26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2c:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T416,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample 57f17a78ef24… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample 57f17a78ef24…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/57f17a78ef24b434711ce927d44b88754f0ec42c1fc263caf9d7943f9ac34e61","keywords":["malware analysis","sandbox report","threat intelligence","57f17a78ef24b434711ce927d44b88754f0ec42c1fc263caf9d7943f9ac34e61"],"about":{"@type":"SoftwareApplication","name":"https://foros.3dgames.com.ar/threads/1077190-dhzdfhgzdfgdzfgzdfg-fdzgdfgdzfgzdfgdfg","applicationCategory":["url"],"identifier":"57f17a78ef24b434711ce927d44b88754f0ec42c1fc263caf9d7943f9ac34e61"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":3},"behavioralIndicators":{"malicious":0,"suspicious":3},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T4f5,"\Sessions\1\BaseNamedObjects\SM0:5500:120:WilError_01" "Local\SM0:6620:304:WilStaging_02" "Local\SM0:6620:120:WilError_01" "SM0:6620:304:WilStaging_02" "SM0:6620:120:WilError_01" "InternetShortcutMutex" "HKEY_LOCAL_MACHINE_SOFTWARE_Microsoft_Speech_OneCore_Voices_Tokens_MSTTS_V110_enUS_DavidM_Mutex" "Local\SM0:5500:304:WilStaging_02" "Local\SM0:5500:120:WilError_01" "SM0:5500:304:WilStaging_02" "HKEY_LOCAL_MACHINE_SOFTWARE_Microsoft_Speech_OneCore_Voices_Tokens_MSTTS_V110_enUS_ZiraM_Mutex" "ChromeProcessSingletonStartup!" "HKEY_LOCAL_MACHINE_SOFTWARE_Microsoft_Speech_OneCore_Voices_Tokens_MSTTS_V110_enUS_MarkM_Mutex" "\Sessions\1\BaseNamedObjects\SM0:5500:304:WilStaging_02" "\Sessions\1\BaseNamedObjects\Local\SM0:5500:304:WilStaging_02" "\Sessions\1\BaseNamedObjects\ChromeProcessSingletonStartup!" "\Sessions\1\BaseNamedObjects\Local\SM0:5500:120:WilError_01" "\Sessions\1\BaseNamedObjects\HKEY_LOCAL_MACHINE_SOFTWARE_Microsoft_Speech_OneCore_Voices_Tokens_MSTTS_V110_enUS_DavidM_Mutex" "\Sessions\1\BaseNamedObjects\HKEY_LOCAL_MACHINE_SOFTWARE_Microsoft_Speech_OneCore_Voices_Tokens_MSTTS_V110_enUS_MarkM_Mutex" "\Sessions\1\BaseNamedObjects\HKEY_LOCAL_MACHINE_SOFTWARE_Microsoft_Speech_OneCore_Voices_Tokens_MSTTS_V110_enUS_ZiraM_Mutex"28:Tc28,"urlref_httpsforos.3dgames.com.arthreads1077190-dhzdfhgzdfgdzfgzdfg-fdzgdfgdzfgzdfgdfg" has type "HTML document ISO-8859 text with very long lines with CRLF LF line terminators"- [targetUID: N/A] "shopping.js" has type "UTF-8 Unicode text with very long lines with CRLF line terminators"- Location: [%LOCALAPPDATA%\Microsoft\Edge\User Data\Edge Shopping\2.0.2353.0\shopping.js]- [targetUID: 00000000-00005500] "Filtering Rules" has type "data"- Location: [%TEMP%\5500_2119235200\Filtering Rules]- [targetUID: 00000000-00005500] "edge_driver.js" has type "UTF-8 Unicode text with very long lines with CRLF line terminators"- Location: [%LOCALAPPDATA%\Microsoft\Edge\User Data\Edge Shopping\2.0.2353.0\edge_driver.js]- [targetUID: 00000000-00005500] "load_statistics.db-wal" has type "SQLite Write-Ahead Log version 3007000"- Location: [%LOCALAPPDATA%\Microsoft\Edge\User Data\Default\load_statistics.db-wal]- [targetUID: 00000000-00005500] "data_2" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2]- [targetUID: 00000000-00007196] "auto_open_controller.js" has type "UTF-8 Unicode text with very long lines with CRLF line terminators"- Location: [%TEMP%\5500_1920314506\auto_open_controller.js]- [targetUID: 00000000-00005500] "947fbba4-b5e4-4011-9310-5d67c52b632b.tmp" has type "gzip compressed data from FAT filesystem (MS-DOS OS/2 NT) original size modulo 2^32 537104"- [targetUID: N/A] "data_1" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1]- [targetUID: 00000000-00007196] "edge_checkout_page_validator.js" has type "UTF-8 Unicode text with very long lines with CRLF line terminators"- Location: [%TEMP%\5500_1920314506\edge_checkout_page_validator.js]- [targetUID: 00000000-00005500] "edge_confirmation_page_validator.js" has type "UTF-8 Unicode text with very long lines with CRLF line terminators"- Location: [%TEMP%\5500_1920314506\edge_confirmation_page_validator.js]- [targetUID: 00000000-00005500] "product_page.js" has type "UTF-8 Unicode text with very long lines with CRLF line terminators"- Location: [%TEMP%\5500_1920314506\product_page.js]- [targetUID: 00000000-00005500] "Filtering Rules-AA" has type "data"- Location: [%TEMP%\5500_2119235200\Filtering Rules-AA]- [targetUID: 00000000-00005500] "shoppingfre.js" has type "UTF-8 Unicode text with very long lines with CRLF line terminators"- Location: [%TEMP%\5500_1920314506\shoppingfre.js]- [targetUID: 00000000-00005500] "edge_autofill_field_data.json" has type "JSON data"- Location: [%TEMP%\5500_2098442604\edge_autofill_field_data.json]- [targetUID: 00000000-00005500] "000003.log" has type "data"- Location: [%LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log]- [targetUID: 00000000-00005500] "History" has type "SQLite 3.x database last written using SQLite version 3038005"- Location: [%LOCALAPPDATA%\Microsoft\Edge\User Data\Default\History]- [targetUID: 00000000-00005500] "f_000244" has type "gzip compressed data max compression original size modulo 2^32 407670"- [targetUID: N/A]29:T2943,Pattern match: "https://foros.3dgames.com.ar/threads/1077190-dhzdfhgzdfgdzfgzdfg-fdzgdfgdzfgzdfgdfg" Pattern match: "https://foros.3dgames.com.ar" Pattern match: "http://www.w3.org/2000/svg" Pattern match: "Math.PI/180" Heuristic match: "foros.3dgames.com.ar" Heuristic match: "img.lzrikate.com" Heuristic match: "profiles.3dgames.com.ar" Pattern match: "https://reactjs.org/docs/error-decoder.html?invariant=+e,n=1;n" Pattern match: "http://www.w3.org/2000/svg\n" Pattern match: "https://github.com/microsoft/fast/issues/5848\n" Pattern match: "www.playstation.com},{applied_policy:block,domain:bing.com},{applied_policy:block,domain:browserbench.org},{applied_policy:block,domain:www.principledtechnologies.com},{applied_policy:block,domain:web.basemark.com},{applie" Pattern match: "https://www.w3.org/1999/xhtml" Pattern match: "https://foros.3dgames.com.ar/" Pattern match: "https://foros.3dgames.com.ar/favicon.ico" Pattern match: "https://foros.3dgames.com.ar/clientscript/jquery/jquery-1.7.2.min.js?nocache=11072016" Pattern match: "https://foros.3dgames.com.ar/fancybox/jquery.fancybox-1.3.4.js?nocache=11072016" Pattern match: "https://foros.3dgames.com.ar/clientscript/jquery/jquery.tipTip.js?nocache=11072016" Pattern match: "https://profiles.3dgames.com.ar/assets/jquery.user_bar.js?nocache=1112233344" Pattern match: "https://foros.3dgames.com.ar/clientscript/twitter.js?nocache=423432432" Pattern match: "https://foros.3dgames.com.ar/clientscript/jquery/jquery.facebox.js?nocache=11072016" Pattern match: "https://foros.3dgames.com.ar/clientscript/dropzone.js?nocache=160320172" Pattern match: "https://foros.3dgames.com.ar/clientscript/vbulletin-core.js?v=420&nocache=11122122" Pattern match: "https://foros.3dgames.com.ar/clientscript/jquery/jquery.tabSlideOut.v1.3.js?nocache=11072016" Pattern match: "https://www.googletagservices.com/tag/js/gpt.js" Pattern match: "https://foros.3dgames.com.ar/css/forofooter.css?nocache=432432" Pattern match: "https://foros.3dgames.com.ar/fancybox/jquery.fancybox-1.3.4.css?nocache=54354543" Pattern match: "https://foros.3dgames.com.ar/css/facebox.css?nocache=11072016" Pattern match: "https://foros.3dgames.com.ar/css/tipTip.css?nocache=11072016" Pattern match: "https://profiles.3dgames.com.ar/assets/user_bar.css?nocache=32432432" Pattern match: "https://foros.3dgames.com.ar/css/dropzone.css?nocache=150320173" Pattern match: "https://fonts.googleapis.com/css?family=Open+Sans:400italic,400,600,700" Pattern match: "https://foros.3dgames.com.ar/css/foro3dg.css?nocache=112236" Pattern match: "https://foros.3dgames.com.ar/css/userhub.css?nocache=112233" Pattern match: "https://foros.3dgames.com.ar/clientscript/clipboard.min.js?nocache=4354374" Pattern match: "https://foros.3dgames.com.ar/clientscript/mustache.min.js?nocache=4354374" Pattern match: "https://foros.3dgames.com.ar/clientscript/userhub.js?nocache=4354374" Pattern match: "https://foros.3dgames.com.ar/clientscript/foro3dg.js?nocache=4354374" Pattern match: "https://foros.3dgames.com.ar/clientscript/tmt.js?nocache=4354374" Pattern match: "https://player.soundon.fm/p/37b62138-01e3-45e2-a97c-a3b32561fddf" Pattern match: "https://player.soundon.fm/p/f49ee76b-e23f-4c23-a8c7-a68b84bcd4d3" Pattern match: "https://player.soundon.fm/p/df36f5d7-37ed-4383-b53a-0860f3d0345e" Pattern match: "https://player.soundon.fm/p/ebb1bd10-c8ef-496b-b6a8-a8aaa1393757" Pattern match: "https://player.soundon.fm/p/14fe27ad-f465-4a74-a4ca-43c2dfe6998e" Pattern match: "https://www.3dgames.com.ar/images/fbicon.jpg" Pattern match: "https://foros.3dgames.com.ar/threads/1077190-dhzdfhgzdfgdzfgzdfg-fdzgdfgdzfgzdfgdfg?s=7fc8f6f3bb4a85e593100714be3f45bb" Pattern match: "https://foros.3dgames.com.ar/clientscript/ncode_imageresizer_v1.6.js" Pattern match: "https://www.google-analytics.com/analytics.js','ga" Pattern match: "connect.facebook.net/en_US/sdk.js#xfbml=1&version=v2.6" Pattern match: "https://fonts.googleapis.com/css?family=Titillium+Web:400,600,700" Pattern match: "https://www.3dgames.com.ar/" Pattern match: "https://profiles.3dgames.com.ar/assets/layout/header_logo.png" Pattern match: "https://foros.3dgames.com.ar/threads/794857-que-es-3dgames-preguntas-frecuentes" Pattern match: "https://foros.3dgames.com.ar/forums/27-bienvenidas-mesa-de-ayuda" Pattern match: "https://foros.3dgames.com.ar/threads/795055-reglas-de-convivencia-reglamento-tos" Pattern match: "https://foros.3dgames.com.ar/threads/912110-como-anunciar-en-3dgames" Pattern match: "https://foros.3dgames.com.ar/forums/143-comunidad" Pattern match: "https://foros.3dgames.com.ar/forums/514-3dg-founders" Pattern match: "https://foros.3dgames.com.ar/forums/144.discusion-general" Pattern match: "https://foros.3dgames.com.ar/forums/70-cine-musica-arte-y-tv" Pattern match: "https://foros.3dgames.com.ar/forums/363-empleos-estudios-y-negocios" Pattern match: "https://foros.3dgames.com.ar/forums/151-deportes" Pattern match: "https://foros.3dgames.com.ar/forums/160-el-taller-autos-motos-y-tunning" Pattern match: "https://foros.3dgames.com.ar/forums/259-sexualidad" Pattern match: "https://foros.3dgames.com.ar/forums/326-informatica-y-tecnologia" Pattern match: "https://foros.3dgames.com.ar/forums/171-tech-business-amp-social-media" Pattern match: "https://foros.3dgames.com.ar/forums/504-electronica-impresion-3d-y-robotica" Pattern match: "https://foros.3dgames.com.ar/forums/122-tecnologia-electronicos-y-gadgets" Pattern match: "https://foros.3dgames.com.ar/forums/374-audio-y-sonido" Pattern match: "https://foros.3dgames.com.ar/forums/31-hardware" Pattern match: "https://foros.3dgames.com.ar/forums/30-software" Pattern match: "https://foros.3dgames.com.ar/forums/191-internet-y-redes" Pattern match: "https://foros.3dgames.com.ar/forums/123-dispositivos-moviles" Pattern match: "https://foros.3dgames.com.ar/forums/423-juegos" Pattern match: "https://foros.3dgames.com.ar/forums/480-general-juegos" Pattern match: "https://foros.3dgames.com.ar/forums/77-consolas" Pattern match: "https://foros.3dgames.com.ar/forums/6-accion-y-aventura" Pattern match: "https://foros.3dgames.com.ar/forums/324-rol-y-estrategia" Pattern match: "https://foros.3dgames.com.ar/forums/39-simuladores-y-deportes" Pattern match: "https://foros.3dgames.com.ar/forums/32-compra-venta" Pattern match: "https://foros.3dgames.com.ar/forums/246-compra-venta-usados" Pattern match: "https://cv.3dgames.com.ar/" Pattern match: "https://profiles.3dgames.com.ar/user/new" Pattern match: "https://login.3dgames.com.ar/login?service=https://foros.3dgames.com.ar/threads/1077190-dhzdfhgzdfgdzfgzdfg-fdzgdfgdzfgzdfgdfg" Pattern match: "https://foros.3dgames.com.ar/search.php" Pattern match: "https://www.3dgames.com.ar" Pattern match: "https://profiles.3dgames.com.ar" Pattern match: "https://foros.3dgames.com.ar/compra-venta.32" Pattern match: "https://cv.3dgames.com.ar" Pattern match: "https://profiles.3dgames.com.ar/user/subscription" Pattern match: "https://donate.3dgames.com.ar" Pattern match: "https://foros.3dgames.com.ar/default_avatars/default_avatar_mini.jpg" Pattern match: "https://player.soundon.fm/p/80d0e91b-9e9d-4a46-ad5b-875b518e3f19" Pattern match: "https://player.soundon.fm/p/4a37aa40-94b8-481b-9731-63513799cf6a" Pattern match: "https://player.soundon.fm/p/af06ea1e-0471-4f73-8217-b0cb53533c41" Pattern match: "https://player.soundon.fm/p/06c39593-8f6d-4a4b-a1b5-8c364173ceaf" Pattern match: "https://player.soundon.fm/p/88aa6aa9-1ccc-4352-991f-51bcfe106919" Pattern match: "https://player.soundon.fm/p/55e571e2-6ecc-4abe-8982-edb9c8efb031" Pattern match: "https://player.soundon.fm/p/c37eb19b-06fb-40ce-a9e5-e5300f2a75b7" Pattern match: "https://player.soundon.fm/p/10099468-8ace-4e31-8dd8-95a72074e818" Pattern match: "https://player.soundon.fm/p/f44a8292-fb8a-4963-a000-0f4727fdd637" Pattern match: "https://player.soundon.fm/p/b4e794c2-bc41-49f6-90b8-6ff55a25b98e" Pattern match: "https://player.soundon.fm/p/0e03a67a-69ef-47de-80f8-98842ecc72bc" Pattern match: "https://player.soundon.fm/p/2158aec5-340f-47d9-958f-a3dda96f5cd9" Pattern match: "https://player.soundon.fm/p/b19bb2a6-42a1-43b7-a3a1-b73f40c5d0d2" Pattern match: "https://player.soundon.fm/p/8474e1aa-3951-4f1c-9907-10eaf5b555b4" Pattern match: "https://player.soundon.fm/p/5637b414-4307-46e8-b25d-44476c8d09eb" Pattern match: "https://telegram.me/share/url?url=https://foros.3dgames.com.ar/threads/1077190-dhzdfhgzdfgdzfgzdfg-fdzgdfgdzfgzdfgdfg?s=7fc8f6f3bb4a85e593100714be3f45bb&p=24615010&viewfull=1&text=dhzdfhgzdfgdzfgzdfg" Pattern match: "https://wa.me/?text=*dhzdfhgzdfgdzfgzdfg" Pattern match: "https://foros.3dgames.com.ar/subscription.php?do=addsubscription&t=1077190" Pattern match: "https://foros.3dgames.com.ar/forums/144-discusion-general" Pattern match: "https://foros.3dgames.com.ar/forums/102-reclamos" Pattern match: "https://foros.3dgames.com.ar/threads/497304-reglamento-acerca-de-los-foros-de-compra-y-venta" Pattern match: "https://foros.3dgames.com.ar/images/badges/tier2.png" Pattern match: "https://foros.3dgames.com.ar/images/badges/premium.png" Pattern match: "https://profiles.3dgames.com.ar/tos" Pattern match: "https://www.facebook.com/foro3dgames/" Pattern match: "https://www.youtube.com/user/My3DG" Pattern match: "https://twitter.com/3DGames" Pattern match: "https://www.pinterest.com/foro3dgames/" Pattern match: "https://img.lzrikate.com/ads/lz_loader.js?ver=1.3" Pattern match: "https://play.lzrikate.com/red/zone.php?code=Q6XCPWDUVFRZ&a=&pubid=&lgid=+" Pattern match: "https://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js" Pattern match: "https://www.w3.org/2000/svg" Pattern match: "https://foros.3dgames.com.ar/clientscript/jquery.announce.js?nocache=2323232" Pattern match: "https://apis.google.com/js/plusone.js" Pattern match: "www.principledtechnologies.com},{applied_policy:block,domain:web.basemark.com},{applied_policy:block,domain:mozilla.github.io},{applied_policy:block,domain:html5test.com},{applied_policy:block,domain:necromanthus.com},{app" Pattern match: "f0r0s.3dgames.com.ar/thl'aac|s/''O_';_1_JO'-;||`=d-'1LJ_'d-'c_d=fc__;|f__-ic|=c_d-'c_d=f__„" Pattern match: ".3dgames.com.ar/thl'_ac|s_'O___1_JO_-;||`=_-'1LJ__-'c__=fc__;|f__-ic|=c__-'c__=f__„" Heuristic match: "oros.3dgames.com.ar" Pattern match: "foros.3dgames.com.ar/threads/1077190-dhzdfhgzdfgdzfgzdfg-fdzgdfgdzfgzdfgdfg" Heuristic match: ":\windows\system32\pcacli.dK" Pattern match: "http://schemas.microsoft.com/SMI/2005/WindowsSettings"2a:T774,"shopping.js" has type "UTF-8 Unicode text with very long lines with CRLF line terminators"- Location: [%LOCALAPPDATA%\Microsoft\Edge\User Data\Edge Shopping\2.0.2353.0\shopping.js]- [targetUID: 00000000-00005500] "edge_driver.js" has type "UTF-8 Unicode text with very long lines with CRLF line terminators"- Location: [%LOCALAPPDATA%\Microsoft\Edge\User Data\Edge Shopping\2.0.2353.0\edge_driver.js]- [targetUID: 00000000-00005500] "auto_open_controller.js" has type "UTF-8 Unicode text with very long lines with CRLF line terminators"- Location: [%TEMP%\5500_1920314506\auto_open_controller.js]- [targetUID: 00000000-00005500] "edge_checkout_page_validator.js" has type "UTF-8 Unicode text with very long lines with CRLF line terminators"- Location: [%TEMP%\5500_1920314506\edge_checkout_page_validator.js]- [targetUID: 00000000-00005500] "edge_confirmation_page_validator.js" has type "UTF-8 Unicode text with very long lines with CRLF line terminators"- Location: [%TEMP%\5500_1920314506\edge_confirmation_page_validator.js]- [targetUID: 00000000-00005500] "product_page.js" has type "UTF-8 Unicode text with very long lines with CRLF line terminators"- Location: [%TEMP%\5500_1920314506\product_page.js]- [targetUID: 00000000-00005500] "shoppingfre.js" has type "UTF-8 Unicode text with very long lines with CRLF line terminators"- Location: [%TEMP%\5500_1920314506\shoppingfre.js]- [targetUID: 00000000-00005500] "edge_tracking_page_validator.js" has type "UTF-8 Unicode text with very long lines with CRLF line terminators"- Location: [%TEMP%\5500_1920314506\edge_tracking_page_validator.js]- [targetUID: 00000000-00005500] "shopping_iframe_driver.js" has type "Unknown"- Location: [%TEMP%\5500_1920314506\shopping_iframe_driver.js]- [targetUID: 00000000-00005500] "adblock_snippet.js" has type "Unknown"- Location: [%TEMP%\5500_2119235200\adblock_snippet.js]- [targetUID: 00000000-00005500]2b:T554,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAADxElEQVR4Xu2XyU8TYRjG/Y9c4nZ1uXj3ZjRu0YtGr5po2NdCkRCgLYW20Iq1osEFpTaoBOWo1oNGRQ6ikBLZu7A9zvO133Q6mx29OskTSiDz+73v933vTHfs+H+ZXOFwGMzAwAD6+/sRCoUQDIYQCAYRCATQ19eH3t5e+P296PH74evpgdfng9frg8fjhV/5W0dHB/T3LfsifGtry5BNbTb12cT29jYikQimp6eF1F9LsHICNzY2sM6sy6wjJ5PL/8zmZHJCggLLy8v4+nUKHq8X7r+RYNvNBFQ4P9sILCwsYH5+Hh8/fUJXtwdut9uZBNecAgJuJkC4CjYKpFIpzM3NYWZmBslkEp2dXc4EuOFUAav2a8B6AZfLVZK29nZnAtztQkCF27Q/WxTg51ml8p+zMrNKN+bRduuWQwHlqEmBIlgDN2m/FMhok8kq+2gT7jaHAjznPGp/hOuqLxXIqgKt7jZnAhwyeQF2oAgu3fkauFn1ikC6INDS6vAUcMJxuJiD+buE21cvBVytrc4EOF5FB3Tg0rZbwYvVS4HmlhZnAhyj7IABrMKLbTeDy+pVAZdDAT5YeKZViFbEAVwKNDW7HAp4KaDtQAFqC88Z4HmBDTQ2NTsT4CNV7YAOago2qVyG07ShqcmZQLfHkxfQQM3B9vB0OiME6httBCYnJ8G8ef0aExMTGB8fx6uXr/DyxQuMjY0hkUjgefw54qOjePb0GUbj8bLhawWBuoZGewGuU7l58vixCv4TXBWob7AWYOW8cSaTwYcvszh6NYqDF8OGpNNp8X+PHj60BuvgUqC2rt5agG2XAkzyy08cuTKIAxdCJaEAH8nDw8NGaCFasFagpq7OWoBrrhc4fDmM/ecDJVlbWxMCD+4/MID1VesFqmttBLjhpEDy8w8cutSPfef8pTnrx+rqqngG3B8aKgusFaiqqbUW4G6XAucbhrH3rM+YMz6srKwIgXuxWFlgrUBldY21AI8aBVK/lrDntKeQbpFY4r0IP/NNN6vs/lg0aoDYRQhUVVsL8JxTYOp7CrtPdamJJd6JtrPyaPwtlpaWhEB08I4BYhcKVNgJcMjIJTh2NYhdJztw/FpEhbNywhcXF4XAYOR28W25zNysrLIW4ISjAG8+8W4KO0+043TVXbHrtRIMJSPKtybOdo5XTjgOGZ5zHjXudm44rjnbzsoJv1FRaS3A8SqnHI/Zm/ffcL1zJP/Wo0jJyGM6oHxp0d/jn66RkRExXjnhOGR4znnUuNu54bjmbDsrJzygvC/q7/Ev129J2EY7Lg9T1QAAAABJRU5ErkJggg==1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"57f17a78ef24b434711ce927d44b88754f0ec42c1fc263caf9d7943f9ac34e61","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1791187469006,"unified_at":"2026-10-05T08:04:29.006Z","metadata":{"hashes":{"sha256":"57f17a78ef24b434711ce927d44b88754f0ec42c1fc263caf9d7943f9ac34e61","sha1":"ac24a42ae86c54bdf3533097a9f772