SrcProcPublisher ContainsCIS "PB03 TRANSPORT LTD" OR TgtFileSha256 In AnyCase ("d55f983c994caa160ec63a59f6b4250fe67fb3e8c43a388aec60a4a6978e9f1e", "8dd620d9aeb35960bb766458c8890ede987c33d239cf730f93fe49d90ae759dd", "e2a24ab94f865caeacdf2c3ad015f31f23008ac6db8312c2cbfb32e4a5466ea2") OR SrcProcCmdLine ContainsCIS "c:\kworking\agent.exe"
DnsRequest RegExp "(?i)((dubnew|zewatchers|bouquet-de-roses|appsformacpc|friendsandbrgrs|thenewrejuveme|xn--singlebrsen-vergleich-nec|sabel-bf|seminoc|tastewilliamsburg|aselbermachen|creamery201|rerekatu|makeurvoiceheard|bradynursery|aarvorg|artige|highlinesouthasc|sofavietxinh|higadograsoweb|ruralarcoiris|harpershologram.wordpress|ohidesign|international-sound-awards|krlosdavid|durganews|coding-machine|caribbeansunpoker|mir-na-iznanku|promesapuertorico|grelot-home|id-vet|bricotienda|boldcitydowntown|homecomingstudio|sojamindbody|asgestion|danubecloud|no-plans|schoolofpassivewealth|lmtprovisions|talentwunder|acomprarseguidores|theapifactory|midmohandyman|nurturingwisdom|readberserk|firstpaymentservices|malychanieruchomoscipremium|travelffeine|latribuessentielle|smessier|sanaia|gantungankunciakrilikbandung|moveonnews|bhwlawfirm|iyengaryogacharlotte|calabasasdigest|elimchan|thewellnessmimi|controldekk|lichencafe|lefumetdesdombes|seagatesthreecharters|alsace-first|webmaster-peloton|jakekozmor|precisionbevel|globedivers.wordpress|nosuchthingasgovernment|backstreetpub|spsshomeworkhelp|lillegrandpalais).com)"
DnsRequest RegExp "(?i)((beyondmarcomdotcom.wordpress|wraithco|bookspeopleplaces|montrium|webcodingstudio|lucidinvestbank|ncs-graphic-studio|stingraybeach|lecantou-coworking|coursio|madinblack|bridgeloanslenders|resortmtn|quickyfunds|aminaboutique247|jobcenterkenya|jenniferandersonwriter|irinaverwer|the-virtualizer|outcomeisincome|helenekowalsky|withahmed|simplyblessedbykeepingitreal|havecamerawilltravel2017.wordpress|muamuadolls|balticdentists|jandaonline|datacenters-in-europe|commonground-stories|liveottelut|4youbeautysalon|adultgamezone|citymax-cr|portoesdofarrobo|evergreen-fishing|dpo-as-a-service|norpol-yachting|sloverse|candyhouseusa|drfoyle|dekkinngay|n1-headache|coastalbridgeadvisors|minipara|milestoneshows|ontrailsandboulevards|healthyyworkout|mylolis|fax-payday-loans|smokeysstoves|longislandelderlaw|dubscollective|luckypatcher-apkz|epwritescom.wordpress|romeguidedvisit|people-biz|blossombeyond50|theclubms|whittier5k|jolly-events|ravensnesthomegoods|nhadatcanho247|hihaho|tulsawaterheaterinstallation|purposeadvisorsolutions|faizanullah|directwindowco|herbayupro|lloydconstruction|mbxvii|tecnojobsnet|twohourswithlena.wordpress|hypozentrum|thomasvicino|denovofoodsgroup|bestbet|stacyloeb|kevinjodea|westdeptfordbuyrite|carriagehousesalonvt|corelifenutrition|hashkasolutindo|compliancesolutionsstrategies|mastertechengineering|pinkexcel|aprepol|xoabigail|pixelarttees|eco-southafrica|allentownpapershow|summitmarketingstrategies|completeweddingkansas|employeesurveys|monark|seitzdruck|alvinschwartz.wordpress|knowledgemuseumbd|launchhubl|revezlimage|dontpassthepepper|kaotikkustomz|solinegraphic|mylovelybluesky|run4study|pierrehale|cactusthebrand|101gowrie|nicoleaeschbachorg.wordpress|mindpackstudios|bouncingbonanza|lukeshepley.wordpress|igfap|bockamp|tinyagency|familypark40|alfa-stroy72|boompinoy|mdacares|qualitus|deepsouthclothingcompany|ilcdover|humancondition|insigniapmg|arteservicefabbro|austinlchurch|vickiegrayimages|crediacces|comarenterprises|xltyu|kikedeoliveira|remcakram|degroenetunnel|strandcampingdoonbeg|haar-spange|pmcimpact|stopilhan|dareckleyministries|braffinjurylawfirm|pcprofessor|ianaswanson|nijaplay|lubetkinmediacompanies|ouryoungminds.wordpress|apprendrelaudit|securityfmm|nmiec|sla-paris|handi-jack-llc|groupe-cets|sevenadvertising|ateliergamila|wacochamber|centuryrs|zflas|thefixhut|goodgirlrecovery|botanicinnovations|saxtec|smalltownideamill.wordpress|tarotdeseidel|imadarchid|darrenkeslerministries|eraorastudio|connectedace|pcp-nc|jyzdesign|offroadbeasts|greenfieldoptimaldentalcare|embracinghiscall|rosavalamedahr|quizzingbee|todocaracoles|shiftinspiration|bodyforwife|sportsmassoren|trystana|slashdb|selfoutlet|personalenhancementcenter|walkingdeadnj|d1franchise|anthonystreetrimming|brawnmediany|journeybacktolife|asteriag|hvccfloorcare|centromarysalud|asiluxury|chrissieperry|verbisonline|onlybacklink|sagadc|mytechnoway|fitnessbazaar|fayrecreations|maryloutaylor|maratonaclubedeportugal|maineemploymentlawyerblog|kosterra|punchbaby|wmiadmin|harveybp|johnsonfamilyfarmblog.wordpress|mymoneyforex|farhaani|carolinepenn|trackyourconstruction|heliomotion|rollingrockcolumbia|judithjansen|irishmachineryauctions|intecwi|porno-gringo|jacquin-maquettes|anteniti|dutchbrewingcoffee|behavioralmedicinespecialists|socialonemedia|nokesvilledentistry|chandlerpd|jsfg|joyeriaorindia|yamalevents|renergysolution|roygolden|delawarecorporatelaw|jiloc|entopic|hellohope|thaysa|nataschawessels|charlesreger|reddysbakery|waynela|ahouseforlease|mikeramirezcpa|dramagickcom.wordpress|commercialboatbuilding|ogdenvision|gadgetedges|izzi360|turkcaparbariatrics|kaminscy|filmvideoweb|meusharklinithome.wordpress|xn--thucmctc-13a1357egba|igorbarbosa|homesdollar|evologic-technologies|desert-trails|nvwoodwerks|bodyfulls|myhostcloud|amylendscrestview|bptdmaluku|perbudget|strategicstatements|simpliza|sanyue119|cuppacap|themadbotter|coding-marking|sachnendoc|thedad|mercantedifiori|artotelamsterdam|plotlinecreative|bauertree|jasonbaileystudio|bee4win|fiscalsort|jeanlouissibomana|eadsmurraypugh|fotoscondron|DupontSellsHomes|brigitte-erler|imperfectstore|shonacox|mariposapropaneaz|cuspdental|philippedebroca|tanciu|cortec-neuro|biortaggivaldelsa|fitnessingbyjessica|officehymy|shadebarandgrillorlando|executiveairllc|henricekupper|shsthepapercut|lbcframingelectrical|clos-galant|dr-seleznev|siliconbeach-realestate|tanzprojekt|fatfreezingmachines|softsproductkey|marathonerpaolo|gopackapp|manutouchmassage|marketingsulweb|craigvalentineacademy|catholicmusicfest|woodworkersolution|cyntox|advizewealth|y-archive|saarland-thermen-resort|mrsfieldskc|rksbusiness|sexandfessenjoon.wordpress|first-2-aid-u|the-domain-trader|rocketccw|joseconstela|carlosja|real-estate-experts|kariokids|oceanastudios|abuelos|birnam-wood|besttechie|chaotrang|galleryartfair|steampluscarpetandfloors|sterlingessay|justinvieira|shiresresidential|modestmanagement|cityorchardhtx|narcert).com)"
DnsRequest RegExp "(?i)(boisehosting.net|fotoideaymedia.es|stallbyggen.se|koken-voor-baby.nl|juneauopioidworkgroup.org|vancouver-print.ca|seevilla-dr-sturm.at|olejack.ru|i-trust.dk|wasmachtmeinfonds.at|ceres.org.au|cursoporcelanatoliquido.online|marietteaernoudts.nl|charlottepoudroux-photographie.fr|klimt2012.info|accountancywijchen.nl|vannesteconstruct.be|wellplast.se|andersongilmour.co.uk|facettenreich27.de|balticdermatology.lt|crowd-patch.co.uk|jorgobe.at|danskretursystem.dk|supportsumba.nl|projetlyonturin.fr|kidbucketlist.com.au|leather-factory.co.jp|i-arslan.de|ki-lowroermond.nl|kissit.ca|dezatec.es|cite4me.org|musictreehouse.net|hkr-reise.de|gasolspecialisten.se|vyhino-zhulebino-24.ru|karacaoglu.nl|bayoga.co.uk|solhaug.tk|jadwalbolanet.info|ncid.bc.ca|castillobalduz.es|dushka.ua|hiddencitysecrets.com.au|roadwarrior.app|newstap.com.ng|senson.fi|denifl-consulting.at|myzk.site|argos.wityu.fund|dinslips.se|kalkulator-oszczednosci.pl|wurmpower.at|drugdevice.org|foretprivee.ca|funjose.org.gt|blgr.be|lescomtesdemean.be|lusak.at|better.town|kafu.ch|ikads.org|id-et-d.fr|prochain-voyage.net|edrcreditservices.nl|yassir.pro|bigbaguettes.eu|edv-live.de|littlebird.salon|toponlinecasinosuk.co.uk|zonamovie21.net|caribdoctor.org|body-guards.it|herbstfeststaefa.ch|corola.es|pomodori-pizzeria.de|copystar.co.uk|systemate.dk|koko-nora.dk|mousepad-direkt.de|iwelt.de|dirittosanitario.biz|boulderwelt-muenchen-west.de|chatizel-paysage.fr|praxis-foerderdiagnostik.de|neuschelectrical.co.za|schmalhorst.de|mediaclan.info|ihr-news.jp|bunburyfreightservices.com.au|edelman.jp|enovos.de|loprus.pl|importardechina.info|freie-baugutachterpraxis.de|maxadams.london|deltacleta.cat|maureenbreezedancetheater.org|plv.media|winrace.no|leoben.at|tuuliautio.fi|1team.es|iyahayki.nl|satyayoga.de|mezhdu-delom.ru|hugoversichert.de|imaginado.de|sauschneider.info|atalent.fi|conexa4papers.trade|global-kids.info|serce.info.pl|agence-referencement-naturel-geneve.net|zimmerei-fl.de|villa-marrakesch.de|x-ray.ca|schraven.de|bowengroup.com.au|sairaku.net|southeasternacademyofprosthodontics.org|pubweb.carnet.hr|panelsandwichmadrid.es|xn--vrftet-pua.biz|adoptioperheet.fi|miriamgrimm.de|filmstreamingvfcomplet.be|deoudedorpskernnoordwijk.nl|live-your-life.jp|mardenherefordshire-pc.gov.uk|instatron.net|mirjamholleman.nl|euro-trend.pl|basisschooldezonnewijzer.nl|quemargrasa.net|actecfoundation.org|gamesboard.info|podsosnami.ru|extensionmaison.info|polzine.net|hmsdanmark