#separator \x09 #set_separator , #empty_field (empty) #unset_field - #path http #open 2017-03-13-19-27-14 #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p trans_depth method host uri referrer user_agent request_body_len response_body_len status_code status_msg info_code info_msg filename tags username password proxied orig_fuids orig_mime_types resp_fuids resp_mime_types label detailedlabel #types time string addr port addr port count string string string string string count count count string count string string set[enum] string string set[string] vector[string] vector[string] vector[string] vector[string] string string 124.259424 C1LXpb36adDCn0Iwl1 192.168.1.128 49177 195.27.31.253 80 1 GET www.uc123.com /pcbrowser_i18n/downloader.php?pid=4601&version=1.0.0.0&os=win&arch=x86 - - 0 609 200 OK - - - (empty) - - - - - F0dGpz30RPPuMOq0m text/json Malicious From_Malware 126.138163 CW34OaG0ADYi8riGi 192.168.1.128 49178 123.150.188.19 80 1 GET down2.uc.cn /pcbrowser_i18n/down.php?id=101&type=md5&pid=4601 - - 0 0 302 Moved Temporarily - - - (empty) - - - - - - - Malicious From_Malware 128.267271 CaW2cB1Q95mQzpZQi6 192.168.1.128 49179 80.231.122.135 80 1 GET umcdnpc.ucweb.com /down/i18n/35151/4601/UCBrowser_V6.0.1308.1016_4601_(Build1701181900)_(en-us).exe.md5 - - 0 68 200 OK - - - (empty) - - - - - F9xPCi4VZiyrrd6S9k text/plain Malicious From_Malware 128.850920 CLknMPYZjWc5y6gmc 192.168.1.128 49180 123.150.188.19 80 1 GET down2.uc.cn /pcbrowser_i18n/down.php?id=101&type=zip&pid=4601 - - 0 0 302 Moved Temporarily - - - (empty) - - - - - - - Malicious From_Malware 129.582618 CfTLCsbT1OR5EGwK3 192.168.1.128 49181 195.113.232.82 80 1 GET umcdnpc.ucweb.com /down/i18n/35151/4601/UCBrowser_V6.0.1308.1016_4601_(Build1701181900)_(en-us).exe.zip - - 0 41767680 200 OK - - - (empty) - - - - - FpggHO1ZjBp9pqWje application/zip Malicious From_Malware 3732.045815 Ck2Wx53TJBpm2qnPV 192.168.1.128 49182 123.150.188.19 80 1 GET down2.uc.cn /pcbrowser_i18n/down.php?id=101&type=zip&pid=4601 - - 0 0 302 Moved Temporarily - - - (empty) - - - - - - - Malicious From_Malware 3732.980403 CAKODe3aEF39iibZYe 192.168.1.128 49183 195.113.232.90 80 1 GET umcdnpc.ucweb.com /down/i18n/35151/4601/UCBrowser_V6.0.1308.1016_4601_(Build1701181900)_(en-us).exe.zip - - 0 8746804 206 Partial Content - - - (empty) - - - - - FJMw6wn4fmzXMaeS8 - Malicious From_Malware 4457.560932 CntbOAKIuErrix6ab 192.168.1.128 49186 168.235.193.157 80 1 GET ucip.uc.cn /get_ip_attr?type=1&format=0&caller=gj_pcbrowser&key=097a6150b0c772f7952807c0cb48fb86 - - 0 119 200 OK - - - (empty) - - - - - FQdodn3KBShbnvLVpl text/json Malicious From_Malware 4458.354865 CRcVQQ3vrd2lsjCbD9 192.168.1.128 49187 195.27.31.253 80 1 GET www.uc123.com /guide/install_blacklist.php?ver=6.0.1308.1016&bid=35151&pid=4601&mid=6177f69460fced6f14822eaec740597f&midex=12401edcd32856c16746d16d5f4b2e89v0000002a04b026a - Installer Doctor/1.0 (Windows) 0 7 200 OK - - - (empty) - - - - - FfvoPc2M54vZEISUFi - Malicious From_Malware 4599.175539 CMV7qW2wGp5VebXdyc 192.168.1.128 49204 168.235.193.141 9080 1 GET gj.track.uc.cn /collect?pg=newtabpv<=event&appid=2796a51d9ed0&fr=PC&ver=6.0.1308.1016&uuid=12401edcd32856c16746d16d5f4b2e89v0000002a04b026a&firstpid=4601&bid=35151&lang=en-US&reload=0 - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 33 200 OK - - - (empty) - - - - - F400zcnQigU8aThhd text/json Malicious From_Malware 4599.526932 CX7FDD1xxewaHGcWCl 192.168.1.128 49209 195.27.31.253 80 1 GET www.uc123.com /common/i18n-guide.php?old_ver=¤t_ver=6.0.1308.1016&lang=en-US - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 91 200 OK - - - (empty) - - - - - F75LoebRBErfRb1ej text/json Malicious From_Malware 4598.788879 CVXJUSSaEf1ptJ7Z3 192.168.1.128 49205 42.120.226.92 80 1 GET ip.taobao.com /service/getIpInfo.php?ip=myip - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 203 200 OK - - - (empty) - - - - - FObi9q2zzAYFRqNndj text/json Malicious From_Malware 