26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2d:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T42c,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample 04156dfc2e80… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample 04156dfc2e80…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/04156dfc2e80596868d7de5ffd8e128da78cf3cdf158261816a228e399a48556","keywords":["malware analysis","sandbox report","threat intelligence","04156dfc2e80596868d7de5ffd8e128da78cf3cdf158261816a228e399a48556"],"about":{"@type":"SoftwareApplication","name":"https://www.baltimoreculture.org/calendar/event/26507/watch-grudge-2020-online-hd-full-movie-google-drive","applicationCategory":["url"],"identifier":"04156dfc2e80596868d7de5ffd8e128da78cf3cdf158261816a228e399a48556"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":1},"behavioralIndicators":{"malicious":0,"suspicious":2},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T53c,"urlblockindex_1_.bin" has type "data" "gbca.styles_1_.css" has type "ASCII text" "CC197601BE0898B7B0FCC91FA15D8A69_DC2EE962A7CA0D736AAA4F9745829DBD" has type "data" "mem5YaGs126MiZpBA-UN7rgOUuhv_1_.woff" has type "Web Open Font Format flavor 65536 length 18900 version 1.1" "N80A47QG.txt" has type "ASCII text" "1_1_.txt" has type "ASCII text with no line terminators" "6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04" has type "data" "gbca-calendar.normalize_1_.css" has type "ASCII text" "209.7d7330bbfa2be6215e38_1_.js" has type "UTF-8 Unicode text with very long lines" "jquery-html-prefilter-3.5.0-backport_1_.js" has type "ASCII text" "btn_menu_mobile_1_.png" has type "PNG image data 52 x 96 8-bit/color RGBA non-interlaced" "14.2dfb61b890959f78272d_1_.js" has type "ASCII text with very long lines with no line terminators" "menu-leaf_1_.png" has type "PNG image data 7 x 7 8-bit gray+alpha non-interlaced" "mem5YaGs126MiZpBA-UN_r8OUuhv_1_.woff" has type "Web Open Font Format flavor 65536 length 18668 version 1.1" "date_1_.css" has type "ASCII text" "4VMY6MSD.txt" has type "ASCII text" "ctools_1_.css" has type "ASCII text" "2REOWMCO.txt" has type "ASCII text" "search_img_1_.png" has type "PNG image data 1908 x 480 8-bit/color RGBA non-interlaced" "~DF26045DABD3A23B05.TMP" has type "data"28:T463,Pattern match: "https://www.baltimoreculture.org/calendar/event/26507/watch-grudge-2020-online-hd-full-movie-google-drive" Pattern match: "https://www.baltimoreculture.org" Heuristic match: "connect.facebook.net" Heuristic match: "fonts.googleapis.com" Heuristic match: "fonts.gstatic.com" Heuristic match: "m.addthis.com" Heuristic match: "platform.twitter.com" Heuristic match: "s7.addthis.com" Heuristic match: "static.xx.fbcdn.net" Heuristic match: "v1.addthisedge.com" Pattern match: "www.baltimoreculture.org" Pattern match: "www.facebook.com" Heuristic match: "z.moatads.com" Pattern match: "https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Pattern match: "http://www.apple.com/DTDs/PropertyList-1.0.dtd" Heuristic match: "> 0 com.apple.print.PageFormat.PMVerticalScaling com.apple.print.ticket.creator com.apple.jobticket com.apple.print.ticket.itemArray _HashTable_Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_444\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"iexplore.exe\" (UID: 00110650-00000444) was launched with new environment variables: \"PATH=\"%PROGRAMFILES%\\Internet Explorer;\"\"","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"Spawned process \"iexplore.exe\" with commandline \"https://www.baltimoreculture.org/calendar/event/26507/watch-grud ...\" (UID: 00110650-00000444)\n Spawned process \"iexplore.exe\" with commandline \"SCODEF:444 CREDAT:275457 /prefetch:2\" (UID: 00110698-00003940)","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"level":"informative","category":"General","name":"Spawns new processes that are not known child processes","description":"Spawned process \"iexplore.exe\" with commandline \"https://www.baltimoreculture.org/calendar/event/26507/watch-grud ...\" (UID: 00110650-00000444)\n Spawned process \"iexplore.exe\" with commandline \"SCODEF:444 CREDAT:275457 /prefetch:2\" (UID: 00110698-00003940)","origin":"Monitored Target","relevance":3,"id":"target-103","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"level":"informative","category":"Installation/Persistance","name":"Creates new processes","description":"\"iexplore.