Free Automated Malware Analysis Service - powered by Falcon Sandbox - Viewing online file analysis results for 'S-31_t31-Reporte ISSSTE-GLOBAL-2021-08-13-0019.csv'

no specific threat

AV Detection: Marked as clean

S-31_t31-Reporte ISSSTE-GLOBAL-2021-08-13-0019.csv

This report is generated from a file or URL submitted to this webservice on August 19th 2021 22:23:37 (UTC)
Guest System: Windows 7 64 bit, Professional, 6.1 (build 7601), Service Pack 1
Report generated by Falcon Sandbox v8.48.13 © Hybrid Analysis

Overview Sample unavailable Re-analyze Hash Seen Before Show Similar Samples Request Report Deletion

Incident Response

MITRE ATT&CK™ Techniques Detection

This report has 9 indicators that were mapped to 5 attack techniques and 4 tactics. View all details

Persistence
ATT&CK ID	Name	Tactics	Description	Malicious Indicators	Suspicious Indicators	Informative Indicators
T1179	Hooking	Persistence Privilege Escalation Credential Access	Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources. Learn more			Loads rich edit control libraries Installs hooks/patches the running process Hooks API calls
Privilege Escalation
ATT&CK ID	Name	Tactics	Description	Malicious Indicators	Suspicious Indicators	Informative Indicators
T1179	Hooking	Persistence Privilege Escalation Credential Access	Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources. Learn more			Loads rich edit control libraries Installs hooks/patches the running process Hooks API calls
Credential Access
ATT&CK ID	Name	Tactics	Description	Malicious Indicators	Suspicious Indicators	Informative Indicators
T1179	Hooking	Persistence Privilege Escalation Credential Access	Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources. Learn more			Loads rich edit control libraries Installs hooks/patches the running process Hooks API calls
Discovery
ATT&CK ID	Name	Tactics	Description	Malicious Indicators	Suspicious Indicators	Informative Indicators
T1012	Query Registry	Discovery	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software. Learn more			Reads the active computer name Reads information about supported languages Reads the cryptographic machine GUID Queries sensitive IE security settings Reads the registry for installed applications
T1010	Application Window Discovery	Discovery	Adversaries may attempt to get a listing of open application windows. Learn more			Scanning for window names

Indicators

Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details.

Suspicious Indicators 2
Network Related
- Found potential IP address in binary/memory
  