cd9c53dc0a","md5":"e459fbe1f645ceabb5d7b1e2e526049b","sha512":"7e54707ba1d0e7fbaf305261da96eba228645ed26a46f4138e5207937d5e55ad64737a73640f931bf1d8a3bee451bef0a68717b0873327ac9b1ea04c5a6cacf8","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"https://foros.3dgames.com.ar/threads/1077190-dhzdfhgzdfgdzfgzdfg-fdzgdfgdzfgzdfgdfg","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1680267851000,"last_seen":1680267851000,"last_multi_scan":1680267851000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":3},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":4},"sandbox_signatures":{"informative_count":7,"suspicious_count":3,"malicious_count":0,"total":10},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"cleandns":{"name":"CleanDNS","success":true,"verdict":"undetected","status":"no-result","progress":100,"data_source":"CleanDNS","permalink":"https://www.cleandns.com/","extra_fields":[{"name":"domain","value":"foros.3dgames.com.ar"},{"name":"percent","value":0},{"name":"reports_count","value":0}]},"scamadviser":{"name":"ScamAdviser","success":true,"verdict":"clean","status":"clean","progress":100,"data_source":"ScamAdviser","permalink":"https://www.scamadviser.com/?utm_source=hybridanalysis","report_link":"https://www.scamadviser.com/check-website/foros.3dgames.com.ar?utm_source=hybridanalysis","extra_fields":[{"name":"domain","value":"foros.3dgames.com.ar"},{"name":"percent","value":0}]},"urlscanio":{"name":"urlscan.io","success":true,"verdict":"undetected","status":"no-classification","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/","report_link":"https://urlscan.io/result/1f91a435-207e-4470-9dbb-3e25b62e92d4/","extra_fields":[{"name":"percent","value":0}]}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Collection","technique":"Email Collection","attack_id":"T1114","attack_id_wiki":"https://attack.mitre.org/techniques/T1114","identifiers":[{"type":"suspicious","value":"Found a potential E-Mail address in binary/memory"}],"sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Contacts server"}],"sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"tactic":"Command and Control","technique":"DNS","attack_id":"T1071.004","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/004","identifiers":[{"type":"informative","value":"Queries DNS server"}],"sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attack_id":"T1105","attack_id_wiki":"https://attack.mitre.org/techniques/T1105","identifiers":[{"type":"suspicious","value":"Drops script (vb/js) files"},{"type":"suspicious","value":"Drops cabinet archive files"},{"type":"informative","value":"Dropped files"}],"sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Contacts server","description":"\"216.245.212.210:49736\"\n \"216.245.212.212:49744\"\n \"142.251.46.170:49746\"\n \"142.251.46.163:49748\"\n \"142.250.189.226:49750\"\n \"157.240.22.25:49753\"\n \"142.251.46.174:49754\"\n \"142.251.46.238:49757\"\n \"142.251.2.155:49759\"\n \"142.250.189.228:49760\"\n \"142.250.189.225:49761\"\n \"142.250.189.194:49763\"\n \"142.250.189.193:49765\"\n \"142.251.214.129:49770\"\n \"142.251.46.226:49772\"\n \"142.251.32.34:49773\"\n \"104.244.42.200:49775\"","origin":"Network Traffic","mitre_attack_id":"T1071","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"$27","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"level":"informative","category":"General","name":"Found a reference to a known community page","description":"\"\" (Indicator: \"twitter\")\n \" $\"Compartir$ \" (Indicator: \"twitter\")\n \"Twitter\" (Indicator: \"twitter\")\n \"

\" (Indicator: \"facebook.com\")\n \"

\" (Indicator: \"youtube\")\n \"

twitter

\" (Indicator: \"twitter\")","origin":"File/Memory","relevance":7,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"level":"informative","category":"General","name":"Queries DNS server","description":"\"foros.3dgames.com.ar\"\n \"img.lzrikate.com\"\n \"profiles.3dgames.com.ar\"","origin":"Network Traffic","mitre_attack_id":"T1071.004","relevance":1,"id":"network-51","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$28","origin":"Binary File","mitre_attack_id":"T1105","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"level":"informative","category":"Network Related","name":"Found potential IP address in binary/memory","description":"Potential IP \"5.1.0.0\" found in string \"version=\"5.1.0.0\"\"\n Potential IP \"5.1.0.0\" found in string \"Microsoft.Windows.Shell.rundll32,processorArchitecture=\"amd64\",type=\"win32\",version=\"5.1.0.0\"C:\\WINDOWS\\system32\\RunDll32.exe\"\n Potential IP \"5.1.0.0\" found in string \"Microsoft.Windows.InetCore.ieframe,processorArchitecture=\"amd64\",type=\"win32\",version=\"5.1.0.0\"C:\\Windows\\System32\\ieframe.dll\"\n Potential IP \"5.1.0.0\" found in string \"Microsoft.Windows.Shell.shell32,processorArchitecture=\"*\",type=\"win32\",version=\"5.1.0.0\"C:\\WINDOWS\\WindowsShell.Manifest\"\n \"192.168.241.86\"\n Potential IP \"5.1.0.0\" found in string \"Microsoft.Windows.Shell.shell32,processorArchitecture=\"amd64\",type=\"win32\",version=\"5.1.0.0\"C:\\WINDOWS\\System32\\SHELL32.dll\"","origin":"File/Memory","relevance":3,"id":"string-14","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$29","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"level":"suspicious","category":"General","name":"Found a potential E-Mail address in binary/memory","description":"Pattern match: \"info@3dgames.com.ar\"\n Pattern match: \"publicidad@3dgames.com.ar\"","origin":"File/Memory","mitre_attack_id":"T1114","relevance":3,"id":"string-63","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"level":"suspicious","category":"Installation/Persistence","name":"Drops script (vb/js) files","description":"$2a","origin":"Binary File","mitre_attack_id":"T1105","relevance":3,"id":"binary-40","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Drops cabinet archive files","description":"\"77EC63BDA74BD0D0E0426DC8F8008506\" has type \"Microsoft Cabinet archive data Windows 2000/XP setup 62582 bytes 1 file at 0x2c +A \"authroot.stl\" number 1 6 datablocks 0x1 compression\"- Location: [%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506]- [targetUID: 00000000-00005500]","origin":"Binary File","mitre_attack_id":"T1105","relevance":10,"id":"binary-5","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 3 domains and 3 