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe\", Handle: 896)","origin":"API Call","relevance":8,"id":"api-2","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"level":"informative","category":"Installation/Persistance","name":"Dropped files","description":"$27","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$28","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found a reference to a known community page","description":"$29","origin":"File/Memory","relevance":7,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"level":"informative","category":"Unusual Characteristics","name":"Installs hooks/patches the running process","description":"$2a","origin":"Hook Detection","mitre_attack_id":"T1179","relevance":10,"id":"hooks-8","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"level":"suspicious","category":"Network Related","name":"Malicious artifacts seen in the context of a contacted host","description":"$2b","origin":"Network Traffic","relevance":10,"id":"network-21","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 104.31.76.84 on port 443 is sent without HTTP header\n TCP traffic to 172.217.14.106 on port 443 is sent without HTTP header\n TCP traffic to 172.217.11.67 on port 80 is sent without HTTP header\n TCP traffic to 172.217.14.99 on port 443 is sent without HTTP header\n TCP traffic to 157.240.18.19 on port 443 is sent without HTTP header\n TCP traffic to 151.101.196.157 on port 443 is sent without HTTP header\n TCP traffic to 23.39.40.118 on port 443 is sent without HTTP header\n TCP traffic to 157.240.18.35 on port 443 is sent without HTTP header","origin":"Network Traffic","mitre_attack_id":"T1043","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 12 domains and 12 hosts"}],"sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]}]},"activity":{"stats":{"process_count":3,"spawned_processes_count":3,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":40,"imported_dlls_count":129,"dropped_files_count":0,"extracted_files_count":50,"files_written_count":228,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":12,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":12,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":8,"dns_resolutions_count":12,"contacted_urls_count":3,"http_requests_count":3},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"sandbox_reports":[{"id":"5f13570511f0ce41842ad721","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"04156dfc2e80596868d7de5ffd8e128da78cf3cdf158261816a228e399a48556.url","analysis_start_time":"2020-07-18T20:09:44+00:00","indicators_count":{"informative":13,"suspicious":3,"malicious":0},"tags":["Network Traffic","Extracted Files","User Comment","Decrypted SSL traffic"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"104.31.76.84","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"address":"172.217.14.106","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"address":"172.217.11.67","port":80,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"address":"172.217.14.99","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"address":"157.240.18.19","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"address":"151.101.196.157","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"address":"23.39.40.118","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"address":"157.240.18.35","port":443,"protocol":"TCP","country":"United States","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]}],"dns_resolutions":[{"domain":"connect.facebook.net","address":"157.240.18.19","ttl":566,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Facebook, Inc.","registrar_name_servers":"A.NS.FACEBOOK.COM","registrar_creation_date":"2004-04-01T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"domain":"fonts.googleapis.com","address":"172.217.1.234","ttl":258,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_creation_date":"2005-01-25T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"domain":"fonts.gstatic.com","address":"216.58.194.67","ttl":51,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Google Inc.","registrar_creation_date":"2008-02-11T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"domain":"m.addthis.com","address":"23.47.168.112","ttl":168,"country":"United States","registrar_name":"TUCOWS, INC.","registrar_organization":"Oracle Corporation","registrar_name_servers":"NS1.P27.DYNECT.NET","registrar_creation_date":"1998-05-26T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"domain":"ocsp.pki.goog","address":"172.217.11.67","ttl":58,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"domain":"platform.twitter.com","address":"151.101.24.157","ttl":3,"country":"United States","registrar_name":"CSC CORPORATE DOMAINS, INC.","registrar_organization":"Twitter, Inc.","registrar_creation_date":"2000-01-21T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"domain":"s7.addthis.com","address":"23.47.168.112","ttl":12,"country":"United States","registrar_name":"TUCOWS, INC.","registrar_organization":"Oracle Corporation","registrar_name_servers":"NS1.P27.DYNECT.NET","registrar_creation_date":"1998-05-26T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"domain":"static.xx.fbcdn.net","address":"157.240.18.19","ttl":1289,"country":"United States","registrar_name":"MarkMonitor, Inc.","registrar_organization":"Facebook, Inc.","registrar_creation_date":"2007-05-03T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"domain":"v1.addthisedge.com","address":"23.47.168.112","ttl":3595,"country":"United States","registrar_name":"TUCOWS, INC.","registrar_organization":"Oracle