                                                                                                                                                                                    Entropy (8bit):4.956993026220225
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6:YHpoNXR8+eq7JdV5rAcJksDHF4R8HLJ2AVQBR70S7PMVKJw1K3KnMRK3VY:YHO8sdVAsBdLJlyH7E4f3K33y
                                                                                                                                                                                                                                                                    MD5:0C03D530AC97788D62D27B2802C34D83
                                                                                                                                                                                                                                                                    SHA1:20F78B6B32D98FA52846C70DF78E4E5CEF663E2D
                                                                                                                                                                                                                                                                    SHA-256:7941FADA9867DAAE08EBC196BAFC6952DD506842C3E7D8FB14DF9D4E402D894B
                                                                                                                                                                                                                                                                    SHA-512:D5905C124060997A14322D12DECE5C00C63F7174743C740C974D00E88B03F203909CC2AC972B2759E8087B0B10F6306C6E66BF853319B5AC96907F34C8456C80
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[50],"expiration":"13248542588505091","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://dns.google","supports_spdy":true}],"version":5},"network_qualities":{"CAASABiAgICA+P////8B":"4G","CAESABiAgICA+P////8B":"4G"}}}

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\c969abab-a3f1-4f19-81a5-e3c8ab3cb894.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):325
                                                                                                                                                                                                                                                                    Entropy (8bit):4.956993026220225
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6:YHpoNXR8+eq7JdV5rAcJksDHF4R8HLJ2AVQBR70S7PMVKJw1K3KnMRK3VY:YHO8sdVAsBdLJlyH7E4f3K33y
                                                                                                                                                                                                                                                                    MD5:0C03D530AC97788D62D27B2802C34D83
                                                                                                                                                                                                                                                                    SHA1:20F78B6B32D98FA52846C70DF78E4E5CEF663E2D
                                                                                                                                                                                                                                                                    SHA-256:7941FADA9867DAAE08EBC196BAFC6952DD506842C3E7D8FB14DF9D4E402D894B
                                                                                                                                                                                                                                                                    SHA-512:D5905C124060997A14322D12DECE5C00C63F7174743C740C974D00E88B03F203909CC2AC972B2759E8087B0B10F6306C6E66BF853319B5AC96907F34C8456C80
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[50],"expiration":"13248542588505091","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://dns.google","supports_spdy":true}],"version":5},"network_qualities":{"CAASABiAgICA+P////8B":"4G","CAESABiAgICA+P////8B":"4G"}}}

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\61ae7b3f-641b-4b4b-8fd6-fab4d52559d4.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):325
                                                                                                                                                                                                                                                                    Entropy (8bit):4.976576189225149
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6:YHpoNXR8+eq7JdV5OV/sDHF4R8HLJ2AVQBR70S7PMVKJw1K3KnMRK3VY:YHO8sdysBdLJlyH7E4f3K33y
                                                                                                                                                                                                                                                                    MD5:5886A009EB58EE06A16EFD6D1BA9A046
                                                                                                                                                                                                                                                                    SHA1:A867B5052F3FBB811693DF8CE3FDAA794F2F2E40
                                                                                                                                                                                                                                                                    SHA-256:9E3392126DE2D81D019E0AB3E17F20BADD0EC9FBD944BCB7C4DAF449D937D496
                                                                                                                                                                                                                                                                    SHA-512:D24F30A2E35F903AC10AACC4425C58BECB1C6BE2BA30A3C2B9D9D46CE04914AA71F55B3B16ED89081AD65A7090C77F5DC4A258B7B98D71E6A994D176536FBB27
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[50],"expiration":"13248542597817103","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://dns.google","supports_spdy":true}],"version":5},"network_qualities":{"CAASABiAgICA+P////8B":"4G","CAESABiAgICA+P////8B":"4G"}}}

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:data
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):270336
                                                                                                                                                                                                                                                                    Entropy (8bit):0.0012471779557650352
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3:MsEllllkEthXllkl2zE:/M/xT02z
                                                                                                                                                                                                                                                                    MD5:F50F89A0A91564D0B8A211F8921AA7DE
                                                                                                                                                                                                                                                                    SHA1:112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
                                                                                                                                                                                                                                                                    SHA-256:B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
                                                                                                                                                                                                                                                                    SHA-512:BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:data
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):80
                                                                                                                                                                                                                                                                    Entropy (8bit):3.4921535629071894
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3:S8ltHlS+QUl1ASEGhTFljl:S85aEFljl
                                                                                                                                                                                                                                                                    MD5:69449520FD9C139C534E2970342C6BD8
                                                                                                                                                                                                                                                                    SHA1:230FE369A09DEF748F8CC23AD70FD19ED8D1B885
                                                                                                                                                                                                                                                                    SHA-256:3F2E9648DFDB2DDB8E9D607E8802FEF05AFA447E17733DD3FD6D933E7CA49277
                                                                                                                                                                                                                                                                    SHA-512:EA34C39AEA13B281A6067DE20AD0CDA84135E70C97DB3CDD59E25E6536B19F7781E5FC0CA4A11C3618D43FC3BD3FBC120DD5C1C47821A248B8AD351F9F4E6367
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:*...#................version.1..namespace-..&f.................&f...............

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):420
                                                                                                                                                                                                                                                                    Entropy (8bit):5.171954697530518
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:w+v45KkkGHArAFUtVo1/sV5L5KkkGHArfJ:Z45KkkGgkgOEL5KkkGgV
                                                                                                                                                                                                                                                                    MD5:8B4651351C7A24F9A5FFD9E03F6F9ABE
                                                                                                                                                                                                                                                                    SHA1:CFE2A62848045BA1B3D49162AAABBFA221983CF1
                                                                                                                                                                                                                                                                    SHA-256:35AB18867185501B761709A6B9D7882721F66B362EE074D9FA89ABE45FF1CCA1
                                                                                                                                                                                                                                                                    SHA-512:02628257E0EFD313E4CDEA33B7D0175A5B089BA0691484376B864A20C8E66F4E2A974F6DCEDE6A1DC6AF5411394DAFE20BFC980245050A038A4BCEDF0F405A59
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:2022/02/01-15:16:11.497 139c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage/MANIFEST-000001.2022/02/01-15:16:11.499 139c Recovering log #3.2022/02/01-15:16:11.501 139c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage/000003.log .

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):404
                                                                                                                                                                                                                                                                    Entropy (8bit):5.310755803356114
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:IHl3+v45KkkOrsFUtKHmb1/gHmlV5L5KkkOrzJ:Ii45Kk+gKGbKGdL5Kkn
                                                                                                                                                                                                                                                                    MD5:25602E1AB0AF5B29DD65BB330F6B1F1A
                                                                                                                                                                                                                                                                    SHA1:1FEEEACB3909A4E286B3582217F5357731188D7A
                                                                                                                                                                                                                                                                    SHA-256:C8A60E323EE28C05928414BEBDBFD55F183E10DD719EFDC4AA59A048AC7C872E
                                                                                                                                                                                                                                                                    SHA-512:5E8011A3C4239EF471871D10E7186BDE933EA08933B1F7DD247873AF8F6239327622BE62D9E78EC57678BD6A0A0AC640A736CDE48E56FD13BA4DDBA387D1DF6F
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:2022/02/01-15:17:16.558 139c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm/MANIFEST-000001.2022/02/01-15:17:16.559 139c Recovering log #3.2022/02/01-15:17:16.559 139c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm/000003.log .

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity (copy)

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):370
                                                                                                                                                                                                                                                                    Entropy (8bit):5.496898110063878
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6:YAQNqtrVmVn+XDMXB8wXwlmUUAnIMOTLamOh4t3osHdOa8wXwlmUUAnIMp5Z8SQ:Y09VmV+XDiN+UAnIAmOolx+UAnIUQ
                                                                                                                                                                                                                                                                    MD5:5E5A229F3509FF7C60F8ED658E8F52DB
                                                                                                                                                                                                                                                                    SHA1:51A43CB9BD6F623E03354375C014D0B806DDD482
                                                                                                                                                                                                                                                                    SHA-256:81697A2CCFCEF42E22E272EED714FF4260651772D729ECA4384E4E965263234E
                                                                                                                                                                                                                                                                    SHA-512:FBF89AF34B9943D508A7ABC05B4C9689A151F1502E4AA3FC62893F1B2C76751C83A1943F51E773335169CA447D44DC3A7643FEE11FB5C163825A4878D435630B
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"expect_ct":[],"sts":[{"expiry":1643778945.668089,"host":"Ie2p1rK5PbkAy3tH/gbQ14Xhq5IimP6vz4V/UKzEP+c=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1643757345.668095},{"expiry":1675293344.03816,"host":"opXOuPncEqRjkYSjAgcGEU30CFS/DB8Obxt4KuKod80=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1643757344.038167}],"version":2}

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\VideoDecodeStats\000001.dbtmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):16
                                                                                                                                                                                                                                                                    Entropy (8bit):3.2743974703476995
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3:1sjgWIV//Uv:1qIFUv
                                                                                                                                                                                                                                                                    MD5:46295CAC801E5D4857D09837238A6394
                                                                                                                                                                                                                                                                    SHA1:44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
                                                                                                                                                                                                                                                                    SHA-256:0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
                                                                                                                                                                                                                                                                    SHA-512:8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:MANIFEST-000001.

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\VideoDecodeStats\CURRENT. (copy)

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):16
                                                                                                                                                                                                                                                                    Entropy (8bit):3.2743974703476995
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3:1sjgWIV//Uv:1qIFUv
                                                                                                                                                                                                                                                                    MD5:46295CAC801E5D4857D09837238A6394
                                                                                                                                                                                                                                                                    SHA1:44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
                                                                                                                                                                                                                                                                    SHA-256:0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
                                                                                                                                                                                                                                                                    SHA-512:8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:MANIFEST-000001.

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\VideoDecodeStats\MANIFEST-000001

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:PGP\011Secret Key -
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):41
                                                                                                                                                                                                                                                                    Entropy (8bit):4.704993772857998
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3:scoBAIxQRDKIVjn:scoBY7jn
                                                                                                                                                                                                                                                                    MD5:5AF87DFD673BA2115E2FCF5CFDB727AB
                                                                                                                                                                                                                                                                    SHA1:D5B5BBF396DC291274584EF71F444F420B6056F1
                                                                                                                                                                                                                                                                    SHA-256:F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
                                                                                                                                                                                                                                                                    SHA-512:DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:.|.."....leveldb.BytewiseComparator......

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\be5a96b6-dc4c-4167-a0ad-48f36a818c84.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):22596
                                                                                                                                                                                                                                                                    Entropy (8bit):5.53636798481121
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:384:0KLttLl//Xt1kXqKf/pUZNCgVLH2HfDDrU6HGjnT3/6V4D:5Llnt1kXqKf/pUZNCgVLH2HffrUKGjn1
                                                                                                                                                                                                                                                                    MD5:412AE011D4D2571880E814F4DF9EEAEA
                                                                                                                                                                                                                                                                    SHA1:33A54C4FD61CDDFBC0623CE3D62DD2F89596CFDF
                                                                                                                                                                                                                                                                    SHA-256:1DAD78755802ED955EC4AF53902641DDE5F1A12C5FF0EDB73F9CA4F15DB77097
                                                                                                                                                                                                                                                                    SHA-512:7EC359A108B76956BAF069C8A15B170C30DE65BB614C55AD185441C3614396FD3106FDE5785884A1662BE7BDFAC24978929BDF48C12A83D96143384CB82B7FB3
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13288230896444832","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c2197144-b737-4810-a2cc-1dec3fc16790.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):19181
                                                                                                                                                                                                                                                                    Entropy (8bit):5.570661973036039
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:384:0KLttLl//Xt1kXqKf/pUZNCgVLH2HfDDrU6HGF/dV44:5Llnt1kXqKf/pUZNCgVLH2HffrUKGFVd
                                                                                                                                                                                                                                                                    MD5:B416A66DFB01F1AEBA03027414B4C2D2
                                                                                                                                                                                                                                                                    SHA1:BF5C7D1E8227D46312383B9E387503BA736BD212
                                                                                                                                                                                                                                                                    SHA-256:BCE8A808D78EB5D59F59ACB467A3159622249146D87970E4CF53F3CB15FC110A
                                                                                                                                                                                                                                                                    SHA-512:0FCB55B288B49534DC3A00696441C2F0AE7DC870987374BE7BAF837CCAE7982D467886DF618F9A2F70B1C32006AFE3B792EDBCAA0277AE93B77DA23E06886EE3
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13288230896444832","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c956182f-6baa-4b46-acdb-6a58a64f9ed5.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):202
                                                                                                                                                                                                                                                                    Entropy (8bit):5.393183783851128
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6:YAQN1dugNKZ3osHdOa8wXwlmUUAnIMp5Eu4SQ:Yfwgelx+UAnIluTQ
                                                                                                                                                                                                                                                                    MD5:02F429E97E9EA4EDBC74FB998D40CBF3
                                                                                                                                                                                                                                                                    SHA1:36656C3004E1CDEC2F10B9076A8D8B9DB827D017
                                                                                                                                                                                                                                                                    SHA-256:51A525B971583EF30018A788DE618A0F0269BE8BD19ADF0BBF3D6EE02D3EC820
                                                                                                                                                                                                                                                                    SHA-512:38D4F70989B2B4D7DB1407119AB36774704BB3DFB3C8D02523D4BF2E2720759A2C0F6FC43FA8A239C9B5DAA52CE3D007D18C322090FDC815AA5D890F7185BBEA
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"expect_ct":[],"sts":[{"expiry":1675293331.191542,"host":"opXOuPncEqRjkYSjAgcGEU30CFS/DB8Obxt4KuKod80=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1643757331.19155}],"version":2}

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):16
                                                                                                                                                                                                                                                                    Entropy (8bit):3.2743974703476995
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3:1sjgWIV//Rv:1qIFJ
                                                                                                                                                                                                                                                                    MD5:6752A1D65B201C13B62EA44016EB221F
                                                                                                                                                                                                                                                                    SHA1:58ECF154D01A62233ED7FB494ACE3C3D4FFCE08B
                                                                                                                                                                                                                                                                    SHA-256:0861415CADA612EA5834D56E2CF1055D3E63979B69EB71D32AE9AE394D8306CD
                                                                                                                                                                                                                                                                    SHA-512:9CFD838D3FB570B44FC3461623AB2296123404C6C8F576B0DE0AABD9A6020840D4C9125EB679ED384170DBCAAC2FA30DC7FA9EE5B77D6DF7C344A0AA030E0389
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:MANIFEST-000004.

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENTaa (copy)

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):16
                                                                                                                                                                                                                                                                    Entropy (8bit):3.2743974703476995
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3:1sjgWIV//Rv:1qIFJ
                                                                                                                                                                                                                                                                    MD5:6752A1D65B201C13B62EA44016EB221F
                                                                                                                                                                                                                                                                    SHA1:58ECF154D01A62233ED7FB494ACE3C3D4FFCE08B
                                                                                                                                                                                                                                                                    SHA-256:0861415CADA612EA5834D56E2CF1055D3E63979B69EB71D32AE9AE394D8306CD
                                                                                                                                                                                                                                                                    SHA-512:9CFD838D3FB570B44FC3461623AB2296123404C6C8F576B0DE0AABD9A6020840D4C9125EB679ED384170DBCAAC2FA30DC7FA9EE5B77D6DF7C344A0AA030E0389
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:MANIFEST-000004.

