24:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 27:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4a1,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.Generic Sample 0862aca72fb8… — Score 97/100 — Hybrid Analysis","description":"Malicious verdict for sample 0862aca72fb8…. Malware family: Trojan.Generic. Threat score 97/100. 22/28 AV engines flagged this file. 2 malicious and 7 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/0862aca72fb8a39e6f9ff9ca0dcfd31b90e614150690d1b98d9bdbbd39062efb","keywords":["Malicious","Trojan.Generic","malware analysis","sandbox report","threat intelligence","0862aca72fb8a39e6f9ff9ca0dcfd31b90e614150690d1b98d9bdbbd39062efb"],"about":{"@type":"SoftwareApplication","name":"53113f717e89f4ba2c94aa64d715527d","applicationCategory":["peexe","assembly","executable"],"identifier":"0862aca72fb8a39e6f9ff9ca0dcfd31b90e614150690d1b98d9bdbbd39062efb","additionalType":"Malicious sample"},"threatScore":97,"malwareFamily":"Trojan.Generic","antivirusDetections":{"malicious":22,"total":28},"behavioralIndicators":{"malicious":2,"suspicious":7},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T6c8,"" touched file "C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll" "" touched file "C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll" "" touched file "C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll" "" touched file "C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll" "" touched file "C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll" "" touched file "C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll" "" touched file "C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll" "" touched file "C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config" "" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls" "" touched file "C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\51e2934144ba15628ba5a31be2dae7dc\mscorlib.ni.dll.aux" "" touched file "C:\Windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll" "" touched file "C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\d1265d6159ea876f9d63ea4c1361b587\mscorlib.ni.dll.aux" "" touched file "C:\Windows\assembly\pubpol47.dat" "" touched file "C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\8990487b8c05ada1e1febe7dcb6c0410\System.Windows.Forms.ni.dll.aux" "" touched file "C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\24db7e31c7ba5b0e824e2f521c0914bc\System.Drawing.ni.dll.aux" "" touched file "C:\Windows\assembly\NativeImages_v4.0.30319_32\System\250e8e6af918e7ca66787117bc8633e3\System.ni.dll.aux"26:T570,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1b:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$23"}}],["$","$L24",null,{"initialData":{"schema_version":"1.0.15","sha256":"0862aca72fb8a39e6f9ff9ca0dcfd31b90e614150690d1b98d9bdbbd39062efb","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":97,"unified_at_epoch_ms":1791353298156,"unified_at":"2026-10-07T06:08:18.156Z","metadata":{"hashes":{"sha256":"0862aca72fb8a39e6f9ff9ca0dcfd31b90e614150690d1b98d9bdbbd39062efb","sha1":"8f5842e3657401503efb0acd4efe539166d1919e","md5":"53113f717e89f4ba2c94aa64d715527d","sha512":"d9dae2286e7aeaa66417d1b6076a52cc0cf91c717c2e836ae643e3abe126de5fe2aa40a326bbd60aee071f7934a3524f5b3195cae5fb1c5b359f6423607a0d65","ssdeep":"384:pUnDDCf/D5UjNGGg7SaZee84ffWkuzdhhNt:uHU5U6lZeyEhhr","ssdeep_chunks":["384:pUnDDCf","384:UnDDCf/","384:nDDCf/D","384:DDCf/D5","384:DCf/D5U","384:Cf/D5Uj","384:f/D5UjN","384:/D5UjNG","384:D5UjNGG","384:5UjNGGg","384:UjNGGg7","384:jNGGg7S","384:NGGg7Sa","384:GGg7SaZ","384:Gg7SaZe","384:g7SaZee","384:7SaZee8","384:SaZee84","384:aZee84f","384:Zee84ff","384:ee84ffW","384:e84ffWk","384:84ffWku","384:4ffWkuz","384:ffWkuzd","384:fWkuzdh","384:Wkuzdhh","384:kuzdhhN","384:uzdhhNt","768:pUnDDCf","768:UnDDCf/","768:nDDCf/D","768:DDCf/D5","768:DCf/D5U","768:Cf/D5Uj","768:f/D5UjN","768:/D5UjNG","768:D5UjNGG","768:5UjNGGg","768:UjNGGg7","768:jNGGg7S","768:NGGg7Sa","768:GGg7SaZ","768:Gg7SaZe","768:g7SaZee","768:7SaZee8","768:SaZee84","768:aZee84f","768:Zee84ff","768:ee84ffW","768:e84ffWk","768:84ffWku","768:4ffWkuz","768:ffWkuzd","768:fWkuzdh","768:Wkuzdhh","768:kuzdhhN","768:uzdhhNt","384:uHU5U6l","384:HU5U6lZ","384:U5U6lZe","384:5U6lZey","384:U6lZeyE","384:6lZeyEh","384:lZeyEhh","384:ZeyEhhr"],"imphash":"f34d5f2d4577ed6d9ceec516c1f5a744"},"file_info":{"file_name":"53113f717e89f4ba2c94aa64d715527d","file_type":["peexe","assembly","executable"],"file_type_id":".NET exe","file_size":19968,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1510237725000,"last_seen":1648719156000,"last_multi_scan":1648719156000}},"detections":{"summary":{"verdict":"malicious","score":97,"tags":["evasive","ransomware"]},"stats":{"av":{"malicious_count":22,"suspicious_count":0,"total_engines":28},"attributions":{"malware_families_count":1,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":0},"sandbox_signatures":{"informative_count":7,"suspicious_count":7,"malicious_count":2,"total":16},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"AhnLab","success":true,"verdict":"malicious","threat_name":"Trojan/Win32.Ransom","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"malicious","threat_name":"Trojan/Win32.AGeneric","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"malicious","threat_name":"TR/FileCoder.vbfnq","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"malicious","threat_name":"Gen:Heur.Ransom.REntS.Gen.1","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bytehero":{"name":"ByteHero","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"malicious","threat_name":"win/malicious_confidence_100% (D)","status":"malicious","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"cyren":{"name":"Cyren","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"malicious","threat_name":"Gen:Heur.Ransom.REntS.Gen.1 (B)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"malicious","threat_name":"a variant of MSIL/Filecoder.AK trojan","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"malicious","threat_name":"Trojan/Generic!947B97F728E52199","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ikarus":{"name":"IKARUS","success":true,"verdict":"malicious","threat_name":"Trojan.MSIL.Filecoder","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"malicious","threat_name":"Trojan ( 700000121 )","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"malicious","threat_name":"Unavailable (production)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"malicious","threat_name":"Ransomware-FTD!53113F717E89","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Encoder.euvzae","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"quickheal":{"name":"Quick Heal","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"malicious","threat_name":"Unavailable (production)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"symantec":{"name":"Symantec","success":true,"verdict":"malicious","threat_name":"Unavailable (production)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"malicious","threat_name":"Ransom/W32.DN-HiddenTear.19968","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"Trend Micro","success":true,"verdict":"malicious","threat_name":"Ransom_RAMSIL.SM","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"Trend Micro HouseCall","success":true,"verdict":"malicious","threat_name":"Ransom_RAMSIL.SM","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"malicious","threat_name":"Unavailable (production)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"malicious","threat_name":"Unavailable (production)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xvirusantimalware":{"name":"Xvirus Anti-Malware","success":true,"verdict":"malicious","threat_name":"Unavailable (production)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"malicious","threat_name":"Trojan.Filecoder.Win32.6552","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{"malware_families":[{"value":"Trojan.Generic","sources":[{"report_type":"quickscan","report_id":""}]}]},"sandbox_signatures":[{"level":"informative","category":"General","name":"Contains PDB pathways","description":"\"f:\\Tools\\malware\\malware\\obj\\Release\\malware.pdb\"","origin":"File/Memory","relevance":1,"id":"string-7","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\mnkkdiwc\"\n \"mnkkdiwc\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"level":"informative","category":"General","name":"Loads the .NET runtime environment","description":"\"\" loaded module \"%WINDIR%\\Microsoft.NET\\assembly\\GAC_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\mscorlib.dll\" at 6A410000\n \"\" loaded module \"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\d1265d6159ea876f9d63ea4c1361b587\\mscorlib.ni.dll\" at 698B0000","origin":"Loaded Module","id":"module-3","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"level":"informative","category":"Installation/Persistance","name":"Dropped files","description":"\"Mahjong.lnk\" has type \"data\"\n \"Narrator.lnk\" has type \"data\"\n \"Internet Backgammon.lnk\" has type \"data\"\n \"GUID Generator.lnk\" has type \"data\"\n \"Component Services.lnk\" has type \"data\"\n \"Internet Checkers.lnk\" has type \"data\"\n \"Data Sources (ODBC).lnk\" has type \"data\"\n \"Calculator.lnk\" has type \"data\"\n \"Windows SDK Documentation.lnk\" has type \"data\"\n \"Wireshark.lnk\" has type \"data\"\n \"Private Character Editor.lnk\" has type \"data\"\n \"Examples.lnk\" has type \"data\"\n \"Wordpad.lnk\" has type \"data\"\n \"MineSweeper.lnk\" has type \"data\"\n \"Event Viewer.lnk\" has type \"data\"\n \"Windows Fax and Scan.lnk\" has type \"data\"\n \"Sticky Notes.lnk\" has type \"data\"\n \"Microsoft OneNote 2010.lnk\" has type \"data\"\n \"rRgk91Ih5n.doc\" has type \"data\"\n \"Performance Monitor.lnk\" has type \"data\"","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"level":"informative","category":"Installation/Persistance","name":"Touches files in the Windows directory","description":"$25","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Heuristic match: \"Dear fellows, Attention please!