hosts"}],"sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]}]},"activity":{"stats":{"process_count":20,"spawned_processes_count":20,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":26,"imported_dlls_count":158,"dropped_files_count":0,"extracted_files_count":51,"files_written_count":31,"files_deleted_count":0,"registry_keys_created_count":9,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":9,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":17,"dns_resolutions_count":3,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment"],"sandbox_reports":[{"id":"6426da49bba1bf8fec087df1","environment_id":160,"environment_description":"Windows 10 64 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"57f17a78ef24b434711ce927d44b88754f0ec42c1fc263caf9d7943f9ac34e61.url","analysis_start_time":"2023-03-31T13:04:10+00:00","indicators_count":{"informative":7,"suspicious":3,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"216.245.212.210","port":49736,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"address":"216.245.212.212","port":49744,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"address":"142.251.46.170","port":49746,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"address":"142.251.46.163","port":49748,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"address":"142.250.189.226","port":49750,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"address":"157.240.22.25","port":49753,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"address":"142.251.46.174","port":49754,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"address":"142.251.46.238","port":49757,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"address":"142.251.2.155","port":49759,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"address":"142.250.189.228","port":49760,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"address":"142.250.189.225","port":49761,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"address":"142.250.189.194","port":49763,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"address":"142.250.189.193","port":49765,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"address":"142.251.214.129","port":49770,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"address":"142.251.46.226","port":49772,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"address":"142.251.32.34","port":49773,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"address":"104.244.42.200","port":49775,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]}],"dns_resolutions":[{"domain":"foros.3dgames.com.ar","address":"216.245.212.210","ttl":1800,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"domain":"img.lzrikate.com","ttl":900,"country":"-","registrar_name":"ENOM, INC.","registrar_organization":"REDACTED FOR PRIVACY","registrar_name_servers":"DNS1.NAME-SERVICES.COM","registrar_creation_date":"2017-01-30T11:53:05+00:00","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"domain":"profiles.3dgames.com.ar","address":"216.245.212.212","ttl":21600,"country":"United States","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]}],"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}],"processes":[{"pid":6620,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\system32\\ieframe.dll\",OpenURL C:\\57f17a78ef24b434711ce927d44b88754f0ec42c1fc263caf9d7943f9ac34e61.url","sha256":"b1e6a7a3e2597e51836277a32b2bc61aa781c8f681d44dfddea618b32e2bf2a6","normalized_path":"%WINDIR%\\system32\\rundll32.exe","uid":"00000000-00006620","icon":"$2b"},{"pid":5500,"ppid":6620,"name":"msedge.exe","command_line":"--single-argument https://foros.3dgames.com.ar/threads/1077190-dhzdfhgzdfgdzfgzdfg-fdzgdfgdzfgzdfgdfg","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00006620","uid":"00000000-00005500"},{"pid":7736,"ppid":5500,"name":"msedge.exe","command_line":"--type=crashpad-handler \"--user-data-dir=%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Crashpad\" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=103.0.5060.53 \"--annotation=exe=%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe\" --annotation=plat=Win64 \"--annotation=prod=Microsoft Edge\" --annotation=ver=103.0.1264.37 --initial-client-data=0xc8,0xcc,0xd0,0xa4,0xd8,0x7ff91bba90b8,0x7ff91bba90c8,0x7ff91bba90d8","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00007736"},{"pid":3416,"ppid":5500,"name":"msedge.exe","command_line":"--type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1792 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:2","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00003416"},{"pid":7196,"ppid":5500,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1860 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:3","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00007196"},{"pid":7612,"ppid":5500,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2156 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:8","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00007612"},{"pid":6136,"ppid":5500,"name":"msedge.exe","command_line":"--type=renderer --disable-client-side-phishing-detection --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --launch-time-ticks=1234845761 --mojo-platform-channel-handle=3136 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:1","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00006136"},{"pid":760,"ppid":5500,"name":"msedge.exe","command_line":"--type=renderer --disable-client-side-phishing-detection --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --launch-time-ticks=1235783010 --mojo-platform-channel-handle=3144 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:1","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00000760"},{"pid":7372,"ppid":5500,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=entity_extraction --mojo-platform-channel-handle=4276 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:8","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00007372"},{"pid":5960,"ppid":5500,"name":"msedge.exe","command_line":"--type=renderer --disable-client-side-phishing-detection --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --launch-time-ticks=1259910976 --mojo-platform-channel-handle=5656 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:1","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00005960"},{"pid":3928,"ppid":5500,"name":"msedge.exe","command_line":"--type=renderer --disable-client-side-phishing-detection --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --launch-time-ticks=1263428244 --mojo-platform-channel-handle=5816 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:1","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00003928"},{"pid":5912,"ppid":5500,"name":"msedge.exe","command_line":"--type=renderer --disable-client-side-phishing-detection --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --launch-time-ticks=1272832176 --mojo-platform-channel-handle=1752 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:1","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00005912"},{"pid":5244,"ppid":5500,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5260 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:8","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00005244"},{"pid":1128,"ppid":5500,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=6196 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:8","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00001128"},{"pid":4680,"ppid":5500,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4360 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:8","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00004680"},{"pid":7636,"ppid":5500,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=6400 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:8","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00007636"},{"pid":2144,"ppid":5500,"name":"msedge.exe","command_line":"--type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.16299.192 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6400 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:2","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00002144"},{"pid":5104,"ppid":5500,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4324 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:8","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00005104"},{"pid":8116,"ppid":5500,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1868 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:8","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00008116"},{"pid":264,"ppid":5500,"name":"msedge.exe","command_line":"--type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=6248 --field-trial-handle=1736,i,2956096891880277254,4710212160570584584,131072 /prefetch:8","sha256":"79516254cb513e93765c55135288cc1d3fa46c2e800aed017582e57694836136","normalized_path":"%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe","parent_uid":"00000000-00005500","uid":"00000000-00000264"}],"all_imported_dlls":["msmpeg2vdec.dll","srumapi.dll","libGLESv2.dll","kernel32.dll","VxSSL64.dll","shell32.dll","msasn1.dll","netprofm.dll","mfplat.dll","dxilconv.dll","bcryptprimitives.dll","OneCoreCommonProxyStub.dll","powrprof.dll","wldp.dll","Windows.Web.dll","wlanapi.dll","PCPKsp.dll","fltLib.dll","msvcp_win.dll","Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll","mscms.dll","Windows.Media.dll","oleacc.dll","CoreMessaging.dll","rasadhlp.dll","ncrypt.dll","advapi32.dll","bcrypt.dll","RTWorkQ.dll","Windows.Networking.Connectivity.dll","msedge.dll","DWrite.dll","winhttp.dll","winmmbase.dll","atlthunk.dll","onramp.dll","sapi.dll","telclient.dll","combase.dll","sspicli.dll","FirewallAPI.dll","BitsProxy.dll","mf.dll","msvproc.dll","vk_swiftshader.dll","DataExchange.dll","dcomp.dll","version.dll","ucrtbase.dll","gdi32.dll","netutils.dll","ffmpeg.dll","dhcpcsvc6.dll","dhcpcsvc.dll","npmproxy.dll","dsreg.dll","propsys.dll","dnsapi.dll","cabinet.dll","ResourcePolicyClient.dll","msctf.dll","wtsapi32.dll","mfperfhelper.dll","setupapi.dll","mfsensorgroup.dll","tbs.dll","msvcrt.dll","windows.storage.dll","mdmregistration.dll","msacm32.dll","d3dcompiler_47.dll","msedge_elf.dll","clbcatq.dll","profapi.dll","twinapi.appcore.dll","Windows.UI.dll","TextInputFramework.dll","fwbase.dll","oleaut32.dll","iertutil.dll","dxgi.dll","kernel.appcore.dll","ntasn1.dll","Windows.Security.Authentication.Web.Core.dll","linkinfo.dll","gdi32full.dll","shlwapi.dll","D3D12.dll","d3d10warp.dll","nsi.dll","CoreUIComponents.dll","directmanipulation.dll","dxva2.dll","vulkan-1.dll","sechost.dll","winsta.dll","d3d11.dll","oleaccrc.dll","OneCoreUAPCommonProxyStub.dll","Windows.Security.Authentication.OnlineId.dll","user32.dll","CompPkgSup.dll","win32u.dll","SHCore.dll","IPHLPAPI.DLL","msdmo.dll","KBDUS.DLL","ole32.dll","microsoft_apis.dll","webio.dll","MMDevAPI.dll","DolbyDecMFT.dll","libEGL.dll","rpcrt4.dll","vaultcli.dll","rpcss.dll","devobj.dll","fwpolicyiomgr.dll","cfgmgr32.dll","dmcmnutils.dll","nlaapi.dll","WinTypes.dll","edputil.dll","cryptnet.dll","msvcp110_win.dll","ntmarta.dll","ws2_32.dll","dwmapi.dll","userenv.dll","dbghelp.dll","winmm.dll","FWPUCLNT.DLL","Windows.System.UserProfile.DiagnosticsSettings.dll","gpapi.dll","twinapi.dll","rsaenh.dll","winnlsres.dll","aepic.dll","oneds.dll","wkscli.dll","wintrust.dll","dpapi.dll","winnsi.dll","cryptsp.dll","uxtheme.dll","rmclient.dll","crypt32.dll","secur32.dll","actxprxy.dll","mswsock.dll","OnDemandConnRouteHelper.dll","KernelBase.dll","cryptbase.dll","imm32.dll","UIAutomationCore.dll","comctl32.dll","netapi32.dll","cldapi.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"widevinecdm.dll","sha256":"db695a96adb70d5f6246273f4e6c218b2c44f02b3726c3dee4d56b6428bb0ddf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"543dd51b-ef85-4a22-87ed-61a1ce4938b7.tmp","sha256":"57cc69bb99b588c090b251d01d9f8dc7fd117b0240aae3625633ed5f087eb9d8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"677d2829-f366-497a-82d2-f0efdb44066a.tmp","sha256":"f3baf4591326330bd1d2e67274d5abe92b67b92c1aa57555dd0f1bd49061479e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"79081a81-b5c7-49d9-8b89-d8b227611445.tmp","sha256":"81f94cbd6c462459da4f2b78eae5a6e3ce593b36df256a79ce6b9f98b9f6371e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"d763b0f0-59f2-4140-9825-ecbd78213b3a.tmp","sha256":"9fee62337b49c8b39b820eb2c1db0551e7cf1d4038ba8f4e6596fe9488ced735","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"settings.dat","sha256":"cd56751d0d27cdfeb2a397e48b9a2f56f9941ef6540e97684d0bf440523739fa","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"08f670f5-1f14-4e04-8013-9a8da12f6184.tmp","sha256":"172d17a1590dfeb9b10fb3f1579b32594ab8db86ae28d7652fe062fd9b10a1cb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"0d8070e9-fa8a-491f-ae91-4b0f374c053d.tmp","sha256":"56c6e25cc78459b08d2540