  details
  
  Potential IP "134.122.50.220" found in string "" 34 ","134.122.50.220","3.32 GB","1 ""
  Potential IP "51.159.139.230" found in string "" 36 ","51.159.139.230","2.82 GB","1 ""
  Potential IP "213.108.110.74" found in string "" 45 ","213.108.110.74","2.07 GB","2 ""
  Potential IP "69.36.182.18" found in string "" 48 ","69.36.182.18","1.95 GB","2 ""
  Potential IP "37.218.246.181" found in string "" 61 ","37.218.246.181","1.36 GB","3 ""
  Potential IP "213.108.105.29" found in string "" 62 ","213.108.105.29","1.28 GB","2 ""
  Potential IP "51.15.46.81" found in string "" 63 ","51.15.46.81","1.27 GB","3 ""
  Potential IP "149.154.175.57" found in string "" 66 ","149.154.175.57","1.24 GB","1
  526 ""
  Potential IP "167.88.113.201" found in string "" 74 ","167.88.113.201","1.13 GB","3 ""
  Potential IP "162.220.51.111" found in string "" 76 ","162.220.51.111","1.07 GB","18 ""
  Potential IP "37.46.114.67" found in string "" 85 ","37.46.114.67","949.90 MB","1 ""
  Potential IP "192.241.210.123" found in string "" 88 ","192.241.210.123","883.74 MB","3 ""
  Potential IP "173.230.154.208" found in string "" 90 ","173.230.154.208","874.93 MB","1 ""
  Potential IP "128.199.231.58" found in string "" 91 ","128.199.231.58","867.14 MB","3 ""
  Potential IP "198.199.93.22" found in string "" 92 ","198.199.93.22","837.23 MB","2 ""
  Potential IP "165.227.88.29" found in string "" 97 ","165.227.88.29","813.17 MB","5 ""
  Potential IP "185.10.56.98" found in string "" 103 ","185.10.56.98","734.64 MB","1 ""
  Potential IP "37.120.147.190" found in string "" 104 ","37.120.147.190","732.19 MB","4 ""
  Potential IP "77.68.8.112" found in string "" 108 ","77.68.8.112","686.17 MB","3 ""
  Potential IP "104.17.122.114" found in string "" 109 ","104.17.122.114","674.77 MB","23 ""
  Potential IP "104.19.214.83" found in string "" 112 ","104.19.214.83","663.45 MB","86 ""
  Potential IP "172.98.73.39" found in string "" 113 ","172.98.73.39","663.29 MB","5 ""
  Potential IP "192.241.255.160" found in string "" 114 ","192.241.255.160","661.32 MB","1 ""
  Potential IP "161.35.135.178" found in string "" 116 ","161.35.135.178","640.99 MB","14 ""
  Potential IP "37.120.157.74" found in string "" 123 ","37.120.157.74","588.57 MB","4 ""
  Potential IP "107.161.22.82" found in string "" 124 ","107.161.22.82","585.30 MB","1 ""
  Potential IP "13.107.42.11" found in string "" 127 ","13.107.42.11","549.58 MB","1
  593 ""
  Potential IP "196.245.9.154" found in string "" 129 ","196.245.9.154","544.41 MB","6 ""
  Potential IP "104.17.228.2" found in string "" 134 ","104.17.228.2","525.04 MB","84 ""
  Potential IP "74.82.60.156" found in string "" 135 ","74.82.60.156","521.26 MB","2 ""
  Potential IP "74.82.60.35" found in string "" 141 ","74.82.60.35","482.71 MB","4 ""
  Potential IP "196.245.9.138" found in string "" 143 ","196.245.9.138","449.51 MB","10 ""
  Potential IP "142.250.82.16" found in string "" 145 ","142.250.82.16","445.43 MB","230 ""
  Potential IP "62.151.178.229" found in string "" 148 ","62.151.178.229","422.01 MB","3 ""
  Potential IP "13.107.6.171" found in string "" 149 ","13.107.6.171","418.03 MB","154 ""
  Potential IP "192.160.45.11" found in string "" 1 ","192.160.45.11","22.11 GB","1
  813 ""
  Potential IP "192.168.53.174" found in string "" 2 ","192.168.53.174","9.79 GB","1
  270 ""
  Potential IP "192.168.28.77" found in string "" 3 ","192.168.28.77","9.60 GB","2
  087 ""
  Potential IP "192.168.5.46" found in string "" 4 ","192.168.5.46","8.11 GB","1
  385 ""
  Potential IP "192.160.126.226" found in string "" 5 ","192.160.126.226","7.83 GB","1
  860 ""
  Potential IP "192.168.13.189" found in string "" 6 ","192.168.13.189","5.64 GB","1
  128 ""
  Potential IP "192.160.172.44" found in string "" 7 ","192.160.172.44","4.36 GB","1
  974 ""
  Potential IP "192.168.52.69" found in string "" 8 ","192.168.52.69","4.07 GB","4
  711 ""
  Potential IP "192.162.56.214" found in string "" 9 ","192.162.56.214","4.03 GB","977 ""
  Potential IP "192.160.143.199" found in string "" 10 ","192.160.143.199","3.97 GB","1
  485 ""
  Potential IP "192.168.13.245" found in string "" 11 ","192.168.13.245","3.33 GB","102 ""
  Potential IP "192.160.129.78" found in string "" 12 ","192.160.129.78","3.25 GB","2
  101 ""
  Potential IP "192.168.108.203" found in string "" 13 ","192.168.108.203","2.89 GB","2
  833 ""
  Potential IP "192.168.15.7" found in string "" 14 ","192.168.15.7","2.87 GB","1
  320 ""
  Potential IP "192.168.12.23" found in string "" 15 ","192.168.12.23","2.83 GB","106 ""
  Potential IP "192.161.231.202" found in string "" 16 ","192.161.231.202","2.82 GB","1
  220 ""
  Potential IP "192.160.164.89" found in string "" 17 ","192.160.164.89","2.79 GB","2
  224 ""
  Potential IP "192.167.104.81" found in string "" 18 ","192.167.104.81","2.74 GB","1
  881 ""
  Potential IP "192.162.20.111" found in string "" 19 ","192.162.20.111","2.69 GB","215 ""
  Potential IP "192.162.17.31" found in string "" 20 ","192.162.17.31","2.64 GB","756 ""
  Potential IP "192.160.122.68" found in string "" 21 ","192.160.122.68","2.59 GB","8
  036 ""
  Potential IP "192.161.155.234" found in string "" 22 ","192.161.155.234","2.46 GB","5
  573 ""
  Potential IP "192.168.5.60" found in string "" 23 ","192.168.5.60","2.39 GB","1
  156 ""
  Potential IP "192.166.149.125" found in string "" 24 ","192.166.149.125","2.35 GB","10
  671 ""
  Potential IP "192.167.105.57" found in string "" 25 ","192.167.105.57","2.32 GB","2
  308 ""
  Potential IP "192.168.29.210" found in string "" 26 ","192.168.29.210","2.28 GB","206 ""
  Potential IP "192.160.128.142" found in string "" 27 ","192.160.128.142","2.21 GB","2
  156 ""
  Potential IP "192.168.182.126" found in string "" 28 ","192.168.182.126","2.19 GB","937 ""
  Potential IP "192.161.111.5" found in string "" 29 ","192.161.111.5","2.16 GB","406 ""
  Potential IP "192.168.5.245" found in string "" 30 ","192.168.5.245","2.14 GB","4
  208 ""
  Potential IP "192.160.45.11" found in string "" 1 ","192.160.45.11","""
  Potential IP "13.107.136.9" found in string "" 1 ","13.107.136.9","20.42 GB","Microsoft.SharePoint""
  Potential IP "40.108.138.81" found in string "" 2 ","40.108.138.81","1.60 GB","Microsoft.SharePoint""
  Potential IP "104.26.15.11" found in string "" 3 ","104.26.15.11","7.38 MB","HTTPS.BROWSER""
  Potential IP "201.148.67.43" found in string "" 4 ","201.148.67.43","6.88 MB","Microsoft.Portal""
  Potential IP "34.104.35.123" found in string "" 5 ","34.104.35.123","5.38 MB","Google.Services""
  Potential IP "13.107.4.50" found in string "" 6 ","13.107.4.50","5.10 MB","Microsoft.Portal""
  Potential IP "201.148.67.57" found in string "" 7 ","201.148.67.57","4.90 MB","Microsoft.Portal""
  Potential IP "201.148.67.27" found in string "" 8 ","201.148.67.27","4.34 MB","Microsoft.Portal""
  Potential IP "142.250.81.101" found in string "" 9 ","142.250.81.101","4.22 MB","Gmail""
  Potential IP "201.148.67.49" found in string "" 10 ","201.148.67.49","3.27 MB","Microsoft.Portal""
  Potential IP "192.168.13.245" found in string "" 1 ","192.168.13.245","""
  Potential IP "134.122.50.220" found in string "" 1 ","134.122.50.220","3.32 GB","SSL_TLSv1.2""
  Potential IP "23.59.42.244" found in string "" 2 ","23.59.42.244","241.70 KB","TrendMicro.WFBS""
  Potential IP "52.216.130.181" found in string "" 3 ","52.216.130.181","221.61 KB","Amazon.AWS_S3""
  Potential IP "40.97.120.210" found in string "" 4 ","40.97.120.210","200.07 KB","Microsoft.Office.365.Portal""
  Potential IP "52.216.186.245" found in string "" 5 ","52.216.186.245","192.24 KB","Amazon.AWS_S3""
  Potential IP "192.168.12.23" found in string "" 1 ","192.168.12.23","""
  Potential IP "51.159.139.230" found in string "" 1 ","51.159.139.230","2.82 GB","SSL_TLSv1.2""
  Potential IP "23.59.57.124" found in string "" 2 ","23.59.57.124","2.75 MB","TrendMicro.WFBS""
  Potential IP "52.96.121.146" found in string "" 3 ","52.96.121.146","303.06 KB","Microsoft.Office.365.Portal""
  Potential IP "40.97.120.210" found in string "" 4 ","40.97.120.210","242.53 KB","Microsoft.Office.365.Portal""
  Potential IP "40.97.120.130" found in string "" 5 ","40.97.120.130","191.12 KB","Microsoft.Office.365.Portal""
  Potential IP "40.97.199.114" found in string "" 6 ","40.97.199.114","188.60 KB","Microsoft.Office.365.Portal""
  Potential IP "52.96.57.34" found in string "" 7 ","52.96.57.34","187.66 KB","Microsoft.Office.365.Portal""
  Potential IP "52.96.121.226" found in string "" 8 ","52.96.121.226","184.81 KB","Microsoft.Office.365.Portal""
  Potential IP "54.236.92.29" found in string "" 9 ","54.236.92.29","167.38 KB","TrendMicro.WFBS""
  Potential IP "192.168.66.143" found in string "" 1 ","192.168.66.143","""
  Potential IP "52.96.121.146" found in string "" 1 ","52.96.121.146","807.78 KB","Microsoft.Office.365.Portal""
  Potential IP "23.59.57.124" found in string "" 2 ","23.59.57.124","529.92 KB","TrendMicro.WFBS""
  Potential IP "216.58.193.4" found in string "" 3 ","216.58.193.4","430.62 KB","Google.Services""
  Potential IP "52.96.103.34" found in string "" 4 ","52.96.103.34","422.66 KB","Microsoft.Office.365.Portal""
  Potential IP "40.97.120.162" found in string "" 5 ","40.97.120.162","339.79 KB","Microsoft.Office.365.Portal""
  Potential IP "23.59.42.244" found in string "" 6 ","23.59.42.244","164.84 KB","TrendMicro.WFBS""
  Potential IP "40.97.120.242" found in string "" 7 ","40.97.120.242","140.10 KB","Microsoft.Office.365.Portal""
  Potential IP "40.97.212.2" found in string "" 8 ","40.97.212.2","14.97 KB","Microsoft.Office.365.Portal""
  Potential IP "192.168.53.29" found in string "" 1 ","192.168.53.29","""
  Potential IP "213.108.110.74" found in string "" 1 ","213.108.110.74","2.07 GB","SSL_TLSv1.2""