Corporation","registrar_name_servers":"NS1.P27.DYNECT.NET","registrar_creation_date":"2011-08-02T00:00:00+00:00","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"domain":"www.baltimoreculture.org","address":"104.31.77.84","ttl":105,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"domain":"www.facebook.com","address":"157.240.18.35","ttl":3590,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"domain":"z.moatads.com","address":"23.53.254.130","ttl":465,"country":"United States","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]}],"http_requests":[{"host":"ocsp.pki.goog","host_ip":"172.217.11.67:80","url":"/gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjtJqhjYqpgSVpULg%3D","method":"GET","header":"GET /gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjtJqhjYqpgSVpULg%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.11.67:80","url":"/gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEAz1TE8MmOqcCAAAAABKq3M%3D","method":"GET","header":"GET /gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEAz1TE8MmOqcCAAAAABKq3M%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"host":"ocsp.pki.goog","host_ip":"172.217.11.67:80","url":"/gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEBqlEDv%2BmUtqAgAAAABxXJM%3D","method":"GET","header":"GET /gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEBqlEDv%2BmUtqAgAAAABxXJM%3D HTTP/1.1\nConnection: Keep-Alive\nAccept: */*\nUser-Agent: Microsoft-CryptoAPI/6.1\nHost: ocsp.pki.goog","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]}]},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}],"processes":[{"pid":1716,"ppid":0,"name":"rundll32.exe","command_line":"\"%WINDIR%\\System32\\ieframe.dll\",OpenURL C:\\04156dfc2e80596868d7de5ffd8e128da78cf3cdf158261816a228e399a48556.url","sha256":"3fa4912eb43fc304652d7b01f118589259861e2d628fa7c86193e54d5f987670","normalized_path":"%WINDIR%\\System32\\rundll32.exe","uid":"00110459-00001716","icon":"$2c"},{"pid":444,"ppid":1716,"name":"iexplore.exe","command_line":"https://www.baltimoreculture.org/calendar/event/26507/watch-grudge-2020-online-hd-full-movie-google-drive","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00110459-00001716","uid":"00110650-00000444"},{"pid":3940,"ppid":444,"name":"iexplore.exe","command_line":"SCODEF:444 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00110650-00000444","uid":"00110698-00003940"}],"all_imported_dlls":["api-ms-win-core-synch-l1-2-0.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","SwDir_1231201.dll","SensApi.dll","lpk.dll","advapi32.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","shell32.dll","winnsi.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","ieproxy.dll","msimg32.dll","msxml6r.dll","nsi.dll","FWPUCLNT.DLL","propsys.dll","MSOHEV.DLL","iertutil.dll","ws2_32.dll","bcrypt.dll","dxgi.dll","cryptsp.dll","deploy.dll","URLREDIR.DLL","kernel32.dll","oleaut32.dll","ntmarta.dll","webio.dll","api-ms-win-core-timezone-l1-1-0.dll","ExplorerFrame.dll","mlang.dll","setupapi.dll","rsaenh.dll","dhcpcsvc6.dll","credssp.dll","bcryptprimitives.dll","d2d1.dll","ieui.dll","secur32.dll","WindowsCodecsExt.dll","tzres.dll","powrprof.dll","cryptbase.dll","comctl32.dll","schannel.dll","jscript9.dll","xmllite.dll","msvcrt.dll","netapi32.dll","netprofm.dll","msimtf.dll","rasadhlp.dll","d3d11.dll","ssv.dll","sechost.dll","IEShims.dll","mswsock.dll","wship6.dll","wininet.dll","profapi.dll","rpcss.dll","srvcli.dll","cfgmgr32.dll","devobj.dll","mscoree.dll","userenv.dll","KernelBase.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","crypt32.dll","oleacc.dll","Wldap32.dll","RpcRtRemote.dll","imagehlp.dll","WindowsCodecs.dll","ole32.dll","netutils.dll","duser.dll","dui70.dll","ncrypt.dll","shlwapi.dll","wkscli.dll","normaliz.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","mscorwks.dll","IPHLPAPI.DLL","msvcr100.dll","user32.dll","ieframe.dll","sspicli.dll","WSHTCPIP.DLL","cryptnet.dll","UIAnimation.dll","msctf.dll","wshqos.dll","winhttp.dll","DWrite.dll","winmm.dll","msxml6.dll","dhcpcsvc.dll","mshtml.dll","apphelp.dll","gdi32.dll","rpcrt4.dll","uxtheme.dll","dwmapi.dll","wintrust.dll","urlmon.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","npmproxy.dll","oleaccrc.dll","clbcatq.dll","mscoreei.dll","d3d10warp.dll","npctrl.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","msasn1.dll","gpapi.dll","jp2ssv.dll","version.dll","comdlg32.dll","nlaapi.dll","dnsapi.dll","sxs.dll","api-ms-win-downlevel-version-l1-1-0.dll","api-ms-win-downlevel-user32-l1-1-0.dll","usp10.dll","sqmapi.dll","msvcr90.dll","imm32.