e3269825fa258ec73dfe2e03d101e0d511a852821a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"3149ce87-8d98-4538-b94f-2d6706571686.tmp","sha256":"c8c8f8a9d9d165f71f9ec976f3f9bfca9d48b02181125bc5356b3a3a763dd2e2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"6ec62cdd-423a-4e89-b401-27dd402f4c36.tmp","sha256":"588cc84ff66a07aa15d6cc196f843eec9478d1f8daa2dd374a97cc3330c06536","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"000003.log","sha256":"ff5c60f7e1d3dafd3b3b8daf3a1cd077659d87e433d614498ac5c217c7997e90","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"LOG","sha256":"ccec71ba996931ebb8a893fa73db80874c6b38711dfdef61a6d24dbe8ddd5203","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"data_0","sha256":"bcded29b781571918af0ebcb17685af3acb1bf15816e43bab161f20b4a5d2a5c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"data_1","sha256":"cfa2d68e7c6a1d37de7f6d0bbdc4f3d62c7f246fe2da8b9ac6c911f1bd3583a0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"data_2","sha256":"3505a49bc94f75aeee62d068eadf5a3314def2bf99d31ef6ac9c1aeaa5fdbec7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"f_00023a","sha256":"60731c5d515d65f19d3c5802b46a275940e1058dcf310f75bc13c1ea79997fe6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"f_00023d","sha256":"8ef7d523a953db30d0a178e34aa7b852b0ad020b1bf48af0279764fa5ebacd33","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"f_000242","sha256":"14a1e31d7af73aa09d7413e7b1ca6760e1526d5cef85bb70927829609cd00ca0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"f_000245","sha256":"ea6c34f2e7acfea93ba722fe283f2704392dc518c9a0d1eeca0ba03a0b63d789","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"f_000246","sha256":"e101d87afa0b4c49e35507261d2b936706cc68efb4722ef94ea42a7890838fe0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"0012c7ad38dec7ab_0","sha256":"6abf1aad186fe3f0bd10ae7b7dd500b24db11604fb2466cda771f51adcf853c3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"03974e11873d395c_0","sha256":"5ea172c9284009a812eb2dc430fe2f86aead5cb035b3a01f26365ccbc3f3fbf7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"30ec57f43c9cb122_0","sha256":"0b2e99e8aa40547adf3ac05d21c9d64be8259d4e64c42559a697f4e8d152ecd0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"41e0c82c35646ab7_0","sha256":"35956247dda09b69a6ab135f2c5cbd6e1920025eca111798bd60aa908d4a37ad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"4da0ea274f7f1737_0","sha256":"098cb5a6e402cb43c3f0b65efbe4fe9912c20eaf0265c9b55d7c7763066c6cc6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"4f03ac2c773a46a0_0","sha256":"3f59aae5e9d7130e0c527a5cc28488247c6c459cd0ba132103d6c14711e36ff0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"640912a5a363c79e_0","sha256":"cac45a3bcf02542af66dd207000fdfc599a68f37cfd788412efc3ea237b1793d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"7672a0a7caba3e65_0","sha256":"cd8baf5cfd170259fb2aa6e5f07808905429ddb74623a4f06d55e7aa903aebd1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"7eccaec38068a639_0","sha256":"fbde34bb10a054e4ea6f7c6e25c5056e342db320f761707cf4a21de16aa32906","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"ad2cc141fe5ea3fe_0","sha256":"b7b09b9e55b63026fc6ebc32e0d8541799aab82bac0859b29fb5b7aed4245e19","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"cfc34ca28e581e8d_0","sha256":"525cd3f854a207bfbb9f109cfab966c9127a461b738a2760e2a00ee88cda110c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"e042f884aaad9cce_0","sha256":"e23504041bd19c0163d3e8fefb745e7135ce15a082cbe8ca913c56eb61e72466","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"ec2ee042cda321ba_0","sha256":"dd20a9f7ef7eef146a6d6a78b3cd53740bf7d3c3b4199b814953056f41f690aa","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"eeaf4db9a1f36a49_0","sha256":"f7e302a2b7fe04f8b87e5a8094bf77f37af8739746c73f6ab23ef508fd68e517","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"f378dfcd0eb72ef4_0","sha256":"e3a8d268f51b217f31f5ec87cd86ad99e8218de385333639d8ee8f2900a4fa67","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"f6c524a77398aacb_0","sha256":"8d2cf489d2e118be8abcfb9b0180f71fd14a72f10a325b24bad1f723d5155d26","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"temp-index","sha256":"86b26c34ae6987a2b3cb4d860bd434822a74c2621f201b1fe0d6086120813848","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"Favicons-journal","sha256":"a0d30d3db31908049a7d16ebf72a9ebd1ce340d11222b0e19ded8b9caf2292cc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"History","sha256":"415517c7746a550516bec4443fcf1e988381ad76c3c900231cd680fb32c89d9f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"History-journal","sha256":"4e1101aea7bd801b7f5607706465260e45bb49aa1a7bdd9ee572af7f1aae646c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"0dbe4ab3-b3e1-4c5d-8c99-c0acf7a0624b.tmp","sha256":"7ff4f1b1fac78ca6e57a3ebd5527fa5d63c23c17f0bf3169914011ff1b13e2d7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"4028aedf-b2bd-4097-b4e7-076b7bbf193c.tmp","sha256":"98905fb2b1a622765caaa7a907c509c06bc561427ba7b6f223827d89a5f13c57","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"93ae0024-aec7-411f-95ec-e6c134ed0ad2.tmp","sha256":"f4627e79a0add78fedf71598fd4631c9ea96a0c2a4fdff6227808b732a0caea1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"Cookies-journal","sha256":"e0c68b84b5228e1011dd22aa6f7951c3c2eb0075f753ffde2c9e8bd94f84f49b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"Reporting and NEL-journal","sha256":"dce8b05354186439ecde45dddbbe1aaa270e75bc1a257c6c23a57bf09f6c3dfb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"Visited Links","sha256":"fb2af7a1173993056759ce21d3c84fc472cd45434a64219655fccf19567cd9ab","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"a9a407a3-349d-4e7b-8dea-2baabc36652f.tmp","sha256":"89fb3fa020aa431108011cb3941b5c130e63e2d42d1712f775248ff2dbadd2d9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"bbf70c91-27aa-45b0-b695-93293c9abfd6.tmp","sha256":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"load_statistics.db-wal","sha256":"205d81348b6a2f17aeb317595ab70e695b93a1ae4026a83890fdf00bcea749dc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"Diagnostic