4599.526025 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 1 GET image.uc.cn /s/brpc/g/newtab_rect_en/s.click.aliexpress.com.jpg - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 1 404 Not Found - - - (empty) - - - - - FoYnAK2yZKHDTMiuP - Malicious From_Malware 4600.730136 CA67PP363tHxKzdkNh 192.168.1.128 49210 195.27.31.253 80 1 GET wow.uc.cn /wow/config/3/visualized_bookmark.json - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 2166 200 OK - - - (empty) - - - - - FCKDfa3aR4lnzuv6dj text/json Malicious From_Malware 4601.597755 CQHXarekmNSjzb9Af 192.168.1.128 49213 168.235.194.6 80 1 POST uc.ucweb.com / - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 378 154 200 OK - - - (empty) - - - Fe6eG82rqiB4tU0EUb text/plain FDRLmy3QdS2bWmVaC8 - Malicious From_Malware 4607.858784 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 2 GET image.uc.cn /s/brpc/g/newtab2_en/s.click.aliexpress.com.png - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 1 404 Not Found - - - (empty) - - - - - FyvUya1VEgUnwnqidl - Malicious From_Malware 4608.457426 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 3 GET image.uc.cn /s/brpc/g/newtab_rect_en/facebook.com.jpg - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 9847 200 OK - - - (empty) - - - - - FIwxph1ecTMxXzK0o9 image/jpeg Malicious From_Malware 4608.651893 CGcVBi28Yj42MNDAM6 192.168.1.128 49216 140.205.164.47 80 1 GET browser.taobao.com /extensions/update.htm?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=hkmogefbfdmboplojeicpibfpcndjjbm&v=0.0.0.0&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 286 301 Moved Permanently - - - (empty) - - - - - FFnhzgBKYnlBP5De text/html Malicious From_Malware 4609.802773 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 4 GET image.uc.cn /s/brpc/g/newtab2_en/facebook.com.png - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 5592 200 OK - - - (empty) - - - - - FIHPkA2KhXsZeQ3fbl image/png Malicious From_Malware 4610.650578 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 5 GET image.uc.cn /s/brpc/g/newtab_rect_en/google.com.jpg - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 11653 200 OK - - - (empty) - - - - - FH3ezm3bz2HRRaTh4d image/jpeg Malicious From_Malware 4612.089351 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 6 GET image.uc.cn /s/brpc/g/newtab2_en/google.com.png - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 4989 200 OK - - - (empty) - - - - - FdQGMu1yulYWEMxIM8 image/png Malicious From_Malware 4611.758857 CMpW8D2wM56Xh2o5Hf 192.168.1.128 49221 140.205.29.235 80 1 GET extensions.uc.cn /extensions/update.htm?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=hdgdpmpallofembldhflnlkcfappghhc&v=0.0.0.0&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 300 200 OK - - - (empty) - - - - - FBlLqvyjqmVmzn713 application/xml Malicious From_Malware 4612.864833 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 7 GET image.uc.cn /s/brpc/g/newtab_rect_en/youtube.com.jpg - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 13127 200 OK - - - (empty) - - - - - Fmxvtv37WufTAfJs17 image/jpeg Malicious From_Malware 4613.916513 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 8 GET image.uc.cn /s/brpc/g/newtab2_en/youtube.com.png - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 7234 200 OK - - - (empty) - - - - - FQxyjv4N6NAx4wL1jl image/png Malicious From_Malware 4614.833106 CNLgoALOL5DYi34cb 192.168.1.128 49222 195.27.31.253 80 1 GET wow.ucweb.com /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.0.0.0&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - F8ZO7Z29TyGw4DXGuc text/plain Malicious From_Malware 4619.586739 Ci1Cl12Ccuxt3Fu4wh 192.168.1.128 49225 23.38.91.94 80 1 GET www.aliexpress.com /favicon.ico - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 1150 200 OK - - - (empty) - - - - - Fu8fP54SawX5vdtbV8 image/x-icon Malicious From_Malware 4615.391268 