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ec2338f8-858e-4cc3-9dfc-8d80ef46aadb.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:modified
                                                                                                                                                                                                                                                                    Size (bytes):370
                                                                                                                                                                                                                                                                    Entropy (8bit):5.496898110063878
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6:YAQNqtrVmVn+XDMXB8wXwlmUUAnIMOTLamOh4t3osHdOa8wXwlmUUAnIMp5Z8SQ:Y09VmV+XDiN+UAnIAmOolx+UAnIUQ
                                                                                                                                                                                                                                                                    MD5:5E5A229F3509FF7C60F8ED658E8F52DB
                                                                                                                                                                                                                                                                    SHA1:51A43CB9BD6F623E03354375C014D0B806DDD482
                                                                                                                                                                                                                                                                    SHA-256:81697A2CCFCEF42E22E272EED714FF4260651772D729ECA4384E4E965263234E
                                                                                                                                                                                                                                                                    SHA-512:FBF89AF34B9943D508A7ABC05B4C9689A151F1502E4AA3FC62893F1B2C76751C83A1943F51E773335169CA447D44DC3A7643FEE11FB5C163825A4878D435630B
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"expect_ct":[],"sts":[{"expiry":1643778945.668089,"host":"Ie2p1rK5PbkAy3tH/gbQ14Xhq5IimP6vz4V/UKzEP+c=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1643757345.668095},{"expiry":1675293344.03816,"host":"opXOuPncEqRjkYSjAgcGEU30CFS/DB8Obxt4KuKod80=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1643757344.038167}],"version":2}

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ff02ef66-e3a8-495e-8da7-399ea17f4be1.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:very short file (no magic)
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):1
                                                                                                                                                                                                                                                                    Entropy (8bit):0.0
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3:L:L
                                                                                                                                                                                                                                                                    MD5:5058F1AF8388633F609CADB75A75DC9D
                                                                                                                                                                                                                                                                    SHA1:3A52CE780950D4D969792A2559CD519D7EE8C727
                                                                                                                                                                                                                                                                    SHA-256:CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
                                                                                                                                                                                                                                                                    SHA-512:0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:.

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:data
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):106
                                                                                                                                                                                                                                                                    Entropy (8bit):3.138546519832722
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3:tbloIlrJ5ldQxl7aXVdJiG6R0RlAl:tbdlrnQxZaHIGi0R6l
                                                                                                                                                                                                                                                                    MD5:DE9EF0C5BCC012A3A1131988DEE272D8
                                                                                                                                                                                                                                                                    SHA1:FA9CCBDC969AC9E1474FCE773234B28D50951CD8
                                                                                                                                                                                                                                                                    SHA-256:3615498FBEF408A96BF30E01C318DAC2D5451B054998119080E7FAAC5995F590
                                                                                                                                                                                                                                                                    SHA-512:CEA946EBEADFE6BE65E33EDFF6C68953A84EC2E2410884E12F406CAC1E6C8A0793180433A7EF7CE097B24EA78A1FDBB4E3B3D9CDF1A827AB6FF5605DA3691724
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e...e.x.e.

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):13
                                                                                                                                                                                                                                                                    Entropy (8bit):2.8150724101159437
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3:Yx7:4
                                                                                                                                                                                                                                                                    MD5:C422F72BA41F662A919ED0B70E5C3289
                                                                                                                                                                                                                                                                    SHA1:AAD27C14B27F56B6E7C744A8EC5B1A7D767D7632
                                                                                                                                                                                                                                                                    SHA-256:02E71EB4C587FEB7EE00CE8600F97411C2774C2FC34CB95B92D5538E7F30DA59
                                                                                                                                                                                                                                                                    SHA-512:86010ED2B2EEBDCC5A8A076B37703669C294C6D1BFAAEA963E26A9C94B81B4C53EC765D9425E5B616159C43923F800A891F9B903659575DF02F8845521F8DC46
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:85.0.4183.121

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):389409
                                                                                                                                                                                                                                                                    Entropy (8bit):6.014505817777632
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6144:/QLGSTXsYPlzTFEIm8Acx6ZaurE5/EDnJpAl9SeefNqWF4iVx/9LPeq/1LHm/dBD:/QxDJdzTFEsxzurRDn9nfNxF4ijZVtiX
                                                                                                                                                                                                                                                                    MD5:6D9F3BF9E2788891180EA3AF7AA721C0
                                                                                                                                                                                                                                                                    SHA1:36EBF2A247B670BA91B550C526C942E66F0DC49E
                                                                                                                                                                                                                                                                    SHA-256:3624CCB501E21D58C7784EC25BDE5440AAFA37981F535C39D8C72B8939367F36
                                                                                                                                                                                                                                                                    SHA-512:5204ED4603F9D65F02146BF4B87C12D8CDB48D5648A90DED8F6FC36AD77CE2EC3F779989D5D3D61F6EAEE0F01186C7BFCAC0E6541601FEF3692589403756D137
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643757298223905e+12,"network":1.643724899e+12,"ticks":117203742.0,"uncertainty":3353517.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABUPWY4cSyAQZRX3j8/SLmMAAAAAAIAAAAAABBmAAAAAQAAIAAAACC7lwCjByxIY/Ds1S6cdCxJW6iSr1QfjoKlVKoVEQ4EAAAAAA6AAAAAAgAAIAAAAD9PMfiGkWkdrfU+zeMpOLPS1eDxLpcgjYP2R/ndeCNxMAAAAK+RpovfP61NtB5nOpQgPMjPTyt2T1WPeru9i3yP05zNVEj0uCRDWfONruG9ricX1kAAAADB9KtQ9KY2z38GdfaF7dW2ZLcAMHOX2oEKBg8ZJG9lsuMexxChB4M8HFpyb0Bpr6axpi+zmMIXt76noTOxFzKN"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245950075265799"},"policy":{"last_statistics_update":"13288230896157

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Local Statef8 (copy)

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):389409
                                                                                                                                                                                                                                                                    Entropy (8bit):6.014505856367536
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6144:sQLGSTXsYPlzTFEIm8Acx6ZaurE5/EDnJpAl9SeefNqWF4iVx/9LPeq/1LHm/dBD:sQxDJdzTFEsxzurRDn9nfNxF4ijZVtiX
                                                                                                                                                                                                                                                                    MD5:467DBC1CCDDD4743715056743551486C
                                                                                                                                                                                                                                                                    SHA1:12A99E43DB0BCA59E19794218D741B54F6FBE7C4
                                                                                                                                                                                                                                                                    SHA-256:6D3F421F36D3D3A608A27629F68F68B13A85870FECBDAD95D29805A7152AE801
                                                                                                                                                                                                                                                                    SHA-512:E10E69CCC9FC0648D4DF2476067F580CE0E4407CB0D6AA099BD377AA97CB6D7A9454F9C12A935F519437F0913A33C210D9B2946095E7098A1A2A7E4F0F246EEE
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643757298223905e+12,"network":1.643724899e+12,"ticks":117203742.0,"uncertainty":3353517.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABUPWY4cSyAQZRX3j8/SLmMAAAAAAIAAAAAABBmAAAAAQAAIAAAACC7lwCjByxIY/Ds1S6cdCxJW6iSr1QfjoKlVKoVEQ4EAAAAAA6AAAAAAgAAIAAAAD9PMfiGkWkdrfU+zeMpOLPS1eDxLpcgjYP2R/ndeCNxMAAAAK+RpovfP61NtB5nOpQgPMjPTyt2T1WPeru9i3yP05zNVEj0uCRDWfONruG9ricX1kAAAADB9KtQ9KY2z38GdfaF7dW2ZLcAMHOX2oEKBg8ZJG9lsuMexxChB4M8HFpyb0Bpr6axpi+zmMIXt76noTOxFzKN"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245950075485715"},"policy":{"last_statistics_update":"13288230896157

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):631
                                                                                                                                                                                                                                                                    Entropy (8bit):5.160315577642469
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJ1GG1+WYpU34K3aT+dgh8d0HTO8ZpU34KaNkaT03OyZnLAOfTY/YeHx:1HEajWYpc3aSl0Hq8Zpc6kasOGAOfyYA
                                                                                                                                                                                                                                                                    MD5:9F6B4D82A70C74CA751E2EAE70FAB5CF
                                                                                                                                                                                                                                                                    SHA1:0534F125FFCE8222277CF2BE3401C59DAF9217F8
                                                                                                                                                                                                                                                                    SHA-256:D1467B8D037114403E8F4EFC52E88C4A7FEB96126BE4CFF883FEFF1084EF7E68
                                                                                                                                                                                                                                                                    SHA-512:ED9319830314385D09C06F62EE34186E8CA576C857981205E4468A28B3ACD2AB03384E77B866032C324ABDD97A56EFD08E2D6E0C79D563578B3EC52517819BD8
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Chrome . ... ..".. },.. "app_name": {.. "message": "Chrome . ... ..".. },.. "craw_app_unavailable": {.. "message": ".. .. ... . .....".. },.. "craw_connect_to_network": {.. "message": "..... ......".. },.. "iap_unavailable": {.. "message": ".. .. ... ... . .....".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Chrome. .......".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info CacheP. (copy)

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:SysEx File -
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):94708
                                                                                                                                                                                                                                                                    Entropy (8bit):3.7490635095476
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:384:B7DQU2l3uROYV9/EbNYrxvUw3LY+DHebG/Crty0mxbi6uNrJAmtaBiogkLOWCoNE:x2iFZG27z4ejKMmg/LaIKyYUFs
                                                                                                                                                                                                                                                                    MD5:D96F25A6C8425938BD321F6808695BB9
                                                                                                                                                                                                                                                                    SHA1:803E648400101955AE3D15AD11A92514AF56BAAD
                                                                                                                                                                                                                                                                    SHA-256:F7D209545D50F7BA17DAFF4043737BDF37C842FC926B8BE50EF8EE362A98E017
                                                                                                                                                                                                                                                                    SHA-512:CD3F0EBD7F67F2F5DF6740C3C8025D15F321B54BD152CF7F181CA4414FB1D9ECEF34B67FC137481E338F170AF4DE3EEEF2DC5A1F42610BADF45C9A8B7B808B56
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:.q..............*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6...*...M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....R8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\a07e410c-de0e-4f21-a95c-aedf80ea4085.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):389409
                                                                                                                                                                                                                                                                    Entropy (8bit):6.014506340372751
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6144:FQLGSTXsYPlzTFEIm8Acx6ZaurE5/EDnJpAl9SeefNqWF4iVx/9LPeq/1LHm/dBD:FQxDJdzTFEsxzurRDn9nfNxF4ijZVtiX
                                                                                                                                                                                                                                                                    MD5:7B9D8572E9D40C83D7807CF88F9E1D7C
                                                                                                                                                                                                                                                                    SHA1:FA5C89DB9C08BF6B30A9DD2CACBC7A324CC299F9
                                                                                                                                                                                                                                                                    SHA-256:0F479A60A40E347F798C1383E615A0061F2DCEED7C49AF54F603F07E4FCA6E4C
                                                                                                                                                                                                                                                                    SHA-512:A98D6196A1D10963F88190A4757B64C8964375E875C6A9D60F49913DB61AEBD79517F852863E5FCD947FE3FFE67527EA7CE74899D2875C02562D19EAC929EA62
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643757298223905e+12,"network":1.643724899e+12,"ticks":117203742.0,"uncertainty":3353517.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABUPWY4cSyAQZRX3j8/SLmMAAAAAAIAAAAAABBmAAAAAQAAIAAAACC7lwCjByxIY/Ds1S6cdCxJW6iSr1QfjoKlVKoVEQ4EAAAAAA6AAAAAAgAAIAAAAD9PMfiGkWkdrfU+zeMpOLPS1eDxLpcgjYP2R/ndeCNxMAAAAK+RpovfP61NtB5nOpQgPMjPTyt2T1WPeru9i3yP05zNVEj0uCRDWfONruG9ricX1kAAAADB9KtQ9KY2z38GdfaF7dW2ZLcAMHOX2oEKBg8ZJG9lsuMexxChB4M8HFpyb0Bpr6axpi+zmMIXt76noTOxFzKN"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245950075485715"},"policy":{"last_statistics_update":"13288230896157

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\d1729299-41ea-4c36-942d-9d72bfb1916d.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):393075
                                                                                                                                                                                                                                                                    Entropy (8bit):6.026590271353613
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6144:cQLGSTXsYPlzTFEIm8Acx6ZaurE5/EDnJpAl9SeefNqWF4iVx/9LPeq/1LHm/dBD:cQxDJdzTFEsxzurRDn9nfNxF4ijZVtiX
                                                                                                                                                                                                                                                                    MD5:1D4C2C41F9A9C3CC4F5C7F9381DE3174
                                                                                                                                                                                                                                                                    SHA1:CAEC98ED3FD97A23CCCD24EDDC30E1210B3C2C5B
                                                                                                                                                                                                                                                                    SHA-256:72269AC9B865C9FEF026C47D43D77893D79B3F77BD9BBA0B7A36EE6EC89C464C
                                                                                                                                                                                                                                                                    SHA-512:A9AF2D43B6DC9EF4A54911D19889FF4BC3777CDA6E3F8036A7DB1F40F06E497C9FFF6D81374AE470A79C3CD406937EEAB0B6F361021A32DC8705EFD8468B7DEB
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643757298223905e+12,"network":1.643724899e+12,"ticks":117203742.0,"uncertainty":3353517.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABUPWY4cSyAQZRX3j8/SLmMAAAAAAIAAAAAABBmAAAAAQAAIAAAACC7lwCjByxIY/Ds1S6cdCxJW6iSr1QfjoKlVKoVEQ4EAAAAAA6AAAAAAgAAIAAAAD9PMfiGkWkdrfU+zeMpOLPS1eDxLpcgjYP2R/ndeCNxMAAAAK+RpovfP61NtB5nOpQgPMjPTyt2T1WPeru9i3yP05zNVEj0uCRDWfONruG9ricX1kAAAADB9KtQ9KY2z38GdfaF7dW2ZLcAMHOX2oEKBg8ZJG9lsuMexxChB4M8HFpyb0Bpr6axpi+zmMIXt76noTOxFzKN"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245950075485715"},"plugins":{"metadata":{"adobe-flash-player":{"disp

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\d3b274d6-bb21-4dd2-b282-7f440e843fcb.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):393075
                                                                                                                                                                                                                                                                    Entropy (8bit):6.0265902654169645
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6144:LQLGSTXsYPlzTFEIm8Acx6ZaurE5/EDnJpAl9SeefNqWF4iVx/9LPeq/1LHm/dBD:LQxDJdzTFEsxzurRDn9nfNxF4ijZVtiX
                                                                                                                                                                                                                                                                    MD5:5DBA943A1FB80914F1C40A5DD35802C8
                                                                                                                                                                                                                                                                    SHA1:614CB08D1D2F2661C97B325D86109D8B57DD1D17
                                                                                                                                                                                                                                                                    SHA-256:E992C02FF086276EC2B78E2DE195C9D8A1E3C975C5546F34D0B262DCD03DBBDA
                                                                                                                                                                                                                                                                    SHA-512:D8C715186EEB14CD0ADA8B426A133FE9E66AD3C89099CFE961128CA0B011778C94854DB5F97DA1E7B1198EF0E071130C30131D81277C5B902BF1BE38830DC22D
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643757298223905e+12,"network":1.643724899e+12,"ticks":117203742.0,"uncertainty":3353517.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABUPWY4cSyAQZRX3j8/SLmMAAAAAAIAAAAAABBmAAAAAQAAIAAAACC7lwCjByxIY/Ds1S6cdCxJW6iSr1QfjoKlVKoVEQ4EAAAAAA6AAAAAAgAAIAAAAD9PMfiGkWkdrfU+zeMpOLPS1eDxLpcgjYP2R/ndeCNxMAAAAK+RpovfP61NtB5nOpQgPMjPTyt2T1WPeru9i3yP05zNVEj0uCRDWfONruG9ricX1kAAAADB9KtQ9KY2z38GdfaF7dW2ZLcAMHOX2oEKBg8ZJG9lsuMexxChB4M8HFpyb0Bpr6axpi+zmMIXt76noTOxFzKN"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245950075485715"},"plugins":{"metadata":{"adobe-flash-player":{"disp