Data-wal","sha256":"cdcbee473b13e1d76c222916f561242d29becbab28749464aef72b49f50e66af","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"edge_driver.js","sha256":"f808811debb4e98d19ea042de5e75a1d6cb65b80115457cad57bb19658fe19a8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]}],"files_written":[{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\INetCache","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\INetCookies","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Crashpad","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Crashpad\\reports","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Crashpad\\attachments","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Crashpad\\metadata","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Variations","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\BrowserMetrics\\BrowserMetrics-6426DB92-157C.pma","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\lockfile","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Last Version","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Sync Data\\LevelDB\\LOG","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Sync Data\\LevelDB\\LOCK","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\History","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Nurturing\\campaign_history","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Login Data","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Nurturing\\campaign_history","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Web Data","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\EdgeCoupons\\coupons_data.db\\LOG","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\EdgeCoupons\\coupons_data.db\\LOCK","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\EdgeCoupons\\coupons_data.db\\MANIFEST-000001","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Site Characteristics Database\\LOG","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Site Characteristics Database\\LOCK","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Site Characteristics Database\\MANIFEST-000001","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\Top Sites","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\EdgePushStorageWithConnectTokenAndKey\\LOG","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Default\\EdgePushStorageWithConnectTokenAndKey\\LOCK","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\CONNECTIONS\\","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"key":"HKLMHKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\\CATALOGDB\\","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\SPEECH\\VOICES\\","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"key":"HKCUHKCU\\\\","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\NETWORK\\LOCATION AWARENESS\\","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"key":"HKCUHKCU\\SOFTWARE\\\\","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\\\","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\EDGE\\\\","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"key":"HKCUHKCU\\SOFTWARE\\MICROSOFT\\EDGE\\BLBEACON\\\\","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]}],"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\SM0:5500:120:WilError_01","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"Local\\SM0:6620:304:WilStaging_02","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"Local\\SM0:6620:120:WilError_01","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"SM0:6620:304:WilStaging_02","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"SM0:6620:120:WilError_01","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"HKEY_LOCAL_MACHINE_SOFTWARE_Microsoft_Speech_OneCore_Voices_Tokens_MSTTS_V110_enUS_DavidM_Mutex","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"Local\\SM0:5500:304:WilStaging_02","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"Local\\SM0:5500:120:WilError_01","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"SM0:5500:304:WilStaging_02","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"HKEY_LOCAL_MACHINE_SOFTWARE_Microsoft_Speech_OneCore_Voices_Tokens_MSTTS_V110_enUS_ZiraM_Mutex","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"ChromeProcessSingletonStartup!","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"HKEY_LOCAL_MACHINE_SOFTWARE_Microsoft_Speech_OneCore_Voices_Tokens_MSTTS_V110_enUS_MarkM_Mutex","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\SM0:5500:304:WilStaging_02","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\SM0:5500:304:WilStaging_02","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\ChromeProcessSingletonStartup!","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\SM0:5500:120:WilError_01","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\HKEY_LOCAL_MACHINE_SOFTWARE_Microsoft_Speech_OneCore_Voices_Tokens_MSTTS_V110_enUS_DavidM_Mutex","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\HKEY_LOCAL_MACHINE_SOFTWARE_Microsoft_Speech_OneCore_Voices_Tokens_MSTTS_V110_enUS_MarkM_Mutex","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\HKEY_LOCAL_MACHINE_SOFTWARE_Microsoft_Speech_OneCore_Voices_Tokens_MSTTS_V110_enUS_ZiraM_Mutex","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\SM0:7196:304:WilStaging_02","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\SM0:7196:304:WilStaging_02","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\SM0:2144:304:WilStaging_02","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\SM0:2144:304:WilStaging_02","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"Local\\SM0:2144:304:WilStaging_02","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]},{"name":"SM0:2144:304:WilStaging_02","sources":[{"report_type":"sandbox","report_id":"6426da49bba1bf8fec087df1"}]}]}},"report_ids":{"sandbox_job_ids":["6426da49bba1bf8fec087df1"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample 57f17a78ef24… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 57f17a78ef24…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/57f17a78ef24b434711ce927d44b88754f0ec42c1fc263caf9d7943f9ac34e61"}],["$","meta","4",{"property":"og:title","content":"Sample 57f17a78ef24… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 57f17a78ef24…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/57f17a78ef24b434711ce927d44b88754f0ec42c1fc263caf9d7943f9ac34e61"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 57f17a78ef24… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 57f17a78ef24…. Threat score 0/100. 0/3 AV engines flagged this file. 0 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2c","11",{}]]