\nAs you may noticed, all the data on your computer has been encrypted.\nTo decrypt the files, each of your computer need a privatekey which is held by us.\nWe guarantee that your files can be 100% restored only with our help\"\n Heuristic match: \"Dear fellows, Attention please!\\r\\nAs you may noticed, all the data on your computer has been encrypted.\\r\\nTo decrypt the files, each of your computer need a privatekey which is held by us.\\r\\nWe guarantee that your files can be 100% restored only with ou\"","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"level":"informative","category":"Unusual Characteristics","name":"Matched Compiler/Packer signature","description":"\"0862aca72fb8a39e6f9ff9ca0dcfd31b90e614150690d1b98d9bdbbd39062efb.exe.bin\" was detected as \"Microsoft visual C# v7.0 / Basic .NET\"","origin":"Static Parser","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"level":"suspicious","category":"Environment Awareness","name":"Found a reference to a WMI query string known to be used for VM detection","description":"\"Win32_ComputerSystemProduct\" (Indicator: \"win32_computersystem\"; File: \"0862aca72fb8a39e6f9ff9ca0dcfd31b90e614150690d1b98d9bdbbd39062efb.exe.bin\")","origin":"File/Memory","relevance":10,"id":"string-55","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the active computer name","description":"\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","origin":"Registry Access","relevance":5,"id":"registry-35","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the cryptographic machine GUID","description":"\"\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","origin":"Registry Access","relevance":10,"id":"registry-1","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Drops executable files","description":"\"Desktop background.png\" has type \"DOS executable (COM)\"","origin":"Binary File","relevance":10,"id":"binary-1","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"Changes the desktop background picture","description":"\"\" (Access type: \"SETVAL\"; Path: \"HKCU\\CONTROL PANEL\\DESKTOP\"; Key: \"WALLPAPER\"; Value: \"%PUBLIC%\\p94IEfS3Pf.jpg\")\n \"\" (Access type: \"SETVAL\"; Path: \"HKCU\\CONTROL PANEL\\DESKTOP\"; Key: \"WALLPAPERSTYLE\"; Value: \"32000000\")","origin":"Registry Access","relevance":10,"id":"registry-22","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"level":"suspicious","category":"System Security","name":"Contains ability to impersonate another user on the local machine","description":"malware.Form1::WriteReadmeToLogonUserDir at 53113f717e89f4ba2c94aa64d715527d-6000004-Form1_StartAction","origin":"Hybrid Analysis Technology","relevance":10,"id":"stream-46","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Reads information about supported languages","description":"\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","origin":"Registry Access","relevance":3,"id":"registry-25","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by a large number of Antivirus engines","description":"24/67 Antivirus vendors marked sample as malicious (35% detection rate)","origin":"External System","relevance":10,"id":"avtest-3","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by at least one Antivirus engine","description":"24/67 Antivirus vendors marked sample as malicious (35% detection rate)","origin":"External System","relevance":8,"id":"avtest-0","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]}],"incidents":[{"name":"Ransomware","details_count":1,"details":[{"detail":"Changes the desktop background picture"}],"sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Fingerprint","details_count":2,"details":[{"detail":"Reads the cryptographic machine GUID"},{"detail":"Reads the active computer name"}],"sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]}]},"activity":{"stats":{"process_count":1,"spawned_processes_count":1,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":2,"imported_dlls_count":67,"dropped_files_count":0,"extracted_files_count":167,"files_written_count":464,"files_deleted_count":0,"registry_keys_created_count":2,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":2,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":["evasive","ransomware"],"sample_flags":["Extracted Files"],"sandbox_reports":[{"id":"5a0464af7ca3e121b50dd009","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"malicious","threat_score":97,"malware_family":"Gen:Heur.Ransom.HiddenTears","submit_name":"53113f717e89f4ba2c94aa64d715527d","analysis_start_time":"2017-11-09T15:19:52+00:00","indicators_count":{"informative":7,"suspicious":7,"malicious":3},"tags":["Extracted Files"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}],"processes":[{"pid":3108,"ppid":0,"name":"0862aca72fb8a39e6f9ff9ca0dcfd31b90e614150690d1b98d9bdbbd39062efb.exe","command_line":"","sha256":"0862aca72fb8a39e6f9ff9ca0dcfd31b90e614150690d1b98d9bdbbd39062efb","normalized_path":"C:\\0862aca72fb8a39e6f9ff9ca0dcfd31b90e614150690d1b98d9bdbbd39062efb.exe","uid":"00014881-00003108","icon":"$26"}],"all_imported_dlls":["sechost.dll","uxtheme.dll","System.Drawing.ni.dll","comctl32.dll","user32.dll","mscorlib.ni.dll","wbemcomn.dll","ws2_32.dll","wbemprox.dll","fastprox.dll","wship6.dll","winnsi.dll","cryptbase.dll","System.Windows.Forms.ni.dll","sspicli.dll","cryptsp.dll","pnrpnsp.dll","clr.dll","oleaut32.dll","rsaenh.dll","IPHLPAPI.DLL","usp10.dll","nsi.dll","bcrypt.dll","mscoreei.dll","RpcRtRemote.dll","clbcatq.dll","ntdsapi.dll","FWPUCLNT.DLL","ntdll.dll","KernelBase.dll","lpk.dll","mswsock.dll","System.Xml.ni.dll","dnsapi.dll","msvcrt.dll","shlwapi.dll","msvcr120_clr0400.dll","rpcss.dll","clrjit.dll","System.Configuration.ni.dll","System.ni.dll","WSHTCPIP.DLL","advapi32.dll","msctf.dll","System.Windows.Forms.dll","nlssorting.dll","System.Management.ni.dll","mscoree.dll","gdi32.dll","WMINet_Utils.dll","wbemsvc.dll","NapiNSP.dll","mscorlib.dll","shell32.dll","GdiPlus.dll","dwmapi.dll","tzres.dll","imm32.dll","nlaapi.dll","winrnr.dll","rasadhlp.dll","profapi.dll","rpcrt4.dll","wmiutils.dll","kernel32.dll","ole32.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"Desktop background.png","sha256":"1417b4cdb3ac10af1cd4c0abf8296851783b51edf40eb44212abe7b71dcc7d41","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Calculator.lnk","sha256":"5d05c263aabf096f41d9e09c6ecf66f64ab8a833eecc6459fa60579bf7c54244","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Paint.lnk","sha256":"6c0fa2609dce26e00a846f63516cd8501f081638a69d48bd493bc42cf5706648","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Sticky Notes.lnk","sha256":"1912b5218435fccd805280440278d2905626e22c53395cbe525c8b02adbae833","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows Media