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"1IGCVPL7.txt","sha256":"726016ed9526c47a9c4ff6803e28fcf952719b06d0c693d9a0b46a79ca5c0a1d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"2REOWMCO.txt","sha256":"94b98af24f4e03ce87ff7d6ad02de28b7a32ca88051d0e28c88edf392a949556","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"3K9LJ14D.txt","sha256":"488af2e44d6313a237f1bc67c7bc698a44105d77c35fc32c6ba9b33abd9f53ac","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"4VMY6MSD.txt","sha256":"48038893b24a632a311a8dc2cf45ce77bdf1837346251ec7314535fa4c20b854","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"ADPKNW9V.txt","sha256":"7cf2ec7c0be98fbf0b4a6573249fb258625fe8c12ecc6ca2350a1829932719fb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"C38RW9AQ.txt","sha256":"726016ed9526c47a9c4ff6803e28fcf952719b06d0c693d9a0b46a79ca5c0a1d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"FFRT4TN5.txt","sha256":"09434a6272484cf8b8720684aa0f1a46fb6699fc51ce6f94427f271c631297da","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"FT79PCOX.txt","sha256":"61275acb2ea0e248716922c89324596c548bd24663b0b20a96cc8a45270faa89","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"N80A47QG.txt","sha256":"f25baaa260c8ad8754795882604e25e742d698baec61d9eb505ba10e4cd5e859","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"PO5BQIW8.txt","sha256":"726016ed9526c47a9c4ff6803e28fcf952719b06d0c693d9a0b46a79ca5c0a1d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"RXGIKLOF.txt","sha256":"02ed72508470487220910f9708e677ed1c05203a891dda64326d158669fb00e8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"WYREJ8DL.txt","sha256":"2581790f64562a8067403099f230be9c4dcd2cff9727dd257764b378d4fcdbdb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"en-US.3","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"imagestore.dat","sha256":"fe35f0960994651bcdc3100a95d1fd13204c4e297e2207ff96fc16c2b38b3d9d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sha256":"3d634d509568b399866ad3cd3dbc33805252f34da3cea61e4d8e07abb48f5ff4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04","sha256":"9e2f0c3b86f084fa2e8d9c912810ac5f297ee1205d266ac438ad928de965c6f8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203","sha256":"c98d4b84baafe6c11e5cc7126b26b36ed98db58e9000b59dfb86c150e9e23fc5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"C1B3CC7FF1466C71640A202F8258105B_D33B7F826B26602C3BA5CB801B282EBD","sha256":"2a8516fd12ed46825b7bf1feb889c5f8dc7c8a789f49e41d6342b457143328a8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_F93B91499FFF9DECFEFFF244AC6D073A","sha256":"d86475bbe29617d45dacd5655519d7a56982ab6e89696effab62a8763791f44b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"35DDEDF268117918D1D277A171D8DF7B_FACF508575F7E170F59F9A7C72667CF6","sha256":"5f65d42cae33136ca97d177b57ce9844a5d89e39e8e7e11703c07b938f4a17e2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_74167E25E5476CCA2A5946AAA61BF9E1","sha256":"fd2df4c81f817b4e50fd541fa15108a378a19d3440252e2740a83a3473474b18","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6","sha256":"87556e4f16bf71c18f4d21dd4495c9b57075d51a6f3a7debb6a14acac7124054","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"B398B80134F72209547439DB21AB308D_5FDD03068CBBD8A96F3AB9595BA10093","sha256":"2ac8eca7a98010a4cfd68edb36f355ad58d51419353189cd472b0c3c0c0fbf8c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"CC197601BE0898B7B0FCC91FA15D8A69_DC2EE962A7CA0D736AAA4F9745829DBD","sha256":"28cebe5048038dcbaefac6cd39ebdf5f91f3045dc0e69892c873a0a88354a080","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"CFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B","sha256":"9e4008e49fea16be2773de4f7ae8bd4bd26c0bbc259b36c013850e26114581e7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB","sha256":"d7696006ce6b551589d009734c63deea3b2a40112b1761ca07c75221e3a0b0f9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"~DF26045DABD3A23B05.TMP","sha256":"a5b44d3f3abec439fbd6dc9408aa4152c68aeaaf9aba2e459a1edd0fbd7687db","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"~DF4B62296342FB2586.TMP","sha256":"6f31784b10f5cd80084759db816b63b0b4f18675ac35e45a662c00e1d191ae5f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"~DFBD7AEFF6C9C2876B.TMP","sha256":"7289ae6d245f17d83227e2aa88ff21aa3025e795a9fb692b305b0ee177254dfd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"~DFDF59CD7966C97C0C.TMP","sha256":"5d95ffc36a7f51c1a90b26ac63b183c645b7564295e0af2a876575ae4d50e272","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"gbca.styles_1_.css","sha256":"b312aa5eda9e6afb7d03b33ae85b6b61d4f94ea35cebd7398644bb2e21694b82","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"mem5YaGs126MiZpBA-UN7rgOUuhv_1_.woff","sha256":"ea20e5db3ba915c503173fae268445fc2745fc9a5dce2f58d47f5a355e1cdb18","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"1_1_.txt","sha256":"19a26d6046c4fcfe9e3efbc1fb7532f424c6b0b7590b9e193788e30bce8b9836","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"gbca-calendar.normalize_1_.css","sha256":"bb469e1334e32bd94155f511ffa64d7d3bf638e4a245c0df6a7560563c311b68","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"209.7d7330bbfa2be6215e38_1_.js","sha256":"57e6e729b015bd83df56af494035682760b30c5de15a5030372b2e8f70a64e65","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"jquery-html-prefilter-3.5.0-backport_1_.js","sha256":"fad84efa145fb507e5df9b582fa01b1