Edit tour

Windows Analysis Report
https://vast.doubleverify.com

Overview

General Information

Sample URL:	https://vast.doubleverify.com
Analysis ID:	562529
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

No HTML title found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4504 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "https://vast.doubleverify.com MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 5536 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1556,10421634681798175458,17881213341508085727,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1912 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

cleanup

Malware Configuration

⊘No configs have been found

Yara Overview

⊘No yara matches

Sigma Overview

⊘No Sigma rule has matched

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://doubleverify.com/	HTTP Parser: Iframe src: https://pixel.mathtag.com/sync/iframe?mt_uuid=b35e61f4-7eca-4000-8370-2e6710cd2813&no_iframe=1&mt_adid=229936&source=mathtag
Source: https://doubleverify.com/	HTTP Parser: Iframe src: https://app-sj27.marketo.com/index.php/form/XDFrame
Source: https://doubleverify.com/	HTTP Parser: Iframe src: https://pixel.mathtag.com/sync/iframe?mt_uuid=b35e61f4-7eca-4000-8370-2e6710cd2813&no_iframe=1&mt_adid=229936&source=mathtag
Source: https://doubleverify.com/	HTTP Parser: Iframe src: https://app-sj27.marketo.com/index.php/form/XDFrame
Source: https://doubleverify.com/brands-and-agencies/	HTTP Parser: Iframe src: https://app-sj27.marketo.com/index.php/form/XDFrame
Source: https://doubleverify.com/capabilities-fraud/	HTTP Parser: Iframe src: https://pixel.mathtag.com/sync/iframe?mt_uuid=b35e61f4-7eca-4000-8370-2e6710cd2813&no_iframe=1&mt_adid=229936&source=mathtag
Source: https://doubleverify.com/capabilities-fraud/	HTTP Parser: Iframe src: https://app-sj27.marketo.com/index.php/form/XDFrame
Source: https://doubleverify.com/viewability/	HTTP Parser: Iframe src: https://pixel.mathtag.com/sync/iframe?mt_uuid=b35e61f4-7eca-4000-8370-2e6710cd2813&no_iframe=1&mt_adid=229936&source=mathtag
Source: https://doubleverify.com/viewability/	HTTP Parser: Iframe src: https://app-sj27.marketo.com/index.php/form/XDFrame
Source: https://doubleverify.com/viewability/	HTTP Parser: Iframe src: https://js.driftt.com/core/chat?region=US&driftEnableLog=false&pageLoadStartTime=1643445652840
Source: https://doubleverify.com/viewability/	HTTP Parser: Iframe src: https://js.driftt.com/core?embedId=ttmfycw3m5sm&region=US&forceShow=false&skipCampaigns=false&sessionId=09a948cd-9d9c-455f-a9a3-7df79da7f30b&sessionStarted=1643445657.324&campaignRefreshToken=e36c7050-695e-4e0c-bd0d-719bdf310bcb&hideController=false&pageLoadStartTime=1643445652840&mode=CHAT&driftEnableLog=false

Source: https://doubleverify.com/	HTTP Parser: HTML title missing
Source: https://doubleverify.com/	HTTP Parser: HTML title missing
Source: https://doubleverify.com/brands-and-agencies/	HTTP Parser: HTML title missing
Source: https://doubleverify.com/capabilities-fraud/	HTTP Parser: HTML title missing
Source: https://doubleverify.com/viewability/	HTTP Parser: HTML title missing

Source: https://doubleverify.com/	HTTP Parser: No <meta name="author".. found
Source: https://doubleverify.com/	HTTP Parser: No <meta name="author".. found
Source: https://doubleverify.com/brands-and-agencies/	HTTP Parser: No <meta name="author".. found
Source: https://doubleverify.com/capabilities-fraud/	HTTP Parser: No <meta name="author".. found
Source: https://doubleverify.com/viewability/	HTTP Parser: No <meta name="author".. found

Source: https://doubleverify.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://doubleverify.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://doubleverify.com/brands-and-agencies/	HTTP Parser: No <meta name="copyright".. found
Source: https://doubleverify.com/capabilities-fraud/	HTTP Parser: No <meta name="copyright".. found
Source: https://doubleverify.com/viewability/	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Source: unknown	HTTPS traffic detected: 104.16.149.64:443 -> 192.168.2.3:49937 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.149.64:443 -> 192.168.2.3:49938 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.4.12.228:443 -> 192.168.2.3:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.4.12.228:443 -> 192.168.2.3:49933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.4.12.228:443 -> 192.168.2.3:50092 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.4.12.228:443 -> 192.168.2.3:50444 version: TLS 1.2

Source: unknown

DNS traffic detected: queries for: accounts.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50516
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50510
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50536
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50540
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443

Source: Ruleset Data.0.dr	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: Filtering Rules.0.dr, Ruleset Data.0.dr	String found in binary or memory: www.facebook.com/ajax/ads/ equals www.facebook.com (Facebook)
Source: Filtering Rules.0.dr	String found in binary or memory: www.facebook.com0 equals www.facebook.com (Facebook)

Source: angular.js.0.dr	String found in binary or memory: http://angularjs.org
Source: angular.js.0.dr	String found in binary or memory: http://errors.angularjs.org/1.6.4-local
Source: pnacl_public_x86_64_pnacl_sz_nexe.0.dr, pnacl_public_x86_64_pnacl_llc_nexe.0.dr	String found in binary or memory: http://llvm.org/):
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
Source: manifest.json.0.dr, 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	String found in binary or memory: https://accounts.google.com
Source: craw_window.js.0.dr	String found in binary or memory: https://accounts.google.com/MergeSession
Source: manifest.json.0.dr, 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	String found in binary or memory: https://apis.google.com
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr	String found in binary or memory: https://bid.g.doubleclick.net
Source: pnacl_public_x86_64_libcrt_platform_a.0.dr	String found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-clang.git
Source: pnacl_public_x86_64_libcrt_platform_a.0.dr	String found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	String found in binary or memory: https://clients2.google.com
Source: mirroring_hangouts.js.0.dr, mirroring_cast_streaming.js.0.dr	String found in binary or memory: https://clients2.google.com/cr/report
Source: manifest.json0.0.dr, manifest.json.0.dr, manifest.json2.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://clients6.google.com
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr	String found in binary or memory: https://cm.g.doubleclick.net
Source: pnacl_public_x86_64_ld_nexe.0.dr	String found in binary or memory: https://code.google.com/p/nativeclient/issues/entry
Source: pnacl_public_x86_64_ld_nexe.0.dr	String found in binary or memory: https://code.google.com/p/nativeclient/issues/entry%s:
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr	String found in binary or memory: https://content-autofill.googleapis.com
Source: manifest.json.0.dr	String found in binary or memory: https://content.googleapis.com
Source: mirroring_cast_streaming.js.0.dr	String found in binary or memory: https://crash.corp.google.com/samples?reportid=&q=
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/compatiblelicenses
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://creativecommons.org/publicdomain/zero/1.0/.
Source: 9bbdd6f1-c603-4ac3-acd1-38ecbaa89859.tmp.2.dr, 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr, 3bb0fb31-a8c1-480d-beec-e009f1ffc652.tmp.2.dr	String found in binary or memory: https://dns.google
Source: History Provider Cache.0.dr	String found in binary or memory: https://doubleverify.com/2
Source: LICENSE.txt.0.dr	String found in binary or memory: https://easylist.to/)
Source: manifest.json.0.dr	String found in binary or memory: https://feedback.googleusercontent.com
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: manifest.json.0.dr	String found in binary or memory: https://fonts.googleapis.com;
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: manifest.json.0.dr	String found in binary or memory: https://fonts.gstatic.com;
Source: material_css_min.css.0.dr, angular.js.0.dr	String found in binary or memory: https://github.com/angular/material
Source: LICENSE.txt.0.dr	String found in binary or memory: https://github.com/easylist)
Source: craw_window.js.0.dr, craw_background.js.0.dr	String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://hangouts.clients6.google.com
Source: manifest.json.0.dr	String found in binary or memory: https://hangouts.google.com/
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://hangouts.google.com/hangouts/_/logpref
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://meetings.clients6.google.com
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	String found in binary or memory: https://ogs.google.com
Source: craw_window.js.0.dr, manifest.json2.0.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	String found in binary or memory: https://play.google.com
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://preprod-hangouts-googleapis.sandbox.google.com
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr	String found in binary or memory: https://r4---sn-4g5edn6r.gvt1.com
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr	String found in binary or memory: https://redirector.gvt1.com
Source: craw_window.js.0.dr, manifest.json2.0.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	String found in binary or memory: https://ssl.gstatic.com
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr	String found in binary or memory: https://stats.g.doubleclick.net
Source: messages.json41.0.dr, messages.json5.0.dr, messages.json7.0.dr, messages.json29.0.dr, feedback.html.0.dr, messages.json59.0.dr, messages.json83.0.dr, messages.json79.0.dr, messages.json82.0.dr, messages.json54.0.dr, messages.json44.0.dr, messages.json70.0.dr, messages.json33.0.dr, messages.json0.0.dr, messages.json85.0.dr, messages.json88.0.dr, messages.json14.0.dr, messages.json87.0.dr, messages.json57.0.dr, messages.json18.0.dr, messages.json.0.dr	String found in binary or memory: https://support.google.com/chromecast/answer/2998456
Source: messages.json41.0.dr, messages.json5.0.dr, messages.json7.0.dr, messages.json29.0.dr, feedback.html.0.dr, messages.json59.0.dr, messages.json83.0.dr, messages.json79.0.dr, messages.json82.0.dr, messages.json54.0.dr, messages.json44.0.dr, messages.json70.0.dr, messages.json33.0.dr, messages.json0.0.dr, messages.json85.0.dr, messages.json88.0.dr, messages.json14.0.dr, messages.json87.0.dr, messages.json57.0.dr, messages.json18.0.dr, messages.json.0.dr	String found in binary or memory: https://support.google.com/chromecast/troubleshooter/2995236
Source: History Provider Cache.0.dr	String found in binary or memory: https://vast.doubleverify.com/2
Source: craw_window.js.0.dr, craw_background.js.0.dr	String found in binary or memory: https://www-googleapis-staging.sandbox.google.com
Source: History Provider Cache.0.dr	String found in binary or memory: https://www.doubleverify.com/2
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr	String found in binary or memory: https://www.google-analytics.com
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr	String found in binary or memory: https://www.google.ae
Source: manifest.json.0.dr, 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	String found in binary or memory: https://www.google.com
Source: manifest.json2.0.dr	String found in binary or memory: https://www.google.com/
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/accounts/OAuthLogin?issueuberauth=1
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/dot2.gif
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/x2.gif
Source: craw_background.js.0.dr	String found in binary or memory: https://www.google.com/intl/en-US/chrome/blank.html
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: feedback_script.js.0.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: manifest.json.0.dr	String found in binary or memory: https://www.google.com;
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: craw_window.js.0.dr, craw_background.js.0.dr, 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json2.0.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/calendar.readonly
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/cast-edu-messaging
Source: manifest.json2.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json2.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/clouddevices
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts.readonly
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/meetings
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.peopleapi.readwrite
Source: manifest.json2.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json2.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	String found in binary or memory: https://www.gstatic.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.gstatic.com;

Source: unknown	HTTPS traffic detected: 104.16.149.64:443 -> 192.168.2.3:49937 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.149.64:443 -> 192.168.2.3:49938 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.4.12.228:443 -> 192.168.2.3:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.4.12.228:443 -> 192.168.2.3:49933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.4.12.228:443 -> 192.168.2.3:50092 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.4.12.228:443 -> 192.168.2.3:50444 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\3709ef61-1cdf-489f-9500-c17bf93d7539.tmp

Jump to behavior

Source: classification engine

Classification label: clean1.win@33/219@73/57

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "https://vast.doubleverify.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1556,10421634681798175458,17881213341508085727,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1912 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1556,10421634681798175458,17881213341508085727,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1912 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-61F4FD51-1198.pma

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	2 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	1 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	2 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://vast.doubleverify.com	0%	Virustotal		Browse
https://vast.doubleverify.com	0%	Avira URL Cloud	safe

Dropped Files

Source	Detection	Scanner	Link
C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe	2%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://dns.google	0%	URL Reputation	safe
https://www.google.com;	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
gstaticadssl.l.google.com	216.58.215.227	true	false	high
pug-lhr.pubmatic.com	185.64.190.80	true	false	high
ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com	18.211.11.172	true	false	high
eu-u.openx.net	35.244.159.8	true	false	high
id5-sync.com	51.89.21.8	true	false	unknown
ih.adscale.de	18.196.233.14	true	false	high
crb.kargo.com	3.121.106.122	true	false	high
elb-aws-fr-bruges-621602890.eu-central-1.elb.amazonaws.com	18.193.160.53	true	false	high
mwzeom.zeotap.com	104.22.25.87	true	false	high
sync.crwdcntrl.net	54.229.233.249	true	false	high
cm.g.doubleclick.net	172.217.168.66	true	false	high
idaas-ext.cph.liveintent.com	52.1.89.185	true	false	high
www.google.com	142.250.203.100	true	false	high
idaas6.cph.liveintent.com	34.232.192.101	true	false	high
match.adsrvr.org	52.223.40.198	true	false	high
star-mini.c10r.facebook.com	157.240.17.35	true	false	high
rtb-csync-itx5.smartadserver.com	185.86.138.114	true	false	high
stats.l.doubleclick.net	108.177.127.154	true	false	high
uip.semasio.net	77.243.60.138	true	false	high
ad.sxp.smartclip.net	35.186.194.101	true	false	high
sj27.mktoedge.com	104.16.94.80	true	false	unknown
vast-production-fra1.zentrick.com	165.22.24.53	true	false	high
googleads.g.doubleclick.net	172.217.168.66	true	false	high
load-euc1.exelator.com	18.198.126.47	true	false	high
ams01.sync.search.spotxchange.com	185.94.180.125	true	false	high
doubleverify.com	142.4.12.228	true	false	high
ads-bid.l.doubleclick.net	108.177.119.155	true	false	high
clients.l.google.com	142.250.203.110	true	false	high
prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com	34.199.204.104	true	false	high
prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com	52.214.30.104	true	false	high
cdn.cookielaw.org	104.16.148.64	true	false	high
www.google.ae	142.250.203.99	true	false	high
googlehosted.l.googleusercontent.com	172.217.168.33	true	false	high
aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com	52.56.115.248	true	false	high
pixel-origin.mathtag.com	185.29.134.248	true	false	high
afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com	3.94.218.138	true	false	high
dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com	54.72.72.188	true	false	high
oeu.vap.lijit.com	216.52.2.30	true	false	high
dl7g9llrghqi1.cloudfront.net	143.204.215.12	true	false	high
scontent.xx.fbcdn.net	157.240.17.15	true	false	high
idsync.rlcdn.com	35.244.174.68	true	false	high
pixel.tapad.com	35.227.248.159	true	false	high
888-uxn-063.mktoresp.com	192.28.147.68	true	false	unknown
accounts.google.com	142.250.203.109	true	false	high
www-google-analytics.l.google.com	142.250.203.110	true	false	high
prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud	3.127.158.112	true	false	unknown
www-googletagmanager.l.google.com	172.217.168.8	true	false	high
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	18.196.159.27	true	false	high
embeds.driftcdn.com	143.204.215.111	true	false	unknown
www.doubleverify.com	142.4.12.228	true	false	high
ib.anycast.adnxs.com	185.33.221.91	true	false	high
prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	3.126.56.137	true	false	unknown
geolocation.onetrust.com	104.20.185.68	true	false	high
metrics.api.drift.com	unknown	unknown	false	high
bid.g.doubleclick.net	unknown	unknown	false	high
ads.stickyadstv.com	unknown	unknown	false	unknown
stats.g.doubleclick.net	unknown	unknown	false	high
clients2.googleusercontent.com	unknown	unknown	false	high
js.driftt.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
conversation.api.drift.com	unknown	unknown	false	high
i6.liadm.com	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
ce.lijit.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
munchkin.marketo.net	unknown	unknown	false	unknown
usermatch.krxd.net	unknown	unknown	false	high
bootstrap.api.drift.com	unknown	unknown	false	high
uipglob.semasio.net	unknown	unknown	false	high
stags.bluekai.com	unknown	unknown	false	high
sync.mathtag.com	unknown	unknown	false	high
pixel.mathtag.com	unknown	unknown	false	high
ups.analytics.yahoo.com	unknown	unknown	false	high
d.agkn.com	unknown	unknown	false	high
rtb-csync.smartadserver.com	unknown	unknown	false	high
image2.pubmatic.com	unknown	unknown	false	high
customer.api.drift.com	unknown	unknown	false	high
vast.doubleverify.com	unknown	unknown	false	high
pixel.advertising.com	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high
aa.agkn.com	unknown	unknown	false	high
x.bidswitch.net	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	high
targeting.api.drift.com	unknown	unknown	false	high
1097428-28.chat.api.drift.com	unknown	unknown	false	high
i.liadm.com	unknown	unknown	false	high
su.addthis.com	unknown	unknown	false	high
beacon.krxd.net	unknown	unknown	false	high
dsum-sec.casalemedia.com	unknown	unknown	false	high
app-sj27.marketo.com	unknown	unknown	false	high
ib.adnxs.com	unknown	unknown	false	high
sync.search.spotxchange.com	unknown	unknown	false	high
loadm.exelator.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://doubleverify.com/viewability/	false	high
https://js.driftt.com/core?embedId=ttmfycw3m5sm&region=US&forceShow=false&skipCampaigns=false&sessionId=d7185cda-7d1f-4a3f-866a-e239800c20e2&sessionStarted=1643445604.994&campaignRefreshToken=e36c7050-695e-4e0c-bd0d-719bdf310bcb&hideController=false&pageLoadStartTime=1643445592270&mode=CHAT&driftEnableLog=false	false	high
https://js.driftt.com/core?embedId=ttmfycw3m5sm&region=US&forceShow=false&skipCampaigns=false&sessionId=09a948cd-9d9c-455f-a9a3-7df79da7f30b&sessionStarted=1643445657.324&campaignRefreshToken=e36c7050-695e-4e0c-bd0d-719bdf310bcb&hideController=false&pageLoadStartTime=1643445652840&mode=CHAT&driftEnableLog=false	false	high
https://js.driftt.com/core/chat?region=US&driftEnableLog=false&pageLoadStartTime=1643445628859	false	high
https://js.driftt.com/core?embedId=ttmfycw3m5sm&region=US&forceShow=false&skipCampaigns=false&sessionId=470f30e1-b73b-400b-8716-0de2421b0776&sessionStarted=1643445646.507&campaignRefreshToken=e36c7050-695e-4e0c-bd0d-719bdf310bcb&hideController=false&pageLoadStartTime=1643445640387&mode=CHAT&driftEnableLog=false	false	high
https://doubleverify.com/	false	high
https://js.driftt.com/core/chat?region=US&driftEnableLog=false&pageLoadStartTime=1643445592270	false	high
https://app-sj27.marketo.com/index.php/form/XDFrame	false	high
https://doubleverify.com/brands-and-agencies/	false	high
https://pixel.mathtag.com/sync/iframe?mt_uuid=b35e61f4-7eca-4000-8370-2e6710cd2813&no_iframe=1&mt_adid=229936&source=mathtag	false	high
https://js.driftt.com/core?embedId=ttmfycw3m5sm&region=US&forceShow=false&skipCampaigns=false&sessionId=bfb1ff77-6524-4317-abbe-6da510fd5058&sessionStarted=1643445634.494&campaignRefreshToken=e36c7050-695e-4e0c-bd0d-719bdf310bcb&hideController=false&pageLoadStartTime=1643445628859&mode=CHAT&driftEnableLog=false	false	high
https://doubleverify.com/capabilities-fraud/	false	high
https://js.driftt.com/core/chat?region=US&driftEnableLog=false&pageLoadStartTime=1643445640387	false	high
https://js.driftt.com/core/chat?region=US&driftEnableLog=false&pageLoadStartTime=1643445652840	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net	32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr	false		high
https://www.google.com/images/cleardot.gif	craw_window.js.0.dr	false		high
https://cm.g.doubleclick.net	32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr	false		high
https://play.google.com	32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	false		high
https://crash.corp.google.com/samples?reportid=&q=	mirroring_cast_streaming.js.0.dr	false		high
https://www.google.com/log?format=json&hasfast=true	mirroring_hangouts.js.0.dr	false		high
https://easylist.to/)	LICENSE.txt.0.dr	false		high
https://sandbox.google.com/payments/v4/js/integrator.js	craw_window.js.0.dr, manifest.json2.0.dr	false		high
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01	mirroring_hangouts.js.0.dr	false		high
https://accounts.google.com/MergeSession	craw_window.js.0.dr	false		high
https://creativecommons.org/compatiblelicenses	LICENSE.txt.0.dr	false		high
https://preprod-hangouts-googleapis.sandbox.google.com	mirroring_hangouts.js.0.dr	false		high
https://doubleverify.com/2	History Provider Cache.0.dr	false		high
https://www.google.com	manifest.json.0.dr, 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	false		high
https://github.com/easylist)	LICENSE.txt.0.dr	false		high
https://creativecommons.org/.	LICENSE.txt.0.dr	false		high
https://bid.g.doubleclick.net	32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr	false		high
https://hangouts.clients6.google.com	mirroring_hangouts.js.0.dr	false		high
https://hangouts.google.com/hangouts/_/logpref	mirroring_hangouts.js.0.dr	false		high
https://accounts.google.com	manifest.json.0.dr, 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	false		high
https://clients2.google.com/cr/report	mirroring_hangouts.js.0.dr, mirroring_cast_streaming.js.0.dr	false		high
http://angularjs.org	angular.js.0.dr	false		high
https://creativecommons.org/publicdomain/zero/1.0/.	mirroring_hangouts.js.0.dr	false		high
https://github.com/angular/material	material_css_min.css.0.dr, angular.js.0.dr	false		high
https://apis.google.com	manifest.json.0.dr, 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	false		high
https://www.google.com/accounts/OAuthLogin?issueuberauth=1	craw_window.js.0.dr	false		high
https://github.com/madler/zlib/blob/master/zlib.h	mirroring_hangouts.js.0.dr	false		high
https://www.doubleverify.com/2	History Provider Cache.0.dr	false		high
https://www-googleapis-staging.sandbox.google.com	craw_window.js.0.dr, craw_background.js.0.dr	false		high
https://clients2.google.com	32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	false		high
https://www.google.com/tools/feedback	feedback_script.js.0.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0	mirroring_hangouts.js.0.dr	false		high
https://dns.google	9bbdd6f1-c603-4ac3-acd1-38ecbaa89859.tmp.2.dr, 32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr, 3bb0fb31-a8c1-480d-beec-e009f1ffc652.tmp.2.dr	false	URL Reputation: safe	unknown
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	craw_window.js.0.dr, craw_background.js.0.dr	false		high
https://www.google.com/intl/en-US/chrome/blank.html	craw_background.js.0.dr	false		high
https://ogs.google.com	32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	false		high
https://support.google.com/chromecast/troubleshooter/2995236	messages.json41.0.dr, messages.json5.0.dr, messages.json7.0.dr, messages.json29.0.dr, feedback.html.0.dr, messages.json59.0.dr, messages.json83.0.dr, messages.json79.0.dr, messages.json82.0.dr, messages.json54.0.dr, messages.json44.0.dr, messages.json70.0.dr, messages.json33.0.dr, messages.json0.0.dr, messages.json85.0.dr, messages.json88.0.dr, messages.json14.0.dr, messages.json87.0.dr, messages.json57.0.dr, messages.json18.0.dr, messages.json.0.dr	false		high
https://www.google.ae	32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr	false		high
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions	mirroring_hangouts.js.0.dr	false		high
https://payments.google.com/payments/v4/js/integrator.js	craw_window.js.0.dr, manifest.json2.0.dr	false		high
https://www.google.com;	manifest.json.0.dr	false	Avira URL Cloud: safe	low
https://chromium.googlesource.com/a/native_client/pnacl-llvm.git	pnacl_public_x86_64_libcrt_platform_a.0.dr	false		high
https://googleads.g.doubleclick.net	32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr	false		high
https://hangouts.google.com/	manifest.json.0.dr	false		high
https://www.google.com/images/x2.gif	craw_window.js.0.dr	false		high
http://llvm.org/):	pnacl_public_x86_64_pnacl_sz_nexe.0.dr, pnacl_public_x86_64_pnacl_llc_nexe.0.dr	false		high
https://www.google.com/images/dot2.gif	craw_window.js.0.dr	false		high
https://meetings.clients6.google.com	mirroring_hangouts.js.0.dr	false		high
https://play.google.com/log?format=json&hasfast=true	mirroring_hangouts.js.0.dr	false		high
https://vast.doubleverify.com/2	History Provider Cache.0.dr	false		high
https://code.google.com/p/nativeclient/issues/entry%s:	pnacl_public_x86_64_ld_nexe.0.dr	false		high
http://tools.ietf.org/html/rfc1950	mirroring_hangouts.js.0.dr	false		high
https://code.google.com/p/nativeclient/issues/entry	pnacl_public_x86_64_ld_nexe.0.dr	false		high
https://support.google.com/chromecast/answer/2998456	messages.json41.0.dr, messages.json5.0.dr, messages.json7.0.dr, messages.json29.0.dr, feedback.html.0.dr, messages.json59.0.dr, messages.json83.0.dr, messages.json79.0.dr, messages.json82.0.dr, messages.json54.0.dr, messages.json44.0.dr, messages.json70.0.dr, messages.json33.0.dr, messages.json0.0.dr, messages.json85.0.dr, messages.json88.0.dr, messages.json14.0.dr, messages.json87.0.dr, messages.json57.0.dr, messages.json18.0.dr, messages.json.0.dr	false		high
https://clients2.googleusercontent.com	32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp.2.dr, 9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp.2.dr, 6f20e909-a37a-4b99-9c55-831f728c10f3.tmp.2.dr	false		high
https://www.google.com/	manifest.json2.0.dr	false		high
https://feedback.googleusercontent.com	manifest.json.0.dr	false		high
https://chromium.googlesource.com/a/native_client/pnacl-clang.git	pnacl_public_x86_64_libcrt_platform_a.0.dr	false		high
https://clients2.google.com/service/update2/crx	manifest.json0.0.dr, manifest.json.0.dr, manifest.json2.0.dr	false		high
https://clients6.google.com	mirroring_hangouts.js.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.33.221.91	ib.anycast.adnxs.com	Netherlands	29990	ASN-APPNEXUS	false
104.16.94.80	sj27.mktoedge.com	United States	13335	CLOUDFLARENETUS	false
216.52.2.30	oeu.vap.lijit.com	United States	29791	VOXEL-DOT-NETUS	false
50.16.7.188	unknown	United States	14618	AMAZON-AESUS	false
157.240.17.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
34.199.204.104	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
77.243.60.138	uip.semasio.net	Denmark	42697	NETIC-ASDK	false
185.64.190.80	pug-lhr.pubmatic.com	United Kingdom	62713	AS-PUBMATICUS	false
18.193.160.53	elb-aws-fr-bruges-621602890.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
54.160.53.38	unknown	United States	14618	AMAZON-AESUS	false
18.196.159.27	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
165.22.24.53	vast-production-fra1.zentrick.com	United States	14061	DIGITALOCEAN-ASNUS	false
104.16.148.64	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
104.20.184.68	unknown	United States	13335	CLOUDFLARENETUS	false
18.211.11.172	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
54.229.233.249	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
35.227.248.159	pixel.tapad.com	United States	15169	GOOGLEUS	false
34.232.192.101	idaas6.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
108.177.127.154	stats.l.doubleclick.net	United States	15169	GOOGLEUS	false
104.16.95.80	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.215.227	gstaticadssl.l.google.com	United States	15169	GOOGLEUS	false
52.1.89.185	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.56.115.248	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
143.204.215.111	embeds.driftcdn.com	United States	16509	AMAZON-02US	false
52.214.30.104	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
185.86.138.114	rtb-csync-itx5.smartadserver.com	France	201081	SMARTADSERVERFR	false
3.126.56.137	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
35.186.194.101	ad.sxp.smartclip.net	United States	15169	GOOGLEUS	false
52.223.40.198	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
3.127.158.112	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
51.89.21.8	id5-sync.com	France	16276	OVHFR	false
18.198.126.47	load-euc1.exelator.com	United States	16509	AMAZON-02US	false
35.244.159.8	eu-u.openx.net	United States	15169	GOOGLEUS	false
157.240.17.15	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
172.217.168.8	www-googletagmanager.l.google.com	United States	15169	GOOGLEUS	false
192.28.147.68	888-uxn-063.mktoresp.com	United States	53580	MARKETOUS	false
185.94.180.125	ams01.sync.search.spotxchange.com	Netherlands	35220	SPOTX-AMSNL	false
172.217.168.66	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.22.25.87	mwzeom.zeotap.com	United States	13335	CLOUDFLARENETUS	false
143.204.215.12	dl7g9llrghqi1.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.203.109	accounts.google.com	United States	15169	GOOGLEUS	false
185.29.134.248	pixel-origin.mathtag.com	United Kingdom	30419	MEDIAMATH-INCUS	false
108.177.119.155	ads-bid.l.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.203.100	www.google.com	United States	15169	GOOGLEUS	false
54.72.72.188	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.4.12.228	doubleverify.com	United States	46606	UNIFIEDLAYER-AS-1US	false
18.196.233.14	ih.adscale.de	United States	16509	AMAZON-02US	false
104.16.149.64	unknown	United States	13335	CLOUDFLARENETUS	false
104.20.185.68	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
172.217.168.33	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
3.94.218.138	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
3.121.106.122	crb.kargo.com	United States	16509	AMAZON-02US	false
143.204.215.88	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.1
127.0.0.1