Player.lnk","sha256":"ffa0b5d8043c4052f852f4fd031446dcc3aa2cb3976018484d82f187fd575145","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"04bZ.txt","sha256":"e8d8c4da632dddd5fcd00c6fa3731792e9f3f50546878d0d10044e0272579711","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"0Og1.rar","sha256":"c41bfaaf12d0254c42d4935487b59237694fc9e83e3566edab2305e943b8dd21","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"0gakl8ixtWMkw.doc","sha256":"c3750a0ed932151ea55c360bd2b824b36d05d144834d4b2ee563c2b4b6247021","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"0zIG0D.doc","sha256":"7a9a5e0e8e1356e8e52fd81a0653e3eb7e0eedf1c29884f3329230b13f4dcde2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"1q4yvQVxByym4.rar","sha256":"5cc571e55e5ebb37100e62dfae4e0057747c9c8f53de61d88d26787b5c92ee82","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"3AVoUo9c20GI.pdf","sha256":"fff03b92a50a6d1166750b10a306fabcd5088f5366ed0ce36f4dd9c2bb15d8c4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"5F1yaAIKfUGQcmmt.doc","sha256":"63990000a941d28aa6f04289970be81328d3aa9209923aaadb9946e29fe3c4cb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"5yqb2pxbZ.txt","sha256":"26a6d827b4ecd816b4129f07201ba98518e4ecc9c4d9401b41110ea4b8375be5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"66u5Ps.pdf","sha256":"5d329e16c25067001a1ed4ea79d7478259914efd0c15f1e021a21ee4aaf74fc8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"6SZfLTu9z.doc","sha256":"d43a21c6242a738152bfe2c237d672756022e8578189d2bd53bec7e4327d437a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"86iRpMfVS9o.jpg","sha256":"df8566d9f34c018d407d98d75bf0651a01a9d86f5c791c198fd9e2b630656e09","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"8AuppwJ6wyt.txt","sha256":"3eba5aac541fd12d60265579d39ab6860195bf86035cb667ef14215469ee79f9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"AL0XySsN7H7ugY.rar","sha256":"f3bd6ad6bcd14fb61f0a31ee27260783d08aa739c3bc636551f5b526871dfd6d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"B2OE.pdf","sha256":"12084710518e5aab9172e84e81be2059698f3aabcfe90cf0985832c5bdf819f0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"C04T72pR0Bcl.doc","sha256":"7e3145feb3fce3999a487e1ebac6a39222c2b28f56ebf64db0b980ab3073c998","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"EKeaJO.doc","sha256":"6d7838b8ee70ba7cd2508df3286a118c9391b2570726d2d4f09692663de7c4b7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"F3hzum1.doc","sha256":"76caa8c5a3245348815cec5f90bf1d76aab78ad4e6399b8a95d265ed5910d42b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Tmg2wsFHYf9ioO.doc","sha256":"b9ccefd45461170cc099a11b19883e2f194c94f9b2efdb8187c7bc9d68bc7690","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"bg3oTe.doc","sha256":"f0b4b24af4f2caff651c4e2c74d9a071f5cd3275e19a2f576d62e34515dd9dab","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"dH1rDN9f9.doc","sha256":"d5668fa3da1cc8f4bbf85643319d9d71aa399c069d932d941bdb3c36cce5d96b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"hKY8.doc","sha256":"e4d3bdf98be93aace89283bafff0a0ae44bfa1ac24ca32af5591b00abe9bf461","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"klmqz.doc","sha256":"d9c689a5ef417a2bf72eb7417096e23fca32d8d8e1aaf21fd92792c163a6d55e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"lCEf83Wf7e4nuIMk.doc","sha256":"d8727d4015740763c4f1bf00e403b38c83b5f4a661d05e3de6991ae41fe95df0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"mtgFs8Za.doc","sha256":"640c055e40bc763ca6b061946885d590024d4c4071d5b0f17f47f02cb20244af","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"rRgk91Ih5n.doc","sha256":"00a4a4b83af7ac8769c99d60dde7d132e9701b57eacb9efb400a6b3dca7c7c0a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"w5JaoO.doc","sha256":"4532c3f1cab22c2ac2782f77f79121e454f2a7559ef7c4c6d52114e753abc3d1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Mahjong.lnk","sha256":"c27fd728f1df06659010d7576c43ac5b3fdba54b030160647665e8dea7e361f2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Narrator.lnk","sha256":"a2adbd8b239f3d3f605fa834f81365f7f7d2044d8cc79a2c509f4bb1beabb709","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Internet Backgammon.lnk","sha256":"d3fc8eaf1ae47017d0f4f96f9f6c381a7f04b8f70f9c8d618caece2979f077a0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"GUID Generator.lnk","sha256":"248c33f4bcc70244b43824d9fbc5e49af9778844107bd6aa953feacecbf1d014","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Component Services.lnk","sha256":"24ffc27e9bb0855c0ec8c6f594d6565ba4cc0ac9dc77c21d26e0ad757c620dd3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Internet Checkers.lnk","sha256":"b04b40185f48f3f8f6a8be5d9d2bdb2ce3b2cc613646101f806c7bcc83835c3b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Data Sources (ODBC).lnk","sha256":"e0dd847e02ed36dfb6e40ba92eb3f77574df9444638cc13daba7098dddcb8e86","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows SDK Documentation.lnk","sha256":"9f0da1db159e8d32b41d20d292db7ab67a7211ac627f6ff8514d8fe971b58e66","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Wireshark.lnk","sha256":"91808df7dc88f8c1ceab6388cc0cdbb43696c09adfef19c8a7c23c6123935800","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Private Character Editor.lnk","sha256":"454a2b6d978a31c24507daa13d9219095effaec1f841d5ad7945521d321a456d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Examples.lnk","sha256":"04fa64cd12f9365271dafe2c10bf2d1d054206cdf514aebe22e9e0fc18a0b95b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Wordpad.lnk","sha256":"e0ddeb27317b9f29b7b6c6f67c7c0bdb46fa6ce67a67580b6c8f757680c33fca","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Event Viewer.lnk","sha256":"c8ff38103f58c489ddee9e9ce168fc70f17f1eeb360ab302c2532d19485b7845","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows Fax and Scan.lnk","sha256":"59049220305f65c749c995d4b1f4b8a224b7336d9a7a09c626c19b3483f2fe31","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Microsoft OneNote 2010.lnk","sha256":"ae5563e29e2bc6219faebfb45f6faae45802ad499481961bed01f2837ca13c32","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Performance Monitor.lnk","sha256":"4dd4a077564964f4710a23df019152734f609829a61c8534e1bece47d7ee5a2f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Magnify.lnk","sha256":"ffaa24295544312ece1ade1fc79ffcdff0dc791d43339bc7592438f91cd6dda4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Google Chrome.lnk","sha256":"613e183432aefc7eff6231428c368fe491a737e1b3cc19d1e73ae010ae2c0c71","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Browse Extras.lnk","sha256":"7505aa6ef76e636c1383299ed47a5d4a81e130d0ed8fd61a2f51b2ff58d4f060","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Uninstall Debugging Tools for Windows (x86).lnk","sha256":"ff74c82d305e2c3d2cf3077d4d2449bd24e98cf91be7c8485c3140a9f42d0995","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Release Notes.lnk","sha256":"f32d473e15dfe838f8786432caba66d91ddbac9cb49f75ece517cd43f22e11b2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Uninstall WinPcap 4.1.3.lnk","sha256":"6eb66fecda63f2b7b6c656fb299a547babbfa1662b610903588d90a74539bc75","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Microsoft Clip Organizer.lnk","sha256":"300d16e575ced6421742defa32398f66eb4ff79052cdcf5a7816c911b579c436","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"System Configuration.lnk","sha256":"9d789050a8f384373db69e7031150cb162b7dad42acdce368c692a57e3b755f8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"System Restore.lnk","sha256":"cca23c9c8e756beaf975acd40b4ec3ad97c90702bf5a8c1f0cc4547293e735db","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Microsoft Excel 2010.lnk","sha256":"aa2b15f77eb5aad9fd357b0e34489a2b9437ec1e39fdd28ff246736365f2f967","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Spider Solitaire.lnk","sha256":"f30f7d77d45206f50b05e797f1486c37186fb002afe2197504a6d87a8053e2d2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Internet Explorer.lnk","sha256":"e65ff54c3383ce7a901f99d0115a0262bc2a488eb3d0e5d0a2fa29054c378892","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Welcome Center.lnk","sha256":"55fa962720bf59caa655ab7bd60cd9d3eb14080a5ba7060a800c6da9a3fe0a15","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Minesweeper.lnk","sha256":"89c8c69b73bca4f970b61f3135cf51da48bc47d83bac77ba35fb32acb181e9bd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows Easy Transfer.lnk","sha256":"14e164559490ab75e86957cb57eef6f786c9dfff6287923f6b59ec8f8984d382","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Microsoft Word 2010.lnk","sha256":"12eff1e5ef12ea55926d5bd3d7594a10d1489bdf6c43e7c9f8033dc655231dda","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"CMD Shell.lnk","sha256":"7038b0bfb136e39e15ab7990cc6fc23f3d30779751e2004f5b91d413519fcc02","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"System Information.lnk","sha256":"3961495839e9333b0b2e2c4c69f0a3e4c5a00b789e23fc9932d0609cf0019833","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Help.lnk","sha256":"b397c8be13864062fd5b461e041e634fe7dac9e7a3a273c53b8fa1d83ee0d73c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Microsoft Publisher 2010.lnk","sha256":"d14e038cf55b375a1353d84e67dc0e7b84a5b1a514d3727c2ccecbe13b0491a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"computer.lnk","sha256":"ff0fe36b84320b8da4f7fc92b65819e3223ffea76b04f94c6dba41e4ca4dc880","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Purble Place.lnk","sha256":"34139ed0e2eb664efcb7f45524b501d650439dccb74138c22af6a96f24f14273","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Desktop.lnk","sha256":"035ffdb17e3e86959e68725987444baa2149da2de976170410fc8560536c4bce","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"SciTE Script Editor.lnk","sha256":"a31b61ec6ff2c6681ed83b181789215f88c647e3177d37812e554e83c06291f0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Fusion Log Viewer.lnk","sha256":"2438d812a874e943358dc03a9264c1a5fd3ba2aea3be1b0366540da383e636cf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Create Recovery