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\fb82ada5-b4ef-46e0-9b8a-7df3d84f5bf6.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):392981
                                                                                                                                                                                                                                                                    Entropy (8bit):6.026417052953649
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6144:kQLGSTXsYPlzTFEIm8Acx6ZaurE5/EDnJpAl9SeefNqWF4iVx/9LPeq/1LHm/dBD:kQxDJdzTFEsxzurRDn9nfNxF4ijZVtiX
                                                                                                                                                                                                                                                                    MD5:853C297E5A6DECE16B6A29B77543E9AC
                                                                                                                                                                                                                                                                    SHA1:582B3F66CDF9B2F0E26A436A97AFF9F0CB72DBC8
                                                                                                                                                                                                                                                                    SHA-256:D1A4D4D076D234D82C1B33C8A6E7D1A67DBACCF48140B4862E352568145C8776
                                                                                                                                                                                                                                                                    SHA-512:367D76B7A3007E75A1CC744ABE0A37C0CD3ACE32D17D342A835DCA78296294E2422B91C3FD157F74C543A9EFD58C08C4E354D78FAF235605CBAF12A068D071AB
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643757298223905e+12,"network":1.643724899e+12,"ticks":117203742.0,"uncertainty":3353517.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABUPWY4cSyAQZRX3j8/SLmMAAAAAAIAAAAAABBmAAAAAQAAIAAAACC7lwCjByxIY/Ds1S6cdCxJW6iSr1QfjoKlVKoVEQ4EAAAAAA6AAAAAAgAAIAAAAD9PMfiGkWkdrfU+zeMpOLPS1eDxLpcgjYP2R/ndeCNxMAAAAK+RpovfP61NtB5nOpQgPMjPTyt2T1WPeru9i3yP05zNVEj0uCRDWfONruG9ricX1kAAAADB9KtQ9KY2z38GdfaF7dW2ZLcAMHOX2oEKBg8ZJG9lsuMexxChB4M8HFpyb0Bpr6axpi+zmMIXt76noTOxFzKN"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245950075485715"},"plugins":{"metadata":{"adobe-flash-player":{"disp

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Google\Chrome\User Data\fd3d3031-301b-419a-b29e-a3bc056aab47.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):389408
                                                                                                                                                                                                                                                                    Entropy (8bit):6.014506017179325
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:6144:6QLGSTXsYPlzTFEIm8Acx6ZaurE5/EDnJpAl9SeefNqWF4iVx/9LPeq/1LHm/dBD:6QxDJdzTFEsxzurRDn9nfNxF4ijZVtiX
                                                                                                                                                                                                                                                                    MD5:A9169EA24DF5727A315E549C4B3666BA
                                                                                                                                                                                                                                                                    SHA1:FC3029A3F42BF80FFB6C4FFC3B2E4FAED07253D6
                                                                                                                                                                                                                                                                    SHA-256:5E0E5C2B12AFA7E90A4E67E06E2DE150B3747C8F2350B35125C2A1EB56A292CF
                                                                                                                                                                                                                                                                    SHA-512:B1A84BBBEB3D2BA883C4FA7ACACB394C5E0FC958D957049553CEB467383BC7B89FF0AD0D0EA747DEAA18E5FF77CED61489FA79EE5CA280635B112ADB07A745E2
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643757298223905e+12,"network":1.643724899e+12,"ticks":117203742.0,"uncertainty":3353517.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABUPWY4cSyAQZRX3j8/SLmMAAAAAAIAAAAAABBmAAAAAQAAIAAAACC7lwCjByxIY/Ds1S6cdCxJW6iSr1QfjoKlVKoVEQ4EAAAAAA6AAAAAAgAAIAAAAD9PMfiGkWkdrfU+zeMpOLPS1eDxLpcgjYP2R/ndeCNxMAAAAK+RpovfP61NtB5nOpQgPMjPTyt2T1WPeru9i3yP05zNVEj0uCRDWfONruG9ricX1kAAAADB9KtQ9KY2z38GdfaF7dW2ZLcAMHOX2oEKBg8ZJG9lsuMexxChB4M8HFpyb0Bpr6axpi+zmMIXt76noTOxFzKN"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245950075265799"},"policy":{"last_statistics_update":"13288230896157

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\30c2578d-8631-4363-b2dc-4abc1c780ec2.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:Google Chrome extension, version 3
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):768843
                                                                                                                                                                                                                                                                    Entropy (8bit):7.992932603402907
                                                                                                                                                                                                                                                                    Encrypted:true
                                                                                                                                                                                                                                                                    SSDEEP:12288:cK2ED9wjXNC1Gse83ru82/u0eKhgxuPFrDXgtbPz54Pm1D0fBmfH1sBrJ9mTiDga:cK2ED9I48seur0/uZKCuPNbgtbz6m1ob
                                                                                                                                                                                                                                                                    MD5:A11D5CAF6BF849AEB84B0C95B1C3B7CF
                                                                                                                                                                                                                                                                    SHA1:27F410CCBD75852C01C7464A1FD7EF8C29BE3916
                                                                                                                                                                                                                                                                    SHA-256:D0E62ACE64AFC334330A7AC3A2CC657914FEB321F1F89AEE11D2A6D0E7D81C31
                                                                                                                                                                                                                                                                    SHA-512:086C124DE3A01BE467647F3BCB4EA05105F690AB45417A0E3D38935ABA9E2381DF59AF98D0FFF7823CEFD5390B48807352E135AC70977AED7B413A8CC48FB590
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:Cr24..............0.."0...*.H.............0...........\7c.<........Fto.8.2'5..qk...%....2...C.F.9.#..e.xQ.......[...L|....3>/....u.:T.7...(.yM...?V.<?........1.a...O?d.....A.H..'.MpB..T.m..Vn Ip..>k.|1..n.<Fb..f..*Q1.....s..2..{*.6....Pp....obM..1.......b1.......(.u^.'z......v.F.W.X4."-*eu...b.........6W..>Nuw9..R{c...Nq.H.K..A!....`v.k+..?.5.>v.....;.._~....tp....x.q.V...7.m.O.~.{!.o/q.'..BK..4./?'.....L..fH&.._<..&.p.k^..\s...:1y..F.N.+...X.PO@Mo....X.G1:..Y.@;..j..........=ae...0.......DU....n...n.;.Ipr..Q....:... <.....a.Y....{ei........0..0...*.H............0.......Mbh=.[O}.+..U.KHF(n3.\"...,g.c...6)..(.E...U...#.i.a..:...N.....P...x.O...(mC;|.5.S.{m.aEx...[..fP.i`.y..5..R....v.$......l-m.............m....ni...`..W.....R.p.b.+...+.\k.R$e~.J\.&c%.d...M..j..V.%...+1F....D....X\.1ct.<........E.B.+.i@...8..^...&YR...I.o...,.....[0Y0...*.H.=....*.H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. D.'.N@.(..GK....m...A.0.."

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\41af2915-51f5-4897-bf38-828833c90425.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:Google Chrome extension, version 3
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):248531
                                                                                                                                                                                                                                                                    Entropy (8bit):7.963657412635355
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
                                                                                                                                                                                                                                                                    MD5:541F52E24FE1EF9F8E12377A6CCAE0C0
                                                                                                                                                                                                                                                                    SHA1:189898BB2DCAE7D5A6057BC2D98B8B450AFAEBB6
                                                                                                                                                                                                                                                                    SHA-256:81E3A4D43A73699E1B7781723F56B8717175C536685C5450122B30789464AD82
                                                                                                                                                                                                                                                                    SHA-512:D779D78A15C5EFCA51EBD6B96A7CCB6D718741BDF7D9A37F53B2EB4B98AA1A78BC4CFA57D6E763AAB97276C8F9088940AC0476690D4D46023FF4BF52F3326C88
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:Cr24..............0.."0...*.H.............0...........\7c.<........Fto.8.2'5..qk...%....2...C.F.9.#..e.xQ.......[...L|....3>/....u.:T.7...(.yM...?V.<?........1.a...O?d.....A.H..'.MpB..T.m..Vn Ip..>k.|1..n.<Fb..f..*Q1.....s..2..{*.6....Pp....obM..1.......b1.......(.u^.'z......v.F.W.X4."-*eu...b.........\..F!...b...l5....zJ.q.......L].....w[T0.6....E.....r..%Z.vFm.9..5!,.~g5...;.t...']....+A.....u....k...e..&..l.6r[yU...%..f.......N..V.....<+.....l..}.{...z...)y.n..'..).....,.b....5.08K%..O.g..D.S.F5o..<(....>....\f..X..I..2."l...w....7f|.~.c.4.E.......0..0...*.H............0.......).'..b.*$w\$.q&.]zF_2..;...?.U,...W..L1.2...R..#....W.....c1k.$W..$.J....+M!.Hz.n`U.I)N.|b.l....{.K@]6.LlP/....](.A..................I...).H....IQ.y.;MG.d..ix..#f.Z$|..|.?...0K...t"i..s...Y..%.Ky....0...{.!+.~v.;....J.....Z....).(6..@?v.;~..2..c....[0Y0...*.H.=....*.H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. .0...|!..A..L.+.=...kP.!.1..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\6060_1862559606\_metadata\verified_contents.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with very long lines, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):3034
                                                                                                                                                                                                                                                                    Entropy (8bit):5.876664552417901
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:48:p/hEc9q0S+UTKYM43z8nqMsfWRUWEADM/W9n7lqFkakzcVTGkcYTPi6zM:RGcg5z/jjjHgUnV278+aWLy4
                                                                                                                                                                                                                                                                    MD5:8B6C3E16DFBF5FD1C9AC2267801DB38E
                                                                                                                                                                                                                                                                    SHA1:F5CADC5914DF858C96C189B092BC89C29407BBAA
                                                                                                                                                                                                                                                                    SHA-256:FD986A547D9585E98F451B87CA85DEB4B61EE540C6FAC678D7BEDABF04653095
                                                                                                                                                                                                                                                                    SHA-512:37048EF8FADF62A26CAEC6EE90AC192429AB1E99424E5C68FACA90C0DAD68642C761FDCAC03FC38FA930841F91FA145A6943EC7F168D4F2FA426F1F092C2F502
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJfcGxhdGZvcm1fc3BlY2lmaWMveDg2XzY0L3BuYWNsX3B1YmxpY19wbmFjbF9qc29uIiwicm9vdF9oYXNoIjoiVkNUSHNJVHNUSXVncWNhV2ctWHVpTU1sdWloV1FSTE1sQnpTTGprdGhETSJ9LHsicGF0aCI6Il9wbGF0Zm9ybV9zcGVjaWZpYy94ODZfNjQvcG5hY2xfcHVibGljX3g4Nl82NF9jcnRiZWdpbl9mb3JfZWhfbyIsInJvb3RfaGFzaCI6ImxINWt2a1BvSVZZczZKVHhyOHc5Q2MxXzloVEJCX3lVSlF6VDZseVVNd0kifSx7InBhdGgiOiJfcGxhdGZvcm1fc3BlY2lmaWMveDg2XzY0L3BuYWNsX3B1YmxpY194ODZfNjRfY3J0YmVnaW5fbyIsInJvb3RfaGFzaCI6IkVuLVFQTW1HUm1xbG9Ud1gzOTAzckpsMkw0R25sQmdET1FhZlNKaHJ4Nk0ifSx7InBhdGgiOiJfcGxhdGZvcm1fc3BlY2lmaWMveDg2XzY0L3BuYWNsX3B1YmxpY194ODZfNjRfY3J0ZW5kX28iLCJyb290X2hhc2giOiJkT2lJVzRmdEdGNW9FY0k1UXYyYjBmdXNrUlYyaUVtdmxhbmV6MlpFc3VvIn0seyJwYXRoIjoiX3BsYXRmb3JtX3NwZWNpZmljL3g4Nl82NC9wbmFjbF9wdWJsaWNfeDg2XzY0X2xkX25leGUiLCJyb290X2hhc2giOiIzNEU5QU9EMmpqLWNoMzZQZ0NVV0YtMUpYWVhVdlNGY1I4bks1aWppcWNjIn0seyJwYXRoIjoiX3B

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_pnacl_json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):507
                                                                                                                                                                                                                                                                    Entropy (8bit):4.68252584617246
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:TjLJ7qaVgPPd8bdzQBXefosmc5T9+n6e1Cetm1JXcAwA:TJ7jViPOd8wfHmZ6RP15
                                                                                                                                                                                                                                                                    MD5:35D5F285F255682477F4C50E93299146
                                                                                                                                                                                                                                                                    SHA1:FB58813C4D785412F05962CD379434669DE79C2B
                                                                                                                                                                                                                                                                    SHA-256:5424C7B084EC4C8BA0A9C69683E5EE88C325BA28564112CC941CD22E392D8433
                                                                                                                                                                                                                                                                    SHA-512:59DF2D5F2684FACC80C72F9C4B7E280F705776076C9D843534F772D5A3D578BEE04289AEE81320F23FB4D743F3969EDF5BA53FEBBAC8A4D27F3BC53BCF271C3E
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{. "COMMENT": [. "This file serves as a template for the resource info description used by ", . "the NaCl Chrome plugin. It is kept in the NaCl repository to prevent ", . "hard-coding of NaCl-specific information inside the Chrome repository.". ], . "abi-version": 1, . "pnacl-arch": "x86-64", . "pnacl-ld-name": "ld.nexe", . "pnacl-llc-name": "pnacl-llc.nexe", . "pnacl-sz-name": "pnacl-sz.nexe", . "pnacl-version": "5dfe030a71ca66e72c5719ef5034c2ed24706c43".}

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_for_eh_o

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):2712
                                                                                                                                                                                                                                                                    Entropy (8bit):3.4025803725190906
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:48:b/5D5V5PK82aTS6aTTw0Do1DttoyDNsEA:b/hbVic1ZtLDNsE
                                                                                                                                                                                                                                                                    MD5:604FF8F351A88E7A1DBD7C836378AE86
                                                                                                                                                                                                                                                                    SHA1:9D8D89AE9F13D6306E619A4EAAD51EDE91A5F9F3
                                                                                                                                                                                                                                                                    SHA-256:947E64BE43E821562CE894F1AFCC3D09CD7FF614C107FC94250CD3EA5C943302
                                                                                                                                                                                                                                                                    SHA-512:85B1EDA4C473E00034EE627B7ABB894A77E521BC6A91A91A4A3744CA7511CB0AF10B9723D9ECC2CE3378DD70B659DF842D8C11875958CB77070CF01EC0A15840
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:.ELF..............>.................................@.....@.......................................PH.......,$J.l=....J.$<A[..@.A...M..A..ffffff..................PH......,$J.l=....J.$<A[..D..A...M..A..ffffff..................PH..1..,$J.l=....J.$<A[.......A...M..A..ffffff..................PH..SP..h.........fff...................h.........fff.............J.$<[.,$J.l=....J.$<.....f.....................................................................................................................................................................................NaCl....x86-64...........zR..x......................@....C....C.........8.......@....C....C.........T.......@....C....C.........p.......`....C....C..B...... .......................<...............@.......X.......................t........................clang version 3.7.0 (https://chromium.googlesource.com/a/native_client/pnacl-clang.git ce163fdd0f16b4481e5cf77a16d45e9b4dc8300e) (https://chromium.googlesource.com/a/native_client/pna

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_o

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):2776
                                                                                                                                                                                                                                                                    Entropy (8bit):3.5335802354066246
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:48:b/5D5V5ej5ej5PjDdaTS6aTTw6DV1DtFouoyDOsTy:b/hbEEVJB1ZFhLDOsT
                                                                                                                                                                                                                                                                    MD5:88C08CD63DE9EA244F70BFC53BBCADF6
                                                                                                                                                                                                                                                                    SHA1:8F38A113A66B18BAA02E2C995099CF1145A29DAA
                                                                                                                                                                                                                                                                    SHA-256:127F903CC986466AA5A13C17DFDD37AC99762F81A794180339069F48986BC7A3
                                                                                                                                                                                                                                                                    SHA-512:78D2500493A65A23D101EC2420DC5F0CE8C75EFAC425C28547121643E4FB568E9D827EF2C0F7068159E043C86B986F29BF92C6BADC675F160B63C7B3512EB95F
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:.ELF..............>.....................X...........@.....@.......................................PH.......,$J.l=....J.$<A[..@.A...M..A..ffffff..................PH......,$J.l=....J.$<A[..D..A...M..A..ffffff..................PH..1..,$J.l=....J.$<A[.......A...M..A..ffffff..................PH..,$J.l=....J.$<A[f........A...M..A..ffffff..................PH..,$J.l=....J.$<A[f........A...M..A..ffffff..................PH..SP..h.........fff.............J.$<[.,$J.l=....J.$<.....f.K...............`.......P.......................z...................................NaCl....x86-64...clang version 3.7.0 (https://chromium.googlesource.com/a/native_client/pnacl-clang.git ce163fdd0f16b4481e5cf77a16d45e9b4dc8300e) (https://chromium.googlesource.com/a/native_client/pnacl-llvm.git 7251d5b59fca15195c94a3a7da70f0081724448f)............zR..x......................@....C....C.........8.......@....C....C.........T.......@....C....C.........p.......@....C....C.................@....C....C.................@...