  Potential IP "23.59.57.124" found in string "" 2 ","23.59.57.124","1
  016.90 KB","TrendMicro.WFBS""
  Potential IP "52.96.57.34" found in string "" 3 ","52.96.57.34","526.72 KB","Microsoft.Office.365.Portal""
  Potential IP "52.217.95.144" found in string "" 4 ","52.217.95.144","324.65 KB","Amazon.AWS_S3""
  Potential IP "52.96.121.146" found in string "" 5 ","52.96.121.146","315.92 KB","Microsoft.Office.365.Portal""
  Potential IP "40.97.96.2" found in string "" 6 ","40.97.96.2","304.48 KB","Microsoft.Office.365.Portal""
  Potential IP "52.96.103.34" found in string "" 7 ","52.96.103.34","270.48 KB","Microsoft.Office.365.Portal""
  Potential IP "52.96.121.162" found in string "" 8 ","52.96.121.162","192.26 KB","Microsoft.Office.365.Portal""
  Potential IP "52.21.247.250" found in string "" 9 ","52.21.247.250","178.18 KB","TrendMicro.WFBS""
  Potential IP "52.96.8.130" found in string "" 10 ","52.96.8.130","102.96 KB","Microsoft.Office.365.Portal""
  Potential IP "192.164.49.205" found in string "" 1 ","192.164.49.205","""
  Potential IP "128.199.231.58" found in string "" 1 ","128.199.231.58","867.14 MB","HTTP.BROWSER""
  Potential IP "128.199.231.58" found in string "" 1 ","128.199.231.58",,"909257282""
  Potential IP "192.165.219.25" found in string "" 1 ","192.165.219.25","""
  Potential IP "69.36.182.18" found in string "" 1 ","69.36.182.18","1.95 GB","SSL_TLSv1.3""
  Potential IP "23.59.57.124" found in string "" 2 ","23.59.57.124","1.39 MB","TrendMicro.WFBS""
  Potential IP "72.21.91.29" found in string "" 3 ","72.21.91.29","1.25 MB","Root.Certificate.URL""
  Potential IP "23.59.42.244" found in string "" 4 ","23.59.42.244","236.80 KB","TrendMicro.WFBS""
  Potential IP "192.168.12.211" found in string "" 1 ","192.168.12.211","""
  Potential IP "37.46.114.67" found in string "" 1 ","37.46.114.67","949.90 MB","SSL_TLSv1.2""
  Potential IP "72.21.91.29" found in string "" 2 ","72.21.91.29","45.98 MB","Root.Certificate.URL""
  Potential IP "23.59.57.124" found in string "" 3 ","23.59.57.124","1.04 MB","TrendMicro.WFBS""
  Potential IP "192.168.28.77" found in string "" 1 ","192.168.28.77","""
  Potential IP "216.58.195.238" found in string "" 1 ","216.58.195.238","9.58 GB","Google.Services""
  Potential IP "69.147.65.252" found in string "" 2 ","69.147.65.252","3.24 MB","Yahoo.Services""
  Potential IP "142.250.81.109" found in string "" 3 ","142.250.81.109","2.25 MB","Google.Services""
  Potential IP "172.217.15.3" found in string "" 4 ","172.217.15.3","2.05 MB","Google.Services""
  Potential IP "142.250.68.206" found in string "" 5 ","142.250.68.206","1.82 MB","Google.Drive""
  Potential IP "152.195.12.131" found in string "" 6 ","152.195.12.131","1.67 MB","Yahoo.Services""
  Potential IP "142.250.81.14" found in string "" 7 ","142.250.81.14","1.33 MB","Google.Services""
  Potential IP "74.6.143.26" found in string "" 8 ","74.6.143.26","1.26 MB","Yahoo.Services""
  Potential IP "69.147.65.251" found in string "" 9 ","69.147.65.251","925.54 KB","Yahoo.Services""
  Potential IP "23.205.36.135" found in string "" 10 ","23.205.36.135","869.57 KB","Adobe.Web""
  Potential IP "192.160.126.226" found in string "" 1 ","192.160.126.226","""
  Potential IP "52.96.122.98" found in string "" 1 ","52.96.122.98","3.40 GB","Microsoft.Office.365.Portal""
  Potential IP "52.96.122.242" found in string "" 2 ","52.96.122.242","1.98 GB","Microsoft.Office.365.Portal""
  Potential IP "52.96.57.34" found in string "" 3 ","52.96.57.34","1.74 GB","Microsoft.Office.365.Portal""
  Potential IP "40.97.121.2" found in string "" 4 ","40.97.121.2","435.53 MB","Microsoft.Office.365.Portal""
  Potential IP "52.96.103.2" found in string "" 5 ","52.96.103.2","196.95 MB","Microsoft.Office.365.Portal""
  Potential IP "23.45.200.63" found in string "" 6 ","23.45.200.63","16.57 MB","Microsoft.Office.365.Portal""
  Potential IP "201.148.67.56" found in string "" 7 ","201.148.67.56","11.01 MB","Microsoft.Office.Online""
  Potential IP "40.97.120.210" found in string "" 8 ","40.97.120.210","9.56 MB","Microsoft.Office.365.Portal""
  Potential IP "52.96.57.18" found in string "" 9 ","52.96.57.18","9.28 MB","Microsoft.Office.365.Portal""
  Potential IP "23.59.57.124" found in string "" 10 ","23.59.57.124","6.19 MB","TrendMicro.WFBS""
  Potential IP "192.160.172.44" found in string "" 1 ","192.160.172.44","""
  Potential IP "142.250.81.14" found in string "" 1 ","142.250.81.14","4.03 GB","Google.Services""
  Potential IP "172.217.15.1" found in string "" 2 ","172.217.15.1","273.41 MB","Google.Accounts""
  Potential IP "216.58.193.14" found in string "" 3 ","216.58.193.14","18.40 MB","HTTPS.BROWSER""
  Potential IP "216.58.195.225" found in string "" 4 ","216.58.195.225","9.94 MB","Google.Accounts""
  Potential IP "23.59.57.124" found in string "" 5 ","23.59.57.124","4.61 MB","TrendMicro.WFBS""
  Potential IP "142.250.81.46" found in string "" 6 ","142.250.81.46","3.18 MB","Google.Play""
  Potential IP "69.147.65.251" found in string "" 7 ","69.147.65.251","3.07 MB","Yahoo.Mail""
  Potential IP "142.250.81.4" found in string "" 8 ","142.250.81.4","3.07 MB","Google.Services""
  Potential IP "216.58.195.234" found in string "" 9 ","216.58.195.234","1.41 MB","Google.Services""
  Potential IP "69.147.65.252" found in string "" 10 ","69.147.65.252","1.16 MB","Yahoo.Mail""
  Potential IP "192.163.161.30" found in string "" 1 ","192.163.161.30","""
  Potential IP "23.205.36.108" found in string "" 1 ","23.205.36.108","111.91 MB","Microsoft.Portal""
  Potential IP "34.104.35.123" found in string "" 2 ","34.104.35.123","81.15 MB","Google.Services""
  Potential IP "23.205.37.99" found in string "" 3 ","23.205.37.99","28.84 MB","Microsoft.Office.365.Portal""
  Potential IP "142.250.81.74" found in string "" 4 ","142.250.81.74","6.55 MB","Google.Services""
  Potential IP "172.217.15.1" found in string "" 5 ","172.217.15.1","6.46 MB","Google.Accounts""
  Potential IP "13.225.51.82" found in string "" 6 ","13.225.51.82","2.37 MB","HTTPS.BROWSER""
  Potential IP "52.182.141.63" found in string "" 7 ","52.182.141.63","2.15 MB","Microsoft.Portal""
  Potential IP "20.50.201.195" found in string "" 8 ","20.50.201.195","1.45 MB","Microsoft.Portal""
  Potential IP "151.101.129.63" found in string "" 9 ","151.101.129.63","1.18 MB","HTTPS.BROWSER""
  Potential IP "142.250.68.208" found in string "" 10 ","142.250.68.208","1.09 MB","Google.Services""
  Potential IP "192.168.53.174" found in string "" 1 ","192.168.53.174","""
  Potential IP "13.107.136.9" found in string "" 1 ","13.107.136.9","4.10 GB","Microsoft.SharePoint""
  Potential IP "40.108.138.81" found in string "" 2 ","40.108.138.81","3.35 GB","Microsoft.SharePoint""
  Potential IP "13.107.138.9" found in string "" 3 ","13.107.138.9","1.89 GB","Microsoft.SharePoint""
  Potential IP "51.105.71.136" found in string "" 4 ","51.105.71.136","36.14 MB","Microsoft.Portal""
  Potential IP "20.42.65.85" found in string "" 5 ","20.42.65.85","25.49 MB","Microsoft.Portal""
  Potential IP "104.208.16.90" found in string "" 6 ","104.208.16.90","23.86 MB","Microsoft.Portal""
  Potential IP "20.42.73.24" found in string "" 7 ","20.42.73.24","23.51 MB","Microsoft.Portal""
  Potential IP "20.189.173.13" found in string "" 8 ","20.189.173.13","19.85 MB","Microsoft.Portal""
  Potential IP "52.168.117.170" found in string "" 9 ","52.168.117.170","19.13 MB","Microsoft.Portal""
  Potential IP "20.189.173.2" found in string "" 10 ","20.189.173.2","18.66 MB","Microsoft.Portal""
  Potential IP "192.160.143.199" found in string "" 1 ","192.160.143.199","""
  Potential IP "52.96.121.98" found in string "" 1 ","52.96.121.98","1.68 GB","Microsoft.Office.365.Portal""
  Potential IP "52.96.55.242" found in string "" 2 ","52.96.55.242","1
  016.31 MB","Microsoft.Office.365.Portal""
  Potential IP "52.96.121.162" found in string "" 3 ","52.96.121.162","482.89 MB","Microsoft.Office.365.Portal""
  Potential IP "52.96.10.242" found in string "" 4 ","52.96.10.242","339.45 MB","Microsoft.Office.365.Portal""
  Potential IP "52.96.57.18" found in string "" 5 ","52.96.57.18","319.53 MB","Microsoft.Office.365.Portal""
  Potential IP "52.96.103.2" found in string "" 6 ","52.96.103.2","77.29 MB","Microsoft.Office.365.Portal""
  Potential IP "142.250.81.14" found in string "" 7 ","142.250.81.14","10.70 MB","Google.Play""
  Potential IP "142.250.68.206" found in string "" 8 ","142.250.68.206","9.96 MB","Google.Drive""
  Potential IP "172.67.70.93" found in string "" 9 ","172.67.70.93","8.98 MB","HTTPS.BROWSER""
  Potential IP "23.205.36.58" found in string "" 10 ","23.205.36.58","7.35 MB","Microsoft.Office.Online""
  Potential IP "192.162.65.251" found in string "" 1 ","192.162.65.251","""
  Potential IP "213.108.105.29" found in string "" 1 ","213.108.105.29","1.28 GB","SSL_TLSv1.2""
  Potential IP "34.104.35.123" found in string "" 2 ","34.104.35.123","79.61 MB","Google.Services""
  Potential IP "142.250.81.36" found in string "" 3 ","142.250.81.36","2.08 MB","Google.Services""
  Potential IP "216.58.193.3" found in string "" 4 ","216.58.193.3","1
  013.83 KB","Google.Services""
  Potential IP "142.250.81.3" found in string "" 5 ","142.250.81.3","743.80 KB","Google.Services""
  Potential IP "172.217.15.3" found in string "" 6 ","172.217.15.3","551.69 KB","Google.Services""
  Potential IP "216.58.195.238" found in string "" 7 ","216.58.195.238","406.35 KB","Google.Services""
  Potential IP "23.64.170.15" found in string "" 8 ","23.64.170.15","195.95 KB","Microsoft.Office.Online""
  Potential IP "216.58.217.3" found in string "" 9 ","216.58.217.3","154.55 KB","Google.Services""
  Potential IP "23.205.37.227" found in string "" 10 ","23.205.37.227","149.67 KB","Microsoft.Office.Online""
  