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 9 GET image.uc.cn /s/brpc/g/newtab_rect_en/gmail.com.jpg - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 10922 200 OK - - - (empty) - - - - - F3yErUHgsutznSCm7 image/jpeg Malicious From_Malware 4620.692731 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 10 GET image.uc.cn /s/brpc/g/newtab2_en/gmail.com.png - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 4611 200 OK - - - (empty) - - - - - Fs7Mm2JHqbPj8Ble7 image/png Malicious From_Malware 4621.263479 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 11 GET image.uc.cn /s/brpc/g/newtab_rect_en/amazon.com.jpg - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 8376 200 OK - - - (empty) - - - - - F8IwML1VMd2IsZu5Hj image/jpeg Malicious From_Malware 4617.549574 CVXJUSSaEf1ptJ7Z3 192.168.1.128 49205 42.120.226.92 80 2 GET ip.taobao.com /service/getIpInfo.php?ip=myip - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 203 200 OK - - - (empty) - - - - - FUbq6s4gK19hVFdkm2 text/json Malicious From_Malware 4622.589079 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 12 GET image.uc.cn /s/brpc/g/newtab2_en/amazon.com.png - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 4006 200 OK - - - (empty) - - - - - F3wze23VlCV5tngCrl image/png Malicious From_Malware 4623.022777 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 13 GET image.uc.cn /s/brpc/g/newtab_rect_en/twitter.com.jpg - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 11557 200 OK - - - (empty) - - - - - FAs9yx4zALhY6I3CCb image/jpeg Malicious From_Malware 4624.600345 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 14 GET image.uc.cn /s/brpc/g/newtab2_en/twitter.com.png - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 3855 200 OK - - - (empty) - - - - - FcMbPM3svrAKcNJKT2 image/png Malicious From_Malware 4624.839854 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 15 GET image.uc.cn /s/brpc/g/newtab_rect_en/yahoo.com.jpg - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 8325 200 OK - - - (empty) - - - - - FQ8Jlz2oWak7AYsHfg image/jpeg Malicious From_Malware 4625.598099 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 16 GET image.uc.cn /s/brpc/g/newtab2_en/yahoo.com.png - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 2179 200 OK - - - (empty) - - - - - FOQFJT1Np3zvUXIEYh image/png Malicious From_Malware 4625.512916 CJjSEv1ogtIZh68VBk 192.168.1.128 49233 195.27.31.253 80 1 GET image.uc.cn /s/brpc/g/newtabsearch/google.com.hk.png - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 457 200 OK - - - (empty) - - - - - FKoxWPSqyf8K0sIxe image/png Malicious From_Malware 4625.663652 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 17 GET image.uc.cn /s/brpc/g/newtab_rect_en/wikipedia.org.jpg - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 9948 200 OK - - - (empty) - - - - - FnY8maYBriBhTBDva image/jpeg Malicious From_Malware 4627.043280 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 18 GET image.uc.cn /s/brpc/g/newtab2_en/wikipedia.org.png - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 7466 200 OK - - - (empty) - - - - - FbSxs3WdxysvauPs1 image/png Malicious From_Malware 4628.097611 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 19 GET image.uc.cn /s/brpc/g/newtab_rect_en/blogger.com.jpg - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 10289 200 OK - - - (empty) - - - - - FXYPPm3ryvkNvrert4 image/jpeg Malicious From_Malware 4628.860661 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 20 GET image.uc.cn /s/brpc/g/newtab2_en/blogger.com.png - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 3157 200 OK - - - (empty) - - - - - FmPZrOwy23F95iQmi image/png Malicious From_Malware 4628.939401 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 21 GET image.uc.cn /s/brpc/g/newtab_rect_en/pinterest.com.jpg - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 15218 200 OK - - - (empty) - - - - - FuVet93MZE6Wh5o2w6 