c4e6313de7f72ebdd55726d92fa4dbf06","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"btn_menu_mobile_1_.png","sha256":"ea4467ff0affc81b95ac2452d108edf6b14c3c782324cf9acc6f5b85b4491472","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"14.2dfb61b890959f78272d_1_.js","sha256":"6070049215ef9b98d1b389d67963816172ff29513d34335c5061cd9619a3ea17","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"menu-leaf_1_.png","sha256":"acdf3fc2b355892a8ec24107001266208d4ae71b20929bcc156e8a29b6a58b5c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"mem5YaGs126MiZpBA-UN_r8OUuhv_1_.woff","sha256":"6e8a28a0638c920e5b76177e5f03ba94fcdedd3e3ecd347c333d82876b51c9c0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"date_1_.css","sha256":"1dbc835b3f505cbcddf95fc329ba74416a6247867c722a8c083d47641a64a0f4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"ctools_1_.css","sha256":"c1247c6c6e2fa2a3b02f04886deac34f46ccef66483b1c64c1347e6b95e158b9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"search_img_1_.png","sha256":"7bd0c3a1dbee0e881a894832903b96cc772d2bb5cd4494c4e6c6d8a818c82ba1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"field.theme_1_.css","sha256":"f85be95f278c95990b3f5d1443456b834dc61fb06dbec9fd5cad203862e3d8c2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"user.theme_1_.css","sha256":"e69d9cbe30efd55d9ebc9fc2f1f8df69c9865b69c0fe136733c8b345ee971e48","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"system.theme_1_.css","sha256":"bf345420f7479d2a27a1a746a3a69d2fec1bc9b0fc12cd181c459a38b2c93e32","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"_0F9452F0-C933-11EA-98A2-0A0027464C3B_.dat","sha256":"61c3297ba985b7b5f45e96f7847207d10982644eaff1fc87ff756b4e86ee32e9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"memnYaGs126MiZpBA-UFUKWiUNhrIqU_1_.woff","sha256":"1e742589d91a4b7e3888284a43a73675f312d3d6c4e78b3b76ebc36292646100","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"OqOE21UvWe3_1_.png","sha256":"ed91fbb0cd9308f91f8e1fd93942c94ee850fc4161ed788b16f801b743c70b9b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]}],"files_written":[{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"C:","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\UrlBlockManager\\urlblocklist.bin","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Low","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History\\Low","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\Fonts\\StaticCache.dat","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Internet Explorer\\UserData\\Low","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Tracking Protection","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Feeds","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\TabRoaming","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\PlayReady","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE\\Low","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException\\Low","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache\\Low","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache\\Low","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%TEMP%\\Low","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\AppPatch\\sysmain.sdb","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%PROGRAMFILES%\\MICROS~3\\Office14\\URLREDIR.DLL","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\lib\\plugin.jar","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%PROGRAMFILES%\\Java\\jre1.8.0_151\\bin\\javaws.exe","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%TEMP%\\JavaDeployReg.log","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\System32\\ieframe.dll","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\en\\iexplore.exe.mui","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{CED740A5-C932-11EA-98A2-0A0027464C3B}.dat","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\System32\\en-US\\msctf.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{F5E5586C-DA91-47DA-AEAC-0A88CD2FFB01}","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\System32\\rundll32.exe","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\AppPatch\\AcLayers.dll","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\System32\\en-US\\rundll32.exe.mui","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%USERPROFILE%\\Favorites\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%USERPROFILE%\\Desktop\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"C:\\04156dfc2e80596868d7de5ffd8e128da78cf3cdf158261816a228e399a48556.url","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_74167E25E5476CCA2A5946AAA61BF9E1","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\C1B3CC7FF1466C71640A202F8258105B_8797697D9B45C74FF3E631C860AF5C94","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\92F19EEA1C7470751B930A266D48D497","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\AA1B18F976B26BF831B2714B8138987D","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\2REOWMCO.