General Information

Joe Sandbox Version:	34.0.0 Boulder Opal
Analysis ID:	562529
Start date:	29.01.2022
Start time:	00:38:56
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 50s
Hypervisor based Inspection enabled:	false
Report type:	light
Cookbook file name:	browseurl.jbs
Sample URL:	https://vast.doubleverify.com
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	22
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@33/219@73/57
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI Browse: https://doubleverify.com/brands-and-agencies/ Browse: https://doubleverify.com/capabilities-fraud/ Browse: https://doubleverify.com/viewability/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, BackgroundTransferHost.exe, WMIADAP.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, wuapihost.exe
TCP Packets have been reduced to 100
Created / dropped Files have been reduced to 100
Excluded IPs from analysis (whitelisted): 2.20.156.69, 142.250.203.110, 74.125.153.201, 34.104.35.123, 142.250.203.99, 172.217.168.10, 2.20.157.12, 23.79.90.218, 172.217.168.2, 142.250.203.106, 69.173.144.138, 69.173.144.139, 69.173.144.165, 2.20.157.55, 88.221.224.208, 2.20.157.201, 2.20.156.76, 172.217.168.42, 172.217.168.74, 216.58.215.234
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, www.googleadservices.com, uipglob.trafficmanager.net, pixel.rubiconproject.net.akadns.net, clientservices.googleapis.com, e10776.b.akamaiedge.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, arc.msn.com, wildcard.marketo.net.edgekey.net, r4---sn-4g5edn6r.gvt1.com, pixel.mathtag.com.edgekey.net, e9126.x.akamaiedge.net, e8037.g.akamaiedge.net, redirector.gvt1.com, www.googletagmanager.com, stickyadstv.com.edgekey.net, update.googleapis.com, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, rtb-csync-geo.usersync-prod-sas.akadns.net, www.gstatic.com, prod.fs.microsoft.com.akadns.net, www.google-analytics.com, r4.sn-4g5edn6r.gvt1.com, ip2.ads.stickyadstv.com.akadns.net, fonts.googleapis.com, fs.microsoft.com, e6791.b.akamaiedge.net, content-autofill.googleapis.com, e11676.b.akamaiedge.net, fonts.gstatic.com, e4016.a.akamaiedge.net, optanon.blob.core.windo
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	451603
Entropy (8bit):	5.009711072558331
Encrypted:	false
SSDEEP:	12288:ZHfRTyGZ6lup8Cfrvq4JBPKh+FBlESBw4p6:NfOCzvRKhGvwJ
MD5:	A78AD14E77147E7DE3647E61964C0335
SHA1:	CECC3DD41F4CEA0192B24300C71E1911BD4FCE45
SHA-256:	0D6803758FF8F87081FAFD62E90F0950DFB2DD7991E9607FE76A8F92D0E893FA
SHA-512:	DDE24D5AD50D68FC91E9E325D31E66EF8F624B6BB3A07D14FFED1104D3AB5F4EF1D7969A5CDE0DFBB19CB31C506F7DE97AF67C2F244F7E7E8E10648EA8321101
Malicious:	false
Reputation:	low
Preview:	BDic.... ....6...."..Z..4g....6.2...{/...3...5....AF 1363.AF nm.AF pt.AF n1.AF p.AF tc.AF SM.AF M.AF S.AF MS.AF MNR.AF GDS.AF MNT.AF MH.AF MR.AF SZMR.AF MJ.AF MT.AF MY.AF MRZ.AF MN.AF MG.AF RM.AF N.AF MV.AF XM.AF DSM.AF SD.AF G.AF R.AF MNX.AF MRS.AF MD.AF MNRB.AF B.AF ZSMR.AF PM.AF SMNGJ.AF SMN.AF ZMR.AF SMGB.AF MZR.AF GM.AF SMR.AF SMDG.AF RMZ.AF ZM.AF MDG.AF MDT.AF SMNXT.AF SDY.AF LSDG.AF LGDS.AF GLDS.AF UY.AF U.AF DSGNX.AF GNDSX.AF DSG.AF Y.AF GS.AF IEMS.AF YP.AF ZGDRS.AF XGNVDS.AF UT.AF GNDS.AF GVDS.AF MYPS.AF XGNDS.AF TPRY.AF MDSG.AF ZGSDR.AF DYSG.AF PMYTNS.AF AGDS.AF DRZGS.AF PY.AF GSPMDY.AF EGVDS.AF SL.AF GNXDS.AF DSBG.AF IM.AF I.AF MDGS.AF SMY.AF DSGN.AF DSLG.AF GMDS.AF MDSBG.AF SGD.AF IY.AF P.AF DSMG.AF BLZGDRS.AF TR.AF AGSD.AF ZGBDRSL.AF PTRY.AF ASDGV.AF ASM.AF ICANGSD.AF ICAM.AF IKY.AF AMS.AF PMYTRS.AF BZGVDRS.AF SDRBZG.AF GVMDS.AF PSM.AF DGLS.AF GNVXDS.AF AGDSL.AF DGS.AF XDSGNV.AF BZGDRS.AF AM.AF AS.AF A.AF LDSG.AF AGVDS.AF SDG.AF LDSMG.AF EDSMG.AF EY.AF DRSMZG.AF PRYT.AF LZ

C:\Users\user\AppData\Local\Google\Chrome\User Data\26d7a466-5e84-422f-996f-a44aed3ea76c.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	190416
Entropy (8bit):	6.045055506734713
Encrypted:	false
SSDEEP:	3072:V/S1Cm78VKMvHOz5zXnZIFYLp964jYLftLt8aZpNkFcbXafIB0u1GOJmA3iuRS:VHm78s6OtziYLpDjqd0aqfIlUOoSiuRS
MD5:	CD15008504D2F1F154F2FBB4D02F6FBE
SHA1:	38092E4CC84D8C4E60226D86E0AF8FF03C1C04EA
SHA-256:	97C01746F352209B1D033F508CBEFCB335818D321F2F0D2F26A1005D0997380C
SHA-512:	D9D14984ADEB51931F277CC0A56A8DDE51A32DED0D4C5718FD161BDB85EF28F7CB35CDC51D47F20F6505A6A11B63BB71BB9F542DAD87E91F83C752319C4CB77E
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643445588665187e+12,"network":1.643413191e+12,"ticks":131643979.0,"uncertainty":4335801.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13276832799521500"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\430a047b-925e-4288-acf9-f459cb004e0d.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	198892
Entropy (8bit):	6.074056654936518
Encrypted:	false
SSDEEP:	6144:3UHm78s6OtziYLpDjqd0aqfIlUOoSiuRS:3UHFz4hLZSTol
MD5:	9CD5220B05F96CDF6662E197FE402CCC
SHA1:	BF4C5E5936FFF590DA45C24977B35B811973998A
SHA-256:	C486A5C1D765F38F37628C7F2795400035980C1FA4A14DBA10A651C3A0B5889A
SHA-512:	520AE66CEF1759D975C063E800C549495DD337375EFD4684E31689A1825A30B6291D4E12F11B6DA3EE1D7B04457931B1011E094322320EC37CD35252CBF33B6F
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643445588665187e+12,"network":1.643413191e+12,"ticks":131643979.0,"uncertainty":4335801.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13276832799521500"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\4a27128d-4f3a-4fa8-9780-a7b78c954e9a.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	198892
Entropy (8bit):	6.074057497305606
Encrypted:	false
SSDEEP:	6144:cEHm78s6OtziYLpDjqd0aqfIlUOoSiuRS:cEHFz4hLZSTol
MD5:	E7E04B48B6F3966EEFC6C1DF3CC2FB16
SHA1:	88965DD5DA84AE854076DAAC6361F57DFA12C7F7
SHA-256:	5E62849FF98E2F80A2066EFE2C3361C08189262386ADCD3B41AC598F49D7B872
SHA-512:	115E1AEB8500992FCDE1A4CA68B3076DE0C75D69FDA3A3381EF04A7152797268E6DE4A93BA8554727CD00898D835C926E889A772AF89C62D310227A6F0D64AE6
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643445588665187e+12,"network":1.643413191e+12,"ticks":131643979.0,"uncertainty":4335801.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245951016607996"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\731df75b-fdff-42d8-a930-de3199a15e1a.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	190416
Entropy (8bit):	6.0450536841412985
Encrypted:	false
SSDEEP:	3072:+/S1Cm78VKMvHOz5zXnZIFYLp964jYLftLt8aZpNkFcbXafIB0u1GOJmA3iuRS:AHm78s6OtziYLpDjqd0aqfIlUOoSiuRS
MD5:	63B565D8900E8C1AFC61BB1F5666D971
SHA1:	C6B59531B0C38B02AB05649CD8B2BA947193AB06
SHA-256:	66FF03A241F23B1296C8ED5C422E3211FFE85B2BBB1E4B6A8FC749620FF7B929
SHA-512:	5E5DD45886057533170B48421490B99659A81F6179BE29610994FA7D7A94548F7AAAD5D93CEB1D2536BAF12A8F8F31FCAA09DB359A7ACE3C0340300F7D278CBA
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643445588665187e+12,"network":1.643413191e+12,"ticks":131643979.0,"uncertainty":4335801.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13276832799521500"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\92d99af9-5cd2-45e2-b0b8-4924ca9adc2c.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SysEx File -
Category:	dropped
Size (bytes):	94708
Entropy (8bit):	3.7453758716145127
Encrypted:	false
SSDEEP:	384:pjO5lbcuXEbjVYeFgNNr+vRb36dbKHLGGuRr8/p1xivnfWrEJmUX87VxFOO7LxN1:x6K1NqfqWEev9DLs/r+DKBfVR5
MD5:	ED67A6F7695CA706CEAB7B5A7384AA80
SHA1:	7771577F49B618E87F12901C37FEA96478D38617
SHA-256:	F4056F3E6C25294801278FA8914D40F24AEDA54912AECA2E1136CCF83D0737EE
SHA-512:	17918C0325F2C7067B041E10620F44345893A1861AC717F78A3F501AD50A0868787735B7E57F84805A3BD1CAEA6D32D36041ADE9675C5F8E653A4BDD8F3178CD
Malicious:	false
Reputation:	low
Preview:	.q.................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n...PR8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	3.254162526001658
Encrypted:	false
SSDEEP:	3:FkXft0xE1n:+ftIE1n
MD5:	BD4642AD6C750A12D912B20BCB92E14D
SHA1:	C549F0F48FDD4FBC62E51AC26D7E185160CE2123
SHA-256:	4FD71FE78DFE203137C89C9FB0734358FF432F2BC83338112DC7B830F9B30F2C
SHA-512:	04410D12EF327614C3AF1251C9906BFEB2977211A7F53CBB08A8C01F9465A382CD001E51AB936A0D196D359F1DECDDAEAF5E7D1DBD49CE5F4FF91BF5C332B6CF
Malicious:	false
Reputation:	low
Preview:	sdPC....................s}.....M..2.!..%

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\03bf8c65-34d3-4187-91ed-5f490b6ae118.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	370
Entropy (8bit):	5.498167662751628
Encrypted:	false
SSDEEP:	6:YAQNnvuO80QprncjHYHD8wXwlmUUAnIMp50TrmVdKX9RfSHJR8wXwlmUUAnIMp5f:YBQ+j4HH+UAnI3mVUX9RAJ9+UAnIKmQ
MD5:	90F222F2DFD0B36F55A036AA5C427B5F
SHA1:	5EFAE367FA05150A477F72706D6936B491C878CE
SHA-256:	AEF6792DEABDE0E7847E2885CC25C5AFC3DC455E3F3AE73C01904F5459D66C08
SHA-512:	7BD3660331877C37D47D1A664A696382998FCD766917FCAB7676179E744893E124F07179259DABAA9AF23FE93927DBBFB76963D5D22F4749A88FF79FDCD06845
Malicious:	false
Reputation:	low
Preview:	{"expect_ct":[],"sts":[{"expiry":1654331995.261737,"host":"LAZkYS46RVRcFiZAzmUJrz6TJHBd4nwE6VxPWfPLYHs=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1643445595.261743},{"expiry":1674981652.458599,"host":"M4bfUnCmQAi4PNb3B8aI/2+SVJhHKsMfMMT7fzi6ij4=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1643445652.458605}],"version":2}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\07210318-b20d-4e66-9dfd-f79956596aaa.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Reputation:	low
Preview:	.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2a642e9b-962a-49f6-a789-33d4c37eb689.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	17092
Entropy (8bit):	5.583287469778893
Encrypted:	false
SSDEEP:	384:htM1tmLlU+Xb1kXqKf/pUZNCgVLH2HfDSrUXXaJ4wS:DLLlxb1kXqKf/pUZNCgVLH2HfOrUaJHS
MD5:	C0FEF5A2A6054FFB7F78358995335166
SHA1:	5F2E8CCE2E91AFACB525CB1EC8B0D7CEA4D54ECD
SHA-256:	99256DF727AEE967C82647980E0A5037D7D9CD8D07A56E3466EF9A3977EF792D
SHA-512:	B647853456188909864D9BCB3919A5C1076740A7E38F6F6B44D187343E5DBA2D4F2048144ED7AEBDC58A8154910F971F18AFA00A2184C9FCB4B4A6D155244525
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13287919186424227","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2bc5ec5a-e8da-4208-8c6e-c49c18730eb8.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5218
Entropy (8bit):	4.99186366399937
Encrypted:	false
SSDEEP:	96:nvVC1ut9pcKIxok0JCKL8elkCUtbOTQVuwn:nvVCY9pc64KhkCW
MD5:	E1F2D68978EA9D406C7C66017D054A15
SHA1:	20ACB21E8BE8F2D65CFD2CC4716A454946FB7753
SHA-256:	2AA9F4125BA826AAF9A930AB087ECBC3CB82FF9BAC98CAB7DC78410D636964E7
SHA-512:	6C9DD667EBF0F420462C39E82F78CE95E4576B471BB974ECF1BDF1CA07E355AC9F8E4069A03BDD37E2B862FB45B8F47C78E8726BD1239B925B2069700073A433
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13287919187006982","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	4268
Entropy (8bit):	4.905203919741172
Encrypted:	false
SSDEEP:	96:JTOXGDHazNEarbfGxEGrVKqPhGrOGOG0GdG+G1B7GLdG9YGvE/H:JTOXGDHazNEaXfYEAVKqPhCOzN+JoB7s
MD5:	7E277439E8017BD5364D074CD47FD8DB
SHA1:	455B59A6EEA31290B78184B9920E926EA6F858F9
SHA-256:	E5D5DD518283E788C9071ACC564CAC69D1B91F7759D2140294DE24672FE14A5D
SHA-512:	A0C19AABC1B1CD0E499F914AECCA7F7D6CF0D1242583025E77525331207A91DF898B08E69B9F00318A78E1BE9CD2F6FD2AFB50AD1BC580D32911310042BAE70C
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://www.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://ssl.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://apis.google.com","supports_spdy":true},{"isolation":[],"server":"https://play.google.com","supports_spdy":true},{"isolation":[],"server":"https://ogs.google.com","supports_spdy":true},{"isolation":[],"server":"https://www.googleapis.com","supports_spdy":true},{"isolation":[],"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13290511189186648","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://redirector.gvt1.com"},{"alternative_service":[{"advertised_versions":[50],"expiration":"13290511189186796","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://accounts.google.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"1329051118

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\39e79b8f-7526-430e-a2ff-e7e9b08e4e76.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	16919
Entropy (8bit):	5.579986976348578
Encrypted:	false
SSDEEP:	384:htM1tmLlU+Xb1kXqKf/pUZNCgVLH2HfDSrUyXvJ4K:DLLlxb1kXqKf/pUZNCgVLH2HfOrUcJV
MD5:	4D8614B8187575F704EE25F0E65712E7
SHA1:	047681E52B1369F8322F8977FEA580DD7D1FDCAA
SHA-256:	BE68C09B32424BAB2B344F070FBDEF86E855B2DE5806243EC148309A4389103F
SHA-512:	821F539362DC40EDCE4F99CEFEE1F79161515958E7DB97A74FCA4B0EF781F6EA630EBB107AB37E2077234E62CA24BE81C2C839C5F4628C620C812077B7BDEB5A
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13287919186424227","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3b2faecd-cfef-4475-a0c2-5d54dc7aed7d.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	22596
Entropy (8bit):	5.535989308871043
Encrypted:	false
SSDEEP:	384:htM1tmLlU+Xb1kXqKf/pUZNCgVLH2HfDSrU1HGOnThXtzJ4k:DLLlxb1kXqKf/pUZNCgVLH2HfOrUJGON
MD5:	2005C4F8C80495930DA7C828A38A8EF3
SHA1:	E1125B7779FD429D09B1B833A0530467C76D1976
SHA-256:	46B2D8215268DA4E58992D8EB25933AB416DDA1751DA309B90A8557C62D9633B
SHA-512:	59830411CCE349686924D896FA86A53453EDDB8F6CF311ABEC5E7510843B22C96B6AE705C2030509B4D3E62693DFB0255870B4F079FCD49DA5138CA334B11AB7
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13287919186424227","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3cf77b19-3fcc-4286-ae4d-378b02d0e7c4.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5814
Entropy (8bit):	5.197176046651996
Encrypted:	false
SSDEEP:	96:nvVC1lt9MVXwn+cKIaok0JCKL8elkCUtbOTQVuwn:nvVC59QY+cD4KhkCW
MD5:	624D2E859197FCE56988813273D13303
SHA1:	971A2469F6A0353736F03612A0DC51DF377DD68A
SHA-256:	0F3C5953E95DB37370985924D203DD43468BDC4C8534C8D2A36471F662D69330
SHA-512:	57399404AAB578F43F97F5DEEC295759B44C8131955BDFCB78E91953A31A8A450018F7E4EF876985AD6F0E87A6C54F328F931558ACBC63B9DDEE256967C5F7F6
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13287919187006982","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\49606118-7129-4ab9-ba1d-0da2ef0b2339.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	370
Entropy (8bit):	5.487544312160236
Encrypted:	false
SSDEEP:	6:YAQNnvuO80QprncjHYHD8wXwlmUUAnIMp50TrmVdKEu9RfSHJR8wXwlmUUAnIMpy:YBQ+j4HH+UAnI3mVUEu9RAJ9+UAnI5/d
MD5:	F62893B410901BAF4D6D0CEBC47A9AEC
SHA1:	F131819EC055E73CB16778897F81B4ECC6CC501E
SHA-256:	9ECB78F79027322F75956C3AD4A90195007EA1B91B8EB10F9DF9E239984F11F6
SHA-512:	6C0E41D964A1779A811DB71342440D5AAE5A85A372C60951587116B0ABF23E7FFE217C3C8BB50E8E489EA185D5E787105CBE1C72002F8F5512E3144083C69FA1
Malicious:	false
Reputation:	low
Preview:	{"expect_ct":[],"sts":[{"expiry":1654331995.261737,"host":"LAZkYS46RVRcFiZAzmUJrz6TJHBd4nwE6VxPWfPLYHs=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1643445595.261743},{"expiry":1674981639.974407,"host":"M4bfUnCmQAi4PNb3B8aI/2+SVJhHKsMfMMT7fzi6ij4=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1643445639.974413}],"version":2}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6f20e909-a37a-4b99-9c55-831f728c10f3.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	4219
Entropy (8bit):	4.871684703914691
Encrypted:	false
SSDEEP:	48:YXsJjMH+5s7YMHBKsvxMHVzspxMHbsIHt/soBDysKqnsllzMHpDCLsWJMHLsNuMg:RG+ZGJG+GTTD7IGpD+G7Gp2GnG4GVhH
MD5:	EDC4A4E22003A711AEF67FAED28DB603
SHA1:	977E551B9ED5F60D018C030B0B4AA2E33B954556
SHA-256:	DD2C9F43F622F801FCC213CDE8E3E90EF1D0D26665AE675449A94CEC7EB1D453
SHA-512:	84D3930579FD73C7D86144D5CDC636436955BA79759273C740D2D72BC4847F2F7F165BBCA3EB2E4DFB01777D6A5F141623278C1BF74615C5A491092CE3FD1602
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[],"expiration":"13248543677350473","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543677350474","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":31344},"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248543501474403","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543501474403","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":31656},"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248543501454993","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543501454994","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":39369},"server":"https://www.googleapis.com","supports_spdy":true},

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8230b8a8-8299-4894-97ce-71488b8617ee.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	203
Entropy (8bit):	5.384216540441389
Encrypted:	false
SSDEEP:	6:YAQNnvuO80QprncjHYHD8wXwlmUUAnIMp50TSHqSQ:YBQ+j4HH+UAnIWHVQ
MD5:	9EDAFAF443F448EADC5C9531CDF42E9A
SHA1:	BE67A50E1C026A7ED55891C4405DB877485F208E
SHA-256:	25195789A121DCB5F7761409E9FC53F59ADCE222A87E4C18D14F52F29BE2747B
SHA-512:	24CCF68D81E3EE7611115135B84499DC554628E99F1FA7FFE2642928BB74AD81820FA2A521BF9166097CC072EA60EEF834BCA3696A6DA90A09754844E8EAE7E1
Malicious:	false
Reputation:	low
Preview:	{"expect_ct":[],"sts":[{"expiry":1654331995.261737,"host":"LAZkYS46RVRcFiZAzmUJrz6TJHBd4nwE6VxPWfPLYHs=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1643445595.261743}],"version":2}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	3989
Entropy (8bit):	4.9077679622685295
Encrypted:	false
SSDEEP:	96:JTOXGDHazNEarbfGxEGrVsim1E3HjQWKvRbBKq/H:JTOXGDHazNEaXfYEAVsimK3HjQWQRbBT
MD5:	5D4515469E25F027962426171368CDDC
SHA1:	14507E8628E6F7ED8B3825794DBF153885A5FC51
SHA-256:	9DBD5EDA39E8A8D0B72C185BCA245B18B9C4ADF32DB2894F3BCB50944DE6BC7B
SHA-512:	D97C8693AA2AFF8CA5042C903BF201AB96B40862DB73557B9D00C469D11B595ECA7F12554002E9AE77B86F353D4327B0F5C90C76EBEB88E659C1021BCAB5D384
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://www.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://ssl.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://apis.google.com","supports_spdy":true},{"isolation":[],"server":"https://play.google.com","supports_spdy":true},{"isolation":[],"server":"https://ogs.google.com","supports_spdy":true},{"isolation":[],"server":"https://www.googleapis.com","supports_spdy":true},{"isolation":[],"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13290511189186648","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://redirector.gvt1.com"},{"alternative_service":[{"advertised_versions":[50],"expiration":"13290511189186796","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://accounts.google.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"1329051118