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_crtend_o

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):1520
                                                                                                                                                                                                                                                                    Entropy (8bit):2.799960074375893
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:Bvx/ekjlM/NQQmTfR9yp9396QQmTfR9C6wRqD8MTDDw7lEOkSbfuEAXwX6BX2U8b:bDjO/NbmT3296bmT3Twk8qDwh7b7CD8
                                                                                                                                                                                                                                                                    MD5:75E79F5DB777862140B04CC6861C84A7
                                                                                                                                                                                                                                                                    SHA1:4DB7BDC80206765461AC68CEC03CE28689BBEE0C
                                                                                                                                                                                                                                                                    SHA-256:74E8885B87ED185E6811C23942FD9BD1FBAC9115768849AF95A9DECF6644B2EA
                                                                                                                                                                                                                                                                    SHA-512:FE3F86E926759E71494F2060C4ED3C883EBCAF20CB129A5AD7F142766C33FAB10B5FABC3C7C938E0E895E27EA0AC03CBFE8D0EEABF5300A4AD07F67FD96CC253
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:.ELF..............>.................................@.....@.........................NaCl....x86-64.......clang version 3.7.0 (https://chromium.googlesource.com/a/native_client/pnacl-clang.git ce163fdd0f16b4481e5cf77a16d45e9b4dc8300e) (https://chromium.googlesource.com/a/native_client/pnacl-llvm.git 7251d5b59fca15195c94a3a7da70f0081724448f)...text..comment..bss..group..note.GNU-stack..eh_frame..shstrtab..strtab..symtab..data..note.NaCl.ABI.x86-64.......................................................!................................................................................................................................................................................................../../../pnacl/support/crtend.c.__EH_FRAME_END__...............................................................................................@...............................................................H.......................................P.......................H...............................

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=7511538a3a6a0b862c772eace49075ed1bbe2377, stripped
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):2163864
                                                                                                                                                                                                                                                                    Entropy (8bit):6.07050487397106
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:24576:HPHonIwYZJ0ykwVO7Owf31yJKzCtxO8RSV4lY+PbeHVxCtjFV4lBNeSAmfGqa+A7:HvSMRwf3SKmlY+PyPvnM2Gq+
                                                                                                                                                                                                                                                                    MD5:0BB967D2E99BE65C05A646BC67734833
                                                                                                                                                                                                                                                                    SHA1:220A41A326F85081A74C4BB7C5F4E115D1B4B960
                                                                                                                                                                                                                                                                    SHA-256:C6C2D0C2FC3E38A9BFA19C78066439C2F745393F1FD1C49C3C6777F697222C76
                                                                                                                                                                                                                                                                    SHA-512:8EF8689E00E4B210A30444D18ED6247F364995ABEB2FD272064C3AF671EEDB4D9B8B67CA56F72FEBF8F56896D4EA7EC4B10CB445FFA1C710C1F312E9DA0E4896
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Antivirus:
                                                                                                                                                                                                                                                                    • Antivirus: Metadefender, Detection: 0%, Browse
                                                                                                                                                                                                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:.ELF..............>..... .......@.........!.........@.8...@......................................................................................................................................................{......W...............................................@.......@...............P.td.....h.......h.......h......4b......4b..............Q.td................................................................NaCl....x86-64..............GNU.u.S.:j..,w...u...#w.......?......Y@.......@......1@......B@......P@.....@X@.....``@......h@.....pp@.....H.@.......@.......@.......@.......@.......@....`..@.......@.......A.......A......................p................@..............?.......A.........5.....?5.5...?.5.....?......P9..............PC.......?......0@................aCoc...?..`.(..?.y.P.D.?<.s..O.u......$@.......@...............@........................................ ... ....... .......@...`...`...`...`...................`...`...`...`...`...`...`...................................`...

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_libcrt_platform_a

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:current ar archive
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):40552
                                                                                                                                                                                                                                                                    Entropy (8bit):4.127255967843258
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:768:xlP+1fzyUNVU5LmKxeOnjpD5eA/eUnUUxvT:xlP+1ryYMTekpD5eAWjuvT
                                                                                                                                                                                                                                                                    MD5:0CE951B216FCF76F754C9A845700F042
                                                                                                                                                                                                                                                                    SHA1:6F99A259C0C8DAD5AD29EE983D35B6A0835D8555
                                                                                                                                                                                                                                                                    SHA-256:7A1852EA4BB14A2A623521FA53F41F02F8BA3052046CF1AA0903CFAD0D1E1A7B
                                                                                                                                                                                                                                                                    SHA-512:7C2F9BF90EB1F43C17B4E14A077759FA9DC62A7239890975B2D6FD543B31289DC3B49AE456CA73B98DE9AC372034F340C708D23D9D3AAB05CCBDABDC56A6314E
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:!<arch>./ 0 0 0 0 624 `...................,...8...Z(..e...e...t...t...y`..y`..y`..y`..y`..y`..y`..y`..y`..y`..y`..y`..y`..y`........................fmod.fmodf.memcmp.memcpy.memmove.memset.__nacl_read_tp.__pnacl_init_irt.longjmp.setjmp.__Sz_fptosi_f32_i64.__Sz_fptosi_f64_i64.__Sz_fptoui_f32_i32.__Sz_fptoui_f32_i64.__Sz_fptoui_f64_i32.__Sz_fptoui_f64_i64.__Sz_sitofp_i64_f32.__Sz_sitofp_i64_f64.__Sz_uitofp_i32_f32.__Sz_uitofp_i32_f64.__Sz_uitofp_i64_f32.__Sz_uitofp_i64_f64.nacl_tp_tdb_offset.nacl_tp_tls_offset.__Sz_bitcast_16xi1_i16.__Sz_bitcast_8xi1_i8.__Sz_bitcast_i16_16xi1.__Sz_bitcast_i8_8xi1.__Sz_fptoui_4xi32_f32.__Sz_uitofp_4xi32_4xf32..e_fmod.o/ 0 0 0 644 2792 `..ELF..............>.....................(...........@.....@.......................................PH..AVAUATSfI.~.M..I.. E....@.A......D..D1.......8fI.~.M.....I.. E..A......D..D..t.D....D..f....D..=....r...Y...^.[A\A]A^..@..,$J.l=....J.$<A[A...M..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_a

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:current ar archive
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):132784
                                                                                                                                                                                                                                                                    Entropy (8bit):3.6998481247844937
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:384:Hf0mOXYmeKzQUIdedRFvT5p1Ee2HyAlL3O4:Hf7OXdmWRJT5p1R2HyAhO4
                                                                                                                                                                                                                                                                    MD5:C37CA2EB468E6F05A4E37DF6E6020D0F
                                                                                                                                                                                                                                                                    SHA1:EA787E5EADFB488632EC60D8B80B555796FA9FE9
                                                                                                                                                                                                                                                                    SHA-256:C1483ED423FEE15D86E8B5D698B2CDAB89186CE7FF9C4E3D5F3F961FD80D7C6E
                                                                                                                                                                                                                                                                    SHA-512:01281DE92B281FB29E1ACA96AA64B740B65CC3A9097307827F0D8DB9E1C164C56AFCDFA0BF138EA670A596D55CE2C8D722760744E9FC9343BB6514417BF333BA
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:!<arch>./ 0 0 0 0 942 `....;...|.......4...x..#...-...4l..E...M...U...]...n...u...~X...4.......................L......................t...p...............`......"...*...1...:...D...K...T...\...d...r|..|0.......x...........L.......\...8..........................__clzti2.__compilerrt_fmax.__compilerrt_fmaxf.__compilerrt_logb.__compilerrt_logbf.__ctzti2.__divdc3.__divdi3.__divmoddi4.__divmodsi4.__divsc3.__divsi3.__divti3.__fixdfdi.__fixdfsi.__fixdfti.__fixsfdi.__fixsfsi.__fixsfti.__fixunsdfdi.__fixunsdfsi.__fixunsdfti.__fixunssfdi.__fixunssfsi.__fixunssfti.__floatdidf.__floatdisf.__floatsidf.__floatsisf.__floattidf.__floattisf.__floatundidf.__floatundisf.__floatunsidf.__floatunsisf.__floatuntidf.__floatuntisf.compilerrt_abort_impl.__moddi3.__modsi3.__modti3.__muldc3.__muloti4.__mulsc3.__multi3.__popcountdi2.__popcountsi2.__popcountti2.__powidf2.__powisf2.__udivdi3.__udivmoddi4.__udivmodsi4.__udivmodti4.__udivsi3.__udivti3.__umoddi3.__umodsi3.

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_a

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:current ar archive
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):13514
                                                                                                                                                                                                                                                                    Entropy (8bit):3.8217211433441904
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:192:uU9v4pXizdrEuxwk3vp20tprpdSGFwDqO:P9v4palvvc0tpFdSGFwmO
                                                                                                                                                                                                                                                                    MD5:4E8BEDA73EB7BD99528BF62B7835A3FA
                                                                                                                                                                                                                                                                    SHA1:DC0F263A7B2A649D11FF7B56FE9CFAC44F946036
                                                                                                                                                                                                                                                                    SHA-256:6B835FD48DF505EB336FF6518CE7B93BB0ED854DADAA5C1EEED48D420291F62C
                                                                                                                                                                                                                                                                    SHA-512:46116B8BABC719676D68FD40D2AC82F38A3D13D8A482ADFC6FC32A99170AC3420E52CC33242CCD0FA723ABF4FA5EDBB9CE16A09C729BF04AE4AFBB2F67A1E38B
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:!<arch>./ 0 0 0 0 94 `................._pnacl_wrapper_start.__pnacl_real_irt_query_func.__pnacl_wrap_irt_query_func..shim_entry.o/ 0 0 0 644 7392 `..ELF..............>..................... ...........@.....@.........................NaCl....x86-64..................................A.L....A.L...D...........D....A.....t+.. u..t"..A.D..........A... .....A.D...........f..D..<.......................Q.......................V.......................clang version 3.7.0 (https://chromium.googlesource.com/a/native_client/pnacl-clang.git ce163fdd0f16b4481e5cf77a16d45e9b4dc8300e) (https://chromium.googlesource.com/a/native_client/pnacl-llvm.git 7251d5b59fca15195c94a3a7da70f0081724448f).../../ppapi/native_client/src/untrusted/pnacl_irt_shim/shim_entry.c./mnt/data/b/build/slave/sdk/build/src/out_pnacl/x64.NACL_STARTUP_FINI.NACL_STARTUP_ENVC.NACL_STARTUP_ARGC.NACL_STARTUP_ARGV.NaClStartupInfoIndex.unsigned int.size_t.char.TYPE_na

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_dummy_a

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:current ar archive
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):2078
                                                                                                                                                                                                                                                                    Entropy (8bit):3.21751839673526
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:24:MOcpdhWE5O/bZbmT3296bmT3TwQwDnvD/+R3:MHuECdaTS6aTTwXDvD/+l
                                                                                                                                                                                                                                                                    MD5:F950F89D06C45E63CE9862BE59E937C9
                                                                                                                                                                                                                                                                    SHA1:9CFAD34139CC428CE0C07A869C15B71A9632365D
                                                                                                                                                                                                                                                                    SHA-256:945B1C8A1666CBF05E8B8941B70D9D044BAAFB59B006F728F8995072DE7C4C40
                                                                                                                                                                                                                                                                    SHA-512:F9AFBB800A875EDCC63DEA4986179E73632B3182951A99C8B3D37DB454EFD7CC7192ECA5AC87514918A858BAD6DAEAB59548CA2E90EADA9900EF5B9F08E62CFC
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:!<arch>./ 0 0 0 0 30 `........._pnacl_wrapper_start..// 20 `.dummy_shim_entry.o/./0 0 0 0 644 1840 `..ELF..............>.................................@.....@.......................................PH..,$J.l=....J.$<.....f..D......................................NaCl....x86-64...clang version 3.7.0 (https://chromium.googlesource.com/a/native_client/pnacl-clang.git ce163fdd0f16b4481e5cf77a16d45e9b4dc8300e) (https://chromium.googlesource.com/a/native_client/pnacl-llvm.git 7251d5b59fca15195c94a3a7da70f0081724448f)............zR..x...................... ....C....C..... .........................rela.text..comment..bss..group..note.GNU-stack..rela.eh_frame..shstrtab..strtab..symtab..data..note.NaCl.ABI.x86-64.....................................................................................................................................................

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=309d6d3d463e6b1b0690f39eb226b1e4c469b2ce, stripped
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):14091416
                                                                                                                                                                                                                                                                    Entropy (8bit):5.928868737447095
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:196608:tKVqXp3Qev4dg6ilfHM8KLM2J3jqjnkZ:uqufB
                                                                                                                                                                                                                                                                    MD5:9B159191C29E766EBBF799FA951C581B
                                                                                                                                                                                                                                                                    SHA1:D1D4BBC63AB5FC1E4A54EB7B82095A6F2CE535EE
                                                                                                                                                                                                                                                                    SHA-256:2F4A3A0730142C5EE4FA2C05D27A5DEFC18886A382D45F5DB254B61B28ED642B
                                                                                                                                                                                                                                                                    SHA-512:0B4FF60B5428F81B8B1BCF3328CF80CBD88D8CE5E8BDBC236B06D5A54E7CF26168A3ABB348D87423DA613AB3F0B4D9B37CB5180804839F1CA158EC2B315DDF00
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Antivirus:
                                                                                                                                                                                                                                                                    • Antivirus: Metadefender, Detection: 0%, Browse
                                                                                                                                                                                                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:.ELF..............>..... .......@...................@.8...@...............$.....................................................................................................................!.......!......'......G...............................................@.......@...............P.td............................D.......D...............Q.td................................................................NaCl....x86-64..............GNU.0.m=F>k....&...i........................0C......0C..0C..0E..............0C......0E.-DT.!.?.-DT.!.........................?........-DT.!...-DT.!.?.......?......................?..............?."..."..."..."......@.......`...................... ...@...`...................... ...@...`...................... ...@...`...................... ...@...`.......................................`... ...@...`...........`...`.......@...@....... ....1..`3.. 4..`-..`-...:...:...F..@H..`H...H...F...F...G...H.. H...F..@G...I.. I..@I..@G...G...I...I...J...G..`I..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\6060_1862559606\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=4b15de4ab227d5e46213978b8518d53c53ce1db9, stripped
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):1901720
                                                                                                                                                                                                                                                                    Entropy (8bit):5.955741933854651
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12288:gXqUSpBjwQO2o8k+7zjidg4euCAauOILffvCpGy4Wh3BTFmHpq82K2/KsvPyla9d:gafZwcOdNe2auOepCBTFmJq3Kf8ksr
                                                                                                                                                                                                                                                                    MD5:9DC3172630E525854B232FF71499D77C
                                                                                                                                                                                                                                                                    SHA1:0082C58EDCE3769E90DB48E7C26090CE706AD434
                                                                                                                                                                                                                                                                    SHA-256:6AA1DA6C264E0AF4E32A004F4076C7557C6AC6D9C38B0C5DE97302D83FA248C3
                                                                                                                                                                                                                                                                    SHA-512:9E9584241A39EED1463D7D4C1B26AE570B839AA315778FF3400C61341EBA43B630307DE9F1532A265CA82EA69BDEA03EC9D963E59A18569C02DA8285449870FE
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Antivirus:
                                                                                                                                                                                                                                                                    • Antivirus: Metadefender, Detection: 0%, Browse
                                                                                                                                                                                                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:.ELF..............>..... .......@...................@.8...@.............................................................................................0.......0................................................Y......................................................@.......@...............P.td....t^......t^......t^.......W.......W..............Q.td................................................................NaCl....x86-64..............GNU.K..J.'..b......<S...`...`... ...@...@.......@.............................................Y@......................p................@.......?..............?.......A.........5.....?5.5...?.5.....?......P9..............PC.......?......0@................aCoc...?..`.(..?.y.P.D.?<.s..O.u......$@.......@...............@`...`.......@.................................................. ...`... ... .......`................... ... ...@...`.......................@... Z...[...[...e.......... ...@... ...@...`........0...0...2..`4.. 6...7...9...~...~...z...{...{..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\6060_1862559606\manifest.fingerprint