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FT79PCOX.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\watch-grudge-2020-online-hd-full-movie-google-drive[1].htm","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\system.base[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\system.menus.theme[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\system.messages.theme[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\system.theme[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\date_repeat_field[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\node[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\0MYAT1N3.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\search.theme[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\user.base[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\user.theme[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\media_wysiwyg.base[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\CI1NEHIQ.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\panels[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\webform[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\gbca.normalize[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\gbca.styles[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%TEMP%\\~hcouozz.tmp","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\gbca-calendar.normalize[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\gbca-calendar.styles[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\jquery-html-prefilter-3.5.0-backport[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\drupal[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\webform[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\Black_3[1].jpg","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\B398B80134F72209547439DB21AB308D_5FDD03068CBBD8A96F3AB9595BA10093","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\B398B80134F72209547439DB21AB308D_58110001BD802D59A2C1E2F55B0788BA","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\69C6F6EC64E114822DF688DC12CDD86C","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\cheader_44[1].jpg","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_A7A8E86FCB076C144BD04C40841E7074","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\addthis_widget[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\css[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[2].ico","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[3].ico","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[2].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[3].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\favicon[5].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\Fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_0C3343F8230716404A0CF2317D4FED72","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_F93B91499FFF9DECFEFFF244AC6D073A","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_F93B91499FFF9DECFEFFF244AC6D073A","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\Fonts\\verdanab.ttf","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\mem5YaGs126MiZpBA-UN_r8OUuhv[1].woff","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\Fonts\\euphemia.ttf","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiYw[1].woff","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\Fonts\\seguisym.ttf","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\cf_logo[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\icon_google_calendar[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\btn_twitter[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\menu-leaf[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_1374AC543829516A5CA56081CD00C32A","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6DB145CFEEC544B1582FED1ADA3370DD","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\43QB2FIU\\all[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\btn_menu_mobile[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\1F2HR9E2\\widgets[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\System32\\tzres.dll","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\FFRT4TN5.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\RXGIKLOF.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\moatframe[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\System32\\Adobe\\Director\\SwDir_1231201.dll","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\System32\\Macromed\\Flash\\Flash32_27_0_0_187.ocx","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%PROGRAMFILES%\\Microsoft Silverlight\\5.1.50907.0\\npctrl.dll","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\sh.f48a1a04fe8dbf021b4cda1d[1].htm","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\1[1].txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\1IGCVPL7.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\WYREJ8DL.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\C38RW9AQ.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\System32\\en-US\\jscript9.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\35DDEDF268117918D1D277A171D8DF7B_FACF508575F7E170F59F9A7C72667CF6","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001f.db","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"C:\\Users\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"C:\\Users","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%USERPROFILE%\\AppData","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\Fonts\\tahoma.ttf","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\imagestore\\3mt7jhv\\imagestore.dat","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\PO5BQIW8.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%TEMP%\\~DFBD7AEFF6C9C2876B.TMP","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\AONJLIHR.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\Fonts\\arialbd.ttf","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\-B8opoD53vy[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\OqOE21UvWe3[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\209.7d7330bbfa2be6215e38[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\14.2dfb61b890959f78272d[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\195.461912c47007775093ae[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\suggestions[1].en-US","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_49FC544F04082FD9F64F9EFB226AF8B5","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\VG8BU31O.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\IYXGE11F.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HGEILYKK.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3K9LJ14D.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\System32\\stdole2.tlb","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\System32\\wshqos.dll","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"C:\\https:\\www.baltimoreculture.org\\calendar\\event\\26507\\watch-grudge-2020-online-hd-full-movie-google-drive","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_74167E25E5476CCA2A5946AAA61BF9E1","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_A2A3810F58C46D6912DB6BCCB01B3374","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\82CB34DD3343FE727DF8890D352E0D8F","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\C1B3CC7FF1466C71640A202F8258105B_D33B7F826B26602C3BA5CB801B282EBD","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\C1B3CC7FF1466C71640A202F8258105B_D33B7F826B26602C3BA5CB801B282EBD","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\date[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\datepicker.1.7[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\views[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\field.theme[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\ctools[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\dismiss.base[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\gbca.hacks[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CFE86DBBE02D859DC92F1E17E0574EE8_5FA8E5E800867BF860DF5E533E701BAF","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\85B3F147E3624A14E6A20DB4F6C2C5D9","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\gbca-calendar.hacks[1].css","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\jquery-extend-3.4.0[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\jquery.min[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\jquery.once[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\no-js[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\custom_search[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\GBCA_CALENDAR[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\email-decode.min[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\GBCA[1].js","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\Black_0[1].jpg","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\PLUM_GBCA_New_Logo_with_text%20copy[1].jpg","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\Black_4[1].jpg","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\System32\\msxml6r.dll","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_DC2EE962A7CA0D736AAA4F9745829DBD","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC197601BE0898B7B0FCC91FA15D8A69_F523D045F1F860616CCF0CDED23414FA","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\CC4FEA46495CA161D470CD085EDBAADE","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\B398B80134F72209547439DB21AB308D_5FDD03068CBBD8A96F3AB9595BA10093","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\System32\\oleaccrc.dll","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\CC197601BE0898B7B0FCC91FA15D8A69_DC2EE962A7CA0D736AAA4F9745829DBD","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\3S9Q96YC.