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\96d46350-52b7-4243-a489-bd0c8c0d804c.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5162
Entropy (8bit):	4.980293511465553
Encrypted:	false
SSDEEP:	96:nvVCRRX9pcKI7ok0JCKL8ik71/bOTQVuwn:nvVCj9pcU4Ktk7x
MD5:	8A2B0326E6298AE0AA8B99C8B776548C
SHA1:	8E764708930845B04C4B789180080D18B3ED8589
SHA-256:	1818DAF3C577425FEC611819FEB706FD3ADC2BFC9DD35FC0DEBD553243EBCD6F
SHA-512:	EF61C2FC32B81412A595BA487E0F59C02A7AE8D54663541ED7D19DE307DE9A834B3AFE5AD57E77977505BDFDE640144BE7EFEB4DD2C6F416E8D9F62A885B65B9
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13287919187006982","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9cdabed3-67a7-45bc-8e7d-0a3013992d18.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5179
Entropy (8bit):	4.983971970826016
Encrypted:	false
SSDEEP:	96:nvVC1gt9pcKI7ok0JCKL8Ktke973bOTQVuwn:nvVCi9pcU4KBtke5
MD5:	D6F9297269741A834E440BAEDFFB8C29
SHA1:	38D7915EFE0423A850E707EA835438BFAC481862
SHA-256:	099161F41F997A85758BACD434C6E50361412897877FC97E3329507CE69F67E8
SHA-512:	6BB04E7FB7893D1F25EAA302EEB800AB914D3318D1851F12CFAA95A2070FD45B1B788FE227D6CB9B65A1EEE9562D73452CF3DBE6E0B02A818EFFBEBA781F1316
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13287919187006982","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9fed889c-55e5-4a22-8328-4eb94915b7f6.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	modified
Size (bytes):	370
Entropy (8bit):	5.478026416695745
Encrypted:	false
SSDEEP:	6:YAQNnvuO80QprncjHYHD8wXwlmUUAnIMp50TrmVdKMR9RfSHJR8wXwlmUUAnIMpy:YBQ+j4HH+UAnI3mVUMR9RAJ9+UAnIoXu
MD5:	DD1DC8D04397A913CDB97D864CA1F30A
SHA1:	4F33894012069D5ADA47ACEDC90FFB3B4DB4BF7F
SHA-256:	B2341FB26B4C46A3A1847DD836D43023130AFA24ED92BED4BB19E29A84D55C2D
SHA-512:	E84A5F347361FCA609F5A2132CF2218EEAB9D36801D3C19C423D0740AD56B8923A9D0CE82B2D70F4DED1573C52FEBF348B3897E097911F3E234C653302EA089B
Malicious:	false
Reputation:	low
Preview:	{"expect_ct":[],"sts":[{"expiry":1654331995.261737,"host":"LAZkYS46RVRcFiZAzmUJrz6TJHBd4nwE6VxPWfPLYHs=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1643445595.261743},{"expiry":1674981628.244349,"host":"M4bfUnCmQAi4PNb3B8aI/2+SVJhHKsMfMMT7fzi6ij4=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1643445628.244354}],"version":2}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	11217
Entropy (8bit):	6.069602775336632
Encrypted:	false
SSDEEP:	192:GbylJnlTwGB7V9Hne4qasKxXItmLG48gcLg/PkI:Gb+nldByaFx4toj8VEPT
MD5:	90F880064A42B29CCFF51FE5425BF1A3
SHA1:	6A3CAE3996E9FFF653A1DDF731CED32B2BE2ACBF
SHA-256:	965203D541E442C107DBC6D5B395168123D0397559774BEAE4E5B9ABC44EF268
SHA-512:	D9CBFCD865356F19A57954F8FD952CAF3D31B354112766C41892D1EF40BD2533682D4EC3F4DA0E59A5397364F67A484B45091BA94E6C69ED18AB681403DFD3F3
Malicious:	false
Reputation:	low
Preview:	{"file_hashes":[{"block_hashes":["A+1PYW3V6CJbBuQ7aqrgYhyH3bT8PKyBXp3hN2slpI0=","WSOpQRkYTHjPSlG9Zif2a7TNhy43NDcG1Zg5Nv0UbH0=","jDctR8ImG5KZrQKm4kDjUB7FokSJfjo/pmvFowRVlaY=","LPxhhJiuU0lprt0T6flpS7TkaDg7MocrbmzO65xH6RI=","nZ9zLb2By96AkKXALRM+C0Eu11XUjPiMXEKjiCPdtHE=","wifibc1QfMBN2jrtUtLgsCefvuceTpAatmLvul11RJA=","dHjWlSIIdjj7MWqg3T8MG58RuuqRXk32vqi/13JqEgA=","zd3DV7dbvfNvx1hdhU01fW5ily52DLN0CFL/ADaEeTI=","DpjXcO85FFFY9KJFPkGNfFUtdQIOsGwO5jUckiUwY14=","gqid6l1+mk/6yWgUECRofI9lMipXgXh2jEN2+CxmPE0=","prDB91X2Mmfg/M/txVMITWBmEGbOGjqBTP7CMjYqdHs=","yLPAqV4gqoyS/zFkEt3Cn2j0q2v9QOSthVFfWn8EzCM=","EPQ3jzdrLkAHyvf3920B5Y3aAkO1IJdn/UtbnAmq6T0=","+oOc6ca+ChKUpTu+oa2ZRxRE+wG3QJmuYWEvYCs40NI=","3mBGNAiRlTANEQkqzU3TEi+5wJ0ubR5uwtS4/9OOM7w=","1A9NNawxuhu95H5eThvf1rewJ4QQWhhPNxJXO1C/n68=","E3vWLQxzmj+e5QxYbUscllJ5n0ITpw5JBHV1Kph3/KM=","i3I8ghdTF9c1ZXNBZmvsID+DV4gxBVN27rj9wsMtRpg=","R8B8qYabnMSlLPhrtu0hGYrHn3llsMHqBbi70gkIjEE=","rhlzuEvv2KRAFMms896xFwkNgPrw6WvmgPn6xrBSa2Y=","LAMXv6sRb0VZrY34aVXF3Fftxs

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	23474
Entropy (8bit):	6.059847580419268
Encrypted:	false
SSDEEP:	384:7dNc1NC6IcafusK4H1IIGRlhKlkIALQWdynQh2RX4K6M1tVztzr7XSNyzH:7dOscSRKc1nGRSkIhEw6M1tf7SNyb
MD5:	6AE2135EA4583C2F06CDEBEA4AE70FA4
SHA1:	DCEB26C7F02D53B5F214305F4C75B4A33A79CDC2
SHA-256:	03AA1944CB3C4F39E20B6361571BC45DFBEBD3FFDA3D8F148CC6ECB29958F903
SHA-512:	B5945E67D9F73DD1982D687E5C6D9B5D6B3886C8050363A259755C76AC0F93651F3425FA7C21AA6A13977AC1C8C9322F998F131648CB8909096058D4F0D23312
Malicious:	false
Reputation:	low
Preview:	{"file_hashes":[{"block_hashes":["DOZdV3jFvk12AM2JNDYKo3KZrIVRprmJ+sVGWkqqE4Q=","rVElW3Hu3T52SzDDUqGT5YiJTBGUv2h3pNuBKFlhZ1U=","X/3fg4KZxgQ1jBr5QGq0F5JnflgE27UErd88mrxTcxs=","VibLbpy0ig+5INMOU71fTYN76iaka2XVpmm1qAKYsX8=","EChCwCbQHbHQ7oDdGT2qNyiRJ0yck2YC2emNGq4whtE="],"block_size":4096,"path":"_locales/iw/messages.json"},{"block_hashes":["xklkoZ7iSU1+7cd6DAtEmUC5lPFd+EgcbnzxkOiFwlk=","3KbsvoxKY/3AwqgF2aAdVQRpMhsNVRkQ3rx2A6Z2Z+Y=","o9+tsohquaCMj+70zeinRG/hBhA2uLoDl/WoC1uokME=","xV/K8xucyWJELVT8Cqn+ugFjobBVmg8pnmACF+2PP4Y=","p/mvJm2wuCl32Rx3it654MljKAsMe3S9IDEabc1A8mE=","j8mPrTb5oOsBTj2Fer78JE6xG6+kR64Cvu2SW8d3j/k=","nqSRpGQ3USU2bZJsZ+AzBmFOyann8omwJrhEWFZDTXc=","eTcQyJUuNuF9yCga/fXGyFCj/pysSceanhBzksdx23s=","Wj7faqnspelXKMvnduxHn1XUBG8TEOqyns7/oUihekM=","VtBwXoadI3EP336rAiL33Gz19KGqtN+RYdKnMKAXoLw=","iDgLXQqXJp8nCZxgLuC9LXM45DGfufvGnXvmHsn18wc=","g+RfdDfrWTUK0Pkcsbot7NJ4SC9wVRV/dVVMuHAtEj8=","2oC4HcCuXu3VjFf6wnKlznt9uqQNaebcuWpm/mWj69U=","aMUIpuFqPMiieSaWhIktCK62v2P3OZQAWupWsYzCnvk=","L

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	38
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	3:FQxlXNQxlX:qTCT
MD5:	51A2CBB807F5085530DEC18E45CB8569
SHA1:	7AD88CD3DE5844C7FC269C4500228A630016AB5B
SHA-256:	1C43A1BDA1E458863C46DFAE7FB43BFB3E27802169F37320399B1DD799A819AC
SHA-512:	B643A8FA75EDA90C89AB98F79D4D022BB81F1F62F50ED4E5440F487F22D1163671EC3AE73C4742C11830214173FF2935C785018318F4A4CAD413AE4EEEF985DF
Malicious:	false
Reputation:	low
Preview:	.f.5................f.5...............

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	372
Entropy (8bit):	5.2412083626872015
Encrypted:	false
SSDEEP:	6:MNs69+q2PWXp+N23iKKdK25+Xqx8chI+IFUtqVTNBF6JZmwYVTNR1N9VkwOWXp+D:M1+va5KkTXfchI3FUtuNk/0/13V5f5KN
MD5:	A1A57836C316C2EB6294B631F95BBAA7
SHA1:	42915678A02F2D14F39CB3CDD3FF35A44D973576
SHA-256:	3D7F4F74F814F08CFDA636A41F7A9C06B11E8473BB72704537F60BCC8E9708B8
SHA-512:	088A0CF3B6213BACA82FA3E4274F1D98D13A38EDEB9EDF2BF4B14AEF153069638981DAF3313006611ACB051F0F68F3707D3E0EBD007110CAF4A088EA81EC2848
Malicious:	false
Reputation:	low
Preview:	2022/01/29-00:40:12.318 15bc Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/MANIFEST-000001.2022/01/29-00:40:12.324 15bc Recovering log #3.2022/01/29-00:40:12.325 15bc Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old.. (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	372
Entropy (8bit):	5.2412083626872015
Encrypted:	false
SSDEEP:	6:MNs69+q2PWXp+N23iKKdK25+Xqx8chI+IFUtqVTNBF6JZmwYVTNR1N9VkwOWXp+D:M1+va5KkTXfchI3FUtuNk/0/13V5f5KN
MD5:	A1A57836C316C2EB6294B631F95BBAA7
SHA1:	42915678A02F2D14F39CB3CDD3FF35A44D973576
SHA-256:	3D7F4F74F814F08CFDA636A41F7A9C06B11E8473BB72704537F60BCC8E9708B8
SHA-512:	088A0CF3B6213BACA82FA3E4274F1D98D13A38EDEB9EDF2BF4B14AEF153069638981DAF3313006611ACB051F0F68F3707D3E0EBD007110CAF4A088EA81EC2848
Malicious:	false
Reputation:	low
Preview:	2022/01/29-00:40:12.318 15bc Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/MANIFEST-000001.2022/01/29-00:40:12.324 15bc Recovering log #3.2022/01/29-00:40:12.325 15bc Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	696
Entropy (8bit):	5.523855893356435
Encrypted:	false
SSDEEP:	12:f1o4ShJP4gLIpx3t1WGNiyXnzt+eyUf+bcy+k6uu+7xgs7opW0DvUOZpVsUo3Sff:fiXUppfNB3B+eyUfrt61gs7t0ySn
MD5:	1D0DE269C49EC724961AF9BA73EDA810
SHA1:	F0AD5C9F4E5BD06493C77B901486DCC258B8E616
SHA-256:	FEC4FA25EB04608F64B13BF4FC4C5F15A348F43795403E3266145576821F2977
SHA-512:	4C931A86F4D29E351AD6FCC03FE0AB273177527BFF3263E28AD647750625D11E88A3AD8ABE229A871F75D27AE6EA09D044822C9AD3D0DF7183608AB96703635C
Malicious:	false
Reputation:	low
Preview:	..........."-....com..doubleverify..home..https..vast..wwwE......com......doubleverify......home......https......vast......www..2.........a........b........c........d........e.........f........h.........i........l........m.........o..........p........r........s.........t.........u........v.........w........y...:@................................................................B.....U...... ........https://vast.doubleverify.com/2.Home - DoubleVerify:................Y...... ........https://www.doubleverify.com/2.Home - DoubleVerify:.....................U...... ........https://doubleverify.com/2.Home - DoubleVerify:....................J+...........................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State. (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	4219
Entropy (8bit):	4.871684703914691
Encrypted:	false
SSDEEP:	48:YXsJjMH+5s7YMHBKsvxMHVzspxMHbsIHt/soBDysKqnsllzMHpDCLsWJMHLsNuMg:RG+ZGJG+GTTD7IGpD+G7Gp2GnG4GVhH
MD5:	EDC4A4E22003A711AEF67FAED28DB603
SHA1:	977E551B9ED5F60D018C030B0B4AA2E33B954556
SHA-256:	DD2C9F43F622F801FCC213CDE8E3E90EF1D0D26665AE675449A94CEC7EB1D453
SHA-512:	84D3930579FD73C7D86144D5CDC636436955BA79759273C740D2D72BC4847F2F7F165BBCA3EB2E4DFB01777D6A5F141623278C1BF74615C5A491092CE3FD1602
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[],"expiration":"13248543677350473","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543677350474","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":31344},"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248543501474403","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543501474403","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":31656},"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248543501454993","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543501454994","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":39369},"server":"https://www.googleapis.com","supports_spdy":true},

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5191
Entropy (8bit):	4.987115116361484
Encrypted:	false
SSDEEP:	96:nvVC15t9pcKI0ok0JCKL8elkCUHbOTQVuwn:nvVCB9pcV4KhkCg
MD5:	014E97E9794DA3CFAF8A1E8AA080564A
SHA1:	326C957F6F9AC2CAFBA7F3A629E407BCD147208F
SHA-256:	33F7CF83086644B355DADF3BED4273E069FA37F4F603E16A071CB2D39BD64D55
SHA-512:	E9C7B2BD81CC9F3E79B60CEF1426CACB23D31927BB213846C280D7A6CCD1955130EFA86DD1E95C7357D67EC515A2B90B54395E241CB04D6F432AEEDCD9719425
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13287919187006982","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences. (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5127
Entropy (8bit):	4.982135452455026
Encrypted:	false
SSDEEP:	96:nvVCRRX9pcKIRok0JCKL8ik71/bOTQVuwn:nvVCj9pcG4Ktk7x
MD5:	9371CA7C5533BD679EFD192F676837E8
SHA1:	733FB5CBA715455F3A653C9A0DCF2B8F5F2F0DBE
SHA-256:	945B3994A6377618EC54388BD919018E1CD609E8B657645A6FD818BF80CB18B9
SHA-512:	34C2D4435B9CA894BF0E3DF973A023E5B1E71F2060EC35D3A22E9EA51CC8D73290AAB541BEECDF41E311AC16EC43C6D9674AC3341ABF279921ADF0F4AA5B0173
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13287919187006982","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences.. (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	16745
Entropy (8bit):	5.577529033082112
Encrypted:	false
SSDEEP:	384:htM1tzLlU+Xb1kXqKf/pUZNCgVLH2HfDSrUMXjJ4PBQ:D0Llxb1kXqKf/pUZNCgVLH2HfOrUyJ5
MD5:	E9FBDFF97ED81A22C79C487096B48B5D
SHA1:	4B93539F9A7912785A1229EE35B86605832B7335
SHA-256:	187AB47A46934ED9C74CD4F382A15AA3A74BBBF7905A0AADF433D326A096D602
SHA-512:	E6286423C6416188308AAEBCA039CE0E1AC8A9AA045852F42A77313446DC7D41EF5C9811E94141777EC2DA7E5965D49DB7AE880826A1471567331CAF672F8E7B
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13287919186424227","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure PreferencesMP (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	17092
Entropy (8bit):	5.583287469778893
Encrypted:	false
SSDEEP:	384:htM1tmLlU+Xb1kXqKf/pUZNCgVLH2HfDSrUXXaJ4wS:DLLlxb1kXqKf/pUZNCgVLH2HfOrUaJHS
MD5:	C0FEF5A2A6054FFB7F78358995335166
SHA1:	5F2E8CCE2E91AFACB525CB1EC8B0D7CEA4D54ECD
SHA-256:	99256DF727AEE967C82647980E0A5037D7D9CD8D07A56E3466EF9A3977EF792D
SHA-512:	B647853456188909864D9BCB3919A5C1076740A7E38F6F6B44D187343E5DBA2D4F2048144ED7AEBDC58A8154910F971F18AFA00A2184C9FCB4B4A6D155244525
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13287919186424227","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\9bbdd6f1-c603-4ac3-acd1-38ecbaa89859.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	420
Entropy (8bit):	4.985305467053914
Encrypted:	false
SSDEEP:	6:YHpoNXR8+eq7JdV5qQlsDHF4xj70PpqQEsDHF4R8HLJ2AVQBR70S7PMVKJw1K3Ky:YHO8sdBsB6MAsBdLJlyH7E4f3K33y
MD5:	C401B619D9D8E0ADABC25A47EE49CFBA
SHA1:	C9D3B816DD3FBCD98E9C0A32CEC7B501EFC0BBDA
SHA-256:	8F5D75F5EF9876E8D30CE477509F735B50C4D87DBEDB433BE8EDBE6D4B3CB82F
SHA-512:	BC12F16CB95CB0AD708C6BBD005EF863A8552613E612F1084086E0F8262752E1B5144D044F0D141CE8462CC33343C36B517A5CC778751680485D8F88FB51B862
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[50],"expiration":"13248543490879170","port":443,"protocol_str":"quic"},{"advertised_versions":[73],"expiration":"13248543490879171","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://dns.google","supports_spdy":true}],"version":5},"network_qualities":{"CAASABiAgICA+P////8B":"4G","CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Reputation:	low
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State.. (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	420
Entropy (8bit):	4.985305467053914
Encrypted:	false
SSDEEP:	6:YHpoNXR8+eq7JdV5qQlsDHF4xj70PpqQEsDHF4R8HLJ2AVQBR70S7PMVKJw1K3Ky:YHO8sdBsB6MAsBdLJlyH7E4f3K33y
MD5:	C401B619D9D8E0ADABC25A47EE49CFBA
SHA1:	C9D3B816DD3FBCD98E9C0A32CEC7B501EFC0BBDA
SHA-256:	8F5D75F5EF9876E8D30CE477509F735B50C4D87DBEDB433BE8EDBE6D4B3CB82F
SHA-512:	BC12F16CB95CB0AD708C6BBD005EF863A8552613E612F1084086E0F8262752E1B5144D044F0D141CE8462CC33343C36B517A5CC778751680485D8F88FB51B862
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[50],"expiration":"13248543490879170","port":443,"protocol_str":"quic"},{"advertised_versions":[73],"expiration":"13248543490879171","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://dns.google","supports_spdy":true}],"version":5},"network_qualities":{"CAASABiAgICA+P////8B":"4G","CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\3bb0fb31-a8c1-480d-beec-e009f1ffc652.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	420
Entropy (8bit):	4.954960881489904
Encrypted:	false
SSDEEP:	12:YHO8sdvBVSsB6M/BVSsBdLJlyH7E4f3K33y:YXsdvjX6gjXdL3yH7n/iy
MD5:	F4FEFEEEC722772F9DC0FCE1B52D79B5
SHA1:	00EECFA3B37113D30E7D43BE4383C540F3D93D4D
SHA-256:	D33E13C12004A700F246D8C73709114A881609D658E045D54DE36874728D07F0
SHA-512:	41E61EC89366800FD5F4DD704E53B47DE29411B9088B46349A0A350758D08569C14DCC70CF8D6A6FE6D049CB6D32F2B091153E8148A1B5857BD7AF13492071BE
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[50],"expiration":"13248543498399332","port":443,"protocol_str":"quic"},{"advertised_versions":[73],"expiration":"13248543498399332","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://dns.google","supports_spdy":true}],"version":5},"network_qualities":{"CAASABiAgICA+P////8B":"4G","CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Reputation:	low
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	427
Entropy (8bit):	5.157621789079426
Encrypted:	false
SSDEEP:	12:MeM+va5KkkGHArBFUtuo/0LMMV5f5KkkGHAryJ:MQa5KkkGgPgupJf5KkkGga
MD5:	330260DA99865A5E5B2CA6F072FA5261
SHA1:	F1CD498ABF1693FE233C2D809FDE3AFFFAE380B1
SHA-256:	C462FE58D0248EF1D5807C3E8164EDFDC1C1D0D1095207887BA38FE0A27E3D63
SHA-512:	9334F396B322A37AFD8BBFC05D49B75E91DBD9A7E217C8063B7D09EBB30CF61438BE0AAA00929719C9F4492D3702FCB87FDC195CB0CB41A828E79160298142C0
Malicious:	false
Reputation:	low
Preview:	2022/01/29-00:40:53.088 afc Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb/MANIFEST-000001.2022/01/29-00:40:53.090 afc Recovering log #3.2022/01/29-00:40:53.091 afc Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	432
Entropy (8bit):	5.195863270025199
Encrypted:	false
SSDEEP:	12:Mrva5KkkGHArqiuFUtuuch/0U75f5KkkGHArq2J:Mra5KkkGgCguuBUtf5KkkGg7
MD5:	5C365B33E6636F683CD04D635F9623F2
SHA1:	511727D18CB70F4756C943541BC752B1795DC558
SHA-256:	FEE4FF16DB2F58F8A64303D85E0F4DA391AD8EFA893E4EFC9F384737B209DED9
SHA-512:	74EDAB2856F8D00BB3D86746380AC5D697FE81A33941953431BF0ECCDA783554B26437EE1A69D48D9EF5109081AFD2F1FED7D70468FF80CBB14710567EF553B3
Malicious:	false
Reputation:	low
Preview:	2022/01/29-00:40:53.147 2090 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications/MANIFEST-000001.2022/01/29-00:40:53.148 2090 Recovering log #3.2022/01/29-00:40:53.149 2090 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	3.4921535629071894
Encrypted:	false
SSDEEP:	3:S8ltHlS+QUl1ASEGhTFljl:S85aEFljl
MD5:	69449520FD9C139C534E2970342C6BD8
SHA1:	230FE369A09DEF748F8CC23AD70FD19ED8D1B885
SHA-256:	3F2E9648DFDB2DDB8E9D607E8802FEF05AFA447E17733DD3FD6D933E7CA49277
SHA-512:	EA34C39AEA13B281A6067DE20AD0CDA84135E70C97DB3CDD59E25E6536B19F7781E5FC0CA4A11C3618D43FC3BD3FBC120DD5C1C47821A248B8AD351F9F4E6367
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-..&f.................&f...............