Disc.lnk","sha256":"643d3fc19b675f99c5412acba92eb33eba247c931079a0d0a7eeb9d3ffbcda38","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows SDK Samples Directory.lnk","sha256":"1ce9f30b09467eee5f319c225a5791b15f9b2a52de6b543f4c66a61b2f018e11","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Application Verifier.lnk","sha256":"ed1ed9a3918697c4308480a46aa36e02a16bdbf3e13cb29db7d0cf7ac26b70d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows Anytime Upgrade.lnk","sha256":"596c94a6c1e257cb53f20a9bfa319a01a5a8cbd2830995a812817dcfc2e8c833","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows Troubleshooting Pack Designer.lnk","sha256":"7428f68fc883333d9d64349f8d9564fcbb40e34381eb17e5ea6326fdac5cd8c7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Service Configuration Editor.lnk","sha256":"a76638d5fb3f0e10d8c17cb3e6f625bf9b694a37ce74c0eed82b59f13516db0f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Inspect Objects.lnk","sha256":"c90e3e6a24dc24c8dfb03dab0d3dee3ff790f3711cf8cb6a131dc951de41853f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Microsoft Office 2010 Language Preferences.lnk","sha256":"acc1d7d6fee60e3f0511ba1ce29271e0e91c4a89a18f79764d7ea903f2117a28","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"On-Screen Keyboard.lnk","sha256":"73e7ddd792fb81422a04548c3a5eb6f97ef998d63de3bb6498f8949ffb9af8be","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Debugging Help.lnk","sha256":"a5f294b5128eb1b4b34eb0f1e26162ade9ac3f76d2ee50fb64723f1dba7ccdab","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Solitaire.lnk","sha256":"ea01b4bc73f3a2efb773fcb90829a2146e2eb0a92c9e36184ba30ed000c22f60","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Notepad.lnk","sha256":"8ce8e136ca9f34e8aa18aadebdf6a65cc7aeaccffe1c6203a56d08510a28a0c4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Character Map.lnk","sha256":"317a8061c55b6fa2e984a8c49876ce850a55be93fad4080511b847f212f8e1a3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Sound Recorder.lnk","sha256":"be17b59e0c716e5c2a7415cb08860e2d5c800610e3fe36a8e2c4a306171cb999","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Microsoft PowerPoint 2010.lnk","sha256":"9cc4782a7ff0ffc753b53045914ef4a53917add090ea7d119f2c667f09ef28b4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Microsoft Outlook 2010.lnk","sha256":"2c2dafc2d6ae274f07339835bd41c307852455b6fa067254d7e313ee172b277a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"WinCDEmu Settings.lnk","sha256":"465afad3ede035a639fd4375dd58bc0c4e3f47e6af6087837cee84e231705fb9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"iSCSI Initiator.lnk","sha256":"88ede74346ba6c08fbade0082cf0f1c2dcb1b49232eebe74f02669b4b7227b7e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Compile Script to .exe.lnk","sha256":"659dd90b867d12dd3c931034d697d3459b0812623e583e7f1fe43323d8a2281e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Run Script.lnk","sha256":"997f66c9370f87159ab89063dd91e671ce97d67cbe869f574e00c4bdd69d1cd7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Internet Spades.lnk","sha256":"ed3030235e28210495630558e85c5b97f70f0876374b9184c4da0ae27735d1e3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows Easy Transfer Reports.lnk","sha256":"a2a799dd1bc943e1cf34169431c1271614c5f2eecbdad1658331cf29204c6d50","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Sync Center.lnk","sha256":"638ad47418aad5116c311666c4c7fdc5b8c78b8ada754151e53c3e95626cba9c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Install Windows Performance Tool Kit.lnk","sha256":"3c034bffb7f7ff797a03680cff56c743b7587c73441b0f7453b3e38ed06bd9df","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"IL Disassembler.lnk","sha256":"bad19284db79b8a8b6c53123ab04425564dc985856441e825f4970d44e7e6974","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Downloads.lnk","sha256":"0c081a13f953750ca4fdd7ba679a7ce768d9c2be173cd3b40ac40c1a98781e48","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Microsoft Office 2010 Upload Center.lnk","sha256":"a05516b1ef34f140fa8dbc0b1be5733adf0703b89722df96714283a33f4c9a44","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows Explorer.lnk","sha256":"ba68db46b6bd7de67bfc3a44e7638b93f6229f6942c41ff835973f5b05237cfe","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"OLE-COM Object Viewer.lnk","sha256":"cd3fb349af73faa532c9628f55b9bddc207451b7493e088f65f0f839ec716296","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Internet Explorer (No Add-ons).lnk","sha256":"9cff6e7306ae2c5f26395fa1297d9aec5acfd76e382dfde3dcc43642a6e309a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Memory Diagnostics Tool.lnk","sha256":"9d64c2345b4509723055e4cf71f070140f37b75882cbe31feb4883c02497e6a5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"WinDiff.lnk","sha256":"1b0fc2b83e35e7210859decbfa591c16ca8364d1f9e7e88332210abec381a623","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Task Scheduler.lnk","sha256":"65c1be4ef4253fe0233d76d990dedf738e087dcf8e83bfec59ca7760539ff877","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Microsoft Office Picture Manager.lnk","sha256":"4f2d81abdbafb40385dbf81a6905b0ca1599ce366201edf04f51ed81d9b74b08","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"WinDbg.lnk","sha256":"8f06984f1c1255844f0375a6cfe92eb1b4cdd8ea9e7e38c2a96397daf1bbf4c2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Sidebar.lnk","sha256":"3753a0b059979978c3e4d1d387cb09ba0a106386e7b6fc417f6a6863aae2be56","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows DVD Maker.lnk","sha256":"ebca75cf0956f4d0b942ec7cb3aec1df8caace23f5e51d91efbd51952d732c1b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"AutoIt Window Info.lnk","sha256":"88dffc321bf7b55556779e69a771fda2c3cae3b25031fa209fa319b0344aea66","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Ease of Access.lnk","sha256":"dd643571bdff1f36bd54e0c6a120a7a987452d8c5532460681bc32c9ed9af065","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"AutoIt v3 Website.lnk","sha256":"b4e1e8c529db3703470b3b92c207d0304087aa77bcd463e5993e32aeaa1da65b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Snipping Tool.lnk","sha256":"ec14dd777b50e3ad11eaa73b92502a6f44246d1f9ce8bdb167c4cff883f9421d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Samples Reference.lnk","sha256":"d1adc5a4a268651d8290a6edc02bec3000de5b67c2ac2747551fe94fbef7c602","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Check For Updates.lnk","sha256":"6e85adda3592cda239394727966b15b60874e7874c0a9350e1f8294cb3b8a38b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Chess.lnk","sha256":"59395d65d44d7f12e976fe1a9a505c5cafed1e6066dde9b0bc1cac18c983fe42","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Mobility Center.lnk","sha256":"6d8e8ea4762ed2e0f19a0c71a0346150a85dcfdc526b5927c74198b25b8f9a4f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Configure Java.lnk","sha256":"229691628f47a77e86c45a0df5b609910244a55d8527697cb4cce35a0513601f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Hearts.lnk","sha256":"20fd5b1312a3af0946f951a1ca0fc69e019002517ec57a68cdc7c40ff5db009a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Manifest_Generator.lnk","sha256":"f5f70ef2a1a3c9e57a590b707cc8d92744ae248c64e6a639d9c963f103aedc4c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"XPS Viewer.lnk","sha256":"dfbb2a36a5c218601f7f90341237262fc0f8ebe3fa4f8ca3bcac5d6092d1b939","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Uninstall.lnk","sha256":"98402a44cf0f8d4ad42716e75bd820d2ae84410a992d29b338c5ed2da5637adf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"AutoItX Help File.lnk","sha256":"b48e6d097535259a0c12feadf53905158a63b9742417479b449186e033d72997","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows PowerShell ISE.lnk","sha256":"cb0df37b32e2ead76433b32edcde10787d6aa7dc1b70207f16bee10f2c66b7c5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Backup and Restore Center.lnk","sha256":"662d1aa608fdfa3f008889fdbc66d2217bbebd04bb74f9e279474206d1efe5b2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"UI Spy.lnk","sha256":"9c75350397046d8099c5cd89a0211d8886373da1e7e4a058516f34c2b3a7450d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Visit Java.com.lnk","sha256":"5f0bd6a5d216968b564d5b8bf5b011a3d7b226e96d44ff56888ab089115d9824","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Get Help.lnk","sha256":"3f696c354656502f4e3643f26548186066fefe673f81157a5ddc1f92b9f9a98a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Digital Certificate for VBA Projects.lnk","sha256":"dac6d6463ab5488c562c51a46555b8f63e3a2232db85f4cd20e3a2f01374483e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Media Center.lnk","sha256":"2ec38e92f71e348e5a5ccbe33276998a3139ce51634b65f8f9fc7684bb246e98","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Tools Reference.lnk","sha256":"a5fb8d32865cdc8003e9baa5798bfdd336b1732c0f85e4dbcf946f8879853953","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"displayswitch.lnk","sha256":"629799fe5af3f8118077807cf6e5119090e739103b65ff7d4a060ede2434b3dc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Speech