.dk|linnankellari.fi|elpa.se|rozemondcoaching.nl|lenreactiv-shop.ru|uranus.nl|advokathuset.dk|ora-it.de|bargningavesta.se|www1.proresult.no|notsilentmd.org|makeflowers.ru|zimmerei-deboer.de|iwr.nl|wychowanieprzedszkolne.pl|greenpark.ch|lachofikschiet.nl|parking.netgateway.eu|tanzschule-kieber.de|helikoptervluchtnewyork.nl|cimanchesterescorts.co.uk|pelorus.group|kedak.de|lapmangfpt.info.vn|pivoineetc.fr|anybookreader.de|unim.su|wien-mitte.co.at|forestlakeuca.org.au|psnacademy.in|cleliaekiko.online|microcirc.net|theduke.de|despedidascostablanca.es|alten-mebel63.ru|profectis.de|mepavex.nl|rimborsobancario.net|pasvenska.se|videomarketing.pro|licor43.de|ventti.com.ar|buymedical.biz|milsing.hr|sotsioloogia.ee|kirkepartner.dk|partnertaxi.sk|visiativ-industry.fr|chefdays.de|d2marketing.co.uk|lapinlviasennus.fi|miraclediet.fun|bristolaeroclub.co.uk|baronloan.org|eglectonk.online|bastutunnan.se|finde-deine-marke.de|gporf.fr|pmc-services.de|transportesycementoshidalgo.es|siluet-decor.ru|milltimber.aberdeen.sch.uk|tinkoff-mobayl.ru|expandet.dk|polymedia.dk|newyou.at|tomaso.gr|sweering.fr|spacecitysisters.org|bierensgebakkramen.nl|coffreo.biz|tandartspraktijkheesch.nl|deko4you.at|tennisclubetten.nl|classycurtainsltd.co.uk|veybachcenter.de|falcou.fr|beautychance.se|pocket-opera.de|christ-michael.net|vdberg-autoimport.nl|4net.guru|finediningweek.pl|stampagrafica.es|ussmontanacommittee.us|beaconhealthsystem.org|upplandsspar.se|tradiematepro.com.au|oneplusresource.org|maasreusel.nl|campus2day.de|burkert-ideenreich.de|you-bysia.com.au|mediaacademy-iraq.org|eaglemeetstiger.de|stemenstilte.nl|biapi-coaching.fr|art2gointerieurprojecten.nl|ditog.fr|kadesignandbuild.co.uk|abogadosaccidentetraficosevilla.es|kojinsaisei.info|schmalhorst.de|bigler-hrconsulting.ch|xn--rumung-bua.online|naturstein-hotte.de|stormwall.se|collaborativeclassroom.org|streamerzradio1.site|smart-light.co.uk|wari.com.pe|logopaedie-blomberg.de|mrsplans.net|humanityplus.org|interactcenter.org|ungsvenskarna.se|35-40konkatsu.net|spectrmash.ru|torgbodenbollnas.se|drnice.de|huesges-gruppe.de|promalaga.es|paulisdogshop.de|hotelsolbh.com.br|julis-lsa.de|darnallwellbeing.org.uk|educar.org|kuntokeskusrok.fi|truenyc.co|comparatif-lave-linge.fr|autodemontagenijmegen.nl|ilso.net|micahkoleoso.de|fairfriends18.de|ecoledansemulhouse.fr|osterberg.fi|surespark.org.uk|stupbratt.no|mirkoreisser.de|glennroberts.co.nz|zso-mannheim.de|yousay.site|oneheartwarriors.at|ausbeverage.com.au|testzandbakmetmening.online|grupocarvalhoerodrigues.com.br|werkkring.nl|hotelzentral.at|vibethink.net|123vrachi.ru|allure-cosmetics.at|mrxermon.de|bloggyboulga.net|bouldercafe-wuppertal.de|aglend.com.au|tongdaifpthaiphong.net|solerluethi-allart.ch|otto-bollmann.de|vibehouse.rw|erstatningsadvokaterne.dk|socstrp.org|pier40forall.org|ostheimer.at|marcuswhitten.site|mediaplayertest.net|stoeberstuuv.de|lebellevue.fr|gonzalezfornes.es|kunze-immobilien.de|myhealth.net.au|xn--fn-kka.no|mank.de|croftprecision.co.uk|gw2guilds.org|raschlosser.de|geekwork.pl|pv-design.de|opatrovanie-ako.sk|ausair.com.au|parebrise-tla.fr|vloeren-nu.nl|conasmanagement.de|dlc.berlin|lykkeliv.net|hexcreatives.co|patrickfoundation.net|tonelektro.nl|atozdistribution.co.uk|urclan.net|body-armour.online|nsec.se|autopfand24.de|syndikat-asphaltfieber.de|yourobgyn.net|vihannesporssi.fi|new.devon.gov.uk|teczowadolina.bytom.pl|antonmack.de|pogypneu.sk|creative-waves.co.uk|htchorst.nl|xn--fnsterputssollentuna-39b.se|parkstreetauto.net|tsklogistik.eu|smejump.co.th|diversiapsicologia.es|unetica.fr|cranleighscoutgroup.org|amerikansktgodis.se|evangelische-pfarrgemeinde-tuniberg.de|fransespiegels.nl|qualitaetstag.de|kath-kirche-gera.de|alhashem.net|schutting-info.nl|2ekeus.nl|berlin-bamboo-bikes.org|blood-sports.net|physiofischer.de|babcockchurch.org|plantag.de|krcove-zily.eu|praxis-management-plus.de|calxplus.eu|mountsoul.de|fundaciongregal.org|klusbeter.nl|jobmap.at|oldschoolfun.net|abl1.net|labobit.it|carrybrands.nl|kisplanning.com.au|rostoncastings.co.uk|vetapharma.fr|pay4essays.net|work2live.de|stoneys.ch|webhostingsrbija.rs|lange.host|baustb.de|psa-sec.de|hushavefritid.dk|ra-staudte.de|starsarecircular.org|stoeferlehalle.de|merzi.info|garage-lecompte-rouen.fr|nestor-swiss.ch|kmbshipping.co.uk|planchaavapor.net|dr-pipi.de|qlog.de|lynsayshepherd.co.uk|aco-media.nl|abogadoengijon.es|liliesandbeauties.org|norovirus-ratgeber.de|thee.network|bundabergeyeclinic.com.au|sandd.nl|americafirstcommittee.org|milanonotai.it|easytrans.com.au|operaslovakia.sk|edgewoodestates.org|cnoia.org|rieed.de|katketytaanet.fi|lascuola.nl|assurancesalextrespaille.fr|paymybill.guru|ligiercenter-sachsen.de|answerstest.ru|airconditioning-waalwijk.nl|freie-gewerkschaften.de|dnepr-beskid.com.ua|dutchcoder.nl|iphoneszervizbudapest.hu|bingonearme.org|wolf-glas-und-kunst.de|scenepublique.net|spd-ehningen.de|boosthybrid.com.au|petnest.ir|associacioesportivapolitg.cat|12starhd.online|jerling.de|sarbatkhalsafoundation.org|skiltogprint.no|craigmccabe.fun|puertamatic.es|architekturbuero-wagner.net|vitavia.lt|levihotelspa.fi|exenberger.at|architecturalfiberglass.org|slupetzky.at|sinal.org|groupe-frayssinet.fr|synlab.lt|kamienny-dywan24.pl|team-montage.dk|iviaggisonciliegie.it|rehabilitationcentersinhouston.net|zervicethai.co.th|ziegler-praezisionsteile.de|courteney-cox.net|trapiantofue.it|space.ua|odiclinic.org|noesis.tech|urmasiimariiuniri.ro|8449nohate.org|ceid.info.tr|gemeentehetkompas.nl|sportverein-tambach.de|ivivo.es|bordercollie-nim.nl|hrabritelefon.hr|ctrler.cn|makeitcount.at|foryourhealth.live|seproc.hn|brandl-blumen.de|micro-automation.de|geisterradler.de|morawe-krueger.de|figura.team|vitalyscenter.es|jvanvlietdichter.nl|crosspointefellowship.church|femxarxa.cat|wsoil.com.sg|xlarge.at|admos-gleitlager.de|liikelataamo.fi|nancy-informatique.fr|stefanpasch.me|aurum-juweliere.de|hatech.io|ilive.lt|fensterbau-ziegler.de|tips.technology|pt-