  source
  
  File/Memory
  
  relevance
  
  3/10
Spyware/Information Retrieval
- Found an instant messenger related domain
  
  details
  
  "" 31 ","skype.com","4.45 GB","165
  691 "" (Indicator: "skype.com"; File: "3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin")
  "" 32 ","telegram.org","4.22 GB","1
  271 "" (Indicator: "telegram.org"; File: "3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin")
  "" 59 ","whatsapp.com","1.50 GB","316 "" (Indicator: "whatsapp.com"; File: "3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin")
  
  source
  
  File/Memory
  
  relevance
  
  10/10

Informative 17
Environment Awareness
- Queries the installation properties of user installed products
  
  details
  
  "EXCEL.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INSTALLER\USERDATA\S-1-5-18\PRODUCTS\00004119210000000100000000F01FEC\INSTALLPROPERTIES"; Key: "WINDOWSINSTALLER")
  
  source
  
  Registry Access
  
  relevance
  
  10/10
- Reads the active computer name
  
  details
  
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\COMPUTERNAME\ACTIVECOMPUTERNAME"; Key: "COMPUTERNAME")
  
  source
  
  Registry Access
  
  relevance
  
  5/10
  
  ATT&CK ID
  
  T1012 (Show technique in the MITRE ATT&CK™ matrix)
- Reads the cryptographic machine GUID
  
  details
  
  "EXCEL.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\CRYPTOGRAPHY"; Key: "MACHINEGUID")
  
  source
  
  Registry Access
  
  relevance
  
  10/10
  
  ATT&CK ID
  
  T1012 (Show technique in the MITRE ATT&CK™ matrix)
- Reads the registry for installed applications
  
  details
  
  "EXCEL.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\EXCEL.EXE"; Key: "DONTUSEDESKTOPCHANGEROUTER")
  
  source
  
  Registry Access
  
  relevance
  
  10/10
  
  ATT&CK ID
  
  T1012 (Show technique in the MITRE ATT&CK™ matrix)
General
- Creates mutants
  
  details
  
  "Global\552FFA80-3393-423d-8671-7BA046BB5906"
  "KYIMEShareCachedData.MutexObject.U1b8pdT"
  "Local\x64_10MU_ACBPIDS_S-1-5-5-0-69661"
  "KYTransactionServer.MutexObject.U1b8pdT"
  "Local\ZonesLockedCacheCounterMutex"
  "Local\x64_10MU_ACB10_S-1-5-5-0-69661"
  "Local\ZonesCacheCounterMutex"
  "\Sessions\1\BaseNamedObjects\Global\552FFA80-3393-423d-8671-7BA046BB5906"
  
  source
  
  Created Mutant
  
  relevance
  
  3/10
- Loads rich edit control libraries
  
  details
  
  "EXCEL.EXE" loaded module "%COMMONPROGRAMFILES%\Microsoft Shared\OFFICE14\RICHED20.DLL" at F5DD0000
  
  source
  
  Loaded Module
  
  ATT&CK ID
  
  T1179 (Show technique in the MITRE ATT&CK™ matrix)
- Scanning for window names
  
  details
  
  "EXCEL.EXE" searching for class "REListbox20W"
  "EXCEL.EXE" searching for class "MsoCommandBarPopup"
  "EXCEL.EXE" searching for class "OfficeTooltip"
  
  source
  
  API Call
  
  relevance
  
  10/10
  
  ATT&CK ID
  
  T1010 (Show technique in the MITRE ATT&CK™ matrix)
Installation/Persistence
- Chained signature (with api-8702...). Detects file write then load as module
  
  details
  
  Chained signature (with api-8702...). Detects file write then load as module
  
  source
  
  Loaded Module
  
  relevance
  
  8/10
- Dropped files
  
  details
  
  "S-31_t31-ReporteISSSTE-GLOBAL-2021-08-13-0019.LNK" has type "MS Windows shortcut Item id list present Points to a file or directory Has Relative path Archive ctime=Thu Aug 19 20:25:29 2021 mtime=Thu Aug 19 20:25:29 2021 atime=Thu Aug 19 20:26:00 2021 length=23328 window=hide"
  "index.dat" has type "data"
  
  source
  
  Binary File
  
  relevance
  
  3/10
- Opens the MountPointManager (often used to detect additional infection locations)
  
  details
  
  "EXCEL.EXE" opened "\Device\MountPointManager"
  
  source
  
  API Call
  
  relevance
  
  5/10
- Touches files in the Windows directory
  
  details
  
  "EXCEL.EXE" touched file "C:\Windows\Fonts\StaticCache.dat"
  "EXCEL.EXE" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls"
  "EXCEL.EXE" touched file "C:\Windows\System32\en-US\user32.dll.mui"
  "EXCEL.EXE" touched file "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\clr.dll"
  "EXCEL.EXE" touched file "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll"
  "EXCEL.EXE" touched file "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll"
  "EXCEL.EXE" touched file "C:\Windows\System32\en-US\msctf.dll.mui"
  "EXCEL.EXE" touched file "C:\Windows\System32\rsaenh.dll"
  "EXCEL.EXE" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches"
  "EXCEL.EXE" touched file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Caches\cversions.1.db"
  "EXCEL.EXE" touched file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001d.db"
  "EXCEL.EXE" touched file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\mso426B.tmp"
  "EXCEL.EXE" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches"
  "EXCEL.EXE" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\cversions.1.db"
  "EXCEL.EXE" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001d.db"
  "EXCEL.EXE" touched file "%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.MSO\mso426B.tmp"
  
  source
  
  API Call
  
  relevance
  
  7/10
Network Related
- Found potential URL in binary/memory
  
  details
  
  Pattern match: "www.google.com,,440960"
  Pattern match: "www.gstatic.com,,2148885"
  Pattern match: "www.google.com,,4046874"
  Pattern match: "www.google.com,,3626967"
  Pattern match: "www.google.com,,4169660"
  Pattern match: "www.gstatic.com,,1171016"
  Pattern match: "www.google.com,,5048016"
  Pattern match: "www.google.com,,2183411"
  Pattern match: "www.google.com.mx,,1038164"
  Pattern match: "www.gstatic.com,,564932"
  Pattern match: "www.googletagmanager.com,,121364"
  
  source
  
  File/Memory
  
  relevance
  
  10/10
Spyware/Information Retrieval
- Found a reference to a known community page
  