Recognition.lnk","sha256":"e4fa2fb8fc136967b5cabffbd76fd044f065a88d1780ebdb0c782ffcb9b11451","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows PowerShell Modules.lnk","sha256":"ea7e9bf80bb82cd3e71321fb5a1e3b3da635eb65204ca9ebe92cc683bd29a54e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"ShapeCollector.lnk","sha256":"65639e0446d7f8698f9e41c34c6dfcb1cf934fecd7c250f6ec38c3b5b9238ea4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows PowerShell.lnk","sha256":"4ad9fe8ac4db957467ecf68a2841fef8e83e2c8dc02d55f872033e6c2fbf8717","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Adobe Reader XI.lnk","sha256":"e4818bbdbe1cd89be808c13d5416e97c9534bbca5fbe5475f86ded7012987932","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"RecentPlaces.lnk","sha256":"5e0e19effdd528764c3eef542b294c055833c3f6b385cc03afcaf4b17d7c23b0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows Journal.lnk","sha256":"51bd62117129b7e5d9d7c44cbca6a555f3ae6b920c06b336f6cf2faddd4f9b60","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Global Flags.lnk","sha256":"bdc8246fb4829b20bd9ee0f0398a36b00443aeef8b84bd6655434f4a7e23bde8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Remote Assistance.lnk","sha256":"a18273d24184081e7c74d9e5363fba224e5fb7e6d95dfb75a9e5e686608979c5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"services.lnk","sha256":"a81632f2bbde0f9e607ab3925e0c5065296cbc87d5fe4ee2acd11b2047a13654","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Mozilla Firefox.lnk","sha256":"d15f92e142ab1dc704e54b8df34624f784455bc83d4f011d3f40bf69617a6767","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Disk Cleanup.lnk","sha256":"5072f7bfa1b8121d2bda3ceb4e4aae7f11ba5fdb604acb32545648b38baf2db9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Install Microsoft FXCop.lnk","sha256":"114bd4c36a792c3741a5aa8a48458a7d9fbe1de9b33dd92765b3667de76e871d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Website.lnk","sha256":"17e727ce7414ec6d8d408b9f8a8707efced927b8e2b6be3c6653fb1e3285a32b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"AutoIt Help File.lnk","sha256":"04e975ad6bc1b2447a574d8da7cb216d6d73426a6756713959187601daff8b51","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Math Input Panel.lnk","sha256":"8cf560d7aa3b386b1d29568d9962c6806fba48a7f1d9231cb707ce648fc39feb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Manifest Generation and Editing Tool.lnk","sha256":"ce3071d18affd9ca725c4054c53cde162bda274dd2129c3691dc6e4e32f3cb74","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"GameExplorer.lnk","sha256":"562dfaf6326beff1937bf209ecc46222101b7535478e496da7e4c51229b6e5ca","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"TabTip.lnk","sha256":"52622c35e4e0fb4f06000926ab3c3fb9811a59cd6ce1081d990b5ecea87512af","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Remote Desktop Connection.lnk","sha256":"07a719df8a8359d83d98a8ffd8d60fcb701ee39b048601412e4ecc31e60f8b39","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows SDK Configuration Tool.lnk","sha256":"f2765b04cee1c008143b2b360dd1b60a3aad806e927448c2d068fc272cd849d0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"About Java.lnk","sha256":"cf50ecbcc5a013dc1d0cf306ee070e76f7bcb42254c204024bc6197a5087206c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Service Trace Viewer.lnk","sha256":"79255c1151ca6b180276adc6c7fd6ee93da14254a8286fb7e3e130943224854b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"FreeCell.lnk","sha256":"741ade9648b19fc3cf6f8f850c3fa56a78a880ff89ff43e813f3e11e5ddd4f2b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows Firewall with Advanced Security.lnk","sha256":"4d15c0a2d4a3b39745660a9c9e22f411d0dbff77790937c39c9159689ee26835","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Command Prompt.lnk","sha256":"9bd028799c281c7f443fef1fc7d92ecec13d0ab35b7fc7074fcc426fc6048243","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Run.lnk","sha256":"56a7d3665cd473e1692faa6f925eb96fc92a6bac0bf0d7881084db3be58d4e28","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Computer Management.lnk","sha256":"a084356cdf3d8b74d4d4b6c0b223874e2293cf3f4cebb071ca6d1dda10ca2f17","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"dfrgui.lnk","sha256":"154677108bb10c84291a9209992d2a2ee2a9cfa6b11e1ebcc2176b4e0bd6a205","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"VBScript Examples.lnk","sha256":"06a650dbc449fb67b1ec52d70bf04c87787f33ee9618f932191fe4822894d0be","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"More Games from Microsoft.lnk","sha256":"33d22dcf061eeca7e91391f523fbde7d87d62c31682abaeafb149bf28dfa9c75","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Control Panel.lnk","sha256":"8fab8a2afa69130abdef59261fff40113adfb974c7981b932bd30a249fc7f1dd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Resource Monitor.lnk","sha256":"2d392c670536259c85d367f8511864fb422de9b35297c724896890ee88599303","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Windows Resource Localization Editor.lnk","sha256":"a7cb085408abe33344ed852a75b3f9aa6ad9d6f47de91235c7bae3dae0b2e5ff","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"Accessible Event Watcher.lnk","sha256":"b2731923364755b42fbfb8d6fc03b13061ee9ef00378b589035db5b2417e1eb5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]}],"files_written":[{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.0.3705\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.0.3705\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.1.4322\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.1.4322\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v2.0.50727\\clr.dll","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"C:\\0862aca72fb8a39e6f9ff9ca0dcfd31b90e614150690d1b98d9bdbbd39062efb.exe.config","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\51e2934144ba15628ba5a31be2dae7dc\\mscorlib.ni.dll.aux","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Microsoft.NET\\assembly\\GAC_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\mscorlib.dll","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\d1265d6159ea876f9d63ea4c1361b587\\mscorlib.ni.dll.aux","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"C:\\0862aca72fb8a39e6f9ff9ca0dcfd31b90e614150690d1b98d9bdbbd39062efb.exe","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\assembly\\pubpol47.dat","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\8990487b8c05ada1e1febe7dcb6c0410\\System.Windows.Forms.ni.dll.aux","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\24db7e31c7ba5b0e824e2f521c0914bc\\System.Drawing.ni.dll.aux","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\System\\250e8e6af918e7ca66787117bc8633e3\\System.ni.dll.aux","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v4.0.30319\\sortdefault.nlp","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\marlett.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ariali.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\arialbd.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\arialbi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\batang.ttc","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\cour.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\couri.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\courbd.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\courbi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\daunpenh.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\dokchamp.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\estre.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\euphemia.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\gautami.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\gautamib.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\Vani.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\Vanib.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\gulim.ttc","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\impact.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\iskpota.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\iskpotab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\kalinga.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\kalingab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\kartika.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\kartikab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\KhmerUI.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\KhmerUIb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LaoUI.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LaoUIb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\latha.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\lathab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\lucon.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\malgun.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\malgunbd.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\mangal.