image/jpeg Malicious From_Malware 4631.241834 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 22 GET image.uc.cn /s/brpc/g/newtab2_en/pinterest.com.png - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 4616 200 OK - - - (empty) - - - - - FuHtAaEmUSGtd26vj image/png Malicious From_Malware 4631.735031 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 23 GET image.uc.cn /s/brpc/g/newtab_rect_en/aliexpress.com.jpg - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 11055 200 OK - - - (empty) - - - - - FTZxU228MuSVnxz6M6 image/jpeg Malicious From_Malware 4632.041658 CkEeJG3v6w46bEYac9 192.168.1.128 49208 195.27.31.253 80 24 GET image.uc.cn /s/brpc/g/newtab2_en/aliexpress.com.png - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 4695 200 OK - - - (empty) - - - - - FeKOFm1LPFkMxycaP3 image/png Malicious From_Malware 4641.983615 CkdLApvguzhqkhTwf 192.168.1.128 49239 188.254.86.240 80 1 GET img02.taobaocdn.com /tfscom/TB1XaMbOpXXXXcbXXXXkt0bFXXX.crx - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 57844 200 OK - - - (empty) - - - - - FAobJs4TUUuJiWQtt5 - Malicious From_Malware 4660.892549 CNLgoALOL5DYi34cb 192.168.1.128 49222 195.27.31.253 80 2 GET wow.ucweb.com /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.0.0.0&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FAqGFG2aINNXUPob0e text/plain Malicious From_Malware 4651.113516 CWOdh827rbhtkJw4si 192.168.1.128 49245 195.27.31.253 80 1 GET wow.uc.cn /biz-data/extensions/uc-nexus/uc-nexus.crx - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 792737 200 OK - - - (empty) - - - - - FDGKNI2nfQF1vF89b3 - Malicious From_Malware 4868.733882 CzsVSL29lBbzEoWmy4 192.168.1.128 49260 13.107.4.50 80 1 GET www.download.windowsupdate.com /msdownload/update/v3/static/trustedr/en/authrootstl.cab - Microsoft-CryptoAPI/6.1 0 50939 200 OK - - - (empty) - - - - - FMoIRy3GVBVXUaOPQ3 application/vnd.ms-cab-compressed Malicious From_Malware 4874.470230 CdgUbk2aK8VFEatij8 192.168.1.128 49261 213.244.178.240 80 1 GET tce.alicdn.com /api/data.htm?ids=243132 - - 0 2312 200 OK - - - (empty) - - - - - FFP8TU3Rh9mIygwOXg text/json Malicious From_Malware 4615.719252 CGCcRd14gzbV8CEHhj 192.168.1.128 49224 195.27.31.253 80 1 GET wow.ucweb.com /i18n/safe_browsing_db/SafeBrowsingDataBase.wow - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 14434286 200 OK - - - (empty) - - - - - Fv0gvf1osGROolCsCb application/zip Malicious From_Malware 24499.101207 CoOEra2DCG0XKfbDci 192.168.1.128 49398 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FzMoSl1F2cJMulCmg3 text/plain Malicious From_Malware 44194.390051 CdMWvQ2sgweATZRUT4 192.168.1.128 49519 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FUD0PbYyfBMwQ9rSf text/plain Malicious From_Malware 62712.183822 CReNr54OTBHTCxtaLa 192.168.1.128 49639 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FpPs7r1FRsksCAwtK9 text/plain Malicious From_Malware 79636.304750 C3T7TRqOsiHYeolz2 192.168.1.128 49741 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FGtpQ3ncvkS3okeFi text/plain Malicious From_Malware 96700.856575 CEWGL31VCPDTZx0bq3 192.168.1.128 49852 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - F0VwXbkrWMdgAtMdf text/plain Malicious From_Malware 115373.299978 CBLGVs327pPWHrQJF2 192.168.1.128 49967 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - F6VF973NvatTsL6Mji text/plain Malicious From_Malware 132791.921404 CAWfeX2oYHsqqTzYD6 192.168.1.128 50079 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FcvMJC1R3ydDgkS0Gi text/plain Malicious From_Malware 152354.918039 CkhD6W2PUiWJHqFVa 192.168.1.128 50202 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FeXZun1NaWHfBtOiPd text/plain Malicious From_Malware 171465.861676 CcEOyd1FzAQUYHY2jj 192.168.1.128 50322 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FHR8j31m4MvXweZwvc text/plain Malicious From_Malware 189928.199779 CDIq9T3VnFCNwGrk8a 192.168.1.128 50438 