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):66
                                                                                                                                                                                                                                                                    Entropy (8bit):3.928261499316817
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3:STDLGswXEVBcVdBiTDt3zLsW:SPLGLErcVdBiDtf3
                                                                                                                                                                                                                                                                    MD5:C00BCE97F21B1AD61EB9B8CD001795EE
                                                                                                                                                                                                                                                                    SHA1:8E0392FF3DB267D847711C3F4E0D7468060E1535
                                                                                                                                                                                                                                                                    SHA-256:59F06F04230E32E8BC839F45B984D31D611930427B631C963D09E7064A602363
                                                                                                                                                                                                                                                                    SHA-512:9930E44A6ECC62505DBADCEED5E05645909FF09816FB12AAC0414E6D2830AC09758366C3B7D4EDD7839C87EB16DFA4C66D8981AE6237D408B37135C3506F4CD2
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:1.6f6bc93dcd62dc251850d2ff458fda96083ceb7fbe8eeb11248b8485ef2aea23

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\6060_1862559606\manifest.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):573
                                                                                                                                                                                                                                                                    Entropy (8bit):4.859567579783832
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:BLqG6yDJmL4mLDlG9hQ181G46XzrXc+EFfNqpaiOc+T5NqXIOclNqXL:BkylmL4mLDlJ18116XsRNqtZeNqXIZlE
                                                                                                                                                                                                                                                                    MD5:1863B86D0863199AFDA179482032945F
                                                                                                                                                                                                                                                                    SHA1:36F56692E12F2A1EFCA7736C236A8D776B627A86
                                                                                                                                                                                                                                                                    SHA-256:F14E451CE2314D29087B8AD0309A1C8B8E81D847175EF46271E0EB49B4F84DC5
                                                                                                                                                                                                                                                                    SHA-512:836556F3D978A89D3FC1F07FCED2732A17E314ED6A021737F087E32A69BFA46FD706EBBDFD3607FF42EDCB75DC463C29B9D9D2F122504F567BB95844F579831B
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{."update_url": "https://clients2.google.com/service/update2/crx",.. "description": "Portable Native Client Translator Multi-CRX",. "name": "PNaCl Translator Multi-CRX",. "manifest_version": 2,. "minimum_chrome_version": "30.0.0.0",. "version": "0.57.44.2492",. "platforms": [. {. "nacl_arch": "x86-32",. "sub_package_path": "_platform_specific/x86_32/". },. {. "nacl_arch": "x86-64",. "sub_package_path": "_platform_specific/x86_64/". },. {. "nacl_arch": "arm",. "sub_package_path": "_platform_specific/arm/". }. ].}.

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\ce8f33da-8491-4f7c-aa69-0d87007fc9e5.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:very short file (no magic)
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):1
                                                                                                                                                                                                                                                                    Entropy (8bit):0.0
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3:L:L
                                                                                                                                                                                                                                                                    MD5:5058F1AF8388633F609CADB75A75DC9D
                                                                                                                                                                                                                                                                    SHA1:3A52CE780950D4D969792A2559CD519D7EE8C727
                                                                                                                                                                                                                                                                    SHA-256:CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
                                                                                                                                                                                                                                                                    SHA-512:0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:.

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\e48990e3-bd94-4f03-b0df-5d93913bae91.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:very short file (no magic)
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):1
                                                                                                                                                                                                                                                                    Entropy (8bit):0.0
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3:L:L
                                                                                                                                                                                                                                                                    MD5:5058F1AF8388633F609CADB75A75DC9D
                                                                                                                                                                                                                                                                    SHA1:3A52CE780950D4D969792A2559CD519D7EE8C727
                                                                                                                                                                                                                                                                    SHA-256:CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
                                                                                                                                                                                                                                                                    SHA-512:0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:.

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\41af2915-51f5-4897-bf38-828833c90425.tmp