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	415
Entropy (8bit):	5.193983685532824
Encrypted:	false
SSDEEP:	12:MGBL+va5KkkGHArAFUtuGD/0GfLV5f5KkkGHArfJ:MGBYa5KkkGgkguGIGfDf5KkkGgV
MD5:	4FE2E8501907E7FA324AA451A280520B
SHA1:	A2BBC12EE43F0483EEACE40A917A0E00AD52C6EC
SHA-256:	0C2A893228B0233001888791B2EFE41B16855884489F6C32E98A53F0E4CAF10F
SHA-512:	004B6A29C2F71D5FF6DFBFB7AA47F5B6F29660D2D52871DBEC579345D95BA2CF99E95B4A2196FE0FDD2D7CE9DF667AFA0F446BE156F875E90300B5E0A710F76D
Malicious:	false
Reputation:	low
Preview:	2022/01/29-00:41:08.976 f1c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage/MANIFEST-000001.2022/01/29-00:41:08.978 f1c Recovering log #3.2022/01/29-00:41:08.978 f1c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	399
Entropy (8bit):	5.283699282592647
Encrypted:	false
SSDEEP:	12:MPV7L+va5KkkOrsFUtuPV//0PV7LV5f5KkkOrzJ:MJYa5Kk+gu2JDf5Kkn
MD5:	7A2D938EBC6842922DD92C95273CB8E2
SHA1:	F8D1A1BF7E99CA4BACEED43A20456BB0F1924DC6
SHA-256:	E5338D1D7A0762322DA876040C7CD0062ACC39B944971417F980CE43DB3CF1A1
SHA-512:	85DC772D122BB2DCEDB6C9486D2C192049374BA452D382E5601D82EA745524BA3D5F6E41B4FAD2B788366D0563E1B3DBA75387D2354CE84A0B488D71A46B1EAD
Malicious:	false
Reputation:	low
Preview:	2022/01/29-00:42:03.452 f1c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm/MANIFEST-000001.2022/01/29-00:42:03.452 f1c Recovering log #3.2022/01/29-00:42:03.452 f1c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	370
Entropy (8bit):	5.478026416695745
Encrypted:	false
SSDEEP:	6:YAQNnvuO80QprncjHYHD8wXwlmUUAnIMp50TrmVdKMR9RfSHJR8wXwlmUUAnIMpy:YBQ+j4HH+UAnI3mVUMR9RAJ9+UAnIoXu
MD5:	DD1DC8D04397A913CDB97D864CA1F30A
SHA1:	4F33894012069D5ADA47ACEDC90FFB3B4DB4BF7F
SHA-256:	B2341FB26B4C46A3A1847DD836D43023130AFA24ED92BED4BB19E29A84D55C2D
SHA-512:	E84A5F347361FCA609F5A2132CF2218EEAB9D36801D3C19C423D0740AD56B8923A9D0CE82B2D70F4DED1573C52FEBF348B3897E097911F3E234C653302EA089B
Malicious:	false
Reputation:	low
Preview:	{"expect_ct":[],"sts":[{"expiry":1654331995.261737,"host":"LAZkYS46RVRcFiZAzmUJrz6TJHBd4nwE6VxPWfPLYHs=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1643445595.261743},{"expiry":1674981628.244349,"host":"M4bfUnCmQAi4PNb3B8aI/2+SVJhHKsMfMMT7fzi6ij4=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1643445628.244354}],"version":2}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\af91a648-1683-4f17-9214-0366cda69eff.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	19181
Entropy (8bit):	5.570203129120271
Encrypted:	false
SSDEEP:	384:htM1tmLlU+Xb1kXqKf/pUZNCgVLH2HfDSrU1HGmXQJ4X:DLLlxb1kXqKf/pUZNCgVLH2HfOrUJGfa
MD5:	27304D31E12E35D82AF59EB1FBC5CD8F
SHA1:	7106293DC56B3EDA50FE8A0E7C79EF7A082FDD35
SHA-256:	2F197F473942AB464BAC76210567CB9869BD0926A2A328F394825C22EEBA6825
SHA-512:	9B0020974975D366E0C371BDE02E332727BD808AB8CA58E5EE65A3A65ED93463B5450BA0D76BE6760D87F1AD5158F6FC6C876AEE6AD43F783FF269C592835C67
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13287919186424227","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c863f49b-64a8-4f29-aa73-c3d2e7abf0ee.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	16745
Entropy (8bit):	5.577529033082112
Encrypted:	false
SSDEEP:	384:htM1tzLlU+Xb1kXqKf/pUZNCgVLH2HfDSrUMXjJ4PBQ:D0Llxb1kXqKf/pUZNCgVLH2HfOrUyJ5
MD5:	E9FBDFF97ED81A22C79C487096B48B5D
SHA1:	4B93539F9A7912785A1229EE35B86605832B7335
SHA-256:	187AB47A46934ED9C74CD4F382A15AA3A74BBBF7905A0AADF433D326A096D602
SHA-512:	E6286423C6416188308AAEBCA039CE0E1AC8A9AA045852F42A77313446DC7D41EF5C9811E94141777EC2DA7E5965D49DB7AE880826A1471567331CAF672F8E7B
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13287919186424227","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\cd52a327-4be6-41cb-be19-e85c3355cf4b.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5127
Entropy (8bit):	4.982135452455026
Encrypted:	false
SSDEEP:	96:nvVCRRX9pcKIRok0JCKL8ik71/bOTQVuwn:nvVCj9pcG4Ktk7x
MD5:	9371CA7C5533BD679EFD192F676837E8
SHA1:	733FB5CBA715455F3A653C9A0DCF2B8F5F2F0DBE
SHA-256:	945B3994A6377618EC54388BD919018E1CD609E8B657645A6FD818BF80CB18B9
SHA-512:	34C2D4435B9CA894BF0E3DF973A023E5B1E71F2060EC35D3A22E9EA51CC8D73290AAB541BEECDF41E311AC16EC43C6D9674AC3341ABF279921ADF0F4AA5B0173
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13287919187006982","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ce8b38c5-bfd3-4bfc-b345-b077ebee4c3d.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5191
Entropy (8bit):	4.987115116361484
Encrypted:	false
SSDEEP:	96:nvVC15t9pcKI0ok0JCKL8elkCUHbOTQVuwn:nvVCB9pcV4KhkCg
MD5:	014E97E9794DA3CFAF8A1E8AA080564A
SHA1:	326C957F6F9AC2CAFBA7F3A629E407BCD147208F
SHA-256:	33F7CF83086644B355DADF3BED4273E069FA37F4F603E16A071CB2D39BD64D55
SHA-512:	E9C7B2BD81CC9F3E79B60CEF1426CACB23D31927BB213846C280D7A6CCD1955130EFA86DD1E95C7357D67EC515A2B90B54395E241CB04D6F432AEEDCD9719425
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13287919187006982","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Rv:1qIFJ
MD5:	6752A1D65B201C13B62EA44016EB221F
SHA1:	58ECF154D01A62233ED7FB494ACE3C3D4FFCE08B
SHA-256:	0861415CADA612EA5834D56E2CF1055D3E63979B69EB71D32AE9AE394D8306CD
SHA-512:	9CFD838D3FB570B44FC3461623AB2296123404C6C8F576B0DE0AABD9A6020840D4C9125EB679ED384170DBCAAC2FA30DC7FA9EE5B77D6DF7C344A0AA030E0389
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000004.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENTe (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Rv:1qIFJ
MD5:	6752A1D65B201C13B62EA44016EB221F
SHA1:	58ECF154D01A62233ED7FB494ACE3C3D4FFCE08B
SHA-256:	0861415CADA612EA5834D56E2CF1055D3E63979B69EB71D32AE9AE394D8306CD
SHA-512:	9CFD838D3FB570B44FC3461623AB2296123404C6C8F576B0DE0AABD9A6020840D4C9125EB679ED384170DBCAAC2FA30DC7FA9EE5B77D6DF7C344A0AA030E0389
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000004.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\f2c409a4-1af6-439b-883b-7de674b022bd.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	19182
Entropy (8bit):	5.57035283217216
Encrypted:	false
SSDEEP:	384:htM1tmLlU+Xb1kXqKf/pUZNCgVLH2HfDSrU1HGbXtqJ4Z:DLLlxb1kXqKf/pUZNCgVLH2HfOrUJGEQ
MD5:	887F85365249BDD8ABD0EB9CF398A055
SHA1:	9CC2014FD7C8D04F9C7D393EBAE11DAB11BE24FB
SHA-256:	E2BB00136CFED2E9C2DB814548A0E90B42A643D4A5DC3867F97A83428A7751B3
SHA-512:	9E96D8F09B4A59FB3362CA4A2435A2A925EEE5281528EB96EE2957E181D01ADB9F5ACC64C94360CAAD0D6A9E27F1AE69EBDCF7C4612231A4DCED51CE22083E24
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13287919186424227","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ff27ef9d-0d59-4372-b254-f1185ac50498.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5218
Entropy (8bit):	4.991869948274369
Encrypted:	false
SSDEEP:	96:nvVC1ut9pcKIaok0JCKL8elkCUtbOTQVuwn:nvVCY9pcD4KhkCW
MD5:	9615BB08C61A6EA44DED15C9635827F2
SHA1:	D9DE4775DEF53517B21E976732F6025C379A54E4
SHA-256:	286073C620BFBC0E621D31A704C3A6EC94444E753CDE91992CE1D2E5199845B4
SHA-512:	1C93A247666C37EF8B3964110A2E53CD564B17CB44C0660ECC680D7B6147B5AF6B8586591EDC4F4976B4EEAE565BC90D2880AC1342719CA417724888B4F5B772
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13287919187006982","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	106
Entropy (8bit):	3.138546519832722
Encrypted:	false
SSDEEP:	3:tbloIlrJ5ldQxl7aXVdJiG6R0RlAl:tbdlrnQxZaHIGi0R6l
MD5:	DE9EF0C5BCC012A3A1131988DEE272D8
SHA1:	FA9CCBDC969AC9E1474FCE773234B28D50951CD8
SHA-256:	3615498FBEF408A96BF30E01C318DAC2D5451B054998119080E7FAAC5995F590
SHA-512:	CEA946EBEADFE6BE65E33EDFF6C68953A84EC2E2410884E12F406CAC1E6C8A0793180433A7EF7CE097B24EA78A1FDBB4E3B3D9CDF1A827AB6FF5605DA3691724
Malicious:	false
Reputation:	low
Preview:	C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e...e.x.e.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.8150724101159437
Encrypted:	false
SSDEEP:	3:Yx7:4
MD5:	C422F72BA41F662A919ED0B70E5C3289
SHA1:	AAD27C14B27F56B6E7C744A8EC5B1A7D767D7632
SHA-256:	02E71EB4C587FEB7EE00CE8600F97411C2774C2FC34CB95B92D5538E7F30DA59
SHA-512:	86010ED2B2EEBDCC5A8A076B37703669C294C6D1BFAAEA963E26A9C94B81B4C53EC765D9425E5B616159C43923F800A891F9B903659575DF02F8845521F8DC46
Malicious:	false
Reputation:	low
Preview:	85.0.4183.121

C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	198892
Entropy (8bit):	6.074056654936518
Encrypted:	false
SSDEEP:	6144:3UHm78s6OtziYLpDjqd0aqfIlUOoSiuRS:3UHFz4hLZSTol
MD5:	9CD5220B05F96CDF6662E197FE402CCC
SHA1:	BF4C5E5936FFF590DA45C24977B35B811973998A
SHA-256:	C486A5C1D765F38F37628C7F2795400035980C1FA4A14DBA10A651C3A0B5889A
SHA-512:	520AE66CEF1759D975C063E800C549495DD337375EFD4684E31689A1825A30B6291D4E12F11B6DA3EE1D7B04457931B1011E094322320EC37CD35252CBF33B6F
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643445588665187e+12,"network":1.643413191e+12,"ticks":131643979.0,"uncertainty":4335801.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13276832799521500"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache\ (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SysEx File -
Category:	dropped
Size (bytes):	94708
Entropy (8bit):	3.7453758716145127
Encrypted:	false
SSDEEP:	384:pjO5lbcuXEbjVYeFgNNr+vRb36dbKHLGGuRr8/p1xivnfWrEJmUX87VxFOO7LxN1:x6K1NqfqWEev9DLs/r+DKBfVR5
MD5:	ED67A6F7695CA706CEAB7B5A7384AA80
SHA1:	7771577F49B618E87F12901C37FEA96478D38617
SHA-256:	F4056F3E6C25294801278FA8914D40F24AEDA54912AECA2E1136CCF83D0737EE
SHA-512:	17918C0325F2C7067B041E10620F44345893A1861AC717F78A3F501AD50A0868787735B7E57F84805A3BD1CAEA6D32D36041ADE9675C5F8E653A4BDD8F3178CD
Malicious:	false
Reputation:	low
Preview:	.q.................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n...PR8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Subresource Filter\Indexed Rules\27\scoped_dir4504_322680986\Ruleset Data

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	142128
Entropy (8bit):	4.846664953094921
Encrypted:	false
SSDEEP:	3072:kYotddpTo2daWZy+CSzpjNTSha0NyruDcG4JCNDKR:kYoR+QNyYuDIL
MD5:	580DB025FA9444FBD3D00A0B7F4AEEE6
SHA1:	26BA225F9E58BA440E455B151AFA62E6DA71D052
SHA-256:	4DF7686CE689C87AE5AC45DE42E602ADB0AC316EE7C9F55717DEAD2509058ECC
SHA-512:	5940A7BA74606EC99BC366B42C47F32A89B11A6D1DF164C34BDE87241BE971BE81BC2762A6EACB5F58264573D1EDE7D233097D4A4CE6CBC033FA8B6507BE9D9E
Malicious:	false
Reputation:	low
Preview:	........................$T.................................. ...X...l...h...d...0.......X...T...P...L...H.......@...<.......4...0...,.......\|...`...D........... ............................... /......ozama...........8/......g.bat...........P/......onwod.......h...h/......ennab.......P..../......nozam.......d..../......geips.........../......rekoj............/......lgoog.......@..../......uotpo............/......lreko.......H..../..............lR..............@R..$R...R...Q...Q..HR...Q..@R..<R..8R..4R...Q..,R..(R..$R.. R...R..TQ...R...R..0Q...R...Q...R...P...Q...Q...P...Q...Q...Q...Q...Q...Q...P...Q..xP...Q...Q...Q..PP...Q...Q...Q...Q...Q...Q...Q...Q...Q...Q...Q...Q...Q...P...O..\|Q..xQ..tQ..pQ..lQ..hQ..dQ..`Q..\Q...O..TQ...O..hO..HQ..DQ..@Q..@O..8Q..4Q..0Q..,Q..(Q..$Q.. Q...Q...Q...Q...Q...Q...Q...Q...Q...P...P...N...P...N...P...P...P...P...P...P...P...N..lN..PN...P...P...P...P...P...P...N...P...P...P...P...M...P...M...P...P...P..\|P..xP..tP..pP..lP..hP..dP..`P..\P..XP..TP..PP..xM..HP..

C:\Users\user\AppData\Local\Google\Chrome\User Data\c66f8ffd-6e9d-4e12-8cc9-d8812d30f05a.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	198892
Entropy (8bit):	6.074057670564319
Encrypted:	false
SSDEEP:	6144:cRHm78s6OtziYLpDjqd0aqfIlUOoSiuRS:cRHFz4hLZSTol
MD5:	3CEFABC842AC9DE9FB129929D1ADDEFF
SHA1:	B1E8ED1DE84EC22E1EEF497999FA9D0852B8CC36
SHA-256:	C80A22734EBC64820B54B6551C331338C906AE6EC7D3D99C4239CA3DBBE75979
SHA-512:	01D465B88FA412254C33DFBB1560F79D7545A16F45092D511A7719D6051168B53381F4B64814C24187B4427924CCE8808EFF6D4649F4802564D55590B533575A
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643445588665187e+12,"network":1.643413191e+12,"ticks":131643979.0,"uncertainty":4335801.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245951016607996"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\ccd5ce24-768e-475c-818d-f4d42ae4e289.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	95428
Entropy (8bit):	3.7454234657488144
Encrypted:	false
SSDEEP:	384:ZjO5lbcuXEbjVYeFgNNr+vRb36dbKHLGGuRr8/p1xivnfWrEJmUAi87VxFOO7Lx3:B6K1NqfkWEev9DLs/r+DKBfVRh
MD5:	3D70D0D13B5B1628A34647335335D53E
SHA1:	EF241E2B0BEA1BB4EFC18959438A685924508DE5
SHA-256:	489A45F65B1C97242473B00E19BF66145D7D9890AB971A6C8B48565A18DE3477
SHA-512:	DF04177ED166B0C4E9D1A5999547D1A117C508293E39596B60EB7240A543A9A0CF1C40EA2D6995A83CBC1A1E408B0C9D615B39872CB5988587656ED199514B69
Malicious:	false
Reputation:	low
Preview:	.t.................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n...PR8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

C:\Users\user\AppData\Local\Google\Chrome\User Data\ce850ade-6cba-46ab-aafe-e724510b9f57.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	190416
Entropy (8bit):	6.045055506734713
Encrypted:	false
SSDEEP:	3072:V/S1Cm78VKMvHOz5zXnZIFYLp964jYLftLt8aZpNkFcbXafIB0u1GOJmA3iuRS:VHm78s6OtziYLpDjqd0aqfIlUOoSiuRS
MD5:	CD15008504D2F1F154F2FBB4D02F6FBE
SHA1:	38092E4CC84D8C4E60226D86E0AF8FF03C1C04EA
SHA-256:	97C01746F352209B1D033F508CBEFCB335818D321F2F0D2F26A1005D0997380C
SHA-512:	D9D14984ADEB51931F277CC0A56A8DDE51A32DED0D4C5718FD161BDB85EF28F7CB35CDC51D47F20F6505A6A11B63BB71BB9F542DAD87E91F83C752319C4CB77E
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643445588665187e+12,"network":1.643413191e+12,"ticks":131643979.0,"uncertainty":4335801.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13276832799521500"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\d4f5c596-2e83-42c6-985b-2b5e76d4f162.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	190614
Entropy (8bit):	6.045613052021248
Encrypted:	false
SSDEEP:	3072:Q/S1Cm78VKMvHOz5zXnZIFYLp964jYLftLt8aZpNkFcbXafIB0u1GOJmA3iuRS:yHm78s6OtziYLpDjqd0aqfIlUOoSiuRS
MD5:	2C107F36FD6B99276F4E7820F1684F06
SHA1:	5A975A5AAF1283A8533ED8B72D1CBDF840326256
SHA-256:	663B0DE565BC8823A54C0A2F22B655BED12AF1AE9ADC5397DD4288F3DDF05F65
SHA-512:	3E76975AC6C736D0E3A3041FABC340ED06C800F75CDE7B9D7647071BA3D376D506F3BE51D4E62C3B7EB3DE3FB0936A1CF4B608D8E321C27FE734014476332455
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643445588665187e+12,"network":1.643413191e+12,"ticks":131643979.0,"uncertainty":4335801.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13276832799521500"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\dc3d9e97-667d-4260-84f3-da79fc1bb35e.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	190867
Entropy (8bit):	6.046085124798977
Encrypted:	false
SSDEEP:	3072:0/S1Cm78VKMvHOz5zXnZIFYLp964jYLftLt8aZpNkFcbXafIB0u1GOJmA3iuRS:eHm78s6OtziYLpDjqd0aqfIlUOoSiuRS
MD5:	A94EB78A910DF2A08167BE1E439B8F6E
SHA1:	6DB52F68764C8DAC7B2CB52E3FDBA6E40E7D35D3
SHA-256:	B1AB772573651174454CC4FCB7BA01DD0FD07F22148CA79732E8C41D53D1A428
SHA-512:	3FE98D99BF4B8B26C0F8208E43A6653E8DCF28C8BDA40BF8F0C747EE9595EE3679EC88B6867DBA5279701932829FC9575CC8312E738AA40D20F62B353FD50596
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643445588665187e+12,"network":1.643413191e+12,"ticks":131643979.0,"uncertainty":4335801.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13276832799521500"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\e191aaf5-0bfa-4e4e-8fdd-06f6cfa372d6.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	190784
Entropy (8bit):	6.045929623880286
Encrypted:	false
SSDEEP:	3072:j/S1Cm78VKMvHOz5zXnZIFYLp964jYLftLt8aZpNkFcbXafIB0u1GOJmA3iuRS:jHm78s6OtziYLpDjqd0aqfIlUOoSiuRS
MD5:	AEB4E006E2A993BF10BC92C33973BB37
SHA1:	7DE9462C4948AB9A5D79405B15BCD13449BDE722
SHA-256:	8174D5F88C684553699505D2EC6E81E0E184807427EE3FEEFF9E3221727D966E
SHA-512:	4874B3B551D65B7E0169424730742471D89BAFEE3A74CA6FBBA6B4050171A493906024805C8616DD391340C0373D50E34FBE1C4032532A6B9B1026598E64FD44
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.643445588665187e+12,"network":1.643413191e+12,"ticks":131643979.0,"uncertainty":4335801.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13276832799521500"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Temp\00cb8abb-814b-4bb8-a310-6c1da2bfcbbf.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	768843
Entropy (8bit):	7.992932603402907
Encrypted:	true
SSDEEP:	12288:cK2ED9wjXNC1Gse83ru82/u0eKhgxuPFrDXgtbPz54Pm1D0fBmfH1sBrJ9mTiDga:cK2ED9I48seur0/uZKCuPNbgtbz6m1ob
MD5:	A11D5CAF6BF849AEB84B0C95B1C3B7CF
SHA1:	27F410CCBD75852C01C7464A1FD7EF8C29BE3916
SHA-256:	D0E62ACE64AFC334330A7AC3A2CC657914FEB321F1F89AEE11D2A6D0E7D81C31
SHA-512:	086C124DE3A01BE467647F3BCB4EA05105F690AB45417A0E3D38935ABA9E2381DF59AF98D0FFF7823CEFD5390B48807352E135AC70977AED7B413A8CC48FB590
Malicious:	false
Reputation:	low
Preview:	Cr24..............0.."0....H.............0...........\7c.<........Fto.8.2'5..qk...%....2...C.F.9.#..e.xQ.......[...L\|....3>/....u.:T.7...(.yM...?V.<?........1.a...O?d.....A.H..'.MpB..T.m..Vn Ip..>k.\|1..n.<Fb..f..Q1.....s..2..{.6....Pp....obM..1.......b1.......(.u^.'z......v.F.W.X4."-eu...b.........6W..>Nuw9..R{c...Nq.H.K..A!....`v.k+..?.5.>v.....;.._~....tp....x.q.V...7.m.O.~.{!.o/q.'..BK..4./?'.....L..fH&.._<..&.p.k^..\s...:1y..F.N.+...X.PO@Mo....X.G1:..Y.@;..j..........=ae...0.......DU....n...n.;.Ipr..Q....:... <.....a.Y....{ei........0..0....H............0.......Mbh=.[O}.+..U.KHF(n3.\"...,g.c...6)..(.E...U...#.i.a..:...N.....P...x.O...(mC;\|.5.S.{m.aEx...[..fP.i`.y..5..R....v.$......l-m.............m....ni...`..W.....R.p.b.+...+.\k.R$e~.J\.&c%.d...M..j..V.%...+1F....D....X\.1ct.<........E.B.+.i@...8..^...&YR...I.o...,.....[0Y0....H.=....*.H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. D.'.N@.(..GK....m...A.0.."

C:\Users\user\AppData\Local\Temp\04937240-bdc2-4e3a-ad8e-abe592b07820.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Reputation:	low
Preview:	.

C:\Users\user\AppData\Local\Temp\3709ef61-1cdf-489f-9500-c17bf93d7539.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	248531
Entropy (8bit):	7.963657412635355
Encrypted:	false
SSDEEP:	3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
MD5:	541F52E24FE1EF9F8E12377A6CCAE0C0
SHA1:	189898BB2DCAE7D5A6057BC2D98B8B450AFAEBB6
SHA-256:	81E3A4D43A73699E1B7781723F56B8717175C536685C5450122B30789464AD82
SHA-512:	D779D78A15C5EFCA51EBD6B96A7CCB6D718741BDF7D9A37F53B2EB4B98AA1A78BC4CFA57D6E763AAB97276C8F9088940AC0476690D4D46023FF4BF52F3326C88
Malicious:	false
Reputation:	low
Preview:	Cr24..............0.."0....H.............0...........\7c.<........Fto.8.2'5..qk...%....2...C.F.9.#..e.xQ.......[...L\|....3>/....u.:T.7...(.yM...?V.<?........1.a...O?d.....A.H..'.MpB..T.m..Vn Ip..>k.\|1..n.<Fb..f..Q1.....s..2..{.6....Pp....obM..1.......b1.......(.u^.'z......v.F.W.X4."-eu...b.........\..F!...b...l5....zJ.q.......L].....w[T0.6....E.....r..%Z.vFm.9..5!,.~g5...;.t...']....+A.....u....k...e..&..l.6r[yU...%..f.......N..V.....<+.....l..}.{...z...)y.n..'..).....,.b....5.08K%..O.g..D.S.F5o..<(....>....\f..X..I..2."l...w....7f\|.~.c.4.E.......0..0....H............0.......).'..b.$w\$.q&.]zF_2..;...?.U,...W..L1.2...R..#....W.....c1k.$W..$.J....+M!.Hz.n`U.I)N.\|b.l....{.K@]6.LlP/....](.A..................I...).H....IQ.y.;MG.d..ix..#f.Z$\|..\|.?...0K...t"i..s...Y..%.Ky....0...{.!+.~v.;....J.....Z....).(6..@?v.;~..2..c....[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. .0...\|!..A..L.+.=...kP.!.1..