  details
  
  "" 47 ","paypal.com","2.01 GB","743 "" (Indicator: "paypal")
  "" 10 ","youtube.googleapis.com",,"1474822"" (Indicator: "youtube")
  
  source
  
  File/Memory
  
  relevance
  
  7/10
System Security
- Hooks API calls
  
  details
  
  "SysAllocStringByteLen@OLEAUT32.DLL" in "EXCEL.EXE"
  "SysFreeString@OLEAUT32.DLL" in "EXCEL.EXE"
  "VariantChangeType@OLEAUT32.DLL" in "EXCEL.EXE"
  "VariantClear@OLEAUT32.DLL" in "EXCEL.EXE"
  "OleLoadFromStream@OLE32.DLL" in "EXCEL.EXE"
  
  source
  
  Hook Detection
  
  relevance
  
  10/10
  
  ATT&CK ID
  
  T1179 (Show technique in the MITRE ATT&CK™ matrix)
- Queries sensitive IE security settings
  
  details
  
  "EXCEL.EXE" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SECURITY"; Key: "DISABLESECURITYSETTINGSCHECK")
  
  source
  
  Registry Access
  
  relevance
  
  8/10
  
  ATT&CK ID
  
  T1012 (Show technique in the MITRE ATT&CK™ matrix)
Unusual Characteristics
- Installs hooks/patches the running process
  
  details
  
  "EXCEL.EXE" wrote bytes "9ba05c0c3895d701" to virtual address "0xF3F4FA00" (part of module "GFX.DLL")
  "EXCEL.EXE" wrote bytes "88ac430c3895d701" to virtual address "0xF184D610" (part of module "MSO.DLL")
  "EXCEL.EXE" wrote bytes "e9abc09bffcc" to virtual address "0xFDF44060" ("SysAllocStringByteLen@OLEAUT32.DLL")
  "EXCEL.EXE" wrote bytes "e933ef9bffcccc" to virtual address "0xFDF41210" ("SysFreeString@OLEAUT32.DLL")
  "EXCEL.EXE" wrote bytes "e94b9f9bffcccccccccc" to virtual address "0xFDF46230" ("VariantChangeType@OLEAUT32.DLL")
  "EXCEL.EXE" wrote bytes "e933f09bff" to virtual address "0xFDF41180" ("VariantClear@OLEAUT32.DLL")
  "EXCEL.EXE" wrote bytes "df965f0c3895d701" to virtual address "0x3F0665C0" (part of module "EXCEL.EXE")
  "EXCEL.EXE" wrote bytes "e913b0c7ff" to virtual address "0xFDC850C0" ("OleLoadFromStream@OLE32.DLL")
  "EXCEL.EXE" wrote bytes "847f48003895d701" to virtual address "0xF86A6590" (part of module "MSOSTYLE.DLL")
  "EXCEL.EXE" wrote bytes "d2f179043895d701" to virtual address "0xF5F3DE48" (part of module "RICHED20.DLL")
  "EXCEL.EXE" wrote bytes "48b8bc5243f0fe070000ffe0" to virtual address "0x76FC9020" ("SetUnhandledExceptionFilter@KERNEL32.DLL")
  "EXCEL.EXE" wrote bytes "1c835c0c3895d701" to virtual address "0xF2AF2350" (part of module "OART.DLL")
  
  source
  
  Hook Detection
  
  relevance
  
  10/10
  
  ATT&CK ID
  
  T1179 (Show technique in the MITRE ATT&CK™ matrix)
- Reads information about supported languages
  
  details
  
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\EXTENDEDLOCALE"; Key: "EN-US")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "EN-US")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\EXTENDEDLOCALE"; Key: "CA")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\EXTENDEDLOCALE"; Key: "ZH-CN")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "ZH-CN")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "CS-CZ")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\EXTENDEDLOCALE"; Key: "CS-CZ")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\EXTENDEDLOCALE"; Key: "DA-DK")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\EXTENDEDLOCALE"; Key: "EL-GR")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\EXTENDEDLOCALE"; Key: "ES")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "FI-FI")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "FR")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "FR-FR")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\EXTENDEDLOCALE"; Key: "FR-FR")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\EXTENDEDLOCALE"; Key: "HE")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "HE-IL")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "HE")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "IS")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "IS-IS")
  "EXCEL.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\EXTENDEDLOCALE"; Key: "IS-IS")
  
  source
  
  Registry Access
  
  relevance
  
  3/10
  
  ATT&CK ID
  
  T1012 (Show technique in the MITRE ATT&CK™ matrix)

File Details

All Details:

S-31_t31-Reporte ISSSTE-GLOBAL-2021-08-13-0019.csv

Filename: S-31_t31-Reporte ISSSTE-GLOBAL-2021-08-13-0019.csv
Size: 23KiB (23328 bytes)
Type: csv text
Description: ASCII text
Architecture
: WINDOWS
SHA256
: 3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c
MD5
: 9fe318011c1d0d56018fa107645e9d87
SHA1
: 66e2f3974ac39d152aa549ce966e61f45ee3bdeb
ssdeep
: 384:9Ft9g0mZI45h0LS1TPLIba1MoaaPjstxAElAtfN7qMWXEoBnfCQ:F9nmS4UmhPUba1NaaPjZoM8fCQ

Resources

Icon

Visualization

Input File (PortEx)

Screenshots

Loading content, please wait...

Hybrid Analysis

Tip: Click an analysed process below to view more details.

Analysed 1 process in total.

EXCEL.EXE /dde (PID: 2396)

Logged Script Calls	Logged Stdout	Extracted Streams	Memory Dumps
Reduced Monitoring	Network Activityy	Network Error	Multiscan Match

Network Analysis

DNS Requests

No relevant DNS requests were made.

Contacted Hosts

No relevant hosts were contacted.

HTTP Traffic

No relevant HTTP requests were made.

Extracted Strings

Download All Memory Strings (403B)

" 1 ","128.199.231.58","867.14 MB","HTTP.BROWSER"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","128.199.231.58",,"909257282"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","13.107.136.9","20.42 GB","Microsoft.SharePoint"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","13.107.136.9","4.10 GB","Microsoft.SharePoint"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","134.122.50.220","3.32 GB","SSL_TLSv1.2"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","142.250.81.14","4.03 GB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","192.160.126.226",""

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","192.160.143.199",""

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","192.160.172.44",""

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","192.160.45.11",""

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","192.160.45.11","22.11 GB","1,813 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","192.162.65.251",""

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","192.163.161.30",""

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","192.164.49.205",""

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","192.165.219.25",""

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","192.168.12.211",""

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","192.168.12.23",""

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","192.168.13.245",""

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","192.168.28.77",""

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","192.168.53.174",""

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","192.168.53.29",""

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","192.168.66.143",""