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - Fsb0jErRSXYtx9Fra text/plain Malicious From_Malware 208639.548806 CUsRfB27IqNEVPQDnc 192.168.1.128 50551 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FFxOiF4BYaMSTLgFXh text/plain Malicious From_Malware 225249.219832 CQThKQMoCdkkRtL1c 192.168.1.128 50664 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FqDd3P1HdB349zt134 text/plain Malicious From_Malware 242456.660718 COvU2v2gVhLFUpQpWc 192.168.1.128 50770 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FgJtoc8MJDMUZzRQ9 text/plain Malicious From_Malware 261110.344230 CsGqGh1R15tiHGoh1a 192.168.1.128 50891 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - Fcrmlh1b4GtJItE6T4 text/plain Malicious From_Malware 278130.987224 CnLUc02CAfzZ5xeVT9 192.168.1.128 50988 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FpgP4N26gyzny4lNfk text/plain Malicious From_Malware 295129.973209 ClpC0EsWIb0tdep6b 192.168.1.128 51099 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FP5twGnSq2eA3lKT8 text/plain Malicious From_Malware 314700.890564 Ceg2Bv1oEeKN2oYxBk 192.168.1.128 51225 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FX0K2w1ATEV6IF18L3 text/plain Malicious From_Malware 332617.085807 CZaceL3jSCFCtw10x9 192.168.1.128 51336 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FFyJYnlmArr3sG88h text/plain Malicious From_Malware 349286.116654 CJug8U5noehNmW6Dc 192.168.1.128 51435 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FOONWe4FKIhexWnPRe text/plain Malicious From_Malware 367198.243156 CBxrNtrnJzbWJEou3 192.168.1.128 51550 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FBPyqgZUnr9VjtUsd text/plain Malicious From_Malware 383984.641260 C9vMs42KJtCNduygx9 192.168.1.128 51660 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FnhdfJ1C4RkBMokZ0e text/plain Malicious From_Malware 400503.135157 CXuflN3YXS8CBGfYYh 192.168.1.128 51759 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - Ff5BNpqvOGrZjI3ri text/plain Malicious From_Malware 420146.870847 Cuf11M83OFVEkK882 192.168.1.128 51891 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FhhykrpqncwSKU5cb text/plain Malicious From_Malware 439077.808333 CZeltC2fOmk0GBeFsc 192.168.1.128 52007 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FGb8UJVeVazgKEsj text/plain Malicious From_Malware 457718.469232 C5mlha1Y0g0bxZ8Pxd 192.168.1.128 52120 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - F9Jcgq3BPGz45igoVf text/plain Malicious From_Malware 474732.916310 CHt2Mn1MG8U6Fq5toa 192.168.1.128 52229 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.4&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FnDHEP3ekITt25eYh8 text/plain Malicious From_Malware 474735.290343 Cw8A0f3MnoOU7n9iF1 192.168.1.128 52231 195.27.31.253 80 1 GET wow.uc.cn /biz-data/extensions/uc-nexus/uc-nexus.crx - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 833022 200 OK - - - (empty) - - - - - FsGJiE52hFxwLujq9 - Malicious From_Malware 491576.260915 Cle3sq2Jg1KDhSSbl3 192.168.1.128 52345 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FMBlhC26xevWDHqMPf text/plain Malicious From_Malware 508477.260152 ClRVeL3zfPWIUgETw9 192.168.1.128 52439 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - F96NWr3C46OiGuQgZd text/plain Malicious From_Malware 526252.107128 C0REcX1SfBtevVLr0a 192.168.1.128 52552 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - F9YmY01snjYxW4UEBe text/plain Malicious From_Malware 544059.416315 Cd0xtL1o3VGSQBBv3c 192.168.1.128 52665 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FgpUEaQBtPSNdlt5c text/plain Malicious From_Malware 561518.344437 CzSoVg1cnRyBCqa8S7 192.168.1.128 52775 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - Fy8T5l17IWuG0A8ONg text/plain Malicious From_Malware 579853.210520 C420Wk1yfkJPgSR0dk 192.168.1.128 52891 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FURjPO3zpEbn2rAoZg text/plain Malicious From_Malware 599560.003863 CyKFffKVDaFeUTsu5 192.168.1.128 