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\Fonts\\times.ttf","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\search_img[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\bkg_img_lines[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\btn_search_mobile[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DOMStore\\HVI1ZDNF\\www.baltimoreculture[1].xml","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%WINDIR%\\Fonts\\verdana.ttf","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\mem6YaGs126MiZpBA-UFUK0Zdcs[1].woff","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\mem5YaGs126MiZpBA-UNirkOUuhv[1].woff","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\memnYaGs126MiZpBA-UFUKXGUdhrIqU[1].woff","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\mem8YaGs126MiZpBA-UFVZ0d[1].woff","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\memnYaGs126MiZpBA-UFUKWiUNhrIqU[1].woff","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\mem5YaGs126MiZpBA-UN7rgOUuhv[1].woff","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiYw[1].woff","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\TK3_WkUHHAIjg75cFRf3bXL8LICs169vsUZiYw[1].woff","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\frame_ticket_footer[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\2UXTWTJR\\btn_vimeo[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\btn_arrow[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\icon_icalendar[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\btn_facebook[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\icon_find_events_nav[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\icon_submit_event_nav[1].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\btn_search_mobile[2].png","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\HOI17G02.txt","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_A7467B47637944C1E4B4025C763E391F","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\0270780F846F08BEFE0DD8112D932FEF","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\CKDNCXYS\\sh.f48a1a04fe8dbf021b4cda1d[1].htm","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]}],"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYSERVER\\PROXYSERVER","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYOVERRIDE\\PROXYOVERRIDE","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTOCONFIGURL\\AUTOCONFIGURL","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTODETECT\\AUTODETECT","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\TABBEDBROWSING\\NEWTABPAGE\\MFV\\MFV","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{FD4316C2-FF33-42BF-BE78-39051EB67EC2}\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\00-00-5E-00-01-01\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\RECOVERY\\ADMINACTIVE\\{00000000-0000-0000-0000-000000000000}\\{00000000-0000-0000-0000-000000000000}","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_1bc_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_444","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"IsoScope_1bc_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"IsoScope_1bc_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"IsoScope_1bc_IE_EarlyTabStart_0xed4_Mutex","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"IsoScope_1bc_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"IsoScope_1bc_ConnHashTable<444>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_444","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_1bc_IE_EarlyTabStart_0xed4_Mutex","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_1bc_ConnHashTable<444>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_1bc_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_1bc_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"IsoScope_1bc_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"Local\\https://www.baltimoreculture.org/","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"Local\\InternetExplorerDOMStoreQuota","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_1bc_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\https://www.baltimoreculture.org/","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\InternetExplorerDOMStoreQuota","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\_!SHMSFTHISTORY!_","sources":[{"report_type":"sandbox","report_id":"5f13570511f0ce41842ad721"}]}]}},"report_ids":{"sandbox_job_ids":["5f13570511f0ce41842ad721"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample 04156dfc2e80… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 04156dfc2e80…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/04156dfc2e80596868d7de5ffd8e128da78cf3cdf158261816a228e399a48556"}],["$","meta","4",{"property":"og:title","content":"Sample 04156dfc2e80… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 04156dfc2e80…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/04156dfc2e80596868d7de5ffd8e128da78cf3cdf158261816a228e399a48556"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 04156dfc2e80… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 04156dfc2e80…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2d","11",{}]]