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","213.108.105.29","1.28 GB","SSL_TLSv1.2"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","213.108.110.74","2.07 GB","SSL_TLSv1.2"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","216.58.195.238","9.58 GB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","23.205.36.108","111.91 MB","Microsoft.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","37.46.114.67","949.90 MB","SSL_TLSv1.2"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","443","9.35 TB""5.22 TB""14.57 TB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","51.159.139.230","2.82 GB","SSL_TLSv1.2"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","52.96.121.146","807.78 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","52.96.121.98","1.68 GB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","52.96.122.98","3.40 GB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","69.36.182.18","1.95 GB","SSL_TLSv1.3"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","clients6.google.com",,"10281807263"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","Collaboration","610.95 GB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","crl3.digicert.com",,"48215582"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","definitionupdates.microsoft.com",,"117349674"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","edgedl.me.gvt1.com",,"83474678"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","issste-my.sharepoint.com",,"10025559276"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","issste-my.sharepoint.com",,"23641622642"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","Microsoft.Office.365.Portal","263.61 GB","1,479,354 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","office365.com","186.02 GB","1,020,774 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","osce14.icrc.trendmicro.com",,"1457956"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","osce14.icrc.trendmicro.com",,"2887363"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","outlook.office365.com",,"2458846"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","outlook.office365.com",,"3391477"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","outlook.office365.com",,"4157474333"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","outlook.office365.com",,"8347967612"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","photos.google.com",,"2174040885"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 1 ","s3.amazonaws.com",,"538324"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","142.250.68.208","1.09 MB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","192.160.143.199","3.97 GB","1,485 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","20.189.173.2","18.66 MB","Microsoft.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","201.148.67.49","3.27 MB","Microsoft.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","23.205.36.135","869.57 KB","Adobe.Web"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","23.205.36.58","7.35 MB","Microsoft.Office.Online"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","23.205.37.227","149.67 KB","Microsoft.Office.Online"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","23.59.57.124","6.19 MB","TrendMicro.WFBS"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","28183","960.38 KB""125.32 KB""1.06 MB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","52.96.8.130","102.96 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","69.147.65.252","1.16 MB","Yahoo.Mail"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","aadcdn.msftauthimages.net",,"332829"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","binaries.templates.cdn.office.net",,"452478"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","fa000000002.resources.office.net",,"1531768"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","googleusercontent.com","30.64 GB","48,976 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","HTTP.BROWSER","28.57 GB","2,722,816 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","issste.sharepoint.com",,"393650"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","osce14.icrc.trendmicro.com",,"3104226"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","outlook.live.com",,"2158811"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","Social.Media","850.29 MB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","www.googletagmanager.com",,"121364"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 10 ","youtube.googleapis.com",,"1474822"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 100 ","forbes.com.mx","778.82 MB","1,056 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 101 ","scorecardresearch.com","773.46 MB","37,331 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 102 ","banamex.com","738.33 MB","4,125 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 103 ","185.10.56.98","734.64 MB","1 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 104 ","37.120.147.190","732.19 MB","4 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 105 ","doubleclick.net","718.96 MB","135,936 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 106 ","adblockplus.org","692.17 MB","1,583 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 107 ","eset.com","687.08 MB","58,563 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 108 ","77.68.8.112","686.17 MB","3 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 109 ","104.17.122.114","674.77 MB","23 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 11 ","192.168.13.245","3.33 GB","102 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 11 ","Microsoft.Outlook","27.72 GB","177,450 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 11 ","office.com","29.99 GB","221,789 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 110 ","mcafee.com","670.56 MB","4,607 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 111 ","hpanalytics.net","665.62 MB","1,443 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 112 ","104.19.214.83","663.45 MB","86 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 113 ","172.98.73.39","663.29 MB","5 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 114 ","192.241.255.160","661.32 MB","1 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 115 ","citibanamex.com.mx","659.01 MB","1,685 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 116 ","161.35.135.178","640.99 MB","14 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 117 ","img-taboola.com","630.22 MB","12,971 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 118 ","google-analytics.com","628.77 MB","38,480 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 119 ","santander.com.mx","605.79 MB","1,285 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 12 ","192.160.129.78","3.25 GB","2,101 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 12 ","akamai.net","26.44 GB","2,315 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 12 ","Root.Certificate.URL","25.65 GB","774,644 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 120 ","cndh.org.mx","603.18 MB","3,161 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 121 ","fontawesome.com","599.23 MB","79,676 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 122 ","cloudflare.com","590.94 MB","85,238 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 123 ","37.120.157.74","588.57 MB","4 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 124 ","107.161.22.82","585.30 MB","1 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 125 ","bing.net","574.87 MB","6,056 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 126 ","outbrainimg.com","556.06 MB","111,738 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 127 ","13.107.42.11","549.58 MB","1,593 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 128 ","akamaihd.net","544.93 MB","2,731 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 129 ","196.245.9.154","544.41 MB","6 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 13 ","192.168.108.203","2.89 GB","2,833 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 13 ","Google.Accounts","21.12 GB","45,458 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 13 ","googleapis.com","23.88 GB","755,410 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 130 ","getacondo.com","533.73 MB","2 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 131 ","meetzoom.us","532.39 MB","31 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 132 ","wikimedia.org","530.24 MB","2,001 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 133 ","ine.mx","527.05 MB","7,624 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 134 ","104.17.228.2","525.04 MB","84 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 135 ","74.82.60.156","521.26 MB","2 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 136 ","hpdaas.com","515.91 MB","11,094 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 137 ","symcb.com","503.58 MB","3,861 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 138 ","jpfax.com","497.41 MB","219 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 139 ","1drv.ms","491.49 MB","69 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 14 ","192.168.15.7","2.87 GB","1,320 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 14 ","Gmail","19.21 GB","92,150 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 14 ","gob.mx","22.71 GB","140,262 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 140 ","googlesyndication.com","490.07 MB","10,832 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 141 ","74.82.60.35","482.71 MB","4 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 142 ","adnxs.com","477.76 MB","72,769 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 143 ","196.245.9.138","449.51 MB","10 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 144 ","macaw.is","446.78 MB","71,996 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 145 ","142.250.82.16","445.43 MB","230 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 146 ","3lift.com","431.83 MB","65,113 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 147 ","jwpsrv.com","426.79 MB","118 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 148 ","62.151.178.229","422.01 MB","3 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 149 ","13.107.6.171","418.03 MB","154 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 15 ","192.168.12.23","2.83 GB","106 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 15 ","digicert.com","21.23 GB","81,895 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 15 ","Google.Docs","14.02 GB","31,910 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 150 ","algebraix.com","414.65 MB","15 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 16 ","192.161.231.202","2.82 GB","1,220 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 16 ","Google.Play","11.92 GB","159,014 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 16 ","gstatic.com","20.61 GB","335,486 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 17 ","192.160.164.89","2.79 GB","2,224 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 17 ","Google.Drive","8.93 GB","15,898 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 17 ","gvt1.com","18.75 GB","12,595 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 18 ","192.167.104.81","2.74 GB","1,881 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 18 ","OneDrive","8.24 GB","117,690 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 18 ","yahoo.com","16.04 GB","450,561 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 19 ","192.162.20.111","2.69 GB","215 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 19 ","Apple.Services","7.24 GB","14,201 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 19 ","live.net","15.68 GB","18,072 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","172.217.15.1","273.41 MB","Google.Accounts"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","192.168.53.174","9.79 GB","1,270 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","2.tlu.dl.delivery.mp.microsoft.com",,"29635186"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","23.59.42.244","241.70 KB","TrendMicro.WFBS"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","23.59.57.124","1,016.90 KB","TrendMicro.WFBS"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","23.59.57.124","1.39 MB","TrendMicro.WFBS"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","23.59.57.124","2.75 MB","TrendMicro.WFBS"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","23.59.57.124","529.92 KB","TrendMicro.WFBS"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","34.104.35.123","79.61 MB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","34.104.35.123","81.15 MB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","40.108.138.81","1.60 GB","Microsoft.SharePoint"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","40.108.138.81","3.35 GB","Microsoft.SharePoint"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","52.96.122.242","1.98 GB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","52.96.55.242","1,016.31 MB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","69.147.65.252","3.24 MB","Yahoo.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","72.21.91.29","45.98 MB","Root.Certificate.URL"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","80","603.92 GB""28.42 GB""632.34 GB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","browser.pipe.aria.microsoft.com",,"455507602"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","csc3-2010-crl.verisign.com",,"642815"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","edgedl.me.gvt1.com",,"85087343"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","HTTPS.BROWSER","234.03 GB","4,138,958 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","ogs.google.com",,"2155195074"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","omextemplates.content.office.net",,"17372740"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","osce12-en-census.trendmicro.com",,"238962"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","osce12.icrc.trendmicro.com",,"607113"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","osce14.icrc.trendmicro.com",,"1041301"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","osce14.icrc.trendmicro.com",,"1089703"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","outlook.office365.com",,"1328923"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","play.google.com",,"16231291"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","s.yimg.com",,"4260067"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","trendmicro.com","134.75 GB","45,281,701 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","Web.Client","262.60 GB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 2 ","www.google.com",,"2183411"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 20 ","192.162.17.31","2.64 GB","756 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 20 ","edgesuite.net","11.74 GB","6,255 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 20 ","Microsoft.CDN","6.82 GB","16,733 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 21 ","192.160.122.68","2.59 GB","8,036 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 21 ","Skype","6.78 GB","283,744 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 21 ","yimg.com","8.93 GB","25,472 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 22 ","192.161.155.234","2.46 GB","5,573 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 22 ","cloudsink.net","8.16 GB","2,155 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 22 ","Yahoo.Mail","5.31 GB","75,643 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 23 ","192.168.5.60","2.39 GB","1,156 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 23 ","fastly.net","7.73 GB","297 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 23 ","Telegram","2.65 GB","772 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 24 ","192.166.149.125","2.35 GB","10,671 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 24 ","Amazon.AWS","2.11 GB","16,496 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 24 ","bing.com","7.23 GB","124,630 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 25 ","192.167.105.57","2.32 GB","2,308 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 25 ","Google.Ads","1.58 GB","185,388 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 25 ","msn.com","6.77 GB","175,354 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 26 ","192.168.29.210","2.28 GB","206 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 26 ","google.com.mx","6.48 GB","20,278 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 26 ","Google.Hangouts","1.44 GB","6,751 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 27 ","192.160.128.142","2.21 GB","2,156 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 27 ","Google.Analytics","1.43 GB","51,678 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 27 ","maypoinsightslogistica.mx","5.85 GB","4,451 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 28 ","192.168.182.126","2.19 GB","937 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 28 ","cdn-apple.com","5.82 GB","194 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 28 ","Microsoft.Authentication","1.34 GB","38,416 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 29 ","192.161.111.5","2.16 GB","406 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 29 ","Skype.Portals","1.08 GB","55,778 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 29 ","teamviewer.com","5.65 GB","1,806,567 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","104.26.15.11","7.38 MB","HTTPS.BROWSER"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","13.107.138.9","1.89 GB","Microsoft.SharePoint"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","142.250.81.109","2.25 MB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","142.250.81.36","2.08 MB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","192.168.28.77","9.60 GB","2,087 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","19305","22.32 GB""793.54 MB""23.10 GB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","216.58.193.14","18.40 MB","HTTPS.BROWSER"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","216.58.193.4","430.62 KB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","23.205.37.99","28.84 MB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","23.59.57.124","1.04 MB","TrendMicro.WFBS"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","52.216.130.181","221.61 KB","Amazon.AWS_S3"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","52.96.121.146","303.06 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","52.96.121.162","482.89 MB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","52.96.57.34","1.74 GB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","52.96.57.34","526.72 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","72.21.91.29","1.25 MB","Root.Certificate.URL"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","accounts.google.com",,"2361080"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","fa000000070.resources.office.net",,"14026684"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","General.Interest","252.34 GB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","google.com","133.62 GB","1,220,801 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","lh3.googleusercontent.com",,"297115358"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","maypoinsightslogistica.mx",,"15690277"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","maypoinsightslogistica.mx",,"7733357"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","Microsoft.Portal","175.93 GB","1,579,608 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","outlook.office365.com",,"204872"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","outlook.office365.com",,"8472527"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","s3.amazonaws.com",,"528419"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","sf.symcb.com",,"236236"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","statics.teams.cdn.office.net",,"13407584"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","wsc-us1.xbc.trendmicro.com",,"171397"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","www.google.com",,"440960"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 3 ","www.google.com.mx",,"1038164"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 30 ","192.168.5.245","2.14 GB","4,208 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 30 ","Amazon.CloudFront","728.27 MB","8,322 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 30 ","sfx.ms","4.65 GB","8,663 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 31 ","skype.com","4.45 GB","165,691 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 32 ","telegram.org","4.22 GB","1,271 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 33 ","knowledgevision.com","3.69 GB","554 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 34 ","134.122.50.220","3.32 GB","1 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 35 ","sntissste.mx","3.00 GB","3,278 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 36 ","51.159.139.230","2.82 GB","1 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 37 ","cloudfront.net","2.54 GB","12,275 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 38 ","amazonaws.com","2.51 GB","19,099 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 39 ","microsoftonline.com","2.41 GB","104,712 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","142.250.81.74","6.55 MB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","172.217.15.3","2.05 MB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","192.168.5.46","8.11 GB","1,385 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","201.148.67.43","6.88 MB","Microsoft.