53023 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FTkEcv3nrv002uVCi2 text/plain Malicious From_Malware 616446.874658 CYGDPm20Cf96LmXy13 192.168.1.128 53118 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FQIalm2hu20J2RIp18 text/plain Malicious From_Malware 633972.011190 ChBwc62ue6tPJV48k9 192.168.1.128 53233 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - Fg1H4C4P2OGNmvpYjj text/plain Malicious From_Malware 652146.446037 C8sztt38TQ7BFrj9jc 192.168.1.128 53347 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FAnKLS1fVSAyXCAbTl text/plain Malicious From_Malware 670726.275773 CNfYdv3uapCRPpe1Rd 192.168.1.128 53469 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - F2fheE1l3sRtS1dW3f text/plain Malicious From_Malware 690416.116952 CiALCT3nkdb3nCvtba 192.168.1.128 53592 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - Fz9oYi1qGm8Rdd1H text/plain Malicious From_Malware 707427.372546 CTYpox3UJHrbMHEe9j 192.168.1.128 53705 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FMYQeRnKWPowVs1Yj text/plain Malicious From_Malware 726933.573478 CveMmp20CV00J5ARa7 192.168.1.128 53823 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FpQa0iMca34h5aORe text/plain Malicious From_Malware 746673.527708 C752BX1iSn3s7TQqG7 192.168.1.128 53951 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FTEfA74UBF9kDkksui text/plain Malicious From_Malware 764395.220842 CWy4xE2JLrLk3soYk4 192.168.1.128 54062 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - Ft9uvu2VeKiWsZaH4k text/plain Malicious From_Malware 781919.845830 C3GCOwce73srDiemg 192.168.1.128 54163 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FvbRDb2VwysjqQGZZf text/plain Malicious From_Malware 798559.202739 CDxFNbsimpQ7Z8tqe 192.168.1.128 54276 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - F14GCf3OWKQ8rGAHJ6 text/plain Malicious From_Malware 817979.307847 CSusvw2DhwUknL325g 192.168.1.128 54390 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FQ4WOW2om5e14RXB78 text/plain Malicious From_Malware 835596.503049 C0gxLr3ga7Pa4HhJqb 192.168.1.128 54504 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - F7qZuD1doX52JFxZd1 text/plain Malicious From_Malware 854247.601390 CCsTKh4L8moxxzUTAi 192.168.1.128 54625 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - Fl7ukTvXeHUKJ9Q61 text/plain Malicious From_Malware 872034.985993 CFdXvz2b1n0mAXtLyc 192.168.1.128 54734 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FYk2yB4mnSpjHE8sek text/plain Malicious From_Malware 889141.691278 COVKrE1SqnRbnFuQjl 192.168.1.128 54844 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FUjUbj2Us9RStR2qD4 text/plain Malicious From_Malware 908905.215766 C6MnRQ1HPU5rnLYLw7 192.168.1.128 54974 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FhP6Lmx6p5OnL07P3 text/plain Malicious From_Malware 925520.062577 CpftC41PAXohEAcDqi 192.168.1.128 55075 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - Fdg02V2OIk840Cubi5 text/plain Malicious From_Malware 943426.636035 CT3pZISYqU8yun3X4 192.168.1.128 55188 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FAuBrA1u5pHlqODuGl text/plain Malicious From_Malware 960686.842563 CYAdPM23qJPcqobz05 192.168.1.128 55299 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - FBBGrd26AnxIpB0hpj text/plain Malicious From_Malware 980406.352934 CNANNk3RvlYs3BGEqe 192.168.1.128 55425 195.27.31.240 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - F4OFew3HbdNE4HQxng text/plain Malicious From_Malware 996646.889959 CITPrv4bB8hnd8Juf7 192.168.1.128 55525 195.27.31.250 80 1 GET down.up1.uc.cn /biz-data/extensions/uc-nexus/update.xml?os=win&arch=x86&nacl_arch=x86-32&prod=chromiumcrx&prodchannel=&prodversion=50.0.2661.102&lang=en-US&x=id=pogijhnlcfmcppgimcaccdkmbedjkmhi&v=0.7.7&uc - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 UBrowser/6.0.1308.1016 Safari/537.36 0 237 200 OK - - - (empty) - - - - - Fiaolq4iOVMZWzEFI5 text/plain Malicious From_Malware