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\mangalb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\meiryo.ttc","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\meiryob.ttc","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\himalaya.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\msjh.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\msjhbd.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\msyh.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\msyhbd.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\mingliu.ttc","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\mingliub.ttc","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\monbaiti.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\msgothic.ttc","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\msmincho.ttc","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\mvboli.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ntailu.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ntailub.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\nyala.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\phagspa.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\phagspab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\plantc.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\raavi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\raavib.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\segoesc.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\segoescb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\segoeui.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\segoeuib.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\segoeuii.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\segoeuiz.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\seguisb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\segoeuil.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\seguisym.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\shruti.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\shrutib.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\simsun.ttc","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\simsunb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\sylfaen.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\taile.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\taileb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\times.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\timesi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\timesbd.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\timesbi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\tunga.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\tungab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\vrinda.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\vrindab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\Shonar.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\Shonarb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\msyi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\tahoma.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\tahomabd.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\micross.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\angsa.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\angsai.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\angsab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\angsaz.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\aparaj.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\aparajb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\aparajbi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\aparaji.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\cordia.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\cordiai.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\cordiab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\cordiaz.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ebrima.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ebrimabd.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\gisha.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\gishabd.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\kokila.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\kokilab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\kokilabi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\kokilai.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\leelawad.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\leelawdb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\msuighur.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\moolbor.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\symbol.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\utsaah.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\utsaahb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\utsaahbi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\utsaahi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\vijaya.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\vijayab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\wingding.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\modern.fon","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\roman.fon","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\script.fon","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\andlso.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\arabtype.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\simpo.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\simpbdo.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\simpfxo.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\majalla.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\majallab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\trado.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\tradbdo.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ahronbd.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\david.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\davidbd.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\frank.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\lvnm.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\lvnmbd.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\mriam.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\mriamc.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\nrkis.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\rod.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\simfang.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\simhei.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\simkai.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\angsau.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\angsaui.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\angsaub.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\angsauz.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\browa.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\browai.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\browab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\browaz.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\browau.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\browaui.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\browaub.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\browauz.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\cordiau.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\cordiaub.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\cordiauz.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\cordiaui.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcdl.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcdi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcdb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcdbi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcel.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcei.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upceb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcebi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcfl.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcfi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcfb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcfbi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcil.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcii.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcib.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcibi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcjl.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcji.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcjb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcjbi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upckl.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcki.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upckb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upckbi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcll.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upcli.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upclb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\upclbi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\kaiu.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\l_10646.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ariblk.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\calibri.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\calibrii.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\calibrib.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\calibriz.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\cambria.ttc","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\cambriai.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\cambriab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\cambriaz.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\Candara.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\Candarai.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\Candarab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\Candaraz.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\comic.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\comicbd.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\consola.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\consolai.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\consolab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\consolaz.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\constan.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\constani.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\constanb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\constanz.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\corbel.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\corbeli.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\corbelb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\corbelz.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\framd.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\framdit.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\Gabriola.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\georgia.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\georgiai.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\georgiab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\georgiaz.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\pala.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\palai.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\palab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\palabi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\segoepr.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\segoeprb.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\trebuc.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\trebucit.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\trebucbd.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\trebucbi.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\verdana.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\verdanai.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\verdanab.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\verdanaz.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\webdings.ttf","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\coure.fon","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\serife.fon","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\sserife.fon","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\smalle.fon","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\smallf.fon","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\HATTEN.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ANTQUAB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ANTQUABI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ANTQUAI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BKANT.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GOTHIC.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GOTHICB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GOTHICBI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GOTHICI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ARIALN.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ARIALNB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ARIALNBI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ARIALNI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GARA.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GARABD.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GARAIT.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\MTCORSVA.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\AGENCYB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\AGENCYR.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ARLRDBD.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ITCBLKAD.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BOD_B.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BOD_BI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BOD_I.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BOD_R.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BOD_BLAI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BOD_BLAR.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BOD_CB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BOD_CBI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BOD_CI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BOD_CR.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BOOKOS.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BOOKOSB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BOOKOSBI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BOOKOSI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BRADHITC.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\CALIST.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\CALISTB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\CALISTBI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\CALISTI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\CASTELAR.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\CENSCBK.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\SCHLBKB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\SCHLBKBI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\SCHLBKI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\COPRGTB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\COPRGTL.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\CURLZ___.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ITCEDSCR.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ELEPHNT.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ELEPHNTI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ENGR.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ERASBD.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ERASDEMI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ERASLGHT.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ERASMD.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\FELIXTI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\FORTE.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\FRABK.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\FRABKIT.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\FRADM.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\FRADMIT.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\FRADMCN.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\FRAHV.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\FRAHVIT.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\FRAMDCN.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\FRSCRIPT.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GIGI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GILBI___.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GILB____.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GILI____.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GIL_____.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GILC____.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GILSANUB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GILLUBCD.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GLSNECB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GLECB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GOUDOS.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GOUDOSB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GOUDOSI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\GOUDYSTO.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\IMPRISHA.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LSANS.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LSANSD.