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","216.58.193.3","1,013.83 KB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","216.58.195.225","9.94 MB","Google.Accounts"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","23.59.42.244","236.80 KB","TrendMicro.WFBS"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","3.tlu.dl.delivery.mp.microsoft.com",,"6846708"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","40.97.120.210","200.07 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","40.97.120.210","242.53 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","40.97.121.2","435.53 MB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","51.105.71.136","36.14 MB","Microsoft.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","52.217.95.144","324.65 KB","Amazon.AWS_S3"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","52.96.10.242","339.45 MB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","52.96.103.34","422.66 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","8082","254.92 MB""4.11 MB""259.03 MB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","Cloud.IT","119.18 GB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","drive.google.com",,"11702441"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","fa000000043.resources.office.net",,"9607723"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","Google.Services","149.59 GB","2,099,556 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","lh3.google.com",,"19378437"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","microsoft.com","130.38 GB","1,124,154 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","osce12-en-census.trendmicro.com",,"168800"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","osce14-en-census.trendmicro.com",,"217948"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","osce14.icrc.trendmicro.com",,"6708101"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","ssl.gstatic.com",,"761652"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","wsc-us1.xbc.trendmicro.com",,"182455"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","www.google.com",,"4169660"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 4 ","www.gstatic.com",,"2148885"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 40 ","capacitateparaelempleo.org","2.39 GB","5,600 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 41 ","tramitesar.com","2.30 GB","3,035 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 42 ","vidible.tv","2.28 GB","292,449 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 43 ","windowsupdate.com","2.20 GB","666,956 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 44 ","shoeluck.com","2.08 GB","45 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 45 ","213.108.110.74","2.07 GB","2 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 46 ","yusercontent.com","2.03 GB","2,328 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 47 ","paypal.com","2.01 GB","743 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 48 ","69.36.182.18","1.95 GB","2 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 49 ","outlook.com","1.89 GB","101,685 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","142.250.68.206","1.82 MB","Google.Drive"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","142.250.81.3","743.80 KB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","172.217.15.1","6.46 MB","Google.Accounts"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","192.160.126.226","7.83 GB","1,860 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","20.42.65.85","25.49 MB","Microsoft.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","23.59.57.124","4.61 MB","TrendMicro.WFBS"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","34.104.35.123","5.38 MB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","40.97.120.130","191.12 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","40.97.120.162","339.79 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","52.216.186.245","192.24 KB","Amazon.AWS_S3"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","52.96.103.2","196.95 MB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","52.96.121.146","315.92 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","52.96.57.18","319.53 MB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","8080","96.61 MB""18.26 MB""114.88 MB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","crl3.digicert.com",,"159223"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","drive.google.com",,"1903742"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","edgedl.me.gvt1.com",,"5640301"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","educa.cndh.org.mx",,"5264220"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","Network.Service","58.15 GB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","office.net","115.59 GB","365,995 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","osce14.icrc.trendmicro.com",,"2279726"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","osce14.icrc.trendmicro.com",,"4834354"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","outlook-1.cdn.office.net",,"7520818"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","TrendMicro.WFBS","116.30 GB","26,312,978 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","v10.vortex-win.data.microsoft.com",,"7430091"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 5 ","www.gstatic.com",,"564932"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 50 ","banorte.com","1.89 GB","4,219 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 51 ","unam.mx","1.86 GB","14,367 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 52 ","virtualearth.net","1.84 GB","10,146 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 53 ","ggpht.com","1.79 GB","2,821 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 54 ","mozilla.org","1.72 GB","35,670 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 55 ","zemanta.com","1.69 GB","252,914 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 56 ","citamedicaissste.mx","1.68 GB","15,665 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 57 ","lenovo.com","1.58 GB","25,026 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 58 ","entrust.net","1.55 GB","3,469 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 59 ","whatsapp.com","1.50 GB","316 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","104.208.16.90","23.86 MB","Microsoft.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","13.107.4.50","5.10 MB","Microsoft.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","13.225.51.82","2.37 MB","HTTPS.BROWSER"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","142.250.81.46","3.18 MB","Google.Play"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","152.195.12.131","1.67 MB","Yahoo.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","172.217.15.3","551.69 KB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","192.168.13.189","5.64 GB","1,128 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","23.45.200.63","16.57 MB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","23.59.42.244","164.84 KB","TrendMicro.WFBS"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","2443","24.12 MB""3.05 MB""27.17 MB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","40.97.199.114","188.60 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","40.97.96.2","304.48 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","52.96.103.2","77.29 MB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","7.tlu.dl.delivery.mp.microsoft.com",,"5328146"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","akamaized.net","58.22 GB","88,464 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","clients4.google.com",,"317291"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","Email","52.25 GB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","encrypted-tbn0.gstatic.com",,"1878044"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","espanol.yahoo.com",,"1749090"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","mail.google.com",,"6302395"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","Microsoft.Office.Online","88.81 GB","700,996 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","safebrowsing.googleapis.com",,"6873149"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","wsc-us1.xbc.trendmicro.com",,"121220"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","www.google.com",,"3626967"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 6 ","www.google.com",,"4046874"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 60 ","apple.com","1.41 GB","14,067 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 61 ","37.218.246.181","1.36 GB","3 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 62 ","213.108.105.29","1.28 GB","2 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 63 ","51.15.46.81","1.27 GB","3 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 64 ","adobe.com","1.27 GB","345,739 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 65 ","blackboardcdn.com","1.26 GB","86 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 66 ","149.154.175.57","1.24 GB","1,526 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 67 ","svc.ms","1.21 GB","1,756 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 68 ","nai.com","1.20 GB","972 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 69 ","dbankcdn.com","1.16 GB","150 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","142.250.81.14","1.33 MB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","142.250.81.14","10.70 MB","Google.Play"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","192.160.172.44","4.36 GB","1,974 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","20.42.73.24","23.51 MB","Microsoft.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","201.148.67.56","11.01 MB","Microsoft.Office.Online"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","201.148.67.57","4.90 MB","Microsoft.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","216.58.195.238","406.35 KB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","40.97.120.242","140.10 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","52.182.141.63","2.15 MB","Microsoft.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","52.96.103.34","270.48 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","52.96.57.34","187.66 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","69.147.65.251","3.07 MB","Yahoo.Mail"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","995","4.66 MB""211.54 KB""4.87 MB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","clients2.googleusercontent.com",,"6777122"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","cursos3.cndh.org.mx",,"790162"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","edgecast-cf-prod.yahoo.net",,"1737323"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","fonts.gstatic.com",,"274759"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","live.com","49.12 GB","803,730 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","outlook.office365.com",,"4897816"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","play.google.com",,"3330580"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","r4.res.office365.com",,"1234638"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","Update","25.73 GB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","www.google.com",,"5048016"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 7 ","Yahoo.Services","59.82 GB","404,876 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 70 ","inai.org.mx","1.15 GB","5,992 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 71 ","outbrain.com","1.14 GB","138,541 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 72 ","mozilla.net","1.14 GB","14,201 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 73 ","atwola.com","1.14 GB","237,187 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 74 ","167.88.113.201","1.13 GB","3 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 75 ","sapjam.com","1.11 GB","10 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 76 ","162.220.51.111","1.07 GB","18 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 77 ","rubiconproject.com","1.07 GB","172,538 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 78 ","avast.com","1.00 GB","23,503 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 79 ","advertising.com","1,015.63 MB","133,772 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","142.250.68.206","9.96 MB","Google.Drive"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","142.250.81.4","3.07 MB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","192.168.52.69","4.07 GB","4,711 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","20.189.173.13","19.85 MB","Microsoft.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","20.50.201.195","1.45 MB","Microsoft.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","201.148.67.27","4.34 MB","Microsoft.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","23.64.170.15","195.95 KB","Microsoft.Office.Online"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","40.97.120.210","9.56 MB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","40.97.212.2","14.97 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","52.96.121.162","192.26 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","52.96.121.226","184.81 KB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","5223","571.02 KB""1.98 MB""2.53 MB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","74.6.143.26","1.26 MB","Yahoo.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","apis.mail.yahoo.com",,"3092472"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","cdn.odc.officeapps.live.com",,"200655"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","img-prod-cms-rt-microsoft-com.akamaized.net",,"4290115"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","mail.google.com",,"4425379"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","news.google.com",,"1394248"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","plugins.jetbrains.com",,"2484892"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","sharepoint.com","48.61 GB","42,040 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","SSL","57.78 GB","19,319,363 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","Storage.Backup","17.67 GB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","teams.events.data.microsoft.com",,"547246"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 8 ","www.gstatic.com",,"1171016"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 80 ","oracle.com","1,014.17 MB","21,712 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 81 ","whatsapp.net","1,002.76 MB","4,418 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 82 ","dynamics.com","998.67 MB","3,694 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 83 ","fichub.com","997.17 MB","40 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 84 ","onedrive.com","979.59 MB","90,505 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 85 ","37.46.114.67","949.90 MB","1 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 86 ","msauth.net","914.85 MB","21,812 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 87 ","media.net","891.87 MB","68,546 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 88 ","192.241.210.123","883.74 MB","3 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 89 ","yahoodns.net","881.27 MB","107,326 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","142.250.81.101","4.22 MB","Gmail"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","151.101.129.63","1.18 MB","HTTPS.BROWSER"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","172.67.70.93","8.98 MB","HTTPS.BROWSER"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","192.162.56.214","4.03 GB","977 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","216.58.195.234","1.41 MB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","216.58.217.3","154.55 KB","Google.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","52.168.117.170","19.13 MB","Microsoft.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","52.21.247.250","178.18 KB","TrendMicro.WFBS"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","52.96.57.18","9.28 MB","Microsoft.Office.365.Portal"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","54.236.92.29","167.38 KB","TrendMicro.WFBS"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","587","173.50 KB""1.70 MB""1.87 MB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","69.147.65.251","925.54 KB","Yahoo.Services"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","Business","1.64 GB"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","c1-odc-15.cdn.office.net",,"153260"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","fa000000006.resources.office.net",,"2069939"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","lh3.google.com",,"4109222"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","lh3.googleusercontent.com",,"640025"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","mail.yahoo.com",,"2992861"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","Microsoft.SharePoint","48.12 GB","42,678 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","mobile.pipe.aria.microsoft.com",,"470410"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","osce14-en-census.trendmicro.com",,"354079"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","tlu.dl.delivery.mp.microsoft.com",,"4272562"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 9 ","yahoo.net","41.07 GB","29,329 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 90 ","173.230.154.208","874.93 MB","1 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 91 ","128.199.231.58","867.14 MB","3 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 92 ","198.199.93.22","837.23 MB","2 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 93 ","googletagmanager.com","834.94 MB","12,176 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 94 ","noaa.gov","821.94 MB","99 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 95 ","wikiworld.org","820.53 MB","36 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 96 ","mkt9752.com","819.28 MB","621 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 97 ","165.227.88.29","813.17 MB","5 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 98 ","taboola.com","787.54 MB","130,988 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