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:Google Chrome extension, version 3
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):248531
                                                                                                                                                                                                                                                                    Entropy (8bit):7.963657412635355
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
                                                                                                                                                                                                                                                                    MD5:541F52E24FE1EF9F8E12377A6CCAE0C0
                                                                                                                                                                                                                                                                    SHA1:189898BB2DCAE7D5A6057BC2D98B8B450AFAEBB6
                                                                                                                                                                                                                                                                    SHA-256:81E3A4D43A73699E1B7781723F56B8717175C536685C5450122B30789464AD82
                                                                                                                                                                                                                                                                    SHA-512:D779D78A15C5EFCA51EBD6B96A7CCB6D718741BDF7D9A37F53B2EB4B98AA1A78BC4CFA57D6E763AAB97276C8F9088940AC0476690D4D46023FF4BF52F3326C88
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:Cr24..............0.."0...*.H.............0...........\7c.<........Fto.8.2'5..qk...%....2...C.F.9.#..e.xQ.......[...L|....3>/....u.:T.7...(.yM...?V.<?........1.a...O?d.....A.H..'.MpB..T.m..Vn Ip..>k.|1..n.<Fb..f..*Q1.....s..2..{*.6....Pp....obM..1.......b1.......(.u^.'z......v.F.W.X4."-*eu...b.........\..F!...b...l5....zJ.q.......L].....w[T0.6....E.....r..%Z.vFm.9..5!,.~g5...;.t...']....+A.....u....k...e..&..l.6r[yU...%..f.......N..V.....<+.....l..}.{...z...)y.n..'..).....,.b....5.08K%..O.g..D.S.F5o..<(....>....\f..X..I..2."l...w....7f|.~.c.4.E.......0..0...*.H............0.......).'..b.*$w\$.q&.]zF_2..;...?.U,...W..L1.2...R..#....W.....c1k.$W..$.J....+M!.Hz.n`U.I)N.|b.l....{.K@]6.LlP/....](.A..................I...).H....IQ.y.;MG.d..ix..#f.Z$|..|.?...0K...t"i..s...Y..%.Ky....0...{.!+.~v.;....J.....Z....).(6..@?v.;~..2..c....[0Y0...*.H.=....*.H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. .0...|!..A..L.+.=...kP.!.1..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\bg\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):796
                                                                                                                                                                                                                                                                    Entropy (8bit):4.864931792423268
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJMLkSlwZGGMLkSlwZ+WYpU34f145Gb+dgoxTyO8ZpU34f1L0frhmJ03OyZnLt:1HE7n4gn8WYpYrbhz8ZpotHOGAOf6aD
                                                                                                                                                                                                                                                                    MD5:6F8E288A9AD5B1ED8633B430E2B4D4CA
                                                                                                                                                                                                                                                                    SHA1:F671D3D4BEFA431D1946D706F4192D44E29B6F08
                                                                                                                                                                                                                                                                    SHA-256:A114E2783D0E9B12155017323BA70838F0F82A71C7EE8DC1F115AE36991241F8
                                                                                                                                                                                                                                                                    SHA-512:0F87F3F0D115B872288949E59ACD3CD41B1FBC64A622D8FDA6D71FAFC5A900D92ADFBB0E7EB926F2A8759BBAA0896D48728FB719BBF5EF54AC21027328F7700C
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "........ . ... ........ .. Chrome".. },.. "app_name": {.. "message": "........ . ... ........ .. Chrome".. },.. "craw_app_unavailable": {.. "message": "........... .... ...... .. .............".. },.. "craw_connect_to_network": {.. "message": "...., ........ .. . ......".. },.. "iap_unavailable": {.. "message": "........... .... ...... .. .......... ....... .. .........".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "...., ...... . Chrome.".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\ca\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):675
                                                                                                                                                                                                                                                                    Entropy (8bit):4.536753193530313
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJ0gbbGG0gbb+WYpU34g3YbiLO+dgyGFoO8ZpU34+puiPmb03OyZnLAOfTYABk:1HE5baib6WYpm31Lt0Z8Zp8pxOGAOfKD
                                                                                                                                                                                                                                                                    MD5:1FDAFC926391BD580B655FBAF46ED260
                                                                                                                                                                                                                                                                    SHA1:C95743C3F43B2B099FEBEBC5BD850F0C20E820AC
                                                                                                                                                                                                                                                                    SHA-256:C67898B67F9C9209EAFDA6532B62D5789863CFB855998DD6A70E7775316CEC20
                                                                                                                                                                                                                                                                    SHA-512:39D95D45C5746DA3BAA7AE6A3344EA17D7A7C3569C2A56959FF119261DA08C747A320FCF701AC72B8DBDBF8BF06FD8B239017A282CDDA444F3826D4EC672CBB4
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Sistema de pagaments de Chrome Web Store".. },.. "app_name": {.. "message": "Sistema de pagaments de Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Ara mateix aquesta aplicaci. no est. disponible.".. },.. "craw_connect_to_network": {.. "message": "Connecteu-vos a una xarxa.".. },.. "iap_unavailable": {.. "message": "La funci. Pagaments a l'aplicaci. no est. disponible actualment.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Inicieu la sessi. a Chrome.".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\cs\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):641
                                                                                                                                                                                                                                                                    Entropy (8bit):4.698608127109193
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJfZGGfZ+WYpU34OBh+dgN/O8ZpU34j05U03OyZnLAOfTYWc:1HEl4G8WYpdt8Zpq5TOGAOfW
                                                                                                                                                                                                                                                                    MD5:76DEC64ED1556180B452A13C83171883
                                                                                                                                                                                                                                                                    SHA1:CFB1E56FD587BCDC459C1D9A683B71F9849058F9
                                                                                                                                                                                                                                                                    SHA-256:32290D69A90E6BAAC428B10382C99221B12773BB9A184F3B93DFB48A4F6D7A40
                                                                                                                                                                                                                                                                    SHA-512:5230A217968D5DC463E2E92D704544311A721E5CEF65C3125CBD8DEB9C0293D3BFB5C820A6011ABF77095FDEE7DAF67D541DC202B0C9CDB0908CBB85D84885CB
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Platby Internetov.ho obchodu Chrome".. },.. "app_name": {.. "message": "Platby Internetov.ho obchodu Chrome".. },.. "craw_app_unavailable": {.. "message": "Aplikace v sou.asn. dob. nen. dostupn..".. },.. "craw_connect_to_network": {.. "message": "P.ipojte se pros.m k s.ti.".. },.. "iap_unavailable": {.. "message": "Platby v aplikaci aktu.ln. nejsou k dispozici.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "P.ihlaste se do Chromu.".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\da\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):624
                                                                                                                                                                                                                                                                    Entropy (8bit):4.5289746475384565
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJJMKKFZGGJMKKFZ+WYpU34OHu+dgxlCZO8ZpU34J4Wu03OyZnLAOfTYzD:1HErMKfqMKVWYpM6lL8ZpDNOGAOfiD
                                                                                                                                                                                                                                                                    MD5:238B97A36E411E42FF37CEFAF2927ED1
                                                                                                                                                                                                                                                                    SHA1:4E47AC90BA24C8F4724D9293FA40CFD4ADA66FE0
                                                                                                                                                                                                                                                                    SHA-256:4977D4A053542FF66967FAED6B06585DD70E68E20BFEB533B66FE3287F9655D9
                                                                                                                                                                                                                                                                    SHA-512:FD0742D47B5F5AB9AAD9B4C3D57F63CB693E060EECE123A72036C6E92156D099495C7E9E9CC6DC83EEBCDDCC4B4C81FB47E4C9559DA3EBA024780FFF10C53E0A
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Betalinger i Chrome Webshop".. },.. "app_name": {.. "message": "Betalinger i Chrome Webshop".. },.. "craw_app_unavailable": {.. "message": "Appen er ikke tilg.ngelig i .jeblikket.".. },.. "craw_connect_to_network": {.. "message": "Opret forbindelse til et netv.rk.".. },.. "iap_unavailable": {.. "message": "Betaling i appen er ikke tilg.ngelig i .jeblikket.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Log ind p. Chrome.".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\de\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):651
                                                                                                                                                                                                                                                                    Entropy (8bit):4.583694000020627
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJQ1ZGGQ1Z+WYpU34pCEMT+dgJMlCTO8ZpU34p6FK603OyZnLAOfTYJ6K:1HEzWWYp3Bewv8Zp7k4OGAOfQj
                                                                                                                                                                                                                                                                    MD5:6B3E916E8C1991AA0453CBA00FEDCAAA
                                                                                                                                                                                                                                                                    SHA1:D6366D15912E40CA107FD42BFE9579C3336A51F9
                                                                                                                                                                                                                                                                    SHA-256:A62FFAB910E31531758EEE48B2CC71A8857BEC3021DEAD50B668CBA3C8667053
                                                                                                                                                                                                                                                                    SHA-512:87EA4311B61F29543B13F3E17DFA919D0C320B4FE370CC152E0B1514BCA79B0ABB526DDCF08621D6EBFA48923EE8FB4C667EFB120A72BD9583EEBEE7BFB80552
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Chrome Web Store-Zahlungen".. },.. "app_name": {.. "message": "Chrome Web Store-Zahlungen".. },.. "craw_app_unavailable": {.. "message": "Die App ist momentan nicht verf.gbar.".. },.. "craw_connect_to_network": {.. "message": "Bitte stellen Sie eine Verbindung zu einem Netzwerk her.".. },.. "iap_unavailable": {.. "message": "In-App-Zahlungen sind momentan nicht m.glich.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Bitte melden Sie sich in Chrome an.".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\el\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):787
                                                                                                                                                                                                                                                                    Entropy (8bit):4.973349962793468
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:24:1HEw+aZ+6WYpbWZe80A08ZpCGyDVWlOGAOf+XD:WguYpCZnpEZbGoD
                                                                                                                                                                                                                                                                    MD5:05C437A322C1148B5F78B2F341339147
                                                                                                                                                                                                                                                                    SHA1:AB53003A678E44A170E73711FBD9949833BBF3AA
                                                                                                                                                                                                                                                                    SHA-256:A052C32B4FCAC61152EB0ADB2C260FB6A8256AD104AA0013DB93E9798D41A070
                                                                                                                                                                                                                                                                    SHA-512:C36CB9202A34356DD06D377E2A088F428D0B8EBE7D2E54F8380485E9D94A0598D7F651C1E7A2FD55BE481D49C02B0812F2BA335E08611EC85EE0BD60784A6B40
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "........ ... Chrome Web Store".. },.. "app_name": {.. "message": "........ ... Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": ". ........ .... .. ..... ... ..... ..........".. },.. "craw_connect_to_network": {.. "message": ".......... .. ... .......".. },.. "iap_unavailable": {.. "message": ".. ........ ..... ......... ... ..... ..... .. ...... ...........".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": ".......... ... Chrome.".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\en\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):593
                                                                                                                                                                                                                                                                    Entropy (8bit):4.483686991119526
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJ6GG6+WYpU34OuFpR+dgGfFZO8ZpU34aEGFpR03OyZnLAOfTYdD:1HEVSWYpVp0JS8Zp5KpaOGAOfuD
                                                                                                                                                                                                                                                                    MD5:91F5BC87FD478A007EC68C4E8ADF11AC
                                                                                                                                                                                                                                                                    SHA1:D07DD49E4EF3B36DAD7D038B7E999AE850C5BEF6
                                                                                                                                                                                                                                                                    SHA-256:92F1246C21DD5FD7266EBFD65798C61E403D01A816CC3CF780DB5C8AA2E3D9C9
                                                                                                                                                                                                                                                                    SHA-512:FDC2A29B04E67DDBBD8FB6E8D2443E46BADCB2B2FB3A850BBD6198CDCCC32EE0BD8A9769D929FEEFE84D1015145E6664AB5FEA114DF5A864CF963BF98A65FFD9
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Chrome Web Store Payments".. },.. "app_name": {.. "message": "Chrome Web Store Payments".. },.. "craw_app_unavailable": {.. "message": "App currently unavailable.".. },.. "craw_connect_to_network": {.. "message": "Please connect to a network.".. },.. "iap_unavailable": {.. "message": "In-App Payments is currently unavailable.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Please sign into Chrome.".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\en_GB\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):593
                                                                                                                                                                                                                                                                    Entropy (8bit):4.483686991119526
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJ6GG6+WYpU34OuFpR+dgGfFZO8ZpU34aEGFpR03OyZnLAOfTYdD:1HEVSWYpVp0JS8Zp5KpaOGAOfuD
                                                                                                                                                                                                                                                                    MD5:91F5BC87FD478A007EC68C4E8ADF11AC
                                                                                                                                                                                                                                                                    SHA1:D07DD49E4EF3B36DAD7D038B7E999AE850C5BEF6
                                                                                                                                                                                                                                                                    SHA-256:92F1246C21DD5FD7266EBFD65798C61E403D01A816CC3CF780DB5C8AA2E3D9C9
                                                                                                                                                                                                                                                                    SHA-512:FDC2A29B04E67DDBBD8FB6E8D2443E46BADCB2B2FB3A850BBD6198CDCCC32EE0BD8A9769D929FEEFE84D1015145E6664AB5FEA114DF5A864CF963BF98A65FFD9
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Chrome Web Store Payments".. },.. "app_name": {.. "message": "Chrome Web Store Payments".. },.. "craw_app_unavailable": {.. "message": "App currently unavailable.".. },.. "craw_connect_to_network": {.. "message": "Please connect to a network.".. },.. "iap_unavailable": {.. "message": "In-App Payments is currently unavailable.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Please sign into Chrome.".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\es\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):661
                                                                                                                                                                                                                                                                    Entropy (8bit):4.450938335136508
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJHlbGGHlb+WYpU34ubdDH+dgxbFxTO8ZpU34lPbdlVo03OyZnLAOfTY6xjD:1HEvaC6WYpcDeEFxq8ZpNl5OGAOffD
                                                                                                                                                                                                                                                                    MD5:82719BD3999AD66193A9B0BB525F97CD
                                                                                                                                                                                                                                                                    SHA1:41194D511F1ACC16C1CA828AC81C18C8C6B47287
                                                                                                                                                                                                                                                                    SHA-256:4DB9B2721E625C18B9E05C04B31AF5D9694712F1CAAF6219ABE34BB08E5DB1C7
                                                                                                                                                                                                                                                                    SHA-512:D4C49B43427799B6292CEED11CACB1D76F7CE43EBF402B43B638A6EB2B414ED0981E386CB8CDF0B51D1BD9552934FE25B2F6392266BB73D8C9A691F65BCE0128
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "app_name": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Esta aplicaci.n no est. disponible en este momento.".. },.. "craw_connect_to_network": {.. "message": "Con.ctate a una red.".. },.. "iap_unavailable": {.. "message": "Los pagos en la aplicaci.n no est.n disponibles en este momento.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Inicia sesi.n en Chrome.".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\es_419\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):637
                                                                                                                                                                                                                                                                    Entropy (8bit):4.47253983486615
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJHlbGGHlb+WYpU34ubdDH+dgxbFxTO8ZpU34GLO03OyZnLAOfTYiJD:1HEvaC6WYpcDeEFxq8Zp4LlOGAOfvD
                                                                                                                                                                                                                                                                    MD5:6B2583D8D1C147E36A69A88009CBEBC7
                                                                                                                                                                                                                                                                    SHA1:4D4DEEB4BE6AA0181825F3371A761ABC5B4D5937
                                                                                                                                                                                                                                                                    SHA-256:6659BC3705311D7641A73995DCFEA80C7734F2F4EBBC3787B3892A240348324F
                                                                                                                                                                                                                                                                    SHA-512:37F0DBFCC1B5A2B8E4C92C49D2D9DEEF25616421350324F57E0149A45A6CCB437F5E3CBE97412C4B5DBBF2593783C7DF71E9C25A851AEAE6E4764C545723FA53
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "app_name": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Esta aplicaci.n no est. disponible en este momento.".. },.. "craw_connect_to_network": {.. "message": "Con.ctate a una red.".. },.. "iap_unavailable": {.. "message": "En este momento, Pagos En-Apps no est. disponible.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Accede a Chrome.".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\et\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):595
                                                                                                                                                                                                                                                                    Entropy (8bit):4.467205425399467
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJfPGGGfPG+WYpU34Ze7z+dgrW9O8ZpU34ZwZz03OyZnLAOfTYgoLIR:1HEdvqlWYpTeObk8ZpT/OGAOfuLIR
                                                                                                                                                                                                                                                                    MD5:CFF6CB76EC724B17C1BC920726CB35A7
                                                                                                                                                                                                                                                                    SHA1:14ED068251D65A840F00C05409D705259D329FFC
                                                                                                                                                                                                                                                                    SHA-256:C85800BF45942FCC7FD6B1DF929C25F9CC2A977A6678966BD03D4B6B69889AFD
                                                                                                                                                                                                                                                                    SHA-512:53D7D01BB30C0306DE65A79FD9551D2E8C1F71F4F45F71906B009071CB3E0F231E6A50FDD78773E9B4DE94085BC7B97F829842FA21A89A2080D33458B745C46F
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Chrome'i veebipoe maksed".. },.. "app_name": {.. "message": "Chrome'i veebipoe maksed".. },.. "craw_app_unavailable": {.. "message": "Rakendus pole praegu saadaval.".. },.. "craw_connect_to_network": {.. "message": "Looge .hendus v.rguga.".. },.. "iap_unavailable": {.. "message": "Rakendusesisesed maksed ei ole praegu saadaval.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Logige Chrome'i sisse.".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\fi\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):647
                                                                                                                                                                                                                                                                    Entropy (8bit):4.595421267152647
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJRuzGGRuz+WYpU34ujSBu+dgYO8ZpU34J+Bu03OyZnLAOfTY5HN:1HEFcWYpPNa8ZpD+FOGAOfEHN
                                                                                                                                                                                                                                                                    MD5:3A01FEE829445C482D1721FF63153D16
                                                                                                                                                                                                                                                                    SHA1:F3EAAADDC03F943FC88B30B67F534AA13E3336DD
                                                                                                                                                                                                                                                                    SHA-256:0BDE54B20845124113383B6EB81E43A0F05E4EB0C44BEE3C1DFAC4CC5FEC2836
                                                                                                                                                                                                                                                                    SHA-512:3B92B6C86D30FD36AA3CEFF8773BA60C3FC5CC19C693540137044C5838A5503895C770C0336A4D0A3DB5E42F3FB36274D8D3F85B9DCA2F3EC0E974FDDB0BEAD8
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Chrome Web Storen maksut".. },.. "app_name": {.. "message": "Chrome Web Storen maksut".. },.. "craw_app_unavailable": {.. "message": "Sovellus ei ole t.ll. hetkell. k.ytett.viss..".. },.. "craw_connect_to_network": {.. "message": "Muodosta verkkoyhteys.".. },.. "iap_unavailable": {.. "message": "Sovelluksen sis.iset maksut eiv.t ole t.ll. hetkell. k.ytett.viss..".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Kirjaudu sis..n Chromeen.".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\fil\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):658
                                                                                                                                                                                                                                                                    Entropy (8bit):4.5231229502550745
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJADlbGGADlb+WYpU34hTUT+dgHfZAFFZO8ZpU34hTjzeT03OyZnLAOfTYHfvF:1HEYah6WYp7TUSoxOS8Zp7TOsOGAOfqV
                                                                                                                                                                                                                                                                    MD5:57AF5B654270A945BDA8053A83353A06
                                                                                                                                                                                                                                                                    SHA1:EEEF7A4F869F97CF471A05D345E74F982D15E167
                                                                                                                                                                                                                                                                    SHA-256:EC002ED92359F67818B49455DFC579E140368E6A004080AF022FD4F57F6B03F2
                                                                                                                                                                                                                                                                    SHA-512:5F0AE839FCF3F4EA48FF41A76655AE0F3821564AFD5D42FBB9FBB9A38E8D8F7BB5E9B6F71064588CD441261F644095A44A755C134CE546D506D9A21E488BAF52
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Mga Pagbabayad sa Chrome Web Store".. },.. "app_name": {.. "message": "Mga Pagbabayad sa Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Kasalukuyang hindi available ang app.".. },.. "craw_connect_to_network": {.. "message": "Mangyaring kumonekta sa isang network.".. },.. "iap_unavailable": {.. "message": "Kasalukuyang hindi available ang Mga Pagbabayad na In-App.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Mangyaring mag-sign in sa Chrome.".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\fr\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):677
                                                                                                                                                                                                                                                                    Entropy (8bit):4.552569602149629
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJALf/nbGGALf/nb+WYpU34Owdgbyb+dgdQjO8ZpU34ITQpGnbyb03OyZnLAO8:1HE4Hna1Hn6WYpNdgpY8ZpSTQwnBOGAh
                                                                                                                                                                                                                                                                    MD5:8D11C90F44A6585B57B933AB38D1FFF8
                                                                                                                                                                                                                                                                    SHA1:3F9D44EA8807069A32AACA2AAAD02FD892E6CC90
                                                                                                                                                                                                                                                                    SHA-256:599491F8C52B945C16C441ADF45BFD45AFAE046DA07757D97C56AF4DE75ED3B5
                                                                                                                                                                                                                                                                    SHA-512:D7EF7F5AD7EF1A1595825D79B69E2B1E988AD3CF1F3881496FCCD30F241E4E9C6E457F9F5D0F855DE3536DB7A40C3E1C55946B50D3F556F4A35285066A0CD6F7
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Paiements via le Chrome.Web.Store".. },.. "app_name": {.. "message": "Paiements via le Chrome.Web.Store".. },.. "craw_app_unavailable": {.. "message": "Application indisponible pour le moment.".. },.. "craw_connect_to_network": {.. "message": "Veuillez vous connecter . un r.seau.".. },.. "iap_unavailable": {.. "message": "Les paiements via l'application ne sont pas disponibles pour le moment.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Veuillez vous connecter . Chrome.".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\hi\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):835
                                                                                                                                                                                                                                                                    Entropy (8bit):4.791154467711985
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:24:1HEs07J0JWYp9vnCSVLP8Zp6CsOGAOf8SLm:Wh7qgYp1CMLUph1GiSLm
                                                                                                                                                                                                                                                                    MD5:E376D757C8FD66AC70A7D2D49760B94E
                                                                                                                                                                                                                                                                    SHA1:1525C5B1312D409604F097768503298EC440CC4D
                                                                                                                                                                                                                                                                    SHA-256:8106D98C4F8DA16DB698444409558E29CC96735E188BFA303C333A5D99231C1D
                                                                                                                                                                                                                                                                    SHA-512:673F3F259AF2946E4F49BBED14A2A70D44BF9FDA9D7A71DC9172BA9B7B3C7F7062B16D29682B638D485B0520ED6F99E7A735F28C7C719B539559005B69FA7555
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Chrome ... ..... ......".. },.. "app_name": {.. "message": "Chrome ... ..... ......".. },.. "craw_app_unavailable": {.. "message": "......... .. ... ...... .... ...".. },.. "craw_connect_to_network": {.. "message": "..... ....... .. ...... .....".. },.. "iap_unavailable": {.. "message": "..-.. ...... ... ...... .... ...".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "..... Chrome ... .... .. .....".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\hr\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):618
                                                                                                                                                                                                                                                                    Entropy (8bit):4.56999230891419
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJGiimxmbZGGGiimxmbZ+WYpU34OBOEuhopIO+dgcapZO8ZpU34GiiZrMrQphK:1HE4H4TH8WYpNjTta28ZpQVLP0SOGAOK
                                                                                                                                                                                                                                                                    MD5:8185D0490C86363602A137F9A261CC50
                                                                                                                                                                                                                                                                    SHA1:5BD933B874441CEACB9201CCC941FF67BAED6DC0
                                                                                                                                                                                                                                                                    SHA-256:A2B2EC359A9DD9DCCCE02859CE1E738BD30FAA4A05F1DC522893FFDF722BBC15
                                                                                                                                                                                                                                                                    SHA-512:D7629978FC031EA5F716F9C1065FB2FEAB48C15F10CD68830DC966FA1002C03DDC7ACDE314C7D075F9F3A0A68552A6ACBCCDEE24CF20B6C3DD1BCE6562D0396E
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Pla.anja u web-trgovini Chrome".. },.. "app_name": {.. "message": "Pla.anja u web-trgovini Chrome".. },.. "craw_app_unavailable": {.. "message": "Aplikacija trenuta.no nije dostupna.".. },.. "craw_connect_to_network": {.. "message": "Pove.ite se s mre.om.".. },.. "iap_unavailable": {.. "message": "Pla.anje u aplikaciji trenuta.no nije dostupno.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Prijavite se na Chrome.".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\hu\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:UTF-8 Unicode text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):683
                                                                                                                                                                                                                                                                    Entropy (8bit):4.675370843321512
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJVJiGGVJi+WYpU34Hpo9O+dgMmfgijO8ZpU34Huo9O03OyZnLAOfTYBIAYm:1HEVrk5WYpQzTUg/8ZpwoXOGAOfYIAd
                                                                                                                                                                                                                                                                    MD5:85609CF8623582A8376C206556ED2131
                                                                                                                                                                                                                                                                    SHA1:1E16EB70DB5E59BB684866FF3E3925C2DEF25A12
                                                                                                                                                                                                                                                                    SHA-256:32A249749F12ADB6A220BF9ADC272C7E5D9AD5497A38B0086D961E3ABA17FBC6
                                                                                                                                                                                                                                                                    SHA-512:27883430865D3CFA6EDFE8C6CE1442BD96150B5CE520CCF7D556A330CAA6392C712B47BD86F7350E174876BC681F6DEC94D1312402655B0AF90883A2899EC78B
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Chrome Internetes .ruh.z Fizet.si rendszere".. },.. "app_name": {.. "message": "Chrome Internetes .ruh.z Fizet.si rendszere".. },.. "craw_app_unavailable": {.. "message": "Az alkalmaz.s jelenleg nem .rhet. el.".. },.. "craw_connect_to_network": {.. "message": "K.rj.k, csatlakozzon egy h.l.zathoz.".. },.. "iap_unavailable": {.. "message": "Az alkalmaz.son bel.li fizet.s jelenleg nem .rhet. el.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Jelentkezzen be a Chrome-ba.".. }..}..

                                                                                                                                                                                                                                                                    C:\Users\user\AppData\Local\Temp\scoped_dir6060_1172677394\CRX_INSTALL\_locales\id\messages.json

                                                                                                                                                                                                                                                                    Download File
                                                                                                                                                                                                                                                                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                                                                                                                    Category:dropped
                                                                                                                                                                                                                                                                    Size (bytes):604
                                                                                                                                                                                                                                                                    Entropy (8bit):4.465685261172395
                                                                                                                                                                                                                                                                    Encrypted:false
                                                                                                                                                                                                                                                                    SSDEEP:12:1HEJs25bGGs25b+WYpU34ORBHAeSJ+dgkmO8ZpU34s22C/SzFAs03OyZnLAOfTYR:1HEBaA6WYpaHFH8ZptOYOGAOf2D
                                                                                                                                                                                                                                                                    MD5:EAB2B946D1232AB98137E760954003AA
                                                                                                                                                                                                                                                                    SHA1:60BDC2937905B311D2C9844DF2D639D7AC9F7F67
                                                                                                                                                                                                                                                                    SHA-256:C6E8800450602DE0F39FE9F6854472383813FB454B08ABAE7E25A9167CE004C3
                                                                                                                                                                                                                                                                    SHA-512:970FEC9A9EF0BAF7F693C4C5977F3B47914579C5B5414FCE9DBB5E4574659A5BB9AD2DE0CC886B368F49C019785AF7D2D7FE82F71341F039EADC399ED776CA12
                                                                                                                                                                                                                                                                    Malicious:false
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    Preview:{.. "app_description": {.. "message": "Pembayaran Chrome Webstore".. },.. "app_name": {.. "message": "Pembayaran Chrome Webstore".. },.. "craw_app_unavailable": {.. "message": "Aplikasi tidak tersedia saat ini.".. },.. "craw_connect_to_network": {.. "message": "Sambungkan ke jaringan.".. },.. "iap_unavailable": {.. "message": "Pembayaran Dalam Aplikasi saat ini tidak tersedia.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Harap masuk ke Chrome.".. }..}..