arnold.de|bildungsunderlebnis.haus|brevitempore.net|sportiomsportfondsen.nl|digivod.de|smhydro.com.pl|echtveilig.nl|schlafsack-test.net|galserwis.pl|faroairporttransfers.net|suncrestcabinets.ca|teresianmedia.org|thomas-hospital.de|ralister.co.uk|richard-felix.co.uk|sipstroysochi.ru|campusoutreach.org|katiekerr.co.uk|ino-professional.ru|proudground.org|forskolorna.org|uimaan.fi|pferdebiester.de|kao.at|parks-nuernberg.de|div-vertriebsforschung.de|radaradvies.nl|daklesa.de|waveneyrivercentre.co.uk|fibrofolliculoma.info|whyinterestingly.ru|blumenhof-wegleitner.at|bxdf.info|vermoote.de|plastidip.com.ar|autofolierung-lu.de|highimpactoutdoors.net|cwsitservices.co.uk|hairstylesnow.site|victoriousfestival.co.uk|web.ion.ag|simoneblum.de|blacksirius.de|naturavetal.hr|poultrypartners.nl|mirjamholleman.nl|baumkuchenexpo.jp|insidegarage.pl|penco.ie|hebkft.hu|ftlc.es|cirugiauretra.es|c-a.co.in|aunexis.ch|gmto.fr|berliner-versicherungsvergleich.de|vesinhnha.com.vn|greenko.pl|cerebralforce.net|rota-installations.co.uk|presseclub-magdeburg.de|verifort-capital.de|icpcnj.org|1kbk.com.ua|noixdecocom.fr|flexicloud.hk|danielblum.info|mdk-mediadesign.de|smale-opticiens.nl|kaliber.co.jp|almosthomedogrescue.dog|binder-buerotechnik.at|happyeasterimages.org|dr-tremel-rednitzhembach.de|zweerscreatives.nl|argenblogs.com.ar|heurigen-bauer.at|spargel-kochen.de|pridoxmaterieel.nl|heidelbergartstudio.gallery|ftf.or.at|tstaffing.nl|abogadosadomicilio.es|ncuccr.org|caffeinternet.it|abogados-en-alicante.es|oslomf.no|gastsicht.de|slwgs.org|vorotauu.ru|lionware.de|bogdanpeptine.ro|innote.fi|365questions.org|walter-lemm.de|teknoz.net|layrshift.eu|blog.solutionsarchitect.guru|parkcf.nl|upmrkt.co|modelmaking.nl|nandistribution.nl|ledmes.ru|woodleyacademy.org|dw-css.de|leda-ukraine.com.ua|destinationclients.fr|cheminpsy.fr|devstyle.org|kindersitze-vergleich.de|live-con-arte.de|huehnerauge-entfernen.de|nacktfalter.de|devok.info|esope-formation.fr|sw1m.ru|mrtour.site|hannah-fink.de|bafuncs.org|kampotpepper.gives|ampisolabergeggi.it|abitur-undwieweiter.de|hoteledenpadova.it|delchacay.com.ar|theshungiteexperience.com.au|deschl.net|dsl-ip.de|bargningharnosand.se|mmgdouai.fr|daniel-akermann-architektur-und-planung.ch|xn--logopdie-leverkusen-kwb.de|buroludo.nl|ymca-cw.org.uk|allamatberedare.se|servicegsm.net|kingfamily.construction|nakupunafoundation.org|ladelirante.fr|kamahouse.net|gratispresent.se|gaiam.nl|pasivect.co.uk|fizzl.ru|oemands.dk|levdittliv.se|simpkinsedwards.co.uk|celeclub.org|urist-bogatyr.ru|lapinvihreat.fi|ecpmedia.vn|zieglerbrothers.de|piajeppesen.dk|toreria.es|analiticapublica.es|leeuwardenstudentcity.nl|psc.de|tetinfo.in|ai-spt.jp|homng.net|em-gmbh.ch|trulynolen.co.uk|csgospeltips.se|luxurytv.jp|theletter.company|bbsmobler.se|restaurantesszimmer.de|insp.bi|autodujos.lt|321play.com.hk|saka.gr|tandartspraktijkhartjegroningen.nl|waermetauscher-berechnen.de|waywithwords.net|naswrrg.org|spinheal.ru|slimani.net|triggi.de)"