C:\Users\user\AppData\Local\Temp\4504_1158864734\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Users\user\AppData\Local\Temp\4504_1158864734\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	1511
Entropy (8bit):	5.989302167311014
Encrypted:	false
SSDEEP:	24:pZRj/flTU3YfKFjoYs7aoXET3J74L/V9OVadG6oX+1SEt5zWNJX5n:p/hUIfKE7akEzF4mIpkYINN5
MD5:	1B1A744394D197EC915E379FB7942527
SHA1:	1C4E23D596EF6B76FEB464AC4C287B363BCA2C8E
SHA-256:	0C3F6C4D72C3E22ABC1FB56F4CD99F1F269EB05885882172980864A85EC91BD4
SHA-512:	8E09F4370535C77AA113A221E65765AF6E75F353FC329CF2059232B5A657A12357B99A539306185A0F13B1AD606491509C82840D2DAEFB489C8AA506D9ABFE6E
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"jbiQ1HY71EZgvAGkp-cFOU4Gs2Qh66A6EIBI5mOJA8PvoE5XO_GO0RMM6We3kRsIXKNog3NUzR1a-sAuiCiNP7iU13Kz1KHRCKLBvzKYcqx0HEaRc3HsQh4XkOzN03QGeKaSWZG8ymd3hLWfYg_sn-gnJ4QVlmFKJX1SLNe-Wc5aebsrB9QO0cwZ_Uth3qOyEDBxK5-7nS0wYl3gmtRIORBrN_8OaysdZT9z2jci_oNVQV4Rsv9EIcClCMw3KNhC7Q5

C:\Users\user\AppData\Local\Temp\4504_1158864734\crl-set

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	22671
Entropy (8bit):	7.824553974830855
Encrypted:	false
SSDEEP:	384:j26XPKhMeWUUkWVPpDddm84WDzyloBLY0Lq5LV8QzIF0trtaYG9V3t/8tPJBr:jf10CVBDXOWnyloW0L8V8S80rsYGROP
MD5:	2FCF403D5E5F7A47D30A174BA03972D6
SHA1:	B39B31422107AF9C5FE97085831E9BBC9E7E1B76
SHA-256:	DECDCEAD357DAB40EB5CBBA8BDFD46FDD4B217E790EF00950C8ABE7D5DB2478B
SHA-512:	EF70B94FDAFF1372B30290AE2ACBB80CEE6BD10C0CDADBD7FCED1E4ACB644AD3BBC8D9054E5103FB90527B843038079ABB565AF00DEE716CB3E6FF75EA1606ED
Malicious:	false
Reputation:	low
Preview:	".{"Version":0,"ContentType":"CRLSet","Sequence":7126,"DeltaFrom":0,"NumParents":194,"BlockedSPKIs":["Jdoa1Yu/z7In2HI7GFfUwY57qnQXtPnv+TZrXoafizk=","li5LVLuYp+5dX+uWM/mR08MwDpUU2t57DU+CjHlPjoc=","yP3cdcsb27WMB7TqhHKH9iZlndZrwQomrdm1dbOgo40=","BN3pqpp59hSYaCMl+ghwJ2cH+5ypU4QSC0aJMmhJT8k=","tbqN1/iVZMKInT1kU8hJmMd4JJGbZOoINapimGWRvlA=","wO0gU0a7veButWD1zuAqNjTiR0p+ds+PvvVjuxF90OM=","eBpM8ukkUvPuAdDDgaQhTzkEFlw5CtvWH80RJE4Jstw=","/NdsyiNH5c1bOTR/Uc9DZUtpor/JBzZwpr5H2HAebg4=","lo26afv/Fb83YgiUMa3lp+rUt+rxvnACaBC8V9HGT24=","fNKVt1VEgIq9lAlGbwg3xarcAuM7YVDGZE3goJZZ8jw=","9Sk9R+041MMbLULe47WzrOl8omyirANl42Iu6AITH7s=","nFmjzK6kaZhCsGjPxSz5RdtRmGlXyDLNsYynOEn7ue4=","OUz/WJ5okxLPwHHuC8Gf5MYGIWzlQ0Kd5tti5C27O8E=","NuqWEoyJg5+2IfitDh7gucIgb2Kre02ixnZYk8m3ztI=","pqyh7JgJzFtIIf+dKcXr5lGWC5Gx8ZzIm1Xvh4GKlQk=","MO/kE4JHbDOA8C9+I+ZrovhnsFnuHqaHlrRBuFtdElY=","r1kVGOLmxg67/AkHr6pJvEBR1F5/IUq/7nUS7gD2Ye0=","6EnHF2yT32X2S2FpgjZuVmMReBK2+ivAyPqK6u5Bgcw=","0x7DkoW3pTGdAVfbQg7YfHQ+Mzu8d/h3H3BGT0NqYEk=","h7/Yr

C:\Users\user\AppData\Local\Temp\4504_1158864734\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9441006138261616
Encrypted:	false
SSDEEP:	3:SUbGObDlXxEOg9iURVgGWlEB:SUSOlhq9iLGkm
MD5:	DD945DFA99472C4805B5CE9A20028B60
SHA1:	AC56F4EEB8D671E07826179D5027880712CC21C9
SHA-256:	05D453FA569F4E87EC8AAECF5E561B62B60F66FBB7430AFB1C20F76132AF619D
SHA-512:	6E06EA4CEA06614352D51AEFD6D0CB765AD4741C6C9E05F771C90618CDC53AE0A3D0E99AD5208A09A68EEE298F8A849D86AB57B93641739E9285460D4176E4D0
Malicious:	false
Reputation:	low
Preview:	1.18db281f705eaafdf4f24ce2c5e956718346234ee5d9b4ad140bec3f3a8d4af8

C:\Users\user\AppData\Local\Temp\4504_1158864734\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	191
Entropy (8bit):	4.784974198700875
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFJNchRmwnhFgS1bTFHJEeSWU4pv/8F/FxLj2RF2fcTZTotL:F6VlM8mxS1bQWfB0NpK4aotL
MD5:	D7EBEEA548C1B7C2326EE6F382179377
SHA1:	EF43ABAF9FBAF2E6B2EBF42DB86FD323AE89F78F
SHA-256:	2FE25241F639B28276510B04E230EB833B2CA8CFEDB7ABA89F300AF372F33BB8
SHA-512:	985BE0492627F5BD237252FC962B7E7CDD19C0FC32BF4910624B5BD63857330DBC7F7E32644AB078C143835E11E7F2C95A5C7385A0836D01169381E7B2499D76
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "crl-set-8330309774708728989.data",. "version": "7126",. "imageName": "image.squash",. "squash": true,. "fsType": "squashfs",. "isRemovable": false.}

C:\Users\user\AppData\Local\Temp\4504_1194576342\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	1425
Entropy (8bit):	6.0041706562881
Encrypted:	false
SSDEEP:	24:pZRj/flTm6MqTKGpqYMTpFpNgzkaoXws5dqiasABN1pPrVy8gqmlnoXvsvq6+5wC:p/hWI1qp/Nskakwy8iPm3DV6nk+ql5BX
MD5:	7CA907E59E6E623E4B85ED86A23E62D7
SHA1:	10C19F1E99C24DF5E604FDB72417D8980CB40AF1
SHA-256:	EA75301687D1B18893F95D8EE4481CB61A291241B2D0D27AD4EE08C25520687E
SHA-512:	8AC955A96B761EE4CFE2C3A0096A6AF3D16A825A5EF210957B28CFCBC38B32B3FE2E52047C1D164416E1954CB2B11EE90731E51996FEE8CCF429066BC71D6767
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJkb3dubG9hZF9maWxlX3R5cGVzLnBiIiwicm9vdF9oYXNoIjoieHY1NFR2REsyQktXUzhsUEMwVTFXVW9PcVEwQUF5S0pRMXdicHV4em5EQSJ9LHsicGF0aCI6Im1hbmlmZXN0Lmpzb24iLCJyb290X2hhc2giOiJMZWZNUnc3QXo1M0ZENXhtMUJmUEdoOERPOG1RZjZBY0t3RUwtVWR1M1JzIn1dLCJmb3JtYXQiOiJ0cmVlaGFzaCIsImhhc2hfYmxvY2tfc2l6ZSI6NDA5Nn1dLCJpdGVtX2lkIjoia2hhb2llYm5ka29qbG1wcGVlbWpoYnBiYW5kaWxqcGUiLCJpdGVtX3ZlcnNpb24iOiI0NyIsInByb3RvY29sX3ZlcnNpb24iOjF9","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"1JX7TNm6jmK-HTB9IEkt5GswXRhXDJ7ERW9AfKzE1ci3nETW8xsBh8IcbnBRFKqJEYI39wqjm_KUzkLEVYy-BBxfUQ3SUzEU49gS_C0dxpQKMa9SatYvKtm34cSm-3j6aZNqE9XCNvEkimnhCGpApJgDoTf02He_KiEIIrUyrWRnKYDZfm8NFC522AAf5qa34piuKvtA6DErLeGXtAP3rapXOi7lJbyNqkOs8g04WNuS4KB4sgy-sELD-Y5gp6l9tTOdDo2l3xt1hH_myAxQNsW-hlfue5GrofYYmxVgSpqg8FkBAdJTCKFRM_V5vwVD5rqQEDt3IQECLzi66GlAvw"},

C:\Users\user\AppData\Local\Temp\4504_1194576342\download_file_types.pb

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	7609
Entropy (8bit):	5.123608326751086
Encrypted:	false
SSDEEP:	192:F0aEW8SsWk/pvtHB3Nf5Y10k6QKEa4pmigb15PGzO6RsO6v:F0aEW8SsWk/pvtHB3Nf5YKk6QKEa4pmT
MD5:	D374E68291EC84F056C490A20EE7D2DF
SHA1:	41DC8FC942388DAE331840A22B211A3A9C864C17
SHA-256:	E061783508D730C3D2A1760E4C7043A92588A47E998C844B1F57DE65E2A5CD42
SHA-512:	C29D1769137C0118072BFA28824AAFE8F7C6E32578FEF60DE3D3239F77AB0D29D5B0656AE813B3F2C7744DC886B1928DA51B8488EF50467549483C825601D3D8
Malicious:	false
Reputation:	low
Preview:	./...#<....jpg... ..........jpeg... ..........mp3... ..........mp4... ..........png... ..........csv... ..........ica... ..........gif... ..........txt... ..........package... ..........tif... ..........webp... ..........mkv... ..........wav... ..........mov... ..........swf.D ..........spl.E ..........crx.. ..........001..... ..........7z.4.. ..........ace..... ..........arc..... ..........arj.:.. ..........b64..... ..........balz..... ..........bhx..... ..........bin..... ......0.....bz..... ..........bz2.8.. ..........bzip2..... ..........cab.... ..........cpio.@.. ..........fat..... ..........gz.6.. ..........gzip..... ..........hfs..... ..........hqx..... ..........iso..... ......0.....lha.<.. ..........lpaq1..... ..........lpaq5..... ..........lpaq8..... ..........lzh.;.. ..........lzma.?.. ..........mim..... ..........ntfs..... ..........paq8f..... ..........paq8jd..... ..........paq8l..... ..........paq8o..... ..........pea.....

C:\Users\user\AppData\Local\Temp\4504_1194576342\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.8846578544898827
Encrypted:	false
SSDEEP:	3:ShSa94S86tUyhiSZ3R4WfBg:Shr4aUZs3R4F
MD5:	F9FE68E8D39CAB0E631640A5D5131252
SHA1:	D7F0B4B199BBD20DACE04020BA0AAFA4FDAEFF93
SHA-256:	FA3F1671316D008759E4299D7BBAB8294EF23A1680317B2F731884FA8603E58B
SHA-512:	A94096C5E3086407B615566D1F35A2C7ABE7FC8ECE7B6E4A1E8DF2126F06AC04459497EB086B0C5ABB9A70772094D611CC1E87801C5894E1C86924F26A80069D
Malicious:	false
Reputation:	low
Preview:	1.d237485db9493e87035e3295dbaa1e24b727c7fb91b24401814fd88f2ab81c3c

C:\Users\user\AppData\Local\Temp\4504_1194576342\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	173
Entropy (8bit):	4.479129266715852
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFRxJ1KnOFgS1+JpEeSWU4pv/8F/FxLj2RF2fcTZTotL:F6VlMDf1KqgS1+JuWfB0NpK4aotL
MD5:	9D0A411FFBA90AB549575AA17EDEDEC4
SHA1:	252D2AF3537C19401D20BA5C7F920E2B0050A1F1
SHA-256:	2DE7CC470EC0CF9DC50F9C66D417CF1A1F033BC9907FA01C2B010BF9476EDD1B
SHA-512:	AE525504A31ACECC7D6CC5E5C38CA892CFFB8A67F10339B7F4D7CECFBE129A1DF9ED64C1FB1D5C0B25110DBB8F74ED38583F8DEA2D6FC995561289EF1F05888C
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "fileTypePolicies",. "version": "47",. "imageName": "image.squash",. "squash": true,. "fsType": "squashfs",. "isRemovable": false.}

C:\Users\user\AppData\Local\Temp\4504_1512952048\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	3034
Entropy (8bit):	5.876664552417901
Encrypted:	false
SSDEEP:	48:p/hEc9q0S+UTKYM43z8nqMsfWRUWEADM/W9n7lqFkakzcVTGkcYTPi6zM:RGcg5z/jjjHgUnV278+aWLy4
MD5:	8B6C3E16DFBF5FD1C9AC2267801DB38E
SHA1:	F5CADC5914DF858C96C189B092BC89C29407BBAA
SHA-256:	FD986A547D9585E98F451B87CA85DEB4B61EE540C6FAC678D7BEDABF04653095
SHA-512:	37048EF8FADF62A26CAEC6EE90AC192429AB1E99424E5C68FACA90C0DAD68642C761FDCAC03FC38FA930841F91FA145A6943EC7F168D4F2FA426F1F092C2F502
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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

C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_pnacl_json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	507
Entropy (8bit):	4.68252584617246
Encrypted:	false
SSDEEP:	12:TjLJ7qaVgPPd8bdzQBXefosmc5T9+n6e1Cetm1JXcAwA:TJ7jViPOd8wfHmZ6RP15
MD5:	35D5F285F255682477F4C50E93299146
SHA1:	FB58813C4D785412F05962CD379434669DE79C2B
SHA-256:	5424C7B084EC4C8BA0A9C69683E5EE88C325BA28564112CC941CD22E392D8433
SHA-512:	59DF2D5F2684FACC80C72F9C4B7E280F705776076C9D843534F772D5A3D578BEE04289AEE81320F23FB4D743F3969EDF5BA53FEBBAC8A4D27F3BC53BCF271C3E
Malicious:	false
Reputation:	low
Preview:	{. "COMMENT": [. "This file serves as a template for the resource info description used by ", . "the NaCl Chrome plugin. It is kept in the NaCl repository to prevent ", . "hard-coding of NaCl-specific information inside the Chrome repository.". ], . "abi-version": 1, . "pnacl-arch": "x86-64", . "pnacl-ld-name": "ld.nexe", . "pnacl-llc-name": "pnacl-llc.nexe", . "pnacl-sz-name": "pnacl-sz.nexe", . "pnacl-version": "5dfe030a71ca66e72c5719ef5034c2ed24706c43".}

C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_for_eh_o

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
Category:	dropped
Size (bytes):	2712
Entropy (8bit):	3.4025803725190906
Encrypted:	false
SSDEEP:	48:b/5D5V5PK82aTS6aTTw0Do1DttoyDNsEA:b/hbVic1ZtLDNsE
MD5:	604FF8F351A88E7A1DBD7C836378AE86
SHA1:	9D8D89AE9F13D6306E619A4EAAD51EDE91A5F9F3
SHA-256:	947E64BE43E821562CE894F1AFCC3D09CD7FF614C107FC94250CD3EA5C943302
SHA-512:	85B1EDA4C473E00034EE627B7ABB894A77E521BC6A91A91A4A3744CA7511CB0AF10B9723D9ECC2CE3378DD70B659DF842D8C11875958CB77070CF01EC0A15840
Malicious:	false
Reputation:	low
Preview:	.ELF..............>.................................@.....@.......................................PH.......,$J.l=....J.$<A[..@.A...M..A..ffffff..................PH......,$J.l=....J.$<A[..D..A...M..A..ffffff..................PH..1..,$J.l=....J.$<A[.......A...M..A..ffffff..................PH..SP..h.........fff...................h.........fff.............J.$<[.,$J.l=....J.$<.....f.....................................................................................................................................................................................NaCl....x86-64...........zR..x......................@....C....C.........8.......@....C....C.........T.......@....C....C.........p.......`....C....C..B...... .......................<...............@.......X.......................t........................clang version 3.7.0 (https://chromium.googlesource.com/a/native_client/pnacl-clang.git ce163fdd0f16b4481e5cf77a16d45e9b4dc8300e) (https://chromium.googlesource.com/a/native_client/pna

C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_o

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
Category:	dropped
Size (bytes):	2776
Entropy (8bit):	3.5335802354066246
Encrypted:	false
SSDEEP:	48:b/5D5V5ej5ej5PjDdaTS6aTTw6DV1DtFouoyDOsTy:b/hbEEVJB1ZFhLDOsT
MD5:	88C08CD63DE9EA244F70BFC53BBCADF6
SHA1:	8F38A113A66B18BAA02E2C995099CF1145A29DAA
SHA-256:	127F903CC986466AA5A13C17DFDD37AC99762F81A794180339069F48986BC7A3
SHA-512:	78D2500493A65A23D101EC2420DC5F0CE8C75EFAC425C28547121643E4FB568E9D827EF2C0F7068159E043C86B986F29BF92C6BADC675F160B63C7B3512EB95F
Malicious:	false
Reputation:	low
Preview:	.ELF..............>.....................X...........@.....@.......................................PH.......,$J.l=....J.$<A[..@.A...M..A..ffffff..................PH......,$J.l=....J.$<A[..D..A...M..A..ffffff..................PH..1..,$J.l=....J.$<A[.......A...M..A..ffffff..................PH..,$J.l=....J.$<A[f........A...M..A..ffffff..................PH..,$J.l=....J.$<A[f........A...M..A..ffffff..................PH..SP..h.........fff.............J.$<[.,$J.l=....J.$<.....f.K...............`.......P.......................z...................................NaCl....x86-64...clang version 3.7.0 (https://chromium.googlesource.com/a/native_client/pnacl-clang.git ce163fdd0f16b4481e5cf77a16d45e9b4dc8300e) (https://chromium.googlesource.com/a/native_client/pnacl-llvm.git 7251d5b59fca15195c94a3a7da70f0081724448f)............zR..x......................@....C....C.........8.......@....C....C.........T.......@....C....C.........p.......@....C....C.................@....C....C.................@...

C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_crtend_o

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
Category:	dropped
Size (bytes):	1520
Entropy (8bit):	2.799960074375893
Encrypted:	false
SSDEEP:	12:Bvx/ekjlM/NQQmTfR9yp9396QQmTfR9C6wRqD8MTDDw7lEOkSbfuEAXwX6BX2U8b:bDjO/NbmT3296bmT3Twk8qDwh7b7CD8
MD5:	75E79F5DB777862140B04CC6861C84A7
SHA1:	4DB7BDC80206765461AC68CEC03CE28689BBEE0C
SHA-256:	74E8885B87ED185E6811C23942FD9BD1FBAC9115768849AF95A9DECF6644B2EA
SHA-512:	FE3F86E926759E71494F2060C4ED3C883EBCAF20CB129A5AD7F142766C33FAB10B5FABC3C7C938E0E895E27EA0AC03CBFE8D0EEABF5300A4AD07F67FD96CC253
Malicious:	false
Reputation:	low
Preview:	.ELF..............>.................................@.....@.........................NaCl....x86-64.......clang version 3.7.0 (https://chromium.googlesource.com/a/native_client/pnacl-clang.git ce163fdd0f16b4481e5cf77a16d45e9b4dc8300e) (https://chromium.googlesource.com/a/native_client/pnacl-llvm.git 7251d5b59fca15195c94a3a7da70f0081724448f)...text..comment..bss..group..note.GNU-stack..eh_frame..shstrtab..strtab..symtab..data..note.NaCl.ABI.x86-64.......................................................!................................................................................................................................................................................................../../../pnacl/support/crtend.c.__EH_FRAME_END__...............................................................................................@...............................................................H.......................................P.......................H...............................

C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=7511538a3a6a0b862c772eace49075ed1bbe2377, stripped
Category:	dropped
Size (bytes):	2163864
Entropy (8bit):	6.07050487397106
Encrypted:	false
SSDEEP:	24576:HPHonIwYZJ0ykwVO7Owf31yJKzCtxO8RSV4lY+PbeHVxCtjFV4lBNeSAmfGqa+A7:HvSMRwf3SKmlY+PyPvnM2Gq+
MD5:	0BB967D2E99BE65C05A646BC67734833
SHA1:	220A41A326F85081A74C4BB7C5F4E115D1B4B960
SHA-256:	C6C2D0C2FC3E38A9BFA19C78066439C2F745393F1FD1C49C3C6777F697222C76
SHA-512:	8EF8689E00E4B210A30444D18ED6247F364995ABEB2FD272064C3AF671EEDB4D9B8B67CA56F72FEBF8F56896D4EA7EC4B10CB445FFA1C710C1F312E9DA0E4896
Malicious:	false
Antivirus:	Antivirus: Virustotal, Detection: 0%, Browse Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	.ELF..............>..... .......@.........!.........@.8...@......................................................................................................................................................{......W...............................................@.......@...............P.td.....h.......h.......h......4b......4b..............Q.td................................................................NaCl....x86-64..............GNU.u.S.:j..,w...u...#w.......?......Y@.......@......1@......B@......P@.....@X@.....``@......h@.....pp@.....H.@.......@.......@.......@.......@.......@....`..@.......@.......A.......A......................p................@..............?.......A.........5.....?5.5...?.5.....?......P9..............PC.......?......0@................aCoc...?..`.(..?.y.P.D.?<.s..O.u......$@.......@...............@........................................ ... ....... .......@...`...`...`...`...................`...`...`...`...`...`...`...................................`...

C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_libcrt_platform_a

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	current ar archive
Category:	dropped
Size (bytes):	40552
Entropy (8bit):	4.127255967843258
Encrypted:	false
SSDEEP:	768:xlP+1fzyUNVU5LmKxeOnjpD5eA/eUnUUxvT:xlP+1ryYMTekpD5eAWjuvT
MD5:	0CE951B216FCF76F754C9A845700F042
SHA1:	6F99A259C0C8DAD5AD29EE983D35B6A0835D8555
SHA-256:	7A1852EA4BB14A2A623521FA53F41F02F8BA3052046CF1AA0903CFAD0D1E1A7B
SHA-512:	7C2F9BF90EB1F43C17B4E14A077759FA9DC62A7239890975B2D6FD543B31289DC3B49AE456CA73B98DE9AC372034F340C708D23D9D3AAB05CCBDABDC56A6314E
Malicious:	false
Reputation:	low
Preview:	!<arch>./ 0 0 0 0 624 `...................,...8...Z(..e...e...t...t...y`..y`..y`..y`..y`..y`..y`..y`..y`..y`..y`..y`..y`..y`........................fmod.fmodf.memcmp.memcpy.memmove.memset.__nacl_read_tp.__pnacl_init_irt.longjmp.setjmp.__Sz_fptosi_f32_i64.__Sz_fptosi_f64_i64.__Sz_fptoui_f32_i32.__Sz_fptoui_f32_i64.__Sz_fptoui_f64_i32.__Sz_fptoui_f64_i64.__Sz_sitofp_i64_f32.__Sz_sitofp_i64_f64.__Sz_uitofp_i32_f32.__Sz_uitofp_i32_f64.__Sz_uitofp_i64_f32.__Sz_uitofp_i64_f64.nacl_tp_tdb_offset.nacl_tp_tls_offset.__Sz_bitcast_16xi1_i16.__Sz_bitcast_8xi1_i8.__Sz_bitcast_i16_16xi1.__Sz_bitcast_i8_8xi1.__Sz_fptoui_4xi32_f32.__Sz_uitofp_4xi32_4xf32..e_fmod.o/ 0 0 0 644 2792 `..ELF..............>.....................(...........@.....@.......................................PH..AVAUATSfI.~.M..I.. E....@.A......D..D1.......8fI.~.M.....I.. E..A......D..D..t.D....D..f....D..=....r...Y...^.[A\A]A^..@..,$J.l=....J.$<A[A...M..

C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_a

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	current ar archive
Category:	dropped
Size (bytes):	132784
Entropy (8bit):	3.6998481247844937
Encrypted:	false
SSDEEP:	384:Hf0mOXYmeKzQUIdedRFvT5p1Ee2HyAlL3O4:Hf7OXdmWRJT5p1R2HyAhO4
MD5:	C37CA2EB468E6F05A4E37DF6E6020D0F
SHA1:	EA787E5EADFB488632EC60D8B80B555796FA9FE9
SHA-256:	C1483ED423FEE15D86E8B5D698B2CDAB89186CE7FF9C4E3D5F3F961FD80D7C6E
SHA-512:	01281DE92B281FB29E1ACA96AA64B740B65CC3A9097307827F0D8DB9E1C164C56AFCDFA0BF138EA670A596D55CE2C8D722760744E9FC9343BB6514417BF333BA
Malicious:	false
Reputation:	low
Preview:	!<arch>./ 0 0 0 0 942 `....;...\|.......4...x..#...-...4l..E...M...U...]...n...u...~X...4.......................L......................t...p...............`......"...*...1...:...D...K...T...\...d...r\|..\|0.......x...........L.......\...8..........................__clzti2.__compilerrt_fmax.__compilerrt_fmaxf.__compilerrt_logb.__compilerrt_logbf.__ctzti2.__divdc3.__divdi3.__divmoddi4.__divmodsi4.__divsc3.__divsi3.__divti3.__fixdfdi.__fixdfsi.__fixdfti.__fixsfdi.__fixsfsi.__fixsfti.__fixunsdfdi.__fixunsdfsi.__fixunsdfti.__fixunssfdi.__fixunssfsi.__fixunssfti.__floatdidf.__floatdisf.__floatsidf.__floatsisf.__floattidf.__floattisf.__floatundidf.__floatundisf.__floatunsidf.__floatunsisf.__floatuntidf.__floatuntisf.compilerrt_abort_impl.__moddi3.__modsi3.__modti3.__muldc3.__muloti4.__mulsc3.__multi3.__popcountdi2.__popcountsi2.__popcountti2.__powidf2.__powisf2.__udivdi3.__udivmoddi4.__udivmodsi4.__udivmodti4.__udivsi3.__udivti3.__umoddi3.__umodsi3.

C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_a

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	current ar archive
Category:	dropped
Size (bytes):	13514
Entropy (8bit):	3.8217211433441904
Encrypted:	false
SSDEEP:	192:uU9v4pXizdrEuxwk3vp20tprpdSGFwDqO:P9v4palvvc0tpFdSGFwmO
MD5:	4E8BEDA73EB7BD99528BF62B7835A3FA
SHA1:	DC0F263A7B2A649D11FF7B56FE9CFAC44F946036
SHA-256:	6B835FD48DF505EB336FF6518CE7B93BB0ED854DADAA5C1EEED48D420291F62C
SHA-512:	46116B8BABC719676D68FD40D2AC82F38A3D13D8A482ADFC6FC32A99170AC3420E52CC33242CCD0FA723ABF4FA5EDBB9CE16A09C729BF04AE4AFBB2F67A1E38B
Malicious:	false
Reputation:	low
Preview:	!<arch>./ 0 0 0 0 94 `................._pnacl_wrapper_start.__pnacl_real_irt_query_func.__pnacl_wrap_irt_query_func..shim_entry.o/ 0 0 0 644 7392 `..ELF..............>..................... ...........@.....@.........................NaCl....x86-64..................................A.L....A.L...D...........D....A.....t+.. u..t"..A.D..........A... .....A.D...........f..D..<.......................Q.......................V.......................clang version 3.7.0 (https://chromium.googlesource.com/a/native_client/pnacl-clang.git ce163fdd0f16b4481e5cf77a16d45e9b4dc8300e) (https://chromium.googlesource.com/a/native_client/pnacl-llvm.git 7251d5b59fca15195c94a3a7da70f0081724448f).../../ppapi/native_client/src/untrusted/pnacl_irt_shim/shim_entry.c./mnt/data/b/build/slave/sdk/build/src/out_pnacl/x64.NACL_STARTUP_FINI.NACL_STARTUP_ENVC.NACL_STARTUP_ARGC.NACL_STARTUP_ARGV.NaClStartupInfoIndex.unsigned int.size_t.char.TYPE_na

C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_dummy_a

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	current ar archive
Category:	dropped
Size (bytes):	2078
Entropy (8bit):	3.21751839673526
Encrypted:	false
SSDEEP:	24:MOcpdhWE5O/bZbmT3296bmT3TwQwDnvD/+R3:MHuECdaTS6aTTwXDvD/+l
MD5:	F950F89D06C45E63CE9862BE59E937C9
SHA1:	9CFAD34139CC428CE0C07A869C15B71A9632365D
SHA-256:	945B1C8A1666CBF05E8B8941B70D9D044BAAFB59B006F728F8995072DE7C4C40
SHA-512:	F9AFBB800A875EDCC63DEA4986179E73632B3182951A99C8B3D37DB454EFD7CC7192ECA5AC87514918A858BAD6DAEAB59548CA2E90EADA9900EF5B9F08E62CFC
Malicious:	false
Reputation:	low
Preview:	!<arch>./ 0 0 0 0 30 `........._pnacl_wrapper_start..// 20 `.dummy_shim_entry.o/./0 0 0 0 644 1840 `..ELF..............>.................................@.....@.......................................PH..,$J.l=....J.$<.....f..D......................................NaCl....x86-64...clang version 3.7.0 (https://chromium.googlesource.com/a/native_client/pnacl-clang.git ce163fdd0f16b4481e5cf77a16d45e9b4dc8300e) (https://chromium.googlesource.com/a/native_client/pnacl-llvm.git 7251d5b59fca15195c94a3a7da70f0081724448f)............zR..x...................... ....C....C..... .........................rela.text..comment..bss..group..note.GNU-stack..rela.eh_frame..shstrtab..strtab..symtab..data..note.NaCl.ABI.x86-64.....................................................................................................................................................