                                                                                                                                                                                                                                                                    Static File Info

                                                                                                                                                                                                                                                                    ⊘No static file info

                                                                                                                                                                                                                                                                    Network Behavior

                                                                                                                                                                                                                                                                    Network Port Distribution

                                                                                                                                                                                                                                                                    • Total Packets: 48
                                                                                                                                                                                                                                                                    • • 443 (HTTPS)
                                                                                                                                                                                                                                                                    • • 80 (HTTP)
                                                                                                                                                                                                                                                                    TimestampSource PortDest PortSource IPDest IP
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.826798916 CET49757443192.168.2.5142.251.36.77
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.826829910 CET44349757142.251.36.77192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.826910973 CET49757443192.168.2.5142.251.36.77
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.827178955 CET49757443192.168.2.5142.251.36.77
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.827194929 CET44349757142.251.36.77192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.834194899 CET4975980192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.835108042 CET4976080192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.850491047 CET8049759104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.850593090 CET4975980192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.851027966 CET8049760104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.851110935 CET4976080192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.851417065 CET4975980192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.867572069 CET8049759104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.899883986 CET44349757142.251.36.77192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.901354074 CET49757443192.168.2.5142.251.36.77
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.901384115 CET44349757142.251.36.77192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.903177977 CET44349757142.251.36.77192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.903271914 CET49757443192.168.2.5142.251.36.77
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.909010887 CET8049759104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.909035921 CET8049759104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.909106970 CET8049759104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.909117937 CET4975980192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.914300919 CET8049759104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.914366007 CET4975980192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.378660917 CET4975980192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.394999027 CET8049759104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.426297903 CET4976080192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.442517042 CET8049760104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.451432943 CET8049760104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.451474905 CET8049760104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.451498032 CET8049760104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.451514006 CET8049760104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.451529980 CET8049760104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.451639891 CET4976080192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.451698065 CET4976080192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.523199081 CET4976080192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.539355993 CET8049760104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.541399956 CET8049760104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.661010027 CET49757443192.168.2.5142.251.36.77
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.661173105 CET44349757142.251.36.77192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.664191008 CET49757443192.168.2.5142.251.36.77
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.664208889 CET44349757142.251.36.77192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.734055996 CET4976080192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.755004883 CET44349757142.251.36.77192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.755084991 CET49757443192.168.2.5142.251.36.77
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.760658026 CET49757443192.168.2.5142.251.36.77
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.760687113 CET44349757142.251.36.77192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.900330067 CET4976080192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.916429043 CET8049760104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.109690905 CET8049760104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.109719992 CET8049760104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.109864950 CET4976080192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.109910011 CET8049760104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.109965086 CET4976080192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.111444950 CET4976080192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.127494097 CET8049760104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.904144049 CET4976980192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.932562113 CET8049769104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.932739973 CET4976980192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.932832003 CET4976980192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.961095095 CET8049769104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.976409912 CET8049769104.22.65.104192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.976526976 CET4976980192.168.2.5104.22.65.104
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.721110106 CET49782443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.721149921 CET44349782104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.721227884 CET49782443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.721935987 CET49783443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.721962929 CET44349783104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.722023964 CET49783443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.723787069 CET49783443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.723802090 CET44349783104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.724019051 CET49782443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.724033117 CET44349782104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.765041113 CET44349782104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.765162945 CET44349783104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.766571999 CET49783443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.766599894 CET44349783104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.766804934 CET49782443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.766822100 CET44349782104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.767703056 CET44349783104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.767812967 CET49783443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.767890930 CET44349782104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.767970085 CET49782443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.771112919 CET49783443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.771226883 CET44349783104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.771336079 CET49783443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.771353006 CET44349783104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.771794081 CET49782443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.772680998 CET44349782104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.811647892 CET49783443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.812707901 CET49782443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.812736988 CET44349782104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.852876902 CET49782443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.866388083 CET44349783104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.866425991 CET44349783104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.866476059 CET44349783104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.866519928 CET49783443192.168.2.5104.16.123.96
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.866549015 CET44349783104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.866564035 CET44349783104.16.123.96192.168.2.5
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:08.866600990 CET49783443192.168.2.5104.16.123.96

                                                                                                                                                                                                                                                                    DNS Queries

                                                                                                                                                                                                                                                                    TimestampSource IPDest IPTrans IDOP CodeNameTypeClass
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.787280083 CET192.168.2.58.8.8.80x78f9Standard query (0)clients2.google.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.799494028 CET192.168.2.58.8.8.80x6d5eStandard query (0)accounts.google.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.804337978 CET192.168.2.58.8.8.80x1bbeStandard query (0)ny-t.r-tb.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.867851019 CET192.168.2.58.8.8.80xef32Standard query (0)www.cloudflare.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.874773979 CET192.168.2.58.8.8.80x3fa1Standard query (0)ny-t.r-tb.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:09.011792898 CET192.168.2.58.8.8.80xb6a1Standard query (0)assets.www.cloudflare.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:09.530817986 CET192.168.2.58.8.8.80xfc2Standard query (0)ajax.cloudflare.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:10.529175997 CET192.168.2.58.8.8.80x8c8bStandard query (0)sentry.ioA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:11.914815903 CET192.168.2.58.8.8.80x81aeStandard query (0)tr.www.cloudflare.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:14.675072908 CET192.168.2.58.8.8.80xd340Standard query (0)www.cloudflare.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:15.725734949 CET192.168.2.58.8.8.80x1018Standard query (0)clients2.googleusercontent.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:23.790339947 CET192.168.2.58.8.8.80xb22cStandard query (0)www.googleoptimize.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:24.137593985 CET192.168.2.58.8.8.80x1822Standard query (0)api.radar.cloudflare.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:24.230382919 CET192.168.2.58.8.8.80xfbe2Standard query (0)static.cloudflareinsights.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:24.627877951 CET192.168.2.58.8.8.80x9141Standard query (0)serverless-benchmarks-js.compute-pipe.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:25.346534014 CET192.168.2.58.8.8.80x8a31Standard query (0)fastly.jsdelivr.netA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:25.748869896 CET192.168.2.58.8.8.80x905fStandard query (0)a.nel.cloudflare.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:26.549097061 CET192.168.2.58.8.8.80x22a3Standard query (0)p29.cedexis-test.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:26.879456043 CET192.168.2.58.8.8.80x1c17Standard query (0)ad.doubleclick.netA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:26.879635096 CET192.168.2.58.8.8.80x1036Standard query (0)d.adroll.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:26.894474983 CET192.168.2.58.8.8.80xf4c7Standard query (0)stackpath-map3.cedexis-test.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.119832039 CET192.168.2.58.8.8.80x70aStandard query (0)benchmark.1e100cdn.netA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.382638931 CET192.168.2.58.8.8.80x35d7Standard query (0)stats.g.doubleclick.netA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.398664951 CET192.168.2.58.8.8.80x832Standard query (0)adservice.google.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.398902893 CET192.168.2.58.8.8.80x87aaStandard query (0)carefully-rested-condor.edgecompute.appA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.607238054 CET192.168.2.58.8.8.80x2fe0Standard query (0)adservice.google.aeA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.667635918 CET192.168.2.58.8.8.80x1850Standard query (0)www.google.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.863972902 CET192.168.2.58.8.8.80x6f7dStandard query (0)www.google.aeA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:29.604027987 CET192.168.2.58.8.8.80xc39eStandard query (0)cdnetworks.cedexis-test.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.570434093 CET192.168.2.58.8.8.80xf96eStandard query (0)fastly.jsdelivr.netA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.592592001 CET192.168.2.58.8.8.80x40cbStandard query (0)jsdelivr.b-cdn.netA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.610049963 CET192.168.2.58.8.8.80x23eeStandard query (0)p29.cedexis-test.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.630414963 CET192.168.2.58.8.8.80x5dffStandard query (0)stackpath-map3.cedexis-test.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.659388065 CET192.168.2.58.8.8.80x20d9Standard query (0)benchmark.1e100cdn.netA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.668108940 CET192.168.2.58.8.8.80x71e6Standard query (0)carefully-rested-condor.edgecompute.appA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.684760094 CET192.168.2.58.8.8.80xd8eeStandard query (0)d.adroll.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.134588957 CET192.168.2.58.8.8.80x4123Standard query (0)testingcf.jsdelivr.netA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.245073080 CET192.168.2.58.8.8.80xfdd1Standard query (0)partly-divine-monitor.edgecompute.appA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.282983065 CET192.168.2.58.8.8.80x6ed2Standard query (0)fastly.cedexis-test.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.516038895 CET192.168.2.58.8.8.80xb889Standard query (0)limelight-ssl.cedexis-test.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.647360086 CET192.168.2.58.8.8.80xb5b0Standard query (0)vdms-ssl.cedexis-test.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.843777895 CET192.168.2.58.8.8.80x6318Standard query (0)ptcfc.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:35.391679049 CET192.168.2.58.8.8.80x76cdStandard query (0)partly-divine-monitor.edgecompute.appA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:39.257694006 CET192.168.2.58.8.8.80x7ac3Standard query (0)9309168.fls.doubleclick.netA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:40.140332937 CET192.168.2.58.8.8.80x9d99Standard query (0)serverless-benchmarks-rust.compute-pipe.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:41.119573116 CET192.168.2.58.8.8.80x3b61Standard query (0)adservice.google.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:42.112507105 CET192.168.2.58.8.8.80x941bStandard query (0)fastly.cedexis-test.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:42.125385046 CET192.168.2.58.8.8.80x5994Standard query (0)jsdelivr.b-cdn.netA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:45.663765907 CET192.168.2.58.8.8.80x8639Standard query (0)embed.videodelivery.netA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:46.397910118 CET192.168.2.58.8.8.80xb6b3Standard query (0)iframe.videodelivery.netA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:49.324553967 CET192.168.2.58.8.8.80x7416Standard query (0)videodelivery.netA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:55.932569027 CET192.168.2.58.8.8.80xf5cStandard query (0)ptcfc.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:55.944236040 CET192.168.2.58.8.8.80x342cStandard query (0)limelight-ssl.cedexis-test.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:55.954221964 CET192.168.2.58.8.8.80x39dStandard query (0)testingcf.jsdelivr.netA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:57.791645050 CET192.168.2.58.8.8.80x40e9Standard query (0)info.cloudflare.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:16:00.095362902 CET192.168.2.58.8.8.80x664cStandard query (0)munchkin.marketo.netA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:16:00.306047916 CET192.168.2.58.8.8.80xbaa5Standard query (0)713-xsc-918.mktoresp.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:16:00.807857037 CET192.168.2.58.8.8.80x7d79Standard query (0)www.cloudflare.comA (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:16:26.180897951 CET192.168.2.58.8.8.80x918cStandard query (0)a.nel.cloudflare.comA (IP address)IN (0x0001)