" 99 ","campusvirtualsp.org","786.07 MB","243 "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

"###Top de puertos 2###"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

"###Top 30 Aplicaciones por Ancho de Banda y Sesiones###"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

"###Top 30 Usuarios por Ancho de banda y sesiones###"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

"###Top Categorias de Aplicaciones por Ancho de Banda###"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

"###Top Destinos Por Ancho de Banda y Sesiones###"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

"ID","Application Category","Bandwidth"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

"ID","Application","Bandwidth","Sessions"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

"ID","Destination","Bandwidth","Application"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

"ID","Hostname(or IP)","Bandwidth","Sessions"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

"ID","puerto","bandwidth"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

"ID","Source IP","Source Name"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

"ID","User(or IP)","Bandwidth","Sessions"

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

"ID","Website",""," "

Ansi based on Hybrid Analysis (3ab2d6e73fff2bbabad2d2405aedec035249deff78a530b0a3b6787d7a2c565c.csv.bin)

`\??\Volume{e47f4f43-d863-11e7-9d8f-806e6f6e6963}

Unicode based on Runtime Data (EXCEL.EXE )

`\??\Volume{e47f4f44-d863-11e7-9d8f-806e6f6e6963}

Unicode based on Runtime Data (EXCEL.EXE )

`\??\Volume{e47f4f47-d863-11e7-9d8f-806e6f6e6963}

Unicode based on Runtime Data (EXCEL.EXE )

MsoCommandBarPopup

Unicode based on Runtime Data (EXCEL.EXE )

NetUICtrlNotifySink

Unicode based on Runtime Data (EXCEL.EXE )

OfficeTooltip

Unicode based on Runtime Data (EXCEL.EXE )

REListbox20W