C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=309d6d3d463e6b1b0690f39eb226b1e4c469b2ce, stripped
Category:	dropped
Size (bytes):	14091416
Entropy (8bit):	5.928868737447095
Encrypted:	false
SSDEEP:	196608:tKVqXp3Qev4dg6ilfHM8KLM2J3jqjnkZ:uqufB
MD5:	9B159191C29E766EBBF799FA951C581B
SHA1:	D1D4BBC63AB5FC1E4A54EB7B82095A6F2CE535EE
SHA-256:	2F4A3A0730142C5EE4FA2C05D27A5DEFC18886A382D45F5DB254B61B28ED642B
SHA-512:	0B4FF60B5428F81B8B1BCF3328CF80CBD88D8CE5E8BDBC236B06D5A54E7CF26168A3ABB348D87423DA613AB3F0B4D9B37CB5180804839F1CA158EC2B315DDF00
Malicious:	false
Antivirus:	Antivirus: Virustotal, Detection: 0%, Browse Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	.ELF..............>..... .......@...................@.8...@...............$.....................................................................................................................!.......!......'......G...............................................@.......@...............P.td............................D.......D...............Q.td................................................................NaCl....x86-64..............GNU.0.m=F>k....&...i........................0C......0C..0C..0E..............0C......0E.-DT.!.?.-DT.!.........................?........-DT.!...-DT.!.?.......?......................?..............?."..."..."..."......@.......`...................... ...@...`...................... ...@...`...................... ...@...`...................... ...@...`.......................................`... ...@...`...........`...`.......@...@....... ....1..`3.. 4..`-..`-...:...:...F..@H..`H...H...F...F...G...H.. H...F..@G...I.. I..@I..@G...G...I...I...J...G..`I..

C:\Users\user\AppData\Local\Temp\4504_1512952048\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=4b15de4ab227d5e46213978b8518d53c53ce1db9, stripped
Category:	dropped
Size (bytes):	1901720
Entropy (8bit):	5.955741933854651
Encrypted:	false
SSDEEP:	12288:gXqUSpBjwQO2o8k+7zjidg4euCAauOILffvCpGy4Wh3BTFmHpq82K2/KsvPyla9d:gafZwcOdNe2auOepCBTFmJq3Kf8ksr
MD5:	9DC3172630E525854B232FF71499D77C
SHA1:	0082C58EDCE3769E90DB48E7C26090CE706AD434
SHA-256:	6AA1DA6C264E0AF4E32A004F4076C7557C6AC6D9C38B0C5DE97302D83FA248C3
SHA-512:	9E9584241A39EED1463D7D4C1B26AE570B839AA315778FF3400C61341EBA43B630307DE9F1532A265CA82EA69BDEA03EC9D963E59A18569C02DA8285449870FE
Malicious:	false
Antivirus:	Antivirus: Virustotal, Detection: 2%, Browse Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	.ELF..............>..... .......@...................@.8...@.............................................................................................0.......0................................................Y......................................................@.......@...............P.td....t^......t^......t^.......W.......W..............Q.td................................................................NaCl....x86-64..............GNU.K..J.'..b......<S...`...`... ...@...@.......@.............................................Y@......................p................@.......?..............?.......A.........5.....?5.5...?.5.....?......P9..............PC.......?......0@................aCoc...?..`.(..?.y.P.D.?<.s..O.u......$@.......@...............@`...`.......@.................................................. ...`... ... .......`................... ... ...@...`.......................@... Z...[...[...e.......... ...@... ...@...`........0...0...2..`4.. 6...7...9...~...~...z...{...{..

C:\Users\user\AppData\Local\Temp\4504_1512952048\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.928261499316817
Encrypted:	false
SSDEEP:	3:STDLGswXEVBcVdBiTDt3zLsW:SPLGLErcVdBiDtf3
MD5:	C00BCE97F21B1AD61EB9B8CD001795EE
SHA1:	8E0392FF3DB267D847711C3F4E0D7468060E1535
SHA-256:	59F06F04230E32E8BC839F45B984D31D611930427B631C963D09E7064A602363
SHA-512:	9930E44A6ECC62505DBADCEED5E05645909FF09816FB12AAC0414E6D2830AC09758366C3B7D4EDD7839C87EB16DFA4C66D8981AE6237D408B37135C3506F4CD2
Malicious:	false
Reputation:	low
Preview:	1.6f6bc93dcd62dc251850d2ff458fda96083ceb7fbe8eeb11248b8485ef2aea23

C:\Users\user\AppData\Local\Temp\4504_1512952048\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	573
Entropy (8bit):	4.859567579783832
Encrypted:	false
SSDEEP:	12:BLqG6yDJmL4mLDlG9hQ181G46XzrXc+EFfNqpaiOc+T5NqXIOclNqXL:BkylmL4mLDlJ18116XsRNqtZeNqXIZlE
MD5:	1863B86D0863199AFDA179482032945F
SHA1:	36F56692E12F2A1EFCA7736C236A8D776B627A86
SHA-256:	F14E451CE2314D29087B8AD0309A1C8B8E81D847175EF46271E0EB49B4F84DC5
SHA-512:	836556F3D978A89D3FC1F07FCED2732A17E314ED6A021737F087E32A69BFA46FD706EBBDFD3607FF42EDCB75DC463C29B9D9D2F122504F567BB95844F579831B
Malicious:	false
Reputation:	low
Preview:	{."update_url": "https://clients2.google.com/service/update2/crx",.. "description": "Portable Native Client Translator Multi-CRX",. "name": "PNaCl Translator Multi-CRX",. "manifest_version": 2,. "minimum_chrome_version": "30.0.0.0",. "version": "0.57.44.2492",. "platforms": [. {. "nacl_arch": "x86-32",. "sub_package_path": "_platform_specific/x86_32/". },. {. "nacl_arch": "x86-64",. "sub_package_path": "_platform_specific/x86_64/". },. {. "nacl_arch": "arm",. "sub_package_path": "_platform_specific/arm/". }. ].}.

C:\Users\user\AppData\Local\Temp\4504_493719933\Filtering Rules

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	91283
Entropy (8bit):	5.445591581715125
Encrypted:	false
SSDEEP:	1536:FOONphT5b05W9w2ZH3HhahaHVFzIFSXkRrw8p1:HNNb0mwY3hpHVZIsX0d1
MD5:	492D833A4DACDC2843C7E1835DE22679
SHA1:	50461C265B3FF063690DFD7B5FDF742BA06DE36D
SHA-256:	081284C6EB49939EA138A836CD347C212E130266A4E0FAF3A5DF7C01F9F27E21
SHA-512:	9D82234FE1662226B348762028F7C2C9F0D36ACA06F758938ECE4F6D025FFCAA2FEC5D7A01E75B2156F914A7095E67EE3277B82DBF71445229121E4BBE779D13
Malicious:	false
Reputation:	low
Preview:	..........o0.8.@.R.-728x90.........o0.8.@.R.adtdp.com^.........o...epaper.timesgroup.com...nbcsports.com...windalert.com...kowb1290.com...k2radio.com...vimeo.com...koel.com...uefa.com0.8.@.R#googletagservices.com/tag/js/gpt.js........o0.8.@.R./ad-inserter/.9......o...adcore.com.au.....adcore.ch..0.8.@.R./adcore_........o0.8.@.R.uwoaptee.com^........o0.8.@.R._468_60..8......o0.8.@.R)bancodevenezuela.com/imagenes/publicidad/........o0.8.@.R..adbutler-........o0.8.@.R.adrecover.com^.>......o...google.com0.8.@.R!developers.google.com/google-ads/.-......o...vk.com0.8.@.R.vk.me/css/al/ads.css.+......o0.8.@.R.mysmth.net/nForum//ADAgent_........o0.8.@.R.indoleads.com^.%......0.8.@.R.discordapp.com/banners/.D......o...daum.net0.8.@.R)daumcdn.net/adfit/static/ad-native.min.js.'......o0.8.@.R.looker.com/api/internal/."......o0.8.@.R.broadstreetads.com^........o0.8.@.R./banner.cgi?.........o...thefreedictionary.com...downloads.codefi.re...windows7themes.net...smallseotools.com*..

C:\Users\user\AppData\Local\Temp\4504_493719933\LICENSE.txt

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	24623
Entropy (8bit):	4.588307081140814
Encrypted:	false
SSDEEP:	384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm0:mvagXreRnTqzazWgj0v6XqD
MD5:	D33AAA5246E1CE0A94FA15BA0C407AE2
SHA1:	11D197ACB61361657D638154A9416DC3249EC9FB
SHA-256:	1D4FF95CE9C6E21FE4A4FF3B41E7A0DF88638DD449D909A7B46974D3DFAB7311
SHA-512:	98B1B12FF0991FD7A5612141F83F69B86BC5A89DD62FC472EE5971817B7BBB612A034C746C2D81AE58FDF6873129256A89AA8BB7456022246DC4515BAAE2454B
Malicious:	false
Reputation:	low
Preview:	EasyList Repository Licences.... Unless otherwise noted, the contents of the EasyList repository.. (https://github.com/easylist) is dual licensed under the GNU General.. Public License version 3 of the License, or (at your option) any later.. version, and Creative Commons Attribution-ShareAlike 3.0 Unported, or.. (at your option) any later version. You may use and/or modify the files.. as permitted by either licence; if required, "The EasyList authors.. (https://easylist.to/)" should be attributed as the source of the.. material. All relevant licence files are included in the repository..... Please be aware that files hosted externally and referenced in the.. repository, including but not limited to subscriptions other than.. EasyList, EasyPrivacy, EasyList Germany and EasyList Italy, may be.. available under other conditions; permission must be granted by the.. respective copyright holders to authorise the use of their material.......Creative Commons Attribut

C:\Users\user\AppData\Local\Temp\4504_493719933\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	1529
Entropy (8bit):	5.987722096297769
Encrypted:	false
SSDEEP:	24:pZRj/flTHYXKl0kYbKNzjeT3qzkaoXqyCUV0szeMXmx0eoXECqG3l0+3pGX8fpaj:p/h4X8ybKNOTqkak1CSyxtkJl00AXN
MD5:	531658FD4A53DCAA6706C4E299F7F321
SHA1:	30E6E2BBF0C17CDED7D479A14E96468B94B647C3
SHA-256:	99CFEEE3A649590AB00880AFF978CB3E9BE65302AE2CD60B134387D606F1C79A
SHA-512:	727967425E95B297071B293CE9E18A4F9D4851819E93EFE1D8670DED887270ADCC9BECA280687E1DCD3AA6EDCFDDBE61A7074B92CEC95656CB2BC5DD995F9BF5
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"yR3CR9-1WdhFXwIas-furfbkFjIT_vSCGmIc0g-d4snFbxb2ANfYiEM-CW7ZAilSpXLZEiYUxhrhtU6C-NbLrEfhyRxanHjYONy4YkWjp_VmS8dnZ1PAxC5KhmIOQoHRA4G4979n-OrSkHNubBTVntbKAdPl9YK0Wb6QBLBX_IFcvew8SKs2bhxb2SEf9PNAbM36eMVRZhTf6R7MfjxR-heObZwJJTnsgiqhOlldNjehhH2Pl

C:\Users\user\AppData\Local\Temp\4504_493719933\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9462477267061056
Encrypted:	false
SSDEEP:	3:SxEQdYTVAUTVzDD4XScWGcY2R+Ql:SxEIYxAobaSnOQl
MD5:	665E5819FD3845C8CF669B0FC7C35244
SHA1:	C807724385F53E2B2410E269CAEEA719ABB03F76
SHA-256:	317A5B0177F17156279688F1FEF1D2568AAEB975239BB48702C76E2C4EFCC050
SHA-512:	19820AC3AC8FE1615AC15804EC7F735F932A957C2CCE690145240D74686DCEF87A91B2F918291525E386EBD1FE50BD31E4A1DC9E1EE0DFDB6D690523B97FA0E3
Malicious:	false
Reputation:	low
Preview:	1.dbbba5869c1d8946e5e23215c0404619fe82793d60eb89489b345ef55023e077

C:\Users\user\AppData\Local\Temp\4504_493719933\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	115
Entropy (8bit):	4.545910352797257
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFHXG7LGMdv5HcDKhtUJKS17vC:F6VlMZWuMt5SKPS1rC
MD5:	B0E35F2BE526F795B810BE0E88B72358
SHA1:	0C7CB5B9E7AF8DE8ABB306CFB722994820656A1A
SHA-256:	5D812EADC836E42C32649263525F7CFA2FE113E9C2D04E436EEE1BFF97E71359
SHA-512:	6C35C45F3524824DD5B2D9A571B36687E3CEE375723F5467FCE2BB9F743D88D16D9F07015772AD8736725EA5F6C3366F1671505FCA18B0CE3EB6EC21B0FC41AF
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "Subresource Filtering Rules",. "ruleset_format": 1,. "version": "9.32.0".}.

C:\Users\user\AppData\Local\Temp\4504_501084988\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	1765
Entropy (8bit):	6.016932513650603
Encrypted:	false
SSDEEP:	48:p/hKAGj0FnAp7XgNGIaku9E5tPJXaWqkbszesM:R5Gj0FAlsaBmfPsRD3M
MD5:	6D1D175F88B64546105E3E7C31D1129A
SHA1:	75A1B56F55BB62B05365A0FDBFC7941DE77CBFAF
SHA-256:	A0BC246E8E160A9BB32FA60F4E7A04D148A17125F426509466031E07731FDF81
SHA-512:	5C80908331E30C7EAD67F7F6C5AB064B07626FD9C58925A0D2124D66B25C5AE2F218BDACFB68AFCB332E88EB297CFB7E0A7A9E5E1E54C9B7A510FEF095F9B54F
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJtYW5pZmVzdC5qc29uIiwicm9vdF9oYXNoIjoiSUxrUllPSmhIVEZacllLRmN5UC12SkJrVjNWbWVLdHo4d1hEb2VPWjBZMCJ9LHsicGF0aCI6InNzbF9lcnJvcl9hc3Npc3RhbnQucGIiLCJyb290X2hhc2giOiJyRFZLUnlPcXBQQnI3RGhkM2VTazBKZzYxUlJXOVNzeHFBYU95WDFiWHFjIn1dLCJmb3JtYXQiOiJ0cmVlaGFzaCIsImhhc2hfYmxvY2tfc2l6ZSI6NDA5Nn1dLCJpdGVtX2lkIjoiZ2lla2NtbWxua2xlbmxhb21wcGtwaGtuam1ubnBuZWgiLCJpdGVtX3ZlcnNpb24iOiI3IiwicHJvdG9jb2xfdmVyc2lvbiI6MX0","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"nBdNk-7bgnEftAs4hWaHwF1Lk9pt7Eh6pcqe2gyNsE7VnVRp-H27tm1RFAF4htCUlXNJxX6YY-MUiK2DqJpQ3c73KDaFV8DcnadQfcXO3Lbrw7jLYSUaSdzujPkTyhuFcq_BhK0KWiIJ0aJgh7nVOBfAa5AbE6oFlLKMB2Ls0gmzS1-a5hUIu4rw2h9r9jkr6gLYbein5Jk2hdwW3u-1GNjyki4dftG2iZNAI8VhUf5gnCiF4AHCnYSGJsM0RGkmO_HJIzgwpQpP3RDsG2ioeKgxL-kcHhjXWOj3uVGyxpp1FkyHGkeGuqpFZMAxx3CEBiOtFj7i3iQxkgEW-E3uMKI3yA

C:\Users\user\AppData\Local\Temp\4504_501084988\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9570514164363635
Encrypted:	false
SSDEEP:	3:SVCBGERJd9WaHpYx4eiXoA:SVCwERJdVMiXd
MD5:	C6ABF42CB5AF869629971C2E42A87FD5
SHA1:	6EB0FAE28D9466E76FA12E31FE6CDADD3ACCE4D1
SHA-256:	D281AFDA759075F4CB7D7CEEC4A3CB2AF135213B4D691F27090E13F238486AD1
SHA-512:	EDDF7E4883E82718743C589E8F2E48BEAD948428E730231FEFADAD380853343332BC56C9DC61C963B3F537CD4865B06FF330CEF012B152CEA35F8A0AA2C7B56D
Malicious:	false
Reputation:	low
Preview:	1.fd515ec0dc30d25a09641b8b83729234bc50f4511e35ce17d24fd996252eaace

C:\Users\user\AppData\Local\Temp\4504_501084988\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	76
Entropy (8bit):	4.169145448714876
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFY8Wypv/KS1f:F6VlMQyBSS1f
MD5:	4AAA0ED8099ECC1DA778A9BC39393808
SHA1:	0E4A733A5AF337F101CFA6BEA5EBC153380F7B05
SHA-256:	20B91160E2611D3159AD82857323FEBC906457756678AB73F305C3A1E399D18D
SHA-512:	DFA942C35E1E5F62DD8840C97693CDBFD6D71A1FD2F42E26CB75B98BB6A1818395ECDF552D46F07DFF1E9C74F1493A39E05B14E3409963EFF1ADA88897152879
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "sslErrorAssistant",. "version": "7".}

C:\Users\user\AppData\Local\Temp\4504_501084988\ssl_error_assistant.pb

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	2816
Entropy (8bit):	6.108955364911366
Encrypted:	false
SSDEEP:	48:jkbh6AW2Bfc3osI6Hc3+XgU+EVeY55J4gXM/QDH4yq2dxckdfmkM:jkbhM2a3pntgQVb8Ylq2di
MD5:	E2F792C9E2DD86F39E8286B2EAD2FC70
SHA1:	8A32867614D2A23E473ED642056DED8E566687F9
SHA-256:	AC354A4723AAA4F06BEC385DDDE4A4D0983AD51456F52B31A8068EC97D5B5EA7
SHA-512:	6A7AF0CA1EFA65A89A9CA3B8DF0D2E24F21D91673C60CDFEEB02D33647442B01D535497249542F40E66E0D2DD3E9F8ED1F4A201FD97138D07A2B71366737E580
Malicious:	false
Reputation:	low
Preview:	...5.3sha256/fjZPHewEHTrMDX3I1ecEIeoy3WFxHyGplOLv28kIbtI=.5.3sha256/m/nBiLhStttu1YmOz7Y3D2u1iB1dV2CbIfFa3R2YW5M=.5.3sha256/8Iuf4xRbVCmCMQTJn3rxlglIO1IOKoyuSUgmXyfaIKs=.5.3sha256/8IHdrS+r6IWzSMcRcD/GA6mBxk1ECX8tGRW0rtGWILE=.5.3sha256/k/2eeJTznE32mblA/du19wpVDSIReFX44M8wXa2JY30=.5.3sha256/urWd7jMwR6DJgvWhp6xfRHF5b/cba3iG0ggXtTR6AfM=.5.3sha256/IJPCDSE5tM9H3nuD5m6RU2i9KDdPXVn4qmC/ULlcZzc=.5.3sha256/0Gy8RMdbxHNWR2GQJ62QKDXORYf5JmMmnr1FJFPYpzM=.5.3sha256/8tTICtyaxIQrdbYYDdgZhTN0OpM9kYndvoImtw1Ys5E=.5.3sha256/F7HIlsaG0bpJW8CzYekRbtFqLVTTGqwvuwPDqnlLct0=.5.3sha256/zaV2Aw1A742R1+WpXWvL5atsJbGmeSS6dzZOfe6f1Yw=.5.3sha256/UwOkRGMlP0K/mKNJdpQ0sTg2ean9Tje8UTOvFYzt1GE=.5.3sha256/w7KUXE4/BAo1YVZdO3mBsrMpu4IQuN0mhUXUI//agVU=.5.3sha256/JnPvGqEn36FjHQlBXtG1uWwNtdMj1o2ojR/asqyypNk=.5.3sha256/AUSXlKDCf1X30WhWeAWbjToABfBkJrKWPL6KwEi5VH0=.5.3sha256/zSyVjjFJMIeXK0ktVTIjewwr6U5OePRqyY/nEXTI4P8=.5.3sha256/9dcHlrXN2WV/ehbEdMxMZ8IV4qvGejCtNC5r6nfTviM=.5.3sha256/E+0WZLGSIe5nddlVKZ5fYzaNHHCE3hNqi/OWZD3iKgA=.5.3sha2

C:\Users\user\AppData\Local\Temp\5e808a2f-ef68-4eed-b2b7-e1d67e2429db.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Reputation:	low
Preview:	.

C:\Users\user\AppData\Local\Temp\scoped_dir4504_597213051\00cb8abb-814b-4bb8-a310-6c1da2bfcbbf.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	768843
Entropy (8bit):	7.992932603402907
Encrypted:	true
SSDEEP:	12288:cK2ED9wjXNC1Gse83ru82/u0eKhgxuPFrDXgtbPz54Pm1D0fBmfH1sBrJ9mTiDga:cK2ED9I48seur0/uZKCuPNbgtbz6m1ob
MD5:	A11D5CAF6BF849AEB84B0C95B1C3B7CF
SHA1:	27F410CCBD75852C01C7464A1FD7EF8C29BE3916
SHA-256:	D0E62ACE64AFC334330A7AC3A2CC657914FEB321F1F89AEE11D2A6D0E7D81C31
SHA-512:	086C124DE3A01BE467647F3BCB4EA05105F690AB45417A0E3D38935ABA9E2381DF59AF98D0FFF7823CEFD5390B48807352E135AC70977AED7B413A8CC48FB590
Malicious:	false
Reputation:	low
Preview:	Cr24..............0.."0....H.............0...........\7c.<........Fto.8.2'5..qk...%....2...C.F.9.#..e.xQ.......[...L\|....3>/....u.:T.7...(.yM...?V.<?........1.a...O?d.....A.H..'.MpB..T.m..Vn Ip..>k.\|1..n.<Fb..f..Q1.....s..2..{.6....Pp....obM..1.......b1.......(.u^.'z......v.F.W.X4."-eu...b.........6W..>Nuw9..R{c...Nq.H.K..A!....`v.k+..?.5.>v.....;.._~....tp....x.q.V...7.m.O.~.{!.o/q.'..BK..4./?'.....L..fH&.._<..&.p.k^..\s...:1y..F.N.+...X.PO@Mo....X.G1:..Y.@;..j..........=ae...0.......DU....n...n.;.Ipr..Q....:... <.....a.Y....{ei........0..0....H............0.......Mbh=.[O}.+..U.KHF(n3.\"...,g.c...6)..(.E...U...#.i.a..:...N.....P...x.O...(mC;\|.5.S.{m.aEx...[..fP.i`.y..5..R....v.$......l-m.............m....ni...`..W.....R.p.b.+...+.\k.R$e~.J\.&c%.d...M..j..V.%...+1F....D....X\.1ct.<........E.B.+.i@...8..^...&YR...I.o...,.....[0Y0....H.=....*.H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. D.'.N@.(..GK....m...A.0.."