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LSANSDI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LSANSI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LTYPE.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LTYPEB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LTYPEBO.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LTYPEO.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\MAIAN.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\OCRAEXT.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\PALSCRI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\PAPYRUS.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\PERBI___.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\PERB____.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\PERI____.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\PER_____.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\PERTIBD.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\PERTILI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\PRISTINA.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\RAGE.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ROCK.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ROCKB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ROCKBI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ROCKI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ROCCB___.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ROCC____.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ROCKEB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\SCRIPTBL.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\TCBI____.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\TCB_____.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\TCCM____.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\TCCB____.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\TCCEB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\TCMI____.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\TCM_____.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ALGER.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BASKVILL.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BAUHS93.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BELL.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BELLB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BELLI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BRLNSB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BRLNSDB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BRLNSR.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BERNHC.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BOD_PSTC.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BRITANIC.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BROADW.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BRUSHSCI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\CALIFB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\CALIFI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\CALIFR.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\CENTAUR.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\CHILLER.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\COLONNA.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\COOPBL.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\FTLTLT.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\FREESCPT.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\HARLOWSI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\HARNGTON.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\HTOWERT.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\HTOWERTI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\JOKERMAN.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\JUICE___.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ITCKRIST.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\KUNSTLER.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LBRITE.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LBRITED.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LBRITEDI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LBRITEI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LCALLIG.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LFAX.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LFAXD.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LFAXDI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LFAXI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LHANDW.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\MAGNETOB.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\MATURASC.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\MISTRAL.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\MOD20.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\NIAGENG.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\NIAGSOL.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\OLDENGL.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ONYX.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\PARCHM.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\PLAYBILL.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\POORICH.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\RAVIE.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\INFROMAN.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\SHOWG.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\SNAP____.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\STENCIL.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\TEMPSITC.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\VINERITC.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\VIVALDII.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\VLADIMIR.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\LATINWD.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\CENTURY.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\WINGDNG2.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\WINGDNG3.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\ARIALUNI.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\MSMINCHO.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%COMMONPROGRAMFILES%\\microsoft shared\\EQUATION\\MTEXTRA.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\OUTLOOK.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\BSSYM7.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\REFSAN.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\REFSPCL.TTF","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%LOCALAPPDATA%\\GDIPFONTCACHEV1.DAT","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Fonts\\StaticCache.dat","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\System32\\en-US\\user32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\System.Management\\a28d99c0b82e7decf411fb2587cce83f\\System.Management.ni.dll.aux","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\System.Configuration\\7152ca3b4e8d992fb4be5317321c2ee5\\System.Configuration.ni.dll.aux","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\assembly\\NativeImages_v4.0.30319_32\\System.Xml\\870a651e78e8d414b516df1ecae18884\\System.Xml.ni.dll.aux","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\System32\\tzres.dll","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\System32\\en-US\\tzres.dll.mui","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"path":"C:\\ReadMe To Unlock Files.txt","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WBEM\\CIMOM\\","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\GDIPLUS\\","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]}],"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\mnkkdiwc","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]},{"name":"mnkkdiwc","sources":[{"report_type":"sandbox","report_id":"5a0464af7ca3e121b50dd009"}]}]}},"report_ids":{"sandbox_job_ids":["5a0464af7ca3e121b50dd009"]}}}]]}] 1e:null 22:[["$","title","0",{"children":"Malicious Trojan.Generic Sample 0862aca72fb8… — Score 97/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 0862aca72fb8…. Malware family: Trojan.Generic. Threat score 97/100. 22/28 AV engines flagged this file. 2 malicious and 7 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/0862aca72fb8a39e6f9ff9ca0dcfd31b90e614150690d1b98d9bdbbd39062efb"}],["$","meta","4",{"property":"og:title","content":"Malicious Trojan.Generic Sample 0862aca72fb8… — Score 97/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 0862aca72fb8…. Malware family: Trojan.Generic. Threat score 97/100. 22/28 AV engines flagged this file. 2 malicious and 7 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/0862aca72fb8a39e6f9ff9ca0dcfd31b90e614150690d1b98d9bdbbd39062efb"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Trojan.Generic Sample 0862aca72fb8… — Score 97/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 0862aca72fb8…. Malware family: Trojan.Generic. Threat score 97/100. 22/28 AV engines flagged this file. 2 malicious and 7 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L27","11",{}]]