                                                                                                                                                                                                                                                                    DNS Answers

                                                                                                                                                                                                                                                                    TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClass
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.818231106 CET8.8.8.8192.168.2.50x6d5eNo error (0)accounts.google.com142.251.36.77A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.824520111 CET8.8.8.8192.168.2.50x78f9No error (0)clients2.google.comclients.l.google.comCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.824520111 CET8.8.8.8192.168.2.50x78f9No error (0)clients.l.google.com142.251.36.142A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.825577021 CET8.8.8.8192.168.2.50x1bbeNo error (0)ny-t.r-tb.com104.22.65.104A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.825577021 CET8.8.8.8192.168.2.50x1bbeNo error (0)ny-t.r-tb.com104.22.64.104A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:58.825577021 CET8.8.8.8192.168.2.50x1bbeNo error (0)ny-t.r-tb.com172.67.26.25A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.888459921 CET8.8.8.8192.168.2.50xef32No error (0)www.cloudflare.com104.16.123.96A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:14:59.888459921 CET8.8.8.8192.168.2.50xef32No error (0)www.cloudflare.com104.16.124.96A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.896248102 CET8.8.8.8192.168.2.50x3fa1No error (0)ny-t.r-tb.com104.22.65.104A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.896248102 CET8.8.8.8192.168.2.50x3fa1No error (0)ny-t.r-tb.com172.67.26.25A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:00.896248102 CET8.8.8.8192.168.2.50x3fa1No error (0)ny-t.r-tb.com104.22.64.104A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:09.036860943 CET8.8.8.8192.168.2.50xb6a1No error (0)assets.www.cloudflare.com104.16.123.96A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:09.036860943 CET8.8.8.8192.168.2.50xb6a1No error (0)assets.www.cloudflare.com104.16.124.96A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:09.552755117 CET8.8.8.8192.168.2.50xfc2No error (0)ajax.cloudflare.com104.17.72.14A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:09.552755117 CET8.8.8.8192.168.2.50xfc2No error (0)ajax.cloudflare.com104.17.73.14A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:10.545603037 CET8.8.8.8192.168.2.50x8c8bNo error (0)sentry.io35.188.42.15A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:11.939568996 CET8.8.8.8192.168.2.50x81aeNo error (0)tr.www.cloudflare.com104.16.124.96A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:11.939568996 CET8.8.8.8192.168.2.50x81aeNo error (0)tr.www.cloudflare.com104.16.123.96A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:14.699395895 CET8.8.8.8192.168.2.50xd340No error (0)www.cloudflare.com104.16.124.96A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:14.699395895 CET8.8.8.8192.168.2.50xd340No error (0)www.cloudflare.com104.16.123.96A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:15.753587008 CET8.8.8.8192.168.2.50x1018No error (0)clients2.googleusercontent.comgooglehosted.l.googleusercontent.comCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:15.753587008 CET8.8.8.8192.168.2.50x1018No error (0)googlehosted.l.googleusercontent.com172.217.23.193A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:23.815707922 CET8.8.8.8192.168.2.50xb22cNo error (0)www.googleoptimize.com142.251.36.78A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:24.162329912 CET8.8.8.8192.168.2.50x1822No error (0)api.radar.cloudflare.com104.18.1.239A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:24.162329912 CET8.8.8.8192.168.2.50x1822No error (0)api.radar.cloudflare.com104.18.0.239A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:24.248511076 CET8.8.8.8192.168.2.50xfbe2No error (0)static.cloudflareinsights.com104.16.95.65A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:24.248511076 CET8.8.8.8192.168.2.50xfbe2No error (0)static.cloudflareinsights.com104.16.94.65A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:24.650510073 CET8.8.8.8192.168.2.50x9141No error (0)serverless-benchmarks-js.compute-pipe.com188.114.97.7A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:24.650510073 CET8.8.8.8192.168.2.50x9141No error (0)serverless-benchmarks-js.compute-pipe.com188.114.96.7A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:25.365242958 CET8.8.8.8192.168.2.50x8a31No error (0)fastly.jsdelivr.netjsdelivr.map.fastly.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:25.365242958 CET8.8.8.8192.168.2.50x8a31No error (0)jsdelivr.map.fastly.net151.101.1.229A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:25.365242958 CET8.8.8.8192.168.2.50x8a31No error (0)jsdelivr.map.fastly.net151.101.65.229A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:25.365242958 CET8.8.8.8192.168.2.50x8a31No error (0)jsdelivr.map.fastly.net151.101.129.229A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:25.365242958 CET8.8.8.8192.168.2.50x8a31No error (0)jsdelivr.map.fastly.net151.101.193.229A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:25.776143074 CET8.8.8.8192.168.2.50x905fNo error (0)a.nel.cloudflare.com35.190.80.1A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:26.595113039 CET8.8.8.8192.168.2.50x22a3No error (0)p29.cedexis-test.comd1inq1x5xtur5k.cloudfront.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:26.595113039 CET8.8.8.8192.168.2.50x22a3No error (0)d1inq1x5xtur5k.cloudfront.net13.224.222.119A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:26.595113039 CET8.8.8.8192.168.2.50x22a3No error (0)d1inq1x5xtur5k.cloudfront.net13.224.222.5A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:26.595113039 CET8.8.8.8192.168.2.50x22a3No error (0)d1inq1x5xtur5k.cloudfront.net13.224.222.34A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:26.595113039 CET8.8.8.8192.168.2.50x22a3No error (0)d1inq1x5xtur5k.cloudfront.net13.224.222.118A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:26.895901918 CET8.8.8.8192.168.2.50x1036No error (0)d.adroll.comadserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.comCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:26.895901918 CET8.8.8.8192.168.2.50x1036No error (0)adserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.com54.73.67.72A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:26.895901918 CET8.8.8.8192.168.2.50x1036No error (0)adserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.com52.208.5.241A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:26.906002045 CET8.8.8.8192.168.2.50x1c17No error (0)ad.doubleclick.netdart.l.doubleclick.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:26.906002045 CET8.8.8.8192.168.2.50x1c17No error (0)dart.l.doubleclick.net216.58.201.70A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:26.918754101 CET8.8.8.8192.168.2.50xf4c7No error (0)stackpath-map3.cedexis-test.comcds.x7t9n8c4.hwcdn.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.138462067 CET8.8.8.8192.168.2.50x70aNo error (0)benchmark.1e100cdn.net35.190.26.57A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.407383919 CET8.8.8.8192.168.2.50x35d7No error (0)stats.g.doubleclick.netstats.l.doubleclick.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.407383919 CET8.8.8.8192.168.2.50x35d7No error (0)stats.l.doubleclick.net142.250.102.154A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.407383919 CET8.8.8.8192.168.2.50x35d7No error (0)stats.l.doubleclick.net142.250.102.157A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.407383919 CET8.8.8.8192.168.2.50x35d7No error (0)stats.l.doubleclick.net142.250.102.155A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.407383919 CET8.8.8.8192.168.2.50x35d7No error (0)stats.l.doubleclick.net142.250.102.156A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.421030045 CET8.8.8.8192.168.2.50x87aaNo error (0)carefully-rested-condor.edgecompute.appecp.map.fastly.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.421030045 CET8.8.8.8192.168.2.50x87aaNo error (0)ecp.map.fastly.net151.101.13.51A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.425023079 CET8.8.8.8192.168.2.50x832No error (0)adservice.google.com142.251.36.130A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.633838892 CET8.8.8.8192.168.2.50x2fe0No error (0)adservice.google.aepagead46.l.doubleclick.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.633838892 CET8.8.8.8192.168.2.50x2fe0No error (0)pagead46.l.doubleclick.net142.251.36.130A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.694447041 CET8.8.8.8192.168.2.50x1850No error (0)www.google.com142.251.36.132A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:27.903060913 CET8.8.8.8192.168.2.50x6f7dNo error (0)www.google.ae142.251.36.67A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:29.632586002 CET8.8.8.8192.168.2.50xc39eNo error (0)cdnetworks.cedexis-test.comcdnetworks.cedexis-test.com.wsoversea.comCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:29.632586002 CET8.8.8.8192.168.2.50xc39eNo error (0)cdnetworks.cedexis-test.com.wsoversea.com163.171.156.28A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.589148998 CET8.8.8.8192.168.2.50xf96eNo error (0)fastly.jsdelivr.netjsdelivr.map.fastly.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.589148998 CET8.8.8.8192.168.2.50xf96eNo error (0)jsdelivr.map.fastly.net151.101.1.229A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.589148998 CET8.8.8.8192.168.2.50xf96eNo error (0)jsdelivr.map.fastly.net151.101.65.229A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.589148998 CET8.8.8.8192.168.2.50xf96eNo error (0)jsdelivr.map.fastly.net151.101.129.229A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.589148998 CET8.8.8.8192.168.2.50xf96eNo error (0)jsdelivr.map.fastly.net151.101.193.229A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.620896101 CET8.8.8.8192.168.2.50x40cbNo error (0)jsdelivr.b-cdn.net45.92.42.1A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.636773109 CET8.8.8.8192.168.2.50x23eeNo error (0)p29.cedexis-test.comd1inq1x5xtur5k.cloudfront.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.636773109 CET8.8.8.8192.168.2.50x23eeNo error (0)d1inq1x5xtur5k.cloudfront.net13.224.222.118A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.636773109 CET8.8.8.8192.168.2.50x23eeNo error (0)d1inq1x5xtur5k.cloudfront.net13.224.222.34A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.636773109 CET8.8.8.8192.168.2.50x23eeNo error (0)d1inq1x5xtur5k.cloudfront.net13.224.222.5A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.636773109 CET8.8.8.8192.168.2.50x23eeNo error (0)d1inq1x5xtur5k.cloudfront.net13.224.222.119A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.656771898 CET8.8.8.8192.168.2.50x5dffNo error (0)stackpath-map3.cedexis-test.comcds.x7t9n8c4.hwcdn.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.675764084 CET8.8.8.8192.168.2.50x20d9No error (0)benchmark.1e100cdn.net35.190.26.57A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.687752008 CET8.8.8.8192.168.2.50x71e6No error (0)carefully-rested-condor.edgecompute.appecp.map.fastly.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.687752008 CET8.8.8.8192.168.2.50x71e6No error (0)ecp.map.fastly.net151.101.113.51A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.703003883 CET8.8.8.8192.168.2.50xd8eeNo error (0)d.adroll.comadserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.comCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.703003883 CET8.8.8.8192.168.2.50xd8eeNo error (0)adserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.com54.73.67.72A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:30.703003883 CET8.8.8.8192.168.2.50xd8eeNo error (0)adserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.com52.208.5.241A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.155826092 CET8.8.8.8192.168.2.50x4123No error (0)testingcf.jsdelivr.nettestingcf.jsdelivr.net.cdn.cloudflare.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.267173052 CET8.8.8.8192.168.2.50xfdd1No error (0)partly-divine-monitor.edgecompute.appecp.map.fastly.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.267173052 CET8.8.8.8192.168.2.50xfdd1No error (0)ecp.map.fastly.net151.101.13.51A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.309992075 CET8.8.8.8192.168.2.50x6ed2No error (0)fastly.cedexis-test.comprod.cedexis-ssl.map.fastly.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.309992075 CET8.8.8.8192.168.2.50x6ed2No error (0)prod.cedexis-ssl.map.fastly.net151.101.0.65A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.309992075 CET8.8.8.8192.168.2.50x6ed2No error (0)prod.cedexis-ssl.map.fastly.net151.101.64.65A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.309992075 CET8.8.8.8192.168.2.50x6ed2No error (0)prod.cedexis-ssl.map.fastly.net151.101.128.65A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.309992075 CET8.8.8.8192.168.2.50x6ed2No error (0)prod.cedexis-ssl.map.fastly.net151.101.192.65A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.542481899 CET8.8.8.8192.168.2.50xb889No error (0)limelight-ssl.cedexis-test.comcedexis-1.vo.llnwd.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.542481899 CET8.8.8.8192.168.2.50xb889No error (0)cedexis-1.vo.llnwd.netcedexis-1.s.llnwi.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.542481899 CET8.8.8.8192.168.2.50xb889No error (0)cedexis-1.s.llnwi.net68.142.70.14A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.693485022 CET8.8.8.8192.168.2.50xb5b0No error (0)vdms-ssl.cedexis-test.comcedexis-ssl.wpc.apr-b30d.edgecastdns.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.693485022 CET8.8.8.8192.168.2.50xb5b0No error (0)cs482.wpc.edgecastcdn.net192.229.220.19A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.865381002 CET8.8.8.8192.168.2.50x6318No error (0)ptcfc.com104.16.53.99A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:32.865381002 CET8.8.8.8192.168.2.50x6318No error (0)ptcfc.com104.18.143.76A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:35.411770105 CET8.8.8.8192.168.2.50x76cdNo error (0)partly-divine-monitor.edgecompute.appecp.map.fastly.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:35.411770105 CET8.8.8.8192.168.2.50x76cdNo error (0)ecp.map.fastly.net151.101.13.51A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:39.285197973 CET8.8.8.8192.168.2.50x7ac3No error (0)9309168.fls.doubleclick.netdart.l.doubleclick.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:39.285197973 CET8.8.8.8192.168.2.50x7ac3No error (0)dart.l.doubleclick.net216.58.201.70A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:40.160875082 CET8.8.8.8192.168.2.50x9d99No error (0)serverless-benchmarks-rust.compute-pipe.com188.114.97.7A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:40.160875082 CET8.8.8.8192.168.2.50x9d99No error (0)serverless-benchmarks-rust.compute-pipe.com188.114.96.7A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:41.146548033 CET8.8.8.8192.168.2.50x3b61No error (0)adservice.google.com216.58.201.66A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:42.132509947 CET8.8.8.8192.168.2.50x941bNo error (0)fastly.cedexis-test.comprod.cedexis-ssl.map.fastly.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:42.132509947 CET8.8.8.8192.168.2.50x941bNo error (0)prod.cedexis-ssl.map.fastly.net151.101.0.65A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:42.132509947 CET8.8.8.8192.168.2.50x941bNo error (0)prod.cedexis-ssl.map.fastly.net151.101.64.65A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:42.132509947 CET8.8.8.8192.168.2.50x941bNo error (0)prod.cedexis-ssl.map.fastly.net151.101.128.65A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:42.132509947 CET8.8.8.8192.168.2.50x941bNo error (0)prod.cedexis-ssl.map.fastly.net151.101.192.65A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:42.146560907 CET8.8.8.8192.168.2.50x5994No error (0)jsdelivr.b-cdn.net45.92.42.1A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:45.688797951 CET8.8.8.8192.168.2.50x8639No error (0)embed.videodelivery.net104.17.23.75A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:45.688797951 CET8.8.8.8192.168.2.50x8639No error (0)embed.videodelivery.net104.17.22.75A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:46.420593023 CET8.8.8.8192.168.2.50xb6b3No error (0)iframe.videodelivery.net104.17.22.75A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:46.420593023 CET8.8.8.8192.168.2.50xb6b3No error (0)iframe.videodelivery.net104.17.23.75A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:49.344707012 CET8.8.8.8192.168.2.50x7416No error (0)videodelivery.net104.17.22.75A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:49.344707012 CET8.8.8.8192.168.2.50x7416No error (0)videodelivery.net104.17.23.75A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:55.958616972 CET8.8.8.8192.168.2.50xf5cNo error (0)ptcfc.com104.16.53.99A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:55.958616972 CET8.8.8.8192.168.2.50xf5cNo error (0)ptcfc.com104.18.143.76A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:55.965540886 CET8.8.8.8192.168.2.50x342cNo error (0)limelight-ssl.cedexis-test.comcedexis-1.vo.llnwd.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:55.965540886 CET8.8.8.8192.168.2.50x342cNo error (0)cedexis-1.vo.llnwd.netcedexis-1.s.llnwi.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:55.965540886 CET8.8.8.8192.168.2.50x342cNo error (0)cedexis-1.s.llnwi.net68.142.70.14A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:55.975805044 CET8.8.8.8192.168.2.50x39dNo error (0)testingcf.jsdelivr.nettestingcf.jsdelivr.net.cdn.cloudflare.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:57.820705891 CET8.8.8.8192.168.2.50x40e9No error (0)info.cloudflare.comcloudflare.mktoweb.comCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:57.820705891 CET8.8.8.8192.168.2.50x40e9No error (0)cloudflare.mktoweb.comab13.mktossl.comCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:57.820705891 CET8.8.8.8192.168.2.50x40e9No error (0)ab13.mktossl.com104.17.73.206A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:57.820705891 CET8.8.8.8192.168.2.50x40e9No error (0)ab13.mktossl.com104.17.74.206A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:57.820705891 CET8.8.8.8192.168.2.50x40e9No error (0)ab13.mktossl.com104.17.70.206A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:57.820705891 CET8.8.8.8192.168.2.50x40e9No error (0)ab13.mktossl.com104.17.72.206A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:15:57.820705891 CET8.8.8.8192.168.2.50x40e9No error (0)ab13.mktossl.com104.17.71.206A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:16:00.113368988 CET8.8.8.8192.168.2.50x664cNo error (0)munchkin.marketo.netwildcard.marketo.net.edgekey.netCNAME (Canonical name)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:16:00.414294004 CET8.8.8.8192.168.2.50xbaa5No error (0)713-xsc-918.mktoresp.com192.28.144.124A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:16:00.838010073 CET8.8.8.8192.168.2.50x7d79No error (0)www.cloudflare.com104.16.124.96A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:16:00.838010073 CET8.8.8.8192.168.2.50x7d79No error (0)www.cloudflare.com104.16.123.96A (IP address)IN (0x0001)
                                                                                                                                                                                                                                                                    Feb 1, 2022 15:16:26.199454069 CET8.8.8.8192.168.2.50x918cNo error (0)a.nel.cloudflare.com35.190.80.1A (IP address)IN (0x0001)

                                                                                                                                                                                                                                                                    HTTP Request Dependency Graph

                                                                                                                                                                                                                                                                    • ny-t.r-tb.com

                                                                                                                                                                                                                                                                    Statistics

                                                                                                                                                                                                                                                                    Behavior

                                                                                                                                                                                                                                                                    Click to jump to process

                                                                                                                                                                                                                                                                    System Behavior

                                                                                                                                                                                                                                                                    General

                                                                                                                                                                                                                                                                    Target ID:1
                                                                                                                                                                                                                                                                    Start time:15:14:55
                                                                                                                                                                                                                                                                    Start date:01/02/2022
                                                                                                                                                                                                                                                                    Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    Wow64 process (32bit):false
                                                                                                                                                                                                                                                                    Commandline:C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "http://ny-t.r-tb.com/
                                                                                                                                                                                                                                                                    Imagebase:0x7ff677c70000
                                                                                                                                                                                                                                                                    File size:2150896 bytes
                                                                                                                                                                                                                                                                    MD5 hash:C139654B5C1438A95B321BB01AD63EF6
                                                                                                                                                                                                                                                                    Has elevated privileges:true
                                                                                                                                                                                                                                                                    Has administrator privileges:true
                                                                                                                                                                                                                                                                    Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    There is hidden Windows Behavior. Click on Show Windows Behavior to show it.
                                                                                                                                                                                                                                                                    There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

                                                                                                                                                                                                                                                                    General

                                                                                                                                                                                                                                                                    Target ID:3
                                                                                                                                                                                                                                                                    Start time:15:14:56
                                                                                                                                                                                                                                                                    Start date:01/02/2022
                                                                                                                                                                                                                                                                    Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    Wow64 process (32bit):false
                                                                                                                                                                                                                                                                    Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1544,13023897823658162512,2227868781108129078,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1932 /prefetch:8
                                                                                                                                                                                                                                                                    Imagebase:0x7ff677c70000
                                                                                                                                                                                                                                                                    File size:2150896 bytes
                                                                                                                                                                                                                                                                    MD5 hash:C139654B5C1438A95B321BB01AD63EF6
                                                                                                                                                                                                                                                                    Has elevated privileges:true
                                                                                                                                                                                                                                                                    Has administrator privileges:true
                                                                                                                                                                                                                                                                    Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                    Reputation:low
                                                                                                                                                                                                                                                                    There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

                                                                                                                                                                                                                                                                    General

                                                                                                                                                                                                                                                                    Target ID:14
                                                                                                                                                                                                                                                                    Start time:15:15:51
                                                                                                                                                                                                                                                                    Start date:01/02/2022
                                                                                                                                                                                                                                                                    Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    Wow64 process (32bit):false
                                                                                                                                                                                                                                                                    Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1544,13023897823658162512,2227868781108129078,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=5072 /prefetch:8
                                                                                                                                                                                                                                                                    Imagebase:0x7ff677c70000
                                                                                                                                                                                                                                                                    File size:2150896 bytes
                                                                                                                                                                                                                                                                    MD5 hash:C139654B5C1438A95B321BB01AD63EF6
                                                                                                                                                                                                                                                                    Has elevated privileges:false
                                                                                                                                                                                                                                                                    Has administrator privileges:false
                                                                                                                                                                                                                                                                    Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                    Reputation:low

                                                                                                                                                                                                                                                                    Disassembly

                                                                                                                                                                                                                                                                    ⊘No disassembly