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 29, 2022 00:39:49.296422005 CET	49744	443	192.168.2.3	142.250.203.109
Jan 29, 2022 00:39:49.296468019 CET	443	49744	142.250.203.109	192.168.2.3
Jan 29, 2022 00:39:49.296546936 CET	49744	443	192.168.2.3	142.250.203.109
Jan 29, 2022 00:39:49.297302008 CET	49744	443	192.168.2.3	142.250.203.109
Jan 29, 2022 00:39:49.297328949 CET	443	49744	142.250.203.109	192.168.2.3
Jan 29, 2022 00:39:49.306448936 CET	49747	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:49.306474924 CET	443	49747	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:49.306551933 CET	49747	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:49.307531118 CET	49747	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:49.307543993 CET	443	49747	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:49.313719988 CET	49748	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:49.313775063 CET	443	49748	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:49.313894033 CET	49748	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:49.314328909 CET	49748	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:49.314368963 CET	443	49748	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:49.362287998 CET	443	49744	142.250.203.109	192.168.2.3
Jan 29, 2022 00:39:49.365619898 CET	49744	443	192.168.2.3	142.250.203.109
Jan 29, 2022 00:39:49.365648031 CET	443	49744	142.250.203.109	192.168.2.3
Jan 29, 2022 00:39:49.368027925 CET	443	49744	142.250.203.109	192.168.2.3
Jan 29, 2022 00:39:49.368093014 CET	49744	443	192.168.2.3	142.250.203.109
Jan 29, 2022 00:39:49.379336119 CET	443	49747	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:49.379411936 CET	443	49748	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:49.418808937 CET	49747	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:49.422574997 CET	49748	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:49.427063942 CET	49747	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:49.427073956 CET	443	49747	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:49.427309036 CET	49748	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:49.427340984 CET	443	49748	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:49.428858042 CET	443	49748	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:49.428874969 CET	443	49748	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:49.428947926 CET	49748	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:49.430682898 CET	443	49747	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:49.430710077 CET	443	49747	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:49.430764914 CET	49747	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:49.470628023 CET	49748	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:49.470793962 CET	49747	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:50.229429960 CET	49744	443	192.168.2.3	142.250.203.109
Jan 29, 2022 00:39:50.229772091 CET	443	49744	142.250.203.109	192.168.2.3
Jan 29, 2022 00:39:50.235953093 CET	49748	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:50.236287117 CET	443	49748	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:50.236491919 CET	49747	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:50.236790895 CET	443	49747	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:50.241446018 CET	49744	443	192.168.2.3	142.250.203.109
Jan 29, 2022 00:39:50.241477013 CET	443	49744	142.250.203.109	192.168.2.3
Jan 29, 2022 00:39:50.241735935 CET	49748	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:50.241772890 CET	443	49748	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:50.273361921 CET	443	49748	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:50.273437977 CET	49748	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:50.278856993 CET	49747	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:50.278875113 CET	443	49747	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:50.280857086 CET	49744	443	192.168.2.3	142.250.203.109
Jan 29, 2022 00:39:50.302907944 CET	443	49744	142.250.203.109	192.168.2.3
Jan 29, 2022 00:39:50.303082943 CET	443	49744	142.250.203.109	192.168.2.3
Jan 29, 2022 00:39:50.303215027 CET	49744	443	192.168.2.3	142.250.203.109
Jan 29, 2022 00:39:50.326870918 CET	49747	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:50.363583088 CET	49744	443	192.168.2.3	142.250.203.109
Jan 29, 2022 00:39:50.363617897 CET	443	49744	142.250.203.109	192.168.2.3
Jan 29, 2022 00:39:50.371088028 CET	49748	443	192.168.2.3	165.22.24.53
Jan 29, 2022 00:39:50.371119976 CET	443	49748	165.22.24.53	192.168.2.3
Jan 29, 2022 00:39:50.447031975 CET	49750	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:50.447073936 CET	443	49750	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:50.447149038 CET	49750	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:50.447678089 CET	49750	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:50.447696924 CET	443	49750	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:51.064409971 CET	443	49750	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:51.065558910 CET	49750	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:51.065586090 CET	443	49750	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:51.066699982 CET	443	49750	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:51.066775084 CET	49750	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:51.071285963 CET	49750	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:51.071372032 CET	443	49750	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:51.071932077 CET	49750	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:51.071975946 CET	443	49750	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:51.112211943 CET	49750	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:51.759639025 CET	443	49750	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:51.759766102 CET	443	49750	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:51.759865999 CET	49750	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:51.760529995 CET	49750	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:51.760560989 CET	443	49750	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:51.793028116 CET	49757	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:51.793070078 CET	443	49757	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:51.793289900 CET	49757	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:51.793567896 CET	49757	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:51.793593884 CET	443	49757	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:52.395827055 CET	443	49757	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:52.396182060 CET	49757	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:52.396203041 CET	443	49757	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:52.397500038 CET	443	49757	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:52.397605896 CET	49757	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:52.399147034 CET	49757	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:52.399282932 CET	443	49757	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:52.399473906 CET	49757	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:52.399487972 CET	443	49757	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:52.504582882 CET	49757	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:52.601917982 CET	443	49757	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:52.601975918 CET	443	49757	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:52.601986885 CET	443	49757	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:52.602041960 CET	443	49757	142.4.12.228	192.168.2.3
Jan 29, 2022 00:39:52.602081060 CET	49757	443	192.168.2.3	142.4.12.228
Jan 29, 2022 00:39:52.602107048 CET	443	49757	142.4.12.228	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jan 29, 2022 00:39:49.263001919 CET	192.168.2.3	8.8.8.8	0xb9de	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:49.275607109 CET	192.168.2.3	8.8.8.8	0x168d	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:49.284852982 CET	192.168.2.3	8.8.8.8	0xfc45	Standard query (0)	vast.doubleverify.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:50.389353991 CET	192.168.2.3	8.8.8.8	0x2454	Standard query (0)	www.doubleverify.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:51.765607119 CET	192.168.2.3	8.8.8.8	0xf0e0	Standard query (0)	doubleverify.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:52.668370008 CET	192.168.2.3	8.8.8.8	0xda32	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:52.897303104 CET	192.168.2.3	8.8.8.8	0xbbfb	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:54.588912010 CET	192.168.2.3	8.8.8.8	0xe569	Standard query (0)	app-sj27.marketo.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:55.228502989 CET	192.168.2.3	8.8.8.8	0x3315	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:55.229320049 CET	192.168.2.3	8.8.8.8	0x3057	Standard query (0)	pixel.mathtag.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:55.229804039 CET	192.168.2.3	8.8.8.8	0xb094	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:55.398319006 CET	192.168.2.3	8.8.8.8	0xbb55	Standard query (0)	js.driftt.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:55.773205042 CET	192.168.2.3	8.8.8.8	0xc496	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:56.145391941 CET	192.168.2.3	8.8.8.8	0x8e88	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:56.287954092 CET	192.168.2.3	8.8.8.8	0x59bd	Standard query (0)	888-uxn-063.mktoresp.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:56.296295881 CET	192.168.2.3	8.8.8.8	0xf8c9	Standard query (0)	www.google.ae	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:56.297111988 CET	192.168.2.3	8.8.8.8	0x58c9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:56.326395035 CET	192.168.2.3	8.8.8.8	0x9469	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.495517969 CET	192.168.2.3	8.8.8.8	0x5233	Standard query (0)	conversation.api.drift.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.496046066 CET	192.168.2.3	8.8.8.8	0xf217	Standard query (0)	metrics.api.drift.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.497957945 CET	192.168.2.3	8.8.8.8	0xe90	Standard query (0)	customer.api.drift.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.522495031 CET	192.168.2.3	8.8.8.8	0x97a4	Standard query (0)	targeting.api.drift.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:07.884658098 CET	192.168.2.3	8.8.8.8	0xd3a1	Standard query (0)	doubleverify.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:07.888520002 CET	192.168.2.3	8.8.8.8	0xeaac	Standard query (0)	bootstrap.api.drift.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:08.057302952 CET	192.168.2.3	8.8.8.8	0xcf1d	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:09.340635061 CET	192.168.2.3	8.8.8.8	0x6f43	Standard query (0)	embeds.driftcdn.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:11.943635941 CET	192.168.2.3	8.8.8.8	0x4d56	Standard query (0)	1097428-28.chat.api.drift.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:13.611743927 CET	192.168.2.3	8.8.8.8	0x3021	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:44.097448111 CET	192.168.2.3	8.8.8.8	0x38a9	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:44.130927086 CET	192.168.2.3	8.8.8.8	0xef9f	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:44.361896992 CET	192.168.2.3	8.8.8.8	0x3038	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:44.983968973 CET	192.168.2.3	8.8.8.8	0x2e10	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:44.995377064 CET	192.168.2.3	8.8.8.8	0xb3d3	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:44.995959044 CET	192.168.2.3	8.8.8.8	0xcbe7	Standard query (0)	eu-u.openx.net	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:44.998163939 CET	192.168.2.3	8.8.8.8	0xa8c3	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.000622034 CET	192.168.2.3	8.8.8.8	0xe242	Standard query (0)	pixel.advertising.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.013593912 CET	192.168.2.3	8.8.8.8	0xe2ba	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.021511078 CET	192.168.2.3	8.8.8.8	0x7563	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.028235912 CET	192.168.2.3	8.8.8.8	0xd77a	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.047010899 CET	192.168.2.3	8.8.8.8	0xd000	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.146804094 CET	192.168.2.3	8.8.8.8	0xc367	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.157553911 CET	192.168.2.3	8.8.8.8	0x2987	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.312995911 CET	192.168.2.3	8.8.8.8	0xcadc	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.315884113 CET	192.168.2.3	8.8.8.8	0x2bde	Standard query (0)	uip.semasio.net	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.378988028 CET	192.168.2.3	8.8.8.8	0x2c58	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.397973061 CET	192.168.2.3	8.8.8.8	0x8744	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.424257994 CET	192.168.2.3	8.8.8.8	0x1436	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.431687117 CET	192.168.2.3	8.8.8.8	0x4e1f	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.433311939 CET	192.168.2.3	8.8.8.8	0x5cad	Standard query (0)	loadm.exelator.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.537282944 CET	192.168.2.3	8.8.8.8	0xfa0f	Standard query (0)	ih.adscale.de	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.558163881 CET	192.168.2.3	8.8.8.8	0x2dc7	Standard query (0)	ad.sxp.smartclip.net	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.633773088 CET	192.168.2.3	8.8.8.8	0x964	Standard query (0)	su.addthis.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.639707088 CET	192.168.2.3	8.8.8.8	0xb91c	Standard query (0)	usermatch.krxd.net	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.639779091 CET	192.168.2.3	8.8.8.8	0x6cd9	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.643064022 CET	192.168.2.3	8.8.8.8	0x6a0c	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.648997068 CET	192.168.2.3	8.8.8.8	0x5818	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.684350014 CET	192.168.2.3	8.8.8.8	0x3e7a	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.770133018 CET	192.168.2.3	8.8.8.8	0xac69	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.774581909 CET	192.168.2.3	8.8.8.8	0x110c	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.955584049 CET	192.168.2.3	8.8.8.8	0xbbae	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:46.057288885 CET	192.168.2.3	8.8.8.8	0xcfe5	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:46.238734007 CET	192.168.2.3	8.8.8.8	0x8552	Standard query (0)	beacon.krxd.net	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:46.379240036 CET	192.168.2.3	8.8.8.8	0x2c58	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.029232979 CET	192.168.2.3	8.8.8.8	0x6e14	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.697518110 CET	192.168.2.3	8.8.8.8	0x4dfc	Standard query (0)	bid.g.doubleclick.net	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:53.564070940 CET	192.168.2.3	8.8.8.8	0x879a	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:53.794861078 CET	192.168.2.3	8.8.8.8	0xd6	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:53.903143883 CET	192.168.2.3	8.8.8.8	0xb02c	Standard query (0)	doubleverify.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:54.801542044 CET	192.168.2.3	8.8.8.8	0x967b	Standard query (0)	app-sj27.marketo.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:58.612901926 CET	192.168.2.3	8.8.8.8	0xdf40	Standard query (0)	js.driftt.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:41:07.860260010 CET	192.168.2.3	8.8.8.8	0x9a38	Standard query (0)	metrics.api.drift.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:41:14.714505911 CET	192.168.2.3	8.8.8.8	0x2b28	Standard query (0)	1097428-28.chat.api.drift.com	A (IP address)	IN (0x0001)
Jan 29, 2022 00:42:21.418775082 CET	192.168.2.3	8.8.8.8	0xa18e	Standard query (0)	1097428-28.chat.api.drift.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jan 29, 2022 00:39:49.289321899 CET	8.8.8.8	192.168.2.3	0xb9de	No error (0)	accounts.google.com		142.250.203.109	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:49.303855896 CET	8.8.8.8	192.168.2.3	0x168d	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:39:49.303855896 CET	8.8.8.8	192.168.2.3	0x168d	No error (0)	clients.l.google.com		142.250.203.110	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:49.304146051 CET	8.8.8.8	192.168.2.3	0xfc45	No error (0)	vast.doubleverify.com	cust-dv.zentrick.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:39:49.304146051 CET	8.8.8.8	192.168.2.3	0xfc45	No error (0)	cust-dv.zentrick.com	vast-production-fra1.zentrick.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:39:49.304146051 CET	8.8.8.8	192.168.2.3	0xfc45	No error (0)	vast-production-fra1.zentrick.com		165.22.24.53	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:49.304146051 CET	8.8.8.8	192.168.2.3	0xfc45	No error (0)	vast-production-fra1.zentrick.com		167.99.246.227	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:49.304146051 CET	8.8.8.8	192.168.2.3	0xfc45	No error (0)	vast-production-fra1.zentrick.com		46.101.96.247	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:49.304146051 CET	8.8.8.8	192.168.2.3	0xfc45	No error (0)	vast-production-fra1.zentrick.com		206.189.48.157	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:50.419470072 CET	8.8.8.8	192.168.2.3	0x2454	No error (0)	www.doubleverify.com		142.4.12.228	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:51.786155939 CET	8.8.8.8	192.168.2.3	0xf0e0	No error (0)	doubleverify.com		142.4.12.228	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:52.688231945 CET	8.8.8.8	192.168.2.3	0xda32	No error (0)	cdn.cookielaw.org		104.16.148.64	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:52.688231945 CET	8.8.8.8	192.168.2.3	0xda32	No error (0)	cdn.cookielaw.org		104.16.149.64	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:52.710566998 CET	8.8.8.8	192.168.2.3	0x5a	No error (0)	gstaticadssl.l.google.com		216.58.215.227	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:52.833148003 CET	8.8.8.8	192.168.2.3	0x2370	No error (0)	www-googletagmanager.l.google.com		172.217.168.8	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:52.920871973 CET	8.8.8.8	192.168.2.3	0xbbfb	No error (0)	geolocation.onetrust.com		104.20.185.68	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:52.920871973 CET	8.8.8.8	192.168.2.3	0xbbfb	No error (0)	geolocation.onetrust.com		104.20.184.68	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:54.698184967 CET	8.8.8.8	192.168.2.3	0xe569	No error (0)	app-sj27.marketo.com	sj27.mktoedge.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:39:54.698184967 CET	8.8.8.8	192.168.2.3	0xe569	No error (0)	sj27.mktoedge.com		104.16.94.80	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:54.698184967 CET	8.8.8.8	192.168.2.3	0xe569	No error (0)	sj27.mktoedge.com		104.16.92.80	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:54.698184967 CET	8.8.8.8	192.168.2.3	0xe569	No error (0)	sj27.mktoedge.com		104.16.96.80	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:54.698184967 CET	8.8.8.8	192.168.2.3	0xe569	No error (0)	sj27.mktoedge.com		104.16.95.80	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:54.698184967 CET	8.8.8.8	192.168.2.3	0xe569	No error (0)	sj27.mktoedge.com		104.16.93.80	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:55.248568058 CET	8.8.8.8	192.168.2.3	0x3057	No error (0)	pixel.mathtag.com	pixel.mathtag.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:39:55.248908997 CET	8.8.8.8	192.168.2.3	0x3315	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:39:55.248908997 CET	8.8.8.8	192.168.2.3	0x3315	No error (0)	scontent.xx.fbcdn.net		157.240.17.15	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:55.250107050 CET	8.8.8.8	192.168.2.3	0xb094	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:39:55.421952963 CET	8.8.8.8	192.168.2.3	0xbb55	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:39:55.421952963 CET	8.8.8.8	192.168.2.3	0xbb55	No error (0)	dl7g9llrghqi1.cloudfront.net		143.204.215.12	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:55.421952963 CET	8.8.8.8	192.168.2.3	0xbb55	No error (0)	dl7g9llrghqi1.cloudfront.net		143.204.215.107	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:55.421952963 CET	8.8.8.8	192.168.2.3	0xbb55	No error (0)	dl7g9llrghqi1.cloudfront.net		143.204.215.88	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:55.421952963 CET	8.8.8.8	192.168.2.3	0xbb55	No error (0)	dl7g9llrghqi1.cloudfront.net		143.204.215.62	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:55.421972990 CET	8.8.8.8	192.168.2.3	0xc8f0	No error (0)	www-google-analytics.l.google.com		142.250.203.110	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:55.799837112 CET	8.8.8.8	192.168.2.3	0xc496	No error (0)	googleads.g.doubleclick.net		172.217.168.66	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:56.172349930 CET	8.8.8.8	192.168.2.3	0x8e88	No error (0)	stats.g.doubleclick.net	stats.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:39:56.172349930 CET	8.8.8.8	192.168.2.3	0x8e88	No error (0)	stats.l.doubleclick.net		108.177.127.154	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:56.172349930 CET	8.8.8.8	192.168.2.3	0x8e88	No error (0)	stats.l.doubleclick.net		108.177.127.157	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:56.172349930 CET	8.8.8.8	192.168.2.3	0x8e88	No error (0)	stats.l.doubleclick.net		108.177.127.155	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:56.172349930 CET	8.8.8.8	192.168.2.3	0x8e88	No error (0)	stats.l.doubleclick.net		108.177.127.156	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:56.315525055 CET	8.8.8.8	192.168.2.3	0x58c9	No error (0)	www.google.com		142.250.203.100	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:56.321007967 CET	8.8.8.8	192.168.2.3	0xf8c9	No error (0)	www.google.ae		142.250.203.99	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:56.346894979 CET	8.8.8.8	192.168.2.3	0x9469	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:39:56.346894979 CET	8.8.8.8	192.168.2.3	0x9469	No error (0)	star-mini.c10r.facebook.com		157.240.17.35	A (IP address)	IN (0x0001)
Jan 29, 2022 00:39:56.452373028 CET	8.8.8.8	192.168.2.3	0x59bd	No error (0)	888-uxn-063.mktoresp.com		192.28.147.68	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.514170885 CET	8.8.8.8	192.168.2.3	0xf217	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:06.514170885 CET	8.8.8.8	192.168.2.3	0xf217	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:06.514170885 CET	8.8.8.8	192.168.2.3	0xf217	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.514170885 CET	8.8.8.8	192.168.2.3	0xf217	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.514170885 CET	8.8.8.8	192.168.2.3	0xf217	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.514170885 CET	8.8.8.8	192.168.2.3	0xf217	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.514285088 CET	8.8.8.8	192.168.2.3	0x5233	No error (0)	conversation.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:06.514285088 CET	8.8.8.8	192.168.2.3	0x5233	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:06.514285088 CET	8.8.8.8	192.168.2.3	0x5233	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.514285088 CET	8.8.8.8	192.168.2.3	0x5233	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.514285088 CET	8.8.8.8	192.168.2.3	0x5233	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.514285088 CET	8.8.8.8	192.168.2.3	0x5233	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.518104076 CET	8.8.8.8	192.168.2.3	0xe90	No error (0)	customer.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:06.518104076 CET	8.8.8.8	192.168.2.3	0xe90	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.518104076 CET	8.8.8.8	192.168.2.3	0xe90	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.518104076 CET	8.8.8.8	192.168.2.3	0xe90	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.518104076 CET	8.8.8.8	192.168.2.3	0xe90	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.538570881 CET	8.8.8.8	192.168.2.3	0x97a4	No error (0)	targeting.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:06.538570881 CET	8.8.8.8	192.168.2.3	0x97a4	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:06.538570881 CET	8.8.8.8	192.168.2.3	0x97a4	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.538570881 CET	8.8.8.8	192.168.2.3	0x97a4	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.538570881 CET	8.8.8.8	192.168.2.3	0x97a4	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:06.538570881 CET	8.8.8.8	192.168.2.3	0x97a4	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:07.907587051 CET	8.8.8.8	192.168.2.3	0xd3a1	No error (0)	doubleverify.com		142.4.12.228	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:07.907625914 CET	8.8.8.8	192.168.2.3	0xeaac	No error (0)	bootstrap.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:07.907625914 CET	8.8.8.8	192.168.2.3	0xeaac	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:07.907625914 CET	8.8.8.8	192.168.2.3	0xeaac	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:07.907625914 CET	8.8.8.8	192.168.2.3	0xeaac	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:07.907625914 CET	8.8.8.8	192.168.2.3	0xeaac	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:07.907625914 CET	8.8.8.8	192.168.2.3	0xeaac	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:08.078963995 CET	8.8.8.8	192.168.2.3	0xcf1d	No error (0)	cdn.cookielaw.org		104.16.149.64	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:08.078963995 CET	8.8.8.8	192.168.2.3	0xcf1d	No error (0)	cdn.cookielaw.org		104.16.148.64	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:09.360369921 CET	8.8.8.8	192.168.2.3	0x6f43	No error (0)	embeds.driftcdn.com		143.204.215.111	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:09.360369921 CET	8.8.8.8	192.168.2.3	0x6f43	No error (0)	embeds.driftcdn.com		143.204.215.48	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:09.360369921 CET	8.8.8.8	192.168.2.3	0x6f43	No error (0)	embeds.driftcdn.com		143.204.215.26	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:09.360369921 CET	8.8.8.8	192.168.2.3	0x6f43	No error (0)	embeds.driftcdn.com		143.204.215.110	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:11.964690924 CET	8.8.8.8	192.168.2.3	0x4d56	No error (0)	1097428-28.chat.api.drift.com	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:11.964690924 CET	8.8.8.8	192.168.2.3	0x4d56	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		18.211.11.172	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:11.964690924 CET	8.8.8.8	192.168.2.3	0x4d56	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		54.92.243.39	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:11.964690924 CET	8.8.8.8	192.168.2.3	0x4d56	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		52.204.113.137	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:11.964690924 CET	8.8.8.8	192.168.2.3	0x4d56	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		54.163.70.187	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:11.964690924 CET	8.8.8.8	192.168.2.3	0x4d56	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		35.169.35.182	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:11.964690924 CET	8.8.8.8	192.168.2.3	0x4d56	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		52.206.3.166	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:11.964690924 CET	8.8.8.8	192.168.2.3	0x4d56	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		52.5.229.230	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:11.964690924 CET	8.8.8.8	192.168.2.3	0x4d56	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		52.1.13.196	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:13.639084101 CET	8.8.8.8	192.168.2.3	0x3021	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:13.639084101 CET	8.8.8.8	192.168.2.3	0x3021	No error (0)	googlehosted.l.googleusercontent.com		172.217.168.33	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:44.115833044 CET	8.8.8.8	192.168.2.3	0x38a9	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:44.157883883 CET	8.8.8.8	192.168.2.3	0xef9f	No error (0)	cm.g.doubleclick.net		172.217.168.66	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:44.378568888 CET	8.8.8.8	192.168.2.3	0x3038	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:44.378568888 CET	8.8.8.8	192.168.2.3	0x3038	No error (0)	pixel-origin.mathtag.com		185.29.134.248	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:44.378568888 CET	8.8.8.8	192.168.2.3	0x3038	No error (0)	pixel-origin.mathtag.com		185.29.132.245	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:44.378568888 CET	8.8.8.8	192.168.2.3	0x3038	No error (0)	pixel-origin.mathtag.com		185.29.132.241	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:44.378568888 CET	8.8.8.8	192.168.2.3	0x3038	No error (0)	pixel-origin.mathtag.com		185.29.134.244	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.002536058 CET	8.8.8.8	192.168.2.3	0x2e10	No error (0)	ib.adnxs.com	g.geogslb.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.002536058 CET	8.8.8.8	192.168.2.3	0x2e10	No error (0)	g.geogslb.com	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.002536058 CET	8.8.8.8	192.168.2.3	0x2e10	No error (0)	ib.anycast.adnxs.com		185.33.221.91	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.002536058 CET	8.8.8.8	192.168.2.3	0x2e10	No error (0)	ib.anycast.adnxs.com		185.33.221.13	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.002536058 CET	8.8.8.8	192.168.2.3	0x2e10	No error (0)	ib.anycast.adnxs.com		185.33.221.89	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.002536058 CET	8.8.8.8	192.168.2.3	0x2e10	No error (0)	ib.anycast.adnxs.com		185.33.221.88	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.002536058 CET	8.8.8.8	192.168.2.3	0x2e10	No error (0)	ib.anycast.adnxs.com		185.33.221.14	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.002536058 CET	8.8.8.8	192.168.2.3	0x2e10	No error (0)	ib.anycast.adnxs.com		185.33.220.240	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.002536058 CET	8.8.8.8	192.168.2.3	0x2e10	No error (0)	ib.anycast.adnxs.com		185.33.220.243	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.002536058 CET	8.8.8.8	192.168.2.3	0x2e10	No error (0)	ib.anycast.adnxs.com		185.33.220.216	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.002536058 CET	8.8.8.8	192.168.2.3	0x2e10	No error (0)	ib.anycast.adnxs.com		185.33.220.242	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.002536058 CET	8.8.8.8	192.168.2.3	0x2e10	No error (0)	ib.anycast.adnxs.com		185.33.221.53	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.002536058 CET	8.8.8.8	192.168.2.3	0x2e10	No error (0)	ib.anycast.adnxs.com		185.33.221.15	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.002536058 CET	8.8.8.8	192.168.2.3	0x2e10	No error (0)	ib.anycast.adnxs.com		185.33.223.38	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.011670113 CET	8.8.8.8	192.168.2.3	0xb3d3	No error (0)	image2.pubmatic.com	pug-lhrc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.011670113 CET	8.8.8.8	192.168.2.3	0xb3d3	No error (0)	pug-lhrc.pubmatic.com	pug-lhr.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.011670113 CET	8.8.8.8	192.168.2.3	0xb3d3	No error (0)	pug-lhr.pubmatic.com		185.64.190.80	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.014383078 CET	8.8.8.8	192.168.2.3	0xcbe7	No error (0)	eu-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.014383078 CET	8.8.8.8	192.168.2.3	0xcbe7	No error (0)	eu-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.016700029 CET	8.8.8.8	192.168.2.3	0xa8c3	No error (0)	dsum-sec.casalemedia.com	dsum-sec.casalemedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.017072916 CET	8.8.8.8	192.168.2.3	0xe242	No error (0)	pixel.advertising.com	prod.ups-adcom.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.017072916 CET	8.8.8.8	192.168.2.3	0xe242	No error (0)	prod.ups-adcom.aolp-ds-prd.aws.oath.cloud	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.017072916 CET	8.8.8.8	192.168.2.3	0xe242	No error (0)	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		3.127.158.112	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.017072916 CET	8.8.8.8	192.168.2.3	0xe242	No error (0)	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		3.70.77.10	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.017072916 CET	8.8.8.8	192.168.2.3	0xe242	No error (0)	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		18.196.172.172	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.017072916 CET	8.8.8.8	192.168.2.3	0xe242	No error (0)	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		18.157.252.145	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.017072916 CET	8.8.8.8	192.168.2.3	0xe242	No error (0)	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		3.64.208.15	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.017072916 CET	8.8.8.8	192.168.2.3	0xe242	No error (0)	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		18.156.184.150	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.017072916 CET	8.8.8.8	192.168.2.3	0xe242	No error (0)	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		18.185.44.17	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.017072916 CET	8.8.8.8	192.168.2.3	0xe242	No error (0)	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		35.158.233.132	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.032030106 CET	8.8.8.8	192.168.2.3	0xe2ba	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.039809942 CET	8.8.8.8	192.168.2.3	0x7563	No error (0)	x.bidswitch.net	elb-aws-fr-bruges-621602890.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.039809942 CET	8.8.8.8	192.168.2.3	0x7563	No error (0)	elb-aws-fr-bruges-621602890.eu-central-1.elb.amazonaws.com		18.193.160.53	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.039809942 CET	8.8.8.8	192.168.2.3	0x7563	No error (0)	elb-aws-fr-bruges-621602890.eu-central-1.elb.amazonaws.com		18.185.185.113	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.039809942 CET	8.8.8.8	192.168.2.3	0x7563	No error (0)	elb-aws-fr-bruges-621602890.eu-central-1.elb.amazonaws.com		3.121.107.137	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.039809942 CET	8.8.8.8	192.168.2.3	0x7563	No error (0)	elb-aws-fr-bruges-621602890.eu-central-1.elb.amazonaws.com		3.123.168.129	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.039809942 CET	8.8.8.8	192.168.2.3	0x7563	No error (0)	elb-aws-fr-bruges-621602890.eu-central-1.elb.amazonaws.com		18.195.140.72	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.039809942 CET	8.8.8.8	192.168.2.3	0x7563	No error (0)	elb-aws-fr-bruges-621602890.eu-central-1.elb.amazonaws.com		18.195.132.244	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.039809942 CET	8.8.8.8	192.168.2.3	0x7563	No error (0)	elb-aws-fr-bruges-621602890.eu-central-1.elb.amazonaws.com		3.125.210.171	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.039809942 CET	8.8.8.8	192.168.2.3	0x7563	No error (0)	elb-aws-fr-bruges-621602890.eu-central-1.elb.amazonaws.com		18.185.153.58	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.048460007 CET	8.8.8.8	192.168.2.3	0xd77a	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.066226006 CET	8.8.8.8	192.168.2.3	0xd000	No error (0)	pixel.tapad.com		35.227.248.159	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.167798996 CET	8.8.8.8	192.168.2.3	0xc367	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.175818920 CET	8.8.8.8	192.168.2.3	0x2987	No error (0)	ce.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.175818920 CET	8.8.8.8	192.168.2.3	0x2987	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.175818920 CET	8.8.8.8	192.168.2.3	0x2987	No error (0)	emeas.vap.lijit.com	oeu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.175818920 CET	8.8.8.8	192.168.2.3	0x2987	No error (0)	oeu.vap.lijit.com		216.52.2.30	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.175818920 CET	8.8.8.8	192.168.2.3	0x2987	No error (0)	oeu.vap.lijit.com		72.251.249.13	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.175818920 CET	8.8.8.8	192.168.2.3	0x2987	No error (0)	oeu.vap.lijit.com		72.251.249.9	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.175818920 CET	8.8.8.8	192.168.2.3	0x2987	No error (0)	oeu.vap.lijit.com		216.52.2.39	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.175818920 CET	8.8.8.8	192.168.2.3	0x2987	No error (0)	oeu.vap.lijit.com		216.52.2.19	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.175818920 CET	8.8.8.8	192.168.2.3	0x2987	No error (0)	oeu.vap.lijit.com		72.251.249.14	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.175818920 CET	8.8.8.8	192.168.2.3	0x2987	No error (0)	oeu.vap.lijit.com		216.52.2.48	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.330949068 CET	8.8.8.8	192.168.2.3	0xcadc	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.330949068 CET	8.8.8.8	192.168.2.3	0xcadc	No error (0)	rtb-csync-itx5.smartadserver.com		185.86.138.114	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.330949068 CET	8.8.8.8	192.168.2.3	0xcadc	No error (0)	rtb-csync-itx5.smartadserver.com		185.86.138.144	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.330949068 CET	8.8.8.8	192.168.2.3	0xcadc	No error (0)	rtb-csync-itx5.smartadserver.com		185.86.138.142	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.330949068 CET	8.8.8.8	192.168.2.3	0xcadc	No error (0)	rtb-csync-itx5.smartadserver.com		185.86.138.143	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.331821918 CET	8.8.8.8	192.168.2.3	0x2bde	No error (0)	uip.semasio.net		77.243.60.138	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.417408943 CET	8.8.8.8	192.168.2.3	0x8744	No error (0)	mwzeom.zeotap.com		104.22.25.87	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.417408943 CET	8.8.8.8	192.168.2.3	0x8744	No error (0)	mwzeom.zeotap.com		104.22.24.87	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.417408943 CET	8.8.8.8	192.168.2.3	0x8744	No error (0)	mwzeom.zeotap.com		172.67.13.182	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.442186117 CET	8.8.8.8	192.168.2.3	0x1436	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.442186117 CET	8.8.8.8	192.168.2.3	0x1436	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.442186117 CET	8.8.8.8	192.168.2.3	0x1436	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		3.126.56.137	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.442186117 CET	8.8.8.8	192.168.2.3	0x1436	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		18.156.0.31	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.451766014 CET	8.8.8.8	192.168.2.3	0x5cad	No error (0)	loadm.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.451766014 CET	8.8.8.8	192.168.2.3	0x5cad	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.451766014 CET	8.8.8.8	192.168.2.3	0x5cad	No error (0)	eu-west.load.exelator.com	load-euc1.exelator.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.451766014 CET	8.8.8.8	192.168.2.3	0x5cad	No error (0)	load-euc1.exelator.com		18.198.126.47	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.452339888 CET	8.8.8.8	192.168.2.3	0x4e1f	No error (0)	crb.kargo.com		3.121.106.122	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.452339888 CET	8.8.8.8	192.168.2.3	0x4e1f	No error (0)	crb.kargo.com		3.64.249.36	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.452339888 CET	8.8.8.8	192.168.2.3	0x4e1f	No error (0)	crb.kargo.com		18.194.89.156	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.553616047 CET	8.8.8.8	192.168.2.3	0xfa0f	No error (0)	ih.adscale.de		18.196.233.14	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.553616047 CET	8.8.8.8	192.168.2.3	0xfa0f	No error (0)	ih.adscale.de		54.93.80.4	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.553616047 CET	8.8.8.8	192.168.2.3	0xfa0f	No error (0)	ih.adscale.de		35.157.167.171	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.575077057 CET	8.8.8.8	192.168.2.3	0x2dc7	No error (0)	ad.sxp.smartclip.net		35.186.194.101	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.653898001 CET	8.8.8.8	192.168.2.3	0x964	No error (0)	su.addthis.com	m.addthisedge.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.653898001 CET	8.8.8.8	192.168.2.3	0x964	No error (0)	m.addthisedge.com	ds-m.addthisedge.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.658210039 CET	8.8.8.8	192.168.2.3	0xb91c	No error (0)	usermatch.krxd.net	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.658210039 CET	8.8.8.8	192.168.2.3	0xb91c	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		34.199.204.104	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.658210039 CET	8.8.8.8	192.168.2.3	0xb91c	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		34.228.104.79	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.658210039 CET	8.8.8.8	192.168.2.3	0xb91c	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		3.216.55.148	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.658210039 CET	8.8.8.8	192.168.2.3	0xb91c	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		54.198.22.4	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.658210039 CET	8.8.8.8	192.168.2.3	0xb91c	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		54.243.212.117	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.658210039 CET	8.8.8.8	192.168.2.3	0xb91c	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		52.202.221.27	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.658210039 CET	8.8.8.8	192.168.2.3	0xb91c	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		44.196.109.196	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.658210039 CET	8.8.8.8	192.168.2.3	0xb91c	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		52.5.75.50	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.658401012 CET	8.8.8.8	192.168.2.3	0x6cd9	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.658401012 CET	8.8.8.8	192.168.2.3	0x6cd9	No error (0)	idaas-ext.cph.liveintent.com		52.1.89.185	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.658401012 CET	8.8.8.8	192.168.2.3	0x6cd9	No error (0)	idaas-ext.cph.liveintent.com		54.88.18.204	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.658401012 CET	8.8.8.8	192.168.2.3	0x6cd9	No error (0)	idaas-ext.cph.liveintent.com		54.172.13.178	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.658401012 CET	8.8.8.8	192.168.2.3	0x6cd9	No error (0)	idaas-ext.cph.liveintent.com		3.229.102.111	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.658401012 CET	8.8.8.8	192.168.2.3	0x6cd9	No error (0)	idaas-ext.cph.liveintent.com		54.234.50.35	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.658401012 CET	8.8.8.8	192.168.2.3	0x6cd9	No error (0)	idaas-ext.cph.liveintent.com		18.215.139.109	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.658401012 CET	8.8.8.8	192.168.2.3	0x6cd9	No error (0)	idaas-ext.cph.liveintent.com		52.71.162.243	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.658401012 CET	8.8.8.8	192.168.2.3	0x6cd9	No error (0)	idaas-ext.cph.liveintent.com		54.86.196.175	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.661010981 CET	8.8.8.8	192.168.2.3	0x6a0c	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.661010981 CET	8.8.8.8	192.168.2.3	0x6a0c	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.661010981 CET	8.8.8.8	192.168.2.3	0x6a0c	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.661010981 CET	8.8.8.8	192.168.2.3	0x6a0c	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.670033932 CET	8.8.8.8	192.168.2.3	0x5818	No error (0)	sync.crwdcntrl.net		54.229.233.249	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.670033932 CET	8.8.8.8	192.168.2.3	0x5818	No error (0)	sync.crwdcntrl.net		52.19.22.209	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.670033932 CET	8.8.8.8	192.168.2.3	0x5818	No error (0)	sync.crwdcntrl.net		52.17.84.146	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.670033932 CET	8.8.8.8	192.168.2.3	0x5818	No error (0)	sync.crwdcntrl.net		34.249.68.36	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.670033932 CET	8.8.8.8	192.168.2.3	0x5818	No error (0)	sync.crwdcntrl.net		63.35.242.195	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.670033932 CET	8.8.8.8	192.168.2.3	0x5818	No error (0)	sync.crwdcntrl.net		52.215.102.174	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.670033932 CET	8.8.8.8	192.168.2.3	0x5818	No error (0)	sync.crwdcntrl.net		52.30.14.23	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.670033932 CET	8.8.8.8	192.168.2.3	0x5818	No error (0)	sync.crwdcntrl.net		52.30.140.199	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.704757929 CET	8.8.8.8	192.168.2.3	0x3e7a	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.704757929 CET	8.8.8.8	192.168.2.3	0x3e7a	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.704757929 CET	8.8.8.8	192.168.2.3	0x3e7a	No error (0)	edge-irl1.demdex.net	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.704757929 CET	8.8.8.8	192.168.2.3	0x3e7a	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.72.72.188	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.704757929 CET	8.8.8.8	192.168.2.3	0x3e7a	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.211.244.253	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.704757929 CET	8.8.8.8	192.168.2.3	0x3e7a	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.255.107.204	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.704757929 CET	8.8.8.8	192.168.2.3	0x3e7a	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.50.112.53	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.704757929 CET	8.8.8.8	192.168.2.3	0x3e7a	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.72.60.118	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.704757929 CET	8.8.8.8	192.168.2.3	0x3e7a	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.249.187.235	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.704757929 CET	8.8.8.8	192.168.2.3	0x3e7a	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.16.22.188	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.704757929 CET	8.8.8.8	192.168.2.3	0x3e7a	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.155.105.81	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.788158894 CET	8.8.8.8	192.168.2.3	0xac69	No error (0)	aa.agkn.com	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.788158894 CET	8.8.8.8	192.168.2.3	0xac69	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		52.56.115.248	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.788158894 CET	8.8.8.8	192.168.2.3	0xac69	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		18.135.59.14	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.788158894 CET	8.8.8.8	192.168.2.3	0xac69	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		18.135.35.213	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.788158894 CET	8.8.8.8	192.168.2.3	0xac69	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		18.168.101.220	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		51.89.21.8	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		141.95.3.40	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		54.36.109.166	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		51.89.42.86	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		54.36.109.49	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		51.89.21.31	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		54.36.109.186	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		141.95.34.105	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		54.36.109.183	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		54.36.109.48	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		51.195.5.232	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		54.36.109.22	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		51.89.21.5	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		51.195.5.234	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		51.89.7.205	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		51.195.5.231	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		51.89.21.21	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		51.89.7.199	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		51.75.146.199	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.792824984 CET	8.8.8.8	192.168.2.3	0x110c	No error (0)	id5-sync.com		51.89.42.88	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.972479105 CET	8.8.8.8	192.168.2.3	0xbbae	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.972479105 CET	8.8.8.8	192.168.2.3	0xbbae	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:45.972479105 CET	8.8.8.8	192.168.2.3	0xbbae	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		18.196.159.27	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:45.972479105 CET	8.8.8.8	192.168.2.3	0xbbae	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		3.122.111.84	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:46.076205969 CET	8.8.8.8	192.168.2.3	0xcfe5	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:46.076205969 CET	8.8.8.8	192.168.2.3	0xcfe5	No error (0)	uip.semasio.net		77.243.60.138	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:46.255651951 CET	8.8.8.8	192.168.2.3	0x8552	No error (0)	beacon.krxd.net	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:46.255651951 CET	8.8.8.8	192.168.2.3	0x8552	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		52.214.30.104	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:46.255651951 CET	8.8.8.8	192.168.2.3	0x8552	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		99.80.155.235	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:46.255651951 CET	8.8.8.8	192.168.2.3	0x8552	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		54.154.13.77	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:46.255651951 CET	8.8.8.8	192.168.2.3	0x8552	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		52.18.40.211	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:46.255651951 CET	8.8.8.8	192.168.2.3	0x8552	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		52.215.32.43	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:46.255651951 CET	8.8.8.8	192.168.2.3	0x8552	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		52.215.247.247	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:46.255651951 CET	8.8.8.8	192.168.2.3	0x8552	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		52.51.5.121	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:46.255651951 CET	8.8.8.8	192.168.2.3	0x8552	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		99.81.146.30	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:46.397460938 CET	8.8.8.8	192.168.2.3	0x2c58	No error (0)	sync.search.spotxchange.com	sync.search-gtm.spotxchange.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:46.397460938 CET	8.8.8.8	192.168.2.3	0x2c58	No error (0)	ams01.sync.search.spotxchange.com		185.94.180.125	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:46.397460938 CET	8.8.8.8	192.168.2.3	0x2c58	No error (0)	ams01.sync.search.spotxchange.com		185.94.180.126	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.046068907 CET	8.8.8.8	192.168.2.3	0x6e14	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:47.046068907 CET	8.8.8.8	192.168.2.3	0x6e14	No error (0)	idaas6.cph.liveintent.com		34.232.192.101	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.046068907 CET	8.8.8.8	192.168.2.3	0x6e14	No error (0)	idaas6.cph.liveintent.com		52.200.175.154	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.046068907 CET	8.8.8.8	192.168.2.3	0x6e14	No error (0)	idaas6.cph.liveintent.com		52.86.125.50	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.046068907 CET	8.8.8.8	192.168.2.3	0x6e14	No error (0)	idaas6.cph.liveintent.com		107.22.37.110	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.046068907 CET	8.8.8.8	192.168.2.3	0x6e14	No error (0)	idaas6.cph.liveintent.com		34.202.24.13	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.046068907 CET	8.8.8.8	192.168.2.3	0x6e14	No error (0)	idaas6.cph.liveintent.com		34.196.0.51	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.046068907 CET	8.8.8.8	192.168.2.3	0x6e14	No error (0)	idaas6.cph.liveintent.com		34.199.214.84	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.046068907 CET	8.8.8.8	192.168.2.3	0x6e14	No error (0)	idaas6.cph.liveintent.com		35.169.241.47	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	bid.g.doubleclick.net	ads-bid.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	ads-bid.l.doubleclick.net		108.177.119.155	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	ads-bid.l.doubleclick.net		108.177.119.154	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	ads-bid.l.doubleclick.net		108.177.119.157	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	ads-bid.l.doubleclick.net		108.177.119.156	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	ads-bid.l.doubleclick.net		108.177.126.155	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	ads-bid.l.doubleclick.net		108.177.126.156	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	ads-bid.l.doubleclick.net		108.177.126.157	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	ads-bid.l.doubleclick.net		108.177.126.154	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	ads-bid.l.doubleclick.net		108.177.127.157	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	ads-bid.l.doubleclick.net		108.177.127.154	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	ads-bid.l.doubleclick.net		108.177.127.155	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	ads-bid.l.doubleclick.net		108.177.127.156	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	ads-bid.l.doubleclick.net		172.217.218.154	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	ads-bid.l.doubleclick.net		172.217.218.157	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	ads-bid.l.doubleclick.net		172.217.218.156	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:47.725173950 CET	8.8.8.8	192.168.2.3	0x4dfc	No error (0)	ads-bid.l.doubleclick.net		142.251.31.155	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:53.500655890 CET	8.8.8.8	192.168.2.3	0xb6c1	No error (0)	gstaticadssl.l.google.com		216.58.215.227	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:53.584961891 CET	8.8.8.8	192.168.2.3	0x879a	No error (0)	cdn.cookielaw.org		104.16.149.64	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:53.584961891 CET	8.8.8.8	192.168.2.3	0x879a	No error (0)	cdn.cookielaw.org		104.16.148.64	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:53.595056057 CET	8.8.8.8	192.168.2.3	0xde6a	No error (0)	www-googletagmanager.l.google.com		172.217.168.8	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:53.815510988 CET	8.8.8.8	192.168.2.3	0xd6	No error (0)	geolocation.onetrust.com		104.20.184.68	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:53.815510988 CET	8.8.8.8	192.168.2.3	0xd6	No error (0)	geolocation.onetrust.com		104.20.185.68	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:53.932101011 CET	8.8.8.8	192.168.2.3	0xb02c	No error (0)	doubleverify.com		142.4.12.228	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:54.913535118 CET	8.8.8.8	192.168.2.3	0x967b	No error (0)	app-sj27.marketo.com	sj27.mktoedge.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:54.913535118 CET	8.8.8.8	192.168.2.3	0x967b	No error (0)	sj27.mktoedge.com		104.16.95.80	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:54.913535118 CET	8.8.8.8	192.168.2.3	0x967b	No error (0)	sj27.mktoedge.com		104.16.92.80	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:54.913535118 CET	8.8.8.8	192.168.2.3	0x967b	No error (0)	sj27.mktoedge.com		104.16.94.80	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:54.913535118 CET	8.8.8.8	192.168.2.3	0x967b	No error (0)	sj27.mktoedge.com		104.16.96.80	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:54.913535118 CET	8.8.8.8	192.168.2.3	0x967b	No error (0)	sj27.mktoedge.com		104.16.93.80	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:58.634023905 CET	8.8.8.8	192.168.2.3	0xdf40	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:40:58.634023905 CET	8.8.8.8	192.168.2.3	0xdf40	No error (0)	dl7g9llrghqi1.cloudfront.net		143.204.215.88	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:58.634023905 CET	8.8.8.8	192.168.2.3	0xdf40	No error (0)	dl7g9llrghqi1.cloudfront.net		143.204.215.107	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:58.634023905 CET	8.8.8.8	192.168.2.3	0xdf40	No error (0)	dl7g9llrghqi1.cloudfront.net		143.204.215.12	A (IP address)	IN (0x0001)
Jan 29, 2022 00:40:58.634023905 CET	8.8.8.8	192.168.2.3	0xdf40	No error (0)	dl7g9llrghqi1.cloudfront.net		143.204.215.62	A (IP address)	IN (0x0001)
Jan 29, 2022 00:41:07.885982037 CET	8.8.8.8	192.168.2.3	0x9a38	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:41:07.885982037 CET	8.8.8.8	192.168.2.3	0x9a38	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:41:07.885982037 CET	8.8.8.8	192.168.2.3	0x9a38	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)
Jan 29, 2022 00:41:07.885982037 CET	8.8.8.8	192.168.2.3	0x9a38	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)
Jan 29, 2022 00:41:07.885982037 CET	8.8.8.8	192.168.2.3	0x9a38	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)
Jan 29, 2022 00:41:07.885982037 CET	8.8.8.8	192.168.2.3	0x9a38	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)
Jan 29, 2022 00:41:14.736006021 CET	8.8.8.8	192.168.2.3	0x2b28	No error (0)	1097428-28.chat.api.drift.com	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:41:14.736006021 CET	8.8.8.8	192.168.2.3	0x2b28	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		54.160.53.38	A (IP address)	IN (0x0001)
Jan 29, 2022 00:41:14.736006021 CET	8.8.8.8	192.168.2.3	0x2b28	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		54.224.213.233	A (IP address)	IN (0x0001)
Jan 29, 2022 00:41:14.736006021 CET	8.8.8.8	192.168.2.3	0x2b28	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		34.199.16.167	A (IP address)	IN (0x0001)
Jan 29, 2022 00:41:14.736006021 CET	8.8.8.8	192.168.2.3	0x2b28	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		35.169.35.182	A (IP address)	IN (0x0001)
Jan 29, 2022 00:41:14.736006021 CET	8.8.8.8	192.168.2.3	0x2b28	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		54.235.105.77	A (IP address)	IN (0x0001)
Jan 29, 2022 00:41:14.736006021 CET	8.8.8.8	192.168.2.3	0x2b28	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		52.44.220.123	A (IP address)	IN (0x0001)
Jan 29, 2022 00:41:14.736006021 CET	8.8.8.8	192.168.2.3	0x2b28	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		52.5.229.230	A (IP address)	IN (0x0001)
Jan 29, 2022 00:41:14.736006021 CET	8.8.8.8	192.168.2.3	0x2b28	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		54.144.193.182	A (IP address)	IN (0x0001)
Jan 29, 2022 00:42:21.442435026 CET	8.8.8.8	192.168.2.3	0xa18e	No error (0)	1097428-28.chat.api.drift.com	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 29, 2022 00:42:21.442435026 CET	8.8.8.8	192.168.2.3	0xa18e	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		54.144.193.182	A (IP address)	IN (0x0001)
Jan 29, 2022 00:42:21.442435026 CET	8.8.8.8	192.168.2.3	0xa18e	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		23.20.3.210	A (IP address)	IN (0x0001)
Jan 29, 2022 00:42:21.442435026 CET	8.8.8.8	192.168.2.3	0xa18e	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		54.235.105.77	A (IP address)	IN (0x0001)
Jan 29, 2022 00:42:21.442435026 CET	8.8.8.8	192.168.2.3	0xa18e	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		35.173.207.119	A (IP address)	IN (0x0001)
Jan 29, 2022 00:42:21.442435026 CET	8.8.8.8	192.168.2.3	0xa18e	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		52.44.220.123	A (IP address)	IN (0x0001)
Jan 29, 2022 00:42:21.442435026 CET	8.8.8.8	192.168.2.3	0xa18e	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		18.211.11.172	A (IP address)	IN (0x0001)
Jan 29, 2022 00:42:21.442435026 CET	8.8.8.8	192.168.2.3	0xa18e	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		54.92.243.39	A (IP address)	IN (0x0001)
Jan 29, 2022 00:42:21.442435026 CET	8.8.8.8	192.168.2.3	0xa18e	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		107.21.34.119	A (IP address)	IN (0x0001)

Statistics

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4504, Parent PID: 3088

General

Target ID:	0
Start time:	00:39:45
Start date:	29/01/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "https://vast.doubleverify.com
Imagebase:	0x7ff68b0a0000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Analysis Process: chrome.exePID: 5536, Parent PID: 4504

General

Target ID:	2
Start time:	00:39:46
Start date:	29/01/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1556,10421634681798175458,17881213341508085727,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1912 /prefetch:8
Imagebase:	0x7ff68b0a0000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Network device logs, Network intrusion detection system, Packet capture, Process use of network, SSL/TLS inspection, Web proxy
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://vast.doubleverify.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Overview

Sigma Overview

Jbx Signature Overview

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic

C:\Users\user\AppData\Local\Google\Chrome\User Data\26d7a466-5e84-422f-996f-a44aed3ea76c.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\430a047b-925e-4288-acf9-f459cb004e0d.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\4a27128d-4f3a-4fa8-9780-a7b78c954e9a.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\731df75b-fdff-42d8-a930-de3199a15e1a.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\92d99af9-5cd2-45e2-b0b8-4924ca9adc2c.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\03bf8c65-34d3-4187-91ed-5f490b6ae118.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\07210318-b20d-4e66-9dfd-f79956596aaa.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2a642e9b-962a-49f6-a789-33d4c37eb689.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2bc5ec5a-e8da-4208-8c6e-c49c18730eb8.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\32de835e-7ff1-4ca3-8069-4618f972d5c2.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\39e79b8f-7526-430e-a2ff-e7e9b08e4e76.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3b2faecd-cfef-4475-a0c2-5d54dc7aed7d.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3cf77b19-3fcc-4286-ae4d-378b02d0e7c4.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\49606118-7129-4ab9-ba1d-0da2ef0b2339.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6f20e909-a37a-4b99-9c55-831f728c10f3.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8230b8a8-8299-4894-97ce-71488b8617ee.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9513fb46-5589-4918-8c36-c9b0b91b07fe.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\96d46350-52b7-4243-a489-bd0c8c0d804c.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9cdabed3-67a7-45bc-8e7d-0a3013992d18.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9fed889c-55e5-4a22-8328-4eb94915b7f6.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old.. (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State. (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)

Windows Analysis Report
https://vast.doubleverify.com